# changelog

author: wangkai <13474090681@163.com> - 1.4.3.36-1
changelog:
  - Update to 1.4.3.36
  - Fix dsidm user/posixgroup get_dn fails with search_ext()
  - Fix unable to add objectclass/attribute without x-origin
  - Fix execute dsconf to open pdb


author: yaoxin <yao_xin001@hoperun.com> - 1.17-1
changelog:
  - Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730


author: huangyu <huangyu106@huawei.com> - 32:9.16.23-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix catalog zone reconfiguration crash
  Improve the logging on failed TCP accept
  Separate the locked parts of dns_zone_catz_enable-di
  Check if key-metadata is modified before writing
  Fix CID-352776 Concurrent data access violations
  Require valid key for dst_key functions


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
  - SUG:NA
  - DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: zhanghao <zhanghao383@huawei.com> - 32:9.16.23-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Don't perform arithmetic on NULL pointers
  Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
  Fix a use-after-free bug in dns_zonemgr_releasezone()
  Fix dns_fwdtable_addfwd() error path cleanup bug
  Detach the views in zone_shutdown(), not in zone_free()
  Detach the zone views outside of the zone lock
  delay trust anchor management until zones are loaded
  In hmac_createctx free ctx on isc_hmac_init failure
  Fix dns_kasp_attach / dns_kasp_detach usage
  Fix backport error in 84929d1c
  Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
  Searching catzs->zones requires a read lock
  Fix view's zones reverting bug during reconfiguration


author: xiechengliang <xiechengliang1@huawei.com> - 1:1.33.1-12
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: chenziyang <chenziyang4@huawei.com> - 2.13-10
changelog:
  - Type:CVE
  - ID:CVE-2015-1197
  - SUG:NA
  - DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches


author: xinghe <xinghe2@h-partners.com> - 7.79.1-14
changelog:
  - Type:cves
  - CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
  - SUG:NA
  - DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916


author: xingwei <xingwei14@h-partners.com> - 7.79.1-15
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: chenhaixing <chenhaixing@huawei.com> 4.14.0-12
changelog:
  - CVE:NA
  - SUG:NA
  - DESC:dnf:fix undo error when include rollback of group upgrade
             fix can't download package when url have characters encoded


author: herengui <herengui@kylinsec.com.cn> - 4.14.0-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:remove useless patch of loongarch64
         dnf:recreate patch of sw64 and make arch sorted alphabetically


author: chenhaixing <chenhaixing@huawei.com> - 4.14.0-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Fix bash completion due to sqlite changes
             When parsing over a KVP list, do not return till the whole list is parsed


author: chenjiji <chenjiji09@163.com> - 21.11-55
changelog:
  Sync some patchs from upstreaming about add FDIR VLAN match
   mode runtime config and fix doc format for hns3 pmd. Patchs
   are as follow:
   - doc: unify sections of networking drivers guide
   - net/hns3: delete duplicate macro definition
   - net/hns3: add FDIR VLAN match mode runtime config
   - doc: fix kernel patch link in hns3 guide
   - doc: fix syntax in hns3 guide
   - doc: fix number of leading spaces in hns3 guide


author: huangdengdui <huangdengui@huawei.com> - 21.11-58
changelog:
  Sync some patchs from upstreaming and modifies are as follow:
   - maintainers: update for hns3 driver
   - app/testpmd: add command to flush multicast MAC addresses
   - app/testpmd: fix help string
   - app/testpmd: fix multicast address pool leak
   - net/hns3: optimize SVE Rx performance
   - net/hns3: optimize rearm mbuf for SVE Rx
   - net/hns3: optimize free mbuf for SVE Tx
   - net/hns3: fix order in NEON Rx
   - net/hns3: fix traffic management dump text alignment
   - net/hns3: fix traffic management thread safety
   - net/hns3: fix flushing multicast MAC address
   - net/hns3: fix error code for multicast resource
   - net/hns3: fix VF default MAC modified when set failed
   - net/hns3: fix index to look up table in NEON Rx
   - net/hns3: fix non-zero weight for disabled TC
   - config/arm: add HiSilicon HIP10


author: huangdengdui <huangdengui@huawei.com> - 21.11-59
changelog:
  Sync some patchs from upstreaming and modifies are as follow:
   - net/hns3: fix mailbox sync
   - net/hns3: report maximum buffer size
   - ethdev: add maximum Rx buffer size
   - app/procinfo: show RSS hash algorithm
   - ethdev: get RSS algorithm names
   - app/procinfo: adjust format of RSS info
   - app/procinfo: fix RSS info
   - net/hns3: support setting and querying RSS hash function
   - net/hns3: report RSS hash algorithms capability
   - ethdev: set and query RSS hash algorithm
   - ethdev: clarify RSS related fields usage
   - net/hns3: fix uninitialized hash algo value
   - net/hns3: keep set/get algo key functions local
   - net/hns3: fix some error logs
   - net/hns3: fix some return values
   - net/hns3: fix LRO offload to report
   - net/hns3: fix setting DCB capability
   - app/testpmd: ease configuring all offloads
   - net/hns3: refactor interrupt state query
   - net/hns3: fix IMP or global reset
   - net/hns3: fix multiple reset detected log
   - net/hns3: remove reset log in secondary
   - net/hns3: fix double stats for IMP and global reset
   - net/hns3: fix crash for NEON and SVE
   - net/hns3: fix unchecked Rx free threshold
   - net/hns3: fix typo in function name
   - net/hns3: fix build warning
   - telemetry: fix repeat display when callback don't init dict


author: huangdengdui <huangdengui@huawei.com> - 21.11-60
changelog:
  Sync some bugfix from upstreaming about hns3 reset and modifies
   are as follow:
   - net/hns3: fix VF reset handler interruption
   - net/hns3: fix reset event status
   - net/hns3: fix ignored reset event


author: huangdengdui <huangdengui@huawei.com> - 21.11-61
changelog:
  Sync some bugfix from upstreaming about testpmd and doc, modifies
   are as follow:
   - support set RSS hash algorithm
   - ethdev: add new API to get RSS hash algorithm by name
   - doc: fix description of RSS features
   - doc: fix RSS flow description in hns3 guide
   - doc: update features in hns3 guide
   - doc: fix hns3 build option about max queue number
   - app/testpmd: check port and queue Rx/Tx offloads
   - app/testpmd: fix Tx offload command
   - app/testpmd: allow offload config for all ports
   - app/testpmd: fix tunnel TSO configuration
   - app/testpmd: add explicit check for tunnel TSO
   - app/testpmd: fix tunnel TSO capability check
   - app/testpmd: remove useless check in TSO command


author: huangdengdui <huangdengui@huawei.com> - 21.11-62
changelog:
  Sync some patches for hns3 about refactor mailbox and bugfix, modifies
   are as follow:
   - net/hns3: fix reset level comparison
   - net/hns3: fix disable command with firmware
   - net/hns3: fix VF multiple count on one reset
   - net/hns3: refactor handle mailbox function
   - net/hns3: refactor send mailbox function
   - net/hns3: refactor PF mailbox message struct
   - net/hns3: refactor VF mailbox message struct


author: gaihuiying <eaglegai@163.com> - 2.0.11-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-config file access permisson
         fix ebt_print_error for prints null


author: lifeifei<lifeifei@kylinos.cn> - 2.0.11-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: dillon chen <dillon.chen@gmail.com> - 2.5.2-4
changelog:
  - CVE-2021-36045, CVE-2021-36046, CVE-2021-36047, CVE-2021-36048,
  - CVE-2021-36050, CVE-2021-36051, CVE-2021-36052, CVE-2021-36053,
  - CVE-2021-36054, CVE-2021-36055, CVE-2021-36056, CVE-2021-36058,
  - CVE-2021-36064, CVE-2021-39847, CVE-2021-40716, CVE-2021-40732,
  - CVE-2021-42528, CVE-2021-42529, CVE-2021-42530, CVE-2021-42531,
  - CVE-2021-42532


author: wangkai <13474090681@163.com> - 102.13.0-1
changelog:
  - Update to 102.13.0
  - Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
  - Remove unused patch


author: wangkai <13474090681@163.com> - 102.14.0-1
changelog:
  - Update to 102.14.0
  - Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056


author: lvfei <lvfei@kylinos.cn> - 102.15.0-1
changelog:
  - Update to 102.15.0
  - Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-9
changelog:
  - init: stack setup in app thread when app call socket/epoll_create first in rtc mode
  - fix arping gazelle return value is 1
  - wrap: add run-to-completion/wakeup mode api
  - tools: gazelle_setup adapt non ltran mode
  - delete_rule bug
  - statck: the for loop in lstack thread is defined as stack_polling


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-10
changelog:
  - bond6
  - epoll: fix epollet mode error
  - ethdev: register offload to netif
  - stack: add semaphore to ensure all stack threads setup success in rtw mode before call main()
  - ethdev: fix arp unicast packets cannot be transmitted to current procotol stack
  - clean useless code
  - epoll: adapt epoll interface for rtc mode


author: hantwofish <hankangkang5@huawei.com> - 1.0.2-12
changelog:
  - solve problem that rte_pktmbuf_poll_creat in same numa .
  - Fix coredump issue and skip rte_pdump_init for secondary process
  - stack: fix possible coredump when arp packet broadcast in rtc mode
  - cfg: nic queue size only support power of 2
  - dfx: add four snmp udp datas


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-13
changelog:
  - modif mem
  - add tx package timeout
  - cfg: fix lstack mempool lookup failed in ltran mode
  - build: fix ltran build error
  - ethdev: mbuf data start pointer pbuf->payload
  - PRE_LOG: modify prelog info transfer to terminal at the same time
  - slave mac addr
  - add vlan support
  - wrap: support select
  - when timeout occurs,process exits.
  - build: add mlx5 pmd dependency


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-17
changelog:
  - support vlan offload
  - add vlan_id in netif
  - dfx: add tcp exception and kernel event statistics
  - stack: fix coredump caused by gazelleclt in rtc mode when stack num defined is greater than the hijacked thread num
  - add tcp faste timer cnt
  - dfx: support bond get dpdk xstats
  - update src/ltran/ltran_param.c. 规范679行的报错日志信息，将“,”之后的“Please”修正为“please”
  - ltran support vlan
  - cfg: rm ipv6_enable
  - wrap: fix connect wrong port after addr bind two ports
  - add gazelle log
  - PRE_LOG: modify log info while there are repeated items in conf file
  - add gazelle log


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-18
changelog:
  - Fixed an issue where no packet is sent or received when UDP traffic is sent
  - support show nic offload and features
  - log: optimize lstack log
  - gazellectl add connect para
  - dfx: fix 'gazellectl lstack show ip' failed
  - The call stack is not printed in the proactive exit scenario.
  - dfx: gazellectl -c support ipv6
  - 1.solve the problem of 1w connection not being able to ping 2.add debug info : rpc_mempool availd size
  - wrap: support shutdown
  - add struct gz_addr_t
  - fix coredump because of addr null in lwip_fill_sendring
  - fix compilation error
  - fix coredump because sock closed before send data fully
  - gazellectl: fix gazellectl lstack show 1 -r error


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-19
changelog:
  - fix EPOLLIN event error
  - optimize gazelle exit process 1. close all fds 2. lstack thread exits, then gazelle process exits
  - mod unix time stamp to local time
  - fix close can't exit
  - add keep-alive info
  - dfx: fix kernel_events stat


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-22
changelog:
  - fix rte_ring_create/free time consuming
  - use default nonblock mode
  - fix func separate_str_to_array overflow problem
  - CFG:fix check func strdup return value is NULL
  - fix gazellectl -c msg error
  - sigaction: fix deprecated signal flags
  - fix alloc not free
  - optimize shutdown exit process


author: liyancheng <412998149@qq.com> - 10.3.1-29
changelog:
  - Type:Revert
  - ID:NA
  - SUG:NA
  - DESC:Revert patch89
         The glibc version of oe-22.03 is 2.34, so revert it


author: Wang Ding <wangding16@huawei.com> - 10.3.1-35
changelog:
  - Type:Spec
  - ID:NA
  - SUG:NA
  - DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.


author: hanchao <hanchao47@huawei.com> - 1.17.3-12
changelog:
  - Type:CVE
  - CVE:CVE-2022-41716
  - SUG:NA
  - DESC: remove hard code and strong dependency of git, subversion and mercurial


author: hanchao <hanchao47@huawei.com> - 1.17.3-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
  - SUG:NA
  - DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717


author: hanchao <hanchao47@huawei.com> - 1.17.3-15
changelog:
  - Type:CVE
  - CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
  - SUG:NA
  - DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725


author: hanchao <hanchao47@huawei.com> - 1.17.3-17
changelog:
  - Type:CVE
  - CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
  - SUG:NA
  - DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: hanchao <hanchao63@huawei.com> - 1.17.3-18
changelog:
  - Type:CVE
  - CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
  - SUG:NA
  - DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540


author: hanchao <hanchao63@huawei.com> - 1.17.3-19
changelog:
  - Type:CVE
  - CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
  - SUG:NA
  - DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405


author: luoyujie <luoyujie5@huawei.com> - 1.17.3-23
changelog:
  - Type:CVE
  - CVE:CVE-2023-39318,CVE-2023-39319
  - SUG:NA
  - DESC:fix CVE-2023-39318 and CVE-2023-39319


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
         net/bootp: Fix unchecked return value
         fs/iso9660: Avoid reading past the entry boundary
         fs/iso9660: Incorrect check for entry boundary
         fs/iso9660: Prevent skipping CE or ST at start of continuation area
         fs/iso9660: Prevent read past the end of system use area
         fs/iso9660: Add check to prevent infinite loop
         gentpl.py: Remove .interp section from .img files
         kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
         font: Reject fonts with negative max_char_width or max_char_height
         font: Assign null_font to unknown_glyph
         font: Check return value of grub_malloc() in ascii_glyph_lookup()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-35
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:kern: Check for NULL when closing devices and disks
         kern/efi/mm: Fix use-after-free in finish boot services
         util/grub-install-common: Fix the key of the --core-compress option
         net/dns: Fix lookup error when no IPv6 is returned
         net/dns: Simplify error handling of recv_hook() function
         net/dns: Fix removal of DNS server


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-37
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fs/udf: Fix out of bounds access
         lib/relocator: Fix OOB write when initializing lo->freebytes[]
         util/grub-mount: Fix memory leak in fuse_getattr()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-38
changelog:
  - Type:CVE
  - CVE:CVE-2023-4692 CVE-2023-4693
  - SUG:NA
  - DESC:fs/ntfs: Make code more readable
         fs/ntfs: Fix an OOB read when parsing a volume label
         fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
         fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
         fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
         fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file


author: xinghe <xinghe2@h-partners.com> - 2.6.6-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:connection: Clear flags when a conn is removed
         connection: Preserve flags when a conn is removed
         stream: do not try to free a failed stream-conn
         http_ana/txn: don't re-initialize txn and req var
         mworker: prevent incorrect values in uptime
         protocol: fix minor memory leak in protocol_bind_all()
         stream: Perform errors handling in right order in stream_new()


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-11
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:change default value of HeartbeatMaxServers
         fix setting and comparison of IPs fileds
         avoid voerflow in case of indecently large session
         make ap_escape_quotes() work correctly
         fix lua_request with cast first
         Handle children killed pathologically
         mod_md do not interfere with requests if challenge type http-01


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-12
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:reduce the dependency of httpd on system-logos installation


author: seuzw <930zhaowei@163.com> - 2.4.51-13
changelog:
  - Type:cves
  - ID:CVE-2022-36760,CVE-2006-20001,CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-15
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyehcun1@huawei.com> - 2.4.51-16
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:Report an error if the AJP backend sends an invalid number of headers
         handled a negative value when parsing the config
         avoid delimiting the query with a backreference
         fix missing APLOGNO


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-17
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-20
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:add sw_64 support,optimize sw build patch,add loongarch64 support


author: zhongtao <zhongtao17@huawei.com> - 2.1.4-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: delete compilation dependency:lxc, and add running dependency:runc, compilation dependency:ncurses-devel


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add epoch version in changelog to fix check_spec_file ci failure


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ipnetns: fix fd leak with 'ip netns set'
         iproute2: optimize code and fix some mem-leak risk
         iproute_lwtunnel: fix array boundary check
         iproute_lwtunnel: fix possible use of NULL when malloc()
         m_action: fix warning of overwrite of const string
         netem: fix NULL deref on allocation failure
         nstat: fix potential NULL deref
         rdma/utils: fix some analyzer warnings
         rt_names: check for malloc() failure
         tc/prio: handle possible truncated kernel response
         tc_exec: don't dereference NULL on calloc failure
         tc_util fix unitialized warning
         iptunnel: detect protocol mismatch on tunnel change
         ipmaddr: fix dereference of NULL on malloc() failure


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
         tc: ct: Fix invalid pointer dereference
         tc_util: Change datatype for maj to avoid overflow issue
         tc_util: Fix no error return when large parent id used
         xfrm: prepare state offload logic to set mode


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.372-b07.2
changelog:
  - 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
  - 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
  - 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
  - 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
  - 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
  - 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
  - 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
  - 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
  - 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
  - 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
  - 0012-8301187-Memory-leaks-in-OopMapCache.patch
  - 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
  - 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
  - 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
  - 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
  - 0017-8054889-Compiler-team-s-implementation-task.patch
  - 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
  - 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
  - 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
  - 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
  - 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
  - 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
  - 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
  - 0025-8220166-Performance-regression-in-deserialization.patch
  - 0026-8072070-Improve-interpreter-stack-banging.patch
  - 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
  - 0028-Display-more-information-about-the-codedump-file-pat.patch
  - 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
  - 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
  - 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
  - 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
  - 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
  - 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
  - 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
  - 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
  - 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
  - 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
  - 0040-Print-the-Exception-event-in-more-detail.patch
  - 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
  - 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
  - 0043-Cache-dom-in-xml-transform.patch
  - 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
  - 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
  - 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
  - 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
  - 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
  - 0049-Modify-G1GC-log-information.patch
  - 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
  - 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
  - 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
  - 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
  - 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
  - 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch


author: wanghao_hw <wanghao564@huawei.com> - 1:1.8.0.382-b05.0
changelog:
  - add Huawei-Print-more-information-when-AbortVMOnException.patch
  - deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
  - deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified add-missing-test-case.patch
  - modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
  - add fixing-a-bug-in-the-processing-of-default-attributes.patch
  - add enhance-java-heap-oom-err-log.patch
  - add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
  - del --with-zlib=system
  - upgrade to jdk8u382-b05


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.382-b05.9
changelog:
  - add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
  - add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
  - add Record-the-number-of-processes-to-errlog-file.patch.patch
  - add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
  - add The-OverWriteOldestGCLog-option-is-added-to-control.patch
  - add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
  - add add-make-Appcds-jsa-rw-region-deterministic.patch
  - add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - add add-8198423-Improve-metaspace-chunk-allocation.patch
  - add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
  - add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - add add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - add add-8226530-test-case-fixed.patch
  - add add-8147940-Modify-testcase-this-test-does-not-assum.patch
  - add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
  - add add-Do-not-collect_class-when-DynamicCDS-dump.patch
  - add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
  - add add-Adapting-IOException-of-Zip-to-ZipException.patch
  - add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
  - add add-fix-windows-build-Dynamic-CDS-failure.patch
  - add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.392-b08.0
changelog:
  - add 8308682-Enhance-AES-performance.patch
  - add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
  - add Add-metaspace-memory-allocation-failure-validation.patch
  - add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
  - del 8202952.patch
  - del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
  - modified Dynamic-CDS-Archive.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase1.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - upgrade to jdk8u392-b08


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.2
changelog:
  - remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - remove add-8226530-test-case-fixed.patch
  - remove add-Adapting-IOException-of-Zip-to-ZipException.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.21.9-0
changelog:
  - update to 11.0.21+9(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified 8214527-AArch64-ZGC-for-Aarch64.patch


author: noah <hedongbo@huawei.com> - 1:18.0.0.37-0.0.ea.rolling
changelog:
  - Update to jdk-18.0.0.0+37
  - adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch


author: DXwangg <wangjiawei80@huawei.com> -1:19.0.0.36-0.0.ea.rolling
changelog:
  - Update to jdk-19.0.0.0+36
  - Remove references to sample directory removed by JDK-8284999
  - Need to include the '.S' suffix in debuginfo checks after JDK-8284661


author: kuenking111 <wangkun49@huawei.com> - 1:21.0.0.35-0-rolling
changelog:
  * Mon Aug 07 2023 misaka00251 <liuxin@iscas.ac.cn> - 1:20.0.2.9-1-rolling
  - Add riscv64 to jit_arches


author: yaoxin <yao_xin001@hoperun.com> - 1.5.4-1
changelog:
  - Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
    CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436


author: fengtao <fengtao40@huawei.com> - 0.15-5
changelog:
  - we got upgrade error when upgrade json-c from very low version,
    for example json-c-0.11-5. because old version has a softlink:
    /usr/include/json-c  --> /usr/include/json
    and now, softlink has been removed. so, we fix this in pretrans


author: mengkanglai <mengkanglai2@huawei.com> - 0.16-2
changelog:
  - add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
  - add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
  - add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch


author: sunhai <sunhai10@huawei.com> - 0.16-4
changelog:
  - backport patch to Fix build with clang-15+
  - backport patch to Fix json_tokener_parse_ex: handle out of memory errors


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.4.0.83
changelog:
  - !1042  xfrm: Reinject transport-mode packets through workqueue
  - !1069  support ACPI for MPAM 2.0
  - !1070 crypto: hisilicon - fix some reset problem
  - ACPI/MPAM: Adapt to Arm's MPAM ACPI table version 2
  - ACPI / PPTT: Find PPTT processor node by cache id
  - ACPICA: ACPI 6.4: PPTT: add new version of subtable type 1
  - ACPICA: Add support for Arm's MPAM ACPI table version 2
  - crypto: hisilicon/qm - disable error report before flr
  - crypto: hisilicon/qm - disable same error report before resetting
  - crypto: hisilicon/qm - remove duplicate assignment and release
  - crypto: hisilicon/hpre - enable sva error interrupt event
  - crypto: hisilicon/qm - flush all work before driver removed.
  - !1026 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
  - !1022 [sync] PR-978:  io_uring: fix the problem of running
  - !1045 perf: hisi: delete global enable pmu from xxx_write_counter()
  - !1037  xfs: fixes patchs and backport patchs
  - !1048 spi: dw: Add support for 32-bits max xfer size
  - !1055 Complementing PTT functions to the openEuler-22.03-LTS-SP2
  - !1005 scsi: hisi_sas: A group of SAS-related bugfixes
  - !1052 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
  - !1039 [sync] PR-1032: bugfix the lost interruption problem after live migration
  - hwtracing: hisi_ptt: Fix potential sleep in atomic context
  - hwtracing: hisi_ptt: Advertise PERF_PMU_CAP_NO_EXCLUDE for PTT PMU
  - hwtracing: hisi_ptt: Export available filters through sysfs
  - hwtracing: hisi_ptt: Add support for dynamically updating the filter list
  - hwtracing: hisi_ptt: Factor out filter allocation and release operation
  - scripts: Fix issue of module signing with openssl 3.x
  - spi: dw: Add support for 32-bits max xfer size
  - perf: hisi: delete global enable pmu from xxx_write_counter()
  - xfrm: Reinject transport-mode packets through workqueue
  - scsi: hisi_sas: Check usage count only when the runtime PM status is RPM_SUSPENDING
  - scsi: hisi_sas: Work around build failure in suspend function
  - scsi: hisi_sas: Block requests before take debugfs snapshot
  - scsi: hisi_sas: Add slave_destroy interface for v3 hw
  - !996 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
  - !1001 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
  - !1018 [sync] PR-944:  nbd: get config_lock before sock_shutdown
  - !1033 perf: hns3: add event suppport for ROH and default use hardware event 0 as group leader event
  - vfio/migration: bugfix lost interruption after live migration
  - crypto: hisilicon/qm - fix EQ/AEQ interrupt issue
  - xfs: atomic drop extent entries when inactiving attr
  - xfs: factor out __xfs_da3_node_read()
  - xfs: fix a UAF in xfs_iflush_abort_clean
  - xfs: fix a UAF when inode item push
  - xfs: fix the problem of mount failure caused by not refreshing mp->m_sb
  - iomap: iomap: fix memory corruption when recording errors during writeback
  - xfs: fix hung when transaction commit fail in xfs_inactive_ifree
  - xfs: fix dead loop when do mount with IO fault injection
  - xfs: fix ag count overflow during growfs
  - xfs: account extra freespace btree splits for multiple allocations
  - xfs: force shutdown xfs when xfs_attr_inactive fails
  - xfs: fix negative array access in xfs_getbmap
  - xfs: fix BUG_ON in xfs_getbmap()
  - xfs: use iomap_valid method to detect stale cached iomaps
  - iomap: write iomap validity checks
  - xfs: write page faults in iomap are not buffered writes
  - xfs: fix exception caused by unexpected illegal bestcount in leaf dir
  - Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
  - xfs: don't expose internal symlink metadata buffers to the vfs
  - xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
  - xfs: fix maxlevels comparisons in the btree staging code
  - xfs: sb verifier doesn't handle uncached sb buffer
  - xfs: fallocate() should call file_modified()
  - xfs: remove XFS_PREALLOC_SYNC
  - xfs: shutdown during log recovery needs to mark the log shutdown
  - xfs: xfs_trans_commit() path must check for log shutdown
  - xfs: xfs_do_force_shutdown needs to block racing shutdowns
  - xfs: log shutdown triggers should only shut down the log
  - xfs: shutdown in intent recovery has non-intent items in the AIL
  - xfs: AIL should be log centric
  - xfs: increase rename inode reservation
  - xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
  - xfs: check return codes when flushing block devices
  - xfs: remove xfs_blkdev_issue_flush
  - xfs: fix NULL pointer dereference in xfs_getbmap()
  - scsi: sd: try more retries of START_STOP when resuming scsi device
  - !1012 [sync] PR-924:  dm: add disk before alloc dax
  - !1015 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
  - perf: hns3: default use hardware event 0 as group leader event.
  - perf: hns3: add event suppport for ROH
  - !1020 [sync] PR-1003: roh: Fix ROH multi-BD cmdq issue
  - !1009 [sync] PR-980: crypto: hisilicon - fix mailbox operation process
  - !952 [sync] PR-929:  xfs: rework feature flags
  - !982 [sync] PR-356: x86/boot/compressed: Register dummy NMI handler in EFI boot loader, to avoid kdump crashes
  - locking/rwsem: Prevent potential lock starvation
  - locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
  - locking/rwsem: Better collate rwsem_read_trylock()
  - !973 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
  - !988 [sync] PR-954:  block: iocost bugfix
  - !985 [sync] PR-946:  icost bugfix
  - kernel: don't call do_exit() for PF_IO_WORKER threads
  - x86/process: setup io_threads more like normal user space threads
  - arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
  - arch: setup PF_IO_WORKER threads like PF_KTHREAD
  - roh: Fix ROH multi-BD cmdq issue
  - !1006 drivers/perf: hisi: Don't migrate perf to the CPU going to teardown
  - nbd: get config_lock before sock_shutdown
  - dm thin: Fix ABBA deadlock by resetting dm_bufio_client
  - dm: add disk before alloc dax
  - crypto: hisilicon/qm - alloc buffer to set and get xqc
  - crypto: hisilicon/qm - fix the pf2vf timeout when device reset
  - vfio/migration: obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - obtain the mailbox configuration at one time
  - drivers/perf: hisi: Don't migrate perf to the CPU going to teardown
  - !993 Clean up for RDMA/HNS
  - !979 [sync] PR-943: Fixed the accelerator capability register issue.
  - !981 [sync] PR-967:  Support dynamic_hugetlb on arm64 and fix some bug
  - !989 [sync] PR-940: net: hns3: related bugfixes, refactoring, and cleanup
  - hikey9xx: Fixed incorrect use of kfree to free sreg
  - RDMA/hns: Remove redundant 'num_mtt_segs' and 'max_extend_sg'
  - RDMA/hns: Remove redundant 'use_lowmem' argument from hns_roce_init_hem_table()
  - !992 [sync] PR-949:  mm: page_counter: remove unneeded atomic ops for low/min
  - ubi: Fix deadlock caused by recursively holding work_sem
  - mtd: ubi: wl: Fix a couple of kernel-doc issues
  - !977 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
  - mm: page_counter: remove unneeded atomic ops for low/min
  - net: hns3: restore user pause configure when disable autoneg
  - net: hns3: fix strncpy() not using dest-buf length as length issue
  - net: hns3: refactor hclge_update_desc_vfid for extension
  - net: hns3: add tm flush when setting tm
  - net: hns3: fix the imp capability bit cannot exceed 32 bits issue
  - net: hns3: fix GRE checksum offload issue
  - perf: pmu: fix set wrong filter mode for running events issue
  - block: fix order error in blk_release_queue
  - block: fix null-pointer dereference in ioc_pd_init
  - blk-iocost: dispatch all throttled bio in ioc_pd_offline
  - blk-iocost: don't throttle bio if iocg is offlined
  - blk-iocost: track whether iocg is still online
  - blk-iocost: fix UAF in ioc_pd_free
  - x86/boot/compressed: Register dummy NMI handler in EFI boot loader, to avoid kdump crashes
  - mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
  - mm/dynamic_hugetlb: set PagePool to bad page
  - mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
  - mm/dynamic_hugetlb: isolate hugepage without dissolve
  - mm/dynamic_hugetlb: support dynamic hugetlb on arm64
  - mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
  - !964 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
  - !961 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
  - crypto: hisilicon/zip - save capability registers in probe process
  - crypto: hisilicon/sec2 - save capability registers in probe process
  - crypto: hisilicon/hpre - save capability registers in probe process
  - crypto: hisilicon/qm - save capability registers in qm init process
  - crypto: hisilicon/qm - add a function to set qm algs
  - crypto: hisilicon/sec - fix for resource leak
  - crypto: hisilicon/sec - remove unused parameter
  - crypto: hisilicon/sec - misc cleanups
  - !957 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
  - x86/unwind: Fix check_paravirt() calls orc_find() before declaration
  - x86/unwind: Fix orc entry for paravirt {save,restore}_fl
  - kobject: Fix slab-out-of-bounds in fill_kobj_path()
  - tcp: restrict net.ipv4.tcp_app_win
  - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
  - config: Disable CONFIG_EULER_FS by default
  - xfs: kill xfs_sb_version_has_v3inode()
  - xfs: introduce xfs_sb_is_v5 helper
  - xfs: remove unused xfs_sb_version_has wrappers
  - xfs: convert xfs_sb_version_has checks to use mount features
  - xfs: convert scrub to use mount-based feature checks
  - xfs: open code sb verifier feature checks
  - xfs: convert xfs_fs_geometry to use mount feature checks
  - xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
  - xfs: convert remaining mount flags to state flags
  - xfs: convert mount flags to features
  - xfs: consolidate mount option features in m_features
  - xfs: replace xfs_sb_version checks with feature flag checks
  - xfs: reflect sb features in xfs_mount
  - xfs: rework attr2 feature and mount options
  - xfs: rename xfs_has_attr()
  - xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
  - xfs: log items should have a xlog pointer, not a mount
  - xfs: fix incorrect error-out in xfs_remove
  - !933 [sync] PR-922:  jbd2: fix checkpoint inconsistent
  - jbd2: remove t_checkpoint_io_list
  - jbd2: recheck chechpointing non-dirty buffer
  - !923 [sync] PR-918: Misc fixes for Kunpeng accelerator drivers!
  - !914 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
  - crypto: hisilicon/qm - remove unnecessary aer.h include
  - crypto: hisilicon/qm - stop function and write data to memory
  - crypto: hisilicon/hpre - ensure private key less than n
  - crypto: hisilicon/qm - prevent soft lockup in qm_poll_req_cb()'s loop
  - !921 [sync] PR-919:  Revert "ext4: dio take shared inode lock when overwriting preallocated blocks"
  - Revert "ext4: dio take shared inode lock when overwriting preallocated blocks"
  - !898 [sync] PR-894: Fixed two accelerator bugfixes
  - !908 [sync] PR-874: nic: hns3: fix pointer cast for wol and fix getting GE port lanes error and set cpu affinity
  - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
  - !909 [sync] PR-907:  tcp/dccp: Add another way to allocate local ports in connect()
  - !893 mitigatin cacheline false sharing
  - tcp/dccp: Add another way to allocate local ports in connect()
  - net: hns3: fix set cpu affinity when state down
  - net: hns3: add support for getting GE port lanes
  - net: hns3: fix pointer cast to different type for wol
  - !903 backport block bugfix
  - md/raid10: fix incorrect done of recovery
  - md/raid10: fix null-ptr-deref in raid10_sync_request
  - block/badblocks: fix badblocks loss when badblocks combine
  - block/badblocks: fix the bug of reverse order
  - md: fix unexpected changes of return value in rdev_set_badblocks
  - md/raid10: fix io hung in md_wait_for_blocked_rdev()
  - block: Only set bb->changed when badblocks changes
  - md/raid10: fix incorrect counting of rdev->nr_pending
  - md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
  - md/raid10: fix uaf if replacement replaces rdev
  - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
  - md/raid10: fix io loss while replacement replace rdev
  - md/raid10: prioritize adding disk to 'removed' mirror
  - md: fix io loss when remove rdev fail
  - md/raid10: fix a race between removing rdev and access conf->mirrors[i].rdev
  - md/raid10: fix taks hung in raid10d
  - md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
  - md/raid10: fix softlockup in raid10_unplug
  - md/raid1: stop mdx_raid1 thread when raid1 array run failed
  - md: fix sysfs duplicate file while adding rdev
  - md: replace invalid function flush_rdev_wq() with flush_workqueue()
  - md: Flush workqueue md_rdev_misc_wq in md_alloc()
  - block: don't allow the same type rq_qos add more than once
  - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
  - blk-iocost: don't allow to configure bio based device
  - !899 [sync] PR-895:  config: enable CONFIG_BPF_STREAM_PARSER=y on arm64
  - config: enable CONFIG_BPF_STREAM_PARSER=y on arm64
  - uacce: use filep->f_mapping to replace inode->i_mapping
  - crypto:hisilicon/qm: bugfix queue parameter issue
  - enable MITIGATION_FALSE_SHARING by default
  - ext4: mitigatin cacheline false sharing in struct ext4_inode_info


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.6.0.84
changelog:
  - !1119 [openEuler-22.03-LTS-SP2] net: hns3: refactor hclge_mac_link_status_wait and add wait until mac link down
  - net: hns3: add wait until mac link down
  - net: hns3: refactor hclge_mac_link_status_wait for interface reuse
  - !1093 vfio-pci: Match specific devices with vendor id and device id
  - !1085 irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
  - irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
  - !1095 irqchip: gic-v3: Collection table support muti pages
  - !1081  some backport bugfix for sockmap
  - irqchip: gic-v3: Collection table support muti pages
  - vfio-pci: Match specific devices with vendor id and device id
  - !1077  drm/qxl: Fix missing free_irq
  - !1087 genirq: Increase the number of IRQ descriptors
  - genirq: Increase the number of IRQ descriptors
  - bpf: fix bpf_tcp_ingress addr use after free
  - net: deal with most data-races in sk_wait_event()
  - bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
  - bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
  - bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect
  - bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes
  - bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data
  - bpf, sock_map: Move cancel_work_sync() out of sock lock
  - bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues
  - !1063 i2c: hisi: Only handle the interrupt of the driver's transfer
  - drm/qxl: Fix missing free_irq
  - !1059 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
  - i2c: hisi: Only handle the interrupt of the driver's transfer
  - fs: hfsplus: fix UAF issue in hfsplus_put_super


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-153.8.0.86
changelog:
  - Enable kabi checking and adapt the check-kabi script
  - net: let sockops can use bpf_get_current_comm()
  - net: add bpf_is_local_ipaddr bpf helper function
  - fs/ntfs3: Check fields while reading
  - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.10.0.88
changelog:
  - Add java-1.8.0-openjdk-devel BuildRequires for kernel.spec
  - !1213 [sync] PR-1196:  fs/stat: make tmp variable 16-bytes aligned in copy stat
  - !1208  arm64: kernel: disable CNP on LINXICORE9100
  - fs/stat: make tmp variable 16-bytes aligned in copy stat
  - !1204  kernel: update SP2 OPENEULER_MINOR value to 2
  - !1203  Revert "locking/rwsem: Prevent potential lock starvation"
  - !1200 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
  - arm64: kernel: disable CNP on LINXICORE9100
  - !1193 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
  - !1195 [sync] PR-1159: xhci:fix USB xhci controller issue
  - !1183  Fix some warning messages in netacc
  - kernel: update SP2 OPENEULER_MINOR value to 2
  - Revert "locking/rwsem: Better collate rwsem_read_trylock()"
  - Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
  - Revert "locking/rwsem: Prevent potential lock starvation"
  - memcg: fix implicit declaration of memcg_print_bad_task()
  - xhci:fix USB xhci controller issue
  - !1186  Fix NULL pointer and Keep PERF_PMU_CAP_EXCLUSIVE
  - memstick: r592: Fix UAF bug in r592_remove due to race condition
  - hwtracing: hisi_ptt: Keep to advertise PERF_PMU_CAP_EXCLUSIVE
  - hwtracing: hisi_ptt: Add dummy callback pmu::read()
  - !1182 Fix CQ and QP cache affinity
  - libbpf: Support uniform BTF-defined key/value specification across all BPF maps
  - tools: ignore one warning message
  - RDMA/hns: Fix CQ and QP cache affinity
  - !1151 [sync] PR-1150:  EDAC/i10nm: Add Intel Emerald Rapids server support
  - !1175 [sync] PR-1157: Add LoongArch maintainers to openEuler/MAINTAINERS
  - !1165 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
  - MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
  - !1169 [sync] PR-1162:  fbcon: Check font dimension limits
  - !1156 [sync] PR-582: mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
  - fbcon: Check font dimension limits
  - proc: allow pid_revalidate() during LOOKUP_RCU
  - !882 [sync] PR-855: Remove the automatic loading of the hisi_trng driver
  - mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()
  - EDAC/i10nm: Add Intel Emerald Rapids server support
  - !1144 crypto: hisilicon/qm: modify loop exit condition
  - !1147 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
  - gfs2: Don't deref jdesc in evict
  - crypto: hisilicon/qm: modify loop exit condition
  - crypto/trng: Remove the automatic loading of the hisi_trng driver
  - crypto: hisilicon/trng - use %u to print u32 variables


