# changelog

author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.4.0.83
changelog:
  - !1042  xfrm: Reinject transport-mode packets through workqueue
  - !1069  support ACPI for MPAM 2.0
  - !1070 crypto: hisilicon - fix some reset problem
  - ACPI/MPAM: Adapt to Arm's MPAM ACPI table version 2
  - ACPI / PPTT: Find PPTT processor node by cache id
  - ACPICA: ACPI 6.4: PPTT: add new version of subtable type 1
  - ACPICA: Add support for Arm's MPAM ACPI table version 2
  - crypto: hisilicon/qm - disable error report before flr
  - crypto: hisilicon/qm - disable same error report before resetting
  - crypto: hisilicon/qm - remove duplicate assignment and release
  - crypto: hisilicon/hpre - enable sva error interrupt event
  - crypto: hisilicon/qm - flush all work before driver removed.
  - !1026 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
  - !1022 [sync] PR-978:  io_uring: fix the problem of running
  - !1045 perf: hisi: delete global enable pmu from xxx_write_counter()
  - !1037  xfs: fixes patchs and backport patchs
  - !1048 spi: dw: Add support for 32-bits max xfer size
  - !1055 Complementing PTT functions to the openEuler-22.03-LTS-SP2
  - !1005 scsi: hisi_sas: A group of SAS-related bugfixes
  - !1052 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
  - !1039 [sync] PR-1032: bugfix the lost interruption problem after live migration
  - hwtracing: hisi_ptt: Fix potential sleep in atomic context
  - hwtracing: hisi_ptt: Advertise PERF_PMU_CAP_NO_EXCLUDE for PTT PMU
  - hwtracing: hisi_ptt: Export available filters through sysfs
  - hwtracing: hisi_ptt: Add support for dynamically updating the filter list
  - hwtracing: hisi_ptt: Factor out filter allocation and release operation
  - scripts: Fix issue of module signing with openssl 3.x
  - spi: dw: Add support for 32-bits max xfer size
  - perf: hisi: delete global enable pmu from xxx_write_counter()
  - xfrm: Reinject transport-mode packets through workqueue
  - scsi: hisi_sas: Check usage count only when the runtime PM status is RPM_SUSPENDING
  - scsi: hisi_sas: Work around build failure in suspend function
  - scsi: hisi_sas: Block requests before take debugfs snapshot
  - scsi: hisi_sas: Add slave_destroy interface for v3 hw
  - !996 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
  - !1001 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
  - !1018 [sync] PR-944:  nbd: get config_lock before sock_shutdown
  - !1033 perf: hns3: add event suppport for ROH and default use hardware event 0 as group leader event
  - vfio/migration: bugfix lost interruption after live migration
  - crypto: hisilicon/qm - fix EQ/AEQ interrupt issue
  - xfs: atomic drop extent entries when inactiving attr
  - xfs: factor out __xfs_da3_node_read()
  - xfs: fix a UAF in xfs_iflush_abort_clean
  - xfs: fix a UAF when inode item push
  - xfs: fix the problem of mount failure caused by not refreshing mp->m_sb
  - iomap: iomap: fix memory corruption when recording errors during writeback
  - xfs: fix hung when transaction commit fail in xfs_inactive_ifree
  - xfs: fix dead loop when do mount with IO fault injection
  - xfs: fix ag count overflow during growfs
  - xfs: account extra freespace btree splits for multiple allocations
  - xfs: force shutdown xfs when xfs_attr_inactive fails
  - xfs: fix negative array access in xfs_getbmap
  - xfs: fix BUG_ON in xfs_getbmap()
  - xfs: use iomap_valid method to detect stale cached iomaps
  - iomap: write iomap validity checks
  - xfs: write page faults in iomap are not buffered writes
  - xfs: fix exception caused by unexpected illegal bestcount in leaf dir
  - Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
  - xfs: don't expose internal symlink metadata buffers to the vfs
  - xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
  - xfs: fix maxlevels comparisons in the btree staging code
  - xfs: sb verifier doesn't handle uncached sb buffer
  - xfs: fallocate() should call file_modified()
  - xfs: remove XFS_PREALLOC_SYNC
  - xfs: shutdown during log recovery needs to mark the log shutdown
  - xfs: xfs_trans_commit() path must check for log shutdown
  - xfs: xfs_do_force_shutdown needs to block racing shutdowns
  - xfs: log shutdown triggers should only shut down the log
  - xfs: shutdown in intent recovery has non-intent items in the AIL
  - xfs: AIL should be log centric
  - xfs: increase rename inode reservation
  - xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
  - xfs: check return codes when flushing block devices
  - xfs: remove xfs_blkdev_issue_flush
  - xfs: fix NULL pointer dereference in xfs_getbmap()
  - scsi: sd: try more retries of START_STOP when resuming scsi device
  - !1012 [sync] PR-924:  dm: add disk before alloc dax
  - !1015 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
  - perf: hns3: default use hardware event 0 as group leader event.
  - perf: hns3: add event suppport for ROH
  - !1020 [sync] PR-1003: roh: Fix ROH multi-BD cmdq issue
  - !1009 [sync] PR-980: crypto: hisilicon - fix mailbox operation process
  - !952 [sync] PR-929:  xfs: rework feature flags
  - !982 [sync] PR-356: x86/boot/compressed: Register dummy NMI handler in EFI boot loader, to avoid kdump crashes
  - locking/rwsem: Prevent potential lock starvation
  - locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
  - locking/rwsem: Better collate rwsem_read_trylock()
  - !973 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
  - !988 [sync] PR-954:  block: iocost bugfix
  - !985 [sync] PR-946:  icost bugfix
  - kernel: don't call do_exit() for PF_IO_WORKER threads
  - x86/process: setup io_threads more like normal user space threads
  - arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
  - arch: setup PF_IO_WORKER threads like PF_KTHREAD
  - roh: Fix ROH multi-BD cmdq issue
  - !1006 drivers/perf: hisi: Don't migrate perf to the CPU going to teardown
  - nbd: get config_lock before sock_shutdown
  - dm thin: Fix ABBA deadlock by resetting dm_bufio_client
  - dm: add disk before alloc dax
  - crypto: hisilicon/qm - alloc buffer to set and get xqc
  - crypto: hisilicon/qm - fix the pf2vf timeout when device reset
  - vfio/migration: obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - obtain the mailbox configuration at one time
  - drivers/perf: hisi: Don't migrate perf to the CPU going to teardown
  - !993 Clean up for RDMA/HNS
  - !979 [sync] PR-943: Fixed the accelerator capability register issue.
  - !981 [sync] PR-967:  Support dynamic_hugetlb on arm64 and fix some bug
  - !989 [sync] PR-940: net: hns3: related bugfixes, refactoring, and cleanup
  - hikey9xx: Fixed incorrect use of kfree to free sreg
  - RDMA/hns: Remove redundant 'num_mtt_segs' and 'max_extend_sg'
  - RDMA/hns: Remove redundant 'use_lowmem' argument from hns_roce_init_hem_table()
  - !992 [sync] PR-949:  mm: page_counter: remove unneeded atomic ops for low/min
  - ubi: Fix deadlock caused by recursively holding work_sem
  - mtd: ubi: wl: Fix a couple of kernel-doc issues
  - !977 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
  - mm: page_counter: remove unneeded atomic ops for low/min
  - net: hns3: restore user pause configure when disable autoneg
  - net: hns3: fix strncpy() not using dest-buf length as length issue
  - net: hns3: refactor hclge_update_desc_vfid for extension
  - net: hns3: add tm flush when setting tm
  - net: hns3: fix the imp capability bit cannot exceed 32 bits issue
  - net: hns3: fix GRE checksum offload issue
  - perf: pmu: fix set wrong filter mode for running events issue
  - block: fix order error in blk_release_queue
  - block: fix null-pointer dereference in ioc_pd_init
  - blk-iocost: dispatch all throttled bio in ioc_pd_offline
  - blk-iocost: don't throttle bio if iocg is offlined
  - blk-iocost: track whether iocg is still online
  - blk-iocost: fix UAF in ioc_pd_free
  - x86/boot/compressed: Register dummy NMI handler in EFI boot loader, to avoid kdump crashes
  - mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
  - mm/dynamic_hugetlb: set PagePool to bad page
  - mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
  - mm/dynamic_hugetlb: isolate hugepage without dissolve
  - mm/dynamic_hugetlb: support dynamic hugetlb on arm64
  - mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
  - !964 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
  - !961 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
  - crypto: hisilicon/zip - save capability registers in probe process
  - crypto: hisilicon/sec2 - save capability registers in probe process
  - crypto: hisilicon/hpre - save capability registers in probe process
  - crypto: hisilicon/qm - save capability registers in qm init process
  - crypto: hisilicon/qm - add a function to set qm algs
  - crypto: hisilicon/sec - fix for resource leak
  - crypto: hisilicon/sec - remove unused parameter
  - crypto: hisilicon/sec - misc cleanups
  - !957 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
  - x86/unwind: Fix check_paravirt() calls orc_find() before declaration
  - x86/unwind: Fix orc entry for paravirt {save,restore}_fl
  - kobject: Fix slab-out-of-bounds in fill_kobj_path()
  - tcp: restrict net.ipv4.tcp_app_win
  - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
  - config: Disable CONFIG_EULER_FS by default
  - xfs: kill xfs_sb_version_has_v3inode()
  - xfs: introduce xfs_sb_is_v5 helper
  - xfs: remove unused xfs_sb_version_has wrappers
  - xfs: convert xfs_sb_version_has checks to use mount features
  - xfs: convert scrub to use mount-based feature checks
  - xfs: open code sb verifier feature checks
  - xfs: convert xfs_fs_geometry to use mount feature checks
  - xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
  - xfs: convert remaining mount flags to state flags
  - xfs: convert mount flags to features
  - xfs: consolidate mount option features in m_features
  - xfs: replace xfs_sb_version checks with feature flag checks
  - xfs: reflect sb features in xfs_mount
  - xfs: rework attr2 feature and mount options
  - xfs: rename xfs_has_attr()
  - xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
  - xfs: log items should have a xlog pointer, not a mount
  - xfs: fix incorrect error-out in xfs_remove
  - !933 [sync] PR-922:  jbd2: fix checkpoint inconsistent
  - jbd2: remove t_checkpoint_io_list
  - jbd2: recheck chechpointing non-dirty buffer
  - !923 [sync] PR-918: Misc fixes for Kunpeng accelerator drivers!
  - !914 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
  - crypto: hisilicon/qm - remove unnecessary aer.h include
  - crypto: hisilicon/qm - stop function and write data to memory
  - crypto: hisilicon/hpre - ensure private key less than n
  - crypto: hisilicon/qm - prevent soft lockup in qm_poll_req_cb()'s loop
  - !921 [sync] PR-919:  Revert "ext4: dio take shared inode lock when overwriting preallocated blocks"
  - Revert "ext4: dio take shared inode lock when overwriting preallocated blocks"
  - !898 [sync] PR-894: Fixed two accelerator bugfixes
  - !908 [sync] PR-874: nic: hns3: fix pointer cast for wol and fix getting GE port lanes error and set cpu affinity
  - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
  - !909 [sync] PR-907:  tcp/dccp: Add another way to allocate local ports in connect()
  - !893 mitigatin cacheline false sharing
  - tcp/dccp: Add another way to allocate local ports in connect()
  - net: hns3: fix set cpu affinity when state down
  - net: hns3: add support for getting GE port lanes
  - net: hns3: fix pointer cast to different type for wol
  - !903 backport block bugfix
  - md/raid10: fix incorrect done of recovery
  - md/raid10: fix null-ptr-deref in raid10_sync_request
  - block/badblocks: fix badblocks loss when badblocks combine
  - block/badblocks: fix the bug of reverse order
  - md: fix unexpected changes of return value in rdev_set_badblocks
  - md/raid10: fix io hung in md_wait_for_blocked_rdev()
  - block: Only set bb->changed when badblocks changes
  - md/raid10: fix incorrect counting of rdev->nr_pending
  - md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
  - md/raid10: fix uaf if replacement replaces rdev
  - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
  - md/raid10: fix io loss while replacement replace rdev
  - md/raid10: prioritize adding disk to 'removed' mirror
  - md: fix io loss when remove rdev fail
  - md/raid10: fix a race between removing rdev and access conf->mirrors[i].rdev
  - md/raid10: fix taks hung in raid10d
  - md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
  - md/raid10: fix softlockup in raid10_unplug
  - md/raid1: stop mdx_raid1 thread when raid1 array run failed
  - md: fix sysfs duplicate file while adding rdev
  - md: replace invalid function flush_rdev_wq() with flush_workqueue()
  - md: Flush workqueue md_rdev_misc_wq in md_alloc()
  - block: don't allow the same type rq_qos add more than once
  - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
  - blk-iocost: don't allow to configure bio based device
  - !899 [sync] PR-895:  config: enable CONFIG_BPF_STREAM_PARSER=y on arm64
  - config: enable CONFIG_BPF_STREAM_PARSER=y on arm64
  - uacce: use filep->f_mapping to replace inode->i_mapping
  - crypto:hisilicon/qm: bugfix queue parameter issue
  - enable MITIGATION_FALSE_SHARING by default
  - ext4: mitigatin cacheline false sharing in struct ext4_inode_info


