# changelog

author: wangkai <13474090681@163.com> - 1.4.3.36-1
changelog:
  - Update to 1.4.3.36
  - Fix dsidm user/posixgroup get_dn fails with search_ext()
  - Fix unable to add objectclass/attribute without x-origin
  - Fix execute dsconf to open pdb


author: liyuanrong<liyuanrong1@huawei.com> - 1.0.2-8
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:restart
  - DESC:fix usage does not print when an error occurs in the upgrade image creation


author: liyuanrong<liyuanrong1@huawei.com> - 1.0.2-9
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:restart
  - DESC:sync code from source, support containerd upgrade,settings and admin-container


author: sunhai <sunhai10@huawei.com> - 36.16.5-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: revert "Set default entry to the BLS id instead of the entry index"


author: licihua <licihua@huawei.com> -5.1.8-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: fix crash in readline when started with an invalid locale specification


author: wangyuhang <wangyuhang27@huawei.com> -5.1.8-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add backport-Bash-5.1-patch-10-fix-for-wait-n-being-interrupted-b.patch
      backport-Bash-5.1-patch-11-save-and-restore-alias-parsing-whe.patch
      backport-Bash-5.1-patch-12-fix-race-condition-with-child-proc.patch
      backport-Bash-5.1-patch-15-fix-readline-display-of-some-chara.patch
      backport-Bash-5.1-patch-16-fix-interpretation-of-multiple-ins.patch


author: wangyuhang <wangyuhang27@huawei.com> -5.1.8-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport-Bash-5.1-patch-13-fix-tilde-expansion-after-unquoted.patch
          backport-Bash-5.1-patch-14-fix-off-by-one-error-when-reading-.patch
          backport-changes-to-documentation-to-reduce-gender-specific-l.patch
          backport-fixes-for-array-subscripts-and-values-containing-0x0.patch
          change PATCHLEVEL from 9 to 8, keep it consistent with the actual version of bash


author: wangyuhang <wangyuhang27@huawei.com> -5.1.8-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add backport-fix-for-nofork-comsub-command-printing-fix-for-crash.patch
          backport-fix-small-memleak-in-globbing.patch
          backport-fix-for-leak-when-completing-command-word-with-glob-.patch
          del doesn't exist PATH dirs in bashrc


author: wangyuhang <wangyuhang27@huawei.com> -5.1.8-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add backport-fix-for-E-transformation-fixes-for-failures-in-arith.patch
          backport-changes-for-quoting-special-and-multibyte-characters.patch
          backport-fixes-for-LINENO-in-multi-line-simple-commands-print.patch
          backport-changes-to-SIGINT-handler-while-waiting-for-a-child-.patch
          backport-renamed-several-functions-beginning-with-legal_-chan.patch


author: wangyuhang <wangyuhang27@huawei.com> -5.1.8-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix the issue of compilation failure when the openEuler macro is not defined


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
  - SUG:NA
  - DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: zhanghao <zhanghao383@huawei.com> - 32:9.16.23-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Don't perform arithmetic on NULL pointers
  Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
  Fix a use-after-free bug in dns_zonemgr_releasezone()
  Fix dns_fwdtable_addfwd() error path cleanup bug
  Detach the views in zone_shutdown(), not in zone_free()
  Detach the zone views outside of the zone lock
  delay trust anchor management until zones are loaded
  In hmac_createctx free ctx on isc_hmac_init failure
  Fix dns_kasp_attach / dns_kasp_detach usage
  Fix backport error in 84929d1c
  Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
  Searching catzs->zones requires a read lock
  Fix view's zones reverting bug during reconfiguration


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-21
changelog:
  - Type:CVE
  - CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-23
changelog:
  - Type:CVE
  - CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
  - SUG:NA
  - DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737


author: yeqinglong <yeqinglong@kylinsec.com.cn> - 2.37-24
changelog:
  - DESC:Add sw_64 support
  - DESC:Add LoongArch support
  - DESC:Fix LoongArch PLT entry generate bug
  - DESC:Add .equ support for LoongArch and fix some bugs


author: liuxu <liuxu156@huawei.com> - 1:1.34.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: yanglu <yanglu72@h-partners.com> - 1.18.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:delete a static library file
         add BuildRequires make to fix build problem


author: hehuazhen <hehuazhen@huawei.com> - 1.18.1-6
changelog:
  - Type:CVE
  - CVE:CVE-2023-32067 CVE-2023-31130
  - SUG:restart
  - DESC:fix CVE-2023-32067 CVE-2023-31130


author: Xiong Zhou <xiongzhou4@huawei.com> - 10.3.1-49
changelog:
  - Type:Revert & sync
  - ID:NA
  - SUG:NA
  - DESC: Revert ICP and IPA prefetch related patches.
  	Sync patch from openeuler/gcc.


author: xinghe <xinghe2@h-partners.com> - 4.17.5-3
changelog:
  - Type:cves
  - ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
  - SUG:NA
  - DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922


author: xinghe <xinghe2@h-partners.com> - 4.17.5-7
changelog:
  - Type:cves
  - ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: xinghe <xinghe2@h-partners.com> - 4.17.5-9
changelog:
  - Type:cves
  - ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
  - SUG:NA
  - DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-26
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tool_progress: avoid division by zero in parallel progress
         digest: pass over leading spaces in qop values
         Curl_close: call Curl_resolver_cancel to avoid memory-leak
         easy: fix the altsvc init for curl_easy_duphandle
         libssh: if sftp_init fails, don't get the sftp error code
         url: move back the IDN conversion of proxy names
         ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
         http: fix the ::1 comparison for IPv6 localhost for cookies
         multi: free up more data earleier in DONE
         curl_path: bring back support for SFTP path ending in /~
         transfer: refuse POSTFIELDS + RESUME_FROM combo
         tool_operate: refuse (--data or --form) and --continue-at
         http: free the url before storing a new copy
         url: fix null dispname for --connect-to option
         vtls: avoid memory leak if sha256 call fails
         urlapi: make sure zoneid is also duplicated in curl_url_dup


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:transfer: also stop the sending on closed connection
         openssl: avoid BN_num_bits() NULL pointer derefs


author: chenhaixing <chenhaixing@huawei.com> 4.14.0-12
changelog:
  - CVE:NA
  - SUG:NA
  - DESC:dnf:fix undo error when include rollback of group upgrade
             fix can't download package when url have characters encoded


author: herengui <herengui@kylinsec.com.cn> - 4.14.0-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:remove useless patch of loongarch64
         dnf:recreate patch of sw64 and make arch sorted alphabetically


author: chenhaixing <chenhaixing@huawei.com> - 4.14.0-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Fix bash completion due to sqlite changes
             When parsing over a KVP list, do not return till the whole list is parsed


author: renmingshuai <renmingshuai@huawei.com> - 2.86-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix parsing of IPv6 addresses with peer from netlink
         Fix bad interaction between --address=/#/<ip> and
              --server=/some.domain/#
         Fix --address=/#/...... which was lost in 2.86


author: renmingshuai <renmingshuai@huawei.com> - 2.86-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: chenjiji <chenjiji09@163.com> - 21.11-55
changelog:
  Sync some patchs from upstreaming about add FDIR VLAN match
   mode runtime config and fix doc format for hns3 pmd. Patchs
   are as follow:
   - doc: unify sections of networking drivers guide
   - net/hns3: delete duplicate macro definition
   - net/hns3: add FDIR VLAN match mode runtime config
   - doc: fix kernel patch link in hns3 guide
   - doc: fix syntax in hns3 guide
   - doc: fix number of leading spaces in hns3 guide


author: huangdengdui <huangdengui@huawei.com> - 21.11-58
changelog:
  Sync some patchs from upstreaming and modifies are as follow:
   - maintainers: update for hns3 driver
   - app/testpmd: add command to flush multicast MAC addresses
   - app/testpmd: fix help string
   - app/testpmd: fix multicast address pool leak
   - net/hns3: optimize SVE Rx performance
   - net/hns3: optimize rearm mbuf for SVE Rx
   - net/hns3: optimize free mbuf for SVE Tx
   - net/hns3: fix order in NEON Rx
   - net/hns3: fix traffic management dump text alignment
   - net/hns3: fix traffic management thread safety
   - net/hns3: fix flushing multicast MAC address
   - net/hns3: fix error code for multicast resource
   - net/hns3: fix VF default MAC modified when set failed
   - net/hns3: fix index to look up table in NEON Rx
   - net/hns3: fix non-zero weight for disabled TC
   - config/arm: add HiSilicon HIP10


author: huangdengdui <huangdengui@huawei.com> - 21.11-59
changelog:
  Sync some patchs from upstreaming and modifies are as follow:
   - net/hns3: fix mailbox sync
   - net/hns3: report maximum buffer size
   - ethdev: add maximum Rx buffer size
   - app/procinfo: show RSS hash algorithm
   - ethdev: get RSS algorithm names
   - app/procinfo: adjust format of RSS info
   - app/procinfo: fix RSS info
   - net/hns3: support setting and querying RSS hash function
   - net/hns3: report RSS hash algorithms capability
   - ethdev: set and query RSS hash algorithm
   - ethdev: clarify RSS related fields usage
   - net/hns3: fix uninitialized hash algo value
   - net/hns3: keep set/get algo key functions local
   - net/hns3: fix some error logs
   - net/hns3: fix some return values
   - net/hns3: fix LRO offload to report
   - net/hns3: fix setting DCB capability
   - app/testpmd: ease configuring all offloads
   - net/hns3: refactor interrupt state query
   - net/hns3: fix IMP or global reset
   - net/hns3: fix multiple reset detected log
   - net/hns3: remove reset log in secondary
   - net/hns3: fix double stats for IMP and global reset
   - net/hns3: fix crash for NEON and SVE
   - net/hns3: fix unchecked Rx free threshold
   - net/hns3: fix typo in function name
   - net/hns3: fix build warning
   - telemetry: fix repeat display when callback don't init dict


author: huangdengdui <huangdengui@huawei.com> - 21.11-60
changelog:
  Sync some bugfix from upstreaming about hns3 reset and modifies
   are as follow:
   - net/hns3: fix VF reset handler interruption
   - net/hns3: fix reset event status
   - net/hns3: fix ignored reset event


author: huangdengdui <huangdengui@huawei.com> - 21.11-61
changelog:
  Sync some bugfix from upstreaming about testpmd and doc, modifies
   are as follow:
   - support set RSS hash algorithm
   - ethdev: add new API to get RSS hash algorithm by name
   - doc: fix description of RSS features
   - doc: fix RSS flow description in hns3 guide
   - doc: update features in hns3 guide
   - doc: fix hns3 build option about max queue number
   - app/testpmd: check port and queue Rx/Tx offloads
   - app/testpmd: fix Tx offload command
   - app/testpmd: allow offload config for all ports
   - app/testpmd: fix tunnel TSO configuration
   - app/testpmd: add explicit check for tunnel TSO
   - app/testpmd: fix tunnel TSO capability check
   - app/testpmd: remove useless check in TSO command


author: huangdengdui <huangdengui@huawei.com> - 21.11-62
changelog:
  Sync some patches for hns3 about refactor mailbox and bugfix, modifies
   are as follow:
   - net/hns3: fix reset level comparison
   - net/hns3: fix disable command with firmware
   - net/hns3: fix VF multiple count on one reset
   - net/hns3: refactor handle mailbox function
   - net/hns3: refactor send mailbox function
   - net/hns3: refactor PF mailbox message struct
   - net/hns3: refactor VF mailbox message struct


author: chenyi <chenyi211@huawei.com> - 21.11-66
changelog:
  Sync some patches from upstream about bugfix, modifies
   are as follow:
   - app/testpmd: fix crash in multi-process forwarding
   - net/hns3: fix offload flag of IEEE 1588
   - net/hns3: fix read Rx timestamp handle
   - net/hns3: fix double free for Rx/Tx queue
   - net/hns3: fix variable overflow
   - net/hns3: enable PFC for all user priorities
   - ring: add telemetry command for ring info
   - ring: add telemetry command to list rings
   - net/hns3: support power monitor
   - net/hns3: disable SCTP verification tag for RSS hash input
   - app/testpmd: fix RSS algorithm choice


author: chenyi <chenyi211@huawei.com> - 21.11-67
changelog:
  Sync some patches from upstream about bugfix, modifies
   are as follow:
   - net/hns3: support new device
   - dma/hisilicon: remove support for HIP09 platform


author: xinghe <xinghe2@h-partners.com> - 2.0.11-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: yanglu <yanglu72@h-partners.com> - 2.0.11-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:rebuild package to ensure that the upgrade between branches is normal


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: yexiao<yexiao7@huawei.com> - 202011-14
changelog:
  - fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727


author: yexiao<yexiao7@huawei.com> - 202011-16
changelog:
  - fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: wangkai <13474090681@163.com> - 1:2.3.0-1
changelog:
  - Update to 2.3.0 for fix CVE-2022-48682
  - Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  - Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
  - Use configure script for installation (Autotools/Automake).
  - Rename cs command ("clear all selections") from cs to csel.
  - Rename igs command ("invert selections") from igs to isel.
  - Add "prune" command as synonym for DELETE key.
  - Clear selections after deleting files via prune/DELETE.
  - Fix dependency issues when fdupes is configured to not use ncurses.
  - Do not enter ncurses mode when --immediate option given.


author: wangkai <13474090681@163.com> - 102.13.0-1
changelog:
  - Update to 102.13.0
  - Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
  - Remove unused patch


author: wangkai <13474090681@163.com> - 102.14.0-1
changelog:
  - Update to 102.14.0
  - Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056


author: lvfei <lvfei@kylinos.cn> - 102.15.0-1
changelog:
  - Update to 102.15.0
  - Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584


author: xinghe <xinghe2@h-partnres.com> - 1.0.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix zone combined forward must not default to True
         fix fw icmptype don't alter ipvs in io_object
         fix check config use the dictionary variants
         fix functions check config fails if direct.xml exists
         fix service adding includes


author: zhanghao <zhanghao383@huawei.com> - 1.0.2-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:chore nftables add delete table helper
         nftables always flush main table on start


author: zhanghao <zhanghao383@huawei.com> - 1.0.2-7
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload
         related ko when stopping firewalld service


author: zhanghao <zhanghao383@huawei.com> - 1.0.2-8
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:To reduce unnecessary loading of ebtables-related kernel modules


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: Zhen Chen <chenzhen126@huawei.com> - 1.0.1-2
changelog:
  - fix ksliprobe get invalid args occasionally at startup
  - fix error print when starting gala-gopher
  - add system_uuid field to distinguish client when post to pyroscope server
  - repair stackprobe caused cpu rush
  - add support to pyroscope
  - bugfix: add check if thread is 0
  - fix stackprobe memory allocation and deallocation errors.
  - normalize time format in flamegraph svg filename


author: Tangxin Xie <xietangxin@huawei.com> - 1.0.2-2
changelog:
  - bugfix add check whether cadvisor is installed
    bugfix fix system_proc collect data err
    change return type of uprobe from void to int
    Fix for popen cannot get stderr
    fix modify unit of some metrics to second
    refactor modify jvmprobe to support pod
    stackprobe fix inaccurate call stack count add samp
    add python3-libconf and python3-request deps


author: Tangxin Xie <xietangxin@huawei.com> - 1.0.2-3
changelog:
  - fix httpprobe find libssl path
    Fix segmentation fault of gala-gopher cmd
    fix prepare_dependence
    bugfix:The log time is not the local time
    fix: fix fd leakage problem
    cadvisor_probe:convert container_id type to bytes
    adapt block_rq_issue tracepoint args in kernel-5.10
    modify desc from chinese to english
    bugfix: fix gala-gopher -h print err
    fix: change license software name
    fix: fix install error
    bugfix: zombie task.
    fix:add default data of event conf
    fix access violation


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-17
changelog:
  - support vlan offload
  - add vlan_id in netif
  - dfx: add tcp exception and kernel event statistics
  - stack: fix coredump caused by gazelleclt in rtc mode when stack num defined is greater than the hijacked thread num
  - add tcp faste timer cnt
  - dfx: support bond get dpdk xstats
  - update src/ltran/ltran_param.c. 规范679行的报错日志信息，将“,”之后的“Please”修正为“please”
  - ltran support vlan
  - cfg: rm ipv6_enable
  - wrap: fix connect wrong port after addr bind two ports
  - add gazelle log
  - PRE_LOG: modify log info while there are repeated items in conf file
  - add gazelle log


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-18
changelog:
  - Fixed an issue where no packet is sent or received when UDP traffic is sent
  - support show nic offload and features
  - log: optimize lstack log
  - gazellectl add connect para
  - dfx: fix 'gazellectl lstack show ip' failed
  - The call stack is not printed in the proactive exit scenario.
  - dfx: gazellectl -c support ipv6
  - 1.solve the problem of 1w connection not being able to ping 2.add debug info : rpc_mempool availd size
  - wrap: support shutdown
  - add struct gz_addr_t
  - fix coredump because of addr null in lwip_fill_sendring
  - fix compilation error
  - fix coredump because sock closed before send data fully
  - gazellectl: fix gazellectl lstack show 1 -r error


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-19
changelog:
  - fix EPOLLIN event error
  - optimize gazelle exit process 1. close all fds 2. lstack thread exits, then gazelle process exits
  - mod unix time stamp to local time
  - fix close can't exit
  - add keep-alive info
  - dfx: fix kernel_events stat


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-22
changelog:
  - fix rte_ring_create/free time consuming
  - use default nonblock mode
  - fix func separate_str_to_array overflow problem
  - CFG:fix check func strdup return value is NULL
  - fix gazellectl -c msg error
  - sigaction: fix deprecated signal flags
  - fix alloc not free
  - optimize shutdown exit process


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-47
changelog:
  - fix coredump when get empty from udp sendring
  - [virtio]: distribute pkg by dst_port
  - parse packages type in rx_poll
  - [virtio]: cfg ipv4 and ipv6 addr
  - fix build failed in 2003sp4
  - fix dpdk_bond_primary_set bug
  - cfg: del unnecessary logs
  - perftool: add latency tool


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-48
changelog:
  - add flow_bifurcation switch in lstack_cfg file
  - virtio: dfx data of virtio
  - virtio: update g_rule_port by reg_ring_type enum
  - virtio: mode actual_queue_num
  - fix poll init not clear old fd


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-50
changelog:
  - cleancode: rename gazelle files in lwip
  - add .gitignore
  - cleancode: improving makefile readability


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-51
changelog:
  - cleancode: refactor sys_now and lwip_ioctl
  - add sem post when update event
  - cleancode: refactor lwipgz_hlist.h
  - fix EPOLLIN event dropd
  - cleancode: refactor lwipgz_list.h
  - cleancode: refactor posix_api
  - fix some error of NULL pointer
  - cleancode: refactor posix type and get_socket
  - cleancode: refactor lwipsock.h


author: yangchen555 <yangchen145@huawei.com> - 1.0.2-52
changelog:
  - fix redis coredump when hugetlbs pagesize is 1024M
  - vitio_user: modify mbuf index for bond4
  - Check the return of lwip_init
  - support kernel connect
  - POSIX: fix select timeout disable and build failed in openEuler 2003


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-53
changelog:
  - virtio_user: modify mbuf index for bond4
  - fix issue: create virtio_user based on bond4 main network card
  - virtio: fix dfx error with multiple cpus
  - dfx: optimize gazellectl -x for bond


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-54
changelog:
  - refector fill udp sendring
  - virtio_user: solve the issue that failed to bind virtio_user's IPv6 address
  - virtio_user: add vlan info for kernerl packets when vlan switch is on
  - WRAP:fix double connect lead posix api disable


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-55
changelog:
  - virtio: mod virtio_user_name when multi process is on
  - WRAP: fix bind log error
  - WRAP:fix ltran mode did not bind kernel while open kni
  - virtio_user: The program establishes a network connection when network card status is up
  - fix redis coredump ctrl-c during the pressure test


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-59
changelog:
  - epoll: fix wild pointer detected by cooddy
  - tools: fix sync patch script date wrong and update the way get patchnum
  - cfg: modify maximum tcp_conn_count to 2w
  - fix mbuf_total calculation error


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.33.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch


author: fuanan <fuanan3@h-partners.com> - 2.33.0-10
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.33.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.33.0-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.33.0-14
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: Qingqing Li <liqingqing3@huawei.com> - 2.34-145
changelog:
  - elf: Add a way to check if tunable is set (BZ 27069)
  - malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2


author: chengyechun <chengyechun1@huawei.com> - 2.34-148
changelog:
  - Type:CVE
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: chengyechun <chengyechun1@huaiwe.com> - 2.34-149
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:nscd: Use errval, not errno to guide cache update
         nsce :Skip unusable entries in first pass in prune_cache


author: shixuantong <shixuantong1@huawei.com> - 2.34-150
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:elf: Add TLS modid reuse test for bug 29039
         elf: Fix TLS modid reuse generation assignment
         elf: Check objname before calling fatal_error
         elf: Fix _dl_debug_vdprintf to work before self-relocation
         elf: ldconfig should skip temporary files created by package managers
         ldconfig: Fixes for skipping temporary files.