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-153.12.0.89
changelog:
  - !1189 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
  - !1226 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
  - !1229 [sync] PR-1227:  x86/fpu: KABI_BROKEN_REMOVE "union fpregs_state state" from struct fpu
  - x86/fpu: KABI_BROKEN_REMOVE "union fpregs_state state" from struct fpu
  - media: rkvdec: fix use after free bug in rkvdec_remove
  - !1219  openEuler: introduced OPENEULER_LTS to identify LTS Release
  - openEuler: introduced OPENEULER_LTS to identify LTS Release
  - net/sched: flower: fix possible OOB write in fl_set_geneve_opt()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.17.0.93
changelog:
  - !1231 [sync] PR-1191:  fix memory reliable related issues
  - !1236 [sync] PR-1194:  fix memleak with efi_fake_mem
  - !1257 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
  - !1249 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
  - !1234 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
  - !1211 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
  - !1276 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
  - !1304 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
  - !1301 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
  - !1266 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
  - !1240 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
  - media: saa7134: fix use after free bug in saa7134_finidev due to race condition
  - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
  - !1244  set the iova rcache global
  - HID: intel_ish-hid: Add check for ishtp_dma_tx_map
  - hugetlb: fix hugepages_setup when deal with pernode
  - hugetlb: fix wrong use of nr_online_nodes
  - config: enable set the max iova mag size to 128
  - iommu/iova: increase the iova_rcache depot max size
  - relayfs: fix out-of-bounds access in relay_file_read
  - config: Disable EFI_FAKE_MEMMAP support for arm64 by default
  - efi: Fix UAF for arm64 when enable efi_fake_mem
  - mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
  - efi: Disable mirror feature during crashkernel
  - mm: mem_reliable: Update reliable page counter to zero if underflows
  - mm: mem_reliable: Fix reliable page counter mismatch problem
  - nbd: fix incomplete validation of ioctl arg
  - nbd: validate the block size in nbd_set_size


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.18.0.94
changelog:
  - !1370 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
  - !1365 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb->cb
  - io_uring: hold uring mutex around poll removal
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb
  - !1344 [sync] PR-1272:  xfs: fix some problems recently
  - xfs: fix uninitialized variable access
  - xfs: set XFS_FEAT_NLINK correctly
  - xfs: don't leak perag when growfs fails
  - xfs: factor out xfs_destroy_perag()
  - xfs: fix warning in xfs_vm_writepages()
  - xfs: don't leak intent item when recovery intents fail
  - xfs: factor out xfs_defer_pending_abort
  - xfs: fix mounting failed caused by sequencing problem in the log records
  - !1306 [sync] PR-1297:  iommu/iova: move IOVA_MAX_GLOBAL_MAGS outside of IOMMU_SUPPORT
  - iommu/iova: move IOVA_MAX_GLOBAL_MAGS outside of IOMMU_SUPPORT
  - Fix x86 provides error symbol


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.19.0.95
changelog:
  - !1291 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
  - !1457 [sync] PR-1358:  Remove DECnet support from kernel
  - !1440 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
  - !1461 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
  - !1464 [sync] PR-1436: Fix CVE-2023-3117
  - !1319 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd->config'
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
  - netfilter: nf_tables: fix chain binding transaction logic
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  - loop: loop_set_status_from_info() check before assignment
  - Remove DECnet support from kernel
  - netfilter: nf_tables: do not ignore genmask when looking up chain by id
  - !1421 [sync] PR-1415:  Fix generic/299 fail
  - !1379 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
  - !1433 [sync] PR-346: anolis: bond: broadcast ARP or ND messages to all slaves
  - anolis: bond: broadcast ARP or ND messages to all slaves
  - ext4: Add debug message to notify user space is out of free
  - Revert "ext4: Stop trying writing pages if no free blocks generated"
  - !1413 [sync] PR-1408:  Replace the hulk patch with the lts patch
  - cgroup: Do not corrupt task iteration when rebinding subsystem
  - Revert "cgroup: Stop task iteration when rebinding subsystem"
  - !1390 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
  - !1393 [sync] PR-1376:  jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - !1309 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
  - jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - quota: simplify drop_dquot_ref()
  - quota: fix dqput() to follow the guarantees dquot_srcu should provide
  - quota: add new helper dquot_active()
  - quota: rename dquot_active() to inode_quota_active()
  - quota: factor out dquot_write_dquot()
  - !1330 [sync] PR-1325:  jbd2: fix several checkpoint
  - !1333 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
  - blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
  - blk-wbt: make enable_state more accurate
  - !1341 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
  - ext4: turning quotas off if mount failed after enable quotas
  - ext4: Stop trying writing pages if no free blocks generated
  - jbd2: fix checkpoint cleanup performance regression
  - jbd2: remove __journal_try_to_free_buffer()
  - jbd2: fix a race when checking checkpoint buffer busy
  - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
  - jbd2: remove journal_clean_one_cp_list()
  - nbd: fix null-ptr-dereference while accessing 'nbd->config'
  - nbd: factor out a helper to get nbd_config without holding 'config_lock'
  - nbd: fold nbd config initialization into nbd_alloc_config()
  - cgroup: always put cset in cgroup_css_set_put_fork
  - drm/msm/dpu: Add check for pstates


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.20.0.96
changelog:
  - !1526 [sync] PR-1482:  CVE-2023-3567 fix patches
  - !1338 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
  - vc_screen: modify vcs_size() handling in vcs_read()
  - vc_screen: don't clobber return value in vcs_read
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
  - !1491 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
  - !1487 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - !1496 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - !1492 [sync] PR-1468: Backport 5.10.155 LTS
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - x86/cpu: Restore AMD's DE_CFG MSR after resume
  - mmc: sdhci-esdhc-imx: Convert the driver to DT-only
  - net: tun: call napi_schedule_prep() to ensure we own a napi
  - dmaengine: at_hdmac: Check return code of dma_async_device_register
  - dmaengine: at_hdmac: Fix impossible condition
  - dmaengine: at_hdmac: Don't allow CPU to reorder channel enable
  - dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors
  - dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware
  - dmaengine: at_hdmac: Fix concurrency over the active list
  - dmaengine: at_hdmac: Free the memset buf without holding the chan lock
  - dmaengine: at_hdmac: Fix concurrency over descriptor
  - dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all()
  - dmaengine: at_hdmac: Protect atchan->status with the channel lock
  - dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all
  - dmaengine: at_hdmac: Fix premature completion of desc in issue_pending
  - dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending
  - dmaengine: at_hdmac: Don't start transactions at tx_submit level
  - dmaengine: at_hdmac: Fix at_lli struct definition
  - cert host tools: Stop complaining about deprecated OpenSSL functions
  - can: j1939: j1939_send_one(): fix missing CAN header initialization
  - mm/memremap.c: map FS_DAX device memory as decrypted
  - udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
  - mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI
  - btrfs: selftests: fix wrong error check in btrfs_free_dummy_root()
  - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi
  - drm/i915/dmabuf: fix sg_table handling in map_dma_buf
  - nilfs2: fix use-after-free bug of ns_writer on remount
  - nilfs2: fix deadlock in nilfs_count_free_blocks()
  - ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure
  - vmlinux.lds.h: Fix placement of '.data..decrypted' section
  - ALSA: usb-audio: Add DSD support for Accuphase DAC-60
  - ALSA: usb-audio: Add quirk entry for M-Audio Micro
  - ALSA: hda/realtek: Add Positivo C6300 model quirk
  - ALSA: hda: fix potential memleak in 'add_widget_node'
  - ALSA: hda/ca0132: add quirk for EVGA Z390 DARK
  - ALSA: hda/hdmi - enable runtime pm for more AMD display audio
  - mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI
  - mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI
  - mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI
  - mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI
  - MIPS: jump_label: Fix compat branch range check
  - arm64: efi: Fix handling of misaligned runtime regions and drop warning
  - riscv: fix reserved memory setup
  - riscv: Separate memory init from paging init
  - riscv: Enable CMA support
  - riscv: vdso: fix build with llvm
  - riscv: process: fix kernel info leakage
  - net: macvlan: fix memory leaks of macvlan_common_newlink
  - ethernet: tundra: free irq when alloc ring failed in tsi108_open()
  - net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open()
  - ethernet: s2io: disable napi when start nic failed in s2io_card_up()
  - net: atlantic: macsec: clear encryption keys from the stack
  - net: phy: mscc: macsec: clear encryption keys when freeing a flow
  - cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open()
  - net: cxgb3_main: disable napi when bind qsets failed in cxgb_up()
  - net: cpsw: disable napi in cpsw_ndo_open()
  - net/mlx5e: E-Switch, Fix comparing termination table instance
  - net/mlx5: Allow async trigger completion execution on single CPU systems
  - net: nixge: disable napi when enable interrupts failed in nixge_open()
  - net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init()
  - perf stat: Fix printing os->prefix in CSV metrics output
  - drivers: net: xgene: disable napi when register irq failed in xgene_enet_open()
  - dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()
  - dmaengine: pxa_dma: use platform_get_irq_optional
  - tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header
  - net: broadcom: Fix BCMGENET Kconfig
  - net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable()
  - can: af_can: fix NULL pointer dereference in can_rx_register()
  - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network
  - drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register()
  - hamradio: fix issue of dev reference count leakage in bpq_device_event()
  - net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event()
  - KVM: s390: pv: don't allow userspace to set the clock under PV
  - KVM: s390x: fix SCK locking
  - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
  - net: fman: Unregister ethernet device on removal
  - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer
  - bnxt_en: Fix possible crash in bnxt_hwrm_set_coal()
  - net: tun: Fix memory leaks of napi_get_frags
  - macsec: clear encryption keys from the stack after setting up offload
  - macsec: fix detection of RXSCs when toggling offloading
  - macsec: fix secy->n_rx_sc accounting
  - macsec: delete new rxsc when offload fails
  - net: gso: fix panic on frag_list with mixed head alloc types
  - bpf: Fix wrong reg type conversion in release_reference()
  - bpf: Add helper macro bpf_for_each_reg_in_vstate
  - bpf: Support for pointers beyond pkt_end.
  - HID: hyperv: fix possible memory leak in mousevsc_probe()
  - bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE
  - wifi: cfg80211: fix memory leak in query_regdb_file()
  - wifi: cfg80211: silence a sparse RCU warning
  - phy: stm32: fix an error code in probe
  - hwspinlock: qcom: correct MMIO max register for newer SoCs
  - fuse: fix readdir cache race
  - !1471 [sync] PR-838: Backport 5.10.154 LTS
  - ipv6/addrconf: fix a potential refcount underflow for idev
  - media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - ipc: remove memcg accounting for sops objects in do_semtimedop()
  - drm/i915/sdvo: Setup DDC fully before output init
  - drm/i915/sdvo: Filter out invalid outputs more sensibly
  - drm/rockchip: dsi: Force synchronous probe
  - ext4,f2fs: fix readahead of verity data
  - KVM: x86: emulator: update the emulation mode after CR0 write
  - KVM: x86: emulator: introduce emulator_recalc_and_set_mode
  - KVM: x86: emulator: em_sysexit should update ctxt->mode
  - KVM: x86: Mask off reserved bits in CPUID.80000001H
  - KVM: x86: Mask off reserved bits in CPUID.80000008H
  - KVM: x86: Mask off reserved bits in CPUID.8000001AH
  - KVM: x86: Mask off reserved bits in CPUID.80000006H
  - ext4: fix BUG_ON() when directory entry has invalid rec_len
  - ext4: fix warning in 'ext4_da_release_space'
  - parisc: Avoid printing the hardware path twice
  - parisc: Export iosapic_serial_irq() symbol for serial port driver
  - parisc: Make 8250_gsc driver dependend on CONFIG_PARISC
  - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[]
  - perf/x86/intel: Fix pebs event constraints for ICL
  - efi: random: Use 'ACPI reclaim' memory for random seed
  - efi: random: reduce seed size to 32 bytes
  - fuse: add file_modified() to fallocate
  - capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
  - tracing/histogram: Update document for KEYS_MAX size
  - tools/nolibc/string: Fix memcmp() implementation
  - kprobe: reverse kp->flags when arm_kprobe failed
  - tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
  - btrfs: fix type of parameter generation in btrfs_get_dentry
  - coresight: cti: Fix hang in cti_disable_hw()
  - mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times
  - fscrypt: fix keyring memory leak on mount failure
  - fscrypt: stop using keyrings subsystem for fscrypt_master_key
  - fscrypt: simplify master key locking
  - ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices
  - block, bfq: protect 'bfqd->queued' by 'bfqd->lock'
  - i2c: piix4: Fix adapter not be removed in piix4_remove()
  - arm64: dts: juno: Add thermal critical trip points
  - firmware: arm_scmi: Make Rx chan_setup fail on memory errors
  - firmware: arm_scmi: Suppress the driver's bind attributes
  - ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset
  - efi/tpm: Pass correct address to memblock_reserve
  - i2c: xiic: Add platform module alias
  - drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case
  - HID: saitek: add madcatz variant of MMO7 mouse device ID
  - scsi: core: Restrict legal sdev_state transitions via sysfs
  - ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init()
  - media: meson: vdec: fix possible refcount leak in vdec_probe()
  - media: dvb-frontends/drxk: initialize err to 0
  - media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE
  - media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
  - media: rkisp1: Zero v4l2_subdev_format fields in when validating links
  - media: rkisp1: Initialize color space on resizer sink and source pads
  - s390/boot: add secure boot trailer
  - xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices
  - mtd: parsers: bcm47xxpart: Fix halfblock reads
  - mtd: parsers: bcm47xxpart: print correct offset on read error
  - fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards
  - video/fbdev/stifb: Implement the stifb_fillrect() function
  - mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake
  - mmc: sdhci-pci: Avoid comma separated statements
  - mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus
  - drm/msm/hdmi: fix IRQ lifetime
  - drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag
  - ipv6: fix WARNING in ip6_route_net_exit_late()
  - net, neigh: Fix null-ptr-deref in neigh_table_clear()
  - net: mdio: fix undefined behavior in bit shift for __mdiobus_register
  - btrfs: fix ulist leaks in error paths of qgroup self tests
  - btrfs: fix inode list leak during backref walking at find_parent_nodes()
  - btrfs: fix inode list leak during backref walking at resolve_indirect_refs()
  - isdn: mISDN: netjet: fix wrong check of device registration
  - mISDN: fix possible memory leak in mISDN_register_device()
  - rose: Fix NULL pointer dereference in rose_send_frame()
  - ipvs: fix WARNING in ip_vs_app_net_cleanup()
  - ipvs: fix WARNING in __ip_vs_cleanup_batch()
  - ipvs: use explicitly signed chars
  - netfilter: nf_tables: release flow rule object from commit path
  - net: sched: Fix use after free in red_enqueue()
  - ata: pata_legacy: fix pdc20230_set_piomode()
  - net: fec: fix improper use of NETDEV_TX_BUSY
  - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()
  - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
  - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
  - NFC: nxp-nci: remove unnecessary labels
  - nfc: fdp: Fix potential memory leak in fdp_nci_send()
  - nfc: fdp: drop ftrace-like debugging messages
  - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources()
  - RDMA/core: Fix null-ptr-deref in ib_core_cleanup()
  - net: dsa: Fix possible memory leaks in dsa_loop_init()
  - nfs4: Fix kmemleak when allocate slot failed
  - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot
  - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors
  - NFSv4: Fix a potential state reclaim deadlock
  - IB/hfi1: Correctly move list in sc_disable()
  - RDMA/cma: Use output interface for net_dev check
  - KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER
  - KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter()
  - KVM: x86: Protect the unused bits in MSR exiting flags
  - x86/topology: Fix duplicated core ID within a package
  - x86/topology: Fix multiple packages shown on a single-package system
  - x86/topology: Set cpu_die_id only if DIE_TYPE found
  - KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1)
  - KVM: x86: Trace re-injected exceptions
  - KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02
  - KVM: nVMX: Pull KVM L0's desired controls directly from vmcs01
  - serial: ar933x: Deassert Transmit Enable on ->rs485_config()
  - serial: 8250: Let drivers request full 16550A feature probing
  - !1423 [sync] PR-1254:  Two CVE fixes of ksmbd
  - ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
  - ksmbd: fix memleak in session setup
  - bpf: Fix incorrect verifier pruning due to missing register precision taints


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.21.0.97
changelog:
  - !1589 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
  - !1584 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
  - !1600 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
  - !1603 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
  - !1616 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
  - !1579 [sync] PR-1541: Backport 5.10.158 - 5.10.159 LTS patches from upstream.
  - net/sched: cls_u32: Fix reference counter leak leading to overflow
  - !1594 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
  - psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
  - binder: fix UAF caused by faulty buffer cleanup
  - ksmbd: fix global-out-of-bounds in smb2_find_context_vals
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free
  - ksmbd: fix wrong UserName check in session_user
  - can: esd_usb: Allow REC and TEC to return to zero
  - macsec: add missing attribute validation for offload
  - net: mvneta: Fix an out of bounds check
  - ipv6: avoid use-after-free in ip6_fragment()
  - net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq()
  - ethernet: aeroflex: fix potential skb leak in greth_init_rings()
  - tipc: call tipc_lxc_xmit without holding node_read_lock
  - net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions()
  - ipv4: Fix incorrect route flushing when table ID 0 is used
  - ipv4: Fix incorrect route flushing when source address is deleted
  - tipc: Fix potential OOB in tipc_link_proto_rcv()
  - net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
  - net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
  - net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq
  - ip_gre: do not report erspan version on GRE interface
  - net: stmmac: fix "snps,axi-config" node property parsing
  - nvme initialize core quirks before calling nvme_init_subsystem
  - NFC: nci: Bounds check struct nfc_target arrays
  - i40e: Disallow ip4 and ip6 l4_4_bytes
  - i40e: Fix for VF MAC address 0
  - i40e: Fix not setting default xps_cpus after reset
  - net: mvneta: Prevent out of bounds read in mvneta_config_rss()
  - xen-netfront: Fix NULL sring after live migration
  - net: encx24j600: Fix invalid logic in reading of MISTAT register
  - net: encx24j600: Add parentheses to fix precedence
  - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
  - selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload
  - net: dsa: ksz: Check return value
  - Bluetooth: Fix not cleanup led when bt_init fails
  - Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()
  - vmxnet3: correctly report encapsulated LRO packet
  - drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420
  - igb: Allocate MSI-X vector when testing
  - e1000e: Fix TX dispatch condition
  - gpio: amd8111: Fix PCI device reference count leak
  - drm/bridge: ti-sn65dsi86: Fix output polarity setting bug
  - netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark
  - ca8210: Fix crash by zero initializing data
  - ieee802154: cc2520: Fix error return code in cc2520_hw_init()
  - netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one
  - rtc: mc146818-lib: fix signedness bug in mc146818_get_time()
  - rtc: mc146818-lib: fix locking in mc146818_set_time
  - rtc: cmos: Disable irq around direct invocation of cmos_interrupt()
  - HID: core: fix shift-out-of-bounds in hid_report_raw_event
  - HID: hid-lg4ff: Add check for empty lbuf
  - HID: usbhid: Add ALWAYS_POLL quirk for some mice
  - drm/shmem-helper: Avoid vm_open error paths
  - drm/shmem-helper: Remove errant put in error path
  - drm/vmwgfx: Don't use screen objects when SEV is active
  - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field
  - Bluetooth: Fix crash when replugging CSR fake controllers
  - Bluetooth: btusb: Add debug message for CSR controllers
  - mm/gup: fix gup_pud_range() for dax
  - media: v4l2-dv-timings.c: fix too strict blanking sanity checks
  - Revert "ARM: dts: imx7: Fix NAND controller size-cells"
  - media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area()
  - xen/netback: do some code cleanup
  - rtc: mc146818: Reduce spinlock section in mc146818_set_time()
  - rtc: cmos: Replace spin_lock_irqsave with spin_lock in hard IRQ
  - rtc: cmos: avoid UIP when reading alarm time
  - rtc: cmos: avoid UIP when writing alarm time
  - rtc: mc146818-lib: extract mc146818_avoid_UIP
  - rtc: mc146818-lib: fix RTC presence check
  - rtc: Check return value from mc146818_get_time()
  - rtc: mc146818-lib: change return values of mc146818_get_time()
  - rtc: cmos: remove stale REVISIT comments
  - rtc: mc146818: Dont test for bit 0-5 in Register D
  - rtc: mc146818: Detect and handle broken RTCs
  - rtc: mc146818: Prevent reading garbage
  - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
  - mm/khugepaged: fix GUP-fast interaction by sending IPI
  - mm/khugepaged: take the right locks for page table retraction
  - net: usb: qmi_wwan: add u-blox 0x1342 composition
  - 9p/xen: check logical size for buffer size
  - usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer
  - fbcon: Use kzalloc() in fbcon_prepare_logo()
  - regulator: twl6030: fix get status of twl6032 regulators
  - ASoC: soc-pcm: Add NULL check in BE reparenting
  - btrfs: send: avoid unaligned encoded writes when attempting to clone range
  - ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
  - regulator: slg51000: Wait after asserting CS pin
  - 9p/fd: Use P9_HDRSZ for header size
  - ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188
  - ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register
  - ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation
  - ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels
  - ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name
  - arm64: dts: rockchip: fix ir-receiver node names
  - ARM: dts: rockchip: fix ir-receiver node names
  - arm: dts: rockchip: fix node name for hym8563 rtc
  - arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series
  - ipc/sem: Fix dangling sem_array access in semtimedop race
  - v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails
  - block: unhash blkdev part inode when the part is deleted
  - Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
  - char: tpm: Protect tpm_pm_suspend with locks
  - Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend"
  - ACPI: HMAT: Fix initiator registration for single-initiator systems
  - ACPI: HMAT: remove unnecessary variable initialization
  - i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set
  - i2c: npcm7xx: Fix error handling in npcm_i2c_init()
  - x86/pm: Add enumeration check before spec MSRs save/restore setup
  - x86/tsx: Add a feature bit for TSX control MSR support
  - Revert "tty: n_gsm: avoid call of sleeping functions from atomic context"
  - ipv4: Fix route deletion when nexthop info is not specified
  - ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference
  - selftests: net: fix nexthop warning cleanup double ip typo
  - selftests: net: add delete nexthop route warning test
  - Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled
  - parisc: Increase FRAME_WARN to 2048 bytes on parisc
  - xtensa: increase size of gcc stack frame check
  - parisc: Increase size of gcc stack frame check
  - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
  - iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
  - pinctrl: single: Fix potential division by zero
  - ASoC: ops: Fix bounds check for _sx controls
  - tracing: Free buffers when a used dynamic event is removed
  - drm/i915: Never return 0 if not all requests retired
  - drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame
  - mmc: sdhci: Fix voltage switch delay
  - mmc: sdhci-sprd: Fix no reset data and command after voltage switch
  - mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check
  - mmc: core: Fix ambiguous TRIM and DISCARD arg
  - mmc: mmc_test: Fix removal of debugfs file
  - net: stmmac: Set MAC's flow control register to reflect current settings
  - pinctrl: intel: Save and restore pins in "direct IRQ" mode
  - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3
  - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
  - tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep"
  - error-injection: Add prompt for function error injection
  - riscv: vdso: fix section overlapping under some conditions
  - net/mlx5: DR, Fix uninitialized var warning
  - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
  - hwmon: (coretemp) Check for null before removing sysfs attrs
  - net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed
  - sctp: fix memory leak in sctp_stream_outq_migrate()
  - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
  - net: tun: Fix use-after-free in tun_detach()
  - afs: Fix fileserver probe RTT handling
  - net: hsr: Fix potential use-after-free
  - tipc: re-fetch skb cb after tipc_msg_validate
  - dsa: lan9303: Correct stat name
  - net: ethernet: nixge: fix NULL dereference
  - net/9p: Fix a potential socket leak in p9_socket_open
  - net: net_netdev: Fix error handling in ntb_netdev_init_module()
  - net: phy: fix null-ptr-deref while probe() failed
  - wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration
  - wifi: cfg80211: don't allow multi-BSSID in S1G
  - wifi: cfg80211: fix buffer overflow in elem comparison
  - aquantia: Do not purge addresses when setting the number of rings
  - qlcnic: fix sleep-in-atomic-context bugs caused by msleep
  - can: cc770: cc770_isa_probe(): add missing free_cc770dev()
  - can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev()
  - net/mlx5e: Fix use-after-free when reverting termination table
  - net/mlx5: Fix uninitialized variable bug in outlen_write()
  - e100: Fix possible use after free in e100_xmit_prepare
  - e100: switch from 'pci_' to 'dma_' API
  - iavf: Fix error handling in iavf_init_module()
  - iavf: remove redundant ret variable
  - fm10k: Fix error handling in fm10k_init_module()
  - i40e: Fix error handling in i40e_init_module()
  - ixgbevf: Fix resource leak in ixgbevf_init_module()
  - of: property: decrement node refcount in of_fwnode_get_reference_args()
  - bpf: Do not copy spin lock field from user in bpf_selem_alloc
  - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
  - hwmon: (i5500_temp) fix missing pci_disable_device()
  - hwmon: (ina3221) Fix shunt sum critical calculation
  - hwmon: (ltc2947) fix temperature scaling
  - libbpf: Handle size overflow for ringbuf mmap
  - ARM: at91: rm9200: fix usb device clock id
  - scripts/faddr2line: Fix regression in name resolution on ppc64le
  - bpf, perf: Use subprog name when reporting subprog ksymbol
  - iio: light: rpr0521: add missing Kconfig dependencies
  - iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
  - iio: health: afe4403: Fix oob read in afe4403_read_raw
  - btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
  - drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read"
  - drm/amdgpu: update drm_display_info correctly when the edid is read
  - drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code
  - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
  - spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock
  - btrfs: free btrfs_path before copying inodes to userspace
  - btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino
  - !1554 [sync] PR-1506: Backport 5.10.157 LTS patches from upstream
  - !1466 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
  - !1575 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  - net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  - !1560 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
  - !1383 [sync] PR-1351:  dm thin: fix deadlock when swapping to thin device
  - !1483  dm stats: check for and propagate alloc_percpu failure
  - !1504  block: don't set GD_NEED_PART_SCAN if scan partition failed
  - !1479 [sync] PR-1345:  dm: requeue IO if mapping table not yet
  - mm: memcontrol: fix cannot alloc the maximum memcg ID
  - fuse: lock inode unconditionally in fuse_fallocate()
  - drm/amdgpu: always register an MMU notifier for userptr
  - drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN
  - btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs()
  - btrfs: free btrfs_path before copying subvol info to userspace
  - btrfs: free btrfs_path before copying fspath to userspace
  - btrfs: free btrfs_path before copying root refs to userspace
  - dm integrity: clear the journal on suspend
  - dm integrity: flush the journal on suspend
  - gpu: host1x: Avoid trying to use GART on Tegra20
  - net: usb: qmi_wwan: add Telit 0x103a composition
  - tcp: configurable source port perturb table size
  - platform/x86: hp-wmi: Ignore Smart Experience App event
  - zonefs: fix zone report size in __zonefs_io_error()
  - platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017)
  - platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr()
  - xen/platform-pci: add missing free_irq() in error path
  - xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too
  - Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[]
  - Input: soc_button_array - add use_low_level_irq module parameter
  - Input: goodix - try resetting the controller when no config is set
  - serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios()
  - ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01
  - Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode
  - x86/ioremap: Fix page aligned size calculation in __ioremap_caller()
  - KVM: x86: remove exit_int_info warning in svm_handle_exit
  - KVM: x86: nSVM: leave nested mode on vCPU free
  - mm: vmscan: fix extreme overreclaim and swap floods
  - gcov: clang: fix the buffer overflow issue
  - nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
  - usb: dwc3: gadget: Clear ep descriptor last
  - usb: dwc3: gadget: Return -ESHUTDOWN on ep disable
  - usb: dwc3: gadget: conditionally remove requests
  - ceph: fix NULL pointer dereference for req->r_session
  - ceph: Use kcalloc for allocating multiple elements
  - ceph: fix possible NULL pointer dereference for req->r_session
  - ceph: put the requests/sessions when it fails to alloc memory
  - ceph: fix off by one bugs in unsafe_request_wait()
  - ceph: flush the mdlog before waiting on unsafe reqs
  - ceph: flush mdlog before umounting
  - ceph: make iterate_sessions a global symbol
  - ceph: make ceph_create_session_msg a global symbol
  - usb: cdns3: Add support for DRD CDNSP
  - mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI
  - mmc: sdhci-brcmstb: Enable Clock Gating to save power
  - mmc: sdhci-brcmstb: Re-organize flags
  - nios2: add FORCE for vmlinuz.gz
  - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
  - iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails
  - iio: light: apds9960: fix wrong register for gesture gain
  - arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency
  - usb: dwc3: exynos: Fix remove() function
  - lib/vdso: use "grep -E" instead of "egrep"
  - net: enetc: preserve TX ring priority across reconfiguration
  - net: enetc: cache accesses to &priv->si->hw
  - net: enetc: manage ENETC_F_QBV in priv->active_offloads only when enabled
  - s390/crashdump: fix TOD programmable field size
  - net: thunderx: Fix the ACPI memory leak
  - nfc: st-nci: fix memory leaks in EVT_TRANSACTION
  - nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION
  - arcnet: fix potential memory leak in com20020_probe()
  - net: arcnet: Fix RESET flag handling
  - s390/dasd: fix no record found for raw_track_access
  - ipv4: Fix error return code in fib_table_insert()
  - dccp/tcp: Reset saddr on failure after inet6?_hash_connect().
  - netfilter: flowtable_offload: add missing locking
  - dma-buf: fix racing conflict of dma_heap_add()
  - bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending()
  - regulator: twl6030: re-add TWL6032_SUBCLASS
  - NFC: nci: fix memory leak in nci_rx_data_packet()
  - net: sched: allow act_ct to be built without NF_NAT
  - sfc: fix potential memleak in __ef100_hard_start_xmit()
  - xfrm: Fix ignored return value in xfrm6_init()
  - tipc: check skb_linearize() return value in tipc_disc_rcv()
  - net/mlx5: Fix handling of entry refcount when command is not issued to FW
  - net/mlx5: Fix FW tracer timestamp calculation
  - netfilter: ipset: regression in ip_set_hash_ip.c
  - netfilter: ipset: Limit the maximal range of consecutive elements to add/delete
  - Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register()
  - Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work()
  - macsec: Fix invalid error code set
  - nfp: add port from netdev validation for EEPROM access
  - nfp: fill splittable of devlink_port_attrs correctly
  - net: pch_gbe: fix pci device refcount leak while module exiting
  - net/qla3xxx: fix potential memleak in ql3xxx_send()
  - net/mlx4: Check retval of mlx4_bitmap_init
  - net: ethernet: mtk_eth_soc: fix error handling in mtk_open()
  - ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties
  - ARM: mxs: fix memory leak in mxs_machine_init()
  - netfilter: conntrack: Fix data-races around ct mark
  - 9p/fd: fix issue of list_del corruption in p9_fd_cancel()
  - net: pch_gbe: fix potential memleak in pch_gbe_tx_queue()
  - nfc/nci: fix race with opening and closing
  - rxrpc: Use refcount_t rather than atomic_t
  - rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc
  - net: liquidio: simplify if expression
  - ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl
  - tee: optee: fix possible memory leak in optee_register_device()
  - bus: sunxi-rsb: Support atomic transfers
  - regulator: core: fix UAF in destroy_regulator()
  - spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld()
  - regulator: core: fix kobject release warning and memory leak in regulator_register()
  - scsi: storvsc: Fix handling of srb_status and capacity change events
  - ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open()
  - ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove
  - ASoC: hdac_hda: fix hda pcm buffer overflow issue
  - ARM: dts: am335x-pcm-953: Define fixed regulators in root node
  - af_key: Fix send_acquire race with pfkey_register
  - xfrm: replay: Fix ESN wrap around for GSO
  - MIPS: pic32: treat port as signed integer
  - RISC-V: vdso: Do not add missing symbols to version section in linker script
  - arm64/syscall: Include asm/ptrace.h in syscall_wrapper header.
  - drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017)
  - scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC
  - scsi: ibmvfc: Avoid path failures during live migration
  - platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1
  - Revert "net: macsec: report real_dev features when HW offloading is enabled"
  - selftests/bpf: Add verifier test for release_reference()
  - spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run
  - wifi: mac80211: Fix ack frame idr leak when mesh has no route
  - wifi: airo: do not assign -1 to unsigned char
  - audit: fix undefined behavior in bit shift for AUDIT_BIT
  - riscv: dts: sifive unleashed: Add PWM controlled LEDs
  - wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support
  - wifi: mac80211: fix memory free error when registering wiphy fail
  - ceph: avoid putting the realm twice when decoding snaps fails
  - ceph: do not update snapshot context when there is no new snapshot
  - iio: pressure: ms5611: fixed value compensation bug
  - iio: ms5611: Simplify IO callback parameters
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro
  - nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH
  - drm/display: Don't assume dual mode adaptors support i2c sub-addressing
  - bridge: switchdev: Fix memory leaks when changing VLAN protocol
  - bridge: switchdev: Notify about VLAN protocol changes
  - ata: libata-core: do not issue non-internal commands once EH is pending
  - ata: libata-scsi: simplify __ata_scsi_queuecmd()
  - scsi: scsi_transport_sas: Fix error handling in sas_phy_add()
  - !1507 [sync] PR-1473: Backport 5.10.156 LTS patches from upstream.
  - Revert "net: broadcom: Fix BCMGENET Kconfig"
  - ntfs: check overflow when iterating ATTR_RECORDs
  - ntfs: fix use-after-free in ntfs_attr_find()
  - mm: fs: initialize fsdata passed to write_begin/write_end interface
  - 9p/trans_fd: always use O_NONBLOCK read/write
  - gfs2: Switch from strlcpy to strscpy
  - gfs2: Check sb_bsize_shift after reading superblock
  - 9p: trans_fd/p9_conn_cancel: drop client lock earlier
  - kcm: close race conditions on sk_receive_queue
  - tcp: cdg: allow tcp_cdg_release() to be called multiple times
  - uapi/linux/stddef.h: Add include guards
  - Input: i8042 - fix leaking of platform device on module removal
  - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case
  - scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper()
  - scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()
  - stddef: Introduce struct_group() helper macro
  - usbnet: smsc95xx: Fix deadlock on runtime resume
  - ring-buffer: Include dropped pages in counting dirty patches
  - nvme: ensure subsystem reset is single threaded
  - nvme: restrict management ioctls to admin
  - perf/x86/intel/pt: Fix sampling using single range output
  - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
  - docs: update mediator contact information in CoC doc
  - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()
  - mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout
  - mmc: core: properly select voltage range without power cycle
  - firmware: coreboot: Register bus in module init
  - iommu/vt-d: Set SRE bit only when hardware has SRS cap
  - scsi: zfcp: Fix double free of FSF request when qdio send fails
  - maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault()
  - Input: iforce - invert valid length check when fetching device IDs
  - serial: 8250_lpss: Configure DMA also w/o DMA filter
  - serial: 8250: Flush DMA Rx on RLSI
  - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs
  - dm ioctl: fix misbehavior if list_versions races with module loading
  - iio: pressure: ms5611: changed hardcoded SPI speed to value limited
  - iio: adc: mp2629: fix potential array out of bound access
  - iio: adc: mp2629: fix wrong comparison of channel
  - iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init()
  - iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()
  - usb: typec: mux: Enter safe mode only when pins need to be reconfigured
  - usb: chipidea: fix deadlock in ci_otg_del_timer
  - usb: add NO_LPM quirk for Realforce 87U Keyboard
  - USB: serial: option: add Fibocom FM160 0x0111 composition
  - USB: serial: option: add u-blox LARA-L6 modem
  - USB: serial: option: add u-blox LARA-R6 00B modem
  - USB: serial: option: remove old LARA-R6 PID
  - USB: serial: option: add Sierra Wireless EM9191
  - USB: bcma: Make GPIO explicitly optional
  - speakup: fix a segfault caused by switching consoles
  - slimbus: stream: correct presence rate frequencies
  - Revert "usb: dwc3: disable USB core PHY management"
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360
  - ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro
  - ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
  - tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit()
  - tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit()
  - tracing: Fix wild-memory-access in register_synth_event()
  - tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event()
  - tracing/ring-buffer: Have polling block on watermark
  - ring_buffer: Do not deactivate non-existant pages
  - ftrace: Fix null pointer dereference in ftrace_add_mod()
  - ftrace: Optimize the allocation for mcount entries
  - ftrace: Fix the possible incorrect kernel message
  - cifs: add check for returning value of SMB2_set_info_init
  - net: thunderbolt: Fix error handling in tbnet_init()
  - cifs: Fix wrong return value checking when GETFLAGS
  - net/x25: Fix skb leak in x25_lapb_receive_frame()
  - net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open()
  - cifs: add check for returning value of SMB2_close_init
  - platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized
  - drbd: use after free in drbd_create_device()
  - net: ena: Fix error handling in ena_init()
  - net: ionic: Fix error handling in ionic_init_module()
  - xen/pcpu: fix possible memory leak in register_pcpu()
  - bnxt_en: Remove debugfs when pci_register_driver failed
  - net: caif: fix double disconnect client in chnl_net_open()
  - net: macvlan: Use built-in RCU list checking
  - mISDN: fix misuse of put_device() in mISDN_register_device()
  - net: liquidio: release resources when liquidio driver open failed
  - mISDN: fix possible memory leak in mISDN_dsp_element_register()
  - net: bgmac: Drop free_netdev() from bgmac_enet_remove()
  - bpf: Initialize same number of free nodes for each pcpu_freelist
  - ata: libata-transport: fix error handling in ata_tdev_add()
  - ata: libata-transport: fix error handling in ata_tlink_add()
  - ata: libata-transport: fix error handling in ata_tport_add()
  - ata: libata-transport: fix double ata_host_put() in ata_tport_add()
  - arm64: dts: imx8mn: Fix NAND controller size-cells
  - arm64: dts: imx8mm: Fix NAND controller size-cells
  - ARM: dts: imx7: Fix NAND controller size-cells
  - drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker()
  - drm/drv: Fix potential memory leak in drm_dev_init()
  - drm/panel: simple: set bpc field for logic technologies displays
  - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map
  - parport_pc: Avoid FIFO port location truncation
  - siox: fix possible memory leak in siox_device_add()
  - arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro
  - block: sed-opal: kmalloc the cmd/resp buffers
  - sctp: clear out_curr if all frag chunks of current msg are pruned
  - sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent
  - ASoC: soc-utils: Remove __exit for snd_soc_util_exit()
  - tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send
  - serial: imx: Add missing .thaw_noirq hook
  - serial: 8250: omap: Flush PM QOS work on remove
  - serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove()
  - serial: 8250_omap: remove wait loop from Errata i202 workaround
  - serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl()
  - serial: 8250: Remove serial_rs485 sanitization from em485
  - ASoC: tas2764: Fix set_tdm_slot in case of single slot
  - ASoC: tas2770: Fix set_tdm_slot in case of single slot
  - ASoC: core: Fix use-after-free in snd_soc_exit()
  - spi: stm32: Print summary 'callbacks suppressed' message
  - drm/amdgpu: disable BACO on special BEIGE_GOBY card
  - drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid cards
  - drm/amd/pm: Read BIF STRAP also for BACO check
  - drm/amd/pm: support power source switch on Sienna Cichlid
  - mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA
  - spi: intel: Use correct mask for flash and protected regions
  - mtd: spi-nor: intel-spi: Disable write protection only if asked
  - ALSA: hda/realtek: fix speakers and micmute on HP 855 G8
  - ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -> "Source", "Routee" -> "Route"
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm
  - btrfs: remove pointless and double ulist frees in error paths of qgroup tests
  - drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid
  - i2c: i801: add lis3lv02d's I2C address for Vostro 5568
  - i2c: tegra: Allocate DMA memory for DMA engine
  - NFSv4: Retry LOCK on OLD_STATEID during delegation return
  - drm/amd/display: Remove wrong pipe control lock
  - ASoC: rt1308-sdw: add the default value of some registers
  - selftests/intel_pstate: fix build for ARCH=x86_64
  - selftests/futex: fix build for clang
  - ASoC: codecs: jz4725b: fix capture selector naming
  - ASoC: codecs: jz4725b: use right control for Capture Volume
  - ASoC: codecs: jz4725b: fix reported volume for Master ctl
  - ASoC: codecs: jz4725b: add missed Line In power control bit
  - spi: intel: Fix the offset to get the 64K erase opcode
  - ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK
  - ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe
  - ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe"
  - ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe"
  - ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe"
  - block: don't set GD_NEED_PART_SCAN if scan partition failed
  - dm stats: check for and propagate alloc_percpu failure
  - dm: don't lock fs when the map is NULL during suspend or resume
  - dm: don't lock fs when the map is NULL in process of resume
  - dm: requeue IO if mapping table not yet available
  - Revert "dm: make sure dm_table is binded before queue request"
  - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
  - dm thin: fix deadlock when swapping to thin device