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.6.0.84
changelog:
  - !1119 [openEuler-22.03-LTS-SP2] net: hns3: refactor hclge_mac_link_status_wait and add wait until mac link down
  - net: hns3: add wait until mac link down
  - net: hns3: refactor hclge_mac_link_status_wait for interface reuse
  - !1093 vfio-pci: Match specific devices with vendor id and device id
  - !1085 irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
  - irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
  - !1095 irqchip: gic-v3: Collection table support muti pages
  - !1081  some backport bugfix for sockmap
  - irqchip: gic-v3: Collection table support muti pages
  - vfio-pci: Match specific devices with vendor id and device id
  - !1077  drm/qxl: Fix missing free_irq
  - !1087 genirq: Increase the number of IRQ descriptors
  - genirq: Increase the number of IRQ descriptors
  - bpf: fix bpf_tcp_ingress addr use after free
  - net: deal with most data-races in sk_wait_event()
  - bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
  - bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
  - bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect
  - bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes
  - bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data
  - bpf, sock_map: Move cancel_work_sync() out of sock lock
  - bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues
  - !1063 i2c: hisi: Only handle the interrupt of the driver's transfer
  - drm/qxl: Fix missing free_irq
  - !1059 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
  - i2c: hisi: Only handle the interrupt of the driver's transfer
  - fs: hfsplus: fix UAF issue in hfsplus_put_super


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-153.8.0.86
changelog:
  - Enable kabi checking and adapt the check-kabi script
  - net: let sockops can use bpf_get_current_comm()
  - net: add bpf_is_local_ipaddr bpf helper function
  - fs/ntfs3: Check fields while reading
  - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.10.0.88
changelog:
  - Add java-1.8.0-openjdk-devel BuildRequires for kernel.spec
  - !1213 [sync] PR-1196:  fs/stat: make tmp variable 16-bytes aligned in copy stat
  - !1208  arm64: kernel: disable CNP on LINXICORE9100
  - fs/stat: make tmp variable 16-bytes aligned in copy stat
  - !1204  kernel: update SP2 OPENEULER_MINOR value to 2
  - !1203  Revert "locking/rwsem: Prevent potential lock starvation"
  - !1200 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
  - arm64: kernel: disable CNP on LINXICORE9100
  - !1193 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
  - !1195 [sync] PR-1159: xhci:fix USB xhci controller issue
  - !1183  Fix some warning messages in netacc
  - kernel: update SP2 OPENEULER_MINOR value to 2
  - Revert "locking/rwsem: Better collate rwsem_read_trylock()"
  - Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
  - Revert "locking/rwsem: Prevent potential lock starvation"
  - memcg: fix implicit declaration of memcg_print_bad_task()
  - xhci:fix USB xhci controller issue
  - !1186  Fix NULL pointer and Keep PERF_PMU_CAP_EXCLUSIVE
  - memstick: r592: Fix UAF bug in r592_remove due to race condition
  - hwtracing: hisi_ptt: Keep to advertise PERF_PMU_CAP_EXCLUSIVE
  - hwtracing: hisi_ptt: Add dummy callback pmu::read()
  - !1182 Fix CQ and QP cache affinity
  - libbpf: Support uniform BTF-defined key/value specification across all BPF maps
  - tools: ignore one warning message
  - RDMA/hns: Fix CQ and QP cache affinity
  - !1151 [sync] PR-1150:  EDAC/i10nm: Add Intel Emerald Rapids server support
  - !1175 [sync] PR-1157: Add LoongArch maintainers to openEuler/MAINTAINERS
  - !1165 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
  - MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
  - !1169 [sync] PR-1162:  fbcon: Check font dimension limits
  - !1156 [sync] PR-582: mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
  - fbcon: Check font dimension limits
  - proc: allow pid_revalidate() during LOOKUP_RCU
  - !882 [sync] PR-855: Remove the automatic loading of the hisi_trng driver
  - mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()
  - EDAC/i10nm: Add Intel Emerald Rapids server support
  - !1144 crypto: hisilicon/qm: modify loop exit condition
  - !1147 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
  - gfs2: Don't deref jdesc in evict
  - crypto: hisilicon/qm: modify loop exit condition
  - crypto/trng: Remove the automatic loading of the hisi_trng driver
  - crypto: hisilicon/trng - use %u to print u32 variables