author: shixuantong <shixuantong1@huawei.com> - 2.34-157
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:enable shared library use huge page for aarch64 architecture
         revert "elf/ld.so: use special mmap for hugepage to get symbols"
         hugepageedit: static-link build
         elf: the hugepage feature of dynamic library keep compatible with llvm lld
         elf: add some debug info for dynamic library hugepage feature


author: lihaoxiang <lihaoxiang9@huawei.com> - 10.0-7
changelog:
  - fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: hanchao <hanchao63@huawei.com> - 1.17.3-19
changelog:
  - Type:CVE
  - CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
  - SUG:NA
  - DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405


author: luoyujie <luoyujie5@huawei.com> - 1.17.3-23
changelog:
  - Type:CVE
  - CVE:CVE-2023-39318,CVE-2023-39319
  - SUG:NA
  - DESC:fix CVE-2023-39318 and CVE-2023-39319


author: hanchao <hanchao63@huawei.com> - 1.17.3-28
changelog:
  - Type:CVE
  - CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
  - SUG:NA
  - DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289


author: wangshuo <wangshuo@kylinos.cn> - 1.17.3-31
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-35
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:kern: Check for NULL when closing devices and disks
         kern/efi/mm: Fix use-after-free in finish boot services
         util/grub-install-common: Fix the key of the --core-compress option
         net/dns: Fix lookup error when no IPv6 is returned
         net/dns: Simplify error handling of recv_hook() function
         net/dns: Fix removal of DNS server


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-37
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fs/udf: Fix out of bounds access
         lib/relocator: Fix OOB write when initializing lo->freebytes[]
         util/grub-mount: Fix memory leak in fuse_getattr()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-38
changelog:
  - Type:CVE
  - CVE:CVE-2023-4692 CVE-2023-4693
  - SUG:NA
  - DESC:fs/ntfs: Make code more readable
         fs/ntfs: Fix an OOB read when parsing a volume label
         fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
         fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
         fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
         fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-44
changelog:
  - Type:CVE
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-46
changelog:
  - Type:CVE
  - CVE:CVE-2021-46848
  - SUG:NA
  - DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-47
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix log printing in tpcm_kunpeng moddule
         osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
         osdep: Introduce include/grub/osdep/major.h and use it
         disk/mdraid1x_linux: Prevent infinite recursion
         disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS


author: yangchenguang <yangchenguang@kylinsec.com.cn> - 3.24.30-8
changelog:
  - Fix the problem that the prompt information of network icon volume icon is not displayed
  - update xscreen size when x11 screen size change
  - always send the monitors changed signal when screen size change
  - Add function definition of gtk_image_set_from_pixbuf_with_scale


author: xinghe <xinghe2@h-partners.com> - 2.6.6-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:connection: Clear flags when a conn is removed
         connection: Preserve flags when a conn is removed
         stream: do not try to free a failed stream-conn
         http_ana/txn: don't re-initialize txn and req var
         mworker: prevent incorrect values in uptime
         protocol: fix minor memory leak in protocol_bind_all()
         stream: Perform errors handling in right order in stream_new()


author: xinghe <xinghe2@h-partners.com> - 2.6.6-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:backport to fix potential coredump:
         errors: handle malloc failure in usermsgs_put
         ssl_sock: add check for ha_meth
         thread: add a check for pthread_creat


author: xinghe <xinghe2@h-partners.com> - 2.6.6-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:server: add missing free for server->rdr_pfx
         server: do not leak default-server in defaults


author: xinghe <xinghe2@h-partners.com> - 2.6.6-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-12
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:reduce the dependency of httpd on system-logos installation


author: seuzw <930zhaowei@163.com> - 2.4.51-13
changelog:
  - Type:cves
  - ID:CVE-2022-36760,CVE-2006-20001,CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-15
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyehcun1@huawei.com> - 2.4.51-16
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:Report an error if the AJP backend sends an invalid number of headers
         handled a negative value when parsing the config
         avoid delimiting the query with a backreference
         fix missing APLOGNO


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-17
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:Fix double encoding of the uri-path of the request
         Do not match the extention against possible query string
         Do not double encode slashes
         Check before forwarding that a nocanon path has not been rewriteen


author: panchenbo <panchenbo@kylinsec.com.cn> - 2.4.51-18
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:add sw_64 support,optimize sw build patch,add loongarch64 support


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.51-21
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-22
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: zhongtao <zhongtao17@huawei.com> - 2.1.4-2
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: delete compilation dependency:lxc, and add running dependency:runc


author: yangjiaqi <yangjiaqi16@huawei.com> - 2.1.4-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: keep the service status unchanged after iSulad service upgrade


author: zhongtao <zhongtao17@huawei.com> - 2.1.5-7
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: bugfix of background execution exec error command and setting negative cpu-rt issue


author: zhongtao <zhongtao17@huawei.com> - 2.1.5-8
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: remove extra %s in CreateContainerLogSymlink and allow env variable has an empty value


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add epoch version in changelog to fix check_spec_file ci failure


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ipnetns: fix fd leak with 'ip netns set'
         iproute2: optimize code and fix some mem-leak risk
         iproute_lwtunnel: fix array boundary check
         iproute_lwtunnel: fix possible use of NULL when malloc()
         m_action: fix warning of overwrite of const string
         netem: fix NULL deref on allocation failure
         nstat: fix potential NULL deref
         rdma/utils: fix some analyzer warnings
         rt_names: check for malloc() failure
         tc/prio: handle possible truncated kernel response
         tc_exec: don't dereference NULL on calloc failure
         tc_util fix unitialized warning
         iptunnel: detect protocol mismatch on tunnel change
         ipmaddr: fix dereference of NULL on malloc() failure


author: mufengyan <mufengyan@hisilicon.com> - 1:5.15.0-15
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:This patch adds ARPHRD_UB for iproute2 and support name
         parse for it and deletes the display of vf address
         information in the pf


author: liubo <liubo335@huawei.com> - 1:5.15.0-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
         tc: ct: Fix invalid pointer dereference
         tc_util: Change datatype for maj to avoid overflow issue
         tc_util: Fix no error return when large parent id used
         xfrm: prepare state offload logic to set mode


author: liubo <liubo335@huawei.com> - 1:5.15.0-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:f_flower: Treat port 0 as valid
         ip: error out if iplink does not consume all options
         iplink_bridge: fix incorrect root id dump
         ss: change aafilter port from int to long (inode support)
         ss: Fix socket type check in packet_show_line()
         ss: print unix socket "ports" as unsigned int (inode)
         Add utility to convert an unsigned int to string
         Add get_long utility and adapt get_integer accordingly
         utils: fix get_integer() logic


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.382-b05.9
changelog:
  - add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
  - add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
  - add Record-the-number-of-processes-to-errlog-file.patch.patch
  - add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
  - add The-OverWriteOldestGCLog-option-is-added-to-control.patch
  - add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
  - add add-make-Appcds-jsa-rw-region-deterministic.patch
  - add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - add add-8198423-Improve-metaspace-chunk-allocation.patch
  - add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
  - add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - add add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - add add-8226530-test-case-fixed.patch
  - add add-8147940-Modify-testcase-this-test-does-not-assum.patch
  - add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
  - add add-Do-not-collect_class-when-DynamicCDS-dump.patch
  - add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
  - add add-Adapting-IOException-of-Zip-to-ZipException.patch
  - add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
  - add add-fix-windows-build-Dynamic-CDS-failure.patch
  - add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.392-b08.0
changelog:
  - add 8308682-Enhance-AES-performance.patch
  - add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
  - add Add-metaspace-memory-allocation-failure-validation.patch
  - add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
  - del 8202952.patch
  - del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
  - modified Dynamic-CDS-Archive.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase1.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - upgrade to jdk8u392-b08


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.2
changelog:
  - remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - remove add-8226530-test-case-fixed.patch
  - remove add-Adapting-IOException-of-Zip-to-ZipException.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.402-b06.0
changelog:
  - modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
  - modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified g1gc-numa-aware-Implementation.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8203699.patch
  - add Add-CaptchaTest-and-fix-KAE-Testcases.patch
  - add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
  - add Add-compiling-option-GS-when-building-windows-JDK.patch
  - add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
  - add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
  - add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
  - add 8057967-CallSite-dependency-tracking-scales-devastat.patch
  - add 8079205-CallSite-dependency-tracking-is-broken-after.patch


author: Benshuai5D <benshuai5d@163.com> - 1:1.8.0.402-b06.4
changelog:
  - add 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - add 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
  - add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
  - add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
  - add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
  - add GCC-12-reports-some-compiler-warnings.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.412-b08.0
changelog:
  - del 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - del 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase2.patch
  - modified support-numactl-for-hadoop-yarn.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.412-b08.3
changelog:
  - add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
  - add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.412-b08.4
changelog:
  - fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
  - fix loongson vendor error


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.422-b05.rolling
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8136577_Make_AbortVMOnException_available_in_product_builds.patch
  - modified Dynamic-CDS-Archive.patch
  - modified add-safe-compilation-flags.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified openjdk-1.8.0.spec
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - Add Backport-6956385-URLConnection.getLastModified-leaks-file-han.patch
  - Add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch
  - Add Backport-8068864-C2-failed-modified-node-is-not-on-IGVN._work.patch
  - Add Backport-8151845-Comment-in-globals.hpp-for-MetaspaceSize-is-.patch
  - Add Backport-8209362-sun-security-ssl-SSLSocketImpl-ReuseAddr.jav.patch
  - Add Backport-8210706-G1-may-deadlock-when-starting-a-concurrent-c.patch
  - Add Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - Add Huawei-Add-Aggressive-CDS.patch
  - Add Huawei-Keep-objects-when-remove-unshareable-info.patch
  - Add Huawei-improve-GCTR-performance.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.422-b05.4
changelog:
  - Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
  - Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.21.9-0
changelog:
  - update to 11.0.21+9(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified 8214527-AArch64-ZGC-for-Aarch64.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.22.7-0
changelog:
  - update to 11.0.22+7(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: huangjie <huangjie150@huawei.com> - 1:11.0.23.9-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified delete_expired_certificates.patch


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.8.7-2
changelog:
  - add add-Parallel-Full-gc-mark-stack-draining-should.patch
  - add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
  - add add-8267185-Add-string-deduplication-support-to.patch
  - add add-8292296-Use-multiple-threads-to-process-Par.patch
  - add fix-cds-SignedJar_java-test-fails.patch


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.9.8-0.rolling
changelog:
  - fix 8253495-CDS-generates-non-deterministic-outpu.patch
  - fix add-8267185-Add-string-deduplication-support-to.patch
  - fix add-version-txt.patch


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.9.8-1
changelog:
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
  - add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
  - add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8168469-Memory-leak-in-JceSecurity.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch


author: neu-mobi <liuyulong.work@qq.com> - 1:17.0.10.9-0.rolling
changelog:
  - del 8168469-Memory-leak-in-JceSecurity.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
  - del 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - del 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - del 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
  - del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
  - modified 8253495-CDS-generates-non-deterministic-outpu.patch
  - modified 8280872-Reorder-code-cache-segments-to-improv.patch
  - modified add-version-txt.patch
  - add Add-problemlist.patch
  - add puyuan-jdk17.0.9-patch.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.11.9-0.rolling
changelog:
  - del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
  - modify puyuan-jdk17.0.9-patch.patch


author: songliyang <songliyang@kylinos.cn> - 1:17.0.11.9-1
changelog:
  - rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
  - fix loongarch vendor error and delete redundant vendor args