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.22.0.98
changelog:
  - !1704 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
  - !1700 vfio-pci: Match specific devices with vendor id and device id
  - !1676 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
  - netfilter: nft_set_pipapo: fix improper element removal
  - vfio-pci: Match specific devices with vendor id and device id
  - Revert "vfio-pci: Match specific devices with vendor id and device id"
  - !1651 Fix missing dealloc_dfx_cnt() during device unregister
  - !1643 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
  - !1645 [sync] PR-1605:  CVE-2023-38430
  - ksmbd: fix out-of-bound read in deassemble_neg_contexts()
  - RDMA/hns: Fix missing dealloc_dfx_cnt() during device unregister
  - ksmbd: validate smb request protocol id
  - ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
  - ksmbd: allocate one more byte for implied bcc[0]


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.23.0.99
changelog:
  - !1758 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
  - !1765 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
  - !1670 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
  - Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
  - !1755 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
  - cxgb4: fix use after free bugs caused by circular dependency problem
  - !1746 [sync] PR-1727:  add support for timer_shutdown() api
  - !1733 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
  - !1620 [sync] PR-1578: Backport 5.10.160 - 5.10.162 LTS patches from upstream.
  - ksmbd: fix out of bounds read in smb2_sess_setup
  - timers: Keep del_timer[_sync]() exported
  - timers: Provide timer_shutdown[_sync]()
  - timers: Add shutdown mechanism to the internal functions
  - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
  - timers: Silently ignore timers with a NULL function
  - timers: Rename del_timer() to timer_delete()
  - timers: Rename del_timer_sync() to timer_delete_sync()
  - timers: Use del_timer_sync() even on UP
  - timers: Update kernel-doc for various functions
  - timers: Replace BUG_ON()s
  - timers: Get rid of del_singleshot_timer_sync()
  - sw64: Do not use timer namespace for timer_shutdown() function
  - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
  - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
  - ARM: spear: Do not use timer namespace for timer_shutdown() function
  - !1716 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
  - !1634 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
  - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
  - xfrm: add NULL check in xfrm_update_ae_params
  - media: usb: siano: Fix warning due to null work_func_t function pointer
  - media: usb: siano: Fix use after free bugs caused by do_submit_urb
  - net: nfc: Fix use-after-free caused by nfc_llcp_find_local
  - nfc: llcp: simplify llcp_sock_connect() error paths
  - io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups
  - eventfd: provide a eventfd_signal_mask() helper
  - eventpoll: add EPOLL_URING_WAKE poll wakeup flag
  - Revert "proc: don't allow async path resolution of /proc/self components"
  - Revert "proc: don't allow async path resolution of /proc/thread-self components"
  - task_work: unconditionally run task_work from get_signal()
  - signal: kill JOBCTL_TASK_WORK
  - kernel: stop masking signals in create_io_thread()
  - entry/kvm: Exit to user mode when TIF_NOTIFY_SIGNAL is set
  - kernel: allow fork with TIF_NOTIFY_SIGNAL pending
  - task_work: remove legacy TWA_SIGNAL path
  - alpha: fix TIF_NOTIFY_SIGNAL handling
  - ARC: unbork 5.11 bootup: fix snafu in _TIF_NOTIFY_SIGNAL handling
  - ia64: don't call handle_signal() unless there's actually a signal queued
  - sparc: add support for TIF_NOTIFY_SIGNAL
  - nds32: add support for TIF_NOTIFY_SIGNAL
  - ia64: add support for TIF_NOTIFY_SIGNAL
  - h8300: add support for TIF_NOTIFY_SIGNAL
  - c6x: add support for TIF_NOTIFY_SIGNAL
  - alpha: add support for TIF_NOTIFY_SIGNAL
  - xtensa: add support for TIF_NOTIFY_SIGNAL
  - microblaze: add support for TIF_NOTIFY_SIGNAL
  - hexagon: add support for TIF_NOTIFY_SIGNAL
  - csky: add support for TIF_NOTIFY_SIGNAL
  - openrisc: add support for TIF_NOTIFY_SIGNAL
  - sh: add support for TIF_NOTIFY_SIGNAL
  - um: add support for TIF_NOTIFY_SIGNAL
  - s390: add support for TIF_NOTIFY_SIGNAL
  - mips: add support for TIF_NOTIFY_SIGNAL
  - parisc: add support for TIF_NOTIFY_SIGNAL
  - nios32: add support for TIF_NOTIFY_SIGNAL
  - m68k: add support for TIF_NOTIFY_SIGNAL
  - arc: add support for TIF_NOTIFY_SIGNAL
  - task_work: Use TIF_NOTIFY_SIGNAL if available
  - tools headers UAPI: Sync openat2.h with the kernel sources
  - saner calling conventions for unlazy_child()
  - net: loopback: use NET_NAME_PREDICTABLE for name_assign_type
  - HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk
  - HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10
  - HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch 10E
  - HID: ite: Add support for Acer S1002 keyboard-dock
  - igb: Initialize mailbox message for VF reset
  - xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N
  - USB: serial: f81534: fix division by zero on line-speed change
  - USB: serial: f81232: fix division by zero on line-speed change
  - USB: serial: cp210x: add Kamstrup RF sniffer PIDs
  - USB: serial: option: add Quectel EM05-G modem
  - usb: gadget: uvc: Prevent buffer overflow in setup handler
  - udf: Fix extending file within last block
  - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size
  - udf: Fix preallocation discarding at indirect extent boundary
  - udf: Discard preallocation before extending file with a hole
  - ASoC: ops: Correct bounds check for second channel on SX controls
  - nvme-pci: clear the prp2 field when not used
  - ASoC: cs42l51: Correct PGA Volume minimum value
  - can: mcba_usb: Fix termination command argument
  - can: sja1000: fix size of OCR_MODE_MASK define
  - pinctrl: meditatek: Startup with the IRQs disabled
  - libbpf: Use page size as max_entries when probing ring buffer map
  - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()
  - ASoC: fsl_micfil: explicitly clear CHnF flags
  - ASoC: fsl_micfil: explicitly clear software reset bit
  - fuse: always revalidate if exclusive create
  - vfs: fix copy_file_range() averts filesystem freeze protection
  - vfs: fix copy_file_range() regression in cross-fs copies
  - x86/smpboot: Move rcu_cpu_starting() earlier


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.24.0.100
changelog:
  - !1837 [sync] PR-1814:  fix CVE-2023-20593 for openEuler
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
  - x86/cpu/amd: Add a Zenbleed fix
  - x86/cpu/amd: Move the errata checking functionality up
  - !1790 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
  - mm: disable kernelcore=mirror when no mirror memory
  - !1777 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.25.0.101
changelog:
  - !1893 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
  - !1887 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - !1868 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
  - !1782 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
  - !1890 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
  - !1908  fix build error when setting CONFIG_HISI_PMU=y
  - drivers/perf: hisi: Add support for HiSilicon UC PMU driver
  - drivers/perf: hisi: Add support for HiSilicon H60PA and PAv3 PMU driver
  - Revert "drivers/perf: hisi: Add support for HiSilicon H60PA and PAv3 PMU driver"
  - Revert "drivers/perf: hisi: Add support for HiSilicon UC PMU driver"
  - Revert "perf: hisi: delete global enable pmu from xxx_write_counter()"
  - net: tap_open(): set sk_uid from current_fsuid()
  - net: tun_chr_open(): set sk_uid from current_fsuid()
  - tcp: Reduce chance of collisions in inet6_hashfn().
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - !1798 Backport 5.10.163 LTS patches from upstream
  - nbd: pass nbd_sock to nbd_read_reply() instead of index
  - !1829 [sync] PR-1813:  ksmbd: fix cve-2023-38432
  - ALSA: hda - Enable headset mic on another Dell laptop with ALC3254
  - ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list
  - mptcp: use proper req destructor for IPv6
  - mptcp: dedicated request sock for subflow in v6
  - mptcp: remove MPTCP 'ifdef' in TCP SYN cookies
  - mptcp: mark ops structures as ro_after_init
  - serial: fixup backport of "serial: Deassert Transmit Enable on probe in driver-specific way"
  - fsl_lpuart: Don't enable interrupts too early
  - ext4: don't set up encryption key during jbd2 transaction
  - ext4: disable fast-commit of encrypted dir operations
  - parisc: Align parisc MADV_XXX constants with all other architectures
  - io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res()
  - efi: random: combine bootloader provided RNG seed with RNG protocol output
  - mbcache: Avoid nesting of cache->c_list_lock under bit locks
  - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling
  - hfs/hfsplus: use WARN_ON for sanity check
  - selftests: set the BUILD variable to absolute path
  - ext4: don't allow journal inode to have encrypt flag
  - drm/i915/gvt: fix vgpu debugfs clean in remove
  - drm/i915/gvt: fix gvt debugfs destroy
  - riscv: uaccess: fix type of 0 variable on error in get_user()
  - fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB
  - nfsd: fix handling of readdir in v4root vs. mount upcall timeout
  - nvme: fix multipath crash caused by flush request when blktrace is enabled
  - ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet
  - udf: Fix extension of the last extent in the file
  - caif: fix memory leak in cfctrl_linkup_request()
  - drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()
  - usb: rndis_host: Secure rndis_query check against int overflow
  - drivers/net/bonding/bond_3ad: return when there's no aggregator
  - perf tools: Fix resources leak in perf_data__open_dir()
  - netfilter: ipset: Rework long task execution when adding/deleting entries
  - netfilter: ipset: fix hash:net,port,net hang with /0 subnet
  - gpio: sifive: Fix refcount leak in sifive_gpio_probe
  - ceph: switch to vfs_inode_has_locks() to fix file lock bug
  - filelock: new helper: vfs_inode_has_locks
  - drm/meson: Reduce the FIFO lines held when AFBC is not used
  - RDMA/mlx5: Fix validation of max_rd_atomic caps for DC
  - net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
  - net: amd-xgbe: add missed tasklet_kill
  - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation
  - net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default
  - net/mlx5: Avoid recovery in probe flows
  - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path
  - vhost: fix range used in translate_desc()
  - vringh: fix range used in iotlb_translate()
  - vhost/vsock: Fix error handling in vhost_vsock_init()
  - nfc: Fix potential resource leaks
  - qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure
  - nfsd: shut down the NFSv4 state objects before the filecache
  - veth: Fix race with AF_XDP exposing old or uninitialized descriptors
  - vmxnet3: correctly report csum_level for encapsulated packet
  - drm/panfrost: Fix GEM handle creation ref-counting
  - bpf: pull before calling skb_postpull_rcsum()
  - SUNRPC: ensure the matching upcall is in-flight upon downcall
  - ext4: fix deadlock due to mbcache entry corruption
  - mbcache: automatically delete entries from cache on freeing
  - ext4: use kmemdup() to replace kmalloc + memcpy
  - ext4: fix leaking uninitialized memory in fast-commit journal
  - ext4: fix various seppling typos
  - fs: ext4: initialize fsdata in pagecache_write()
  - ext4: use memcpy_to_page() in pagecache_write()
  - mm/highmem: Lift memcpy_[to|from]_page to core
  - ext4: correct inconsistent error msg in nojournal mode
  - ext4: goto right label 'failed_mount3a'
  - riscv: stacktrace: Fixup ftrace_graph_ret_addr retp argument
  - riscv/stacktrace: Fix stack output without ra on the stack top
  - ravb: Fix "failed to switch device to config mode" message during unbind
  - staging: media: tegra-video: fix device_node use after free
  - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK
  - x86/kprobes: Convert to insn_decode()
  - perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data
  - perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor
  - media: s5p-mfc: Fix in register read and write for H264
  - media: s5p-mfc: Clear workbit to handle error condition
  - media: s5p-mfc: Fix to handle reference queue during finishing
  - x86/MCE/AMD: Clear DFR errors found in THR handler
  - x86/mce: Get rid of msr_ops
  - btrfs: replace strncpy() with strscpy()
  - perf/x86/intel/uncore: Clear attr_update properly
  - perf/x86/intel/uncore: Generalize I/O stacks to PMON mapping procedure
  - ARM: renumber bits related to _TIF_WORK_MASK
  - drm/amdgpu: make display pinning more flexible (v2)
  - drm/amdgpu: handle polaris10/11 overlap asics (v2)
  - ext4: allocate extended attribute value in vmalloc area
  - ext4: avoid unaccounted block allocation when expanding inode
  - ext4: initialize quota before expanding inode in setproject ioctl
  - ext4: fix inode leak in ext4_xattr_inode_create() on an error path
  - ext4: avoid BUG_ON when creating xattrs
  - ext4: fix error code return to user-space in ext4_get_branch()
  - ext4: fix corruption when online resizing a 1K bigalloc fs
  - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline
  - ext4: init quota for 'old.inode' in 'ext4_rename'
  - ext4: check and assert if marking an no_delete evicting inode dirty
  - ext4: fix reserved cluster accounting in __es_remove_extent()
  - ext4: fix undefined behavior in bit shift for ext4_check_flag_values
  - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop
  - ext4: silence the warning when evicting inode with dioread_nolock
  - drm/ingenic: Fix missing platform_driver_unregister() call in ingenic_drm_init()
  - drm/i915/dsi: fix VBT send packet port selection for dual link DSI
  - drm/connector: send hotplug uevent on connector cleanup
  - device_cgroup: Roll back to original exceptions after copy failure
  - parisc: led: Fix potential null-ptr-deref in start_task()
  - remoteproc: core: Do pm_relax when in RPROC_OFFLINE state
  - iommu/amd: Fix ivrs_acpihid cmdline parsing code
  - driver core: Fix bus_type.match() error handling in __driver_attach()
  - crypto: n2 - add missing hash statesize
  - PCI/sysfs: Fix double free in error path
  - PCI: Fix pci_device_is_present() for VFs by checking PF
  - ipmi: fix use after free in _ipmi_destroy_user()
  - mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type()
  - ipmi: fix long wait in unload when IPMI disconnect
  - ASoC: jz4740-i2s: Handle independent FIFO flush bits
  - wifi: wilc1000: sdio: fix module autoloading
  - efi: Add iMac Pro 2017 to uefi skip cert quirk
  - md/bitmap: Fix bitmap chunk size overflow issues
  - rtc: ds1347: fix value written to century register
  - cifs: fix missing display of three mount options
  - cifs: fix confusing debug message
  - media: dvb-core: Fix double free in dvb_register_device()
  - ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod
  - staging: media: tegra-video: fix chan->mipi value on error
  - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line
  - tracing/hist: Fix wrong return value in parse_action_params()
  - x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK
  - ftrace/x86: Add back ftrace_expected for ftrace bug reports
  - perf/core: Call LSM hook after copying perf_event_attr
  - tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx'
  - dm cache: set needs_check flag after aborting metadata
  - dm cache: Fix UAF in destroy()
  - dm clone: Fix UAF in clone_dtr()
  - dm integrity: Fix UAF in dm_integrity_dtr()
  - dm thin: Fix UAF in run_timer_softirq()
  - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort
  - ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops
  - ALSA: patch_realtek: Fix Dell Inspiron Plus 16
  - cpufreq: Init completion before kobject_init_and_add()
  - PM/devfreq: governor: Add a private governor_data for governor
  - selftests: Use optional USERCFLAGS and USERLDFLAGS
  - arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength
  - ARM: ux500: do not directly dereference __iomem
  - btrfs: fix resolving backrefs for inline extent followed by prealloc
  - mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K
  - arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength
  - jbd2: use the correct print format
  - ktest.pl minconfig: Unset configs instead of just removing them
  - kest.pl: Fix grub2 menu handling for rebooting
  - soc: qcom: Select REMAP_MMIO for LLCC driver
  - media: stv0288: use explicitly signed char
  - rcu: Prevent lockdep-RCU splats on lock acquisition/release
  - torture: Exclude "NOHZ tick-stop error" from fatal errors
  - wifi: rtlwifi: 8192de: correct checking of IQK reload
  - wifi: rtlwifi: remove always-true condition pointed out by GCC 12
  - net/mlx5e: Fix nullptr in mlx5e_tc_add_fdb_flow()
  - ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire
  - ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio
  - kcsan: Instrument memcpy/memset/memmove with newer Clang
  - SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
  - tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak
  - tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
  - tpm: acpi: Call acpi_put_table() to fix memory leak
  - mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING
  - f2fs: should put a page when checking the summary info
  - mm, compaction: fix fast_isolate_around() to stay within boundaries
  - md: fix a crash in mempool_free
  - pnode: terminate at peers of source
  - ALSA: line6: fix stack overflow in line6_midi_transmit
  - ALSA: line6: correct midi status byte when receiving data from podxt
  - ovl: Use ovl mounter's fsuid and fsgid in ovl_link()
  - binfmt: Fix error return code in load_elf_fdpic_binary()
  - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount
  - pstore/zone: Use GFP_ATOMIC to allocate zone buffer
  - HID: plantronics: Additional PIDs for double volume key presses quirk
  - HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint
  - powerpc/rtas: avoid scheduling in rtas_os_term()
  - powerpc/rtas: avoid device tree lookups in rtas_os_term()
  - objtool: Fix SEGFAULT
  - nvmet: don't defer passthrough commands with trivial effects to the workqueue
  - nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition
  - ata: ahci: Fix PCS quirk application for suspend
  - nvme-pci: fix page size checks
  - nvme-pci: fix mempool alloc size
  - nvme-pci: fix doorbell buffer value endianness
  - ksmbd: validate command request size
  - ksmbd: validate command payload size
  - cifs: fix oops during encryption
  - usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init
  - pwm: tegra: Fix 32 bit build
  - media: dvbdev: fix refcnt bug
  - media: dvbdev: fix build warning due to comments
  - gcov: add support for checksum field
  - regulator: core: fix deadlock on regulator enable
  - iio: adc128s052: add proper .data members in adc128_of_match table
  - iio: adc: ad_sigma_delta: do not use internal iio_dev lock
  - reiserfs: Add missing calls to reiserfs_security_free()
  - HID: mcp2221: don't connect hidraw
  - HID: wacom: Ensure bootloader PID is usable in hidraw mode
  - usb: dwc3: core: defer probe on ulpi_read_id timeout
  - usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode
  - ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list
  - ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB
  - ALSA: usb-audio: add the quirk for KT0206 device
  - pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES
  - afs: Fix lost servers_outstanding count
  - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option()
  - pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion
  - LoadPin: Ignore the "contents" argument of the LSM hooks
  - ASoC: rt5670: Remove unbalanced pm_runtime_put()
  - ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume()
  - ASoC: wm8994: Fix potential deadlock
  - ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume()
  - ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link()
  - ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe()
  - ASoC: Intel: Skylake: Fix driver hang during shutdown
  - ALSA: hda: add snd_hdac_stop_streams() helper
  - ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c
  - hwmon: (jc42) Fix missing unlock on error in jc42_write()
  - orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()
  - orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()
  - drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid()
  - drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid()
  - hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
  - clk: st: Fix memory leak in st_of_quadfs_setup()
  - media: si470x: Fix use-after-free in si470x_int_in_callback()
  - mmc: renesas_sdhi: better reset from HS400 mode
  - mmc: f-sdh30: Add quirks for broken timeout clock capability
  - regulator: core: fix use_count leakage when handling boot-on
  - libbpf: Avoid enum forward-declarations in public API in C++ mode
  - blk-mq: fix possible memleak when register 'hctx' failed
  - media: dvb-usb: fix memory leak in dvb_usb_adapter_init()
  - media: dvbdev: adopts refcnt to avoid UAF
  - media: dvb-frontends: fix leak of memory fw
  - ethtool: avoiding integer overflow in ethtool_phys_id()
  - mrp: introduce active flags to prevent UAF when applicant uninit
  - drm/amd/display: fix array index out of bound error in bios parser
  - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()
  - drm/sti: Use drm_mode_copy()
  - drm/rockchip: Use drm_mode_copy()
  - drm/msm: Use drm_mode_copy()
  - s390/lcs: Fix return type of lcs_start_xmit()
  - s390/netiucv: Fix return type of netiucv_tx()
  - s390/ctcm: Fix return type of ctc{mp,}m_tx()
  - drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback
  - drm/amdgpu: Fix type of second parameter in trans_msg() callback
  - igb: Do not free q_vector unless new one was allocated
  - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request()
  - hamradio: baycom_epp: Fix return type of baycom_send_packet()
  - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit()
  - qed (gcc13): use u16 for fid to be big enough
  - ipmi: fix memleak when unload ipmi driver
  - ASoC: codecs: rt298: Add quirk for KBL-R RVP platform
  - wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
  - wifi: ath9k: verify the expected usb_endpoints are present
  - brcmfmac: return error when getting invalid max_flowrings from dongle
  - drm/etnaviv: add missing quirks for GC300
  - hfs: fix OOB Read in __hfs_brec_find
  - acct: fix potential integer overflow in encode_comp_t()
  - nilfs2: fix shift-out-of-bounds due to too large exponent of block size
  - nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()
  - ACPICA: Fix error code path in acpi_ds_call_control_method()
  - fs: jfs: fix shift-out-of-bounds in dbDiscardAG
  - udf: Avoid double brelse() in udf_rename()
  - fs: jfs: fix shift-out-of-bounds in dbAllocAG
  - binfmt_misc: fix shift-out-of-bounds in check_special_flags
  - x86/hyperv: Remove unregister syscore call from Hyper-V cleanup
  - video: hyperv_fb: Avoid taking busy spinlock on panic path
  - arm64: make is_ttbrX_addr() noinstr-safe
  - rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state()
  - net: stream: purge sk_error_queue in sk_stream_kill_queues()
  - myri10ge: Fix an error handling path in myri10ge_probe()
  - rxrpc: Fix missing unlock in rxrpc_do_sendmsg()
  - net_sched: reject TCF_EM_SIMPLE case for complex ematch module
  - mailbox: zynq-ipi: fix error handling while device_register() fails
  - skbuff: Account for tail adjustment during pull operations
  - openvswitch: Fix flow lookup to use unmasked key
  - selftests: devlink: fix the fd redirect in dummy_reporter_test
  - rtc: mxc_v2: Add missing clk_disable_unprepare()
  - igc: Set Qbv start_time and end_time to end_time if not being configured in GCL
  - igc: Lift TAPRIO schedule restriction
  - igc: recalculate Qbv end_time by considering cycle time
  - igc: Add checking for basetime less than zero
  - igc: Use strict cycles for Qbv scheduling
  - igc: Enhance Qbv scheduling by using first flag bit
  - net: add a helper to avoid issues with HW TX timestamping and SO_TXTIME
  - r6040: Fix kmemleak in probe and remove
  - nfc: pn533: Clear nfc_target before being used
  - mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()
  - mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()
  - mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()
  - net: macsec: fix net device access prior to holding a lock
  - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure
  - NFSD: Remove spurious cb_setup_err tracepoint
  - rtc: pcf85063: fix pcf85063_clkout_control
  - rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe()
  - rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe()
  - netfilter: flowtable: really fix NAT IPv6 offload
  - powerpc/pseries/eeh: use correct API for error log size
  - powerpc/eeh: Drop redundant spinlock initialization
  - remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region()
  - remoteproc: qcom_q6v5_pas: detach power domains on remove
  - remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove
  - remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev()
  - pwm: sifive: Call pwm_sifive_update_clock() while mutex is held
  - iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY
  - selftests/powerpc: Fix resource leaks
  - powerpc/hv-gpci: Fix hv_gpci event list
  - powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe()
  - powerpc/perf: callchain validate kernel stack pointer bounds
  - kbuild: refactor single builds of *.ko
  - kbuild: unify modules(_install) for in-tree and external modules
  - kbuild: remove unneeded mkdir for external modules_install
  - powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data()
  - powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds
  - powerpc/xmon: Enable breakpoints on 8xx
  - cxl: Fix refcount leak in cxl_calc_capp_routing
  - powerpc/52xx: Fix a resource leak in an error handling path
  - macintosh/macio-adb: check the return value of ioremap()
  - macintosh: fix possible memory leak in macio_add_one_device()
  - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
  - iommu/amd: Fix pci device refcount leak in ppr_notifier()
  - rtc: pcf85063: Fix reading alarm
  - rtc: snvs: Allow a time difference on clock register read
  - rtc: cmos: Disable ACPI RTC event on removal
  - rtc: cmos: Rename ACPI-related functions
  - rtc: cmos: Eliminate forward declarations of some functions
  - rtc: cmos: Call rtc_wake_setup() from cmos_do_probe()
  - rtc: cmos: Call cmos_wake_setup() from cmos_do_probe()
  - rtc: cmos: fix build on non-ACPI platforms
  - rtc: cmos: Fix wake alarm breakage
  - rtc: cmos: Fix event handler registration ordering issue
  - rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0
  - pwm: tegra: Improve required rate calculation
  - include/uapi/linux/swab: Fix potentially missing __always_inline
  - phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices
  - iommu/sun50i: Fix flush size
  - iommu/sun50i: Fix R/W permission check
  - iommu/sun50i: Consider all fault sources for reset
  - iommu/sun50i: Fix reset release
  - RDMA/siw: Fix pointer cast warning
  - power: supply: fix null pointer dereferencing in power_supply_get_battery_info
  - HSI: omap_ssi_core: Fix error handling in ssi_init()
  - perf symbol: correction while adjusting symbol
  - perf trace: Handle failure when trace point folder is missed
  - perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number
  - perf trace: Return error if a system call doesn't exist
  - power: supply: fix residue sysfs file in error handle route of __power_supply_register()
  - HSI: omap_ssi_core: fix possible memory leak in ssi_probe()
  - HSI: omap_ssi_core: fix unbalanced pm_runtime_disable()
  - fbdev: uvesafb: Fixes an error handling path in uvesafb_probe()
  - fbdev: vermilion: decrease reference count in error path
  - fbdev: via: Fix error in via_core_init()
  - fbdev: pm2fb: fix missing pci_disable_device()
  - fbdev: ssd1307fb: Drop optional dependency
  - thermal/drivers/imx8mm_thermal: Validate temperature range
  - samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe()
  - tracing/hist: Fix issue of losting command info in error_log
  - usb: storage: Add check for kcalloc
  - i2c: mux: reg: check return value after calling platform_get_resource()
  - gpiolib: cdev: fix NULL-pointer dereferences
  - gpiolib: Get rid of redundant 'else'
  - vme: Fix error not catched in fake_init()
  - staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor()
  - staging: rtl8192u: Fix use after free in ieee80211_rx()
  - i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe
  - chardev: fix error handling in cdev_device_add()
  - mcb: mcb-parse: fix error handing in chameleon_parse_gdd()
  - drivers: mcb: fix resource leak in mcb_probe()
  - usb: gadget: f_hid: fix refcount leak on error path
  - usb: gadget: f_hid: fix f_hidg lifetime vs cdev
  - usb: gadget: f_hid: optional SETUP/SET_REPORT mode
  - usb: roles: fix of node refcount leak in usb_role_switch_is_parent()
  - counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update
  - iio: adis: add '__adis_enable_irq()' implementation
  - iio:imu:adis: Move exports into IIO_ADISLIB namespace
  - iio: adis: stylistic changes
  - iio: adis: handle devices that cannot unmask the drdy pin
  - iio:imu:adis: Use IRQF_NO_AUTOEN instead of irq request then disable
  - iio: temperature: ltc2983: make bulk write buffer DMA-safe
  - cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()
  - cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()
  - firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()
  - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media()
  - ocxl: fix pci device refcount leak when calling get_function_0()
  - misc: ocxl: fix possible name leak in ocxl_file_register_afu()
  - test_firmware: fix memory leak in test_firmware_init()
  - serial: sunsab: Fix error handling in sunsab_init()
  - serial: altera_uart: fix locking in polling mode
  - tty: serial: altera_uart_{r,t}x_chars() need only uart_port
  - tty: serial: clean up stop-tx part in altera_uart_tx_chars()
  - serial: pch: Fix PCI device refcount leak in pch_request_dma()
  - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle.
  - serial: amba-pl011: avoid SBSA UART accessing DMACR register
  - usb: typec: tipd: Fix spurious fwnode_handle_put in error path
  - usb: typec: tcpci: fix of node refcount leak in tcpci_register_port()
  - usb: typec: Check for ops->exit instead of ops->enter in altmode_exit
  - staging: vme_user: Fix possible UAF in tsi148_dma_list_add
  - usb: fotg210-udc: Fix ages old endianness issues
  - uio: uio_dmem_genirq: Fix deadlock between irq config and handling
  - uio: uio_dmem_genirq: Fix missing unlock in irq configuration
  - vfio: platform: Do not pass return buffer to ACPI _RST method
  - class: fix possible memory leak in __class_register()
  - serial: tegra: Read DMA status before terminating
  - drivers: dio: fix possible memory leak in dio_init()
  - IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces
  - hwrng: geode - Fix PCI device refcount leak
  - hwrng: amd - Fix PCI device refcount leak
  - crypto: img-hash - Fix variable dereferenced before check 'hdev->req'
  - orangefs: Fix sysfs not cleanup when dev init failed
  - RDMA/srp: Fix error return code in srp_parse_options()
  - RDMA/hfi1: Fix error return code in parse_platform_config()
  - riscv/mm: add arch hook arch_clear_hugepage_flags
  - crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe()
  - crypto: amlogic - Remove kcalloc without check
  - RDMA/nldev: Fix failure to send large messages
  - f2fs: avoid victim selection from previous victim section
  - RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps()
  - scsi: snic: Fix possible UAF in snic_tgt_create()
  - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails
  - scsi: ipr: Fix WARNING in ipr_init()
  - scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper()
  - scsi: fcoe: Fix possible name leak when device_register() fails
  - scsi: scsi_debug: Fix a warning in resp_report_zones()
  - scsi: scsi_debug: Fix a warning in resp_verify()
  - scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device()
  - scsi: hpsa: Fix error handling in hpsa_add_sas_host()
  - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()
  - padata: Fix list iterator in padata_do_serial()
  - padata: Always leave BHs disabled when running ->parallel()
  - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak
  - scsi: hpsa: Fix possible memory leak in hpsa_init_one()
  - RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed
  - crypto: ccree - Make cc_debugfs_global_fini() available for module init function
  - RDMA/hfi: Decrease PCI device reference count in error path
  - PCI: Check for alloc failure in pci_request_irq()
  - crypto: cryptd - Use request context instead of stack for sub-request
  - crypto: ccree - Remove debugfs when platform_driver_register failed
  - scsi: scsi_debug: Fix a warning in resp_write_scat()
  - RDMA/siw: Set defined status for work completion with undefined status
  - RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port
  - RDMA/siw: Fix immediate work request flush to completion queue
  - f2fs: fix normal discard process
  - apparmor: Fix memleak in alloc_ns()
  - crypto: rockchip - rework by using crypto_engine
  - crypto: rockchip - delete unneeded variable initialization
  - crypto: rockchip - remove non-aligned handling
  - crypto: rockchip - better handle cipher key
  - crypto: rockchip - add fallback for ahash
  - crypto: rockchip - add fallback for cipher
  - crypto: rockchip - do not store mode globally
  - crypto: rockchip - do not do custom power management
  - f2fs: Fix the race condition of resize flag between resizefs
  - PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled
  - RDMA/core: Fix order of nldev_exit call
  - PCI: dwc: Fix n_fts[] array overrun
  - apparmor: Use pointer to struct aa_label for lbs_cred
  - scsi: core: Fix a race between scsi_done() and scsi_timeout()
  - crypto: nitrox - avoid double free on error path in nitrox_sriov_init()
  - crypto: sun8i-ss - use dma_addr instead u32
  - apparmor: Fix abi check to include v8 abi
  - apparmor: fix lockdep warning when removing a namespace
  - apparmor: fix a memleak in multi_transaction_new()
  - stmmac: fix potential division by 0
  - Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave()
  - sctp: sysctl: make extra pointers netns aware
  - ntb_netdev: Use dev_kfree_skb_any() in interrupt context
  - net: lan9303: Fix read error execution path
  - can: tcan4x5x: Remove invalid write in clear_interrupts
  - net: amd-xgbe: Check only the minimum speed for active/passive cables
  - net: amd-xgbe: Fix logic around active and passive cables
  - net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave()
  - hamradio: don't call dev_kfree_skb() under spin_lock_irqsave()
  - net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave()
  - net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave()
  - net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave()
  - net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave()
  - net/tunnel: wait until all sk_user_data reader finish before releasing the sock
  - net: farsync: Fix kmemleak when rmmods farsync
  - ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave()
  - of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
  - drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()
  - net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload()
  - net: defxx: Fix missing err handling in dfx_init()
  - net: vmw_vsock: vmci: Check memcpy_from_msg()
  - clk: socfpga: Fix memory leak in socfpga_gate_init()
  - clk: socfpga: use clk_hw_register for a5/c5
  - clk: socfpga: clk-pll: Remove unused variable 'rc'
  - blktrace: Fix output non-blktrace event when blk_classic option enabled
  - wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware()
  - wifi: rtl8xxxu: Fix the channel width reporting
  - wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h
  - spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode
  - clk: samsung: Fix memory leak in _samsung_clk_register_pll()
  - media: coda: Add check for kmalloc
  - media: coda: Add check for dcoda_iram_alloc
  - media: c8sectpfe: Add of_node_put() when breaking out of loop
  - mmc: mmci: fix return value check of mmc_add_host()
  - mmc: wbsd: fix return value check of mmc_add_host()
  - mmc: via-sdmmc: fix return value check of mmc_add_host()
  - mmc: meson-gx: fix return value check of mmc_add_host()
  - mmc: omap_hsmmc: fix return value check of mmc_add_host()
  - mmc: atmel-mci: fix return value check of mmc_add_host()
  - mmc: wmt-sdmmc: fix return value check of mmc_add_host()
  - mmc: vub300: fix return value check of mmc_add_host()
  - mmc: toshsd: fix return value check of mmc_add_host()
  - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host()
  - mmc: pxamci: fix return value check of mmc_add_host()
  - mmc: mxcmmc: fix return value check of mmc_add_host()
  - mmc: moxart: fix return value check of mmc_add_host()
  - mmc: alcor: fix return value check of mmc_add_host()
  - NFSv4.x: Fail client initialisation if state manager thread can't run
  - SUNRPC: Fix missing release socket in rpc_sockname()
  - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()
  - ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt
  - media: saa7164: fix missing pci_disable_device()
  - ALSA: pcm: Set missing stop_operating flag at undoing trigger start
  - hwmon: (jc42) Restore the min/max/critical temperatures on resume
  - hwmon: (jc42) Convert register access and caching to regmap/regcache
  - regulator: core: fix resource leak in regulator_register()
  - configfs: fix possible memory leak in configfs_create_dir()
  - hsr: Synchronize sequence number updates.
  - hsr: Synchronize sending frames to have always incremented outgoing seq nr.
  - hsr: Disable netpoll.
  - net: hsr: generate supervision frame without HSR/PRP tag
  - hsr: Add a rcu-read lock to hsr_forward_skb().
  - clk: qcom: clk-krait: fix wrong div2 functions
  - regulator: core: fix module refcount leak in set_supply()
  - wifi: mt76: fix coverity overrun-call in mt76_get_txpower()
  - wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails
  - wifi: mac80211: fix memory leak in ieee80211_if_add()
  - spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE
  - bonding: uninitialized variable in bond_miimon_inspect()
  - netfilter: conntrack: set icmpv6 redirects as RELATED
  - ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe
  - drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios()
  - drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()
  - drm/amd/pm/smu11: BACO is supported when it's in BACO state
  - ASoC: mediatek: mt8173: Enable IRQ when pdata is ready
  - ASoC: mediatek: mt8173: Fix debugfs registration for components
  - wifi: iwlwifi: mvm: fix double free on tx path.
  - ALSA: asihpi: fix missing pci_disable_device()
  - NFS: Fix an Oops in nfs_d_automount()
  - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn
  - NFSv4.2: Fix initialisation of struct nfs4_label
  - NFSv4.2: Fix a memory stomp in decode_attr_security_label
  - NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding
  - ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd
  - ASoC: dt-bindings: wcd9335: fix reset line polarity in example
  - drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe()
  - media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC
  - media: dvb-core: Fix ignored return value in dvb_register_frontend()
  - pinctrl: pinconf-generic: add missing of_node_put()
  - clk: imx: replace osc_hdmi with dummy
  - media: imon: fix a race condition in send_packet()
  - media: vimc: Fix wrong function called when vimc_init() fails
  - ASoC: qcom: Add checks for devm_kcalloc
  - drbd: fix an invalid memory access caused by incorrect use of list iterator
  - mtd: maps: pxa2xx-flash: fix memory leak in probe
  - bonding: fix link recovery in mode 2 when updelay is nonzero
  - drm/amdgpu: fix pci device refcount leak
  - clk: rockchip: Fix memory leak in rockchip_clk_register_pll()
  - regulator: core: use kfree_const() to free space conditionally
  - ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT
  - ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT
  - HID: hid-sensor-custom: set fixed size for custom attributes
  - bpf: Move skb->len == 0 checks into __bpf_redirect
  - inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict()
  - media: videobuf-dma-contig: use dma_mmap_coherent
  - media: platform: exynos4-is: Fix error handling in fimc_md_init()
  - media: solo6x10: fix possible memory leak in solo_sysfs_init()
  - media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init()
  - Input: elants_i2c - properly handle the reset GPIO when power is off
  - mtd: lpddr2_nvm: Fix possible null-ptr-deref
  - wifi: ath10k: Fix return value in ath10k_pci_init()
  - ima: Fix misuse of dereference of pointer in template_desc_init_fields()
  - integrity: Fix memory leakage in keyring allocation error path
  - drm/fourcc: Fix vsub/hsub for Q410 and Q401
  - drm/fourcc: Add packed 10bit YUV 4:2:0 format
  - amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()
  - regulator: core: fix unbalanced of node refcount in regulator_dev_lookup()
  - ASoC: pxa: fix null-pointer dereference in filter()
  - drm/mediatek: Modify dpi power on/off sequence.
  - drm/radeon: Add the missed acpi_put_table() to fix memory leak
  - rxrpc: Fix ack.bufferSize to be 0 when generating an ack
  - net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write()
  - media: camss: Clean up received buffers on failed start of streaming
  - wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port
  - Input: joystick - fix Kconfig warning for JOYSTICK_ADC
  - mtd: Fix device name leak when register device failed in add_mtd_device()
  - clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs
  - bpf: propagate precision across all frames, not just the last one
  - bpf: Check the other end of slot_type for STACK_SPILL
  - bpf: propagate precision in ALU/ALU64 operations
  - media: platform: exynos4-is: fix return value check in fimc_md_probe()
  - bpf: Fix slot type check in check_stack_write_var_off
  - drm/msm/hdmi: drop unused GPIO support
  - drm/msm/hdmi: switch to drm_bridge_connector
  - ima: Fix fall-through warnings for Clang
  - drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure
  - spi: Update reference to struct spi_controller
  - clk: renesas: r9a06g032: Repair grave increment error
  - drm/rockchip: lvds: fix PM usage counter unbalance in poweron
  - can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming
  - can: kvaser_usb: Add struct kvaser_usb_busparams
  - can: kvaser_usb_leaf: Fix bogus restart events
  - can: kvaser_usb_leaf: Fix wrong CAN state after stopping
  - can: kvaser_usb_leaf: Fix improved state not being reported
  - can: kvaser_usb_leaf: Set Warning state even without bus errors
  - can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT
  - can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event
  - can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device
  - can: kvaser_usb: do not increase tx statistics when sending error message frames
  - media: exynos4-is: don't rely on the v4l2_async_subdev internals
  - media: exynos4-is: Use v4l2_async_notifier_add_fwnode_remote_subdev
  - venus: pm_helpers: Fix error check in vcodec_domains_get()
  - media: i2c: ad5820: Fix error path
  - media: coda: jpeg: Add check for kmalloc
  - pata_ipx4xx_cf: Fix unsigned comparison with less than zero
  - drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge
  - wifi: rtl8xxxu: Fix reading the vendor of combo chips
  - wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb()
  - wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs()
  - rapidio: devices: fix missing put_device in mport_cdev_open
  - hfs: Fix OOB Write in hfs_asc2mac
  - relay: fix type mismatch when allocating memory in relay_create_buf()
  - eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD
  - rapidio: fix possible UAF when kfifo_alloc() fails
  - fs: sysv: Fix sysv_nblocks() returns wrong value
  - MIPS: OCTEON: warn only once if deprecated link status is being used
  - MIPS: BCM63xx: Add check for NULL for clk in clk_enable
  - platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register()
  - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]()
  - PM: runtime: Do not call __rpm_callback() from rpm_idle()
  - PM: runtime: Improve path in rpm_idle() when no callback
  - xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource()
  - x86/xen: Fix memory leak in xen_init_lock_cpu()
  - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}()
  - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix
  - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
  - clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock()
  - cpu/hotplug: Make target_store() a nop when target == state
  - futex: Resend potentially swallowed owner death notification
  - futex: Move to kernel/futex/
  - clocksource/drivers/sh_cmt: Access registers according to spec
  - clocksource/drivers/sh_cmt: Make sure channel clock supply is enabled
  - rapidio: rio: fix possible name leak in rio_register_mport()
  - rapidio: fix possible name leaks when rio_add_device() fails
  - ocfs2: fix memory leak in ocfs2_mount_volume()
  - ocfs2: rewrite error handling of ocfs2_fill_super
  - ocfs2: ocfs2_mount_volume does cleanup job before return error
  - debugfs: fix error when writing negative value to atomic_t debugfs file
  - docs: fault-injection: fix non-working usage of negative values
  - lib/notifier-error-inject: fix error when writing -errno to debugfs file
  - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value
  - cpufreq: amd_freq_sensitivity: Add missing pci_dev_put()
  - genirq/irqdesc: Don't try to remove non-existing sysfs files
  - nfsd: don't call nfsd_file_put from client states seqfile display
  - EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper()
  - irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe()
  - platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init()
  - perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box()
  - perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map()
  - perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox()
  - PNP: fix name memory leak in pnp_alloc_dev()
  - selftests/efivarfs: Add checking of the test return value
  - MIPS: vpe-cmp: fix possible memory leak while module exiting
  - MIPS: vpe-mt: fix possible memory leak while module exiting
  - ocfs2: fix memory leak in ocfs2_stack_glue_init()
  - lib/fonts: fix undefined behavior in bit shift for get_default_font
  - proc: fixup uptime selftest
  - timerqueue: Use rb_entry_safe() in timerqueue_getnext()
  - platform/x86: huawei-wmi: fix return value calculation
  - lib/debugobjects: fix stat count and optimize debug_objects_mem_init
  - perf: Fix possible memleak in pmu_dev_alloc()
  - selftests/ftrace: event_triggers: wait longer for test_event_enable
  - cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut()
  - fs: don't audit the capability check in simple_xattr_list()
  - PM: hibernate: Fix mistake in kerneldoc comment
  - alpha: fix syscall entry in !AUDUT_SYSCALL case
  - cpuidle: dt: Return the correct numbers of parsed idle states
  - sched/uclamp: Fix relationship between uclamp and migration margin
  - sched/fair: Cleanup task_util and capacity type
  - tpm/tpm_crb: Fix error message in __crb_relinquish_locality()
  - tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init()
  - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP
  - ARM: mmp: fix timer_read delay
  - pstore/ram: Fix error return code in ramoops_probe()
  - arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC
  - ARM: dts: turris-omnia: Add switch port 6 node
  - ARM: dts: turris-omnia: Add ethernet aliases
  - ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port
  - ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port
  - ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port
  - ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port
  - ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port
  - ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port
  - arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name
  - arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings
  - arm64: dts: mt2712-evb: Fix usb vbus regulators unit names
  - arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names
  - arm64: dts: mt2712e: Fix unit address for pinctrl node
  - arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators
  - arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node
  - arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node
  - perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()
  - perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init()
  - soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe
  - soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe
  - soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync
  - arm: dts: spear600: Fix clcd interrupt
  - soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index
  - soc: qcom: apr: make code more reuseable
  - soc: qcom: llcc: make irq truly optional
  - drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static
  - ARM: dts: stm32: Fix AV96 WLAN regulator gpio property
  - ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96
  - objtool, kcsan: Add volatile read/write instrumentation to whitelist
  - arm64: dts: qcom: msm8916: Drop MSS fallback compatible
  - arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias
  - arm64: dts: qcom: sdm630: fix UART1 pin bias
  - ARM: dts: qcom: apq8064: fix coresight compatible
  - arm64: dts: qcom: msm8996: fix GPU OPP table
  - arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins
  - usb: musb: remove extra check in musb_gadget_vbus_draw
  - xen/netback: Fix buffer overrun triggered by unusual packet