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-153.12.0.89
changelog:
  - !1189 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
  - !1226 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
  - !1229 [sync] PR-1227:  x86/fpu: KABI_BROKEN_REMOVE "union fpregs_state state" from struct fpu
  - x86/fpu: KABI_BROKEN_REMOVE "union fpregs_state state" from struct fpu
  - media: rkvdec: fix use after free bug in rkvdec_remove
  - !1219  openEuler: introduced OPENEULER_LTS to identify LTS Release
  - openEuler: introduced OPENEULER_LTS to identify LTS Release
  - net/sched: flower: fix possible OOB write in fl_set_geneve_opt()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.17.0.93
changelog:
  - !1231 [sync] PR-1191:  fix memory reliable related issues
  - !1236 [sync] PR-1194:  fix memleak with efi_fake_mem
  - !1257 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
  - !1249 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
  - !1234 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
  - !1211 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
  - !1276 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
  - !1304 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
  - !1301 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
  - !1266 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
  - !1240 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
  - media: saa7134: fix use after free bug in saa7134_finidev due to race condition
  - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
  - !1244  set the iova rcache global
  - HID: intel_ish-hid: Add check for ishtp_dma_tx_map
  - hugetlb: fix hugepages_setup when deal with pernode
  - hugetlb: fix wrong use of nr_online_nodes
  - config: enable set the max iova mag size to 128
  - iommu/iova: increase the iova_rcache depot max size
  - relayfs: fix out-of-bounds access in relay_file_read
  - config: Disable EFI_FAKE_MEMMAP support for arm64 by default
  - efi: Fix UAF for arm64 when enable efi_fake_mem
  - mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
  - efi: Disable mirror feature during crashkernel
  - mm: mem_reliable: Update reliable page counter to zero if underflows
  - mm: mem_reliable: Fix reliable page counter mismatch problem
  - nbd: fix incomplete validation of ioctl arg
  - nbd: validate the block size in nbd_set_size


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.18.0.94
changelog:
  - !1370 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
  - !1365 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb->cb
  - io_uring: hold uring mutex around poll removal
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb
  - !1344 [sync] PR-1272:  xfs: fix some problems recently
  - xfs: fix uninitialized variable access
  - xfs: set XFS_FEAT_NLINK correctly
  - xfs: don't leak perag when growfs fails
  - xfs: factor out xfs_destroy_perag()
  - xfs: fix warning in xfs_vm_writepages()
  - xfs: don't leak intent item when recovery intents fail
  - xfs: factor out xfs_defer_pending_abort
  - xfs: fix mounting failed caused by sequencing problem in the log records
  - !1306 [sync] PR-1297:  iommu/iova: move IOVA_MAX_GLOBAL_MAGS outside of IOMMU_SUPPORT
  - iommu/iova: move IOVA_MAX_GLOBAL_MAGS outside of IOMMU_SUPPORT
  - Fix x86 provides error symbol


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.19.0.95
changelog:
  - !1291 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
  - !1457 [sync] PR-1358:  Remove DECnet support from kernel
  - !1440 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
  - !1461 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
  - !1464 [sync] PR-1436: Fix CVE-2023-3117
  - !1319 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd->config'
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
  - netfilter: nf_tables: fix chain binding transaction logic
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  - loop: loop_set_status_from_info() check before assignment
  - Remove DECnet support from kernel
  - netfilter: nf_tables: do not ignore genmask when looking up chain by id
  - !1421 [sync] PR-1415:  Fix generic/299 fail
  - !1379 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
  - !1433 [sync] PR-346: anolis: bond: broadcast ARP or ND messages to all slaves
  - anolis: bond: broadcast ARP or ND messages to all slaves
  - ext4: Add debug message to notify user space is out of free
  - Revert "ext4: Stop trying writing pages if no free blocks generated"
  - !1413 [sync] PR-1408:  Replace the hulk patch with the lts patch
  - cgroup: Do not corrupt task iteration when rebinding subsystem
  - Revert "cgroup: Stop task iteration when rebinding subsystem"
  - !1390 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
  - !1393 [sync] PR-1376:  jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - !1309 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
  - jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - quota: simplify drop_dquot_ref()
  - quota: fix dqput() to follow the guarantees dquot_srcu should provide
  - quota: add new helper dquot_active()
  - quota: rename dquot_active() to inode_quota_active()
  - quota: factor out dquot_write_dquot()
  - !1330 [sync] PR-1325:  jbd2: fix several checkpoint
  - !1333 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
  - blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
  - blk-wbt: make enable_state more accurate
  - !1341 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
  - ext4: turning quotas off if mount failed after enable quotas
  - ext4: Stop trying writing pages if no free blocks generated
  - jbd2: fix checkpoint cleanup performance regression
  - jbd2: remove __journal_try_to_free_buffer()
  - jbd2: fix a race when checking checkpoint buffer busy
  - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
  - jbd2: remove journal_clean_one_cp_list()
  - nbd: fix null-ptr-dereference while accessing 'nbd->config'
  - nbd: factor out a helper to get nbd_config without holding 'config_lock'
  - nbd: fold nbd config initialization into nbd_alloc_config()
  - cgroup: always put cset in cgroup_css_set_put_fork
  - drm/msm/dpu: Add check for pstates