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-174.0.0.87
changelog:
  - !3214  bring mc support to page eject
  - mm: page_eject: Add mc support during offline page
  - mm: Update PF_COREDUMP_MCS to PF_MCS
  - mm/hwpoison: add migrate_page_mc_extra()
  - mm/hwpoison: introduce copy_mc_highpages
  - mm/hwpoison: arm64: introduce copy_mc_highpage
  - mm/hwpoison: introduce copy_mc_highpage
  - mm: page_eject: Return right value during removal
  - !3198 udma: add dfx ability of dca for hns3
  - !3205 RDMA/hns: Fix the incomplete netdev speed, unspecific interrupt name, and resource value verification
  - !3203 Some fixes and optimizations for hisi_sas
  - !3154 crypto: hisilicon - fix the process to obtain capability register value
  - !3196  drivers/perf: hisi: Fix some event id for HiSilicon UC pmu
  - RDMA/hns: Rename the interrupts
  - RDMA/core: Add support more netdev speed
  - RDMA/hns: Add check and adjust for function resource values
  - RDMA/hns: Fix port active speed
  - !3148  vdpa: add vmstate header file
  - scsi: hisi_sas: Check whether debugfs is enabled before removing or releasing it
  - scsi: hisi_sas: Fix the deadlock issue that occurs during automatic dump
  - scsi: hisi_sas: Correct the number of global debugfs registers
  - scsi: hisi_sas: Rollback some operations if FLR failed
  - scsi: hisi_sas: Check before using pointer variables
  - scsi: hisi_sas: Replace with standard error code return value
  - scsi: hisi_sas: Set .phy_attached before notifing phyup event HISI_PHYE_PHY_UP_PM
  - scsi: hisi_sas: Handle the NCQ error returned by D2H frame
  - scsi: hisi_sas: Remove redundant checks for automatic debugfs dump
  - scsi: hisi_sas: Remove unused variable and check in hisi_sas_send_ata_reset_each_phy()
  - scsi: hisi_sas: Allocate DFX memory during dump trigger
  - scsi: hisi_sas: Directly call register snapshot instead of using workqueue
  - scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
  - scsi: hisi_sas: Fix warnings detected by sparse
  - scsi: hisi_sas: Fix normally completed I/O analysed as failed
  - !3145  vhost-vdpa: add reset state params to indicate reset level
  - !3150 Backport 5.10.189 LTS patches from upstream
  - hns3 udma: add dfx ability for dca
  - drivers/perf: hisi: Fix some event id for HiSilicon UC pmu
  - !3128  fix ksmbd to release the ones allocated for async work
  - !3130  config: enable COBFIG_ARM64_BRBE for arm64
  - !3061  drivers: perf: Add feature flag check in armpmu_add/del
  - um/cpu: Switch to arch_cpu_finalize_init()
  - sparc/cpu: Switch to arch_cpu_finalize_init()
  - sh/cpu: Switch to arch_cpu_finalize_init()
  - mips/cpu: Switch to arch_cpu_finalize_init()
  - m68k/cpu: Switch to arch_cpu_finalize_init()
  - ia64/cpu: Switch to arch_cpu_finalize_init()
  - ARM: cpu: Switch to arch_cpu_finalize_init()
  - init: Provide arch_cpu_finalize_init()
  - !3152  scsi: scsi_device_gets returns failure
  - crypto: hisilicon/zip - save capability registers in probe process
  - crypto: hisilicon/sec2 - save capability registers in probe process
  - crypto: hisilicon/hpre - save capability registers in probe process
  - crypto: hisilicon/qm - save capability registers in qm init process
  - crypto: hisilicon/qm - check function qp num before alg register
  - Revert "crypto: hisilicon/zip - save capability registers in probe process"
  - Revert "crypto: hisilicon/sec2 - save capability registers in probe process"
  - Revert "crypto: hisilicon/hpre - save capability registers in probe process"
  - Revert "crypto: hisilicon/qm - save capability registers in qm init process"
  - scsi: fix kabi broken in struct Scsi_Host
  - scsi: don't fail if hostt->module is NULL
  - scsi: scsi_device_gets returns failure when the module is NULL.
  - vdpa: add vmstate header file
  - !3117 Backport 5.10.188 LTS patches from upstream
  - vhost-vdpa: add reset state params to indicate reset level
  - tracing/histograms: Return an error if we fail to add histogram to hist_vars list
  - net: phy: prevent stale pointer dereference in phy_init()
  - tcp: annotate data-races around fastopenq.max_qlen
  - tcp: annotate data-races around icsk->icsk_user_timeout
  - tcp: annotate data-races around tp->notsent_lowat
  - tcp: annotate data-races around rskq_defer_accept
  - tcp: annotate data-races around tp->linger2
  - tcp: annotate data-races around icsk->icsk_syn_retries
  - tcp: Fix data-races around sysctl_tcp_syn(ack)?_retries.
  - tcp: annotate data-races around tp->keepalive_probes
  - tcp: annotate data-races around tp->keepalive_intvl
  - tcp: annotate data-races around tp->keepalive_time
  - tcp: annotate data-races around tp->tcp_tx_delay
  - netfilter: nf_tables: can't schedule in nft_chain_validate
  - netfilter: nf_tables: fix spurious set element insertion failure
  - llc: Don't drop packet from non-root netns.
  - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe
  - Revert "tcp: avoid the lookup process failing to get sk in ehash table"
  - net:ipv6: check return value of pskb_trim()
  - net: ipv4: Use kfree_sensitive instead of kfree
  - tcp: annotate data-races around tcp_rsk(req)->ts_recent
  - octeontx2-pf: Dont allocate BPIDs for LBK interfaces
  - security: keys: Modify mismatched function name
  - iavf: Fix out-of-bounds when setting channels on remove
  - iavf: Fix use-after-free in free_netdev
  - bridge: Add extack warning when enabling STP in netns.
  - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field()
  - pinctrl: amd: Use amd_pinconf_set() for all config options
  - fbdev: imxfb: warn about invalid left/right margin
  - spi: bcm63xx: fix max prepend length
  - igb: Fix igb_down hung on surprise removal
  - wifi: iwlwifi: mvm: avoid baid size integer overflow
  - wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point()
  - devlink: report devlink_port_type_warn source device
  - bpf: Address KCSAN report on bpf_lru_list
  - wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range
  - sched/fair: Don't balance task to its current running CPU
  - arm64: mm: fix VA-range sanity check
  - arm64: set __exception_irq_entry with __irq_entry as a default
  - ACPI: video: Add backlight=native DMI quirk for Lenovo ThinkPad X131e (3371 AMD version)
  - ACPI: video: Add backlight=native DMI quirk for Apple iMac11,3
  - ACPI: button: Add lid disable DMI quirk for Nextbook Ares 8A
  - btrfs: add xxhash to fast checksum implementations
  - md: fix data corruption for raid456 when reshape restart while grow up
  - nbd: Add the maximum limit of allocated index in nbd_dev_add
  - debugobjects: Recheck debug_objects_enabled before reporting
  - ext4: correct inline offset when handling xattrs in inode body
  - ASoC: fsl_sai: Disable bit clock with transmitter
  - drm/client: Fix memory leak in drm_client_modeset_probe
  - drm/client: Fix memory leak in drm_client_target_cloned
  - can: bcm: Fix UAF in bcm_proc_show()
  - regmap: Account for register length in SMBus I/O limits
  - regmap: Drop initial version of maximum transfer length fixes
  - selftests: tc: add 'ct' action kconfig dep
  - selftests: tc: set timeout to 15 minutes
  - fuse: revalidate: don't invalidate if interrupted
  - btrfs: fix warning when putting transaction with qgroups enabled after abort
  - perf probe: Add test for regression introduced by switch to die_get_decl_file()
  - keys: Fix linking a duplicate key to a keyring's assoc_array
  - ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx
  - ALSA: hda/realtek - remove 3k pull low procedure
  - drm/atomic: Fix potential use-after-free in nonblocking commits
  - net/sched: sch_qfq: reintroduce lmax bound check for MTU
  - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue
  - scsi: qla2xxx: Pointer may be dereferenced
  - scsi: qla2xxx: Correct the index of array
  - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()
  - scsi: qla2xxx: Fix potential NULL pointer dereference
  - scsi: qla2xxx: Fix buffer overrun
  - scsi: qla2xxx: Array index may go out of bound
  - scsi: qla2xxx: Wait for io return on terminate rport
  - tracing/probes: Fix not to count error code to total length
  - tracing: Fix null pointer dereference in tracing_err_log_open()
  - xtensa: ISS: fix call to split_if_spec
  - net: ena: fix shift-out-of-bounds in exponential backoff
  - samples: ftrace: Save required argument registers in sample trampolines
  - tracing/histograms: Add histograms to hist_vars if they have referenced variables
  - s390/decompressor: fix misaligned symbol build error
  - Revert "8250: add support for ASIX devices with a FIFO bug"
  - meson saradc: fix clock divider mask length
  - xhci: Fix resume issue of some ZHAOXIN hosts
  - ceph: don't let check_caps skip sending responses for revoke msgs
  - firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool()
  - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk
  - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error
  - serial: atmel: don't enable IRQs prematurely
  - drm/amd/display: Correct `DMUB_FW_VERSION` macro
  - drm/rockchip: vop: Leave vblank enabled in self-refresh
  - drm/atomic: Allow vblank-enabled + self-refresh "disable"
  - fs: dlm: return positive pid value for F_GETLK
  - md/raid0: add discard support for the 'original' layout
  - misc: pci_endpoint_test: Re-init completion for every test
  - misc: pci_endpoint_test: Free IRQs before removing the device
  - PCI: rockchip: Set address alignment for endpoint mode
  - PCI: rockchip: Use u32 variable to access 32-bit registers
  - PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core
  - PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked
  - PCI: rockchip: Write PCI Device ID to correct register
  - PCI: rockchip: Assert PCI Configuration Enable bit after probe
  - PCI: qcom: Disable write access to read only registers for IP v2.3.3
  - PCI: Add function 1 DMA alias quirk for Marvell 88SE9235
  - PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold
  - hwrng: imx-rngc - fix the timeout for init and self check
  - jfs: jfs_dmap: Validate db_l2nbperpage while mounting
  - ext4: fix wrong unit use in ext4_mb_new_blocks
  - ext4: get block from bh in ext4_free_blocks for fast commit replay
  - ext4: fix wrong unit use in ext4_mb_clear_bb
  - MIPS: Loongson: Fix cpu_probe_loongson() again
  - erofs: fix compact 4B support for 16k block size
  - misc: fastrpc: Create fastrpc scalar with correct buffer count
  - powerpc: Fail build if using recordmcount with binutils v2.37
  - net: bcmgenet: Ensure MDIO unregistration has clocks enabled
  - mtd: rawnand: meson: fix unaligned DMA buffers handling
  - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
  - pinctrl: amd: Only use special debounce behavior for GPIO 0
  - pinctrl: amd: Detect internal GPIO0 debounce handling
  - pinctrl: amd: Fix mistake in handling clearing pins at startup
  - net/sched: sch_qfq: refactor parsing of netlink parameters
  - net/sched: make psched_mtu() RTNL-less safe
  - netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write()
  - net/sched: flower: Ensure both minimum and maximum ports are specified
  - wifi: airo: avoid uninitialized warning in airo_get_rate()
  - erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF
  - riscv, bpf: Fix inconsistent JIT image generation
  - bpf, riscv: Support riscv jit to provide bpf_line_info
  - riscv: bpf: Avoid breaking W^X
  - riscv: bpf: Move bpf_jit_alloc_exec() and bpf_jit_free_exec() to core
  - igc: Fix inserting of empty frame for launchtime
  - igc: Fix launchtime before start of cycle
  - platform/x86: wmi: Break possible infinite loop when parsing GUID
  - platform/x86: wmi: move variables
  - platform/x86: wmi: use guid_t and guid_equal()
  - platform/x86: wmi: remove unnecessary argument
  - NTB: ntb_tool: Add check for devm_kcalloc
  - NTB: ntb_transport: fix possible memory leak while device_register() fails
  - ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  - NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  - ntb: idt: Fix error handling in idt_pci_driver_init()
  - udp6: fix udp6_ehashfn() typo
  - icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().
  - net: prevent skb corruption on frag list segmentation
  - net: bgmac: postpone turning IRQs off to avoid SoC hangs
  - ionic: remove WARN_ON to prevent panic_on_warn
  - gve: Set default duplex configuration to full
  - net: mvneta: fix txq_map in case of txq_number==1
  - scsi: qla2xxx: Fix error code in qla2x00_start_sp()
  - igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings
  - net/mlx5e: Check for NOT_READY flag state after locking
  - net/mlx5e: fix double free in mlx5e_destroy_flow_table
  - igc: Remove delay during TX ring configuration
  - drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags
  - drm/panel: simple: Add connector_type for innolux_at043tn24
  - workqueue: clean up WORK_* constant types, clarify masking
  - net: lan743x: Don't sleep in atomic context
  - io_uring: add reschedule point to handle_tw_list()
  - io_uring: Use io_schedule* in cqring wait
  - block/partition: fix signedness issue for Amiga partitions
  - rcu-tasks: Simplify trc_read_check_handler() atomic operations
  - rcu-tasks: Mark ->trc_reader_special.b.need_qs data races
  - rcu-tasks: Mark ->trc_reader_nesting data races
  - tty: serial: fsl_lpuart: add earlycon for imx8ulp platform
  - wireguard: netlink: send staged packets when setting initial private key
  - wireguard: queueing: use saner cpu selection wrapping
  - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
  - netfilter: nf_tables: fix scheduling-while-atomic splat
  - netfilter: nf_tables: add rescheduling points during loop detection walks
  - sh: pgtable-3level: Fix cast to pointer from integer of different size
  - block: add overflow checks for Amiga partition support
  - tpm, tpm_tis: Claim locality in interrupt handler
  - fanotify: disallow mount/sb marks on kernel internal pseudo fs
  - fs: no need to check source
  - leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename
  - ARM: orion5x: fix d2net gpio initialization
  - ASoC: mediatek: mt8173: Fix snd_soc_component_initialize error path
  - ASoC: mediatek: mt8173: Fix irq error path
  - btrfs: fix race when deleting quota root from the dirty cow roots list
  - btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile
  - fs: Lock moved directories
  - fs: Establish locking order for unrelated directories
  - Revert "f2fs: fix potential corruption when moving a directory"
  - ext4: Remove ext4 locking of moved directory
  - fs: avoid empty option when generating legacy mount string
  - jffs2: reduce stack usage in jffs2_build_xattr_subsystem()
  - shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs
  - autofs: use flexible array in ioctl structure
  - um: Use HOST_DIR for mrproper
  - bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent
  - bcache: Remove unnecessary NULL point check in node allocations
  - bcache: fixup btree_cache_wait list damage
  - mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used.
  - mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS
  - mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M
  - mmc: core: disable TRIM on Kingston EMMC04G-M627
  - io_uring: wait interruptibly for request completions on exit
  - NFSD: add encoding of op_recall flag for write delegation
  - i2c: qup: Add missing unwind goto in qup_i2c_probe()
  - ALSA: jack: Fix mutex call in snd_jack_report()
  - i2c: xiic: Don't try to handle more interrupt events after error
  - i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process()
  - apparmor: fix missing error check for rhashtable_insert_fast
  - sh: dma: Fix DMA channel offset calculation
  - s390/qeth: Fix vipa deletion
  - net: dsa: tag_sja1105: fix MAC DA patching from meta frames
  - pptp: Fix fib lookup calls.
  - net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX
  - xsk: Honor SO_BINDTODEVICE on bind
  - tcp: annotate data races in __tcp_oow_rate_limited()
  - net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode
  - powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y
  - octeontx2-af: Fix mapping for NIX block from CGX connection
  - f2fs: fix error path handling in truncate_dnode()
  - mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
  - spi: bcm-qspi: return error if neither hif_mspi nor mspi is available
  - net: dsa: vsc73xx: fix MTU configuration
  - Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
  - sctp: fix potential deadlock on &net->sctp.addr_wq_lock
  - media: cec: i2c: ch7322: also select REGMAP
  - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error
  - pwm: sysfs: Do not apply state to already disabled PWMs
  - pwm: imx-tpm: force 'real_period' to be zero in suspend
  - phy: tegra: xusb: check return value of devm_kzalloc()
  - mfd: stmpe: Only disable the regulators if they are enabled
  - KVM: s390: vsie: fix the length of APCB bitmap
  - mfd: stmfx: Nullify stmfx->vdd in case of error
  - mfd: stmfx: Fix error path in stmfx_chip_init
  - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation
  - serial: 8250_omap: Use force_suspend and resume for system suspend
  - Revert "usb: common: usb-conn-gpio: Set last role to unknown before initial detection"
  - mfd: intel-lpss: Add missing check for platform_get_resource
  - usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe()
  - usb: common: usb-conn-gpio: Set last role to unknown before initial detection
  - usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe()
  - usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove()
  - KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
  - media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var()
  - media: venus: helpers: Fix ALIGN() of non power of two
  - mfd: rt5033: Drop rt5033-battery sub-device
  - kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR
  - serial: 8250: lock port for UART_IER access in omap8250_irq()
  - serial: 8250: lock port for stop_rx() in omap8250_irq()
  - usb: hide unused usbfs_notify_suspend/resume functions
  - usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
  - extcon: Fix kernel doc of property capability fields to avoid warnings
  - extcon: Fix kernel doc of property fields to avoid warnings
  - usb: gadget: u_serial: Add null pointer check in gserial_suspend
  - usb: dwc3: qcom: Fix potential memory leak
  - clk: qcom: ipq6018: fix networking resets
  - clk: qcom: reset: support resetting multiple bits
  - clk: qcom: reset: Allow specifying custom reset delay
  - media: videodev2.h: Fix struct v4l2_input tuner index comment
  - media: usb: Check az6007_read() return value
  - clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks
  - serial: 8250: omap: Fix freeing of resources on failed register
  - sh: j2: Use ioremap() to translate device tree address into kernel memory
  - w1: fix loop in w1_fini()
  - w1: w1_therm: fix locking behavior in convert_t
  - SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
  - block: change all __u32 annotations to __be32 in affs_hardblocks.h
  - block: fix signed int overflow in Amiga partition support
  - phy: tegra: xusb: Clear the driver reference in usb-phy dev
  - usb: dwc3: gadget: Propagate core init errors to UDC during pullup
  - USB: serial: option: add LARA-R6 01B PIDs
  - hwrng: st - keep clock enabled while hwrng is registered
  - dax: Introduce alloc_dev_dax_id()
  - dax: Fix dax_mapping_release() use after free
  - NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION
  - ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard
  - modpost: fix off by one in is_executable_section()
  - crypto: marvell/cesa - Fix type mismatch warning
  - modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24}
  - modpost: fix section mismatch message for R_ARM_ABS32
  - crypto: nx - fix build warnings when DEBUG_FS is not enabled
  - hwrng: virtio - don't waste entropy
  - hwrng: virtio - don't wait on cleanup
  - hwrng: virtio - add an internal buffer
  - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary
  - powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo
  - powerpc/powernv/sriov: perform null check on iov before dereferencing iov
  - pinctrl: at91-pio4: check return value of devm_kasprintf()
  - perf dwarf-aux: Fix off-by-one in die_get_varname()
  - perf script: Fix allocation of evsel->priv related to per-event dump files
  - perf script: Fixup 'struct evsel_script' method prefix
  - kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures
  - pinctrl: cherryview: Return correct value if pin in push-pull mode
  - perf bench: Add missing setlocale() call to allow usage of %'d style formatting
  - perf bench: Use unbuffered output when pipe/tee'ing to a file
  - PCI: Add pci_clear_master() stub for non-CONFIG_PCI
  - PCI: ftpci100: Release the clock resources
  - PCI: pciehp: Cancel bringup sequence if card is not present
  - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe()
  - PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free
  - pinctrl: bcm2835: Handle gpiochip_add_pin_range() errors
  - scsi: qedf: Fix NULL dereference in error handling
  - PCI: cadence: Fix Gen2 Link Retraining process
  - ASoC: imx-audmix: check return value of devm_kasprintf()
  - ovl: update of dentry revalidate flags after copy up
  - drivers: meson: secure-pwrc: always enable DMA domain
  - clk: ti: clkctrl: check return value of kasprintf()
  - clk: keystone: sci-clk: check return value of kasprintf()
  - clk: si5341: free unused memory on probe failure
  - clk: si5341: check return value of {devm_}kasprintf()
  - clk: si5341: return error if one synth clock registration fails
  - clk: si5341: Add sysfs properties to allow checking/resetting device faults
  - clk: si5341: Allow different output VDD_SEL values
  - clk: cdce925: check return value of kasprintf()
  - clk: vc5: check memory returned by kasprintf()
  - drm/msm/dp: Free resources after unregistering them
  - drm/msm/dpu: do not enable color-management if DSPPs are not available
  - ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer
  - clk: tegra: tegra124-emc: Fix potential memory leak
  - clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()
  - clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe
  - RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context
  - RDMA/bnxt_re: wraparound mbox producer index
  - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va
  - drm/radeon: fix possible division-by-zero errors
  - drm/amdkfd: Fix potential deallocation of previously deallocated memory.
  - hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272
  - hwmon: (adm1275) Allow setting sample averaging
  - hwmon: (adm1275) enable adm1272 temperature reporting
  - hwmon: (gsc-hwmon) fix fan pwm temperature scaling
  - ARM: dts: stm32: fix i2s endpoint format property for stm32mp15xx-dkx
  - ARM: dts: stm32: Fix audio routing on STM32MP15xx DHCOM PDK2
  - arm64: dts: ti: k3-j7200: Fix physical address of pin
  - fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe()
  - arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1
  - ARM: dts: iwg20d-q7-common: Fix backlight pwm specifier
  - IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate
  - IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors
  - IB/hfi1: Use bitmap_zalloc() when applicable
  - soc/fsl/qe: fix usb.c build errors
  - ARM: dts: meson8: correct uart_B and uart_C clock references
  - ASoC: es8316: Do not set rate constraints for unsupported MCLKs
  - ASoC: es8316: Increment max value for ALC Capture Target Volume control
  - memory: brcmstb_dpfe: fix testing array offset after use
  - ARM: dts: stm32: Shorten the AV96 HDMI sound card name
  - arm64: dts: qcom: apq8096: fix fixed regulator name property
  - ARM: omap2: fix missing tick_broadcast() prototype
  - ARM: ep93xx: fix missing-prototype warnings
  - drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H
  - arm64: dts: qcom: msm8996: correct camss unit address
  - arm64: dts: qcom: msm8994: correct SPMI unit address
  - arm64: dts: qcom: msm8916: correct camss unit address
  - ARM: dts: gta04: Move model property out of pinctrl node
  - RDMA/bnxt_re: Fix to remove an unnecessary log
  - RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid
  - RDMA/bnxt_re: Use unique names while registering interrupts
  - RDMA/bnxt_re: Fix to remove unnecessary return labels
  - RDMA/bnxt_re: Disable/kill tasklet only if it is enabled
  - arm64: dts: microchip: sparx5: do not use PSCI on reference boards
  - bus: ti-sysc: Fix dispc quirk masking bool variables
  - ARM: dts: stm32: Move ethernet MAC EEPROM from SoM to carrier boards
  - drm/panel: sharp-ls043t1le01: adjust mode settings
  - drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks`
  - Input: adxl34x - do not hardcode interrupt trigger type
  - ARM: dts: meson8b: correct uart_B and uart_C clock references
  - ARM: dts: BCM5301X: Drop "clock-names" from the SPI node
  - drm/vram-helper: fix function names in vram helper doc
  - drm/bridge: tc358768: fix THS_TRAILCNT computation
  - drm/bridge: tc358768: fix TXTAGOCNT computation
  - drm/bridge: tc358768: fix THS_ZEROCNT computation
  - drm/bridge: tc358768: fix TCLK_TRAILCNT computation
  - drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation
  - drm/bridge: tc358768: fix TCLK_ZEROCNT computation
  - drm/bridge: tc358768: fix PLL target frequency
  - drm/bridge: tc358768: fix PLL parameters computation
  - drm/bridge: tc358768: always enable HS video mode
  - Input: drv260x - sleep between polling GO bit
  - drm/amd/display: Explicitly specify update type per plane info change
  - radeon: avoid double free in ci_dpm_init()
  - netlink: Add __sock_i_ino() for __netlink_diag_dump().
  - ipvlan: Fix return value of ipvlan_queue_xmit()
  - netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value.
  - lib/ts_bm: reset initial match offset for every block of text
  - sfc: fix crash when reading stats while NIC is resetting
  - net: axienet: Move reset before 64-bit DMA detection
  - gtp: Fix use-after-free in __gtp_encap_destroy().
  - selftests: rtnetlink: remove netdevsim device after ipsec offload test
  - netlink: do not hard code device address lenth in fdb dumps
  - netlink: fix potential deadlock in netlink_set_err()
  - net: stmmac: fix double serdes powerdown
  - igc: Fix race condition in PTP tx code
  - wifi: ath9k: convert msecs to jiffies where needed
  - wifi: cfg80211: rewrite merging of inherited elements
  - wifi: iwlwifi: pull from TXQs with softirqs disabled
  - rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO
  - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key()
  - memstick r592: make memstick_debug_get_tpc_name() static
  - kexec: fix a memory leak in crash_shrink_memory()
  - watchdog/perf: more properly prevent false positives with turbo modes
  - watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config
  - wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown
  - wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled
  - wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
  - wifi: ray_cs: Fix an error handling path in ray_probe()
  - wifi: ray_cs: Drop useless status variable in parse_addr()
  - wifi: ray_cs: Utilize strnlen() in parse_addr()
  - wifi: wl3501_cs: Fix an error handling path in wl3501_probe()
  - wl3501_cs: use eth_hw_addr_set()
  - net: create netdev->dev_addr assignment helpers
  - wl3501_cs: Fix misspelling and provide missing documentation
  - wifi: atmel: Fix an error handling path in atmel_probe()
  - wifi: orinoco: Fix an error handling path in orinoco_cs_probe()
  - wifi: orinoco: Fix an error handling path in spectrum_cs_probe()
  - regulator: core: Streamline debugfs operations
  - regulator: core: Fix more error checking for debugfs_create_dir()
  - bpftool: JIT limited misreported as negative value on aarch64
  - nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect()
  - nfc: constify several pointers to u8, char and sk_buff
  - libbpf: fix offsetof() and container_of() to work with CO-RE
  - wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan()
  - wifi: wilc1000: fix for absent RSN capabilities WFA testcase
  - spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG
  - samples/bpf: Fix buffer overflow in tcp_basertt
  - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx
  - wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation
  - igc: Enable and fix RX hash usage by netstack
  - pstore/ram: Add check for kstrdup
  - ima: Fix build warnings
  - evm: Complete description of evm_inode_setattr()
  - x86/mm: Fix __swp_entry_to_pte() for Xen PV guests
  - perf/ibs: Fix interface via core pmu events
  - rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale
  - rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup()
  - rcuscale: Move shutdown from wait_event() to wait_event_idle()
  - rcuscale: Always log error message
  - rcuscale: Console output claims too few grace periods
  - thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe()
  - cpufreq: intel_pstate: Fix energy_performance_preference for passive
  - ARM: 9303/1: kprobes: avoid missing-declaration warnings
  - powercap: RAPL: Fix CONFIG_IOSF_MBI dependency
  - perf/arm-cmn: Fix DTC reset
  - PM: domains: fix integer overflow issues in genpd_parse_state()
  - clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe
  - tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode().
  - posix-timers: Prevent RT livelock in itimer_delete()
  - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors
  - irqchip/jcore-aic: Kill use of irq_create_strict_mappings()
  - md/raid10: fix wrong setting of max_corr_read_errors
  - md/raid10: fix overflow of md/safe_mode_delay
  - x86/resctrl: Only show tasks' pid in current pid namespace
  - fs: pipe: reveal missing function protoypes
  - nubus: Partially revert proc_create_single_data() conversion
  - drm/amdgpu: Validate VM ioctl flags.
  - scripts/tags.sh: Resolve gtags empty index generation
  - Revert "thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe"
  - HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651.
  - HID: wacom: Use ktime_t rather than int when dealing with timestamps
  - fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  - video: imsttfb: check for ioremap() failures
  - can: isotp: isotp_sendmsg(): fix return error fix on TX path
  - x86/smp: Use dedicated cache-line for mwait_play_dead()
  - media: atomisp: fix "variable dereferenced before check 'asd'"
  - config: enable COBFIG_ARM64_BRBE for arm64
  - ksmbd: delete asynchronous work from list
  - ksmbd: fix typo, syncronous->synchronous
  - ksmbd: fix possible memory leak in smb2_lock()
  - ksmbd: replace usage of found with dedicated list iterator variable
  - !3085 Backport 5.10.185 -  5.10.187 LTS patches from upstream
  - !3110  spdxcheck.py: Fix a type error
  - !2925 [OLK 5.10]Fix the call trace when hibmc loaded failed
  - !3109  arm64/mpam: Fix static analysis warning
  - !3100 Default select PAGE_POOL_STATS, add command queue trace for hns3
  - spdxcheck.py: Fix a type error
  - drm/hisilicon: fix the call trace when hibmc loaded failed
  - arm64/mpam: Fix buffer overflow in mpam_handle_error_irq()
  - arm64/mpam: Fix uninitialized symbol ret
  - !3083  fs/dirty_pages: introduce a new config option 'CONFIG_DIRTY_PAGES'
  - !3082  fs/dirty_pages: add last read check in seq_read_dirty()
  - net: hns3: add command queue trace for hns3
  - net: hns3: default select PAGE_POOL_STATS
  - !2988 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
  - !845 [OLK-5.10] net/smc: Introduce generic netlink interface for diagnostic purposes
  - x86/microcode/AMD: Load late on both threads too
  - bpf/btf: Accept function names that contain dots
  - i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle
  - x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys
  - drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl
  - drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl
  - drm/exynos: vidi: fix a wrong error return
  - ARM: dts: Fix erroneous ADS touchscreen polarities
  - s390/purgatory: disable branch profiling
  - ASoC: nau8824: Add quirk to active-high jack-detect
  - ASoC: simple-card: Add missing of_node_put() in case of error
  - spi: lpspi: disable lpspi module irq in DMA mode
  - s390/cio: unregister device when the only path is gone
  - Input: soc_button_array - add invalid acpi_index DMI quirk handling
  - usb: gadget: udc: fix NULL dereference in remove()
  - nfcsim.c: Fix error checking for debugfs_create_dir
  - media: cec: core: don't set last_initiator if tx in progress
  - arm64: Add missing Set/Way CMO encodings
  - HID: wacom: Add error check to wacom_parse_and_register()
  - scsi: target: iscsi: Prevent login threads from racing between each other
  - gpiolib: Fix GPIO chip IRQ initialization restriction
  - gpio: Allow per-parent interrupt data
  - sch_netem: acquire qdisc lock in netem_change()
  - Revert "net: phy: dp83867: perform soft reset and retain established link"
  - netfilter: nfnetlink_osf: fix module autoload
  - netfilter: nf_tables: disallow element updates of bound anonymous sets
  - netfilter: nft_set_pipapo: .walk does not deal with generations
  - be2net: Extend xmit workaround to BE3 chip
  - net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch
  - ipvs: align inner_mac_header for encapsulation
  - mmc: usdhi60rol0: fix deferred probing
  - mmc: sh_mmcif: fix deferred probing
  - mmc: sdhci-acpi: fix deferred probing
  - mmc: owl: fix deferred probing
  - mmc: omap_hsmmc: fix deferred probing
  - mmc: omap: fix deferred probing
  - mmc: mvsdio: fix deferred probing
  - mmc: mtk-sd: fix deferred probing
  - net: qca_spi: Avoid high load if QCA7000 is not available
  - xfrm: Linearize the skb after offloading if needed.
  - selftests: net: fcnal-test: check if FIPS mode is enabled
  - selftests: net: vrf-xfrm-tests: change authentication and encryption algos
  - xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets
  - bpf: Fix verifier id tracking of scalars on spill
  - bpf: track immediate values written to stack by BPF_ST instruction
  - xfrm: Ensure policies always checked on XFRM-I input path
  - xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c
  - ieee802154: hwsim: Fix possible memory leaks
  - memfd: check for non-NULL file_seals in memfd_create() syscall
  - x86/mm: Avoid using set_pgd() outside of real PGD pages
  - nilfs2: prevent general protection fault in nilfs_clear_dirty_page()
  - io_uring/net: disable partial retries for recvmsg with cmsg
  - io_uring/net: clear msg_controllen on partial sendmsg retry
  - io_uring/net: save msghdr->msg_control for retries
  - writeback: fix dereferencing NULL mapping->host on writeback_page_template
  - regmap: spi-avmm: Fix regmap_bus max_raw_write
  - regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK
  - ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN
  - mmc: mmci: stm32: fix max busy timeout calculation
  - mmc: meson-gx: remove redundant mmc_request_done() call from irq context
  - mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916
  - PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic
  - PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev
  - Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally"
  - PCI: hv: Fix a race condition bug in hv_pci_query_relations()
  - Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs
  - nilfs2: fix buffer corruption due to concurrent device reads
  - selftests: mptcp: join: skip check if MIB counter not supported
  - selftests: mptcp: pm nl: remove hardcoded default limits
  - selftests: mptcp: lib: skip if not below kernel version
  - selftests: mptcp: lib: skip if missing symbol
  - tick/common: Align tick period during sched_timer setup
  - tracing: Add tracing_reset_all_online_cpus_unlocked() function
  - net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs
  - drm/amd/display: fix the system hang while disable PSR
  - net/smc: Fix pos miscalculation in statistics
  - net/smc: Ensure correct state of the socket in send path
  - net/smc: Fix ENODATA tests in smc_nl_get_fback_stats()
  - net/smc: Add netlink support for SMC fallback statistics
  - net/smc: Add netlink support for SMC statistics
  - net/smc: Add SMC statistics support
  - um: Fix build w/o CONFIG_PM_SLEEP
  - drm/i915/gen11+: Only load DRAM information from pcode
  - drm/i915/dg1: Wait for pcode/uncore handshake at startup
  - nilfs2: reject devices with insufficient block count
  - mmc: block: ensure error propagation for non-blk
  - batman-adv: Switch to kstrtox.h for kstrtou64
  - neighbour: delete neigh_lookup_nodev as not used
  - net/smc: use memcpy instead of snprintf to avoid out of bounds read
  - smc: fix out of bound access in smc_nl_get_sys_info()
  - net/smc: fix access to parent of an ib device
  - net/smc: Add support for obtaining SMCR device list
  - net/smc: Add support for obtaining SMCD device list
  - net/smc: Add SMC-D Linkgroup diagnostic support
  - net/smc: Introduce SMCR get link command
  - net/smc: Introduce SMCR get linkgroup command
  - net/smc: Add support for obtaining system information
  - net: Remove unused inline function dst_hold_and_use()
  - neighbour: Remove unused inline function neigh_key_eq16()
  - rcu/kvfree: Avoid freeing new kfree_rcu() memory after old grace period
  - afs: Fix vlserver probe RTT handling
  - selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET
  - net: tipc: resize nlattr array to correct size
  - net: lapbether: only support ethernet devices
  - net/sched: cls_api: Fix lockup on flushing explicitly created chain
  - ext4: drop the call to ext4_error() from ext4_get_group_info()
  - drm/nouveau: add nv_encoder pointer check for NULL
  - drm/nouveau/dp: check for NULL nv_connector->native_mode
  - drm/nouveau: don't detect DSM for non-NVIDIA device
  - igb: fix nvm.ops.read() error handling
  - sctp: fix an error code in sctp_sf_eat_auth()
  - ipvlan: fix bound dev checking for IPv6 l3s mode
  - IB/isert: Fix incorrect release of isert connection
  - IB/isert: Fix possible list corruption in CMA handler
  - IB/isert: Fix dead lock in ib_isert
  - IB/uverbs: Fix to consider event queue closing also upon non-blocking mode
  - RDMA/cma: Always set static rate to 0 for RoCE
  - RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions
  - octeontx2-af: fixed resource availability check
  - iavf: remove mask from iavf_irq_enable_queues()
  - RDMA/rxe: Fix the use-before-initialization error of resp_pkts
  - RDMA/rxe: Removed unused name from rxe_task struct
  - RDMA/rxe: Remove the unused variable obj
  - ping6: Fix send to link-local addresses with VRF.
  - net: enetc: correct the indexes of highest and 2nd highest TCs
  - netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM
  - spi: fsl-dspi: avoid SCK glitches with continuous transfers
  - RDMA/rtrs: Fix the last iu->buf leak in err path
  - usb: dwc3: gadget: Reset num TRBs before giving back the request
  - serial: lantiq: add missing interrupt ack
  - USB: serial: option: add Quectel EM061KGL series
  - ALSA: hda/realtek: Add a quirk for Compaq N14JP6
  - net: usb: qmi_wwan: add support for Compal RXM-G1
  - RDMA/uverbs: Restrict usage of privileged QKEYs
  - nouveau: fix client work fence deletion race
  - powerpc/purgatory: remove PGO flags
  - x86/purgatory: remove PGO flags
  - kexec: support purgatories with .text.hot sections
  - nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
  - nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key()
  - nios2: dts: Fix tse_mac "max-frame-size" property
  - ocfs2: check new file size on fallocate call
  - ocfs2: fix use-after-free when unmounting read-only filesystem
  - epoll: ep_autoremove_wake_function should use list_del_init_careful
  - irqchip/gic: Correctly validate OF quirk descriptors
  - drm:amd:amdgpu: Fix missing buffer object unlock in failure path
  - xen/blkfront: Only check REQ_FUA for writes
  - ASoC: dwc: move DMA init to snd_soc_dai_driver probe()
  - mips: Move initrd_start check after initrd address sanitisation.
  - MIPS: Alchemy: fix dbdma2
  - parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory()
  - parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu()
  - ASoC: soc-pcm: test if a BE can be prepared
  - btrfs: handle memory allocation failure in btrfs_csum_one_bio
  - btrfs: scrub: try harder to mark RAID56 block groups read-only
  - power: supply: Fix logic checking if system is running from battery
  - irqchip/gic-v3: Disable pseudo NMIs on Mediatek devices w/ firmware issues
  - regulator: Fix error checking for debugfs_create_dir
  - platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0
  - power: supply: Ratelimit no data debug output
  - tools: gpio: fix debounce_period_us output of lsgpio
  - ARM: dts: vexpress: add missing cache properties
  - power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule()
  - power: supply: sc27xx: Fix external_power_changed race
  - power: supply: ab8500: Fix external_power_changed race
  - test_firmware: fix a memory leak with reqs buffer
  - test_firmware: prevent race conditions by a correct implementation of locking
  - test_firmware: Use kstrtobool() instead of strtobool()
  - kernel.h: split out kstrtox() and simple_strtox() to a separate header
  - lib: cleanup kstrto*() usage
  - fs/dirty_pages: introduce a new config option 'CONFIG_DIRTY_PAGES'
  - fs/dirty_pages: add last read check in seq_read_dirty()
  - net/smc: Introduce generic netlink interface for diagnostic purposes
  - net/smc: Refactor smc ism v2 capability handling
  - net/smc: Add diagnostic information to link structure
  - net/smc: Add diagnostic information to smc ib-device
  - net/smc: Add link counters for IB device ports
  - drivers: perf: Add feature flag check in armpmu_add/del
  - Revert "locking/rwsem: Better collate rwsem_read_trylock()"
  - Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
  - Revert "locking/rwsem: Prevent potential lock starvation"