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.26.0.102
changelog:
  - !2004 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
  - !1628 [sync] PR-1621:  fix three CVEs by backport mainline patchs
  - !1819 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
  - ksmbd: fix out-of-bound read in smb2_write
  - !1981 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
  - Fix the default return value of dm_pool_dec_data_range()
  - !1386 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
  - !1929 [sync] PR-1920: net/hinic3: Add DPU PF device type support.
  - net/hinic3: Add DPU PF device type support.
  - exfat: check if filename entries exceeds max filename length
  - ksmbd: fix racy issue from session setup and logoff
  - ksmbd: Fix spelling mistake "excceed" -> "exceeded"
  - ksmbd: limit pdu length size according to connection status
  - ksmbd: Implements sess->ksmbd_chann_list as xarray
  - dm thin metadata: check fail_io before using data_sm


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.27.0.103
changelog:
  - !2145 [sync] PR-2126:  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
  - !2110 [sync] PR-2090:  net/sched: sch_hfsc: Ensure inner classes have fsc curve
  - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
  - !2103 [sync] PR-2092:  netfilter: nf_tables: skip bound chain on rule flush
  - !2112 [sync] PR-2085:  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  - !2104 [sync] PR-2097:  Fixed 4 CVEs of the ksmbd
  - !2078 [sync] PR-2065:  dm: switch to precise io accounting
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve
  - netfilter: nf_tables: skip bound chain on rule flush
  - ksmbd: not allow guest user on multichannel
  - ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
  - ksmbd: block asynchronous requests when making a delay on session setup
  - ksmbd: destroy expired sessions
  - !1927 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
  - !2008 [sync] PR-1928: RDMA/hns Bugfix from mainline linux
  - dm: switch to precise io accounting
  - !2059 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
  - SUNRPC: don't pause on incomplete allocation
  - net: hns3: only enable unicast promisc when mac table full
  - !2049 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
  - ksmbd: validate session id and tree id in the compound request
  - RDMA/hns: Remove the num_qpc_timer variable


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.28.0.105
changelog:
  - !2215 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
  - !2241 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  - !2244 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  - !2235 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
  - !2233 [sync] PR-2086:  fix CVE-2023-20588
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  - x86: Move gds_ucode_mitigated() declaration to header
  - Documentation/x86: Fix backwards on/off logic about YMM support
  - KVM: Add GDS_NO support to KVM
  - x86/speculation: Add Kconfig option for GDS
  - x86/speculation: Add force option to GDS mitigation
  - x86/CPU/AMD: Fix the DIV(0) initial fix attempt
  - x86/CPU/AMD: Do not leak quotient data after a division by 0
  - !1879 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
  - jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
  - !2172 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
  - !2083 [sync] PR-2009: Fix errors related to bond for RDMA/hns
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write
  - !2151 [sync] PR-2095:  io_uring: ensure IOPOLL locks around deferred work
  - io_uring: ensure IOPOLL locks around deferred work
  - RDMA/hns: Fix missing cleanup when bond_grp becomes invalid
  - RDMA/hns: Fix the device loss after unbinding RoCE bond resource slave
  - RDMA/hns: Fix wild pointer error of RoCE bonding when rmmod hns3
  - RDMA/hns: Add functions to obtain netdev and bus_num from an hr_dev
  - RDMA/hns: Fix a memory leak error when bond clear failed
  - x86/speculation: Add cpu_show_gds() prototype
  - x86/speculation: Add Gather Data Sampling mitigation


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.29.0.106
changelog:
  - !2393  netfilter: nf_tables: disallow rule removal from chain binding
  - netfilter: nf_tables: disallow rule removal from chain binding
  - !2386  nf_table LTS
  - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
  - netfilter: nf_tables: skip bound chain on rule flush
  - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails
  - netfilter: nf_tables: drop map element references from preparation phase
  - netfilter: nftables: rename set element data activation/deactivation functions
  - netfilter: nf_tables: reject unbound chain set before commit phase
  - netfilter: nf_tables: reject unbound anonymous set before commit phase
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
  - netfilter: nf_tables: fix chain binding transaction logic
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  - netfilter: nf_tables: use net_generic infra for transaction data
  - Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
  - Revert "netfilter: nf_tables: skip bound chain on rule flush"
  - Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
  - Revert "netfilter: nf_tables: fix chain binding transaction logic"
  - Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
  - Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
  - Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
  - !2380 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
  - !1939 [sync] PR-1771: Backport 5.10.164 - 5.10.165  LTS patches from upstream.
  - !2320 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  - !2311 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
  - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
  - !2279 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
  - etmem: Fixed an issue where the module reference counting is incorrect
  - !2125 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
  - !2187  nvme-pci: fix timeout request state check
  - !2251 [sync] PR-2224:  ext4: fix rec_len verify error
  - ext4: fix rec_len verify error
  - nvme-pci: fix timeout request state check
  - nvme-pci: fix DMA direction of unmapping integrity data
  - io_uring/rw: remove leftover debug statement
  - io_uring/rw: ensure kiocb_end_write() is always called
  - io_uring: fix double poll leak on repolling
  - io_uring: Clean up a false-positive warning from GCC 9.3.0
  - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma
  - Bluetooth: hci_qca: Fixed issue during suspend
  - Bluetooth: hci_qca: check for SSR triggered flag while suspend
  - Bluetooth: hci_qca: Wait for SSR completion during suspend
  - soc: qcom: apr: Make qcom,protection-domain optional again
  - Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()"
  - net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work()
  - io_uring/net: fix fast_iov assignment in io_setup_async_msg()
  - io_uring: io_kiocb_update_pos() should not touch file for non -1 offset
  - tracing: Use alignof__(struct {type b;}) instead of offsetof()
  - x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN
  - Revert "drm/amdgpu: make display pinning more flexible (v2)"
  - efi: rt-wrapper: Add missing include
  - arm64: efi: Execute runtime services from a dedicated stack
  - drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix
  - drm/amd/display: Calculate output_color_space after pixel encoding adjustment
  - drm/amd/display: Fix set scaling doesn's work
  - drm/i915: re-disable RC6p on Sandy Bridge
  - mei: me: add meteor lake point M DID
  - gsmi: fix null-deref in gsmi_get_variable
  - serial: atmel: fix incorrect baudrate setup
  - dmaengine: tegra210-adma: fix global intr clear
  - serial: pch_uart: Pass correct sg to dma_unmap_sg()
  - dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation
  - dt-bindings: phy: g12a-usb2-phy: fix compatible string documentation
  - usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210
  - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
  - usb: gadget: g_webcam: Send color matching descriptor per frame
  - usb: typec: altmodes/displayport: Fix pin assignment calculation
  - usb: typec: altmodes/displayport: Add pin assignment helper
  - usb: host: ehci-fsl: Fix module alias
  - USB: serial: cp210x: add SCALANCE LPE-9000 device id
  - tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
  - thunderbolt: Use correct function to calculate maximum USB3 link rate
  - cifs: do not include page data when checking signature
  - btrfs: fix race between quota rescan and disable leading to NULL pointer deref
  - mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting
  - mmc: sunxi-mmc: Fix clock refcount imbalance during unbind
  - comedi: adv_pci1760: Fix PWM instruction handling
  - usb: core: hub: disable autosuspend for TI TUSB8041
  - misc: fastrpc: Fix use-after-free race condition for maps
  - misc: fastrpc: Don't remove map on creater_process and device_release
  - USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100
  - staging: vchiq_arm: fix enum vchiq_status return types
  - USB: serial: option: add Quectel EM05CN modem
  - USB: serial: option: add Quectel EM05CN (SG) modem
  - USB: serial: option: add Quectel EC200U modem
  - USB: serial: option: add Quectel EM05-G (RS) modem
  - USB: serial: option: add Quectel EM05-G (CS) modem
  - USB: serial: option: add Quectel EM05-G (GR) modem
  - xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables
  - usb: acpi: add helper to check port lpm capability using acpi _DSM
  - xhci: Add a flag to disable USB3 lpm on a xhci root port level.
  - xhci: Add update_hub_device override for PCI xHCI hosts
  - xhci: Fix null pointer dereference when host dies
  - usb: xhci: Check endpoint is valid before dereferencing it
  - xhci-pci: set the dma max_seg_size
  - io_uring/rw: defer fsnotify calls to task context
  - io_uring: do not recalculate ppos unnecessarily
  - io_uring: update kiocb->ki_pos at execution time
  - io_uring: remove duplicated calls to io_kiocb_ppos
  - io_uring: ensure that cached task references are always put on exit
  - io_uring: fix CQ waiting timeout handling
  - io_uring: lock overflowing for IOPOLL
  - io_uring: check for valid register opcode earlier
  - io_uring: fix async accept on O_NONBLOCK sockets
  - io_uring: allow re-poll if we made progress
  - io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG)
  - io_uring: add flag for disabling provided buffer recycling
  - io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly
  - io_uring: improve send/recv error handling
  - io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL
  - Bluetooth: hci_qca: Fix driver shutdown on closed serdev
  - Bluetooth: hci_qca: Wait for timeout during suspend
  - drm/i915/gt: Reset twice
  - ALSA: hda/realtek - Turn on power early
  - efi: fix userspace infinite retry read efivars after EFI runtime services page fault
  - nilfs2: fix general protection fault in nilfs_btree_insert()
  - zonefs: Detect append writes at invalid locations
  - Add exception protection processing for vd in axi_chan_handle_err function
  - wifi: mac80211: sdata can be NULL during AMPDU start
  - wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices
  - f2fs: let's avoid panic if extent_tree is not created
  - x86/asm: Fix an assembler warning with current binutils
  - btrfs: always report error in run_one_delayed_ref()
  - RDMA/srp: Move large values to a new enum for gcc13
  - net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats
  - tools/virtio: initialize spinlocks in vring_test.c
  - selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID
  - pNFS/filelayout: Fix coalescing test for single DS
  - btrfs: fix trace event name typo for FLUSH_DELAYED_REFS
  - Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout"
  - io_uring/io-wq: only free worker if it was allocated for creation
  - io_uring/io-wq: free worker if task_work creation is canceled
  - drm/virtio: Fix GEM handle creation UAF
  - efi: fix NULL-deref in init error path
  - arm64: cmpxchg_double*: hazard against entire exchange variable
  - arm64: atomics: remove LL/SC trampolines
  - arm64: atomics: format whitespace consistently
  - x86/resctrl: Fix task CLOSID/RMID update race
  - x86/resctrl: Use task_curr() instead of task_struct->on_cpu to prevent unnecessary IPI
  - KVM: x86: Do not return host topology information from KVM_GET_SUPPORTED_CPUID
  - Documentation: KVM: add API issues section
  - iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe()
  - iommu/mediatek-v1: Add error handle for mtk_iommu_probe
  - mm: Always release pages to the buddy allocator in memblock_free_late().
  - net/mlx5e: Don't support encap rules with gbp option
  - net/mlx5: Fix ptp max frequency adjustment range
  - net/sched: act_mpls: Fix warning during failed attribute validation
  - nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
  - hvc/xen: lock console list traversal
  - octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable
  - octeontx2-af: Map NIX block from CGX connection
  - octeontx2-af: Update get/set resource count functions
  - tipc: fix unexpected link reset due to discovery messages
  - ASoC: wm8904: fix wrong outputs volume after power reactivation
  - regulator: da9211: Use irq handler when ready
  - EDAC/device: Fix period calculation in edac_device_reset_delay_period()
  - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm
  - powerpc/imc-pmu: Fix use of mutex in IRQs disabled section
  - netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
  - ext4: fix uninititialized value in 'ext4_evict_inode'
  - usb: ulpi: defer ulpi_register on ulpi_read_id timeout
  - xhci: Prevent infinite loop in transaction errors recovery for streams
  - xhci: move and rename xhci_cleanup_halted_endpoint()
  - xhci: store TD status in the td struct instead of passing it along
  - xhci: move xhci_td_cleanup so it can be called by more functions
  - xhci: Add xhci_reset_halted_ep() helper function
  - xhci: adjust parameters passed to cleanup_halted_endpoint()
  - xhci: get isochronous ring directly from endpoint structure
  - xhci: Avoid parsing transfer events several times
  - clk: imx: imx8mp: add shared clk gate for usb suspend clk
  - dt-bindings: clocks: imx8mp: Add ID for usb suspend clock
  - clk: imx8mp: add clkout1/2 support
  - clk: imx8mp: Add DISP2 pixel clock
  - iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options
  - iommu/amd: Add PCI segment support for ivrs_[ioapic/hpet/acpihid] commands
  - bus: mhi: host: Fix race between channel preparation and M0 event
  - ixgbe: fix pci device refcount leak
  - platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe
  - drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
  - drm/msm/adreno: Make adreno quirks not overwrite each other
  - cifs: Fix uninitialized memory read for smb311 posix symlink create
  - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple()
  - s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops
  - ASoC: qcom: lpass-cpu: Fix fallback SD line index handling
  - s390/kexec: fix ipl report address for kdump
  - perf auxtrace: Fix address filter duplicate symbol selection
  - docs: Fix the docs build with Sphinx 6.0
  - efi: tpm: Avoid READ_ONCE() for accessing the event log
  - KVM: arm64: Fix S1PTW handling on RO memslots
  - ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.30.0.107
changelog:
  - !2422 [sync] PR-2323:  net/sched: Retire rsvp classifier
  - !2398 Backport 5.10.166 - 5.10.167 LTS patches from upstream.
  - net/sched: Retire rsvp classifier
  - !1122  ext4: delete redundant uptodate check for buffer
  - !2368 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
  - net: fix NULL pointer in skb_segment_list
  - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt
  - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
  - blk-cgroup: fix missing pd_online_fn() while activating policy
  - arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI
  - ARM: dts: vf610: Fix pca9548 i2c-mux node names
  - ARM: dts: imx: Fix pca9547 i2c-mux node name
  - clk: Fix pointer casting to prevent oops in devm_clk_release()
  - perf/x86/amd: fix potential integer overflow on shift of a int
  - netfilter: conntrack: unify established states for SCTP paths
  - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
  - block: fix and cleanup bio_check_ro
  - Revert "selftests/ftrace: Update synthetic event syntax errors"
  - nfsd: Ensure knfsd shuts down when the "nfsd" pseudofs is unmounted
  - nouveau: explicitly wait on the fence in nouveau_bo_move_m2mf
  - Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode"
  - tools: gpio: fix -c option of gpio-event-mon
  - net: mdio-mux-meson-g12a: force internal PHY off on mux switch
  - net/tg3: resolve deadlock in tg3_reset_task() during EEH
  - thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type()
  - net: ravb: Fix possible hang if RIS2_QFF1 happen
  - netrom: Fix use-after-free of a listening socket.
  - netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
  - ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
  - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
  - netlink: annotate data races around sk_state
  - netlink: annotate data races around dst_portid and dst_group
  - netlink: annotate data races around nlk->portid
  - netfilter: nft_set_rbtree: skip elements in transaction from garbage collection
  - netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  - net: fix UaF in netns ops registration error path
  - netlink: prevent potential spectre v1 gadgets
  - i2c: designware: use casting of u64 in clock multiplication to avoid overflow
  - i2c: designware: Use DIV_ROUND_CLOSEST() macro
  - units: Add SI metric prefix definitions
  - units: Add Watt units
  - EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info
  - EDAC/device: Respect any driver-supplied workqueue polling value
  - ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment
  - thermal: intel: int340x: Protect trip temperature from concurrent updates
  - KVM: x86/vmx: Do not skip segment attributes if unusable bit is set
  - cifs: Fix oops due to uncleared server->smbd_conn in reconnect
  - ftrace/scripts: Update the instructions for ftrace-bisect.sh
  - trace_events_hist: add check for return value of 'create_hist_field'
  - tracing: Make sure trace_printk() can output as soon as it can be used
  - module: Don't wait for GOING modules
  - scsi: hpsa: Fix allocation size for scsi_host_alloc()
  - xhci: Set HCD flag to defer primary roothub registration
  - Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
  - docs: Fix path paste-o for /sys/kernel/warn_count
  - panic: Expose "warn_count" to sysfs
  - panic: Introduce warn_limit
  - panic: Consolidate open-coded panic_on_warn checks
  - panic: Separate sysctl logic from CONFIG_SMP
  - ia64: make IA64_MCA_RECOVERY bool instead of tristate
  - kasan: no need to unset panic_on_warn in end_report()
  - ubsan: no need to unset panic_on_warn in ubsan_epilogue()
  - panic: unset panic_on_warn inside panic()
  - kernel/panic: move panic sysctls to its own file
  - fs: reiserfs: remove useless new_opts in reiserfs_remount
  - x86: ACPI: cstate: Optimize C3 entry on AMD CPUs
  - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state
  - Revert "selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID"
  - lockref: stop doing cpu_relax in the cmpxchg loop
  - platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK
  - platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD
  - KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  - spi: spidev: remove debug messages that access spidev->spi without locking
  - ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets
  - ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC
  - cpufreq: armada-37xx: stop using 0 as NULL pointer
  - s390/debug: add _ASM_S390_ prefix to header guard
  - drm: Add orientation quirk for Lenovo ideapad D330-10IGL
  - ASoC: fsl_micfil: Correct the number of steps on SX controls
  - kcsan: test: don't put the expect array on the stack
  - cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist
  - tcp: fix rate_app_limited to default to 1
  - net: dsa: microchip: ksz9477: port map correction in ALU table entry register
  - driver core: Fix test_async_probe_init saves device in wrong array
  - w1: fix WARNING after calling w1_process()
  - w1: fix deadloop in __w1_remove_master_device()
  - tcp: avoid the lookup process failing to get sk in ehash table
  - dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node()
  - HID: betop: check shape of output reports
  - l2tp: prevent lockdep issue in l2tp_tunnel_register()
  - net: macb: fix PTP TX timestamp failure due to packet padding
  - dmaengine: Fix double increment of client_count in dma_chan_get()
  - drm/panfrost: fix GENERIC_ATOMIC64 dependency
  - net: mlx5: eliminate anonymous module_init & module_exit
  - usb: gadget: f_fs: Ensure ep0req is dequeued before free_request
  - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
  - HID: revert CHERRY_MOUSE_000C quirk
  - net: stmmac: fix invalid call to mdiobus_get_phy()
  - net: mdio: validate parameter addr in mdiobus_get_phy()
  - net: usb: sr9700: Handle negative len
  - l2tp: close all race conditions in l2tp_tunnel_register()
  - l2tp: convert l2tp_tunnel_list to idr
  - gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode
  - net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs
  - net: nfc: Fix use-after-free in local_cleanup()
  - phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on()
  - bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation
  - amd-xgbe: Delay AN timeout during KR training
  - amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent
  - ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60
  - phy: ti: fix Kconfig warning and operator precedence
  - PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe()
  - affs: initialize fsdata in affs_truncate()
  - IB/hfi1: Remove user expected buffer invalidate race
  - IB/hfi1: Immediately remove invalid memory from hardware
  - IB/hfi1: Fix expected receive setup error exit issues
  - IB/hfi1: Reserve user expected TIDs
  - IB/hfi1: Reject a zero-length user expected buffer
  - RDMA/core: Fix ib block iterator counter overflow
  - tomoyo: fix broken dependency on *.conf.default
  - firmware: arm_scmi: Harden shared memory access in fetch_notification
  - firmware: arm_scmi: Harden shared memory access in fetch_response
  - EDAC/highbank: Fix memory leak in highbank_mc_probe()
  - ARM: imx: add missing of_node_put()
  - arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux
  - ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts'
  - ARM: dts: imx7d-pico: Use 'clock-frequency'
  - ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency'
  - memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe()
  - memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe()
  - clk: Provide new devm_clk helpers for prepared and enabled clocks
  - clk: generalize devm_clk_get() a bit
  - sdei_watchdog: Avoid exception during sdei handler
  - ext4: delete redundant uptodate check for buffer