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.20.0.96
changelog:
  - !1526 [sync] PR-1482:  CVE-2023-3567 fix patches
  - !1338 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
  - vc_screen: modify vcs_size() handling in vcs_read()
  - vc_screen: don't clobber return value in vcs_read
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
  - !1491 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
  - !1487 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - !1496 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - !1492 [sync] PR-1468: Backport 5.10.155 LTS
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - x86/cpu: Restore AMD's DE_CFG MSR after resume
  - mmc: sdhci-esdhc-imx: Convert the driver to DT-only
  - net: tun: call napi_schedule_prep() to ensure we own a napi
  - dmaengine: at_hdmac: Check return code of dma_async_device_register
  - dmaengine: at_hdmac: Fix impossible condition
  - dmaengine: at_hdmac: Don't allow CPU to reorder channel enable
  - dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors
  - dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware
  - dmaengine: at_hdmac: Fix concurrency over the active list
  - dmaengine: at_hdmac: Free the memset buf without holding the chan lock
  - dmaengine: at_hdmac: Fix concurrency over descriptor
  - dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all()
  - dmaengine: at_hdmac: Protect atchan->status with the channel lock
  - dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all
  - dmaengine: at_hdmac: Fix premature completion of desc in issue_pending
  - dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending
  - dmaengine: at_hdmac: Don't start transactions at tx_submit level
  - dmaengine: at_hdmac: Fix at_lli struct definition
  - cert host tools: Stop complaining about deprecated OpenSSL functions
  - can: j1939: j1939_send_one(): fix missing CAN header initialization
  - mm/memremap.c: map FS_DAX device memory as decrypted
  - udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
  - mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI
  - btrfs: selftests: fix wrong error check in btrfs_free_dummy_root()
  - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi
  - drm/i915/dmabuf: fix sg_table handling in map_dma_buf
  - nilfs2: fix use-after-free bug of ns_writer on remount
  - nilfs2: fix deadlock in nilfs_count_free_blocks()
  - ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure
  - vmlinux.lds.h: Fix placement of '.data..decrypted' section
  - ALSA: usb-audio: Add DSD support for Accuphase DAC-60
  - ALSA: usb-audio: Add quirk entry for M-Audio Micro
  - ALSA: hda/realtek: Add Positivo C6300 model quirk
  - ALSA: hda: fix potential memleak in 'add_widget_node'
  - ALSA: hda/ca0132: add quirk for EVGA Z390 DARK
  - ALSA: hda/hdmi - enable runtime pm for more AMD display audio
  - mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI
  - mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI
  - mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI
  - mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI
  - MIPS: jump_label: Fix compat branch range check
  - arm64: efi: Fix handling of misaligned runtime regions and drop warning
  - riscv: fix reserved memory setup
  - riscv: Separate memory init from paging init
  - riscv: Enable CMA support
  - riscv: vdso: fix build with llvm
  - riscv: process: fix kernel info leakage
  - net: macvlan: fix memory leaks of macvlan_common_newlink
  - ethernet: tundra: free irq when alloc ring failed in tsi108_open()
  - net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open()
  - ethernet: s2io: disable napi when start nic failed in s2io_card_up()
  - net: atlantic: macsec: clear encryption keys from the stack
  - net: phy: mscc: macsec: clear encryption keys when freeing a flow
  - cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open()
  - net: cxgb3_main: disable napi when bind qsets failed in cxgb_up()
  - net: cpsw: disable napi in cpsw_ndo_open()
  - net/mlx5e: E-Switch, Fix comparing termination table instance
  - net/mlx5: Allow async trigger completion execution on single CPU systems
  - net: nixge: disable napi when enable interrupts failed in nixge_open()
  - net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init()
  - perf stat: Fix printing os->prefix in CSV metrics output
  - drivers: net: xgene: disable napi when register irq failed in xgene_enet_open()
  - dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()
  - dmaengine: pxa_dma: use platform_get_irq_optional
  - tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header
  - net: broadcom: Fix BCMGENET Kconfig
  - net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable()
  - can: af_can: fix NULL pointer dereference in can_rx_register()
  - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network
  - drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register()
  - hamradio: fix issue of dev reference count leakage in bpq_device_event()
  - net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event()
  - KVM: s390: pv: don't allow userspace to set the clock under PV
  - KVM: s390x: fix SCK locking
  - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
  - net: fman: Unregister ethernet device on removal
  - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer
  - bnxt_en: Fix possible crash in bnxt_hwrm_set_coal()
  - net: tun: Fix memory leaks of napi_get_frags
  - macsec: clear encryption keys from the stack after setting up offload
  - macsec: fix detection of RXSCs when toggling offloading
  - macsec: fix secy->n_rx_sc accounting
  - macsec: delete new rxsc when offload fails
  - net: gso: fix panic on frag_list with mixed head alloc types
  - bpf: Fix wrong reg type conversion in release_reference()
  - bpf: Add helper macro bpf_for_each_reg_in_vstate
  - bpf: Support for pointers beyond pkt_end.
  - HID: hyperv: fix possible memory leak in mousevsc_probe()
  - bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE
  - wifi: cfg80211: fix memory leak in query_regdb_file()
  - wifi: cfg80211: silence a sparse RCU warning
  - phy: stm32: fix an error code in probe
  - hwspinlock: qcom: correct MMIO max register for newer SoCs
  - fuse: fix readdir cache race
  - !1471 [sync] PR-838: Backport 5.10.154 LTS
  - ipv6/addrconf: fix a potential refcount underflow for idev
  - media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - ipc: remove memcg accounting for sops objects in do_semtimedop()
  - drm/i915/sdvo: Setup DDC fully before output init
  - drm/i915/sdvo: Filter out invalid outputs more sensibly
  - drm/rockchip: dsi: Force synchronous probe
  - ext4,f2fs: fix readahead of verity data
  - KVM: x86: emulator: update the emulation mode after CR0 write
  - KVM: x86: emulator: introduce emulator_recalc_and_set_mode
  - KVM: x86: emulator: em_sysexit should update ctxt->mode
  - KVM: x86: Mask off reserved bits in CPUID.80000001H
  - KVM: x86: Mask off reserved bits in CPUID.80000008H
  - KVM: x86: Mask off reserved bits in CPUID.8000001AH
  - KVM: x86: Mask off reserved bits in CPUID.80000006H
  - ext4: fix BUG_ON() when directory entry has invalid rec_len
  - ext4: fix warning in 'ext4_da_release_space'
  - parisc: Avoid printing the hardware path twice
  - parisc: Export iosapic_serial_irq() symbol for serial port driver
  - parisc: Make 8250_gsc driver dependend on CONFIG_PARISC
  - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[]
  - perf/x86/intel: Fix pebs event constraints for ICL
  - efi: random: Use 'ACPI reclaim' memory for random seed
  - efi: random: reduce seed size to 32 bytes
  - fuse: add file_modified() to fallocate
  - capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
  - tracing/histogram: Update document for KEYS_MAX size
  - tools/nolibc/string: Fix memcmp() implementation
  - kprobe: reverse kp->flags when arm_kprobe failed
  - tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
  - btrfs: fix type of parameter generation in btrfs_get_dentry
  - coresight: cti: Fix hang in cti_disable_hw()
  - mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times
  - fscrypt: fix keyring memory leak on mount failure
  - fscrypt: stop using keyrings subsystem for fscrypt_master_key
  - fscrypt: simplify master key locking
  - ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices
  - block, bfq: protect 'bfqd->queued' by 'bfqd->lock'
  - i2c: piix4: Fix adapter not be removed in piix4_remove()
  - arm64: dts: juno: Add thermal critical trip points
  - firmware: arm_scmi: Make Rx chan_setup fail on memory errors
  - firmware: arm_scmi: Suppress the driver's bind attributes
  - ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset
  - efi/tpm: Pass correct address to memblock_reserve
  - i2c: xiic: Add platform module alias
  - drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case
  - HID: saitek: add madcatz variant of MMO7 mouse device ID
  - scsi: core: Restrict legal sdev_state transitions via sysfs
  - ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init()
  - media: meson: vdec: fix possible refcount leak in vdec_probe()
  - media: dvb-frontends/drxk: initialize err to 0
  - media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE
  - media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
  - media: rkisp1: Zero v4l2_subdev_format fields in when validating links
  - media: rkisp1: Initialize color space on resizer sink and source pads
  - s390/boot: add secure boot trailer
  - xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices
  - mtd: parsers: bcm47xxpart: Fix halfblock reads
  - mtd: parsers: bcm47xxpart: print correct offset on read error
  - fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards
  - video/fbdev/stifb: Implement the stifb_fillrect() function
  - mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake
  - mmc: sdhci-pci: Avoid comma separated statements
  - mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus
  - drm/msm/hdmi: fix IRQ lifetime
  - drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag
  - ipv6: fix WARNING in ip6_route_net_exit_late()
  - net, neigh: Fix null-ptr-deref in neigh_table_clear()
  - net: mdio: fix undefined behavior in bit shift for __mdiobus_register
  - btrfs: fix ulist leaks in error paths of qgroup self tests
  - btrfs: fix inode list leak during backref walking at find_parent_nodes()
  - btrfs: fix inode list leak during backref walking at resolve_indirect_refs()
  - isdn: mISDN: netjet: fix wrong check of device registration
  - mISDN: fix possible memory leak in mISDN_register_device()
  - rose: Fix NULL pointer dereference in rose_send_frame()
  - ipvs: fix WARNING in ip_vs_app_net_cleanup()
  - ipvs: fix WARNING in __ip_vs_cleanup_batch()
  - ipvs: use explicitly signed chars
  - netfilter: nf_tables: release flow rule object from commit path
  - net: sched: Fix use after free in red_enqueue()
  - ata: pata_legacy: fix pdc20230_set_piomode()
  - net: fec: fix improper use of NETDEV_TX_BUSY
  - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()
  - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
  - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
  - NFC: nxp-nci: remove unnecessary labels
  - nfc: fdp: Fix potential memory leak in fdp_nci_send()
  - nfc: fdp: drop ftrace-like debugging messages
  - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources()
  - RDMA/core: Fix null-ptr-deref in ib_core_cleanup()
  - net: dsa: Fix possible memory leaks in dsa_loop_init()
  - nfs4: Fix kmemleak when allocate slot failed
  - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot
  - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors
  - NFSv4: Fix a potential state reclaim deadlock
  - IB/hfi1: Correctly move list in sc_disable()
  - RDMA/cma: Use output interface for net_dev check
  - KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER
  - KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter()
  - KVM: x86: Protect the unused bits in MSR exiting flags
  - x86/topology: Fix duplicated core ID within a package
  - x86/topology: Fix multiple packages shown on a single-package system
  - x86/topology: Set cpu_die_id only if DIE_TYPE found
  - KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1)
  - KVM: x86: Trace re-injected exceptions
  - KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02
  - KVM: nVMX: Pull KVM L0's desired controls directly from vmcs01
  - serial: ar933x: Deassert Transmit Enable on ->rs485_config()
  - serial: 8250: Let drivers request full 16550A feature probing
  - !1423 [sync] PR-1254:  Two CVE fixes of ksmbd
  - ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
  - ksmbd: fix memleak in session setup
  - bpf: Fix incorrect verifier pruning due to missing register precision taints