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-175.0.0.88
changelog:
  - !3220 KVM: arm64: vtimer/virt_dev irq bypass support
  - !3092 [OLK-5.10]KVM: arm64: Add host/guest KVM-PTP support
  - !3206  Two bugfix patch about memcg swap qos
  - !3212  drivers/perf: hisi: UC PMU support statistics in power saving mode
  - KVM: arm64: update arm64 openeuler_defconfig for CONFIG_VIRT_PLAT_DEV
  - KVM: arm64: sdev: Support virq bypass by INT/VSYNC command
  - KVM: arm64: kire: irq routing entry cached the relevant cache data
  - KVM: arm64: Introduce shadow device
  - virt_plat_dev: Register the virt platform device driver
  - irqchip/gic-v3-its: Add virt platform devices MSI support
  - irqchip/gic-v3-its: Alloc/Free device id from pools for virtual devices
  - irqchip/gic-v3-its: Introduce the reserved device ID pools
  - mbigen: Sets the regs related to vtimer irqbypass
  - KVM: arm64: vgic-v3: Clearing pending status of vtimer on guest reset
  - mbigen: vtimer: add support for MBIX1_CPPI_NEGEDGE_CLR_EN_SETR(CLRR)
  - KVM: arm64: arch_timer: Make vtimer_irqbypass a Distributor attr
  - KVM: arm64: vtimer: Expose HW-based vtimer interrupt in debugfs
  - KVM: arm64: GICv4.1: Allow non-trapping WFI when using direct vtimer interrupt
  - KVM: arm64: GICv4.1: Add support for MBIGEN save/restore
  - KVM: arm64: arch_timer: Rework vcpu init/reset logic
  - KVM: arm64: arch_timer: Probe vtimer irqbypass capability
  - KVM: arm64: GICv4.1: Enable vtimer vPPI irqbypass config
  - KVM: arm64: GICv4.1: Add direct injection capability to PPI registers
  - KVM: arm64: vgic: Add helper for vtimer vppi info register
  - KVM: arm64: GICv4.1: Inform the HiSilicon vtimer irqbypass capability
  - irqchip/gic-v4.1: Probe vtimer irqbypass capability at RD level
  - irqchip/gic-v4.1: Rework its_alloc_vcpu_sgis() to support vPPI allocation
  - irqchip/gic-v4.1: Rework get/set_irqchip_state callbacks of GICv4.1-sgi chip
  - irqchip/gic-v4.1: Extend VSGI command to support the new vPPI
  - irqchip/gic-v4.1: Detect ITS vtimer interrupt bypass capability
  - mbigen: vtimer mbigen driver support
  - kabi: fix kabi broken in struct clocksource and system_time_snapshot
  - drivers/perf: hisi: UC PMU support statistics in power saving mode
  - memcg: fix use-after-free of mm_struct
  - mm/swap_slots: fix out-of-bounds access of percpu area
  - KVM: arm64: update arm64 openeuler_defconfig for CONFIG_PTP_1588_CLOCK_KVM
  - KVM: arm64: fix compile error
  - ptp: fix error print of ptp_kvm on X86_64 platform
  - KVM: arm64: Fix Function ID typo for PTP_KVM service
  - ptp: Don't print an error if ptp_kvm is not supported
  - ptp: arm/arm64: Enable ptp_kvm for arm/arm64
  - KVM: arm64: Add support for the KVM PTP service
  - clocksource: Add clocksource id for arm arch counter
  - time: Add mechanism to recognize clocksource in time_get_snapshot
  - ptp: Reorganize ptp_kvm.c to make it arch-independent
  - KVM: arm64: Advertise KVM UID to guests via SMCCC
  - arm/arm64: Probe for the presence of KVM hypervisor


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-176.0.0.89
changelog:
  - !3226  hinic: ethtool: Allow userspace to set more aggregation params
  - !3259 mbigen: vtimer: isolate mbigen vtimer funcs with macro
  - mbigen: vtimer: isolate mbigen vtimer funcs with macro
  - !3215 net: hns: fix fake link up on xge port and fix wrong head when modify the tx feature when sending packets
  - !2946  LoongArch: disable 40bit user space by default
  - net: hns: fix fake link up on xge port
  - net: hns: fix wrong head when modify the tx feature when sending packets
  - !2987  fix CFS bandwidth vs. hrtimer self deadlock
  - !3005 [sync] PR-1617: LoonArch: KVM: fix vcpu timer
  - !3161  fs: Fix error checking for d_hash_and_lookup()
  - hinic: ethtool: Allow userspace to set more aggregation params
  - fs: Fix error checking for d_hash_and_lookup()
  - LoongArch: KVM: fix vcpu timer functions
  - cpu/hotplug: fix kabi breakage in enum cpuhp_state
  - hrtimers: Push pending hrtimers away from outgoing CPU earlier
  - LoongArch: disable 40bit user space by default


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-177.0.0.91
changelog:
  - Fix kernel rpm build failure that libperf-jvmti.so is missing
  - Enable kabi checking and adapt the check-kabi script
  - Update openEuler-22.03-LTS-SP3 KABI whitelists for aarch64 and x86_64
  - !3360  arm64: cpufeature: Add missing .field_width for system registers
  - arm64: cpufeature: Add missing .field_width for system registers
  - !3093 backport adding GNR support for Intel PCIe gen5 NTB
  - !3329  iommu/arm-smmu-v3: Add a SYNC command to avoid broken page table prefetch
  - iommu/arm-smmu-v3: Add a SYNC command to avoid broken page table prefetch
  - !3320  Make the rcache depot scale better
  - !3274  Fixed some memory leak issues of the Perf tool
  - iommu/iova: Manage the depot list size
  - iommu/iova: Make the rcache depot scale better
  - iommu/iova: change IOVA_MAG_SIZE to 127 to save memory
  - Revert "iommu/iova: increase the iova_rcache depot max size to 128"
  - Revert "config: enable set the max iova mag size to 128"
  - Revert "iommu/iova: move IOVA_MAX_GLOBAL_MAGS outside of IOMMU_SUPPORT"
  - !3303 net: hns3: Add support for some CMIS transceiver modules and synchronize some CMIS transceiver
  - !3304 roh/core: Synchronously update the mac address of the vlan device when configuring the vlan device ip
  - net: hns3: fix kernel crash when devlink reload during vf initialization
  - net: hns3: fix kernel crash when devlink reload during pf initialization
  - net: hns3: fix wrong judgment condition issue
  - !3301 unic: Change the max frame size sent to firmware
  - roh/core: Synchronously update the mac address of the vlan device when configuring the vlan device ip
  - net: hns3: Add support for some CMIS transceiver modules
  - net: sfp: Synchronize some CMIS transceiver modules from ethtool
  - !3221 Backport x86 patches from upstream 5.10.189
  - unic: Change the max frame size sent to firmware
  - !3222  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
  - !3269  iommu/arm-smmu-v3: disable stall for quiet_cd
  - !3254  icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.
  - !3219 crypto: hisiilicon some bugfixs and cleanup
  - perf header: Fix one memory leakage in perf_event__fprintf_event_update()
  - perf hisi-ptt: Fix one memory leakage in hisi_ptt_process_auxtrace_event()
  - perf hisi-ptt: Fix memory leak in lseek failure handling
  - !3256 RDMA/hns: Cleanups of some optimize code
  - !3257 net: hns3: add input parameters checking and arp cleancode
  - iommu/arm-smmu-v3: disable stall for quiet_cd
  - net: hns3: add input parameters checking
  - net: hns3: arp cleancode
  - RDMA/hns: Use macro instead of magic number
  - RDMA/hns: Cleanup for debugfs
  - RDMA/hns: Add more check for bonding-unsupported cases
  - RDMA/hns: Improve readability of check_bond_support()
  - RDMA/hns: Fix the spin_lock and spin_unlock objects are inconsistent
  - RDMA/hns: Remove useless NULL check in hns_roce_get_netdev()
  - RDMA/hns: Refactor mtr find
  - RDMA/hns: Remove unused parameters detected by -Wextra
  - RDMA/hns: Remove extra blank line in get_sge_num_from_max_inl_data()
  - RDMA/hns: Replace magic number when fill ADDR to HW
  - kabi: Fix kabi breakage caused by c1e70ec46591
  - icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.
  - x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4
  - x86/mm: Initialize text poking earlier
  - mm: Move mm_cachep initialization to mm_init()
  - x86/mm: Use mm_alloc() in poking_init()
  - x86/mm: fix poking_init() for Xen PV guests
  - x86/xen: Fix secondary processors' FPU initialization
  - x86/fpu: Move FPU initialization into arch_cpu_finalize_init()
  - x86/fpu: Mark init functions __init
  - x86/fpu: Remove cpuinfo argument from init functions
  - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init()
  - init: Invoke arch_cpu_finalize_init() earlier
  - init: Remove check_bugs() leftovers
  - x86/cpu: Switch to arch_cpu_finalize_init()
  - md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
  - crypto: hisilicon/qm - reset device before enabling it
  - crypto: hisilicon/qm - add stop function by hardware
  - crypto: hisilicon/qm - remove duplicate configurations
  - crypto: hisilicon/qm - dump important registers values before resetting
  - crypto: hisilicon/qm - support get device state
  - crypto: hisilicon/hpre - mask cluster timeout error
  - crypto: hisilicon/qm - modify interrupt resource application process
  - crypto: hisilicon/sec2: fix memory use-after-free issue
  - crypto: hisilicon/qm - increase the maximum waiting timeout interval of the moilbox.
  - crypto: hisilicon/sec2 - optimize the error return process
  - vfio/migration - delete a dbg function
  - crypto: hisilicon/qm - delete a dbg function
  - crypto: hisilicon/qm - add size check in qm set algs
  - ntb: intel: add GNR support for Intel PCIe gen5 NTB


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-178.0.0.92
changelog:
  - !3374  cpumask: cleanup nr_cpu_ids vs nr_cpumask_bits mess
  - config: Add FORCE_NR_CPUS to openeuler_defconfig
  - powerpc/64: don't refer nr_cpu_ids in asm code when it's undefined
  - lib/cpumask: add FORCE_NR_CPUS config option
  - lib/cpumask: deprecate nr_cpumask_bits
  - lib/cpumask: delete misleading comment
  - smp: add set_nr_cpu_ids()
  - smp: don't declare nr_cpu_ids if NR_CPUS == 1


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-179.0.0.93
changelog:
  - !3463  Support node_reclaim_distance adjust
  - !3427  tcp: Disable header prediction for MD5 flow.
  - !3421  backport some network patches
  - config: enable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
  - arm64/numa: Support node_reclaim_distance adjust for arch
  - !3461  Revert "mm/mempolicy: don't handle MPOL_LOCA
  - Revert "mm/mempolicy: don't handle MPOL_LOCAL like a fake MPOL_PREFERRED policy"
  - !3422  sch_netem: fix issues in netem_change() vs get_dist_table()
  - !3415 Some bugfix for hns3
  - !3404 Add the verification operation after the  bus recovery operation obtains resources through the ACPI
  - !3424 mbigen: vtimer: disable vtimer mbigen probe when vtimer_irqbypass disabled
  - tcp: Disable header prediction for MD5 flow.
  - !3375  locking/osq_lock: Avoid false sharing in optimistic_spin_node
  - mbigen: vtimer: disable vtimer mbigen probe when vtimer_irqbypass disabled
  - !3413 Backport bugfixes for hns
  - net: hns3: add use limit for 1D torus feature
  - net: hns3: add new 200G link modes for hisilicon device
  - sch_netem: fix issues in netem_change() vs get_dist_table()
  - net: use indirect calls helpers for sk_exit_memory_pressure()
  - tcp: check local var (timeo) before socket fields in one test
  - tcp: avoid indirect calls to sock_rfree
  - tcp: add RETPOLINE mitigation to sk_backlog_rcv
  - tcp: small optimization in tcp recvmsg()
  - net: cache align tcp_memory_allocated, tcp_sockets_allocated
  - RDMA/hns: Fix missing parameter check in set_write_notify_param()
  - RDMA/hns: Fix incorrect bond clear during slave increase event
  - RDMA/hns: Add cap_flag check for check_vf_support()
  - RDMA/hns: Fix memory leak in POE debugfs
  - net: hns3: Disable SerDes serial loopback for HiLink H60
  - Add the verification operation after the bus recovery operation obtains resources through the ACPI
  - !3390  mm/userswap: modify the USWAP registration flag
  - !3376  mm/mempolicy: check preferred_node rather than nodes for MPOL_PREFERRED
  - !3346  smart_grid: cpufreq: clear offline and isolated CPU in warm CPUs
  - mm/userswap: modify the USWAP registration flag
  - mm/mempolicy: check preferred_node rather than nodes for MPOL_PREFERRED
  - locking/osq_lock: Avoid false sharing in optimistic_spin_node
  - smart_grid: cpufreq: clear offline and isolated CPU in warm CPUs