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.31.0.108
changelog:
  - !2680 [sync] PR-2390: Backport 5.10.174 -  5.10.175 LTS patches from upstream.
  - !2692 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
  - !2375 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
  - !2639 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
  - net: xfrm: Fix xfrm_address_filter OOB read
  - !2533 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
  - !2526 [sync] PR-2440:  netfilter: xt_u32: validate user space input
  - !2534 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
  - !2529 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
  - !2660 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
  - s390/dasd: add missing discipline function
  - KVM: VMX: Fix crash due to uninitialized current_vmcs
  - KVM: VMX: Introduce vmx_msr_bitmap_l01_changed() helper
  - KVM: nVMX: Don't use Enlightened MSR Bitmap for L3
  - UML: define RUNTIME_DISCARD_EXIT
  - sh: define RUNTIME_DISCARD_EXIT
  - s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld < 2.36
  - powerpc/vmlinux.lds: Don't discard .rela* for relocatable builds
  - powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT
  - arch: fix broken BuildID for arm64 and riscv
  - ext4: block range must be validated before use in ext4_mb_clear_bb()
  - ext4: add strict range checks while freeing blocks
  - ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid()
  - ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb()
  - drm/i915: Don't use BAR mappings for ring buffers with LLC
  - skbuff: Fix nfct leak on napi stolen
  - media: rc: gpio-ir-recv: add remove function
  - media: ov5640: Fix analogue gain control
  - scripts: handle BrokenPipeError for python scripts
  - PCI: Add SolidRun vendor ID
  - macintosh: windfarm: Use unsigned type for 1-bit bitfields
  - alpha: fix R_ALPHA_LITERAL reloc for large modules
  - powerpc/kcsan: Exclude udelay to prevent recursive instrumentation
  - MIPS: Fix a compilation issue
  - block, bfq: fix uaf for bfqq in bic_set_bfqq()
  - block, bfq: replace 0/1 with false/true in bic apis
  - block/bfq-iosched.c: use "false" rather than "BLK_RW_ASYNC"
  - block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq
  - block, bfq: fix possible uaf for 'bfqq->bic'
  - tpm/eventlog: Don't abort tpm_read_log on faulty ACPI address
  - watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths
  - iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
  - ext4: Fix deadlock during directory rename
  - RISC-V: Don't check text_mutex during stop_machine
  - riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode
  - SUNRPC: Fix a server shutdown leak
  - net/smc: fix fallback failed while sendmsg with fastopen
  - platform: x86: MLX_PLATFORM: select REGMAP instead of depending on it
  - scsi: megaraid_sas: Update max supported LD IDs to 240
  - net: ethernet: mtk_eth_soc: fix RX data corruption issue
  - btf: fix resolving BTF_KIND_VAR after ARRAY, STRUCT, UNION, PTR
  - netfilter: tproxy: fix deadlock due to missing BH disable
  - netfilter: ctnetlink: revert to dumping mark regardless of event type
  - bnxt_en: Avoid order-5 memory allocation for TPA data
  - net: phylib: get rid of unnecessary locking
  - net: stmmac: add to set device wake up flag when stmmac init phy
  - net: caif: Fix use-after-free in cfusbl_device_notify()
  - net: lan78xx: fix accessing the LAN7800's internal phy specific registers from the MAC driver
  - net: usb: lan78xx: Remove lots of set but unused 'ret' variables
  - selftests: nft_nat: ensuring the listening side is up before starting the client
  - ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()
  - powerpc: dts: t1040rdb: fix compatible string for Rev A boards
  - nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties
  - bgmac: fix *initial* chip reset to support BCM5358
  - drm/msm/a5xx: fix context faults during ring switch
  - drm/msm/a5xx: fix the emptyness check in the preempt code
  - drm/msm: Document and rename preempt_lock
  - drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register
  - drm/msm: Fix potential invalid ptr free
  - drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype
  - drm/nouveau/kms/nv50-: remove unused functions
  - ext4: Fix possible corruption when moving a directory
  - scsi: core: Remove the /proc/scsi/${proc_name} directory earlier
  - riscv: Add header include guards to insn.h
  - riscv: Avoid enabling interrupts in die()
  - RISC-V: Avoid dereferening NULL regs in die()
  - arm64: efi: Make efi_rt_lock a raw_spinlock
  - iommu/vt-d: Fix PASID directory pointer coherency
  - iommu/vt-d: Fix lockdep splat in intel_pasid_get_entry()
  - irqdomain: Fix mapping-creation race
  - irqdomain: Refactor __irq_domain_alloc_irqs()
  - irqdomain: Look for existing mapping only once
  - irq: Fix typos in comments
  - udf: Fix off-by-one error when discarding preallocation
  - nfc: change order inside nfc_se_io error path
  - ext4: zero i_disksize when initializing the bootloader inode
  - ext4: fix WARNING in ext4_update_inline_data
  - ext4: move where set the MAY_INLINE_DATA flag is set
  - ext4: fix RENAME_WHITEOUT handling for inline directories
  - ext4: fix cgroup writeback accounting with fs-layer encryption
  - drm/connector: print max_requested_bpc in state debugfs
  - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15
  - x86/CPU/AMD: Disable XSAVES on AMD family 0x17
  - fork: allow CLONE_NEWTIME in clone3 flags
  - fs: prevent out-of-bounds array speculation when closing a file descriptor
  - staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh
  - staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script
  - wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext"
  - !2674 [22.03-LTS-SP2]Backport 5.10.173 LTS patches from upstream.
  - usb: gadget: uvc: fix missing mutex_unlock() if kstrtou8() fails
  - scsi: mpt3sas: Remove usage of dma_get_required_mask() API
  - scsi: mpt3sas: re-do lost mpt3sas DMA mask fix
  - scsi: mpt3sas: Don't change DMA mask while reallocating pools
  - Revert "scsi: mpt3sas: Fix return value check of dma_get_required_mask()"
  - media: uvcvideo: Fix race condition with usb_kill_urb
  - media: uvcvideo: Provide sync and async uvc_ctrl_status_event
  - Bluetooth: hci_sock: purge socket queues in the destruct() callback
  - drm/display/dp_mst: Fix down message handling after a packet reception error
  - drm/display/dp_mst: Fix down/up message handling after sink disconnect
  - net: tls: avoid hanging tasks on the tx_lock
  - soundwire: cadence: Drain the RX FIFO after an IO timeout
  - soundwire: cadence: Remove wasted space in response_buf
  - phy: rockchip-typec: Fix unsigned comparison with less than zero
  - kernel/fail_function: fix memory leak with using debugfs_lookup()
  - PCI: Take other bus devices into account when distributing resources
  - PCI: Align extra resources for hotplug bridges properly
  - usb: gadget: uvc: Make bSourceID read/write
  - usb: uvc: Enumerate valid values for color matching
  - USB: ene_usb6250: Allocate enough memory for full object
  - usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math
  - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word()
  - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word()
  - tools/iio/iio_utils:fix memory leak
  - mei: bus-fixup:upon error print return values of send and receive
  - serial: sc16is7xx: setup GPIO controller later in probe
  - tty: serial: fsl_lpuart: disable the CTS when send break signal
  - staging: emxx_udc: Add checks for dma_alloc_coherent()
  - media: uvcvideo: Silence memcpy() run-time false positive warnings
  - media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910
  - media: uvcvideo: Handle errors from calls to usb_string
  - media: uvcvideo: Handle cameras with invalid descriptors
  - IB/hfi1: Update RMT size calculation
  - mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak
  - bootconfig: Increase max nodes of bootconfig from 1024 to 8192 for DCC support
  - firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3
  - tracing: Add NULL checks for buffer in ring_buffer_free_read_page()
  - thermal: intel: BXT_PMIC: select REGMAP instead of depending on it
  - thermal: intel: quark_dts: fix error pointer dereference
  - ASoC: zl38060 add gpiolib dependency
  - ASoC: zl38060: Remove spurious gpiolib select
  - ASoC: adau7118: don't disable regulators on device unbind
  - scsi: ipr: Work around fortify-string warning
  - rtc: sun6i: Always export the internal oscillator
  - tcp: tcp_check_req() can be called from process context
  - ARM: dts: spear320-hmi: correct STMPE GPIO compatible
  - net/sched: act_sample: fix action bind logic
  - nfc: fix memory leak of se_io context in nfc_genl_se_io
  - net/mlx5: Geneve, Fix handling of Geneve object id as error code
  - 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv()
  - 9p/xen: fix connection sequence
  - 9p/xen: fix version parsing
  - net: fix __dev_kfree_skb_any() vs drop monitor
  - sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop
  - netfilter: ebtables: fix table blob use-after-free
  - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()
  - watchdog: pcwd_usb: Fix attempting to access uninitialized memory
  - watchdog: Fix kmemleak in watchdog_cdev_register
  - watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path
  - x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list
  - ubi: Fix possible null-ptr-deref in ubi_free_volume()
  - ubifs: Fix memory leak in alloc_wbufs()
  - ubifs: Fix build errors as symbol undefined
  - ubi: ensure that VID header offset + VID header size <= alloc, size
  - um: vector: Fix memory leak in vector_config
  - fs: f2fs: initialize fsdata in pagecache_write()
  - f2fs: use memcpy_{to,from}_page() where possible
  - pwm: stm32-lp: fix the check on arr and cmp registers update
  - pwm: sifive: Always let the first pwm_apply_state succeed
  - pwm: sifive: Reduce time the controller lock is held
  - objtool: Fix memory leak in create_static_call_sections()
  - kbuild: Port silent mode detection to future gnu make.
  - pinctrl: rockchip: fix reading pull type on rk3568
  - pinctrl: rockchip: fix mux route data for rk3568
  - wifi: ath9k: use proper statements in conditionals
  - arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY
  - drm/edid: fix AVI infoframe aspect ratio handling
  - drm/radeon: Fix eDP for single-display iMac11,2
  - drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv
  - vfio/type1: prevent underflow of locked_vm via exec()
  - PCI: Avoid FLR for AMD FCH AHCI adapters
  - PCI: hotplug: Allow marking devices as disconnected during bind/unbind
  - PCI/PM: Observe reset delay irrespective of bridge_d3
  - riscv: jump_label: Fixup unaligned arch_static_branch function
  - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
  - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
  - scsi: ses: Don't attach if enclosure has no components
  - scsi: qla2xxx: Fix erroneous link down
  - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests
  - scsi: qla2xxx: Fix link failure in NPIV environment
  - ktest.pl: Add RUN_TIMEOUT option with default unlimited
  - ktest.pl: Fix missing "end_monitor" when machine check fails
  - ktest.pl: Give back console on Ctrt^C on monitor
  - mm/thp: check and bail out if page in deferred queue already
  - mm: memcontrol: deprecate charge moving
  - docs: gdbmacros: print newest record
  - remoteproc/mtk_scp: Move clk ops outside send_lock
  - media: ipu3-cio2: Fix PM runtime usage_count in driver unbind
  - mips: fix syscall_get_nr
  - dax/kmem: Fix leak of memory-hotplug resources
  - alpha: fix FEN fault handling
  - rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails
  - ARM: dts: exynos: correct TMU phandle in Odroid HC1
  - ARM: dts: exynos: correct TMU phandle in Odroid XU
  - ARM: dts: exynos: correct TMU phandle in Exynos5250
  - ARM: dts: exynos: correct TMU phandle in Odroid XU3 family
  - ARM: dts: exynos: correct TMU phandle in Exynos4
  - ARM: dts: exynos: correct TMU phandle in Exynos4210
  - dm flakey: don't corrupt the zero page
  - dm flakey: fix logic when corrupting a bio
  - thermal: intel: powerclamp: Fix cur_state for multi package system
  - wifi: cfg80211: Fix use after free for wext
  - wifi: rtl8xxxu: Use a longer retry limit of 48
  - dm: add cond_resched() to dm_wq_work()
  - mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type
  - ext4: refuse to create ea block when umounted
  - ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC
  - ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls()
  - io_uring: remove MSG_NOSIGNAL from recvmsg
  - io_uring/rsrc: disallow multi-source reg buffers
  - io_uring: add a conditional reschedule to the IOPOLL cancelation loop
  - io_uring: mark task TASK_RUNNING before handling resume/task work
  - io_uring: handle TIF_NOTIFY_RESUME when checking for task_work
  - irqdomain: Drop bogus fwspec-mapping error handling
  - irqdomain: Fix disassociation race
  - irqdomain: Fix association race
  - ima: Align ima_file_mmap() parameters with mmap_file LSM hook
  - brd: return 0/-error from brd_insert_page()
  - Documentation/hw-vuln: Document the interaction between IBRS and STIBP
  - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter
  - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range
  - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic
  - x86/reboot: Disable SVM, not just VMX, when stopping CPUs
  - x86/reboot: Disable virtualization in an emergency if SVM is supported
  - x86/crash: Disable virt in core NMI crash handler to avoid double shootdown
  - x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows)
  - KVM: s390: disable migration mode when dirty tracking is disabled
  - KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI
  - KVM: Destroy target device if coalesced MMIO unregistration fails
  - udf: Fix file corruption when appending just after end of preallocated extent
  - udf: Detect system inodes linked into directory hierarchy
  - udf: Preserve link count of system files
  - udf: Do not update file length for failed writes to inline files
  - udf: Do not bother merging very long extents
  - udf: Truncate added extents on failed expansion
  - ocfs2: fix non-auto defrag path not working issue
  - ocfs2: fix defrag path triggering jbd2 ASSERT
  - f2fs: fix cgroup writeback accounting with fs-layer encryption
  - f2fs: fix information leak in f2fs_move_inline_dirents()
  - exfat: fix inode->i_blocks for non-512 byte sector size device
  - exfat: redefine DIR_DELETED as the bad cluster number
  - exfat: fix unexpected EOF while reading dir
  - exfat: fix reporting fs error when reading dir beyond EOF
  - hfs: fix missing hfs_bnode_get() in __hfs_bnode_create
  - ARM: dts: exynos: correct HDMI phy compatible in Exynos4
  - cifs: Fix uninitialized memory read in smb3_qfs_tcon()
  - s390/kprobes: fix current_kprobe never cleared after kprobes reenter
  - s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler
  - s390: discard .interp section
  - s390/extmem: return correct segment type in __segment_load()
  - ipmi_ssif: Rename idle state and check
  - rtc: pm8xxx: fix set-alarm race
  - firmware: coreboot: framebuffer: Ignore reserved pixel color bits
  - wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu
  - nfsd: zero out pointers after putting nfsd_files on COPY setup error
  - dm cache: add cond_resched() to various workqueue loops
  - dm thin: add cond_resched() to various workqueue loops
  - HID: logitech-hidpp: Don't restart communication if not necessary
  - pinctrl: at91: use devm_kasprintf() to avoid potential leaks
  - hwmon: (coretemp) Simplify platform device handling
  - gfs2: Improve gfs2_make_fs_rw error handling
  - regulator: s5m8767: Bounds check id indexing into arrays
  - regulator: max77802: Bounds check regulator id against opmode
  - ASoC: kirkwood: Iterate over array indexes instead of using pointer math
  - docs/scripts/gdb: add necessary make scripts_gdb step
  - drm/msm/dsi: Add missing check for alloc_ordered_workqueue
  - drm: amd: display: Fix memory leakage
  - drm/radeon: free iio for atombios when driver shutdown
  - drm/tiny: ili9486: Do not assume 8-bit only SPI controllers
  - HID: Add Mapping for System Microphone Mute
  - drm/omap: dsi: Fix excessive stack usage
  - drm/amd/display: Fix potential null-deref in dm_resume
  - Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE
  - PM: EM: fix memory leak with using debugfs_lookup()
  - uaccess: Add minimum bounds check on kernel buffer size
  - coda: Avoid partial allocation of sig_inputArgs
  - net/mlx5: fw_tracer: Fix debug print
  - ACPI: video: Fix Lenovo Ideapad Z570 DMI match
  - wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup
  - m68k: Check syscall_trace_enter() return code
  - net: bcmgenet: Add a check for oversized packets
  - ACPI: Don't build ACPICA with '-Os'
  - ice: add missing checks for PF vsi type
  - inet: fix fast path in __inet_hash_connect()
  - wifi: mt7601u: fix an integer underflow
  - wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds
  - x86/bugs: Reset speculation control settings on init
  - timers: Prevent union confusion from unexpected restart_syscall()
  - thermal: intel: Fix unsigned comparison with less than zero
  - wifi: ath11k: debugfs: fix to work with multiple PCI devices
  - rcu-tasks: Make rude RCU-Tasks work well with CPU hotplug
  - rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait()
  - rcu: Make RCU_LOCKDEP_WARN() avoid early lockdep checks
  - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds()
  - wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect()
  - blk-iocost: fix divide by 0 error in calc_lcoefs()
  - ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy
  - udf: Define EFSCORRUPTED error code
  - rpmsg: glink: Avoid infinite loop on intent for missing channel
  - media: saa7134: Use video_unregister_device for radio_dev
  - media: i2c: ov7670: 0 instead of -EINVAL was returned
  - media: i2c: imx219: Fix binning for RAW8 capture
  - media: i2c: imx219: Split common registers from mode tables
  - media: i2c: imx219: remove redundant writes
  - media: i2c: ov772x: Fix memleak in ov772x_probe()
  - media: ov5675: Fix memleak in ov5675_init_controls()
  - media: ov2740: Fix memleak in ov2740_init_controls()
  - media: max9286: Fix memleak in max9286_v4l2_register()
  - builddeb: clean generated package content
  - powerpc: Remove linker flag from KBUILD_AFLAGS
  - media: platform: ti: Add missing check for devm_regulator_get
  - media: ti: cal: fix possible memory leak in cal_ctx_create()
  - remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers
  - Input: iqs269a - do not poll during ATI
  - Input: iqs269a - do not poll during suspend or resume
  - alpha/boot/tools/objstrip: fix the check for ELF header
  - vdpa/mlx5: Don't clear mr struct on destroy MR
  - MIPS: vpe-mt: drop physical_memsize
  - MIPS: SMP-CPS: fix build error when HOTPLUG_CPU not set
  - powerpc/eeh: Set channel state after notifying the drivers
  - powerpc/eeh: Small refactor of eeh_handle_normal_event()
  - powerpc/rtas: ensure 4KB alignment for rtas_data_buf
  - powerpc/rtas: make all exports GPL
  - powerpc/pseries/lparcfg: add missing RTAS retry status handling
  - powerpc/pseries/lpar: add missing RTAS retry status handling
  - powerpc/perf/hv-24x7: add missing RTAS retry status handling
  - clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled()
  - powerpc/powernv/ioda: Skip unallocated resources when mapping to PE
  - clk: qcom: gpucc-sdm845: fix clk_dis_wait being programmed for CX GDSC
  - clk: qcom: gpucc-sc7180: fix clk_dis_wait being programmed for CX GDSC
  - Input: ads7846 - don't check penirq immediately for 7845
  - Input: ads7846 - always set last command to PWRDOWN
  - Input: ads7846 - convert to one message
  - Input: ads7846 - convert to full duplex
  - Input: ads7846 - don't report pressure for ads7845
  - clk: imx: avoid memory leak
  - clk: renesas: cpg-mssr: Remove superfluous check in resume code
  - clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed
  - linux/kconfig.h: replace IF_ENABLED() with PTR_IF() in <linux/kernel.h>
  - Input: iqs269a - configure device with a single block write
  - Input: iqs269a - increase interrupt handler return delay
  - Input: iqs269a - drop unused device node references
  - mtd: rawnand: sunxi: Fix the size of the last OOB region
  - RISC-V: fix funct4 definition for c.jalr in parse_asm.h
  - clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents
  - clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents
  - mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read()
  - objtool: add UACCESS exceptions for __tsan_volatile_read/write
  - printf: fix errname.c list
  - sparc: allow PM configs for sparc32 COMPILE_TEST
  - perf tools: Fix auto-complete on aarch64
  - leds: led-core: Fix refcount leak in of_led_get()
  - perf llvm: Fix inadvertent file creation
  - gfs2: jdata writepage fix
  - cifs: Fix warning and UAF when destroy the MR list
  - cifs: Fix lost destroy smbd connection when MR allocate failed
  - nfsd: fix race to check ls_layouts
  - hid: bigben_probe(): validate report count
  - HID: bigben: use spinlock to safely schedule workers
  - HID: bigben_worker() remove unneeded check on report_field
  - HID: bigben: use spinlock to protect concurrent accesses
  - ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared
  - spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one()
  - NFS: Fix up handling of outstanding layoutcommit in nfs_update_inode()
  - dm: remove flush_scheduled_work() during local_exit()
  - ASoC: tlv320adcx140: fix 'ti,gpio-config' DT property init
  - hwmon: (mlxreg-fan) Return zero speed for broken fan
  - spi: bcm63xx-hsspi: Fix multi-bit mode setting
  - spi: bcm63xx-hsspi: fix pm_runtime
  - scsi: aic94xx: Add missing check for dma_map_single()
  - scsi: mpt3sas: Fix a memory leak
  - drm/amdgpu: fix enum odm_combine_mode mismatch
  - hwmon: (ltc2945) Handle error case in ltc2945_value_store
  - ASoC: dt-bindings: meson: fix gx-card codec node regex
  - ASoC: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params()
  - ASoC: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove()
  - ASoC: mchp-spdifrx: fix controls that works with completion mechanism
  - ASoC: mchp-spdifrx: fix return value in case completion times out
  - ASoC: atmel: fix spelling mistakes
  - ASoC: mchp-spdifrx: fix controls which rely on rsr register
  - spi: dw_bt1: fix MUX_MMIO dependencies
  - gpio: vf610: connect GPIO label to dev name
  - ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress()
  - drm/mediatek: Clean dangling pointer on bind error path
  - drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc
  - drm/mediatek: Drop unbalanced obj unref
  - drm/mediatek: Use NULL instead of 0 for NULL pointer
  - drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd
  - gpu: host1x: Don't skip assigning syncpoints to channels
  - pinctrl: mediatek: Initialize variable *buf to zero
  - pinctrl: mediatek: Initialize variable pullen and pullup to zero
  - pinctrl: bcm2835: Remove of_node_put() in bcm2835_of_gpio_ranges_fallback()
  - drm/msm/mdp5: Add check for kzalloc
  - drm/msm/dpu: Add check for cstate
  - drm/msm: use strscpy instead of strncpy
  - drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness
  - drm/bridge: lt9611: pass a pointer to the of node
  - drm/bridge: lt9611: fix clock calculation
  - drm/bridge: lt9611: fix programming of video modes
  - drm/bridge: lt9611: fix polarity programming
  - drm/bridge: lt9611: fix HPD reenablement
  - drm/bridge: lt9611: fix sleep mode setup
  - drm/msm/dpu: Disallow unallocated resources to be returned
  - ALSA: hda/ca0132: minor fix for allocation size
  - drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup()
  - ASoC: fsl_sai: initialize is_dsp_mode flag
  - drm/vc4: hdmi: Correct interlaced timings again
  - drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5
  - drm/vc4: hvs: Set AXI panic modes
  - pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups
  - pinctrl: rockchip: do coding style for mux route struct
  - pinctrl: rockchip: add support for rk3568
  - pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain
  - pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins
  - drm/msm/hdmi: Add missing check for alloc_ordered_workqueue
  - gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id()
  - drm: tidss: Fix pixel format definition
  - drm/vc4: dpi: Fix format mapping for RGB565
  - drm/vc4: dpi: Add option for inverting pixel clock and output enable
  - drm/vkms: Fix null-ptr-deref in vkms_release()
  - drm/bridge: megachips: Fix error handling in i2c_register_driver()
  - drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC
  - drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats
  - drm: Fix potential null-ptr-deref due to drmm_mode_config_init()
  - sefltests: netdevsim: wait for devlink instance after netns removal
  - selftest: fib_tests: Always cleanup before exit
  - net: bcmgenet: fix MoCA LED control
  - l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register()
  - selftests/net: Interpret UDP_GRO cmsg data as an int value
  - irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts
  - irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts
  - bpf: Fix global subprog context argument resolution logic
  - can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a bus error
  - thermal/drivers/hisi: Drop second sensor hi3660
  - wifi: mac80211: make rate u32 in sta_set_rate_info_rx()
  - crypto: crypto4xx - Call dma_unmap_page when done
  - selftests/bpf: Fix out-of-srctree build
  - wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize()
  - wifi: iwl4965: Add missing check for create_singlethread_workqueue()
  - wifi: iwl3945: Add missing check for create_singlethread_workqueue
  - RISC-V: time: initialize hrtimer based broadcast clock event device
  - m68k: /proc/hardware should depend on PROC_FS
  - crypto: rsa-pkcs1pad - Use akcipher_request_complete
  - rds: rds_rm_zerocopy_callback() correct order for list_add_tail()
  - libbpf: Fix alen calculation in libbpf_nla_dump_errormsg()
  - Bluetooth: L2CAP: Fix potential user-after-free
  - OPP: fix error checking in opp_migrate_dentry()
  - s390/vmem: fix empty page tables cleanup under KASAN
  - irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe
  - irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe
  - irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains
  - irqchip: Fix refcount leak in platform_irqchip_probe
  - net/mlx5: Enhance debug print in page allocation failure
  - bpftool: profile online CPUs instead of possible
  - crypto: ccp - Flush the SEV-ES TMR memory before giving it to firmware
  - crypto: ccp - Refactor out sev_fw_alloc()
  - leds: led-class: Add missing put_device() to led_put()
  - crypto: xts - Handle EBUSY correctly
  - net: ethernet: ti: add missing of_node_put before return
  - net: ethernet: ti: am65-cpsw: handle deferred probe with dev_err_probe()
  - net: ethernet: ti: am65-cpsw: fix tx csum offload for multi mac mode
  - x86/microcode: Print previous version of microcode after reload
  - x86/microcode: Default-disable late loading
  - x86/microcode: Rip out the OLD_INTERFACE
  - x86: Mark stop_this_cpu() __noreturn
  - x86/microcode: Replace deprecated CPU-hotplug functions.
  - x86/cpu: Init AP exception handling from cpu_init_secondary()
  - powercap: fix possible name leak in powercap_register_zone()
  - crypto: seqiv - Handle EBUSY correctly
  - crypto: essiv - Handle EBUSY correctly
  - crypto: ccp - Failure on re-initialization due to duplicate sysfs filename
  - ACPI: battery: Fix missing NUL-termination with large strings
  - wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data()
  - wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup
  - wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback()
  - wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails
  - ath9k: htc: clean up statistics macros
  - ath9k: hif_usb: simplify if-if to if-else
  - wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function
  - wifi: orinoco: check return value of hermes_write_wordrec()
  - wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU
  - thermal/drivers/tsens: Sort out msm8976 vs msm8956 data
  - thermal/drivers/tsens: Add compat string for the qcom,msm8960
  - thermal/drivers/qcom/tsens_v1: Enable sensor 3 on MSM8976
  - thermal/drivers/tsens: Drop msm8976-specific defines
  - ACPICA: nsrepair: handle cases without a return value correctly
  - crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2
  - crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak
  - crypto: ccp: Use the stack and common buffer for status commands
  - crypto: ccp: Use the stack for small SEV command buffers
  - lib/mpi: Fix buffer overrun when SG is too long
  - rcu-tasks: Fix synchronize_rcu_tasks() VS zap_pid_ns_processes()
  - rcu-tasks: Remove preemption disablement around srcu_read_[un]lock() calls
  - rcu-tasks: Improve comments explaining tasks_rcu_exit_srcu purpose
  - genirq: Fix the return type of kstat_cpu_irqs_sum()
  - ACPICA: Drop port I/O validation for some regions
  - crypto: x86/ghash - fix unaligned access in ghash_setkey()
  - wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid()
  - wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
  - wifi: wilc1000: fix potential memory leak in wilc_mac_xmit()
  - wifi: ipw2200: fix memory leak in ipw_wdev_init()
  - wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave()
  - libbpf: Fix btf__align_of() by taking into account field offsets
  - wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit()
  - rtlwifi: fix -Wpointer-sign warning
  - wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave()
  - wifi: libertas: fix memory leak in lbs_init_adapter()
  - wifi: iwlegacy: common: don't call dev_kfree_skb() under spin_lock_irqsave()
  - wifi: rtlwifi: rtl8723be: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: rtlwifi: rtl8188ee: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: rtlwifi: rtl8821ae: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: rsi: Fix memory leak in rsi_coex_attach()
  - block: bio-integrity: Copy flags when bio_integrity_payload is cloned
  - x86/perf/zhaoxin: Add stepping check for ZXC
  - sched/rt: pick_next_rt_entity(): check list_entry
  - sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity()
  - s390/dasd: Fix potential memleak in dasd_eckd_init()
  - s390/dasd: Prepare for additional path event handling
  - blk-mq: correct stale comment of .get_budget
  - blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx
  - blk-mq: avoid sleep in blk_mq_alloc_request_hctx
  - arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node
  - ARM: dts: imx7s: correct iomuxc gpr mux controller cells
  - ARM: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference
  - arm64: dts: renesas: beacon-renesom: Fix gpio expander reference
  - arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name
  - arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name
  - arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name
  - arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name
  - arm64: dts: amlogic: meson-gx: add missing unit address to rng node name
  - arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property
  - arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible
  - arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name
  - arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name
  - ARM: imx: Call ida_simple_remove() for ida_simple_get
  - ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato
  - arm64: dts: ti: k3-j7200: Fix wakeup pinmux range
  - ARM: s3c: fix s3c64xx_set_timer_source prototype
  - ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init()
  - arm64: dts: meson: remove CPU opps below 1GHz for G12A boards
  - arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names
  - arm64: dts: qcom: ipq8074: fix Gen3 PCIe node
  - arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges
  - arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY
  - arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size
  - arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes
  - arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names
  - arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address
  - arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name
  - arm64: dts: meson-gx: Fix Ethernet MAC address unit name
  - arm64: dts: qcom: sc7180: correct SPMI bus address cells
  - arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name
  - arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description
  - ARM: zynq: Fix refcount leak in zynq_early_slcr_init
  - arm64: dts: qcom: qcs404: use symbol names for PCIe resets
  - ARM: OMAP2+: Fix memory leak in realtime_counter_init()
  - powerpc/mm: Rearrange if-else block to avoid clang warning
  - ubi: Refuse attaching if mtd's erasesize is 0
  - !2649 [sync] PR-2641:  Fix CVE-2023-5717
  - perf: Fix kabi breakage in struct perf_event
  - perf: Disallow mis-matched inherited group reads
  - !2572  Fix cgroup psi poll UAF
  - !2521 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
  - igb: set max size RX buffer when store bad packet is enabled
  - !2597 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
  - !2568 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
  - !2582 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
  - !2623 [sync] PR-2613:  CVE-2022-44033
  - char: pcmcia: remove all the drivers
  - tty: ipwireless: move Kconfig entry to tty
  - !2586 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
  - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
  - xen/events: replace evtchn_rwlock with RCU
  - !2523 [sync] PR-2159: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
  - ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
  - ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
  - ksmbd: send proper error response in smb2_tree_connect()
  - ksmbd: fix racy issue from smb2 close and logoff with multichannel
  - ksmbd: call rcu_barrier() in ksmbd_server_exit()
  - ksmbd: fix racy issue under cocurrent smb2 tree disconnect
  - sched/psi: Select KERNFS as needed
  - kernfs: add stub helper for kernfs_generic_poll()
  - sched/psi: use kernfs polling functions for PSI trigger polling
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
  - !2467 [sync] PR-1851: Backport 5.10.169 - 5.10.172 LTS patches from upstream
  - netfilter: xt_sctp: validate the flag_info count
  - ipv4: fix null-deref in ipv4_link_failure
  - !2324 [sync] PR-2197: [RoCE] Support getting xrcd num from firmware；Fix incorrect post-send with direct wqe of wr-list
  - netfilter: nfnetlink_osf: avoid OOB read
  - netfilter: xt_u32: validate user space input
  - perf/smmuv3: Add MODULE_ALIAS for module auto loading
  - perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
  - Revert "perf/smmuv3: Enable HiSilicon Erratum quirk"
  - !2516 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
  - crypto: drbg - Only fail when jent is unavailable in FIPS mode
  - !2487 [sync] PR-2340:  xfs: recent patches to fix xfs issues
  - f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
  - xfs: update the last_sync_lsn with ctx start lsn
  - xfs: shutdown xfs once inode double free
  - xfs: fix off-by-one-block in xfs_discard_folio()
  - xfs: xfs_bmap_punch_delalloc_range() should take a byte range
  - iomap: buffered write failure should not truncate the page cache
  - xfs,iomap: move delalloc punching to iomap
  - xfs: use byte ranges for write cleanup ranges
  - xfs: punching delalloc extents on write failure is racy
  - xfs: longest free extent no need consider postalloc
  - xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
  - xfs: block reservation too large for minleft allocation
  - xfs: set minleft correctly for randomly sparse inode allocations
  - xfs: shutdown to ensure submits buffers on LSN boundaries
  - xfs: don't verify agf length when log recovery
  - xfs: Remove redundant assignment to busy
  - xfs: remove redundant pointer lip
  - xfs: remove redundant initializations of pointers drop_leaf and save_leaf
  - xfs: xfs_trans_cancel() path must check for log shutdown
  - xfs: fix bounds check in xfs_defer_agfl_block()
  - xfs: AGF length has never been bounds checked
  - xfs: journal geometry is not properly bounds checked
  - xfs: don't block in busy flushing when freeing extents
  - xfs: allow extent free intents to be retried
  - xfs: pass alloc flags through to xfs_extent_busy_flush()
  - Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
  - xfs: use deferred frees for btree block freeing
  - xfs: don't reverse order of items in bulk AIL insertion
  - xfs: validate block number being freed before adding to xefi
  - xfs: validity check agbnos on the AGFL
  - xfs: pass xfs_extent_free_item directly through the log intent code
  - xfs: remove unused parameter from refcount code
  - xfs: reduce the size of struct xfs_extent_free_item
  - xfs: rename xfs_bmap_add_free to xfs_free_extent_later
  - xfs: create slab caches for frequently-used deferred items
  - xfs: compact deferred intent item structures
  - xfs: rename _zone variables to _cache
  - xfs: remove kmem_zone typedef
  - xfs: remove xfs_setattr_time() declaration
  - xfs: use setattr_copy to set vfs inode attributes
  - xfs: set prealloc flag in xfs_alloc_file_space()
  - xfs: don't assert fail on perag references on teardown
  - xfs: fix dir3 block read verify fail during log recover
  - xfs: propagate the return value of xfs_log_force() to avoid soft lockup
  - xfs: keep growfs sb log item active until ail flush success
  - USB: core: Don't hold device lock while reading the "descriptors" sysfs file
  - usb: gadget: u_serial: Add null pointer check in gserial_resume
  - USB: serial: option: add support for VW/Skoda "Carstick LTE"
  - scripts/tags.sh: fix incompatibility with PCRE2
  - scripts/tags.sh: Invoke 'realpath' via 'xargs'
  - bpf: bpf_fib_lookup should not return neigh in NUD_FAILED state
  - HID: core: Fix deadloop in hid_apply_multiplier.
  - IB/hfi1: Assign npages earlier
  - btrfs: send: limit number of clones and allocated memory size
  - ACPI: NFIT: fix a potential deadlock during NFIT teardown
  - ARM: dts: rockchip: add power-domains property to dp node on rk3288
  - arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc
  - Fix XFRM-I support for nested ESP tunnels
  - ext4: Fix function prototype mismatch for ext4_feat_ktype
  - audit: update the mailing list in MAINTAINERS
  - wifi: mwifiex: Add missing compatible string for SD8787
  - nbd: fix possible overflow for 'first_minor' in nbd_dev_add()
  - nbd: fix max value for 'first_minor'
  - Revert "Revert "block: nbd: add sanity check for first_minor""
  - mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh
  - powerpc: dts: t208x: Disable 10G on MAC1 and MAC2
  - can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len
  - KVM: SVM: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid
  - KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception
  - random: always mix cycle counter in add_latent_entropy()
  - clk: mxl: syscon_node_to_regmap() returns error pointers
  - powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G
  - clk: mxl: Fix a clk entry by adding relevant flags
  - clk: mxl: Add option to override gate clks
  - clk: mxl: Remove redundant spinlocks
  - clk: mxl: Switch from direct readl/writel based IO to regmap based IO
  - wifi: rtl8xxxu: gen2: Turn on the rate control
  - drm/etnaviv: don't truncate physical page address
  - nvmem: core: fix return value
  - net: sched: sch: Fix off by one in htb_activate_prios()
  - ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak
  - alarmtimer: Prevent starvation by small intervals and SIG_IGN
  - i40e: Add checking for null for nlmsg_find_attr()
  - net/sched: act_ctinfo: use percpu stats
  - flow_offload: fill flags to action structure
  - drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list
  - drm/i915/gen11: Moving WAs to icl_gt_workarounds_init()
  - nilfs2: fix underflow in second superblock position calculations
  - ipv6: Fix tcp socket connection with DSCP.
  - ipv6: Fix datagram socket connection with DSCP.
  - ixgbe: add double of VLAN header when computing the max MTU
  - net: stmmac: Restrict warning on disabling DMA store and fwd mode
  - bnxt_en: Fix mqprio and XDP ring checking logic
  - net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence
  - net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
  - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
  - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions.
  - sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list
  - net: bgmac: fix BCM5358 support by setting correct flags
  - i40e: add double of VLAN header when computing the max MTU
  - ixgbe: allow to increase MTU to 3K with XDP enabled
  - revert "squashfs: harden sanity check in squashfs_read_xattr_id_table"
  - Revert "mm: Always release pages to the buddy allocator in memblock_free_late()."
  - hugetlb: check for undefined shift on 32 bit architectures
  - sched/psi: Fix use-after-free in ep_remove_wait_queue()
  - ALSA: hda/realtek - fixed wrong gpio assigned
  - ALSA: hda/conexant: add a new hda codec SN6180
  - mmc: mmc_spi: fix error handling in mmc_spi_probe()
  - mmc: sdio: fix possible resource leaks in some error paths
  - mmc: jz4740: Work around bug on JZ4760(B)
  - netfilter: nft_tproxy: restrict to prerouting hook
  - ovl: remove privs in ovl_fallocate()
  - ovl: remove privs in ovl_copyfile()
  - s390/signal: fix endless loop in do_signal
  - aio: fix mremap after fork null-deref
  - nvmem: core: fix registration vs use race
  - nvmem: core: fix cleanup after dev_set_name()
  - nvmem: core: remove nvmem_config wp_gpio
  - nvmem: core: add error handling for dev_set_name
  - platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match
  - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association
  - s390/decompressor: specify __decompress() buf len to avoid overflow
  - net: sched: sch: Bounds check priority
  - net: stmmac: do not stop RX_CLK in Rx LPI state for qcs404 SoC
  - net/rose: Fix to not accept on connected socket
  - tools/virtio: fix the vringh test for virtio ring changes
  - ASoC: cs42l56: fix DT probe
  - ALSA: hda: Do not unset preset when cleaning up codec
  - selftests/bpf: Verify copy_register_state() preserves parent/live fields
  - ASoC: Intel: sof_rt5682: always set dpcm_capture for amplifiers
  - !2430 [sync] PR-1822: Backport 5.10.168 LTS patches from upstream
  - Fix page corruption caused by racy check in __free_pages
  - arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive
  - arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive
  - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive
  - riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte
  - ceph: flush cap releases when the session is flushed
  - usb: typec: altmodes/displayport: Fix probe pin assign check
  - usb: core: add quirk for Alcor Link AK9563 smartcard reader
  - btrfs: free device in btrfs_close_devices for a single device filesystem
  - net: USB: Fix wrong-direction WARNING in plusb.c
  - pinctrl: intel: Restore the pins that used to be in Direct IRQ mode
  - spi: dw: Fix wrong FIFO level setting for long xfers
  - pinctrl: single: fix potential NULL dereference
  - pinctrl: aspeed: Fix confusing types in return value
  - ALSA: pci: lx6464es: fix a debug loop
  - selftests: forwarding: lib: quote the sysctl values
  - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer
  - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers
  - net/mlx5e: IPoIB, Show unknown speed instead of error
  - net: mscc: ocelot: fix VCAP filters not matching on MAC with "protocol 802.1Q"
  - ice: Do not use WQ_MEM_RECLAIM flag for workqueue
  - uapi: add missing ip/ipv6 header dependencies for linux/stddef.h
  - ionic: clean interrupt before enabling queue to avoid credit race
  - net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY
  - bonding: fix error checking in bond_debug_reregister()
  - xfrm: fix bug with DSCP copy to v6 from v4 tunnel
  - RDMA/usnic: use iommu_map_atomic() under spin_lock()
  - IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
  - xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
  - IB/hfi1: Restore allocated resources on failed copyout
  - xfrm: compat: change expression for switch in xfrm_xlate64
  - can: j1939: do not wait 250 ms if the same addr was already claimed
  - of/address: Return an error when no valid dma-ranges are found
  - tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360
  - ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control()
  - ALSA: hda/realtek: Add Positivo N14KP6-TG
  - btrfs: zlib: zero-initialize zlib workspace
  - btrfs: limit device extents to the device size
  - migrate: hugetlb: check for hugetlb shared PMD in node migration
  - mm/migration: return errno when isolate_huge_page failed
  - iio:adc:twl6030: Enable measurement of VAC
  - bpf: Do not reject when the stack read size is different from the tracked scalar size
  - nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property
  - wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads
  - f2fs: fix to do sanity check on i_extra_isize in is_alive()
  - fbdev: smscufx: fix error handling code in ufx_usb_probe
  - serial: 8250_dma: Fix DMA Rx rearm race
  - serial: 8250_dma: Fix DMA Rx completion race
  - nvmem: core: fix cell removal on error
  - nvmem: core: initialise nvmem->id early
  - drm/i915: Fix potential bit_17 double-free
  - Squashfs: fix handling and sanity checking of xattr_ids count
  - fpga: stratix10-soc: Fix return value check in s10_ops_write_init()
  - x86/debug: Fix stack recursion caused by wrongly ordered DR7 accesses
  - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
  - riscv: disable generation of unwind tables
  - parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case
  - parisc: Fix return code of pdc_iodc_print()
  - nvmem: qcom-spmi-sdam: fix module autoloading
  - iio: imu: fxos8700: fix MAGN sensor scale and unit
  - iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN
  - iio: imu: fxos8700: fix failed initialization ODR mode assignment
  - iio: imu: fxos8700: fix incorrect ODR mode readback
  - iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback
  - iio: imu: fxos8700: fix map label of channel type to MAGN sensor
  - iio: imu: fxos8700: fix IMU data bits returned to user space
  - iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback
  - iio: imu: fxos8700: fix ACCEL measurement range selection
  - iio:adc:twl6030: Enable measurements of VUSB, VBAT and others
  - iio: adc: berlin2-adc: Add missing of_node_put() in error path
  - iio: hid: fix the retval in accel_3d_capture_sample
  - efi: Accept version 2 of memory attributes table
  - ALSA: hda/realtek: Add Acer Predator PH315-54
  - watchdog: diag288_wdt: fix __diag288() inline assembly
  - watchdog: diag288_wdt: do not use stack buffers for hardware data
  - net: qrtr: free memory on error path in radix_tree_insert()
  - Input: i8042 - add Clevo PCX0DX to i8042 quirk table
  - Input: i8042 - add TUXEDO devices to i8042 quirk tables
  - Input: i8042 - merge quirk tables
  - Input: i8042 - move __initconst to fix code styling warning
  - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait
  - usb: dwc3: qcom: enable vbus override when in OTG dr-mode
  - usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API
  - iio: adc: stm32-dfsdm: fill module aliases
  - net/x25: Fix to not accept on connected socket
  - platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table
  - i2c: rk3x: fix a bunch of kernel-doc warnings
  - scsi: target: core: Fix warning on RT kernels
  - i2c: mxs: suppress probe-deferral error message
  - qede: execute xdp_do_flush() before napi_complete_done()
  - qede: add netpoll support for qede driver
  - efi: fix potential NULL deref in efi_mem_reserve_persistent
  - net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
  - virtio-net: Keep stop() to follow mirror sequence of open()
  - selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking
  - selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs
  - selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided
  - selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning
  - ata: libata: Fix sata_down_spd_limit() when no link speed is reported
  - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
  - igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp()
  - net: phy: meson-gxl: Add generic dummy stubs for MMD register access
  - squashfs: harden sanity check in squashfs_read_xattr_id_table
  - netfilter: br_netfilter: disable sabotage_in hook after first suppression
  - net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices
  - sfc: correctly advertise tunneled IPv6 segmentation
  - virtio-net: execute xdp_do_flush() before napi_complete_done()
  - fix "direction" argument of iov_iter_kvec()
  - fix iov_iter_bvec() "direction" argument
  - READ is "data destination", not source...
  - WRITE is "data source", not destination...
  - vhost/net: Clear the pending messages when the backend is removed
  - scsi: Revert "scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT"
  - drm/vc4: hdmi: make CEC adapter name unique
  - arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX
  - bpf: Fix to preserve reg parent/live fields when copying range info
  - bpf: Support <8-byte scalar spill and refill
  - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
  - bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers
  - powerpc/imc-pmu: Revert nest_init_lock to being a mutex
  - bpf: Fix incorrect state pruning for <8B spill/fill
  - bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()
  - firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region
  - ext4: do not mark inode dirty every time when appending using delalloc
  - RDMA/hns: Fix incorrect post-send with direct wqe of wr-list
  - RDMA/hns: Support get XRCD number from firmware
  - Revert "RDMA/hns: Fix incorrect post-send with direct wqe of wr-list in kernel space"
  - Revert "RDMA/hns: Support getting xrcd num from firmware"