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.21.0.97
changelog:
  - !1589 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
  - !1584 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
  - !1600 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
  - !1603 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
  - !1616 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
  - !1579 [sync] PR-1541: Backport 5.10.158 - 5.10.159 LTS patches from upstream.
  - net/sched: cls_u32: Fix reference counter leak leading to overflow
  - !1594 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
  - psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
  - binder: fix UAF caused by faulty buffer cleanup
  - ksmbd: fix global-out-of-bounds in smb2_find_context_vals
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free
  - ksmbd: fix wrong UserName check in session_user
  - can: esd_usb: Allow REC and TEC to return to zero
  - macsec: add missing attribute validation for offload
  - net: mvneta: Fix an out of bounds check
  - ipv6: avoid use-after-free in ip6_fragment()
  - net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq()
  - ethernet: aeroflex: fix potential skb leak in greth_init_rings()
  - tipc: call tipc_lxc_xmit without holding node_read_lock
  - net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions()
  - ipv4: Fix incorrect route flushing when table ID 0 is used
  - ipv4: Fix incorrect route flushing when source address is deleted
  - tipc: Fix potential OOB in tipc_link_proto_rcv()
  - net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
  - net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
  - net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq
  - ip_gre: do not report erspan version on GRE interface
  - net: stmmac: fix "snps,axi-config" node property parsing
  - nvme initialize core quirks before calling nvme_init_subsystem
  - NFC: nci: Bounds check struct nfc_target arrays
  - i40e: Disallow ip4 and ip6 l4_4_bytes
  - i40e: Fix for VF MAC address 0
  - i40e: Fix not setting default xps_cpus after reset
  - net: mvneta: Prevent out of bounds read in mvneta_config_rss()
  - xen-netfront: Fix NULL sring after live migration
  - net: encx24j600: Fix invalid logic in reading of MISTAT register
  - net: encx24j600: Add parentheses to fix precedence
  - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
  - selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload
  - net: dsa: ksz: Check return value
  - Bluetooth: Fix not cleanup led when bt_init fails
  - Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()
  - vmxnet3: correctly report encapsulated LRO packet
  - drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420
  - igb: Allocate MSI-X vector when testing
  - e1000e: Fix TX dispatch condition
  - gpio: amd8111: Fix PCI device reference count leak
  - drm/bridge: ti-sn65dsi86: Fix output polarity setting bug
  - netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark
  - ca8210: Fix crash by zero initializing data
  - ieee802154: cc2520: Fix error return code in cc2520_hw_init()
  - netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one
  - rtc: mc146818-lib: fix signedness bug in mc146818_get_time()
  - rtc: mc146818-lib: fix locking in mc146818_set_time
  - rtc: cmos: Disable irq around direct invocation of cmos_interrupt()
  - HID: core: fix shift-out-of-bounds in hid_report_raw_event
  - HID: hid-lg4ff: Add check for empty lbuf
  - HID: usbhid: Add ALWAYS_POLL quirk for some mice
  - drm/shmem-helper: Avoid vm_open error paths
  - drm/shmem-helper: Remove errant put in error path
  - drm/vmwgfx: Don't use screen objects when SEV is active
  - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field
  - Bluetooth: Fix crash when replugging CSR fake controllers
  - Bluetooth: btusb: Add debug message for CSR controllers
  - mm/gup: fix gup_pud_range() for dax
  - media: v4l2-dv-timings.c: fix too strict blanking sanity checks
  - Revert "ARM: dts: imx7: Fix NAND controller size-cells"
  - media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area()
  - xen/netback: do some code cleanup
  - rtc: mc146818: Reduce spinlock section in mc146818_set_time()
  - rtc: cmos: Replace spin_lock_irqsave with spin_lock in hard IRQ
  - rtc: cmos: avoid UIP when reading alarm time
  - rtc: cmos: avoid UIP when writing alarm time
  - rtc: mc146818-lib: extract mc146818_avoid_UIP
  - rtc: mc146818-lib: fix RTC presence check
  - rtc: Check return value from mc146818_get_time()
  - rtc: mc146818-lib: change return values of mc146818_get_time()
  - rtc: cmos: remove stale REVISIT comments
  - rtc: mc146818: Dont test for bit 0-5 in Register D
  - rtc: mc146818: Detect and handle broken RTCs
  - rtc: mc146818: Prevent reading garbage
  - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
  - mm/khugepaged: fix GUP-fast interaction by sending IPI
  - mm/khugepaged: take the right locks for page table retraction
  - net: usb: qmi_wwan: add u-blox 0x1342 composition
  - 9p/xen: check logical size for buffer size
  - usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer
  - fbcon: Use kzalloc() in fbcon_prepare_logo()
  - regulator: twl6030: fix get status of twl6032 regulators
  - ASoC: soc-pcm: Add NULL check in BE reparenting
  - btrfs: send: avoid unaligned encoded writes when attempting to clone range
  - ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
  - regulator: slg51000: Wait after asserting CS pin
  - 9p/fd: Use P9_HDRSZ for header size
  - ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188
  - ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register
  - ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation
  - ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels
  - ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name
  - arm64: dts: rockchip: fix ir-receiver node names
  - ARM: dts: rockchip: fix ir-receiver node names
  - arm: dts: rockchip: fix node name for hym8563 rtc
  - arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series
  - ipc/sem: Fix dangling sem_array access in semtimedop race
  - v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails
  - block: unhash blkdev part inode when the part is deleted
  - Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
  - char: tpm: Protect tpm_pm_suspend with locks
  - Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend"
  - ACPI: HMAT: Fix initiator registration for single-initiator systems
  - ACPI: HMAT: remove unnecessary variable initialization
  - i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set
  - i2c: npcm7xx: Fix error handling in npcm_i2c_init()
  - x86/pm: Add enumeration check before spec MSRs save/restore setup
  - x86/tsx: Add a feature bit for TSX control MSR support
  - Revert "tty: n_gsm: avoid call of sleeping functions from atomic context"
  - ipv4: Fix route deletion when nexthop info is not specified
  - ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference
  - selftests: net: fix nexthop warning cleanup double ip typo
  - selftests: net: add delete nexthop route warning test
  - Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled
  - parisc: Increase FRAME_WARN to 2048 bytes on parisc
  - xtensa: increase size of gcc stack frame check
  - parisc: Increase size of gcc stack frame check
  - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
  - iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
  - pinctrl: single: Fix potential division by zero
  - ASoC: ops: Fix bounds check for _sx controls
  - tracing: Free buffers when a used dynamic event is removed
  - drm/i915: Never return 0 if not all requests retired
  - drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame
  - mmc: sdhci: Fix voltage switch delay
  - mmc: sdhci-sprd: Fix no reset data and command after voltage switch
  - mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check
  - mmc: core: Fix ambiguous TRIM and DISCARD arg
  - mmc: mmc_test: Fix removal of debugfs file
  - net: stmmac: Set MAC's flow control register to reflect current settings
  - pinctrl: intel: Save and restore pins in "direct IRQ" mode
  - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3
  - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
  - tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep"
  - error-injection: Add prompt for function error injection
  - riscv: vdso: fix section overlapping under some conditions
  - net/mlx5: DR, Fix uninitialized var warning
  - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
  - hwmon: (coretemp) Check for null before removing sysfs attrs
  - net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed
  - sctp: fix memory leak in sctp_stream_outq_migrate()
  - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
  - net: tun: Fix use-after-free in tun_detach()
  - afs: Fix fileserver probe RTT handling
  - net: hsr: Fix potential use-after-free
  - tipc: re-fetch skb cb after tipc_msg_validate
  - dsa: lan9303: Correct stat name
  - net: ethernet: nixge: fix NULL dereference
  - net/9p: Fix a potential socket leak in p9_socket_open
  - net: net_netdev: Fix error handling in ntb_netdev_init_module()
  - net: phy: fix null-ptr-deref while probe() failed
  - wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration
  - wifi: cfg80211: don't allow multi-BSSID in S1G
  - wifi: cfg80211: fix buffer overflow in elem comparison
  - aquantia: Do not purge addresses when setting the number of rings
  - qlcnic: fix sleep-in-atomic-context bugs caused by msleep
  - can: cc770: cc770_isa_probe(): add missing free_cc770dev()
  - can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev()