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-181.0.0.94
changelog:
  - !3535 Bugfixes for RDMA/hns
  - !3519  tick/broadcast-hrtimer: Prevent the timer device on broadcast duty CPU from being disabled
  - RDMA/hns: Fix Use-After-Free of rsv_qp
  - RDMA/hns: Fix init check of VFs on RoCE bonding slaves
  - Revert "RDMA/hns: Add cap_flag check for check_vf_support()"
  - !3504 net: hns3: fix kernel crash when 1588 is received on HIP08 devices
  - tick/broadcast-hrtimer: Prevent the timer device on broadcast duty CPU from being disabled
  - !3508  roh/hns3: Fix the processing flow of ROH CMDq during the reset process.
  - roh/hns3: Fix the processing flow of ROH CMDq during the reset process.
  - net: hns3: fix kernel crash when 1588 is received on HIP08 devices
  - !3084 [OLK-5.10] add Phytium DRM drivers CONFIG
  - arm64: config: add Phytium Drm config


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-182.0.0.95
changelog:
  - !3553  kernel: update SP3 OPENEULER_MINOR and introduced OPENEULER_LTS
  - openEuler: introduced OPENEULER_LTS to identify LTS Release
  - kernel: update SP3 OPENEULER_MINOR value to 3


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-183.0.0.96
changelog:
  - !3848 [22.03-LTS-SP3] Bug fix for KVM MMU
  - !3562  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
  - !3776  Revert "sched: clear credit count in error branch"
  - !3746  smart_grid: make sure hot zone have the highest priority
  - !3810 Some cleanup and bugfix for HNS3
  - !3804 MAINTAINERS: Update maintainers of HiSilicon RoCE
  - !3756  md: mainline backport
  - KVM: x86/mmu: Allocate pml4_root for guest PAE mode shadowing
  - !3694  Fix tow CVEs of CIFS
  - openEuler/MAINTAINERS: Update maintainers of HiSilicon RoCE
  - MAINTAINERS: Add Youming Luo as Hisilicon RoCE maintainer
  - !3822  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
  - !3793  cppc_cpufreq: use policy->cpu in cppc_set_perf()
  - ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
  - !3811 drivers: net: ub: dev: network_mgmt: Modified OLK5.10 ub compilation missing header files.
  - network_mgmt: Modified OLK5.10 ub compilation missing header files.
  - net: hns3: set the freed pointers to NULL when lifetime is not end
  - net: hns3: remove unnecessary variables initialization
  - net: hns3: unsigned value not need to judge to be less than 0
  - !3769  tls: suppress wakeups unless we have a full record
  - !3570  perf/core: Fix CVE-2023-6931
  - MAINTAINERS: Add Chengchang Tang as Hisilicon RoCE maintainer
  - MAINTAINERS: Update maintainers of HiSilicon RoCE
  - !3659  atm: Fix Use-After-Free in do_vcc_ioctl
  - !3771  ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - cppc_cpufreq: use policy->cpu as driver of frequency setting
  - cppc_cpufreq: clean up cpu, cpu_num and cpunum variable use
  - cppc_cpufreq: get cpunum from fb_ctrs instead of smp_processor_id()
  - Revert "sched: clear credit count in error branch"
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - tls: suppress wakeups unless we have a full record
  - !3668  net/rose: Fix Use-After-Free in rose_ioctl
  - !3480 drivers: net: ub: dev: network_mgmt: ip_notify: ip_notify: Merge the openEuler modification  suggestions.
  - !3686  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
  - !3594  CVE-2023-35827 patchset
  - !3552  block: warn once for each partition in bio_check_ro()
  - !3466  livepatch/core: Disable support for replacing
  - !3715  appletalk: Fix Use-After-Free in atalk_ioctl
  - md: fix error handling in md_alloc
  - md: Constify attribute_group structs
  - md: fix mddev->kobj lifetime
  - md: properly unwind when failing to add the kobject in md_alloc
  - md: extend disks_mutex coverage
  - md: add the bitmap group to the default groups for the md kobject
  - md: add error handling support for add_disk()
  - md: convert to blk_alloc_disk/blk_cleanup_disk
  - md/raid10: fix improper BUG_ON() in raise_barrier()
  - md: use msleep() in md_notify_reboot()
  - md: fix double free of mddev->private in autorun_array()
  - !3637  jbd2: fix soft lockup in journal_finish_inode_data_buffers()
  - smart_grid: make sure hot zone have the highest priority
  - !3459 reset idlest_cpu if not meet the conditions for preferred CPU
  - !3272  x86/kprobes: Fix the error judgment for debug exceptions
  - !3447  dm: add error handling support for add_disk()
  - !3420  md: protect md_thread with rcu
  - !3379  md: do not return existing mddevs from mddev_find_or_alloc
  - appletalk: Fix Use-After-Free in atalk_ioctl
  - smb: client: fix potential OOB in smb2_dump_detail()
  - smb: client: fix OOB in smbCalcSize()
  - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
  - net/rose: Fix Use-After-Free in rose_ioctl
  - atm: Fix Use-After-Free in do_vcc_ioctl
  - jbd2: fix soft lockup in journal_finish_inode_data_buffers()
  - !3617  netfilter: nft_set_pipapo: skip inactive elements during set walk
  - netfilter: nft_set_pipapo: skip inactive elements during set walk
  - ravb: Fix races between ravb_tx_timeout_work() and net related ops
  - ravb: Fix use-after-free issue in ravb_tx_timeout_work()
  - perf: Fix perf_event_validate_size() lockdep splat
  - perf: Fix perf_event_validate_size()
  - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
  - block: fix kabi broken in struct hd_part
  - block: warn once for each partition in bio_check_ro()
  - network_mgmt: Merge the openEuler modification suggestions.
  - livepatch/core: Disable support for replacing
  - sched/fair: reset idlest_cpu if not meet the conditions for preferred CPU
  - dm: add error handling support for add_disk()
  - md: protect md_thread with rcu
  - md/bitmap: factor out a helper to set timeout
  - md/bitmap: always wake up md_thread in timeout_store
  - dm-raid: remove useless checking in raid_message()
  - md: factor out a helper to wake up md_thread directly
  - md: do not return existing mddevs from mddev_find_or_alloc
  - md: refactor mddev_find_or_alloc
  - md: factor out a mddev_alloc_unit helper from mddev_find
  - x86/kprobes: Fix the error judgment for debug exceptions


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-184.0.0.97
changelog:
  - !3981  vhost: use kzalloc() instead of kmalloc() followed by memset()
  - !3418 [sync] PR-2918: fix some bugs in loongarch kvm
  - !3912  net: bridge: multicast: fix UAF of net_bridge
  - !3982  ACPI: CPPC: Assume no transition latency if no PCCT
  - ACPI: CPPC: Assume no transition latency if no PCCT
  - vhost: use kzalloc() instead of kmalloc() followed by memset()
  - !3972  arm64: make cma=0 as default for openeuler
  - arm64: make cma=0 as default for openeuler
  - !3940 net: hns3: fix the cmdq reset command times out when all VFs are enabled and the queue is full.
  - !3925 udma: add capability of DWQE in RC mode
  - hns3 udma: add support of DWQE in create qp
  - net: hns3: fix reset timeout under full functions and queues
  - !3915  nvmet: nul-terminate the NQNs passed in the connect command
  - nvmet: nul-terminate the NQNs passed in the connect command
  - net: bridge: multicast: fix UAF of net_bridge
  - loongarch/kvm: disable hugepage during migration process
  - loongarch/kvm: Fix oneshot timer emulation
  - loongarch/kvm: Remove SW timer switch when vcpu is halt polling


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-185.0.0.98
changelog:
  - !4138 KVM: arm64: arch_timer: init ret for kvm_timer_enable
  - !3689 Intel: Backport Sierra Forest(SRF) core PMU support to OLK-5.10
  - !4134  fs:/dcache.c: fix negative dentry limit not complete problem
  - !4136 udma: change the way of query dfx resource
  - !4054  ext4: correct return value of ext4_convert_meta_bg
  - !4058  ext4: synchronize the casefold bugfix from the mainline.
  - hns3 udma: change way of query dfx resource
  - fs:/dcache.c: fix negative dentry limit not complete problem
  - KVM: arm64: arch_timer: init ret for kvm_timer_enable
  - !4100  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
  - !3975  md/raid1-10: limit the number of plugged bio
  - !3998  cpufreq: CPPC: Fix performance/frequency conversion
  - !4022  netfilter: nf_tables: Reject tables of unsupported family
  - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
  - !4090  ida: Fix crash in ida_free when the bitmap is empty
  - !4091  x86/quirks: Add parameter to clear MSIs early
  - x86/quirks: Add parameter to clear MSIs early on boot
  - x86/PCI: Export find_cap() to be used in early PCI code
  - ida: Fix crash in ida_free when the bitmap is empty
  - !4019  mm/filemap: avoid buffered read/write race to read inconsistent data
  - !4069  tipc: fix a potential deadlock on &tx->lock
  - !4064  smb: client: fix OOB in receive_encrypted_standard()
  - tipc: fix a potential deadlock on &tx->lock
  - smb: client: fix OOB in receive_encrypted_standard()
  - !4024 udma: add mailbox description printing.
  - ext4: improve error handling from ext4_dirhash()
  - ext4: reject casefold inode flag without casefold feature
  - ext4: correct return value of ext4_convert_meta_bg
  - hns3 udma: add print mailbox description
  - netfilter: nf_tables: Reject tables of unsupported family
  - mm/filemap: avoid buffered read/write race to read inconsistent data
  - cpufreq: CPPC: Fix performance/frequency conversion
  - md/raid1-10: fix casting from randomized structure in raid1_submit_write()
  - md/raid1-10: limit the number of plugged bio
  - md/raid1-10: don't handle pluged bio by daemon thread
  - md/md-bitmap: add a new helper to unplug bitmap asynchrously
  - md/raid1-10: submit write io directly if bitmap is not enabled
  - md/raid1-10: factor out a helper to submit normal write
  - md/raid1-10: factor out a helper to add bio to plug
  - md/raid10: prevent soft lockup while flush writes
  - md: raid1/raid10: drop pending_cnt
  - md: drop queue limitation for RAID1 and RAID10
  - Revert "md/raid10: fix softlockup in raid10_unplug"
  - perf/x86/intel: Add a quirk for the calculation of the number of counters on Alder Lake
  - perf/x86/intel: Fix fixed counter check warning for some Alder Lake
  - perf/x86/intel: Add Crestmont PMU
  - x86/cpu: Update Hybrids
  - x86/cpu: Fix Crestmont uarch
  - x86/cpu: Fix Gracemont uarch
  - perf/x86/msr: Add Meteor Lake support
  - perf/x86/cstate: Add Meteor Lake support
  - perf/x86/intel: Support Architectural PerfMon Extension leaf
  - x86/cpufeatures: Add Architectural PerfMon Extension bit
  - perf/x86: Support Retire Latency
  - perf/x86: Add Meteor Lake support
  - perf: Add PMU_FORMAT_ATTR_SHOW
  - perf/x86/intel: Fix unchecked MSR access error for Alder Lake N
  - x86/cpu: Add CPU model numbers for Meteor Lake
  - perf/x86/intel: Fix PEBS data source encoding for ADL
  - perf/x86/intel: Fix PEBS memory access info encoding for ADL
  - perf/x86/uncore: Add new Alder Lake and Raptor Lake support
  - perf/x86/uncore: Clean up uncore_pci_ids[]
  - perf/x86/cstate: Add new Alder Lake and Raptor Lake support
  - perf/x86/msr: Add new Alder Lake and Raptor Lake support
  - perf/x86: Add new Alder Lake and Raptor Lake support
  - x86/cpu: Add new Alderlake and Raptorlake CPU model numbers
  - perf/x86/uncore: Add Raptor Lake uncore support
  - perf/x86/msr: Add Raptor Lake CPU support
  - perf/x86/cstate: Add Raptor Lake support
  - perf/x86: Add Intel Raptor Lake support
  - perf/x86/intel/uncore: Add IMC uncore support for ADL
  - x86/cpu: Drop spurious underscore from RAPTOR_LAKE #define
  - x86/cpu: Add Raptor Lake to Intel family
  - perf/x86/intel: Apply mid ACK for small core
  - perf/x86/rapl: Add support for Intel Alder Lake
  - perf/x86/cstate: Add Alder Lake CPU support
  - perf/x86/msr: Add Alder Lake CPU support
  - perf/x86/intel/uncore: Add Alder Lake support
  - perf: Extend PERF_TYPE_HARDWARE and PERF_TYPE_HW_CACHE
  - perf/x86/intel: Add Alder Lake Hybrid support
  - perf/x86: Support filter_match callback
  - perf/x86/intel: Add attr_update for Hybrid PMUs
  - perf/x86: Add structures for the attributes of Hybrid PMUs
  - perf/x86: Register hybrid PMUs
  - perf/x86: Factor out x86_pmu_show_pmu_cap
  - perf/x86: Remove temporary pmu assignment in event_init
  - perf/x86/intel: Factor out intel_pmu_check_extra_regs
  - perf/x86/intel: Factor out intel_pmu_check_event_constraints
  - perf/x86/intel: Factor out intel_pmu_check_num_counters
  - perf/x86: Hybrid PMU support for extra_regs
  - perf/x86: Hybrid PMU support for event constraints
  - perf/x86: Hybrid PMU support for hardware cache event
  - perf/x86: Hybrid PMU support for unconstrained
  - perf/x86: Hybrid PMU support for counters
  - perf/x86: Hybrid PMU support for intel_ctrl
  - perf/x86/intel: Hybrid PMU support for perf capabilities
  - x86/cpu: Add helper function to get the type of the current hybrid CPU
  - x86/cpufeatures: Enumerate Intel Hybrid Technology feature bit
  - perf/x86/intel: Add Tremont Topdown support


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-186.0.0.99
changelog:
  - !4327 【OLK-5.10】cgroup_writeback: fix deadlock in cgroup1_writeback
  - !4280 v2  fs:/dcache.c: fix negative dentry limit not complete problem
  - !4321  io_uring/af_unix: disable sending io_uring over sockets
  - !4290  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
  - cgroup_writeback: fix deadlock in cgroup1_writeback
  - !4266  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
  - io_uring/af_unix: disable sending io_uring over sockets
  - !4262 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
  - !4268  linux Mainline ubifs Fix Patch bacnport to 5.10
  - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
  - !4270  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
  - fs:/dcache.c: fix negative dentry limit not complete problem
  - Revert "fs:/dcache.c: fix negative dentry limit not complete problem"
  - !4257  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
  - !4032 intel: add TPMI base driver support for GNR
  - !3372 Cluster scheduler support
  - ipv6: init the accept_queue's spinlocks in inet6_create
  - tcp: make sure init the accept_queue's spinlocks once
  - ubifs: fix possible dereference after free
  - ubi: block: Fix use-after-free in ubiblock_cleanup
  - Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
  - !4003  ext4: fix some ext4_lblk_t overflow issues
  - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
  - drm/amdgpu: Fix potential fence use-after-free v2
  - nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
  - !4149  block: remove precise_iostat
  - !4213  netlink: fix potential sleeping issue in mqueue_flush_file
  - !4121 Init support for ppc64le
  - netlink: fix potential sleeping issue in mqueue_flush_file
  - !4203  mm/dynamic_hugetlb: skip unexpected migration
  - mm/dynamic_hugetlb: skip unexpected migration
  - !3228  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
  - !4167  sched/fair: Fix qos_timer deadlock when cpuhp offline
  - !3134  Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
  - !4015  drm/amdgpu: correct the amdgpu runtime dereference usage count
  - !4014  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
  - !4013  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
  - !4012  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
  - !4010  drm/amd/display: Exit idle optimizations before attempt to access PHY
  - !3955  drm/radeon: possible buffer overflow
  - !3634 Intel: Backport Granite Rapids(GNR) core PMU support to OLK-5.10
  - sched/fair: Fix qos_timer deadlock when cpuhp offline
  - block: remove precise_iostat
  - arch: powerpc: add openeuler_defconfig file support for ppc64le compile
  - sched,x86: enable CONFIG_SCHED_CLUSTER in openeuler_defconfig
  - tools headers cpufeatures: Sync with the kernel sources
  - topology: Remove unused cpu_cluster_mask()
  - sched,x86: Don't use cluster topology for x86 hybrid CPUs
  - x86/smp: Factor out parts of native_smp_prepare_cpus()
  - sched,x86: Fix L2 cache mask
  - sched: Add cluster scheduler level for x86
  - x86/cpufeatures: Enumerate Intel Hybrid Technology feature bit
  - config: update PMT and TPMI openeuler_defconfig for x86
  - platform/x86/intel/vsec: Fix xa_alloc memory leak
  - platform/x86/intel/tpmi: Add defines to get version information
  - platform/x86/intel/tpmi: Add debugfs support for read/write blocked
  - platform/x86/intel/tpmi: Add debugfs interface
  - lib/string_helpers: Introduce parse_int_array_user()
  - lib/cmdline: Allow get_options() to take 0 to validate the input
  - platform/x86/intel/tpmi: Read feature control status
  - platform/x86/intel/tpmi: Prevent overflow for cap_offset
  - platform/x86/intel: tpmi: Remove hardcoded unit and offset
  - platform/x86/intel: tpmi: Revise the comment of intel_vsec_add_aux
  - platform/x86/intel: tpmi: Fix double free in tpmi_create_device()
  - platform/x86/intel/tpmi: Fix double free reported by Smatch
  - platform/x86/intel/tpmi: ADD tpmi external interface for tpmi feature drivers
  - platform/x86/intel/tpmi: Process CPU package mapping
  - platform/x86/intel: Intel TPMI enumeration driver
  - platform/x86/intel: vsec: Use intel_vsec_dev_release() to simplify init() error cleanup
  - platform/x86/intel: vsec: Explicitly enable capabilities
  - platform/x86/intel: vsec: Fix a memory leak in intel_vsec_add_aux
  - platform/x86/intel/vsec: Use mutex for ida_alloc() and ida_free()
  - platform/x86/intel/vsec: Support private data
  - platform/x86/intel/vsec: Enhance and Export intel_vsec_add_aux()
  - platform/x86/intel/vsec: Add TPMI ID
  - platform/x86/intel/vsec: Fix wrong type for local status variables
  - platform/x86/intel/vsec: Add PCI error recovery support to Intel PMT
  - platform/x86/intel/pmt: Ignore uninitialized entries
  - platform/x86/intel/pmt: Add INTEL_PMT module namespace
  - platform/x86/intel/pmt: telemetry: Fix fixed region handling
  - platform/x86/intel/vsec: Rework early hardware code
  - platform/x86/intel: Fix pmt_crashlog array reference
  - platform/x86/intel: Fix 'rmmod pmt_telemetry' panic
  - platform/x86/intel: Move intel_pmt from MFD to Auxiliary Bus
  - driver core: auxiliary bus: Add driver data helpers
  - drm/amdgpu: correct the amdgpu runtime dereference usage count
  - drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
  - drm/amdgpu: correct chunk_ptr to a pointer to chunk.
  - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
  - drm/amd/display: Exit idle optimizations before attempt to access PHY
  - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
  - ext4: avoid overlapping preallocations due to overflow
  - ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
  - ext4: add two helper functions extent_logical_end() and pa_logical_end()
  - drm/radeon: possible buffer overflow
  - perf/x86/intel: Fix the FRONTEND encoding on GNR and MTL
  - perf/x86/cstate: Add Granite Rapids support
  - perf/x86/msr: Add Granite Rapids
  - perf/x86/intel: Add Granite Rapids
  - net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
  - Add MODULE_FIRMWARE() for FIRMWARE_TG357766.