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.32.0.109
changelog:
  - !2719 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
  - !2741 [sync] PR-2443:  CVE-2023-37453
  - !2735 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
  - USB: core: Fix oversight in SuperSpeed initialization
  - USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
  - USB: core: Change usb_get_device_descriptor() API
  - USB: core: Unite old scheme and new scheme descriptor reads
  - !2729 [sync] PR-2686: Backport 5.10.179 LTS patches from upstream.
  - nvmet-tcp: Fix a possible UAF in queue intialization setup
  - ASN.1: Fix check for strdup() success
  - ASoC: fsl_asrc_dma: fix potential null-ptr-deref
  - iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger()
  - pwm: hibvt: Explicitly set .polarity in .get_state()
  - pwm: iqs620a: Explicitly set .polarity in .get_state()
  - pwm: meson: Explicitly set .polarity in .get_state()
  - ext4: fix use-after-free in ext4_xattr_set_entry
  - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
  - Revert "ext4: fix use-after-free in ext4_xattr_set_entry"
  - fuse: fix deadlock between atomic O_TRUNC and page invalidation
  - fuse: always revalidate rename target dentry
  - fuse: fix attr version comparison in fuse_read_update_size()
  - fuse: check s_root when destroying sb
  - virtiofs: split requests that exceed virtqueue size
  - virtiofs: clean up error handling in virtio_fs_get_tree()
  - purgatory: fix disabling debug info
  - docs: futex: Fix kernel-doc references after code split-up preparation
  - MIPS: Define RUNTIME_DISCARD_EXIT in LD script
  - sched/uclamp: Fix a uninitialized variable warnings
  - sched/uclamp: Make cpu_overutilized() use util_fits_cpu()
  - sched/uclamp: Make select_idle_capacity() use util_fits_cpu()
  - sched/uclamp: Fix fits_capacity() check in feec()
  - sched/uclamp: Make task_fits_capacity() use util_fits_cpu()
  - mm/khugepaged: check again on anon uffd-wp during isolation
  - mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25
  - kernel/sys.c: fix and improve control flow in __sys_setres[ug]id()
  - memstick: fix memory leak if card device is never registered
  - nilfs2: initialize unused bytes in segment summary blocks
  - iio: light: tsl2772: fix reading proximity-diodes from device tree
  - powerpc/doc: Fix htmldocs errors
  - xen/netback: use same error messages for same errors
  - nvme-tcp: fix a possible UAF when failing to allocate an io queue
  - s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling
  - net: dsa: b53: mmap: add phy ops
  - scsi: core: Improve scsi_vpd_inquiry() checks
  - scsi: megaraid_sas: Fix fw_crash_buffer_show()
  - selftests: sigaltstack: fix -Wuninitialized
  - Input: i8042 - add quirk for Fujitsu Lifebook A574/H
  - f2fs: Fix f2fs_truncate_partial_nodes ftrace event
  - e1000e: Disable TSO on i219-LM card to increase speed
  - mlxsw: pci: Fix possible crash during initialization
  - net: rpl: fix rpl header size calculation
  - mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next()
  - i40e: fix i40e_setup_misc_vector() error handling
  - i40e: fix accessing vsi->active_filters without holding lock
  - netfilter: nf_tables: fix ifdef to also consider nf_tables=m
  - sfc: Fix use-after-free due to selftest_work
  - sfc: Split STATE_READY in to STATE_NET_DOWN and STATE_NET_UP.
  - virtio_net: bugfix overflow inside xdp_linearize_page()
  - regulator: fan53555: Explicitly include bits header
  - netfilter: br_netfilter: fix recent physdev match breakage
  - arm64: dts: imx8mm-evk: correct pmic clock source
  - arm64: dts: meson-g12-common: specify full DMC range
  - arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node
  - ARM: dts: rockchip: fix a typo error for rk3288 spdif node
  - !2724 [22.03-LTS-SP2]Backport 5.10.178 LTS patches from upstream
  - sysctl: Fix data-races in proc_dou8vec_minmax().
  - panic, kexec: make __crash_kexec() NMI safe
  - kexec: turn all kexec_mutex acquisitions into trylocks
  - kexec: move locking into do_kexec_load
  - riscv: Handle zicsr/zifencei issues between clang and binutils
  - kbuild: check CONFIG_AS_IS_LLVM instead of LLVM_IAS
  - kbuild: Switch to 'f' variants of integrated assembler flag
  - kbuild: check the minimum assembler version in Kconfig
  - watchdog: sbsa_wdog: Make sure the timeout programming is within the limits
  - i2c: ocores: generate stop condition after timeout in polling mode
  - x86/rtc: Remove __init for runtime functions
  - sched/fair: Fix imbalance overflow
  - sched/fair: Move calculate of avg_load to a better location
  - powerpc/papr_scm: Update the NUMA distance table for the target node
  - powerpc/pseries: Add support for FORM2 associativity
  - powerpc/pseries: Add a helper for form1 cpu distance
  - powerpc/pseries: Consolidate different NUMA distance update code paths
  - powerpc/pseries: Rename TYPE1_AFFINITY to FORM1_AFFINITY
  - powerpc/pseries: rename min_common_depth to primary_domain_index
  - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach()
  - x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot
  - scsi: ses: Handle enclosure with just a primary component gracefully
  - net: sfp: initialize sfp->i2c_block_size at sfp allocation
  - riscv: add icache flush for nommu sigreturn trampoline
  - asymmetric_keys: log on fatal failures in PE/pkcs7
  - verify_pefile: relax wrapper length check
  - efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L
  - i2c: imx-lpi2c: clean rx/tx buffers upon new message
  - wifi: mwifiex: mark OF related data as maybe unused
  - power: supply: cros_usbpd: reclassify "default case!" as debug
  - libbpf: Fix single-line struct definition output in btf_dump
  - net: macb: fix a memory corruption in extended buffer descriptor mode
  - udp6: fix potential access to stale information
  - RDMA/core: Fix GID entry ref leak when create_ah fails
  - sctp: fix a potential overflow in sctp_ifwdtsn_skip
  - net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()
  - qlcnic: check pci_reset_function result
  - drm/armada: Fix a potential double free in an error handling path
  - sysctl: add proc_dou8vec_minmax()
  - niu: Fix missing unwind goto in niu_alloc_channels()
  - RDMA/cma: Allow UD qp_type to join multicast only
  - IB/mlx5: Add support for 400G_8X lane speed
  - IB/mlx5: Add support for NDR link speed
  - clk: sprd: set max_register according to mapping range
  - mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min
  - mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
  - mtd: rawnand: meson: fix bitmask for length in command word
  - mtdblock: tolerate corrected bit-flips
  - fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace
  - btrfs: fix fast csum implementation detection
  - btrfs: print checksum type and implementation at mount time
  - Bluetooth: Fix race condition in hidp_session_thread
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}
  - ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards
  - ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex()
  - ALSA: i2c/cs8427: fix iec958 mixer control deactivation
  - ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard
  - ALSA: emu10k1: fix capture interrupt handler unlinking
  - Revert "pinctrl: amd: Disable and mask interrupts on resume"
  - bpftool: Print newline before '}' for struct with padding only fields
  - ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown
  - Revert "media: ti: cal: fix possible memory leak in cal_ctx_create()"
  - drm/bridge: lt9611: Fix PLL being unable to lock
  - selftests: intel_pstate: ftime() is deprecated
  - mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()
  - drm/nouveau/disp: Support more modes by checking with lower bpc
  - drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
  - ASoC: hdac_hdmi: use set_stream() instead of set_tdm_slots()
  - tracing: Free error logs of tracing instances
  - can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events
  - can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access
  - ftrace: Mark get_lock_parent_ip() __always_inline
  - perf/core: Fix the same task check in perf_event_set_output
  - iio: adc: ad7791: fix IRQ flags
  - ALSA: hda/realtek: Add quirk for Clevo X370SNW
  - dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs
  - nilfs2: fix sysfs interface lifetime
  - nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread()
  - tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty
  - tty: serial: sh-sci: Fix Rx on RZ/G2L SCI
  - tty: serial: sh-sci: Fix transmit end interrupt handler
  - iio: light: cm32181: Unregister second I2C client if present
  - iio: dac: cio-dac: Fix max DAC write value check for 12-bit
  - iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
  - USB: serial: option: add Quectel RM500U-CN modem
  - USB: serial: option: add Telit FE990 compositions
  - usb: typec: altmodes/displayport: Fix configure initial pin assignment
  - USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs
  - xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu
  - usb: xhci: tegra: fix sleep in atomic call
  - NFSD: callback request does not use correct credential for AUTH_SYS
  - sunrpc: only free unix grouplist after RCU settles
  - net: stmmac: fix up RX flow hash indirection table when setting channels
  - net: ethernet: ti: am65-cpsw: Fix mdio cleanup in probe
  - gpio: davinci: Add irq chip flag to skip set wake
  - ipv6: Fix an uninit variable access bug in __ip6_make_skb()
  - net: qrtr: Do not do DEL_SERVER broadcast after DEL_CLIENT
  - sctp: check send stream number after wait_for_sndbuf
  - net: don't let netpoll invoke NAPI if in xmit context
  - icmp: guard against too small mtu
  - net: qrtr: Fix a refcount bug in qrtr_recvmsg()
  - net: qrtr: combine nameservice into main module
  - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta
  - KVM: s390: pv: fix external interruption loop not always detected
  - pwm: sprd: Explicitly set .polarity in .get_state()
  - pwm: cros-ec: Explicitly set .polarity in .get_state()
  - Drivers: vmbus: Check for channel allocation before looking up relids
  - gpio: GPIO_REGMAP: select REGMAP instead of depending on it
  - !2703 [sync] PR-2672:  fix CVE-2023-46813
  - !2711 [sync] PR-2465: Backport 5.10.177 LTS patches from upstream
  - io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
  - hsr: ratelimit only when errors are printed
  - gfs2: Always check inode size of inline inodes
  - libbpf: Fix btf_dump's packed struct determination
  - selftests/bpf: Add few corner cases to test padding handling of btf_dump
  - libbpf: Fix BTF-to-C converter's padding logic
  - selftests/bpf: Test btf dump for struct with padding only fields
  - zonefs: Fix error message in zonefs_file_dio_append()
  - btrfs: scan device in non-exclusive mode
  - s390/uaccess: add missing earlyclobber annotations to __clear_user()
  - drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub
  - drm/etnaviv: fix reference leak when mmaping imported buffer
  - rcu: Fix rcu_torture_read ftrace event
  - xtensa: fix KASAN report for show_stack
  - ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z
  - ALSA: usb-audio: Fix regression on detection of Roland VS-100
  - ALSA: hda/conexant: Partial revert of a quirk for Lenovo
  - NFSv4: Fix hangs when recovering open state after a server reboot
  - powerpc: Don't try to copy PPR for task with NULL pt_regs
  - pinctrl: at91-pio4: fix domain name assignment
  - pinctrl: amd: Disable and mask interrupts on resume
  - net: phy: dp83869: fix default value for tx-/rx-internal-delay
  - xen/netback: don't do grant copy across page boundary
  - Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table
  - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL
  - cifs: prevent infinite recursion in CIFSGetDFSRefer()
  - Input: focaltech - use explicitly signed char type
  - Input: alps - fix compatibility with -funsigned-char
  - pinctrl: ocelot: Fix alt mode for ocelot
  - net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only
  - bnxt_en: Add missing 200G link speed reporting
  - bnxt_en: Fix typo in PCI id to device description string mapping
  - i40e: fix registers dump after run ethtool adapter self test
  - net: ipa: compute DMA pool size properly
  - ALSA: ymfpci: Fix BUG_ON in probe function
  - ALSA: ymfpci: Fix assignment in if condition
  - s390/vfio-ap: fix memory leak in vfio_ap device driver
  - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
  - net: stmmac: don't reject VLANs when IFF_PROMISC is set
  - net/net_failover: fix txq exceeding warning
  - regulator: Handle deferred clk
  - r8169: fix RTL8168H and RTL8107E rx crc error
  - ptp_qoriq: fix memory leak in probe()
  - scsi: megaraid_sas: Fix crash after a double completion
  - sfc: ef10: don't overwrite offload features at NIC reset
  - mtd: rawnand: meson: invalidate cache on polling ECC bit
  - mips: bmips: BCM6358: disable RAC flush for TP1
  - ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx()
  - tracing: Fix wrong return in kprobe_event_gen_test.c
  - tools/power turbostat: Fix /dev/cpu_dma_latency warnings
  - fbdev: au1200fb: Fix potential divide by zero
  - fbdev: lxfb: Fix potential divide by zero
  - fbdev: intelfb: Fix potential divide by zero
  - fbdev: nvidia: Fix potential divide by zero
  - sched_getaffinity: don't assume 'cpumask_size()' is fully initialized
  - fbdev: tgafb: Fix potential divide by zero
  - ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
  - ALSA: asihpi: check pao in control_message()
  - net: hsr: Don't log netdev_err message on unknown prp dst node
  - md: avoid signed overflow in slot_store()
  - fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY
  - dm crypt: avoid accessing uninitialized tasklet
  - bus: imx-weim: fix branch condition evaluates to a garbage value
  - drm/meson: fix missing component unbind on bind errors
  - drm/meson: Fix error handling when afbcd.ops->init fails
  - kcsan: avoid passing -g for test
  - kernel: kcsan: kcsan_test: build without structleak plugin
  - usb: dwc3: gadget: Add 1ms delay after end transfer command without IOC
  - usb: dwc3: gadget: move cmd_endtransfer to extra function
  - NFSD: fix use-after-free in __nfs42_ssc_open()
  - KVM: fix memoryleak in kvm_init()
  - ocfs2: fix data corruption after failed write
  - sched/fair: Sanitize vruntime of entity being migrated
  - sched/fair: sanitize vruntime of entity being placed
  - firmware: arm_scmi: Fix device node validation for mailbox transport
  - tee: amdtee: fix race condition in amdtee_open_session
  - drm/i915: Preserve crtc_state->inherited during state clearing
  - drm/i915/active: Fix missing debug object activation
  - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy()
  - wifi: mac80211: fix qos on mesh interfaces
  - usb: ucsi: Fix NULL pointer deref in ucsi_connector_change()
  - usb: chipidea: core: fix possible concurrent when switch role
  - usb: chipdea: core: fix return -EINVAL if request role is the same with current role
  - usb: cdns3: Fix issue with using incorrect PCI device function
  - igb: revert rtnl_lock() that causes deadlock
  - fsverity: Remove WQ_UNBOUND from fsverity read workqueue
  - usb: gadget: u_audio: don't let userspace block driver unbind
  - usb: dwc2: fix a devres leak in hw_enable upon suspend resume
  - scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR
  - cifs: empty interface list when server doesn't support query interfaces
  - sh: sanitize the flags on sigreturn
  - net: usb: qmi_wwan: add Telit 0x1080 composition
  - net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990
  - scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file
  - scsi: lpfc: Avoid usage of list iterator variable after loop
  - scsi: ufs: core: Add soft dependency on governor_simpleondemand
  - scsi: hisi_sas: Check devm_add_action() return value
  - scsi: target: iscsi: Fix an error message in iscsi_check_key()
  - selftests/bpf: check that modifier resolves after pointer
  - m68k: Only force 030 bus error if PC not in exception table
  - ca8210: fix mac_len negative array access
  - HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded
  - riscv: Bump COMMAND_LINE_SIZE value to 1024
  - thunderbolt: Use const qualifier for `ring_interrupt_index`
  - thunderbolt: Use scale field when allocating USB3 bandwidth
  - uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2
  - scsi: qla2xxx: Perform lockless command completion in abort path
  - hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs
  - hwmon: fix potential sensor registration fail if of_node is missing
  - platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work
  - Bluetooth: L2CAP: Fix responding with wrong PDU type
  - Bluetooth: L2CAP: Fix not checking for maximum number of DCID
  - Bluetooth: btqcomsmd: Fix command timeout after setting BD address
  - net: mdio: thunder: Add missing fwnode_handle_put()
  - gve: Cache link_speed value from device
  - nvme-tcp: fix nvme_tcp_term_pdu to match spec
  - net/sonic: use dma_mapping_error() for error check
  - erspan: do not use skb_mac_header() in ndo_start_xmit()
  - atm: idt77252: fix kmemleak when rmmod idt77252
  - net/mlx5: E-Switch, Fix an Oops in error handling code
  - net/mlx5: Read the TC mapping of all priorities on ETS query
  - net/mlx5: Fix steering rules cleanup
  - bpf: Adjust insufficient default bpf_jit_limit
  - keys: Do not cache key in task struct if key is requested from kernel thread
  - bootconfig: Fix testcase to increase max node
  - net/ps3_gelic_net: Use dma_mapping_error
  - net/ps3_gelic_net: Fix RX sk_buff length
  - net: phy: Ensure state transitions are processed from phy_stop()
  - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info
  - net: usb: smsc95xx: Limit packet length to skb->len
  - i2c: imx-lpi2c: check only for enabled interrupt flags
  - igc: fix the validation logic for taprio's gate list
  - igbvf: Regard vf reset nack as success
  - intel/igbvf: free irq on the error path in igbvf_request_msix()
  - iavf: fix non-tunneled IPv6 UDP packet type and hashing
  - iavf: fix inverted Rx hash condition leading to disabled hash
  - xsk: Add missing overflow check in xdp_umem_reg
  - ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl
  - ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl
  - power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync
  - drm/sun4i: fix missing component unbind on bind errors
  - serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it
  - serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED
  - tty: serial: fsl_lpuart: fix race on RX DMA shutdown
  - serial: fsl_lpuart: Fix comment typo
  - KVM: Register /dev/kvm as the _very_ last thing during initialization
  - KVM: Pre-allocate cpumasks for kvm_make_all_cpus_request_except()
  - KVM: Optimize kvm_make_vcpus_request_mask() a bit
  - KVM: KVM: Use cpumask_available() to check for NULL cpumask when kicking vCPUs
  - KVM: Clean up benign vcpu->cpu data races when kicking vCPUs
  - ipmi:ssif: Add a timer between request retries
  - ipmi:ssif: resend_msg() cannot fail
  - ipmi:ssif: Increase the message retry time
  - ipmi:ssif: make ssif_i2c_send() void
  - interconnect: qcom: osm-l3: fix icc_onecell_data allocation
  - !2700 [22.03-LTS-SP2]Backport 5.10.176 LTS patches from upstream.
  - !2646 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
  - x86/sev: Check for user-space IOIO pointing to kernel space
  - x86/sev: Check IOBM for IOIO exceptions from user-space
  - x86/sev: Disable MMIO emulation from user mode
  - HID: uhid: Over-ride the default maximum data buffer value with our own
  - HID: core: Provide new max_buffer_size attribute to over-ride the default
  - fs: use consistent setgid checks in is_sxid()
  - attr: add in_group_or_capable()
  - fs: move S_ISGID stripping into the vfs_*() helpers
  - fs: add mode_strip_sgid() helper
  - PCI/DPC: Await readiness of secondary bus after reset
  - PCI: Unify delay handling for reset and resume
  - s390/ipl: add missing intersection check to ipl_report handling
  - drm/i915/active: Fix misuse of non-idle barriers as fence trackers
  - drm/i915: Don't use stolen memory for ring buffers with LLC
  - x86/mm: Fix use of uninitialized buffer in sme_enable()
  - x86/mce: Make sure logged MCEs are processed after sysfs update
  - cpuidle: psci: Iterate backwards over list in psci_pd_remove()
  - fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks
  - mmc: sdhci_am654: lower power-on failed message severity
  - mm/userfaultfd: propagate uffd-wp bit when PTE-mapping the huge zeropage
  - mptcp: avoid setting TCP_CLOSE state twice
  - drm/shmem-helper: Remove another errant put in error path
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro
  - ALSA: hda: intel-dsp-config: add MTL PCI id
  - cifs: Fix smb2_set_path_size()
  - tracing: Make tracepoint lockdep check actually test something
  - tracing: Check field value in hist_field_name()
  - tracing: Make splice_read available again
  - interconnect: fix mem leak when freeing nodes
  - firmware: xilinx: don't make a sleepable memory allocation from an atomic context
  - serial: 8250_em: Fix UART port type
  - tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted
  - ext4: fix possible double unlock when moving a directory
  - drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes
  - sh: intc: Avoid spurious sizeof-pointer-div warning
  - drm/amdkfd: Fix an illegal memory access
  - ext4: fix task hung in ext4_xattr_delete_inode
  - ext4: fail ext4_iget if special inode unallocated
  - jffs2: correct logic when creating a hole in jffs2_write_begin
  - mmc: atmel-mci: fix race between stop command and start of next command
  - media: m5mols: fix off-by-one loop termination error
  - hwmon: (adm1266) Set `can_sleep` flag for GPIO chip
  - hwmon: tmp512: drop of_match_ptr for ID table
  - hwmon: (ucd90320) Add minimum delay between bus accesses
  - hwmon: (ina3221) return prober error code
  - hwmon: (adt7475) Fix masking of hysteresis registers
  - hwmon: (adt7475) Display smoothing attributes in correct order
  - ethernet: sun: add check for the mdesc_grab()
  - qed/qed_mng_tlv: correctly zero out ->min instead of ->hour
  - selftests: net: devlink_port_split.py: skip test if no suitable device available
  - net/iucv: Fix size of interrupt data
  - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull
  - ipv4: Fix incorrect table ID in IOCTL path
  - net: dsa: mv88e6xxx: fix max_mtu of 1492 on 6165, 6191, 6220, 6250, 6290
  - ice: xsk: disable txq irq before flushing hw
  - block: sunvdc: add check for mdesc_grab() returning NULL
  - nvmet: avoid potential UAF in nvmet_req_complete()
  - nvme: fix handling single range discard request
  - block: null_blk: Fix handling of fake timeout request
  - null_blk: Move driver into its own directory
  - drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts kdoc
  - net: usb: smsc75xx: Limit packet length to skb->len
  - net/smc: fix deadlock triggered by cancel_delayed_work_syn()
  - net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails
  - net: tunnels: annotate lockless accesses to dev->needed_headroom
  - qed/qed_dev: guard against a possible division by zero
  - net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler()
  - i40e: Fix kernel crash during reboot when adapter is in recovery mode
  - ipvlan: Make skb->skb_iif track skb->dev for l3s mode
  - nfc: pn533: initialize struct pn533_out_arg properly
  - tcp: tcp_make_synack() can be called from process context
  - scsi: core: Fix a procfs host directory removal regression
  - scsi: core: Fix a comment in function scsi_host_dev_release()
  - netfilter: nft_redir: correct value of inet type `.maxattrs`
  - netfilter: nft_redir: correct length for loading protocol registers
  - netfilter: nft_masq: correct length for loading protocol registers
  - netfilter: nft_nat: correct length for loading protocol registers
  - ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU()
  - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
  - docs: Correct missing "d_" prefix for dentry_operations member d_weak_revalidate
  - clk: HI655X: select REGMAP instead of depending on it
  - drm/meson: fix 1px pink line on GXM when scaling video overlay
  - cifs: Move the in_send statistic to __smb_send_rqst()
  - drm/panfrost: Don't sync rpm suspension after mmu flushing
  - xfrm: Allow transport-mode states with AF_UNSPEC selector
  - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.33.0.110
changelog:
  - !2858 [sync] PR-2851:  bugfix for CVE-2022-45884
  - media: dvb-core: Fix use-after-free due to race at dvb_register_device()
  - media: dvbdev: fix error logic at dvb_register_device()
  - media: dvbdev: Fix memleak in dvb_register_device
  - !2848 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
  - drm/qxl: fix UAF on handle creation
  - !2832 [22.03-LTS-SP2]Backport 5.10.180 LTS patches from upstream.
  - !2518 [sync] PR-2501:  scsi: mpt3sas: Perform additional retries if doorbell read returns 0
  - ext4: fix data races when using cached status extents
  - drm/amd/display: Fix hang when skipping modeset
  - drm/exynos: move to use request_irq by IRQF_NO_AUTOEN flag
  - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h
  - KVM: x86: move guest_pv_has out of user_access section
  - KVM: x86: do not report preemption if the steal time cache is stale
  - KVM: x86: revalidate steal time cache if MSR value changes
  - KVM: x86: do not set st->preempted when going back to user space
  - KVM: x86: Remove obsolete disabling of page faults in kvm_arch_vcpu_put()
  - KVM: Fix steal time asm constraints
  - KVM: x86: Fix recording of guest steal time / preempted status
  - KVM: x86: Ensure PV TLB flush tracepoint reflects KVM behavior
  - drbd: correctly submit flush bio on barrier
  - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
  - ext4: remove a BUG_ON in ext4_mb_release_group_pa()
  - ext4: bail out of ext4_xattr_ibody_get() fails for any reason
  - ext4: add bounds checking in get_max_inline_xattr_value_size()
  - ext4: fix deadlock when converting an inline directory in nojournal mode
  - ext4: improve error recovery code paths in __ext4_remount()
  - KVM: x86: hyper-v: Avoid calling kvm_make_vcpus_request_mask() with vcpu_mask==NULL
  - HID: wacom: insert timestamp to packed Bluetooth (BT) events
  - HID: wacom: Set a default resolution for older tablets
  - drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend
  - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras
  - drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  - drm/panel: otm8009a: Set backlight parent to panel device
  - f2fs: fix potential corruption when moving a directory
  - ARM: dts: s5pv210: correct MIPI CSIS clock name
  - ARM: dts: exynos: fix WM8960 clock name in Itop Elite
  - remoteproc: st: Call of_node_put() on iteration error
  - remoteproc: stm32: Call of_node_put() on iteration error
  - sh: nmi_debug: fix return value of __setup handler
  - sh: init: use OF_EARLY_FLATTREE for early init
  - sh: mcount.S: fix build error when PRINTK is not enabled
  - sh: math-emu: fix macro redefined warning
  - inotify: Avoid reporting event with invalid wd
  - platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i
  - platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet
  - cifs: fix pcchunk length type in smb2_copychunk_range
  - btrfs: print-tree: parent bytenr must be aligned to sector size
  - btrfs: don't free qgroup space unless specified
  - btrfs: fix btrfs_prev_leaf() to not return the same key twice
  - perf symbols: Fix return incorrect build_id size in elf_read_build_id()
  - crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs()
  - perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp()
  - perf pmu: zfree() expects a pointer to a pointer to zero it after freeing its contents
  - perf vendor events power9: Remove UTF-8 characters from JSON files
  - net: enetc: check the index of the SFI rather than the handle
  - virtio_net: suppress cpu stall when free_unused_bufs
  - virtio_net: split free_unused_bufs()
  - net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621
  - ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init`
  - drm/amdgpu: add a missing lock for AMDGPU_SCHED
  - af_packet: Don't send zero-byte data in packet_sendmsg_spkt().
  - ionic: remove noise from ethtool rxnfc error msg
  - octeontx2-vf: Detach LF resources on probe cleanup
  - octeontx2-pf: Disable packet I/O for graceful exit
  - rxrpc: Fix hard call timeout units
  - sfc: Fix module EEPROM reporting for QSFP modules
  - net/sched: act_mirred: Add carrier check
  - watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe()
  - writeback: fix call of incorrect macro
  - net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu
  - sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
  - net/sched: cls_api: remove block_cb from driver_list before freeing
  - net/ncsi: clear Tx enable mode when handling a Config required AEN
  - scsi: qedi: Fix use after free bug in qedi_remove()
  - dm verity: fix error handling for check_at_most_once on FEC
  - dm verity: skip redundant verity_handle_err() on I/O errors
  - mailbox: zynqmp: Fix counts of child nodes
  - mailbox: zynq: Switch to flexible array to simplify code
  - crypto: ccp - Clear PSP interrupt status register before calling handler
  - ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus
  - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  - tty: clean include/linux/tty.h up
  - tty: move some tty-only functions to drivers/tty/tty.h
  - tty: move some internal tty lock enums and functions out of tty.h
  - tty: audit: move some local functions out of tty.h
  - tty: create internal tty.h file
  - scsi: target: core: Avoid smp_processor_id() in preemptible code
  - arm64: dts: qcom: sdm845: correct dynamic power coefficients
  - sound/oss/dmasound: fix 'dmasound_setup' defined but not used
  - debugobject: Ensure pool refill (again)
  - arm64: Stash shadow stack pointer in the task struct on interrupt
  - arm64: Always load shadow stack pointer directly from the task struct
  - perf intel-pt: Fix CYC timestamps after standalone CBR
  - perf auxtrace: Fix address filter entire kernel size
  - dm flakey: fix a crash with invalid table line
  - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path
  - dm clone: call kmem_cache_destroy() in dm_clone_init() error path
  - ia64: fix an addr to taddr in huge_pte_offset()
  - s390/dasd: fix hanging blockdevice after request requeue
  - btrfs: scrub: reject unsupported scrub flags
  - scripts/gdb: fix lx-timerlist for Python3
  - afs: Fix updating of i_size with dv jump from server
  - mfd: tqmx86: Correct board names for TQMxE39x
  - mfd: tqmx86: Specify IO port register range more precisely
  - mfd: tqmx86: Add support for TQMx110EB and TQMxE40x
  - mfd: tqmx86: Remove incorrect TQMx90UC board ID
  - mfd: tqmx86: Do not access I2C_DETECT register through io_base
  - thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe
  - dmaengine: at_xdmac: do not enable all cyclic channels
  - dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing
  - dmaengine: dw-edma: Fix to change for continuous transfer
  - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port
  - pwm: mtk-disp: Disable shadow registers before setting backlight values
  - pwm: mtk-disp: Adjust the clocks to avoid them mismatch
  - pwm: mtk-disp: Don't check the return code of pwmchip_remove()
  - leds: tca6507: Fix error handling of using fwnode_property_read_string
  - dmaengine: mv_xor_v2: Fix an error code.
  - leds: TI_LMU_COMMON: select REGMAP instead of depending on it
  - ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
  - openrisc: Properly store r31 to pt_regs on unhandled exceptions
  - clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails
  - RDMA/mlx5: Use correct device num_ports when modify DC
  - SUNRPC: remove the maximum number of retries in call_bind_status
  - RDMA/mlx5: Fix flow counter query via DEVX
  - Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
  - input: raspberrypi-ts: Release firmware handle when not needed
  - firmware: raspberrypi: Introduce devm_rpi_firmware_get()
  - NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease
  - IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests
  - IB/hfi1: Add additional usdma traces
  - IB/hfi1: Add AIP tx traces
  - IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order
  - RDMA/srpt: Add a check for valid 'mad_agent' pointer
  - RDMA/cm: Trace icm_send_rej event before the cm state is reset
  - RDMA/siw: Remove namespace check from siw_netdev_event()
  - clk: add missing of_node_put() in "assigned-clocks" property parsing
  - power: supply: generic-adc-battery: fix unit scaling
  - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time
  - RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
  - rtc: omap: include header for omap_rtc_power_off_program prototype
  - workqueue: Fix hung time report of worker pools
  - RDMA/rdmavt: Delete unnecessary NULL check
  - RDMA/siw: Fix potential page_array out of range access
  - clk: at91: clk-sam9x60-pll: fix return value check
  - perf/core: Fix hardlockup failure caused by perf throttle
  - powerpc/rtas: use memmove for potentially overlapping buffer copy
  - macintosh: via-pmu-led: requires ATA to be set
  - powerpc/sysdev/tsi108: fix resource printk format warnings
  - powerpc/wii: fix resource printk format warnings
  - powerpc/mpc512x: fix resource printk format warning
  - macintosh/windfarm_smu_sat: Add missing of_node_put()
  - spmi: Add a check for remove callback when removing a SPMI driver
  - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
  - serial: 8250: Add missing wakeup event reporting
  - tty: serial: fsl_lpuart: adjust buffer length to the intended size
  - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
  - usb: mtu3: fix kernel panic at qmu transfer done irq handler
  - usb: chipidea: fix missing goto in `ci_hdrc_probe`
  - usb: gadget: tegra-xudc: Fix crash in vbus_draw
  - sh: sq: Fix incorrect element size for allocating bitmap buffer
  - i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path
  - spi: cadence-quadspi: fix suspend-resume implementations
  - ASoC: fsl_mqs: move of_node_put() to the correct location
  - coresight: etm_pmu: Set the module field
  - scripts/gdb: bail early if there are no generic PD
  - scripts/gdb: bail early if there are no clocks
  - ia64: salinfo: placate defined-but-not-used warning
  - ia64: mm/contig: fix section mismatch warning/error
  - PCI/EDR: Clear Device Status after EDR error recovery
  - of: Fix modalias string generation
  - vmci_host: fix a race condition in vmci_host_poll() causing GPF
  - spi: fsl-spi: Fix CPM/QE mode Litte Endian
  - spi: qup: Don't skip cleanup in remove's error path
  - linux/vt_buffer.h: allow either builtin or modular for macros
  - ASoC: es8316: Handle optional IRQ assignment
  - ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ
  - PCI: imx6: Install the fault handler only on compatible match
  - spi: imx: Don't skip cleanup in remove's error path
  - spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync
  - iio: light: max44009: add missing OF device matching
  - fpga: bridge: fix kernel-doc parameter description
  - usb: dwc3: gadget: Change condition for processing suspend event
  - usb: host: xhci-rcar: remove leftover quirk handling
  - pstore: Revert pmsg_lock back to a normal mutex
  - ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it
  - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.
  - net: amd: Fix link leak when verifying config failed
  - netlink: Use copy_to_user() for optval in netlink_getsockopt().
  - Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work"
  - ipv4: Fix potential uninit variable access bug in __ip_make_skb()
  - net/sched: sch_fq: fix integer overflow of "credit"
  - bpf: Don't EFAULT for getsockopt with optval=NULL
  - ixgbe: Enable setting RSS table to default values
  - ixgbe: Allow flow hash to be set via ethtool
  - wifi: iwlwifi: fw: fix memory leak in debugfs
  - wifi: iwlwifi: mvm: check firmware response size
  - wifi: iwlwifi: make the loop for card preparation effective
  - jdb2: Don't refuse invalidation of already invalidated buffers
  - wifi: iwlwifi: fw: move memset before early return
  - wifi: iwlwifi: yoyo: Fix possible division by zero
  - md/raid10: fix memleak of md thread
  - bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap
  - nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage"
  - nvme: fix async event trace event
  - nvme: handle the persistent internal error AER
  - bpf, sockmap: fix deadlocks in the sockhash and sockmap
  - net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling
  - f2fs: fix to avoid use-after-free for cached IPU bio
  - xsk: Fix unaligned descriptor validation
  - bpftool: Fix bug for long instructions in program CFG dumps
  - selftests/bpf: Wait for receive in cg_storage_multi test
  - net: qrtr: correct types of trace event parameters
  - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg()
  - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg()
  - crypto: sa2ul - Select CRYPTO_DES
  - crypto: caam - Clear some memory in instantiate_rng
  - f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages()
  - f2fs: apply zone capacity to all zone type
  - f2fs: enforce single zone capacity
  - f2fs: handle dqget error in f2fs_transfer_project_quota()
  - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS
  - scsi: target: iscsit: Fix TAS handling during conn cleanup
  - scsi: target: Fix multiple LUN_RESET handling
  - scsi: target: Make state_list per CPU
  - scsi: target: Rename cmd.bad_sector to cmd.sense_info
  - scsi: target: Rename struct sense_info to sense_detail
  - net/packet: convert po->auxdata to an atomic flag
  - net/packet: convert po->origdev to an atomic flag
  - net/packet: annotate accesses to po->xmit
  - vlan: partially enable SIOCSHWTSTAMP in container
  - bpf: Remove misleading spec_v1 check on var-offset stack read
  - scm: fix MSG_CTRUNC setting condition for SO_PASSSEC
  - bpf: fix precision propagation verbose logging
  - bpf: take into account liveness when propagating precision
  - wifi: rtw88: mac: Return the original error from rtw_mac_power_switch()
  - wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser()
  - tools: bpftool: Remove invalid ' json escape
  - wifi: ath6kl: reduce WARN to dev_dbg() in callback
  - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list()
  - wifi: ath9k: hif_usb: fix memory leak of remain_skbs
  - wifi: ath6kl: minor fix for allocation size
  - tick/common: Align tick period with the HZ tick.
  - tick: Get rid of tick_period
  - drm/i915: Make intel_get_crtc_new_encoder() less oopsy
  - debugobject: Prevent init race with static objects
  - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step
  - x86/ioapic: Don't return 0 from arch_dynirq_lower_bound()
  - regulator: stm32-pwr: fix of_iomap leak
  - media: venus: dec: Fix handling of the start cmd
  - media: venus: vdec: Handle DRC after drain
  - media: venus: preserve DRC state across seeks
  - media: venus: vdec: Make decoder return LAST flag for sufficient event
  - media: venus: vdec: Fix non reliable setting of LAST flag
  - media: rc: gpio-ir-recv: Fix support for wake-up
  - media: rcar_fdp1: Fix refcount leak in probe and remove function
  - media: rcar_fdp1: Fix the correct variable assignments
  - media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource()
  - media: rcar_fdp1: fix pm_runtime_get_sync() usage count
  - media: rcar_fdp1: simplify error check logic at fdp_open()
  - x86/apic: Fix atomic update of offset in reserve_eilvt_offset()
  - regulator: core: Avoid lockdep reports when resolving supplies
  - regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow()
  - drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe()
  - ARM: dts: gta04: fix excess dma channel usage
  - mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data
  - ACPI: processor: Fix evaluating _PDC method when running as Xen dom0
  - drm: msm: adreno: Disable preemption on Adreno 510
  - drm/msm/adreno: drop bogus pm_runtime_set_active()
  - drm/msm/adreno: Defer enabling runpm until hw_init()
  - media: max9286: Free control handler
  - drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535
  - firmware: qcom_scm: Clear download bit during reboot
  - media: bdisp: Add missing check for create_workqueue
  - ARM: dts: qcom: ipq8064: Fix the PCI I/O port range
  - ARM: dts: qcom: ipq8064: reduce pci IO size to 64K
  - ARM: dts: qcom: ipq4019: Fix the PCI I/O port range
  - arm64: dts: qcom: msm8996: Fix the PCI I/O port range
  - arm64: dts: qcom: ipq8074: Fix the PCI I/O port range
  - arm64: dts: qcom: msm8998: Fix the PCI I/O port range
  - arm64: dts: qcom: sdm845: Fix the PCI I/O port range
  - arm64: dts: qcom: sdm845: correct dynamic power coefficients
  - arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name
  - EDAC/skx: Fix overflows on the DRAM row address mapping arrays
  - drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources
  - arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table
  - arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table
  - soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe
  - soc: ti: pm33xx: Enable basic PM runtime support for genpd
  - drm/probe-helper: Cancel previous job before starting new one
  - drm/vgem: add missing mutex_destroy
  - drm/rockchip: Drop unbalanced obj unref
  - erofs: fix potential overflow calculating xattr_isize
  - erofs: stop parsing non-compact HEAD index if clusterofs is invalid
  - tpm, tpm_tis: Claim locality when interrupts are reenabled on resume
  - tpm, tpm: Implement usage counter for locality
  - tpm, tpm_tis: Claim locality before writing interrupt registers
  - tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed
  - tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register
  - tpm, tpm_tis: Do not skip reset of original interrupt vector
  - selinux: ensure av_permissions.h is built when needed
  - selinux: fix Makefile dependencies of flask.h
  - selftests/resctrl: Check for return value after write_schemata()
  - selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem
  - rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check
  - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent
  - wifi: rtl8xxxu: RTL8192EU always needs full init
  - mailbox: zynqmp: Fix typo in IPI documentation
  - mailbox: zynqmp: Fix IPI isr handling
  - nilfs2: fix infinite loop in nilfs_mdt_get_block()
  - nilfs2: do not write dirty data after degenerating to read-only
  - parisc: Fix argument pointer in real64_call_asm()
  - sound/oss/dmasound: fix build when drivers are mixed =y/=m
  - iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE
  - i2c: omap: Fix standard mode false ACK readings
  - KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted
  - reiserfs: Add security prefix to xattr name in reiserfs_security_write()
  - crypto: safexcel - Cleanup ring IRQ workqueues on load failure
  - crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON()
  - ring-buffer: Sync IRQ works before buffer destruction
  - pwm: meson: Fix g12a ao clk81 name
  - pwm: meson: Fix axg ao mux parents
  - kheaders: Use array declaration instead of char
  - ipmi: fix SSIF not responding under certain cond.
  - ipmi:ssif: Add send_retries increment
  - MIPS: fw: Allow firmware to pass a empty env
  - tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem
  - xhci: fix debugfs register accesses while suspended
  - staging: iio: resolver: ads1210: fix config mode
  - ext4: use ext4_journal_start/stop for fast commit transactions
  - blk-crypto: make blk_crypto_evict_key() more robust
  - blk-crypto: make blk_crypto_evict_key() return void
  - blk-mq: release crypto keyslot before reporting I/O complete
  - hwmon: (adt7475) Use device_property APIs when configuring polarity
  - hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write
  - USB: dwc3: fix runtime pm imbalance on unbind
  - USB: dwc3: fix runtime pm imbalance on probe errors
  - PCI: qcom: Fix the incorrect register usage in v2.7.0 config
  - PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
  - wireguard: timers: cast enum limits members to int in prints
  - asm-generic/io.h: suppress endianness warnings for readq() and writeq()
  - ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750
  - iio: adc: palmas_gpadc: fix NULL dereference on rmmod
  - driver core: Don't require dynamic_debug for initcall_debug probe timing
  - USB: serial: option: add UNISOC vendor and TOZED LT70C product
  - drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
  - KVM: arm64: Fix buffer overflow in kvm_arm_set_fw_reg()
  - counter: 104-quad-8: Fix race condition between FLAG and CNTR reads
  - !2802 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
  - cpufreq: make interface functions and lock holding state clear
  - cpufreq: Abort show()/store() for half-initialized policies
  - scsi: mpt3sas: Perform additional retries if doorbell read returns 0