  - net/mlx5e: Fix use-after-free when reverting termination table
  - net/mlx5: Fix uninitialized variable bug in outlen_write()
  - e100: Fix possible use after free in e100_xmit_prepare
  - e100: switch from 'pci_' to 'dma_' API
  - iavf: Fix error handling in iavf_init_module()
  - iavf: remove redundant ret variable
  - fm10k: Fix error handling in fm10k_init_module()
  - i40e: Fix error handling in i40e_init_module()
  - ixgbevf: Fix resource leak in ixgbevf_init_module()
  - of: property: decrement node refcount in of_fwnode_get_reference_args()
  - bpf: Do not copy spin lock field from user in bpf_selem_alloc
  - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
  - hwmon: (i5500_temp) fix missing pci_disable_device()
  - hwmon: (ina3221) Fix shunt sum critical calculation
  - hwmon: (ltc2947) fix temperature scaling
  - libbpf: Handle size overflow for ringbuf mmap
  - ARM: at91: rm9200: fix usb device clock id
  - scripts/faddr2line: Fix regression in name resolution on ppc64le
  - bpf, perf: Use subprog name when reporting subprog ksymbol
  - iio: light: rpr0521: add missing Kconfig dependencies
  - iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
  - iio: health: afe4403: Fix oob read in afe4403_read_raw
  - btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
  - drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read"
  - drm/amdgpu: update drm_display_info correctly when the edid is read
  - drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code
  - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
  - spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock
  - btrfs: free btrfs_path before copying inodes to userspace
  - btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino
  - !1554 [sync] PR-1506: Backport 5.10.157 LTS patches from upstream
  - !1466 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
  - !1575 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  - net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  - !1560 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
  - !1383 [sync] PR-1351:  dm thin: fix deadlock when swapping to thin device
  - !1483  dm stats: check for and propagate alloc_percpu failure
  - !1504  block: don't set GD_NEED_PART_SCAN if scan partition failed
  - !1479 [sync] PR-1345:  dm: requeue IO if mapping table not yet
  - mm: memcontrol: fix cannot alloc the maximum memcg ID
  - fuse: lock inode unconditionally in fuse_fallocate()
  - drm/amdgpu: always register an MMU notifier for userptr
  - drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN
  - btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs()
  - btrfs: free btrfs_path before copying subvol info to userspace
  - btrfs: free btrfs_path before copying fspath to userspace
  - btrfs: free btrfs_path before copying root refs to userspace
  - dm integrity: clear the journal on suspend
  - dm integrity: flush the journal on suspend
  - gpu: host1x: Avoid trying to use GART on Tegra20
  - net: usb: qmi_wwan: add Telit 0x103a composition
  - tcp: configurable source port perturb table size
  - platform/x86: hp-wmi: Ignore Smart Experience App event
  - zonefs: fix zone report size in __zonefs_io_error()
  - platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017)
  - platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr()
  - xen/platform-pci: add missing free_irq() in error path
  - xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too
  - Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[]
  - Input: soc_button_array - add use_low_level_irq module parameter
  - Input: goodix - try resetting the controller when no config is set
  - serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios()
  - ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01
  - Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode
  - x86/ioremap: Fix page aligned size calculation in __ioremap_caller()
  - KVM: x86: remove exit_int_info warning in svm_handle_exit
  - KVM: x86: nSVM: leave nested mode on vCPU free
  - mm: vmscan: fix extreme overreclaim and swap floods
  - gcov: clang: fix the buffer overflow issue
  - nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
  - usb: dwc3: gadget: Clear ep descriptor last
  - usb: dwc3: gadget: Return -ESHUTDOWN on ep disable
  - usb: dwc3: gadget: conditionally remove requests
  - ceph: fix NULL pointer dereference for req->r_session
  - ceph: Use kcalloc for allocating multiple elements
  - ceph: fix possible NULL pointer dereference for req->r_session
  - ceph: put the requests/sessions when it fails to alloc memory
  - ceph: fix off by one bugs in unsafe_request_wait()
  - ceph: flush the mdlog before waiting on unsafe reqs
  - ceph: flush mdlog before umounting
  - ceph: make iterate_sessions a global symbol
  - ceph: make ceph_create_session_msg a global symbol
  - usb: cdns3: Add support for DRD CDNSP
  - mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI
  - mmc: sdhci-brcmstb: Enable Clock Gating to save power
  - mmc: sdhci-brcmstb: Re-organize flags
  - nios2: add FORCE for vmlinuz.gz
  - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
  - iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails
  - iio: light: apds9960: fix wrong register for gesture gain
  - arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency
  - usb: dwc3: exynos: Fix remove() function
  - lib/vdso: use "grep -E" instead of "egrep"
  - net: enetc: preserve TX ring priority across reconfiguration
  - net: enetc: cache accesses to &priv->si->hw
  - net: enetc: manage ENETC_F_QBV in priv->active_offloads only when enabled
  - s390/crashdump: fix TOD programmable field size
  - net: thunderx: Fix the ACPI memory leak
  - nfc: st-nci: fix memory leaks in EVT_TRANSACTION
  - nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION
  - arcnet: fix potential memory leak in com20020_probe()
  - net: arcnet: Fix RESET flag handling
  - s390/dasd: fix no record found for raw_track_access
  - ipv4: Fix error return code in fib_table_insert()
  - dccp/tcp: Reset saddr on failure after inet6?_hash_connect().
  - netfilter: flowtable_offload: add missing locking
  - dma-buf: fix racing conflict of dma_heap_add()
  - bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending()
  - regulator: twl6030: re-add TWL6032_SUBCLASS
  - NFC: nci: fix memory leak in nci_rx_data_packet()
  - net: sched: allow act_ct to be built without NF_NAT
  - sfc: fix potential memleak in __ef100_hard_start_xmit()
  - xfrm: Fix ignored return value in xfrm6_init()
  - tipc: check skb_linearize() return value in tipc_disc_rcv()
  - net/mlx5: Fix handling of entry refcount when command is not issued to FW
  - net/mlx5: Fix FW tracer timestamp calculation
  - netfilter: ipset: regression in ip_set_hash_ip.c
  - netfilter: ipset: Limit the maximal range of consecutive elements to add/delete
  - Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register()
  - Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work()
  - macsec: Fix invalid error code set
  - nfp: add port from netdev validation for EEPROM access
  - nfp: fill splittable of devlink_port_attrs correctly
  - net: pch_gbe: fix pci device refcount leak while module exiting
  - net/qla3xxx: fix potential memleak in ql3xxx_send()
  - net/mlx4: Check retval of mlx4_bitmap_init
  - net: ethernet: mtk_eth_soc: fix error handling in mtk_open()
  - ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties
  - ARM: mxs: fix memory leak in mxs_machine_init()
  - netfilter: conntrack: Fix data-races around ct mark
  - 9p/fd: fix issue of list_del corruption in p9_fd_cancel()
  - net: pch_gbe: fix potential memleak in pch_gbe_tx_queue()
  - nfc/nci: fix race with opening and closing
  - rxrpc: Use refcount_t rather than atomic_t
  - rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc
  - net: liquidio: simplify if expression
  - ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl
  - tee: optee: fix possible memory leak in optee_register_device()
  - bus: sunxi-rsb: Support atomic transfers
  - regulator: core: fix UAF in destroy_regulator()
  - spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld()
  - regulator: core: fix kobject release warning and memory leak in regulator_register()
  - scsi: storvsc: Fix handling of srb_status and capacity change events
  - ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open()
  - ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove
  - ASoC: hdac_hda: fix hda pcm buffer overflow issue
  - ARM: dts: am335x-pcm-953: Define fixed regulators in root node
  - af_key: Fix send_acquire race with pfkey_register
  - xfrm: replay: Fix ESN wrap around for GSO
  - MIPS: pic32: treat port as signed integer
  - RISC-V: vdso: Do not add missing symbols to version section in linker script
  - arm64/syscall: Include asm/ptrace.h in syscall_wrapper header.
  - drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017)
  - scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC
  - scsi: ibmvfc: Avoid path failures during live migration
  - platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1
  - Revert "net: macsec: report real_dev features when HW offloading is enabled"
  - selftests/bpf: Add verifier test for release_reference()
  - spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run
  - wifi: mac80211: Fix ack frame idr leak when mesh has no route
  - wifi: airo: do not assign -1 to unsigned char
  - audit: fix undefined behavior in bit shift for AUDIT_BIT
  - riscv: dts: sifive unleashed: Add PWM controlled LEDs
  - wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support
  - wifi: mac80211: fix memory free error when registering wiphy fail