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-187.0.0.100
changelog:
  - !4496 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
  - !4461  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - ubifs: Queue up space reservation tasks if retrying many times
  - !4484 v4  Using smmu IIDR registers
  - iommu/arm-smmu-v3: Enable iotlb_sync_map according to SMMU_IIDR
  - Revert "iommu/arm-smmu-v3: Add a SYNC command to avoid broken page table prefetch"
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - !3861  nvme: sanitize metadata bounce buffer for reads
  - !4256  scsi: core: Always send batch on reset or error handling command
  - scsi: core: Always send batch on reset or error handling command
  - Revert "scsi: core: Add scsi_prot_ref_tag() helper"
  - Revert "scsi: core: Introduce scsi_get_sector()"
  - Revert "scsi: core: Make scsi_get_lba() return the LBA"
  - Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
  - Revert "scsi: core: Use a structure member to track the SCSI command submitter"
  - Revert "scsi: core: Always send batch on reset or error handling command"
  - scsi: core: Always send batch on reset or error handling command
  - scsi: core: Use a structure member to track the SCSI command submitter
  - scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
  - scsi: core: Make scsi_get_lba() return the LBA
  - scsi: core: Introduce scsi_get_sector()
  - scsi: core: Add scsi_prot_ref_tag() helper
  - nvme: sanitize metadata bounce buffer for reads


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-188.0.0.101
changelog:
  - !4605  arm64/mpam: support resctrl fs to show mounting option
  - !4604  arm64/mpam: Skip updates of unrelated ctrl type
  - !4602  arm64/mpam: support MPAM v0.1 version
  - !4521  xen-netback: don't produce zero-size SKB frags
  - arm64/mpam: support resctrl fs to show mounting option
  - arm64/mpam: Skip updates of unrelated ctrl type
  - arm64/mpam: support MPAM v0.1 version
  - !4588  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  - !4531  fs:/dcache.c: fix negative dentry flag warning in dentry_free
  - !4580  printk: fix double unlock issue in logbuf_lock
  - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  - !4524 fix spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
  - spi: hisi-sfc-v3xx: return IRQ_NONE if no interrupts were detected
  - !4562 v4  tracing: Backport bugfixes
  - printk: fix double unlock issue in logbuf_lock
  - trace: Fix kabi breakage in struct trace_event_file
  - tracing: Fix uaf issue when open the hist or hist_debug file
  - tracing: Have event inject files inc the trace array ref count
  - tracing: Have trace_event_file have ref counters
  - tracing: Increase trace array ref count on enable and filter files
  - fs:/dcache.c: fix negative dentry flag warning in dentry_free
  - xen-netback: don't produce zero-size SKB frags
  - !4431 v2  patchset for CVE-2023-52340
  - ipv6: fix kabi change in struct dst_ops
  - ipv6: Document that max_size sysctl is deprecated
  - ipv6: remove max_size check inline with ipv4


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-189.0.0.102
changelog:
  - !4694 v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
  - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
  - !4647 hisi_ptt: Move type check to the beginning of hisi_ptt_pmu_event_init()
  - !4649  arm64/mpam: update reminder message about MBHDL option
  - !4662 v3  CVE-2023-52435
  - !4665 urma: fix some bugs of urma
  - !4663 Backport 5.10.191 - 5.10.192 LTS patches from upstream
  - !4646  binder: fix use-after-free in shinker's callback
  - !4645  f2fs: explicitly null-terminate the xattr list
  - urma: Fix bugs of memory leak and log loss
  - net: Fix compile warning in skb_segment()
  - net: prevent mss overflow in skb_segment()
  - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG
  - x86/static_call: Fix __static_call_fixup()
  - x86/srso: Explain the untraining sequences a bit more
  - mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove
  - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled
  - virtio-net: set queues after driver_ok
  - netfilter: set default timeout to 3 secs for sctp shutdown send and recv state
  - mmc: block: Fix in_flight[issue_type] value error
  - mmc: wbsd: fix double mmc_free_host() in wbsd_init()
  - cifs: Release folio lock on fscache read hit.
  - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces.
  - serial: 8250: Fix oops for port->pm on uart_change_pm()
  - ALSA: hda/realtek - Remodified 3k pull low procedure
  - ASoC: meson: axg-tdm-formatter: fix channel slot allocation
  - ASoC: rt5665: add missed regulator_bulk_disable
  - arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
  - arm64: dts: rockchip: sort nodes/properties on rk3399-rock-4
  - arm64: dts: rockchip: fix regulator name on rk3399-rock-4
  - arm64: dts: rockchip: add SPDIF node for ROCK Pi 4
  - arm64: dts: rockchip: add ES8316 codec for ROCK Pi 4
  - arm64: dts: rockchip: use USB host by default on rk3399-rock-pi-4
  - arm64: dts: rockchip: fix supplies on rk3399-rock-pi-4
  - bus: ti-sysc: Flush posted write on enable before reset
  - net: do not allow gso_size to be set to GSO_BY_FRAGS
  - sock: Fix misuse of sk_under_memory_pressure()
  - net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset
  - i40e: fix misleading debug logs
  - team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
  - net: phy: broadcom: stub c45 read/write for 54810
  - netfilter: nft_dynset: disallow object maps
  - ipvs: fix racy memcpy in proc_do_sync_threshold
  - drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs
  - selftests: mirror_gre_changes: Tighten up the TTL test match
  - ip_vti: fix potential slab-use-after-free in decode_session6
  - ip6_vti: fix slab-use-after-free in decode_session6
  - xfrm: fix slab-use-after-free in decode_session6
  - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure
  - net: af_key: fix sadb_x_filter validation
  - i2c: designware: Handle invalid SMBus block data response length value
  - btrfs: fix BUG_ON condition in btrfs_cancel_balance
  - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms
  - powerpc/rtas_flash: allow user copy to flash block cache objects
  - fbdev: mmp: fix value check in mmphw_probe()
  - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
  - virtio-mmio: don't break lifecycle of vm_dev
  - virtio-mmio: Use to_virtio_mmio_device() to simply code
  - tracing/probes: Fix to update dynamic data counter if fetcharg uses it
  - tracing/probes: Have process_fetch_insn() take a void * instead of pt_regs
  - mmc: meson-gx: fix deferred probing
  - mmc: meson-gx: use devm_mmc_alloc_host
  - mmc: core: add devm_mmc_alloc_host
  - mmc: sunxi: fix deferred probing
  - mmc: bcm2835: fix deferred probing
  - USB: dwc3: qcom: fix NULL-deref on suspend
  - usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM
  - usb: cdns3: allocate TX FIFO size according to composite EP number
  - usb: gadget: udc: core: Introduce check_config to verify USB configuration
  - irqchip/mips-gic: Use raw spinlock for gic_lock
  - irqchip/mips-gic: Get rid of the reliance on irq_cpu_online()
  - bus: mhi: host: Range check CHDBOFF and ERDBOFF
  - bus: mhi: Move host MHI code to "host" directory
  - bus: mhi: Add MMIO region length to controller structure
  - bus: mhi: Add MHI PCI support for WWAN modems
  - iio: addac: stx104: Fix race condition when converting analog-to-digital
  - iio: addac: stx104: Fix race condition for stx104_write_raw()
  - iio: adc: stx104: Implement and utilize register structures
  - iio: adc: stx104: Utilize iomap interface
  - dt-bindings: iio: add AD74413R
  - iio: add addac subdirectory
  - IMA: allow/fix UML builds
  - powerpc/kasan: Disable KCOV in KASAN code
  - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
  - ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760
  - Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
  - Bluetooth: L2CAP: Fix use-after-free
  - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
  - gfs2: Fix possible data races in gfs2_show_options()
  - usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
  - usb: chipidea: imx: don't request QoS for imx8ulp
  - media: platform: mediatek: vpu: fix NULL ptr dereference
  - usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push
  - media: v4l2-mem2mem: add lock to protect parameter num_rdy
  - FS: JFS: Check for read-only mounted filesystem in txBegin
  - FS: JFS: Fix null-ptr-deref Read in txBegin
  - MIPS: dec: prom: Address -Warray-bounds warning
  - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
  - udf: Fix uninitialized array access for some pathnames
  - ovl: check type and offset of struct vfsmount in ovl_entry
  - RDMA/mlx5: Return the firmware result upon destroying QP/RQ
  - HID: add quirk for 03f0:464a HP Elite Presenter Mouse
  - drm/amdgpu: install stub fence into potential unused fence pointers
  - dma-remap: use kvmalloc_array/kvfree for larger dma memory remap
  - quota: Properly disable quotas when add_dquot_ref() fails
  - iopoll: Call cpu_relax() in busy loops
  - ASoC: Intel: sof_sdw: Add support for Rex soundwire
  - ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings
  - PCI: tegra194: Fix possible array out of bounds access
  - ASoC: Intel: sof_sdw: add quirk for LNL RVP
  - ASoC: Intel: sof_sdw: add quirk for MTL RVP
  - ALSA: emu10k1: roll up loops in DSP setup code for Audigy
  - drm/radeon: Fix integer overflow in radeon_cs_parser_init
  - net/mlx5: Skip clock update work when device is in error state
  - net/mlx5: Move all internal timer metadata into a dedicated struct
  - net/mlx5: Refactor init clock function
  - mmc: sdhci-f-sdh30: Replace with sdhci_pltfm
  - alpha: remove __init annotation from exported page_is_ram()
  - scsi: qedf: Fix firmware halt over suspend and resume
  - scsi: qedi: Fix firmware halt over suspend and resume
  - scsi: core: Fix possible memory leak if device_add() fails
  - scsi: snic: Fix possible memory leak if device_add() fails
  - scsi: 53c700: Check that command slot is not NULL
  - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
  - scsi: core: Fix legacy /proc parsing buffer overflow
  - netfilter: nf_tables: report use refcount overflow
  - nvme-rdma: fix potential unbalanced freeze & unfreeze
  - btrfs: set cache_block_group_error if we find an error
  - btrfs: don't stop integrity writeback too early
  - ibmvnic: Handle DMA unmapping of login buffs in release functions
  - ibmvnic: Unmap DMA login rsp buffer on send login fail
  - ibmvnic: Enforce stronger sanity checks on login response
  - net/mlx5: Allow 0 for total host VFs
  - dmaengine: mcf-edma: Fix a potential un-allocated memory access
  - net: phy: at803x: remove set/get wol callbacks for AR8032
  - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
  - IB/hfi1: Fix possible panic during hotplug remove
  - drivers: net: prevent tun_build_skb() to exceed the packet size limit
  - dccp: fix data-race around dp->dccps_mss_cache
  - tunnels: fix kasan splat when generating ipv4 pmtu error
  - net/packet: annotate data-races around tp->status
  - mISDN: Update parameter type of dsp_cmx_send()
  - selftests: forwarding: tc_flower: Relax success criterion
  - selftests: forwarding: Switch off timeout
  - selftests: forwarding: Skip test when no interfaces are specified
  - selftests: forwarding: ethtool_extended_state: Skip when using veth pairs
  - selftests: forwarding: ethtool: Skip when using veth pairs
  - selftests: forwarding: Add a helper to skip test when using veth pairs
  - selftests/rseq: Fix build with undefined __weak
  - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes
  - x86/speculation: Add cpu_show_gds() prototype
  - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines
  - usb: common: usb-conn-gpio: Prevent bailing out if initial role is none
  - usb: dwc3: Properly handle processing of pending events
  - usb-storage: alauda: Fix uninit-value in alauda_check_media()
  - binder: fix memory leak in binder_init()
  - iio: cros_ec: Fix the allocation size for cros_ec_command
  - io_uring: correct check for O_TMPFILE
  - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
  - radix tree test suite: fix incorrect allocation size for pthreads
  - hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100
  - drm/amd/display: check attr flag before set cursor degamma on DCN3+
  - drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap()
  - drm/nouveau/gr: enable memory loads on helper invocation on all channels
  - riscv,mmio: Fix readX()-to-delay() ordering
  - dmaengine: pl330: Return DMA_PAUSED when transaction is paused
  - selftests/bpf: Fix sk_assign on s390x
  - selftests/bpf: Workaround verification failure for fexit_bpf2bpf/func_replace_return_code
  - selftests/bpf: make test_align selftest more robust
  - bpf: aggressively forget precise markings during state checkpointing
  - bpf: stop setting precise in current state
  - bpf: allow precision tracking for programs with subprogs
  - ipv6: adjust ndisc_is_useropt() to also return true for PIO
  - mmc: moxart: read scr register without changing byte order
  - wireguard: allowedips: expand maximum node depth
  - !4600 Backport 5.10.190 LTS patches from upstream
  - !4363 [OLK-5.10] add ACPI/EINJ CXL error types
  - ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node
  - ARM: dts: imx6sll: fixup of operating points
  - ARM: dts: imx: add usb alias
  - wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC)
  - mt76: mt7615: Fix fall-through warnings for Clang
  - mt76: move band capabilities in mt76_phy
  - exfat: support dynamic allocate bh for exfat_entry_set_cache
  - exfat: speed up iterate/lookup by fixing start point of traversing cluster chain
  - PM: sleep: wakeirq: fix wake irq arming
  - PM / wakeirq: support enabling wake-up irq after runtime_suspend called
  - soundwire: fix enumeration completion
  - soundwire: bus: pm_runtime_request_resume on peripheral attachment
  - soundwire: bus: add better dev_dbg to track complete() calls
  - selftests/rseq: Play nice with binaries statically linked against glibc 2.35+
  - powerpc/mm/altmap: Fix altmap boundary check
  - mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
  - mtd: rawnand: omap_elm: Fix incorrect type in assignment
  - ext2: Drop fragment support
  - fs: Protect reconfiguration of sb read-write from racing writes
  - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
  - fs/sysv: Null check to prevent null-ptr-deref bug
  - file: reinstate f_pos locking optimization for regular files
  - bpf: Disable preemption in bpf_event_output
  - arm64: dts: stratix10: fix incorrect I2C property for SCL signal
  - mtd: rawnand: meson: fix OOB available bytes for ECC
  - mtd: spinand: toshiba: Fix ecc_get_status
  - exfat: release s_lock before calling dir_emit()
  - exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree
  - ceph: defer stopping mdsc delayed_work
  - USB: zaurus: Add ID for A-300/B-500/C-700
  - libceph: fix potential hang in ceph_osdc_notify()
  - scsi: zfcp: Defer fc_rport blocking until after ADISC response
  - tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen
  - tcp_metrics: annotate data-races around tm->tcpm_net
  - tcp_metrics: annotate data-races around tm->tcpm_vals[]
  - tcp_metrics: annotate data-races around tm->tcpm_lock
  - tcp_metrics: annotate data-races around tm->tcpm_stamp
  - tcp_metrics: fix addr_same() helper
  - net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs_prio
  - net/mlx5: fs_core: Make find_closest_ft more generic
  - vxlan: Fix nexthop hash size
  - ip6mr: Fix skb_under_panic in ip6mr_cache_report()
  - s390/qeth: Don't call dev_close/dev_open (DOWN/UP)
  - net: dcb: choose correct policy to parse DCB_ATTR_BCN
  - net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode
  - net: ll_temac: fix error checking of irq_of_parse_and_map()
  - net: ll_temac: Switch to use dev_err_probe() helper
  - bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire
  - net: add missing data-race annotation for sk_ll_usec
  - net: add missing data-race annotations around sk->sk_peek_off
  - net: add missing READ_ONCE(sk->sk_rcvbuf) annotation
  - net: add missing READ_ONCE(sk->sk_sndbuf) annotation
  - net: add missing READ_ONCE(sk->sk_rcvlowat) annotation
  - net: annotate data-races around sk->sk_max_pacing_rate
  - mISDN: hfcpci: Fix potential deadlock on &hc->lock
  - net: sched: cls_u32: Fix match key mis-addressing
  - perf test uprobe_from_different_cu: Skip if there is no gcc
  - net: dsa: fix value check in bcm_sf2_sw_probe()
  - rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length
  - bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing
  - net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer()
  - net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx
  - wifi: cfg80211: Fix return value in scan logic
  - KVM: s390: fix sthyi error handling
  - word-at-a-time: use the same return type for has_zero regardless of endianness
  - arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux
  - perf: Fix function pointer case
  - io_uring: gate iowait schedule on having pending requests
  - ASoC: cs42l51: fix driver to properly autoload with automatic module loading
  - io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq
  - selftests: mptcp: depend on SYN_COOKIES
  - cpufreq: intel_pstate: Drop ACPI _PSS states table patching
  - ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily
  - ACPI: processor: perflib: Use the "no limit" frequency QoS
  - dm cache policy smq: ensure IO doesn't prevent cleaner policy progress
  - ceph: never send metrics if disable_send_metrics is set
  - ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register
  - s390/dasd: fix hanging device after quiesce/resume
  - virtio-net: fix race between set queues and probe
  - btrfs: check if the transaction was aborted at btrfs_wait_for_commit()
  - staging: r8712: Fix memory leak in _r8712_init_xmit_priv()
  - staging: rtl8712: Use constants from <linux/ieee80211.h>
  - KVM: VMX: Don't fudge CR0 and CR4 for restricted L2 guest
  - KVM: nVMX: Do not clear CR3 load/store exiting bits if L1 wants 'em
  - KVM: VMX: Fold ept_update_paging_mode_cr0() back into vmx_set_cr0()
  - KVM: VMX: Invert handling of CR0.WP for EPT without unrestricted guest
  - irqchip/gic-v4.1: Properly lock VPEs when doing a directLPI invalidation
  - irq-bcm6345-l1: Do not assume a fixed block to cpu mapping
  - tpm_tis: Explicitly check for error code
  - nfsd: Remove incorrect check in nfsd4_validate_stateid
  - file: always lock position for FMODE_ATOMIC_POS
  - btrfs: check for commit error at btrfs_attach_transaction_barrier()
  - hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled
  - ALSA: hda/relatek: Enable Mute LED on HP 250 G8
  - tty: n_gsm: fix UAF in gsm_cleanup_mux
  - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
  - Documentation: security-bugs.rst: clarify CVE handling
  - Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group
  - Revert "usb: xhci: tegra: Fix error check"
  - usb: xhci-mtk: set the dma max_seg_size
  - USB: quirks: add quirk for Focusrite Scarlett
  - usb: ohci-at91: Fix the unhandle interrupt when resume
  - usb: dwc3: don't reset device side if dwc3 was configured as host-only
  - usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy
  - Revert "usb: dwc3: core: Enable AutoRetry feature in the controller"
  - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED
  - USB: serial: simple: sort driver entries
  - USB: serial: simple: add Kaufmann RKS+CAN VCP
  - USB: serial: option: add Quectel EC200A module support
  - USB: serial: option: support Quectel EM060K_128
  - serial: sifive: Fix sifive_serial_console_setup() section
  - serial: 8250_dw: Preserve original value of DLF register
  - serial: qcom-geni: drop bogus runtime pm state update
  - USB: gadget: Fix the memory leak in raw_gadget driver
  - Revert "usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()"
  - ring-buffer: Fix wrong stat of cpu_buffer->read
  - ata: pata_ns87415: mark ns87560_tf_read static
  - dm raid: protect md_stop() with 'reconfig_mutex'
  - dm raid: clean up four equivalent goto tags in raid_ctr()
  - dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths
  - block: Fix a source code comment in include/uapi/linux/blkzoned.h
  - ASoC: fsl_spdif: Silence output on stop
  - drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb()
  - RDMA/mthca: Fix crash when polling CQ for shared QPs
  - drm/msm/adreno: Fix snapshot BINDLESS_DATA size
  - drm/msm/dpu: drop enum dpu_core_perf_data_bus_id
  - RDMA/mlx4: Make check for invalid flags stricter
  - tipc: stop tipc crypto on failure in tipc_node_create
  - tipc: check return value of pskb_trim()
  - benet: fix return value check in be_lancer_xmit_workarounds()
  - net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64
  - net/sched: mqprio: add extack to mqprio_parse_nlattr()
  - net/sched: mqprio: refactor nlattr parsing to a separate function
  - netfilter: nftables: add helper function to validate set element data
  - netfilter: nft_set_rbtree: fix overlap expiration walk
  - platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100
  - team: reset team's flags when down link is P2P device
  - bonding: reset bond's flags when down link is P2P device
  - ice: Fix memory management in ice_ethtool_fdir.c
  - ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address
  - ethernet: atheros: fix return value check in atl1e_tso_csum()
  - phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
  - vxlan: calculate correct header length for GPE
  - vxlan: move to its own directory
  - net: phy: marvell10g: fix 88x3310 power up
  - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
  - media: staging: atomisp: select V4L2_FWNODE
  - phy: qcom-snps-femto-v2: properly enable ref clock
  - phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend
  - phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
  - phy: qcom-snps: Use dev_err_probe() to simplify code
  - ext4: fix to check return value of freeze_bdev() in ext4_shutdown()
  - pwm: meson: fix handling of period/duty if greater than UINT_MAX
  - pwm: meson: Simplify duplicated per-channel tracking
  - fs: dlm: interrupt posix locks only when process is killed
  - dlm: rearrange async condition return
  - dlm: cleanup plock_op vs plock_xop
  - PCI/ASPM: Avoid link retraining race
  - PCI/ASPM: Factor out pcie_wait_for_retrain()
  - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link()
  - i2c: nomadik: Remove a useless call in the remove function
  - i2c: nomadik: Use devm_clk_get_enabled()
  - i2c: nomadik: Remove unnecessary goto label
  - i2c: Improve size determinations
  - i2c: Delete error messages for failed memory allocations
  - btrfs: fix extent buffer leak after tree mod log failure at split_node()
  - btrfs: fix race between quota disable and relocation
  - gpio: tps68470: Make tps68470_gpio_output() always set the initial value
  - io_uring: don't audit the capability check in io_uring_create()
  - KVM: s390: pv: fix index value of replaced ASCE
  - arm64/mpam: update reminder message about MBHDL option
  - !4388 intel: backport Intel SST TPMI support
  - !4387 intel: backport uncore freq control tpmi support for BHS platform
  - !4202 Intel: Backport GNR/SRF pmu uncore support back to kernel 5.10
  - !4273 Intel: Backport SRF/GRR perf cstate support back to kernel 5.10
  - !4048 [OLK-5.10] Intel: Backport PEBS format 5 support to OLK-5.10 for GNR/SRF Timed PEBS enabling
  - !4433 【OLK-5.10】Add PCH less Boot support on GNR/SRF
  - !4230 [OLK-5.10] Intel: backport to support RAS EDAC feature on Granite Rapids(GNR) and Sierra Forest(SRF) server
  - !4617 Fix the bug of tp negotiation concurrency
  - hwtracing: hisi_ptt: Move type check to the beginning of hisi_ptt_pmu_event_init()
  - ubcore: fix the bug of tp negotiation concurrency
  - binder: fix use-after-free in shinker's callback
  - !4623 i2c: Optimized the value setting of maxwrite limit to  fifo depth - 1
  - !4510  ubi: fastmap: Optimize ubi wl algorithm to improve flash service life
  - f2fs: explicitly null-terminate the xattr list
  - !4220 backport some patches for kunpeng hccs
  - i2c: hisi: Add clearing tx aempty interrupt operation
  - i2c: hisi: Optimized the value setting of maxwrite limit to fifo depth - 1
  - ubi: fastmap: Add control in 'UBI_IOCATT' ioctl to reserve PEBs for filling pools
  - ubi: fastmap: Add module parameter to control reserving filling pool PEBs
  - ubi: fastmap: Fix lapsed wear leveling for first 64 PEBs
  - ubi: fastmap: Get wl PEB even ec beyonds the 'max' if free PEBs are run out
  - ubi: fastmap: may_reserve_for_fm: Don't reserve PEB if fm_anchor exists
  - ubi: fastmap: Remove unneeded break condition while filling pools
  - ubi: fastmap: Wait until there are enough free PEBs before filling pools
  - ubi: fastmap: Use free pebs reserved for bad block handling
  - ubi: Replace erase_block() with sync_erase()
  - ubi: fastmap: Allocate memory with GFP_NOFS in ubi_update_fastmap
  - ubi: fastmap: erase_block: Get erase counter from wl_entry rather than flash
  - ubi: fastmap: Fix missed ec updating after erasing old fastmap data block
  - ubi: Simplify bool conversion
  - ubi: Fix repeated words in comments
  - ubi: fastmap: Check wl_pool for free peb before wear leveling
  - ubi: fastmap: Use the bitmap API to allocate bitmaps
  - i2c: i801: Add support for Intel Birch Stream SoC
  - spi: intel-pci: Add support for Granite Rapids SPI serial flash
  - config: update Intel Uncore freq control to openeuler_defconfig for x86
  - config: update Intel SST on TPMI to openeuler_defconfig for x86
  - platform/x86: intel-uncore-freq: Conditionally create attribute for read frequency
  - platform/x86/intel-uncore-freq: Ignore minor version change
  - platform/x86/intel-uncore-freq: tpmi: Provide cluster level control
  - platform/x86/intel-uncore-freq: Support for cluster level controls
  - platform/x86/intel-uncore-freq: Uncore frequency control via TPMI
  - platform/x86/intel-uncore-freq: Return error on write frequency
  - platform/x86: intel-uncore-freq: fix uncore_freq_common_init() error codes
  - platform/x86/intel-uncore-freq: Split common and enumeration part
  - platform/x86: ISST: Ignore minor version change
  - platform/x86: intel_speed_select_if: Remove hardcoded map size
  - platform/x86: ISST: Allow level 0 to be not present
  - platform/x86: ISST: Use fuse enabled mask instead of allowed levels
  - platform/x86: ISST: Reduce noise for missing numa information in logs
  - platform/x86: ISST: Fix usage counter
  - platform/x86: ISST: Reset default callback on unregister
  - platform/x86: ISST: Remove 8 socket limit
  - platform/x86: ISST: unlock on error path in tpmi_sst_init()
  - platform/x86: ISST: Add suspend/resume callbacks
  - platform/x86: ISST: Add SST-TF support via TPMI
  - platform/x86: ISST: Add SST-BF support via TPMI
  - platform/x86: ISST: Add SST-PP support via TPMI
  - platform/x86: ISST: Add SST-CP support via TPMI
  - platform/x86: ISST: Parse SST MMIO and update instance
  - platform/x86: ISST: Enumerate TPMI SST and create framework
  - platform/x86: ISST: Add support for MSR 0x54
  - platform/x86: ISST: Add API version of the target
  - platform/x86: ISST: Add IOCTL default callback
  - platform/x86: ISST: Add TPMI target
  - platform/x86: ISST: Fix kernel documentation warnings
  - platform/x86: ISST: Increase range of valid mail box commands
  - ACPI: APEI: EINJ: warn on invalid argument when explicitly indicated by platform
  - ACPI: APEI: EINJ: Add CXL error types
  - ACPI: APEI: EINJ: Limit error type to 32-bit width
  - ACPI: APEI: EINJ: Refactor available_error_type_show()
  - ACPI: APEI: EINJ: Fix formatting errors
  - ACPI, APEI, EINJ: Refuse to inject into the zero page
  - perf/x86/intel/cstate: Add Grand Ridge support
  - perf/x86/intel/cstate: Add Sierra Forest support
  - x86/smp: Export symbol cpu_clustergroup_mask()
  - perf/x86/intel/cstate: Cleanup duplicate attr_groups
  - soc: hisilicon: kunpeng_hccs: Support the platform with PCC type3 and interrupt ack
  - doc: kunpeng_hccs: Fix incorrect email domain name
  - soc: hisilicon: kunpeng_hccs: Remove an unused blank line
  - soc: hisilicon: kunpeng_hccs: Add failure log for no _CRS method
  - soc: hisilicon: kunpeng_hccs: Fix some incorrect format strings
  - Revert "soc: hisilicon: kunpeng_hccs: Support the platform with PCC type3 and interrupt ack"
  - Revert "soc: hisilicon: kunpeng_hccs: Add failure log for no _CRS method"
  - Revert "soc: hisilicon: kunpeng_hccs: Fix some incorrect format strings"
  - perf/x86/intel/uncore: Support Sierra Forest and Grand Ridge
  - perf/x86/intel/uncore: Support IIO free-running counters on GNR
  - perf/x86/intel/uncore: Support Granite Rapids
  - perf/x86/uncore: Use u64 to replace unsigned for the uncore offsets array
  - perf/x86/intel/uncore: Generic uncore_get_uncores and MMIO format of SPR
  - x86/cpu: Fix Crestmont uarch
  - EDAC/i10nm: Skip the absent memory controllers
  - EDAC/i10nm: Add Intel Sierra Forest server support
  - EDAC/i10nm: Add Intel Granite Rapids server support
  - EDAC/i10nm: Make more configurations CPU model specific
  - perf/x86/intel: Increase max number of the fixed counters
  - KVM: x86: use the KVM side max supported fixed counter
  - perf/x86/intel: Enable PEBS format 5
  - perf/x86/intel: Fix PEBS-via-PT reload base value for Extended PEBS