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.34.0.111
changelog:
  - !2999 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
  - !1722 [sync] PR-1597: Fix the bugs of 3SNIC driver compilation failure while using clang
  - !2904 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
  - !3012  config: update openeuler_defconfig for x86 with gcc 10.3.1
  - config: update openeuler_defconfig for x86 with gcc 10.3.1
  - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
  - !2974 Add script to check & update openeuler_defconfig
  - config: update openeuler_defconfig for arm64
  - config: update openeuler_defconfig for x86
  - kconfig: Add script to check & update openeuler_defconfig
  - Revert "kconfig: Add script to update openeuler_defconfig"
  - !2433 [sync] PR-2326: fix CVE-2023-20569
  - !1564 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
  - !2910 [sync] PR-1613:  arm64/mpam: implement CPU_PM notifier
  - !2044 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
  - !1898 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
  - !1943 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
  - !1985 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
  - !2654 [sync] PR-2377:  tracing: Backport bugfixes
  - !2931 revert: : ab873cbbab39 x86/microcode: Rip out the OLD_INTERFACE
  - !1741 [sync] PR-1734:  arm64/mpam: mark partid non-exclusive if self-owned
  - !2901  mm/hugetlb: fix parameter passed to allocate bootmem memory
  - !1403 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
  - Revert "x86/microcode: Rip out the OLD_INTERFACE"
  - !2635 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
  - !1810 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
  - !2813 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
  - !1410 [sync] PR-1353:  ubifs mainline bugfix patch backport
  - !1373 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
  - !892 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
  - !902 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
  - !2021 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
  - arm64/mpam: implement CPU_PM notifier
  - !1514 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
  - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
  - !2750 [sync] PR-2683:  fix memcgv1 oom meminfo bug
  - mm/hugetlb: fix parameter passed to allocate bootmem memory
  - ext4: recheck buffer valid after page unlock
  - memcg: dump memory.stat during cgroup OOM for v1
  - memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
  - seq_buf: Add seq_buf_do_printk() helper
  - seq_buf: Add seq_buf_terminate() API
  - ring-buffer: Do not attempt to read past "commit"
  - ring-buffer: Do not swap cpu_buffer during resize process
  - preempt/dynamic: Fix setup_preempt_mode() return value
  - kabi: Allow extra bugsints (bsc#1213927).
  - x86/cpufeatures: Fix abi breakage caused by NCAPINTS in cpufeature header file.
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - objtool/x86: Fix SRSO mess
  - x86/srso: Correct the mitigation status when SMT is disabled
  - objtool/x86: Fixup frame-pointer vs rethunk
  - x86/srso: Disable the mitigation on unaffected configurations
  - x86/retpoline: Don't clobber RFLAGS during srso_safe_ret()
  - x86/cpu: Cleanup the untrain mess
  - x86/cpu: Rename srso_(.*)_alias to srso_alias_1
  - x86/cpu: Rename original retbleed methods
  - x86/cpu: Clean up SRSO return thunk mess
  - x86/alternative: Make custom return thunk unconditional
  - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk()
  - x86/cpu: Fix __x86_return_thunk symbol type
  - x86/ibt: Add ANNOTATE_NOENDBR
  - objtool: Add frame-pointer-specific function ignore
  - x86/srso: Fix build breakage with the LLVM linker
  - x86/srso: Tie SBPB bit setting to microcode patch detection
  - x86/srso: Fix return thunks in generated code
  - x86/srso: Add IBPB on VMEXIT
  - x86/srso: Add IBPB
  - x86/srso: Add SRSO_NO support
  - x86/srso: Add IBPB_BRTYPE support
  - x86/srso: Add a Speculative RAS Overflow mitigation
  - x86/cpu, kvm: Add support for CPUID_80000021_EAX
  - x86/bugs: Increase the x86 bugs vector size to two u32s
  - tools headers cpufeatures: Sync with the kernel sources
  - Huawei BMA: To fix the bug in the iBMA driver code
  - crypto:padata: Fix return err for PADATA_RESET
  - tracing: Fix memleak due to race between current_tracer and trace
  - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
  - ring-buffer: Fix deadloop issue on reading trace_pipe
  - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
  - arm64/mpam: mark partid non-exclusive if self-owned
  - Fix the bugs of 3SNIC driver compilation failure while using clang
  - arm64/mpam: fix missing kfree domain's ctrl_val arrray
  - SUNRPC: Ensure that the gssproxy client can start in a connected state
  - ubi: Fix return value overwrite issue in try_write_vid_and_data()
  - ubifs: Fix memory leak in do_rename
  - ubifs: Free memory for tmpfile name
  - bpf: cpumap: Fix memory leak in cpu_map_update_elem
  - ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
  - net: sched: fix NULL pointer dereference in mq_attach


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.35.0.112
changelog:
  - !3195 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
  - !3003 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
  - ksmbd: delete asynchronous work from list
  - ksmbd: fix typo, syncronous->synchronous
  - ksmbd: fix possible memory leak in smb2_lock()
  - ksmbd: replace usage of found with dedicated list iterator variable
  - !3105 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
  - !3167 [sync] PR-3152:  scsi: scsi_device_gets returns failure
  - scsi: fix kabi broken in struct Scsi_Host
  - scsi: don't fail if hostt->module is NULL
  - scsi: scsi_device_gets returns failure when the module is NULL.
  - !3143 [sync] PR-2970:  Add error handle for add_disk
  - !3146 [22.03-LTS-SP2] 5.10.185 - 5.10.187 LTS补丁回合
  - x86/microcode/AMD: Load late on both threads too
  - bpf/btf: Accept function names that contain dots
  - i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle
  - x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys
  - drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl
  - drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl
  - drm/exynos: vidi: fix a wrong error return
  - ARM: dts: Fix erroneous ADS touchscreen polarities
  - s390/purgatory: disable branch profiling
  - ASoC: nau8824: Add quirk to active-high jack-detect
  - ASoC: simple-card: Add missing of_node_put() in case of error
  - spi: lpspi: disable lpspi module irq in DMA mode
  - s390/cio: unregister device when the only path is gone
  - Input: soc_button_array - add invalid acpi_index DMI quirk handling
  - usb: gadget: udc: fix NULL dereference in remove()
  - nfcsim.c: Fix error checking for debugfs_create_dir
  - media: cec: core: don't set last_initiator if tx in progress
  - arm64: Add missing Set/Way CMO encodings
  - HID: wacom: Add error check to wacom_parse_and_register()
  - scsi: target: iscsi: Prevent login threads from racing between each other
  - gpiolib: Fix GPIO chip IRQ initialization restriction
  - gpio: Allow per-parent interrupt data
  - sch_netem: acquire qdisc lock in netem_change()
  - Revert "net: phy: dp83867: perform soft reset and retain established link"
  - netfilter: nfnetlink_osf: fix module autoload
  - netfilter: nf_tables: disallow element updates of bound anonymous sets
  - netfilter: nft_set_pipapo: .walk does not deal with generations
  - be2net: Extend xmit workaround to BE3 chip
  - net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch
  - ipvs: align inner_mac_header for encapsulation
  - mmc: usdhi60rol0: fix deferred probing
  - mmc: sh_mmcif: fix deferred probing
  - mmc: sdhci-acpi: fix deferred probing
  - mmc: owl: fix deferred probing
  - mmc: omap_hsmmc: fix deferred probing
  - mmc: omap: fix deferred probing
  - mmc: mvsdio: fix deferred probing
  - mmc: mtk-sd: fix deferred probing
  - net: qca_spi: Avoid high load if QCA7000 is not available
  - xfrm: Linearize the skb after offloading if needed.
  - selftests: net: fcnal-test: check if FIPS mode is enabled
  - selftests: net: vrf-xfrm-tests: change authentication and encryption algos
  - xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets
  - bpf: Fix verifier id tracking of scalars on spill
  - bpf: track immediate values written to stack by BPF_ST instruction
  - xfrm: Ensure policies always checked on XFRM-I input path
  - xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c
  - ieee802154: hwsim: Fix possible memory leaks
  - memfd: check for non-NULL file_seals in memfd_create() syscall
  - x86/mm: Avoid using set_pgd() outside of real PGD pages
  - nilfs2: prevent general protection fault in nilfs_clear_dirty_page()
  - io_uring/net: disable partial retries for recvmsg with cmsg
  - io_uring/net: clear msg_controllen on partial sendmsg retry
  - io_uring/net: save msghdr->msg_control for retries
  - writeback: fix dereferencing NULL mapping->host on writeback_page_template
  - regmap: spi-avmm: Fix regmap_bus max_raw_write
  - regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK
  - ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN
  - mmc: mmci: stm32: fix max busy timeout calculation
  - mmc: meson-gx: remove redundant mmc_request_done() call from irq context
  - mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916
  - PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic
  - PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev
  - Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally"
  - PCI: hv: Fix a race condition bug in hv_pci_query_relations()
  - Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs
  - nilfs2: fix buffer corruption due to concurrent device reads
  - selftests: mptcp: join: skip check if MIB counter not supported
  - selftests: mptcp: pm nl: remove hardcoded default limits
  - selftests: mptcp: lib: skip if not below kernel version
  - selftests: mptcp: lib: skip if missing symbol
  - tick/common: Align tick period during sched_timer setup
  - tracing: Add tracing_reset_all_online_cpus_unlocked() function
  - net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs
  - drm/amd/display: fix the system hang while disable PSR
  - um: Fix build w/o CONFIG_PM_SLEEP
  - drm/i915/gen11+: Only load DRAM information from pcode
  - drm/i915/dg1: Wait for pcode/uncore handshake at startup
  - nilfs2: reject devices with insufficient block count
  - mmc: block: ensure error propagation for non-blk
  - batman-adv: Switch to kstrtox.h for kstrtou64
  - neighbour: delete neigh_lookup_nodev as not used
  - net: Remove unused inline function dst_hold_and_use()
  - neighbour: Remove unused inline function neigh_key_eq16()
  - rcu/kvfree: Avoid freeing new kfree_rcu() memory after old grace period
  - afs: Fix vlserver probe RTT handling
  - selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET
  - net: tipc: resize nlattr array to correct size
  - net: lapbether: only support ethernet devices
  - net/sched: cls_api: Fix lockup on flushing explicitly created chain
  - ext4: drop the call to ext4_error() from ext4_get_group_info()
  - drm/nouveau: add nv_encoder pointer check for NULL
  - drm/nouveau/dp: check for NULL nv_connector->native_mode
  - drm/nouveau: don't detect DSM for non-NVIDIA device
  - igb: fix nvm.ops.read() error handling
  - sctp: fix an error code in sctp_sf_eat_auth()
  - ipvlan: fix bound dev checking for IPv6 l3s mode
  - IB/isert: Fix incorrect release of isert connection
  - IB/isert: Fix possible list corruption in CMA handler
  - IB/isert: Fix dead lock in ib_isert
  - IB/uverbs: Fix to consider event queue closing also upon non-blocking mode
  - RDMA/cma: Always set static rate to 0 for RoCE
  - RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions
  - octeontx2-af: fixed resource availability check
  - iavf: remove mask from iavf_irq_enable_queues()
  - RDMA/rxe: Fix the use-before-initialization error of resp_pkts
  - RDMA/rxe: Removed unused name from rxe_task struct
  - RDMA/rxe: Remove the unused variable obj
  - ping6: Fix send to link-local addresses with VRF.
  - net: enetc: correct the indexes of highest and 2nd highest TCs
  - netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM
  - spi: fsl-dspi: avoid SCK glitches with continuous transfers
  - RDMA/rtrs: Fix the last iu->buf leak in err path
  - usb: dwc3: gadget: Reset num TRBs before giving back the request
  - serial: lantiq: add missing interrupt ack
  - USB: serial: option: add Quectel EM061KGL series
  - ALSA: hda/realtek: Add a quirk for Compaq N14JP6
  - net: usb: qmi_wwan: add support for Compal RXM-G1
  - RDMA/uverbs: Restrict usage of privileged QKEYs
  - nouveau: fix client work fence deletion race
  - powerpc/purgatory: remove PGO flags
  - x86/purgatory: remove PGO flags
  - kexec: support purgatories with .text.hot sections
  - nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
  - nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key()
  - nios2: dts: Fix tse_mac "max-frame-size" property
  - ocfs2: check new file size on fallocate call
  - ocfs2: fix use-after-free when unmounting read-only filesystem
  - epoll: ep_autoremove_wake_function should use list_del_init_careful
  - irqchip/gic: Correctly validate OF quirk descriptors
  - drm:amd:amdgpu: Fix missing buffer object unlock in failure path
  - xen/blkfront: Only check REQ_FUA for writes
  - ASoC: dwc: move DMA init to snd_soc_dai_driver probe()
  - mips: Move initrd_start check after initrd address sanitisation.
  - MIPS: Alchemy: fix dbdma2
  - parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory()
  - parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu()
  - ASoC: soc-pcm: test if a BE can be prepared
  - btrfs: handle memory allocation failure in btrfs_csum_one_bio
  - btrfs: scrub: try harder to mark RAID56 block groups read-only
  - power: supply: Fix logic checking if system is running from battery
  - irqchip/gic-v3: Disable pseudo NMIs on Mediatek devices w/ firmware issues
  - regulator: Fix error checking for debugfs_create_dir
  - platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0
  - power: supply: Ratelimit no data debug output
  - tools: gpio: fix debounce_period_us output of lsgpio
  - ARM: dts: vexpress: add missing cache properties
  - power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule()
  - power: supply: sc27xx: Fix external_power_changed race
  - power: supply: ab8500: Fix external_power_changed race
  - test_firmware: fix a memory leak with reqs buffer
  - test_firmware: prevent race conditions by a correct implementation of locking
  - test_firmware: Use kstrtobool() instead of strtobool()
  - kernel.h: split out kstrtox() and simple_strtox() to a separate header
  - lib: cleanup kstrto*() usage
  - block: Set memalloc_noio to false in the error path
  - block: Fix minor range check in device_add_disk()
  - block: clear ->slave_dir when dropping the main slave_dir reference
  - block: call blk_get_queue earlier in __device_add_disk
  - block: check minor range in device_add_disk()
  - block: fix memory leak for elevator on add_disk failure
  - block: Fix the kabi change on blk_register_region
  - block: Fix the kabi change in device_add_disk
  - block: fix error unwinding in device_add_disk
  - block: fix device_add_disk() kobject_create_and_add() error handling
  - block: add error handling for device_add_disk / add_disk
  - block: return errors from blk_register_region
  - block: add the events* attributes to disk_attrs
  - block: return errors from disk_alloc_events
  - block: return errors from blk_integrity_add
  - block: call blk_integrity_add earlier in device_add_disk
  - block: fold register_disk into device_add_disk
  - !1812 [sync] PR-1724: Net: ethernet: Support management channel of the host tool in 3snic 3s9xx network driver
  - !3086 [sync] PR-2938: Backport 5.10.183 - 5.10.184 LTS patches from upstream
  - fs/dirty_pages: add last read check in seq_read_dirty()
  - !3077 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
  - !3080 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
  - Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE"
  - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate()
  - btrfs: check return value of btrfs_commit_transaction in relocation
  - drm/atomic: Don't pollute crtc_state->mode_blob with error pointers
  - MIPS: locking/atomic: Fix atomic{_64,}_sub_if_positive
  - tcp: fix tcp_min_tso_segs sysctl
  - ext4: only check dquot_initialize_needed() when debugging
  - Revert "ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled"
  - vhost: support PACKED when setting-getting vring_base
  - riscv: fix kprobe __user string arg print fault issue
  - eeprom: at24: also select REGMAP
  - i2c: sprd: Delete i2c adapter in .remove's error path
  - ASoC: codecs: wsa881x: do not set can_multi_write flag
  - staging: vc04_services: fix gcc-13 build warning
  - usb: usbfs: Use consistent mmap functions
  - usb: usbfs: Enforce page requirements for mmap
  - pinctrl: meson-axg: add missing GPIOA_18 gpio group
  - rbd: get snapshot context after exclusive lock is ensured to be held
  - rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting
  - tee: amdtee: Add return_origin to 'struct tee_cmd_load_ta'
  - Bluetooth: hci_qca: fix debugfs registration
  - Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk
  - s390/dasd: Use correct lock while counting channel queue length
  - ceph: fix use-after-free bug for inodes when flushing capsnaps
  - can: j1939: avoid possible use-after-free when j1939_can_rx_register fails
  - can: j1939: change j1939_netdev_lock type to mutex
  - can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket
  - drm/amdgpu: fix xclk freq on CHIP_STONEY
  - ALSA: hda/realtek: Add Lenovo P3 Tower platform
  - ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  - Input: psmouse - fix OOB access in Elantech protocol
  - Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  - batman-adv: Broken sync while rescheduling delayed work
  - bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
  - bnxt_en: Query default VLAN before VNIC setup on a VF
  - bnxt_en: Don't issue AP reset during ethtool's reset operation
  - lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release()
  - bpf: Add extra path pointer check to d_path helper
  - net: sched: fix possible refcount leak in tc_chain_tmplt_add()
  - net: sched: move rtm_tca_policy declaration to include file
  - rfs: annotate lockless accesses to RFS sock flow table
  - rfs: annotate lockless accesses to sk->sk_rxhash
  - ipv6: rpl: Fix Route of Death.
  - netfilter: ipset: Add schedule point in call_ad().
  - netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper
  - qed/qede: Fix scheduling while atomic
  - Bluetooth: L2CAP: Add missing checks for invalid DCID
  - Bluetooth: Fix l2cap_disconnect_req deadlock
  - net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
  - net/smc: Avoid to access invalid RMBs' MRs in SMCRv1 ADD LINK CONT
  - net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods
  - wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  - afs: Fix setting of mtime when creating a file/dir/symlink
  - spi: qup: Request DMA before enabling clocks
  - staging: vchiq_core: drop vchiq_status from vchiq_initialise
  - i40e: fix build warning in ice_fltr_add_mac_to_list()
  - i40e: fix build warnings in i40e_alloc.h
  - i40iw: fix build warning in i40iw_manage_apbvt()
  - block/blk-iocost (gcc13): keep large values in a new enum
  - blk-iocost: avoid 64-bit division in ioc_timer_fn
  - f2fs: fix iostat lock protection
  - bonding (gcc13): synchronize bond_{a,t}lb_xmit() types
  - remove the sx8 block driver
  - sfc (gcc13): synchronize ef100_enqueue_skb()'s return type
  - gcc-plugins: Reorganize gimple includes for GCC 13
  - ata: ahci: fix enum constants for gcc-13
  - ext4: enable the lazy init thread when remounting read/write
  - selftests: mptcp: join: skip if MPTCP is not supported
  - selftests: mptcp: simult flows: skip if MPTCP is not supported
  - selftests: mptcp: diag: skip if MPTCP is not supported
  - crypto: ccp: Play nice with vmalloc'd memory for SEV command structs
  - crypto: ccp: Reject SEV commands with mismatching command buffer
  - media: ti-vpe: cal: avoid FIELD_GET assertion
  - tpm, tpm_tis: Request threaded interrupt handler
  - regmap: Account for register length when chunking
  - KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()
  - KVM: x86: Account fastpath-only VM-Exits in vCPU stats
  - test_firmware: fix the memory leak of the allocated firmware buffer
  - serial: 8250_tegra: Fix an error handling path in tegra_uart_probe()
  - fbcon: Fix null-ptr-deref in soft_cursor
  - ext4: add lockdep annotations for i_data_sem for ea_inode's
  - ext4: disallow ea_inodes with extended attributes
  - ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find()
  - ext4: add EA_INODE checking to ext4_iget()
  - selftests: mptcp: pm nl: skip if MPTCP is not supported
  - selftests: mptcp: connect: skip if MPTCP is not supported
  - tracing/probe: trace_probe_primary_from_call(): checked list_first_entry
  - selinux: don't use make's grouped targets feature yet
  - btrfs: fix csum_tree_block page iteration to avoid tripping on -Werror=array-bounds
  - tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK
  - mmc: vub300: fix invalid response handling
  - eth: sun: cassini: remove dead code
  - gcc-12: disable '-Wdangling-pointer' warning for now
  - ath6kl: Use struct_group() to avoid size-mismatched casting
  - ACPI: thermal: drop an always true check
  - x86/boot: Wrap literal addresses in absolute_pointer()
  - ata: libata-scsi: Use correct device no in ata_find_dev()
  - scsi: stex: Fix gcc 13 warnings
  - misc: fastrpc: reject new invocations during device removal
  - misc: fastrpc: return -EPIPE to invocations on device removal
  - usb: gadget: f_fs: Add unbind event before functionfs_unbind
  - net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
  - iio: dac: build ad5758 driver when AD5758 is selected
  - iio: adc: ad7192: Change "shorted" channels to differential
  - iio: dac: mcp4725: Fix i2c_master_send() return value handling
  - iio: light: vcnl4035: fixed chip ID check
  - iio: imu: inv_icm42600: fix timestamp reset
  - HID: wacom: avoid integer overflow in wacom_intuos_inout()
  - HID: google: add jewel USB id
  - iio: adc: mxs-lradc: fix the order of two cleanup operations
  - mailbox: mailbox-test: fix a locking issue in mbox_test_message_write()
  - atm: hide unused procfs functions
  - drm/msm: Be more shouty if per-process pgtables aren't working
  - ALSA: oss: avoid missing-prototype warnings
  - netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT
  - wifi: b43: fix incorrect __packed annotation
  - scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed
  - arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
  - ARM: dts: stm32: add pin map for CAN controller on stm32f7
  - wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value
  - s390/pkey: zeroize key blobs
  - media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table
  - media: dvb_ca_en50221: fix a size write bug
  - media: netup_unidvb: fix irq init by register it at the end of probe
  - media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address
  - media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  - media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer
  - media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer()
  - media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  - media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer()
  - media: dvb_demux: fix a bug for the continuity counter
  - ASoC: ssm2602: Add workaround for playback distortions
  - ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI codecs
  - xfrm: Check if_id in inbound policy/secpath match
  - ASoC: dwc: limit the number of overrun messages
  - block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
  - fbdev: stifb: Fix info entry in sti_struct on error path
  - fbdev: modedb: Add 1920x1080 at 60 Hz video mode
  - media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE
  - ARM: 9295/1: unwind:fix unwind abort for uleb128 case
  - btrfs: abort transaction when sibling keys check fails for leaves
  - mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write()
  - watchdog: menz069_wdt: fix watchdog initialisation
  - mtd: rawnand: marvell: don't set the NAND frequency select
  - mtd: rawnand: marvell: ensure timing values are written
  - net: dsa: mv88e6xxx: Increase wait after reset deactivation
  - net/mlx5: Read embedded cpu after init bit cleared
  - udp6: Fix race condition in udp6_sendmsg & connect
  - net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
  - net/sched: Prohibit regrafting ingress or clsact Qdiscs
  - net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs
  - net/sched: sch_clsact: Only create under TC_H_CLSACT
  - net/sched: sch_ingress: Only create under TC_H_INGRESS
  - tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set
  - af_packet: do not use READ_ONCE() in packet_bind()
  - mtd: rawnand: ingenic: fix empty stub helper definitions
  - amd-xgbe: fix the false linkup in xgbe_phy_status
  - af_packet: Fix data-races of pkt_sk(sk)->num.
  - netrom: fix info-leak in nr_write_internal()
  - net/mlx5: fw_tracer, Fix event handling
  - dmaengine: pl330: rename _start to prevent build error
  - iommu/amd: Don't block updates to GATag if guest mode is on
  - iommu/rockchip: Fix unwind goto issue
  - RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
  - RDMA/bnxt_re: Fix a possible memory leak
  - dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved()
  - dmaengine: at_xdmac: Move the free desc to the tail of the desc list
  - dmaengine: at_xdmac: Fix race for the tx desc callback
  - dmaengine: at_xdmac: Fix concurrency over chan's completed_cookie
  - RDMA/efa: Fix unsupported page sizes in device
  - RDMA/bnxt_re: Fix the page_size used during the MR creation
  - RDMA/bnxt_re: Code refactor while populating user MRs
  - !2935 [sync] PR-2865: Backport 5.10.181 - 5.10.182 LTS patches from upstream
  - fs/dirty_pages: fix some errors in seq_read_dirty()
  - fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
  - Revert "arm64/mpam: Fix mpam corrupt when cpu online"
  - netfilter: ctnetlink: Support offloaded conntrack entry deletion
  - ipv{4,6}/raw: fix output xfrm lookup wrt protocol
  - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()
  - net: phy: mscc: enable VSC8501/2 RGMII RX clock
  - net/mlx5: Devcom, serialize devcom registration
  - net/mlx5: devcom only supports 2 ports
  - power: supply: bq24190: Call power_supply_changed() after updating input current
  - power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier()
  - power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize
  - power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes
  - power: supply: bq27xxx: Move bq27xxx_battery_update() down
  - power: supply: bq27xxx: expose battery data when CI=1
  - power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status()
  - power: supply: bq27xxx: make status more robust
  - power: supply: bq27xxx: fix sign of current_now for newer ICs
  - power: supply: bq27xxx: fix polarity of current_now
  - net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE
  - 3c589_cs: Fix an error handling path in tc589_probe()
  - arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert delay
  - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device
  - net/mlx5: Fix error message when failing to allocate device memory
  - net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs
  - net/mlx5e: do as little as possible in napi poll when budget is 0
  - forcedeth: Fix an error handling path in nv_probe()
  - ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg
  - x86/show_trace_log_lvl: Ensure stack pointer is aligned, again
  - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket()
  - coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet()
  - fs: fix undefined behavior in bit shift for SB_NOUSER
  - power: supply: sbs-charger: Fix INHIBITED bit for Status reg
  - power: supply: bq27xxx: Fix poll_interval handling and races on remove
  - power: supply: bq27xxx: Fix I2C IRQ race on remove
  - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition
  - power: supply: leds: Fix blink to LED on transition
  - ipv6: Fix out-of-bounds access in ipv6_find_tlv()
  - bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields
  - octeontx2-pf: Fix TSOv6 offload
  - selftests: fib_tests: mute cleanup error message
  - net: fix skb leak in __skb_tstamp_tx()
  - media: radio-shark: Add endpoint checks
  - USB: sisusbvga: Add endpoint checks
  - USB: core: Add routines for endpoint checks in old drivers
  - udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
  - net: fix stack overflow when LRO is disabled for virtual interfaces
  - fbdev: udlfb: Fix endpoint check
  - debugobjects: Don't wake up kswapd from fill_pool()
  - x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms
  - parisc: Fix flush_dcache_page() for usage from irq context
  - selftests/memfd: Fix unknown type name build failure
  - dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type
  - btrfs: use nofs when cleaning up aborted transactions
  - gpio: mockup: Fix mode of debugfs files
  - parisc: Allow to reboot machine after system halt
  - parisc: Handle kgdb breakpoints only in kernel context
  - m68k: Move signal frame following exception on 68020/030
  - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize
  - ALSA: hda/realtek: Enable headset onLenovo M70/M90
  - ALSA: hda: Fix unhandled register update during auto-suspend period
  - ALSA: hda/ca0132: add quirk for EVGA X299 DARK
  - ocfs2: Switch to security_inode_init_security()
  - spi: fsl-cpm: Use 16 bit mode for large transfers with even size
  - spi: fsl-spi: Re-organise transfer bits_per_word adaptation
  - ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
  - watchdog: sp5100_tco: Immediately trigger upon starting.
  - s390/qdio: fix do_sqbs() inline assembly constraint
  - s390/qdio: get rid of register asm
  - serial: 8250_exar: Add support for USR298x PCI Modems
  - serial: exar: Add support for Sealevel 7xxxC serial cards
  - serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards
  - HID: wacom: add three styli to wacom_intuos_get_tool_type
  - HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs
  - HID: wacom: Force pen out of prox if no events have been received in a while
  - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()
  - powerpc/64s/radix: Fix soft dirty tracking
  - tpm/tpm_tis: Disable interrupts for more Lenovo devices
  - ceph: force updating the msg pointer in non-split case
  - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF
  - serial: Add support for Advantech PCI-1611U card
  - statfs: enforce statfs[64] structure initialization
  - can: kvaser_pciefd: Disable interrupts in probe error path
  - can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt
  - can: kvaser_pciefd: Clear listen-only bit if not explicitly requested
  - can: kvaser_pciefd: Empty SRB buffer in probe
  - can: kvaser_pciefd: Call request_irq() before enabling interrupts
  - can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop()
  - can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag
  - can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag
  - ALSA: hda/realtek: Add quirk for 2nd ASUS GU603
  - ALSA: hda/realtek: Add a quirk for HP EliteDesk 805
  - ALSA: hda/realtek: Add quirk for Clevo L140AU
  - ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table
  - ALSA: hda: Fix Oops by 9.1 surround channel names
  - usb: typec: altmodes/displayport: fix pin_assignment_show
  - usb: gadget: u_ether: Fix host MAC address case
  - usb: dwc3: debugfs: Resume dwc3 before accessing registers
  - USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value
  - usb-storage: fix deadlock when a scsi command timeouts more than once
  - USB: usbtmc: Fix direction for 0-length ioctl control messages
  - ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go
  - bridge: always declare tunnel functions
  - netfilter: nft_set_rbtree: fix null deref on element insertion
  - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
  - igb: fix bit_shift to be in [1..8] range
  - cassini: Fix a memory leak in the error handling path of cas_init_one()
  - scsi: storvsc: Don't pass unused PFNs to Hyper-V host
  - wifi: iwlwifi: mvm: don't trust firmware n_channels
  - wifi: mac80211: fix min center freq offset tracing
  - net: bcmgenet: Restore phy_stop() depending upon suspend/close
  - net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
  - tipc: check the bearer min mtu properly when setting it by netlink
  - tipc: do not update mtu if msg_max is too small in mtu negotiation
  - tipc: add tipc_bearer_min_mtu to calculate min mtu
  - net/tipc: fix tipc header files for kernel-doc
  - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
  - drm/exynos: fix g2d_open/close helper function definitions
  - SUNRPC: Fix trace_svc_register() call site
  - media: netup_unidvb: fix use-after-free at del_timer()
  - erspan: get the proto with the md version for collect_md
  - serial: arc_uart: fix of_iomap leak in `arc_serial_probe`
  - vsock: avoid to close connected socket after the timeout
  - ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15
  - ALSA: firewire-digi00x: prevent potential use after free
  - net: phy: dp83867: add w/a for packet errors seen with short cables
  - net: fec: Better handle pm_runtime_get() failing in .remove()
  - af_key: Reject optional tunnel/BEET mode templates in outbound policies
  - cpupower: Make TSC read per CPU for Mperf monitor
  - drm/msm/dpu: Remove duplicate register defines from INTF
  - drm/msm/dp: unregister audio driver during unbind
  - Revert "Fix XFRM-I support for nested ESP tunnels"
  - btrfs: fix space cache inconsistency after error loading it from disk
  - btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid
  - btrfs: move btrfs_find_highest_objectid/btrfs_find_free_objectid to disk-io.c
  - mfd: dln2: Fix memory leak in dln2_probe()
  - phy: st: miphy28lp: use _poll_timeout functions for waits
  - Input: xpad - add constants for GIP interface numbers
  - iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any
  - clk: tegra20: fix gcc-7 constant overflow warning
  - iommu/arm-smmu-qcom: Limit the SMR groups to 128
  - RDMA/core: Fix multiple -Warray-bounds warnings
  - recordmcount: Fix memory leaks in the uwrite function
  - sched: Fix KCSAN noinstr violation
  - mcb-pci: Reallocate memory region to avoid memory overlapping
  - serial: 8250: Reinit port->pm on port specific driver unbind
  - usb: typec: tcpm: fix multiple times discover svids error
  - HID: wacom: generic: Set battery quirk only when we see battery data
  - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3
  - HID: logitech-hidpp: Reconcile USB and Unifying serials
  - HID: logitech-hidpp: Don't use the USB serial for USB devices
  - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE
  - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
  - Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set
  - wifi: ath11k: Fix SKB corruption in REO destination ring
  - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace
  - null_blk: Always check queue mode setting from configfs
  - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf
  - wifi: iwlwifi: pcie: fix possible NULL pointer dereference
  - samples/bpf: Fix fout leak in hbm's run_bpf_prog
  - f2fs: fix to drop all dirty pages during umount() if cp_error is set
  - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()
  - ext4: set goal start correctly in ext4_mb_normalize_request
  - gfs2: Fix inode height consistency check
  - scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition
  - lib: cpu_rmap: Avoid use after free on rmap->obj array entries
  - scsi: target: iscsit: Free cmds before session free
  - net: Catch invalid index in XPS mapping
  - net: pasemi: Fix return type of pasemi_mac_start_tx()
  - ext2: Check block size validity during mount
  - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex
  - bpf: Annotate data races in bpf_local_storage
  - wifi: ath: Silence memcpy run-time false positive warning
  - drm/amd: Fix an out of bounds error in BIOS parser
  - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects
  - ACPICA: Avoid undefined behavior: applying zero offset to null pointer
  - drm/tegra: Avoid potential 32-bit integer overflow
  - remoteproc: stm32_rproc: Add mutex protection for workqueue
  - ACPI: EC: Fix oops when removing custom query handlers
  - arm64: dts: qcom: msm8996: Add missing DWC3 quirks
  - regmap: cache: Return error in cache sync operations for REGCACHE_NONE
  - drm/amd/display: Use DC_LOG_DC in the trasform pixel function
  - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
  - rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access
  - refscale: Move shutdown from wait_event() to wait_event_idle()
  - ext4: allow ext4_get_group_info() to fail
  - ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set
  - ext4: add mballoc stats proc file
  - ext4: drop s_mb_bal_lock and convert protected fields to atomic
  - ext4: remove redundant mb_regenerate_buddy()
  - ext4: fix lockdep warning when enabling MMP
  - ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled
  - ext4: reflect error codes from ext4_multi_mount_protect() to its callers
  - ext4: remove an unused variable warning with CONFIG_QUOTA=n
  - fbdev: arcfb: Fix error handling in arcfb_probe()
  - drm/i915/dp: prevent potential div-by-zero
  - af_unix: Fix data races around sk->sk_shutdown.
  - af_unix: Fix a data race of sk->sk_receive_queue->qlen.
  - net: datagram: fix data-races in datagram_poll()
  - tcp: add annotations around sk->sk_shutdown accesses
  - tcp: factor out __tcp_close() helper
  - net: add vlan_get_protocol_and_depth() helper
  - net: tap: check vlan with eth_type_vlan() method
  - net: annotate sk->sk_err write from do_recvmmsg()
  - netlink: annotate accesses to nlk->cb_running
  - netfilter: conntrack: fix possible bug_on with enable_hooks=1
  - net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs().
  - linux/dim: Do nothing if no time delta between samples
  - net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe()
  - ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings
  - drm/mipi-dsi: Set the fwnode for mipi_dsi_device
  - driver core: add a helper to setup both the of_node and fwnode of a device
  - Net: ethernet: Support management channel of the host tool in 3snic 3s9xx network driver