  - ceph: avoid putting the realm twice when decoding snaps fails
  - ceph: do not update snapshot context when there is no new snapshot
  - iio: pressure: ms5611: fixed value compensation bug
  - iio: ms5611: Simplify IO callback parameters
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro
  - nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH
  - drm/display: Don't assume dual mode adaptors support i2c sub-addressing
  - bridge: switchdev: Fix memory leaks when changing VLAN protocol
  - bridge: switchdev: Notify about VLAN protocol changes
  - ata: libata-core: do not issue non-internal commands once EH is pending
  - ata: libata-scsi: simplify __ata_scsi_queuecmd()
  - scsi: scsi_transport_sas: Fix error handling in sas_phy_add()
  - !1507 [sync] PR-1473: Backport 5.10.156 LTS patches from upstream.
  - Revert "net: broadcom: Fix BCMGENET Kconfig"
  - ntfs: check overflow when iterating ATTR_RECORDs
  - ntfs: fix use-after-free in ntfs_attr_find()
  - mm: fs: initialize fsdata passed to write_begin/write_end interface
  - 9p/trans_fd: always use O_NONBLOCK read/write
  - gfs2: Switch from strlcpy to strscpy
  - gfs2: Check sb_bsize_shift after reading superblock
  - 9p: trans_fd/p9_conn_cancel: drop client lock earlier
  - kcm: close race conditions on sk_receive_queue
  - tcp: cdg: allow tcp_cdg_release() to be called multiple times
  - uapi/linux/stddef.h: Add include guards
  - Input: i8042 - fix leaking of platform device on module removal
  - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case
  - scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper()
  - scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()
  - stddef: Introduce struct_group() helper macro
  - usbnet: smsc95xx: Fix deadlock on runtime resume
  - ring-buffer: Include dropped pages in counting dirty patches
  - nvme: ensure subsystem reset is single threaded
  - nvme: restrict management ioctls to admin
  - perf/x86/intel/pt: Fix sampling using single range output
  - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
  - docs: update mediator contact information in CoC doc
  - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()
  - mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout
  - mmc: core: properly select voltage range without power cycle
  - firmware: coreboot: Register bus in module init
  - iommu/vt-d: Set SRE bit only when hardware has SRS cap
  - scsi: zfcp: Fix double free of FSF request when qdio send fails
  - maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault()
  - Input: iforce - invert valid length check when fetching device IDs
  - serial: 8250_lpss: Configure DMA also w/o DMA filter
  - serial: 8250: Flush DMA Rx on RLSI
  - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs
  - dm ioctl: fix misbehavior if list_versions races with module loading
  - iio: pressure: ms5611: changed hardcoded SPI speed to value limited
  - iio: adc: mp2629: fix potential array out of bound access
  - iio: adc: mp2629: fix wrong comparison of channel
  - iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init()
  - iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()
  - usb: typec: mux: Enter safe mode only when pins need to be reconfigured
  - usb: chipidea: fix deadlock in ci_otg_del_timer
  - usb: add NO_LPM quirk for Realforce 87U Keyboard
  - USB: serial: option: add Fibocom FM160 0x0111 composition
  - USB: serial: option: add u-blox LARA-L6 modem
  - USB: serial: option: add u-blox LARA-R6 00B modem
  - USB: serial: option: remove old LARA-R6 PID
  - USB: serial: option: add Sierra Wireless EM9191
  - USB: bcma: Make GPIO explicitly optional
  - speakup: fix a segfault caused by switching consoles
  - slimbus: stream: correct presence rate frequencies
  - Revert "usb: dwc3: disable USB core PHY management"
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360
  - ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro
  - ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
  - tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit()
  - tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit()
  - tracing: Fix wild-memory-access in register_synth_event()
  - tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event()
  - tracing/ring-buffer: Have polling block on watermark
  - ring_buffer: Do not deactivate non-existant pages
  - ftrace: Fix null pointer dereference in ftrace_add_mod()
  - ftrace: Optimize the allocation for mcount entries
  - ftrace: Fix the possible incorrect kernel message
  - cifs: add check for returning value of SMB2_set_info_init
  - net: thunderbolt: Fix error handling in tbnet_init()
  - cifs: Fix wrong return value checking when GETFLAGS
  - net/x25: Fix skb leak in x25_lapb_receive_frame()
  - net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open()
  - cifs: add check for returning value of SMB2_close_init
  - platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized
  - drbd: use after free in drbd_create_device()
  - net: ena: Fix error handling in ena_init()
  - net: ionic: Fix error handling in ionic_init_module()
  - xen/pcpu: fix possible memory leak in register_pcpu()
  - bnxt_en: Remove debugfs when pci_register_driver failed
  - net: caif: fix double disconnect client in chnl_net_open()
  - net: macvlan: Use built-in RCU list checking
  - mISDN: fix misuse of put_device() in mISDN_register_device()
  - net: liquidio: release resources when liquidio driver open failed
  - mISDN: fix possible memory leak in mISDN_dsp_element_register()
  - net: bgmac: Drop free_netdev() from bgmac_enet_remove()
  - bpf: Initialize same number of free nodes for each pcpu_freelist
  - ata: libata-transport: fix error handling in ata_tdev_add()
  - ata: libata-transport: fix error handling in ata_tlink_add()
  - ata: libata-transport: fix error handling in ata_tport_add()
  - ata: libata-transport: fix double ata_host_put() in ata_tport_add()
  - arm64: dts: imx8mn: Fix NAND controller size-cells
  - arm64: dts: imx8mm: Fix NAND controller size-cells
  - ARM: dts: imx7: Fix NAND controller size-cells
  - drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker()
  - drm/drv: Fix potential memory leak in drm_dev_init()
  - drm/panel: simple: set bpc field for logic technologies displays
  - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map
  - parport_pc: Avoid FIFO port location truncation
  - siox: fix possible memory leak in siox_device_add()
  - arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro
  - block: sed-opal: kmalloc the cmd/resp buffers
  - sctp: clear out_curr if all frag chunks of current msg are pruned
  - sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent
  - ASoC: soc-utils: Remove __exit for snd_soc_util_exit()
  - tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send
  - serial: imx: Add missing .thaw_noirq hook
  - serial: 8250: omap: Flush PM QOS work on remove
  - serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove()
  - serial: 8250_omap: remove wait loop from Errata i202 workaround
  - serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl()
  - serial: 8250: Remove serial_rs485 sanitization from em485
  - ASoC: tas2764: Fix set_tdm_slot in case of single slot
  - ASoC: tas2770: Fix set_tdm_slot in case of single slot
  - ASoC: core: Fix use-after-free in snd_soc_exit()
  - spi: stm32: Print summary 'callbacks suppressed' message
  - drm/amdgpu: disable BACO on special BEIGE_GOBY card
  - drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid cards
  - drm/amd/pm: Read BIF STRAP also for BACO check
  - drm/amd/pm: support power source switch on Sienna Cichlid
  - mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA
  - spi: intel: Use correct mask for flash and protected regions
  - mtd: spi-nor: intel-spi: Disable write protection only if asked
  - ALSA: hda/realtek: fix speakers and micmute on HP 855 G8
  - ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -> "Source", "Routee" -> "Route"
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm
  - btrfs: remove pointless and double ulist frees in error paths of qgroup tests
  - drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid
  - i2c: i801: add lis3lv02d's I2C address for Vostro 5568
  - i2c: tegra: Allocate DMA memory for DMA engine
  - NFSv4: Retry LOCK on OLD_STATEID during delegation return
  - drm/amd/display: Remove wrong pipe control lock
  - ASoC: rt1308-sdw: add the default value of some registers
  - selftests/intel_pstate: fix build for ARCH=x86_64
  - selftests/futex: fix build for clang
  - ASoC: codecs: jz4725b: fix capture selector naming
  - ASoC: codecs: jz4725b: use right control for Capture Volume
  - ASoC: codecs: jz4725b: fix reported volume for Master ctl
  - ASoC: codecs: jz4725b: add missed Line In power control bit
  - spi: intel: Fix the offset to get the 64K erase opcode
  - ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK
  - ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe
  - ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe"
  - ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe"
  - ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe"
  - block: don't set GD_NEED_PART_SCAN if scan partition failed
  - dm stats: check for and propagate alloc_percpu failure
  - dm: don't lock fs when the map is NULL during suspend or resume
  - dm: don't lock fs when the map is NULL in process of resume
  - dm: requeue IO if mapping table not yet available
  - Revert "dm: make sure dm_table is binded before queue request"
  - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
  - dm thin: fix deadlock when swapping to thin device