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-190.0.0.103
changelog:
  - !4928  drm/bridge: sii902x: Fix probing race issue
  - !4931  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
  - !4809  netfilter: nft_set_rbtree: skip end interval element from gc
  - !4940  apparmor: avoid crash when parsed profile name is empty
  - !4901  fix CVE-2021-47036
  - !4868  net: openvswitch: limit the number of recursions from action sets
  - apparmor: avoid crash when parsed profile name is empty
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
  - !4861  ext4: regenerate buddy after block freeing failed if under fc replay
  - drm/bridge: sii902x: Fix probing race issue
  - !4857  x86/srso: Add SRSO mitigation for Hygon processors
  - !4657 perf/x86/amd/uncore: Fix memory leak for events array
  - !4902 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
  - Input: powermate - fix use-after-free in powermate_config_complete
  - udp: properly flush normal packet at GRO time
  - udp: skip L4 aggregation for UDP tunnel packets
  - !4891  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
  - net: openvswitch: limit the number of recursions from action sets
  - ext4: regenerate buddy after block freeing failed if under fc replay
  - x86/srso: Add SRSO mitigation for Hygon processors
  - !4847  btrfs: mainline backport
  - !4529 crypto: hisilicon/qm - add bracket protection for macro parameters
  - btrfs: fix deadlock when cloning inline extents and using qgroups
  - btrfs: do not start and wait for delalloc on snapshot roots on transaction commit
  - !4678  f2fs: fix to avoid dirent corruption
  - !4742  block: add check that partition length needs to be aligned with block size
  - !4805  CVE-2023-52451 backport to OLK-5.10 v2
  - !4803  CVE-2024-26583
  - !4794  serial: imx: fix tx statemachine deadlock
  - !4702  efivarfs: force RO when remounting if SetVariable is not supported
  - netfilter: nft_set_rbtree: skip end interval element from gc
  - !4790 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
  - powerpc/pseries/memhp: Fix access beyond end of drmem array
  - powerpc/pseries/memhotplug: Quieten some DLPAR operations
  - tls: fix race between tx work scheduling and socket close
  - tls: fix race between async notify and socket close
  - net: tls: factor out tls_*crypt_async_wait()
  - tls: rx: simplify async wait
  - !4764  binder: signal epoll threads of self-work
  - !4674 Backport 5.10.193- 5.10.194 LTS patches from upstream
  - !4747  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
  - serial: imx: fix tx statemachine deadlock
  - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
  - !3123 Add pcie acs and no-bus-reset quirk for mucse Nics
  - !4772  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
  - x86/fpu: Stop relying on userspace for info to fault in xsave buffer
  - !4729  serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed
  - binder: signal epoll threads of self-work
  - !4690  CVE-2024-26586
  - !4737  blk-mq: fix IO hang from sbitmap wakeup race
  - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
  - !4672  uio: Fix use-after-free in uio_open
  - block: add check that partition length needs to be aligned with block size
  - blk-mq: fix IO hang from sbitmap wakeup race
  - !4706  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
  - serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed
  - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
  - efivarfs: force RO when remounting if SetVariable is not supported
  - mlxsw: spectrum_acl_tcam: Fix stack corruption
  - mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
  - mlxsw: spectrum_acl_tcam: Make fini symmetric to init
  - mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
  - mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
  - mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
  - f2fs: fix to avoid dirent corruption
  - rcu-tasks: Add trc_inspect_reader() checks for exiting critical section
  - rcu-tasks: Wait for trc_read_check_handler() IPIs
  - rcu-tasks: Fix IPI failure handling in trc_wait_for_one_reader
  - Revert "MIPS: Alchemy: fix dbdma2"
  - Revert "drm/amdgpu: install stub fence into potential unused fence pointers"
  - mhi: pci_generic: Fix implicit conversion warning
  - ARM: module: Use module_init_layout_section() to spot init sections
  - arm64: module: Use module_init_layout_section() to spot init sections
  - arm64: module-plts: inline linux/moduleloader.h
  - module: Expose module_init_layout_section()
  - ASoC: Intel: sof_sdw: include rt711.h for RT711 JD mode
  - dma-buf/sw_sync: Avoid recursive lock during fence signal
  - pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function}
  - clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
  - scsi: core: raid_class: Remove raid_component_add()
  - scsi: snic: Fix double free in snic_tgt_create()
  - ASoC: rt711: add two jack detection modes
  - drm/i915: Fix premature release of request's reusable memory
  - cgroup/cpuset: Free DL BW in case can_attach() fails
  - sched/deadline: Create DL BW alloc, free & check overflow interface
  - cgroup/cpuset: Iterate only if DEADLINE tasks are present
  - sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets
  - sched/cpuset: Bring back cpuset_mutex
  - cgroup/cpuset: Rename functions dealing with DEADLINE accounting
  - timers/nohz: Switch to ONESHOT_STOPPED in the low-res handler when the tick is stopped
  - tick: Detect and fix jiffies update stall
  - torture: Fix hang during kthread shutdown phase
  - drm/display/dp: Fix the DP DSC Receiver cap size
  - drm/vmwgfx: Fix shader stage validation
  - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus
  - media: vcodec: Fix potential array out-of-bounds in encoder queue_setup
  - of: dynamic: Refactor action prints to not use "%pOF" inside devtree_lock
  - radix tree: remove unused variable
  - lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels
  - batman-adv: Fix batadv_v_ogm_aggr_send memory leak
  - batman-adv: Fix TT global entry leak when client roamed back
  - batman-adv: Do not get eth header before batadv_check_management_packet
  - batman-adv: Don't increase MTU when set by user
  - batman-adv: Trigger events for auto adjusted MTU
  - selinux: set next pointer before attaching to list
  - nfsd: Fix race to FREE_STATEID and cl_revoked
  - NFS: Fix a use after free in nfs_direct_join_group()
  - mm: add a call to flush_cache_vmap() in vmap_pfn()
  - clk: Fix slab-out-of-bounds error in devm_clk_release()
  - NFSv4: Fix dropped lock for racing OPEN and delegation return
  - ibmveth: Use dcbf rather than dcbfl
  - bonding: fix macvlan over alb bond support
  - net: remove bond_slave_has_mac_rcu()
  - rtnetlink: Reject negative ifindexes in RTM_NEWLINK
  - rtnetlink: return ENODEV when ifname does not exist and group is given
  - netfilter: nf_tables: fix out of memory error handling
  - net/sched: fix a qdisc modification with ambiguous command request
  - igb: Avoid starting unnecessary workqueues
  - ice: fix receive buffer size miscalculation
  - net: bcmgenet: Fix return value check for fixed_phy_register()
  - net: bgmac: Fix return value check for fixed_phy_register()
  - ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
  - dccp: annotate data-races in dccp_poll()
  - sock: annotate data-races around prot->memory_pressure
  - octeontx2-af: SDP: fix receive link config
  - rbd: prevent busy loop when requesting exclusive lock
  - rbd: retrieve and check lock owner twice before blocklisting
  - rbd: make get_lock_owner_info() return a single locker or NULL
  - libceph, rbd: ignore addr->type while comparing in some cases
  - drm/amd/display: check TG is non-null before checking if enabled
  - drm/amd/display: do not wait for mpc idle if tg is disabled
  - ALSA: pcm: Fix potential data race at PCM memory allocation helpers
  - dm integrity: reduce vmalloc space footprint on 32-bit architectures
  - dm integrity: increase RECALC_SECTORS to improve recalculate speed
  - fbdev: fix potential OOB read in fast_imageblit()
  - fbdev: Fix sys_imageblit() for arbitrary image widths
  - fbdev: Improve performance of sys_imageblit()
  - MIPS: cpu-features: Use boot_cpu_type for CPU type based features
  - MIPS: cpu-features: Enable octeon_cache by cpu_type
  - fs: dlm: fix mismatch of plock results from userspace
  - fs: dlm: use dlm_plock_info for do_unlock_close
  - fs: dlm: change plock interrupted message to debug again
  - fs: dlm: add pid to debug log
  - dlm: replace usage of found with dedicated list iterator variable
  - dlm: improve plock logging if interrupted
  - PCI: acpiphp: Reassign resources on bridge if necessary
  - xprtrdma: Remap Receive buffers after a reconnect
  - NFSv4: fix out path in __nfs4_get_acl_uncached
  - uio: Fix use-after-free in uio_open
  - perf/x86/amd/uncore: Fix memory leak for events array
  - crypto: hisilicon/qm - add bracket protection for macro parameters
  - PCI: Add pcie acs and no-bus-reset quirk for mucse Nics