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.36.0.113
changelog:
  - !3294 [sync] PR-2843:  Add error handle for sd
  - !3291 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
  - !3253  Add error handle for driver
  - !3353 RDMA/hns: Add support more netdev speed
  - RDMA/hns: Fix port active speed
  - RDMA/core: Add support more netdev speed
  - !3327 [sync] PR-3320:  Make the rcache depot scale better
  - iommu/iova: Manage the depot list size
  - iommu/iova: Make the rcache depot scale better
  - iommu/iova: change IOVA_MAG_SIZE to 127 to save memory
  - Revert "iommu/iova: increase the iova_rcache depot max size to 128"
  - Revert "config: enable set the max iova mag size to 128"
  - Revert "iommu/iova: move IOVA_MAX_GLOBAL_MAGS outside of IOMMU_SUPPORT"
  - scsi: sd: Clean up sdkp if device_add_disk() failed
  - scsi: sd: Add error handling support for add_disk()
  - md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
  - nbd: fix uaf in nbd_open
  - mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
  - mtd/ubi/block: Fix null pointer dereference issue in error path
  - mtd/ubi/block: add error handling support for add_disk()
  - ubi: use blk_mq_alloc_disk and blk_cleanup_disk
  - scsi: sr: Add error handling support for add_disk()
  - scsi: sd: Clean up sdkp if device_add_disk() failed
  - scsi: sd: Add error handling support for add_disk()
  - block/brd: add error handling support for add_disk()
  - brd: convert to blk_alloc_disk/blk_cleanup_disk
  - nvme: add error handling support for add_disk()
  - nvme: use blk_mq_alloc_disk
  - block: add a flag to make put_disk on partially initalized disks safer
  - nbd: add error handling support for add_disk()
  - nbd: fix order of cleaning up the queue and freeing the tagset
  - nbd: use blk_mq_alloc_disk and blk_cleanup_disk
  - loop: add error handling support for add_disk()
  - loop: fix order of cleaning up the queue and freeing the tagset
  - loop: use blk_mq_alloc_disk and blk_cleanup_disk
  - blk-mq: fix an IS_ERR() vs NULL bug
  - blk-mq: add the blk_mq_alloc_disk APIs
  - block: add blk_alloc_disk and blk_cleanup_disk APIs
  - nbd: Revert redundant patches of nbd first_minor
  - !3231 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
  - fs: Fix error checking for d_hash_and_lookup()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.37.0.114
changelog:
  - !3626  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
  - !3620  netfilter: nft_set_pipapo: skip inactive elements during set walk
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
  - netfilter: nft_set_pipapo: skip inactive elements during set walk
  - !3596 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
  - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
  - !3577  perf/core: Fix CVE-2023-6931
  - perf: Fix perf_event_validate_size() lockdep splat
  - perf: Fix perf_event_validate_size()


author: zhangmingyi<zhangmingyi5@huawei.com> - 2:0.8.1-3
changelog:
  -- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                  backport-libbpf-Fix-the-name-of-a-reused-map.patch
                  backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch


author: JofDiamonds <kwb0523@163.com> -2:0.8.1-4
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
    backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
    backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
    backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
    backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
    backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
    backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch


author: SuperCharge <xiesongyang@huawei.com> -2:0.8.1-6
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch


author: zhangmingyi <zhangmingyi5@huawei.com> -2:0.8.1-8
changelog:
  - backport patches from upstream:
    backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
    backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
    backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch


author: Qingqing Li <liqingqing3@huawei.com> -2:0.8.1-10
changelog:
  - backport patch from openEuler kernel repo:
    backport-sync-the-newly-added-helper-functions-from-kernel.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-11
changelog:
  - backport patches from upstream:
    backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
    backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-12
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
    backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
    backport-libbpf-Fix-is_pow_of_2.patch
    backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch


author: chenhaixing <chenhaixing@huawei.com> - 0.69.0-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
                Fix utimes error message in dnf-repo
                Do not download repository if our local cache is up to date in dnf-repo
                python bindings:Load all modules with RTLD_GLOBAL


author: ZhengZhenyu <zhengzhenyu@openeuler.sh> - 13.12-1
changelog:
  - aupgrade libpq to 13.12,fix CVE-2023-2455, CVE-2023-2454, CVE-2023-39417, CVE-2023-39418, CVE-2020-21469


author: zhangjun<zhangjun@kylinos.cn> - 0.7.20-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak when using testsolv to execute cases 
         Fix segfault on conflict resolution when using bindings


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-23
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: fuanan <fuanan3@h-partners.com> - 2.9.12-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: fuanan <fuanan3@h-partners.com> - 2.9.14-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation


author: Xiong Zhou <xiongzhou4@huawei.com> 15.0.7-2
changelog:
  - Type:Update
  - ID:NA
  - SUG:NA
  - DESC: Backport bugfix and add AArch64 support for hugify and inline.


author: bzhaoop<bzhaojyathousandy@gmail.com> -4:10.5.15-1
changelog:
  - Bump to 10.5.15
  - For resolving CVEs:
  - CVE-2022-24048
  - CVE-2022-24052
  - CVE-2022-24050
  - CVE-2022-24051
  - CVE-2021-46668
  - CVE-2021-46658


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.15-2
changelog:
  - Fix the systemd service issue about the env variable.
  - Apply the patches from old branch.
  - Adaption the cmake version and integrate into the spec file.


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.16-1
changelog:
  - Bump to 10.5.16 for resolving CVEs below
  - CVE-2022-27385
  - CVE-2022-27382
  - CVE-2022-27451
  - CVE-2022-27457
  - CVE-2022-27446
  - CVE-2022-27455
  - CVE-2022-27444
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387
  - And we fit the latest packages for the new mariadb release, such as errmsg package.


author: jintang song<jintang.song@epro.com.cn> - 8.0.29-1
changelog:
  - Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
    CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
    CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
    CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
    CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
    CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
    CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490


author: wangkai <wangkai385@huawei.com> - 4.1.13-17
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: xingwei <xingwei14@h-partners.com> - 2:7.92-4
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-7
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:fix CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26555,CVE-2023-26555


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-4
changelog:
  - Add requirements for system and bugfix
  - Upgrade oec-hardware-server
  - Update readme and design doc
  - Fix nvme error
  - Update network fibre check and log 
  - Update description for perf test
  - Add automatic configuration network card IP


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-5
changelog:
  - fix the bug that the test board information is not added to the configuration file
  - Add kabi for hardware critical test
  - Optimize disk/raid/fc/ethernet/infiniband test suite
  - Fix the bug of reading nvme data failed
  - Add file size check when uploading file to server


author: zhangyale <zhangyale3@h-partners.com> - 1.1.3-0
changelog:
  - Add support for openEuler 22.03 LTS SP1
  - Add AMD GPU testcase
  - Add automatic configuration network card IP
  - Add generate compatibility information


author: cuixucui <cuixucui1@h-partner.com> - 1.1.3-2
changelog:
  - Fix code issue and update log print in network
  - Cancel deleting the IP that automatically configured on the server
  - Fix cdrom bug


author: liqiang <liqiang332@h-partner.com> - 1.1.3-3
changelog:
  - Fix libswsds.so not stripped
  - Fix the value of kernel.src obtained by the kabi test case is incorrect
  - Add board infomation and fix memory bug
  - Fix the block size fails to be obtained during the NVME test
  - Judge whether to support kabi testing by architecture
  - Update readme and dev_design


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-0
changelog:
  - Add board information in the test report
  - Add spdk test case
  - Add dpdk test case
  - Update pci.ids file


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-0
changelog:
  - Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
  - Add modifications to Kylinsec with oec-hardware
  - Add support for Loongson and SW architectures
  - Bugfix


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Add virtual cases
  - Resolve IB startup IB_Read_BW service failure issue
  - Delete redundant references
  - Resolve incorrect type in vgpu result data
  - Resolve the issue of getting the kernel source rpm


author: renmingshuai<renmingshuai@huawei.com> - 8.8p1-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport some upstream patches and modify some patches numbers


author: renmingshuai<renmingshuai@huawei.com> - 8.8p1-25
changelog:
  - Type:CVE
  - CVE:CVE-2023-48795,CVE-2023-51385
  - SUG:NA
  - DESC:fix CVE-2023-48795 and CVE-2023-51385


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-6
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: bzhaoop <bzhaojyathousandy@gmail.com> - 13.3-6
changelog:
  - Porting "Fix subtransaction test failed" from master branch
  - Fri May 6 2022 caodongxia <caodongxia@h-partners.com> - 13.3-4
  - sync the same line with master


author: dillon chen <dillon.chen@gmail.com> - 13.3-8
changelog:
  - Fix build error for loongarch64
  - Fix issue: confilct between libpq-devel and postgresql-devel
  - guess init spec from redhat
  - change redhat spec:rm private package and add files to server-devel
  - so add delete lines to Fix issue
  - Next: write oe libpq and postgresql spec by myself


author: yangcheng <yangcheng1203@163.com> - 8.1.2-4
changelog:
  - Type:CVE
  - CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
  - SUG:NA
  - DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817


author: dongyuzhen <dongyuzhen@h-partners.com> - 9.0.1-2
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: chenhaixing <chenhaixing@huawei.com> - 1.26.8-2
changelog:
  - delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change


author: chenhaixing <chenhaixing@huawei.com> - 1.26.12-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix socket timeout value when HTTPConnect is reused
         remove Exclamation mark character from the unreserved characters
         fix _idna_encode handling of x80


author: Chenxi Mao <chenxi.mao@suse.com> - 3.9.9-23
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC: Enable link time optimizaitons (LTO) for better performance.


author: zhaoyu <zhaoyu64@huawei.com>- 3.9.9-25
changelog:
  - Type:CVE
  - CVE:CVE-2007-4559
  - SUG:NA
  - DESC:Add a filter parameter to tarfile.extractall will allow users to avoid CVE-2007-4559 by changing their code/settings.


author: <xufei30@huawei.com> - 10:6.2.0-67
changelog:
  - hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
  - net/eth: Don't consider ESP to be an IPv6 option header mainline
  - net: Fix uninitialized data usage mainline
  - block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
  - i386: add notify VM exit support
  - kvm: expose struct KVMState
  - kvm: allow target-specific accelerator properties
  - i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
  - linux-headers: include missing changes from 6.0
  - dsoundaudio: fix crackling audio recordings mainline
  - hw/audio/intel-hda: fix stream reset mainline
  - hw/pvrdma: Protect against buggy or malicious guest driver
  - qemu support for loongarch
  - hw/pci: Trace IRQ routing on PCI topology
  - hw/pci: Fix a typo
  - hw/riscv: virt: Simplify virt_{get,set}_aclint()
  - curl: Fix error path in curl_open()
  - tests: add (riscv virt) machine mapping to testenv from v7.0.0
  - tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
  - hw/core/machine:Fix the missing consideration of cluster-id
  - arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
  - arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
  - hw/acpi: Support acpi-ged to report CPU's OST info
  - hw/acpi: Add ospm_status hook implementation for acpi-ged
  - fix qmp command migrate-set-parameters


author: <xufei30@huawei.com> - 10:6.2.0-71
changelog:
  - vhost-user-blk: fix the resize crash
  - plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
  - linux-user: fix strace build w/out munlockall
  - ui: fix crash on serial reset, during init
  - qga/win/vss: requester_freeze changes
  - migration: fix populate_vfio_info
  - block/rbd: workaround for ceph issue #53784
  - target/i386: add FZRM, FSRS, FSRC
  - i386: Add new CPU model SapphireRapids
  - core/cpu-common: Fix the wrong '#ifdef __aarch64__'


author: <xufei30@huawei.com> - 10:6.2.0-72
changelog:
  - migration/xbzrle: fix out-of-bounds write with axv512
  - migration/xbzrle: use ctz64 to avoid undefined result
  - Update bench-code for addressing CI problem
  - AVX512 support for xbzrle_encode_buffer
  - configure, meson: move AVX tests to meson
  - target/i386: KVM: allow fast string operations if host supports them
  - target/i386: add FSRM to TCG
  - hw/nvme: fix memory leak in nvme_dsm
  - aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
  - target/i386: Add SGX aex-notify and EDECCSSA support
  - hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
  - target/i386: Set maximum APIC ID to KVM prior to vCPU creation
  - target/i386: Fix sanity check on max APIC ID / X2APIC enablement


author: <fengjiabo1@huawei.com> - 10:6.2.0-75
changelog:
  - Add lbt support for kvm.
  - Fix smp.cores value and Fix divide 0 error
  - hw/nvme: Change alignment in dma functions for nvme_blk_*
  - virtio: fix reachable assertion due to stale value of cached region size
  - hw/nvme: fix missing DNR on compare failure


author: <fengjiabo1@huawei.com> - 10:6.2.0-76
changelog:
  - qga/win32: Use rundll for VSS installation
  - qga/win32: Remove change action from MSI installer
  - ide: Increment BB in-flight counter for TRIM BH
  - hw/pci-bridge/pxb: Fix missing swizzle
  - host-vdpa: make notifiers _init()/_uninit() symmetric
  - hw/virtio: vdpa: Fix leak of host-notifier memory-region
  - accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
  - Allow setting up to 8 bytes with the generic loader
  - hw/net/virtio-net: make some VirtIONet const
  - accel/tcg: Optimize jump cache flush during tlb range flush
  - 9pfs: prevent opening special files (CVE-2023-2861)
  - tcg: Reduce tcg_assert_listed_vecop() scope
  - gitlab: Disable plugins for cross-i386-tci
  - vfio/pci: Fix a segfault in vfio_realize
  - block/iscsi: fix double-free on BUSY or similar statuses
  - tests/tcg: fix unused variable in linux-test
  - hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
  - qga/vss-win32: fix warning for clang++-15
  - vnc: avoid underflow when accessing user-provided address
  - block/monitor: Fix crash when executing HMP commit
  - virtio-gpu: add a FIXME for virtio_gpu_load()
  - hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
  - migration: report compress thread pid to libvirt


author: <fengjiabo1@huawei.com> - 10:6.2.0-78
changelog:
  - sw_64: Added sw64 architecture related updates
  - virtio-crypto: verify src&dst buffer length for sym request
  - vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
  - qga: Fix suspend on Linux guests without systemd
  - tests: vhost-user-test: release mutex on protocol violation
  - qapi: support updating expected test output via make
  - block: Fix misleading hexadecimal format
  - block/rbd: fix write zeroes with growing images
  - block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
  - block/nfs: Fix 32-bit Windows build
  - qapi/qdev: Tidy up device_add documentation
  - hw/xen/xen_pt: fix uninitialized variable
  - migration/ram: Fix error handling in ram_write_tracking_start()
  - docs/about/build-platforms: Refine the distro support policy
  - xen-block: Avoid leaks on new error path
  - QGA VSS: Add wrapper to send log to debugger and stderr
  - chardev/char-socket: set s->listener = NULL in char_socket_finalize
  - qapi/block: Tidy up block-latency-histogram-set documentation
  - disas/riscv Fix ctzw disassemble
  - vfio: Fix vfio_get_dev_region() trace event
  - migration/ram: Fix populate_read_range()
  - Check and report for incomplete 'global' option  format


author: <fengjiabo1@huawei.com> - 10:6.2.0-79
changelog:
  - test: Fix test-crypto-secret when compiling without keyring support
  - aio-posix: fix build failure io_uring 2.2


author: <fengjiabo1@huawei.com> - 10:6.2.0-80
changelog:
  - io: remove io watch if TLS channel is closed during handshake
  - hw/ssi: Fix Linux driver init issue with xilinx_spi
  - chardev: report the handshake error
  - vhost: Drop unused eventfd_add|del hooks
  - virtio-iommu: use-after-free fix
  - hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
  - hw/rx: rx-gdbsim DTB load address aligned of 16byte
  - vhost-user: Use correct macro name TARGET_PPC64
  - accel/kvm: Make kvm_dirty_ring_reaper_init() void
  - accel/kvm: Free as when an error occurred


author: <fengjiabo1@huawei.com> - 10:6.2.0-81
changelog:
  - hw/nvme: Avoid dynamic stack allocation
  - ppc/vof: Fix missed fields in VOF cleanup
  - ui: fix crash when there are no active_console
  - tests/qtest/pflash: Clean up local variable shadowing
  - target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
  - tulip: Assign default MAC address if not specified
  - hw/char: fix qcode array bounds check in ESCC impl


author: <fengjiabo1@huawei.com> - 10:6.2.0-82
changelog:
  - thread-pool: optimize scheduling of completion bottom half
  - migration/rdma: zore out head.repeat to make the error more clear
  - vhost-user-fs: Back up vqs before cleaning up vhost_dev
  - hw/vfio/pci-quirks: Sanitize capability pointer
  - hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
  - replay: fix event queue flush for qemu shutdown
  - hw/net: Fix read of uninitialized memory in ftgmac100
  - target/ppc: Fix tlbie
  - target/i386: fix INVD vmexit
  - qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
  - aio-posix: zero out io_uring sqe user_data


author: <fengjiabo1@huawei.com> - 10:6.2.0-83
changelog:
  - hw/virtio/virtio-pmem: Replace impossible check by assertion
  - tests: Fix printf format string in acpi-utils.c
  - softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
  - disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
  - qga: Fix memory leak when output stream is unused
  - ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  - target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  - target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  - target/i386: Allow MCDT_NO if host supports
  - target/i386: Add support for MCDT_NO in CPUID enumeration
  - target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  - target/i386: add support for FB_CLEAR feature
  - target/i386: add support for FLUSH_L1D feature
  - crypto: remove shadowed 'ret' variable
  - hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
  - hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number


author: <fengjiabo1@huawei.com> - 10:6.2.0-84
changelog:
  - hw/arm/fsl-imx: Do not ignore Error argument
  - hw/net/cadence_gem.c: spelling fixes: Octects
  - tests/qtest: check the return value
  - libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
  - io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
  - libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
  - qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
  - net: Fix a misleading error message
  - vdpa: stop all svq on device deletion
  - vhost: release virtqueue objects in error path
  - vhost: fix the fd leak
  - virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
  - hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
  - virtio-net: clear guest_announce feature if no cvq backend
  - vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
  - vdpa: do not block migration if device has cvq and x-svq=on
  - vdpa net: block migration if the device has CVQ
  - vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
  - vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
  - vdpa: fix not using CVQ buffer in case of error
  - vdpa: Fix possible use-after-free for VirtQueueElement
  - hw/virtio: fix vhost_user_read tracepoint
  - vhost: Fix false positive out-of-bounds
  - vhost: fix possible wrap in SVQ descriptor ring
  - vhost: move iova_tree set to vhost_svq_start
  - vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
  - virtio-crypto: verify src&dst buffer length for sym request
  - vdpa: commit all host notifier MRs in a single MR transaction
  - vdpa: harden the error path if get_iova_range failed
  - vdpa-dev: get iova range explicitly
  - virtio-pci: add support for configure interrupt
  - virtio-mmio: add support for configure interrupt
  - virtio-net: add support for configure interrupt
  - vhost: add support for configure interrupt
  - virtio: add support for configure interrupt
  - vhost-vdpa: add support for config interrupt
  - vhost: introduce new VhostOps vhost_set_config_call
  - virtio-pci: decouple the single vector from the interrupt process
  - virtio-pci: decouple notifier from interrupt process
  - virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
  - vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
  - vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
  - vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
  - hw/virtio: gracefully handle unset vhost_dev vdev
  - hw/virtio/vhost: Fix typo in comment.
  - vdpa: always start CVQ in SVQ mode if possible
  - vdpa: add shadow_data to vhost_vdpa
  - vdpa: store x-svq parameter in VhostVDPAState
  - vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
  - vdpa: allocate SVQ array unconditionally
  - vdpa: move SVQ vring features check to net/
  - vdpa: request iova_range only once
  - vdpa: add vhost_vdpa_net_valid_svq_features
  - vhost: allocate SVQ device file descriptors at device start
  - vhost: set SVQ device call handler at SVQ start
  - vdpa: use v->shadow_vqs_enabled in vhost_vdpa_svqs_start & stop
  - vhost: enable vrings in vhost_dev_start() for vhost-user devices
  - vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)->async_tx.elem in virtio_net_reset
  - net/vhost-vdpa.c: Fix clang compilation failure
  - vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
  - vdpa: Remove shadow CVQ command check
  - vdpa: Delete duplicated vdpa_feature_bits entry
  - hw/virtio: add some vhost-user trace events
  - vdpa: Allow MQ feature in SVQ
  - virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
  - vdpa: validate MQ CVQ commands
  - vdpa: Add vhost_vdpa_net_load_mq
  - vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
  - vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
  - vdpa: Delete CVQ migration blocker
  - vdpa: Add virtio-net mac address via CVQ at start
  - vhost_net: add NetClientState->load() callback
  - vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
  - vdpa: Move command buffers map to start of net device
  - vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
  - vhost_net: Add NetClientInfo stop callback
  - vhost_net: Add NetClientInfo start callback
  - vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
  - vdpa: Make SVQ vring unmapping return void
  - vdpa: Remove SVQ vring from iova_tree at shutdown
  - util: accept iova_tree_remove_parameter by value
  - vdpa: do not save failed dma maps in SVQ iova tree
  - vdpa: Skip the maps not in the iova tree
  - vdpa: Fix file descriptor leak on get features error
  - vdpa: Fix memory listener deletions of iova tree
  - vhost: Get vring base from vq, not svq
  - vdpa: Add x-svq to NetdevVhostVDPAOptions
  - vdpa: Add device migration blocker
  - vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
  - vdpa: Buffer CVQ support on shadow virtqueue
  - vdpa: manual forward CVQ buffers
  - vdpa: Export vhost_vdpa_dma_map and unmap calls
  - vhost: Add svq avail_handler callback
  - vhost: add vhost_svq_poll
  - vhost: Expose vhost_svq_add
  - vhost: add vhost_svq_push_elem
  - vhost: Track number of descs in SVQDescState
  - vhost: Add SVQDescState
  - vhost: Decouple vhost_svq_add from VirtQueueElement
  - vhost: Check for queue full at vhost_svq_add
  - vhost: Move vhost_svq_kick call to vhost_svq_add
  - vhost: Reorder vhost_svq_kick
  - vdpa: Avoid compiler to squash reads to used idx
  - virtio-net: Expose ctrl virtqueue logic
  - virtio-net: Expose MAC_TABLE_ENTRIES
  - vhost: move descriptor translation to vhost_svq_vring_write_descs
  - util: Return void on iova_tree_remove
  - virtio-net: don't handle mq request in userspace handler for vhost-vdpa
  - vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
  - vhost-vdpa: backend feature should set only once
  - vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
  - virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
  - virtio: add vhost support for virtio devices
  - include/hw: start documenting the vhost API
  - hw/virtio: add vhost_user_[read|write] trace points
  - vhost: Fix element in vhost_svq_add failure
  - vdpa: Fix index calculus at vhost_vdpa_svqs_start
  - vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
  - vhost: Fix device's used descriptor dequeue
  - vhost: Track descriptor chain in private at SVQ
  - vdpa: Add missing tracing to batch mapping functions
  - vhost-vdpa: fix typo in a comment
  - virtio: fix --enable-vhost-user build on non-Linux
  - vdpa: Expose VHOST_F_LOG_ALL on SVQ
  - vdpa: Never set log_base addr if SVQ is enabled
  - vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
  - vdpa: Add custom IOTLB translations to SVQ
  - vhost: Add VhostIOVATree
  - util: add iova_tree_find_iova
  - util: Add iova_tree_alloc_map
  - vhost: Shadow virtqueue buffers forwarding
  - vdpa: adapt vhost_ops callbacks to svq
  - virtio: Add vhost_svq_get_vring_addr
  - vhost: Add vhost_svq_valid_features to shadow vq
  - vhost: Add Shadow VirtQueue call forwarding capabilities
  - vhost: Add Shadow VirtQueue kick forwarding capabilities
  - vhost: Add VhostShadowVirtqueue
  - vdpa: Make ncs autofree
  - Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
  - Revert "virtio-pci: decouple notifier from interrupt process"
  - Revert "virtio-pci: decouple the single vector from the interrupt process"
  - Revert "vhost-vdpa: add support for config interrupt"
  - Revert "virtio: add support for configure interrupt"
  - Revert "vhost: add support for configure interrupt"
  - Revert "virtio-net: add support for configure interrupt"
  - Revert "virtio-mmio: add support for configure interrupt"
  - Revert "virtio-pci: add support for configure interrupt"
  - Revert "vhost: introduce new VhostOps vhost_set_config_call"
  - virtio: signal after wrapping packed used_idx
  - target/i386: Adjust feature level according to FEAT_7_1_EDX
  - target/i386: Add new CPU model GraniteRapids
  - target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  - target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  - target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  - target/i386: Add support for AVX-IFMA in CPUID enumeration
  - target/i386: Add support for AMX-FP16 in CPUID enumeration
  - target/i386: Add support for CMPCCXADD in CPUID enumeration
  - tracetool: avoid invalid escape in Python string
  - hw/pvrdma: Protect against buggy or malicious guest driver
  - vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
  - qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
  - artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
  - virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
  - e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
  - vhost: introduce new VhostOps vhost_set_config_call
  - vhost: stick to -errno error return convention
  - vhost-user: stick to -errno error return convention
  - vhost-vdpa: stick to -errno error return convention
  - virtio-pci: add support for configure interrupt
  - virtio-mmio: add support for configure interrupt
  - virtio-net: add support for configure interrupt
  - vhost: add support for configure interrupt
  - virtio: add support for configure interrupt
  - vhost-vdpa: add support for config interrupt
  - virtio-pci: decouple the single vector from the interrupt process
  - virtio-pci: decouple notifier from interrupt process
  - virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
  - pci: Fix the update of interrupt disable bit in PCI_COMMAND register
  - hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
  - tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
  - pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
  - hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
  - qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
  - semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
  - semihosting: fix memleak at semihosting_arg_fallback
  - target/i386: Export GDS_NO bit to guests


author: <fengjiabo1@huawei.com> - 10:6.2.0-86
changelog:
  - vdpa: move memory listener to the realize stage
  - vdpa: implement vdpa device migration
  - vhost: implement post resume bh
  - vhost: implement migration state notifier for vdpa device
  - vhost: implement savevm_hanlder for vdpa device
  - vhost: implement vhost_vdpa_device_suspend/resume
  - vhost: implement vhost-vdpa suspend/resume
  - vhost: add vhost_dev_suspend/resume_op
  - vhost: introduce bytemap for vhost backend logging
  - vhost-vdpa: add migration log ops for VhostOps
  - vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
  - vhost: fix null pointer access
  - ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
  - hw/usb: dev-mtp: Use g_mkdir()
  - target/ppc/cpu-models: Remove the "default" CPU alias
  - hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
  - Fixed a QEMU hang when guest poweroff in COLO mode
  - migration/colo: More accurate update checkpoint time
  - scripts/entitlement.sh: Use backward-compatible cp flags
  - block/nvme: fix infinite loop in nvme_free_req_queue_cb()
  - hw/net: npcm7xx_emc fix missing queue_flush
  - Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
  - hw/arm: ast2600: Fix address mapping of second SPI controller
  - vhost-user-blk: reconnect on any error during realize
  - vhost-user-blk: propagate error return from generic vhost
  - hw/riscv: boot: Reduce FDT address alignment constraints
  - Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
  - Fix STM32F2XX USART data register readout
  - block: use 'unsigned' for in_flight field on driver state
  - sphinx: change default language to 'en'
  - tests/qtest: Fix two format strings
  - trivial typos: namesapce
  - hw/ide/atapi.c: Correct typos (CD-CDROM -> CD-ROM)
  - hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
  - hw/display/next-fb: Fix comment typo
  - xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
  - tests/qtest/migration-test.c: spelling fix: bandwith
  - target/i386/cpu: Improve error message for property "vendor"
  - balloon: Fix a misleading error message
  - target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
  - disas/hppa: Show hexcode of instruction along with disassembly
  - tcg/loongarch64: Fix tcg_out_mov() Aborted
  - ui/qmp-cmds: Improve two error messages
  - qga: Improve guest-exec-status error message
  - hmp: Improve sync-profile error message
  - spapr/pci: Correct "does not support hotplugging error messages
  - xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix


author: pengyi <pengyi37@huawei.com> - 8.2210.0-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:omprog bugfix: invalid status handling at called program
         core bugfix: template system may generate invalid json


author: linzhuorong <linzhuorong@huawei.com> - 8.2210.0-3
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC: imjournal: add second fallback to _COMM
          bugfix: prevent pot. segfault when switchung to
          core/bugfix: using $uuid msg prop can deadlock rsyslog on shutdown
          GNUTls Driver: Fix memory leaks in gtlsInitCred


author: xinghe <xinghe2@h-partners.com> - 4.17.2-5
changelog:
  - Type:cves
  - ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
  - SUG:NA
  - DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967


author: xinghe <xinghe2@h-partners.com> - 4.17.5-3
changelog:
  - Type:cves
  - ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
  - SUG:NA
  - DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922


author: xinghe <xinghe2@h-partners.com> - 4.17.5-7
changelog:
  - Type:cves
  - ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: xinghe <xinghe2@h-partners.com> - 4.17.5-8
changelog:
  - Type:cves
  - ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
  - SUG:NA
  - DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.2-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-BUG-fix-a-minor-refcounting-issue-in-Py_FindObjects.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-BUG-fix-small-refcount-issue-in-ndimage._ctest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: wangjiang <wangjiang37@h-partners.com> - 35.5-17
changelog:
  - backport patch Allow virt_domain read device sysctls
                   Allow icecast rename its log files


author: Jiachen Fan<fanjiachen3@huawei.com> - 1:1.5.2-1
changelog:
  - Type:revert
  - ID:NA
  - SUG:NA
  - DESC:revert commit ab1fb58b56ef0913e64b71a7bac60ba129e460ff, to fix skopeo install bug in standard iso


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: wangyuhang <wangyuhang27@huawei.com> - 249-54
changelog:
  - add a new switch to control whether udev complies with the new SAT standards
    and add sense_data.py to check if the device meets the new SAT standards


author: shixin <shixin21@huawei.com> - 249-55
changelog:
  - sysuesrs_dir, sysctl_dir, binfmt_dir, modules_load_dir reference directories in /usr/lib for embedded
  - modify dns server address to avoid security risk for embedded
  - add support to relabel systemd process for embedded
  - add noexec mount option to strenthen tmp partition for embedded
  - use yocto configs for embedded


author: huyubiao <huyubiao@huawei.com> - 249-60
changelog:
  - backport: sync patches from systemd community
    add backport-core-path-do-not-enqueue-new-job-in-.trigger_notify-.patch
        backport-socket-fix-use-of-ERRNO_IS_DISCONNECT.patch
        backport-sd-bus-fix-use-of-ERRNO_IS_DISCONNECT.patch
        backport-resolved-fix-use-of-ERRNO_IS_DISCONNECT.patch
        backport-bus-add-some-minimal-bounds-check-on-signatures.patch
        backport-udev-builtin-net_id-fix-potential-buffer-overflow.patch
        backport-hostname-Make-sure-we-pass-error-to-bus_verify_polki.patch
        backport-Limit-rlim_max-in-rlimit_nofile_safe-to-nr_open.patch
        backport-udev-raise-RLIMIT_NOFILE-as-high-as-we-can.patch


author: hongjinghao <hongjinghao@huawei.com> - 249-61
changelog:
  - add: backport-json-use-unsigned-for-refernce-counter.patch
        backport-macro-check-over-flow-in-reference-counter.patch
        backport-sd-bus-fix-reference-counter-to-be-incremented.patch
        backport-sd-bus-introduce-ref-unref-function-for-track_item.patch
        backport-sd-bus-do-not-read-unused-value.patch
        backport-sd-bus-do-not-return-negative-errno-when-unknown-nam.patch
        backport-sd-bus-use-hashmap_contains-and-drop-unnecessary-cas.patch
        backport-test-shorten-code-a-bit.patch
        backport-test-add-several-tests-for-track-item.patch
        backport-Use-dummy-allocator-to-make-accesses-defined-as-per-standard.patch
        backport-sd-bus-switch-to-a-manual-overflow-check-in.patch


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-17
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-22
changelog:
  - Type:CVE
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
  - SUG:NA
  - DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237


author: wanglin <wangl29@chinatelecom.cn> - 1.20.11-14
changelog:
  - Fix openEuler hard code problem
  - use -git instead of .git as the filename, to avoid .git ignore
  - Fix changelog date