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.22.0.98
changelog:
  - !1704 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
  - !1700 vfio-pci: Match specific devices with vendor id and device id
  - !1676 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
  - netfilter: nft_set_pipapo: fix improper element removal
  - vfio-pci: Match specific devices with vendor id and device id
  - Revert "vfio-pci: Match specific devices with vendor id and device id"
  - !1651 Fix missing dealloc_dfx_cnt() during device unregister
  - !1643 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
  - !1645 [sync] PR-1605:  CVE-2023-38430
  - ksmbd: fix out-of-bound read in deassemble_neg_contexts()
  - RDMA/hns: Fix missing dealloc_dfx_cnt() during device unregister
  - ksmbd: validate smb request protocol id
  - ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
  - ksmbd: allocate one more byte for implied bcc[0]


author: xinghe <xinghe2@h-partners.com> - 4.17.2-5
changelog:
  - Type:cves
  - ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
  - SUG:NA
  - DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967


author: xinghe <xinghe2@h-partners.com> - 4.17.5-3
changelog:
  - Type:cves
  - ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
  - SUG:NA
  - DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922


author: xinghe <xinghe2@h-partners.com> - 4.17.5-7
changelog:
  - Type:cves
  - ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: xinghe <xinghe2@h-partners.com> - 7.79.1-14
changelog:
  - Type:cves
  - CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
  - SUG:NA
  - DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916


author: xingwei <xingwei14@h-partners.com> - 7.79.1-15
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: chenhaixing <chenhaixing@huawei.com> 4.14.0-12
changelog:
  - CVE:NA
  - SUG:NA
  - DESC:dnf:fix undo error when include rollback of group upgrade
             fix can't download package when url have characters encoded


author: gaihuiying <eaglegai@163.com> - 2.0.11-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-config file access permisson
         fix ebt_print_error for prints null


author: wangkai <13474090681@163.com> - 102.13.0-1
changelog:
  - Update to 102.13.0
  - Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
  - Remove unused patch


author: wangkai <13474090681@163.com> - 102.14.0-1
changelog:
  - Update to 102.14.0
  - Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056


author: hanchao <hanchao47@huawei.com> - 1.17.3-12
changelog:
  - Type:CVE
  - CVE:CVE-2022-41716
  - SUG:NA
  - DESC: remove hard code and strong dependency of git, subversion and mercurial


author: hanchao <hanchao47@huawei.com> - 1.17.3-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
  - SUG:NA
  - DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717


author: hanchao <hanchao47@huawei.com> - 1.17.3-15
changelog:
  - Type:CVE
  - CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
  - SUG:NA
  - DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725


author: hanchao <hanchao47@huawei.com> - 1.17.3-17
changelog:
  - Type:CVE
  - CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
  - SUG:NA
  - DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: hanchao <hanchao63@huawei.com> - 1.17.3-18
changelog:
  - Type:CVE
  - CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
  - SUG:NA
  - DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540


author: hanchao <hanchao63@huawei.com> - 1.17.3-19
changelog:
  - Type:CVE
  - CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
  - SUG:NA
  - DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
         net/bootp: Fix unchecked return value
         fs/iso9660: Avoid reading past the entry boundary
         fs/iso9660: Incorrect check for entry boundary
         fs/iso9660: Prevent skipping CE or ST at start of continuation area
         fs/iso9660: Prevent read past the end of system use area
         fs/iso9660: Add check to prevent infinite loop
         gentpl.py: Remove .interp section from .img files
         kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
         font: Reject fonts with negative max_char_width or max_char_height
         font: Assign null_font to unknown_glyph
         font: Check return value of grub_malloc() in ascii_glyph_lookup()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-23
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.2-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-BUG-fix-a-minor-refcounting-issue-in-Py_FindObjects.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-BUG-fix-small-refcount-issue-in-ndimage._ctest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: <xufei30@huawei.com> - 10:6.2.0-67
changelog:
  - hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
  - net/eth: Don't consider ESP to be an IPv6 option header mainline
  - net: Fix uninitialized data usage mainline
  - block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
  - i386: add notify VM exit support
  - kvm: expose struct KVMState
  - kvm: allow target-specific accelerator properties
  - i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
  - linux-headers: include missing changes from 6.0
  - dsoundaudio: fix crackling audio recordings mainline
  - hw/audio/intel-hda: fix stream reset mainline
  - hw/pvrdma: Protect against buggy or malicious guest driver
  - qemu support for loongarch
  - hw/pci: Trace IRQ routing on PCI topology
  - hw/pci: Fix a typo
  - hw/riscv: virt: Simplify virt_{get,set}_aclint()
  - curl: Fix error path in curl_open()
  - tests: add (riscv virt) machine mapping to testenv from v7.0.0
  - tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
  - hw/core/machine:Fix the missing consideration of cluster-id
  - arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
  - arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
  - hw/acpi: Support acpi-ged to report CPU's OST info
  - hw/acpi: Add ospm_status hook implementation for acpi-ged
  - fix qmp command migrate-set-parameters


author: <xufei30@huawei.com> - 10:6.2.0-71
changelog:
  - vhost-user-blk: fix the resize crash
  - plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
  - linux-user: fix strace build w/out munlockall
  - ui: fix crash on serial reset, during init
  - qga/win/vss: requester_freeze changes
  - migration: fix populate_vfio_info
  - block/rbd: workaround for ceph issue #53784
  - target/i386: add FZRM, FSRS, FSRC
  - i386: Add new CPU model SapphireRapids
  - core/cpu-common: Fix the wrong '#ifdef __aarch64__'


author: <xufei30@huawei.com> - 10:6.2.0-72
changelog:
  - migration/xbzrle: fix out-of-bounds write with axv512
  - migration/xbzrle: use ctz64 to avoid undefined result
  - Update bench-code for addressing CI problem
  - AVX512 support for xbzrle_encode_buffer
  - configure, meson: move AVX tests to meson
  - target/i386: KVM: allow fast string operations if host supports them
  - target/i386: add FSRM to TCG
  - hw/nvme: fix memory leak in nvme_dsm
  - aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
  - target/i386: Add SGX aex-notify and EDECCSSA support
  - hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
  - target/i386: Set maximum APIC ID to KVM prior to vCPU creation
  - target/i386: Fix sanity check on max APIC ID / X2APIC enablement


author: <fengjiabo1@huawei.com> - 10:6.2.0-75
changelog:
  - Add lbt support for kvm.
  - Fix smp.cores value and Fix divide 0 error
  - hw/nvme: Change alignment in dma functions for nvme_blk_*
  - virtio: fix reachable assertion due to stale value of cached region size
  - hw/nvme: fix missing DNR on compare failure


author: <fengjiabo1@huawei.com> - 10:6.2.0-76
changelog:
  - qga/win32: Use rundll for VSS installation
  - qga/win32: Remove change action from MSI installer
  - ide: Increment BB in-flight counter for TRIM BH
  - hw/pci-bridge/pxb: Fix missing swizzle
  - host-vdpa: make notifiers _init()/_uninit() symmetric
  - hw/virtio: vdpa: Fix leak of host-notifier memory-region
  - accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
  - Allow setting up to 8 bytes with the generic loader
  - hw/net/virtio-net: make some VirtIONet const
  - accel/tcg: Optimize jump cache flush during tlb range flush
  - 9pfs: prevent opening special files (CVE-2023-2861)
  - tcg: Reduce tcg_assert_listed_vecop() scope
  - gitlab: Disable plugins for cross-i386-tci
  - vfio/pci: Fix a segfault in vfio_realize
  - block/iscsi: fix double-free on BUSY or similar statuses
  - tests/tcg: fix unused variable in linux-test
  - hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
  - qga/vss-win32: fix warning for clang++-15
  - vnc: avoid underflow when accessing user-provided address
  - block/monitor: Fix crash when executing HMP commit
  - virtio-gpu: add a FIXME for virtio_gpu_load()
  - hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
  - migration: report compress thread pid to libvirt