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-191.0.0.104
changelog:
  - !5152  arm64/mpam: Remove warning about no msc corresponding to the online cpu
  - arm64/mpam: Remove warning about no msc corresponding to the online cpu
  - !5145  arm64/mpam: Expand the monitor number of the resctrl root
  - !5144  arm64/mpam: Fix use-after-free when deleting resource groups
  - arm64/mpam: Expand the monitor number of the resctrl root
  - arm64/mpam: Fix use-after-free when deleting resource groups
  - !5117  fix CVE-2023-52527
  - !4648 [OLK-5.10] Intel: backport TPMI RAPL driver for GNR/SRF
  - !4842 Intel-sig: intel_idle: add Sierra Forest SoC support on 5.10
  - !5113  fix CVE-2023-52578
  - !5031 Backport 5.10.196 -5.10.197 LTS patches from upstream
  - l2tp: pass correct message length to ip6_append_data
  - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
  - net: fix kabi check warning
  - net: Fix unwanted sign extension in netdev_stats_to_stats64()
  - net: bridge: use DEV_STATS_INC()
  - net: add atomic_long_t to net_device_stats fields
  - !5063  dccp: fix dccp_v4_err()/dccp_v6_err() again
  - !5062  team: fix null-ptr-deref when team device type is changed
  - !5096  wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet
  - !5044  bugfix for pbha
  - !5078  RDMA/rxe: Return CQE error if invalid lkey was supplied
  - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet
  - !4261 [22.03-LTS-SP3] Fix crash on platfoms using legacy KVM MMU Notifier APIs
  - !4966 [sync] PR-4934:  arm64: head.S: always initialize PSTATE
  - RDMA/rxe: Return CQE error if invalid lkey was supplied
  - !5051  dm: limit the number of targets and parameter size area
  - !4933  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
  - !5064  net: rds: Fix possible NULL-pointer dereference
  - !5058  net: fix possible store tearing in neigh_periodic_work()
  - !4968  sched: migtate user interface from smart grid to sched bpf
  - !5033 v3  Remove WQ_FLAG_BOOKMARK flag
  - !5032  net/sched: act_ct: fix wild memory access when clearing fragments
  - net: rds: Fix possible NULL-pointer dereference
  - dccp: fix dccp_v4_err()/dccp_v6_err() again
  - team: fix null-ptr-deref when team device type is changed
  - net: fix possible store tearing in neigh_periodic_work()
  - dm: limit the number of targets and parameter size area
  - arm64: mm: Use subsequent bits to improve future compatibility for pbha
  - arm64: mm: Use corrent pte val in arch_vm_get_page_prot
  - sched: remove wait bookmarks
  - filemap: remove use of wait bookmarks
  - net/sched: act_ct: fix wild memory access when clearing fragments
  - !5004  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
  - scsi: pm8001: Setup IRQs on resume
  - scsi: megaraid_sas: Fix deadlock on firmware crashdump
  - i2c: aspeed: Reset the i2c controller when timeout occurs
  - tracefs: Add missing lockdown check to tracefs_create_dir()
  - nfsd: fix change_info in NFSv4 RENAME replies
  - tracing: Have option files inc the trace array ref count
  - tracing: Have current_trace inc the trace array ref count
  - drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma
  - drm/amdgpu: fix amdgpu_cs_p1_user_fence
  - btrfs: release path before inode lookup during the ino lookup ioctl
  - btrfs: fix lockdep splat and potential deadlock after failure running delayed items
  - ovl: fix incorrect fdput() on aio completion
  - attr: block mode changes of symlinks
  - md/raid1: fix error: ISO C90 forbids mixed declarations
  - samples/hw_breakpoint: fix building without module unloading
  - x86/boot/compressed: Reserve more memory for page tables
  - scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file()
  - selftests: tracing: Fix to unmount tracefs for recovering environment
  - scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir()
  - drm: gm12u320: Fix the timeout usage for usb_bulk_msg()
  - btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super
  - btrfs: add a helper to read the superblock metadata_uuid
  - btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h
  - mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller
  - mtd: rawnand: brcmnand: Allow SoC to provide I/O operations
  - kobject: Add sanity check for kset->kobj.ktype in kset_register()
  - media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning
  - serial: cpm_uart: Avoid suspicious locking
  - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
  - usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc
  - media: pci: cx23885: replace BUG with error return
  - media: tuners: qt1010: replace BUG_ON with a regular error
  - media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer
  - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()
  - media: anysee: fix null-ptr-deref in anysee_master_xfer
  - media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
  - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
  - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
  - powerpc/pseries: fix possible memory leak in ibmebus_bus_init()
  - jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
  - fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
  - md: raid1: fix potential OOB in raid1_remove_disk()
  - bus: ti-sysc: Configure uart quirks for k3 SoC
  - drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
  - ALSA: hda: intel-dsp-cfg: add LunarLake support
  - samples/hw_breakpoint: Fix kernel BUG 'invalid opcode: 0000'
  - drm/bridge: tc358762: Instruct DSI host to generate HSE packets
  - wifi: mac80211_hwsim: drop short frames
  - netfilter: ebtables: fix fortify warnings in size_entry_mwt()
  - alx: fix OOB-read compiler warning
  - mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450
  - tpm_tis: Resend command to recover from data transfer errors
  - crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
  - wifi: wil6210: fix fortify warnings
  - wifi: mwifiex: fix fortify warning
  - wifi: ath9k: fix printk specifier
  - wifi: ath9k: fix fortify warnings
  - crypto: lrw,xts - Replace strlcpy with strscpy
  - devlink: remove reload failed checks in params get/set callbacks
  - hw_breakpoint: fix single-stepping when using bpf_overflow_handler
  - ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and iMac12,2
  - ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470
  - scftorture: Forgive memory-allocation failure if KASAN
  - rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle()
  - kernel/fork: beware of __put_task_struct() calling context
  - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
  - locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock
  - btrfs: output extra debug info if we failed to find an inline backref
  - autofs: fix memory leak of waitqueues in autofs_catatonic_mode
  - !4987  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
  - !4991  CVE-2023-52568
  - !4994  mpam/mpam_ctrlmon: update monitor config with its parent's ctrl_val
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
  - !4988  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
  - !4979  CVE-2021-47028
  - mpam/mpam_ctrlmon: update monitor config with its parent's ctrl_val
  - x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe
  - !4925 v2  btrfs: do not ASSERT() if the newly created subvolume already got read
  - !4905 Backport 5.10.195 LTS patches from upstream
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
  - !4339 修复pmem_legacy_device未被编译问题
  - mt76: mt7915: fix txrate reporting
  - mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
  - sched: migtate user interface from smart grid to sched bpf
  - arm64: head.S: always initialize PSTATE
  - drm/mediatek: Fix backport issue in mtk_drm_gem_prime_vmap()
  - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
  - parisc: Drop loops_per_jiffy from per_cpu struct
  - drm/amd/display: Fix a bug when searching for insert_above_mpcc
  - kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
  - ixgbe: fix timestamp configuration code
  - ipv6: fix ip6_sock_set_addr_preferences() typo
  - platform/mellanox: mlxbf-tmfifo: Drop jumbo frames
  - platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors
  - kcm: Fix memory leak in error path of kcm_sendmsg()
  - r8152: check budget for r8152_poll()
  - hsr: Fix uninit-value access in fill_frame_info()
  - net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
  - net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()
  - net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add
  - kselftest/runner.sh: Propagate SIGTERM to runner child
  - selftests/kselftest/runner/run_one(): allow running non-executable files
  - bus: mhi: host: Skip MHI reset if device is in RDDM
  - ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2
  - ARM: dts: samsung: exynos4210-i9100: Fix LCD screen's physical size
  - scsi: qla2xxx: Flush mailbox commands on chip reset
  - scsi: qla2xxx: Fix crash in PCIe error handling
  - scsi: qla2xxx: Consolidate zio threshold setting for both FCP & NVMe
  - scsi: qla2xxx: If fcport is undergoing deletion complete I/O with retry
  - arm64: sdei: abort running SDEI handlers during crash
  - ACPI: APEI: explicit init of HEST and GHES in apci_init()
  - perf hists browser: Fix the number of entries for 'e' key
  - perf tools: Handle old data in PERF_RECORD_ATTR
  - perf hists browser: Fix hierarchy mode header
  - drm/amd/display: prevent potential division by zero errors
  - mtd: rawnand: brcmnand: Fix potential false time out warning
  - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write
  - mtd: rawnand: brcmnand: Fix crash during the panic_write
  - btrfs: use the correct superblock to compare fsid in btrfs_validate_super
  - btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART
  - fuse: nlookup missing decrement in fuse_direntplus_link
  - ata: pata_ftide010: Add missing MODULE_DESCRIPTION
  - ata: sata_gemini: Add missing MODULE_DESCRIPTION
  - ext4: add correct group descriptors and reserved GDT blocks to system zone
  - sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory()
  - net: dsa: sja1105: fix -ENOSPC when replacing the same tc-cbs too many times
  - net: dsa: sja1105: fix bandwidth discrepancy between tc-cbs software and offload
  - idr: fix param name in idr_alloc_cyclic() doc
  - s390/zcrypt: don't leak memory if dev_set_name() fails
  - igb: Change IGB_MIN to allow set rx/tx value between 64 and 80
  - igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80
  - igc: Change IGC_MIN to allow set rx/tx value between 64 and 80
  - kcm: Destroy mutex in kcm_exit_net()
  - af_unix: Fix data race around sk->sk_err.
  - af_unix: Fix data-races around sk->sk_shutdown.
  - af_unix: Fix data-race around unix_tot_inflight.
  - af_unix: Fix data-races around user->unix_inflight.
  - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
  - veth: Fixing transmit return status for dropped packets
  - igb: disable virtualization features on 82580
  - drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt()
  - drm/i915/gvt: Save/restore HW status to support GVT suspend/resume
  - net: read sk->sk_family once in sk_mc_loop()
  - ipv4: annotate data-races around fi->fib_dead
  - sctp: annotate data-races around sk->sk_wmem_queued
  - net/sched: fq_pie: avoid stalls in fq_pie_timer()
  - pwm: lpc32xx: Remove handling of PWM channels
  - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load
  - perf top: Don't pass an ERR_PTR() directly to perf_session__delete()
  - x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm()
  - perf annotate bpf: Don't enclose non-debug code with an assert()
  - backlight: gpio_backlight: Drop output GPIO direction check for initial power state
  - kconfig: fix possible buffer overflow
  - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info
  - NFS: Fix a potential data corruption
  - soc: qcom: qmi_encdec: Restrict string length in decode
  - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
  - clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz
  - dt-bindings: clock: xlnx,versal-clk: drop select:false
  - pinctrl: cherryview: fix address_space_handler() argument
  - parisc: led: Reduce CPU overhead for disk & lan LED computation
  - parisc: led: Fix LAN receive and transmit LEDs
  - lib/test_meminit: allocate pages up to order MAX_ORDER
  - drm/ast: Fix DRAM init on AST2200
  - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
  - scsi: qla2xxx: Remove unsupported ql2xenabledif option
  - scsi: qla2xxx: Turn off noisy message log
  - scsi: qla2xxx: Fix erroneous link up failure
  - scsi: qla2xxx: fix inconsistent TMF timeout
  - scsi: qla2xxx: Fix deletion race condition
  - io_uring: break iopolling on signal
  - io_uring: break out of iowq iopoll on teardown
  - io_uring: always lock in io_apoll_task_func
  - net/ipv6: SKB symmetric hash should incorporate transport ports
  - udf: initialize newblock to 0
  - md/md-bitmap: remove unnecessary local variable in backlog_store()
  - usb: typec: tcpci: clear the fault status bit
  - usb: typec: bus: verify partner exists in typec_altmode_attention
  - cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug
  - crypto: stm32 - fix loop iterating through scatterlist for DMA
  - s390/ipl: add missing secure/has_secure file to ipl type 'unknown'
  - pstore/ram: Check start of empty przs during init
  - fsverity: skip PKCS#7 parser when keyring is empty
  - net: handle ARPHRD_PPP in dev_is_mac_header_xmit()
  - X.509: if signature is unsupported skip validation
  - dccp: Fix out of bounds access in DCCP error handler
  - dlm: fix plock lookup when using multiple lockspaces
  - parisc: Fix /proc/cpuinfo output for lscpu
  - procfs: block chmod on /proc/thread-self/comm
  - Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset"
  - ntb: Fix calculation ntb_transport_tx_free_entry()
  - ntb: Clean up tx tail index on link down
  - ntb: Drop packets when qp link is down
  - Revert "scsi: qla2xxx: Fix buffer overrun"
  - media: dvb: symbol fixup for dvb_attach()
  - arm64: csum: Fix OoB access in IP checksum code for negative lengths
  - xtensa: PMU: fix base address for the newer hardware
  - backlight/lv5207lp: Compare against struct fb_info.device
  - backlight/bd6107: Compare against struct fb_info.device
  - backlight/gpio_backlight: Compare against struct fb_info.device
  - ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch()
  - scsi: core: Fix the scsi_set_resid() documentation
  - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
  - PM / devfreq: Fix leak in devfreq_dev_release()
  - skbuff: skb_segment, Call zero copy functions before using skbuff frags
  - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
  - virtio_ring: fix avail_wrap_counter in virtqueue_add_packed
  - cpufreq: Fix the race condition while updating the transition_task of policy
  - dmaengine: ste_dma40: Add missing IRQ check in d40_probe
  - um: Fix hostaudio build errors
  - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume()
  - mtd: spi-nor: Check bus width while setting QE bit
  - rpmsg: glink: Add check for kstrdup
  - phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write
  - phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate
  - phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
  - mtd: rawnand: brcmnand: Fix mtd oobsize
  - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS
  - HID: multitouch: Correct devm device reference for hidinput input_dev name
  - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode()
  - RDMA/siw: Correct wrong debug message
  - RDMA/siw: Balance the reference of cep->kref in the error path
  - Revert "IB/isert: Fix incorrect release of isert connection"
  - amba: bus: fix refcount leak
  - serial: tegra: handle clk prepare error in tegra_uart_hw_init()
  - scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock
  - cgroup:namespace: Remove unused cgroup_namespaces_init()
  - media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors
  - media: ov2680: Fix vflip / hflip set functions
  - media: ov2680: Fix ov2680_bayer_order()
  - media: ov2680: Remove auto-gain and auto-exposure controls
  - media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips
  - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
  - USB: gadget: f_mass_storage: Fix unused variable warning
  - media: go7007: Remove redundant if statement
  - iommu/vt-d: Fix to flush cache of PASID directory table
  - iommu/qcom: Disable and reset context bank before programming
  - fsi: aspeed: Reset master errors after CFAM reset
  - IB/uverbs: Fix an potential error pointer dereference
  - driver core: test_async: fix an error code
  - dma-buf/sync_file: Fix docs syntax
  - coresight: tmc: Explicit type conversions to prevent integer overflow
  - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly
  - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly
  - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly
  - x86/APM: drop the duplicate APM_MINOR_DEV macro
  - serial: sprd: Fix DMA buffer leak issue
  - serial: sprd: Assign sprd_port after initialized to avoid wrong access
  - scsi: qla4xxx: Add length check when parsing nlattrs
  - scsi: be2iscsi: Add length check when parsing nlattrs
  - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
  - scsi: iscsi: Add length check for nlattr payload
  - scsi: iscsi: Rename iscsi_set_param() to iscsi_if_set_param()
  - scsi: RDMA/srp: Fix residual handling
  - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host()
  - media: mediatek: vcodec: Return NULL if no vdec_fb is found
  - media: rkvdec: increase max supported height for H.264
  - media: cx24120: Add retval check for cx24120_message_send()
  - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()
  - media: dib7000p: Fix potential division by zero
  - drivers: usb: smsusb: fix error handling code in smsusb_init_device
  - media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()
  - media: i2c: tvp5150: check return value of devm_kasprintf()
  - media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables
  - NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ
  - NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN
  - NFSD: da_addr_body field missing in some GETDEVICEINFO replies
  - fs: lockd: avoid possible wrong NULL parameter
  - jfs: validate max amount of blocks before allocation.
  - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses
  - nfs/blocklayout: Use the passed in gfp flags
  - powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT
  - powerpc: Don't include lppaca.h in paca.h
  - wifi: ath10k: Use RMW accessors for changing LNKCTL
  - net/mlx5: Use RMW accessors for changing LNKCTL
  - drm/radeon: Use RMW accessors for changing LNKCTL
  - drm/amdgpu: Use RMW accessors for changing LNKCTL
  - powerpc/perf: Convert fsl_emb notifier to state machine callbacks
  - powerpc/fadump: reset dump area size if fadump memory reserve fails
  - vfio/type1: fix cap_migration information leak
  - clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op
  - clk: imx8mp: fix sai4 clock
  - PCI/ASPM: Use RMW accessors for changing LNKCTL
  - PCI: pciehp: Use RMW accessors for changing LNKCTL
  - pinctrl: mcp23s08: check return value of devm_kasprintf()
  - PCI: Mark NVIDIA T4 GPUs to avoid bus reset
  - clk: qcom: reset: Use the correct type of sleep/delay based on length
  - clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src
  - clk: qcom: gcc-sm8250: use ARRAY_SIZE instead of specifying num_parents
  - ext4: correct grp validation in ext4_mb_good_group
  - clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
  - clk: qcom: gcc-sc7180: use ARRAY_SIZE instead of specifying num_parents
  - clk: sunxi-ng: Modify mismatched function name
  - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init()
  - ipmi:ssif: Fix a memory leak when scanning for an adapter
  - ipmi:ssif: Add check for kstrdup
  - ALSA: ac97: Fix possible error value of *rac97
  - of: unittest: Fix overlay type in apply/revert check
  - bus: ti-sysc: Fix cast to enum warning
  - drm/mediatek: Fix potential memory leak if vmap() fail
  - bus: ti-sysc: Fix build warning for 64-bit build
  - drm/msm/a2xx: Call adreno_gpu_init() earlier
  - drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create()
  - smackfs: Prevent underflow in smk_set_cipso()
  - firmware: meson_sm: fix to avoid potential NULL pointer dereference
  - drm/msm/mdp5: Don't leak some plane state
  - drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
  - ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig
  - drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01
  - drm/armada: Fix off-by-one error in armada_overlay_get_property()
  - of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name()
  - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
  - drm/tegra: Remove superfluous error messages around platform_get_irq()
  - md/md-bitmap: hold 'reconfig_mutex' in backlog_store()
  - md/bitmap: don't set max_write_behind if there is no write mostly device
  - drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl'
  - arm64: dts: qcom: sdm845: Fix the min frequency of "ice_core_clk"
  - arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC
  - ARM: dts: BCM53573: Fix Ethernet info for Luxul devices
  - drm: adv7511: Fix low refresh rate register for ADV7533/5
  - ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split)
  - ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210
  - ARM: dts: s5pv210: adjust node names to DT spec
  - ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split)
  - ARM: dts: s3c64xx: align pinctrl with dtschema
  - x86/mm: Fix PAT bit missing from page protection modify mask
  - drm/etnaviv: fix dumping of active MMU context
  - ARM: dts: BCM53573: Use updated "spi-gpio" binding properties
  - ARM: dts: BCM53573: Add cells sizes to PCIe node
  - ARM: dts: BCM53573: Drop nonexistent #usb-cells
  - ARM: dts: BCM53573: Describe on-SoC BCM53125 rev 4 switch
  - ARM: dts: BCM5301X: Harmonize EHCI/OHCI DT nodes name
  - drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar()
  - arm64: dts: qcom: msm8996: Add missing interrupt to the USB2 controller
  - soc: qcom: ocmem: Fix NUM_PORTS & NUM_MACROS macros
  - soc: qcom: ocmem: Add OCMEM hardware version print
  - ASoC: stac9766: fix build errors with REGMAP_AC97
  - drm/bridge: tc358764: Fix debug print parameter order
  - netrom: Deny concurrent connect().
  - hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
  - mlxsw: i2c: Limit single transaction buffer size
  - mlxsw: i2c: Fix chunk size setting in output mailbox buffer
  - net: arcnet: Do not call kfree_skb() under local_irq_disable()
  - wifi: ath9k: use IS_ERR() with debugfs_create_dir()
  - Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave()
  - wifi: mwifiex: avoid possible NULL skb pointer dereference
  - wifi: ath9k: protect WMI command response buffer replacement with a lock
  - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx
  - samples/bpf: fix broken map lookup probe
  - wifi: mwifiex: Fix missed return in oob checks failed path
  - wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
  - fs: ocfs2: namei: check return value of ocfs2_add_entry()
  - lwt: Check LWTUNNEL_XMIT_CONTINUE strictly
  - lwt: Fix return values of BPF xmit ops
  - hwrng: iproc-rng200 - Implement suspend and resume calls
  - crypto: caam - fix unchecked return value error
  - ice: ice_aq_check_events: fix off-by-one check when filling buffer
  - selftests/bpf: Clean up fmod_ret in bench_rename test script
  - net: tcp: fix unexcepted socket die when snd_wnd is 0
  - Bluetooth: Fix potential use-after-free when clear keys
  - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe()
  - crypto: stm32 - Properly handle pm_runtime_get failing
  - selftests/bpf: fix static assert compilation issue for test_cls_*.c
  - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management
  - wifi: mwifiex: Fix OOB and integer underflow when rx packets
  - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM
  - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe()
  - wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
  - bpf: reject unhashed sockets in bpf_sk_assign
  - udp: re-score reuseport groups when connected sockets are present
  - regmap: rbtree: Use alloc_flags for memory allocations
  - hwrng: nomadik - keep clock enabled while hwrng is registered
  - tcp: tcp_enter_quickack_mode() should be static
  - bpf: Clear the probe_addr for uprobe
  - bpftool: Use a local bpf_perf_event_value to fix accessing its fields
  - cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit()
  - x86/efistub: Fix PCI ROM preservation in mixed mode
  - s390/paes: fix PKEY_TYPE_EP11_AES handling for secure keyblobs
  - s390/pkey: fix/harmonize internal keyblob headers
  - perf/imx_ddr: don't enable counter0 if none of 4 counters are used
  - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved
  - selftests/resctrl: Close perf value read fd on errors
  - selftests/resctrl: Unmount resctrl FS if child fails to run benchmark
  - selftests/resctrl: Don't leak buffer in fill_cache()
  - OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd()
  - refscale: Fix uninitalized use of wait_queue_head_t
  - selftests/harness: Actually report SKIP for signal tests
  - tmpfs: verify {g,u}id mount options correctly
  - eventfd: prevent underflow for eventfd semaphores
  - eventfd: Export eventfd_ctx_do_read()
  - reiserfs: Check the return value from __getblk()
  - Revert "net: macsec: preserve ingress frame ordering"
  - udf: Handle error when adding extent to a file
  - udf: Check consistency of Space Bitmap Descriptor
  - net: Avoid address overwrite in kernel_connect
  - platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications
  - ALSA: seq: oss: Fix racy open/close of MIDI devices
  - scsi: storvsc: Always set no_report_opcodes
  - sctp: handle invalid error codes without calling BUG()
  - bnx2x: fix page fault following EEH recovery
  - netlabel: fix shift wrapping bug in netlbl_catmap_setlong()
  - scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock
  - idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM
  - net: usb: qmi_wwan: add Quectel EM05GV2
  - vmbus_testing: fix wrong python syntax for integer value comparison
  - clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM
  - kprobes: Prohibit probing on CFI preamble symbol
  - security: keys: perform capable check only on privileged operations
  - ata: pata_arasan_cf: Use dev_err_probe() instead dev_err() in data_xfer()
  - ovl: Always reevaluate the file signature for IMA
  - platform/x86: huawei-wmi: Silence ambient light sensor
  - platform/x86: intel: hid: Always call BTNL ACPI method
  - ASoC: atmel: Fix the 8K sample parameter in I2SC master
  - ASoc: codecs: ES8316: Fix DMIC config
  - fs/nls: make load_nls() take a const parameter
  - s390/dasd: fix hanging device after request requeue
  - s390/dasd: use correct number of retries for ERP requests
  - m68k: Fix invalid .section syntax
  - vxlan: generalize vxlan_parse_gpe_hdr and remove unused args
  - ethernet: atheros: fix return value check in atl1c_tso_csum()
  - ASoC: da7219: Check for failure reading AAD IRQ events
  - ASoC: da7219: Flush pending AAD IRQ when suspending
  - 9p: virtio: make sure 'offs' is initialized in zc_request
  - media: pci: cx23885: fix error handling for cx23885 ATSC boards
  - media: pulse8-cec: handle possible ping error
  - phy: qcom-snps-femto-v2: use qcom_snps_hsphy_suspend/resume error code
  - ARM: dts: imx: Set default tuning step for imx7d usdhc
  - ARM: dts: imx: Adjust dma-apbh node name
  - ARM: dts: imx7s: Drop dma-apb interrupt-names
  - ARM: dts: imx: update sdma node name format
  - ASoC: rt5682: Fix a problem with error handling in the io init function of the soundwire
  - pinctrl: amd: Don't show `Invalid config param` errors
  - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse
  - nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()
  - fsi: master-ast-cf: Add MODULE_FIRMWARE macro
  - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
  - serial: sc16is7xx: fix bug when first setting GPIO direction
  - serial: sc16is7xx: fix broken port 0 uart init
  - serial: qcom-geni: fix opp vote on shutdown
  - staging: rtl8712: fix race condition
  - HID: wacom: remove the battery when the EKR is off
  - usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0
  - usb: dwc3: meson-g12a: do post init to fix broken usb after resumption
  - USB: serial: option: add FOXCONN T99W368/T99W373 product
  - USB: serial: option: add Quectel EM05G variant (0x030e)
  - modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules
  - rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff
  - net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index
  - mmc: au1xmmc: force non-modular build and remove symbol_get usage
  - ARM: pxa: remove use of symbol_get()
  - erofs: ensure that the post-EOF tails are all zeroed
  - btrfs: fix double free of anonymous device after snapshot creation failure
  - btrfs: do not ASSERT() if the newly created subvolume already got read
  - intel_idle: add Sierra Forest SoC support
  - config: update Intel RAPL on TPMI to openeuler_defconfig for x86
  - powercap: intel_rapl: Downgrade BIOS locked limits pr_warn() to pr_debug()
  - powercap: intel_rapl: Fix invalid setting of Power Limit 4
  - powercap: RAPL: Fix a NULL vs IS_ERR() bug
  - powercap: intel_rapl: Introduce RAPL TPMI interface driver
  - powercap: intel_rapl: Introduce core support for TPMI interface
  - powercap: intel_rapl: Introduce RAPL I/F type
  - powercap: intel_rapl: Make cpu optional for rapl_package
  - powercap: intel_rapl: Use topology interface in rapl_init_domains()
  - powercap: intel_rapl: Remove redundant cpu parameter
  - powercap: intel_rapl: Add support for lock bit per Power Limit
  - powercap: intel_rapl: Cleanup Power Limits support
  - powercap: intel_rapl: Use bitmap for Power Limits
  - thermal: int340x: processor_thermal: Refactor MMIO interface
  - powercap: intel_rapl: Change primitive order
  - powercap: intel_rapl: Use index to initialize primitive information
  - powercap: intel_rapl: Support per domain energy/power/time unit
  - powercap: intel_rapl: remove redundant store to value after multiply
  - powercap: intel_rapl: Support per Interface primitive information
  - powercap: intel_rapl: Support per Interface rapl_defaults
  - powercap: intel_rapl: Replace deprecated CPU-hotplug functions
  - powercap: intel_rapl: Use topology interface in rapl_add_package()
  - powercap: intel_rapl: Allow probing without CPUID match
  - powercap: intel_rapl: Remove unused field in struct rapl_if_priv
  - KVM: mmu: increase the mmu_notifier_count for legacy APIs
  - pmem: compile pmem legacy device while libnvdimm as a module


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-192.0.0.105
changelog:
  - !5342  CVE-2023-52447
  - !5364 v2  CVE-2023-52452
  - !5313  bus: mhi: host: Add alignment check for event ring read pointer
  - !5355  CVE-2023-52593
  - bpf: Fix accesses to uninit stack slots
  - bpf: Fix verification of indirect var-off stack access
  - bpf: Allow reads from uninit stack
  - bpf: expose bpf_strtol and bpf_strtoul to all program types
  - bpf, verifier: Fix memory leak in array reallocation for stack state
  - bpf: verifier: Use copy_array for jmp_history
  - bpf: verifier: Improve function state reallocation
  - wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
  - bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
  - bpf: Defer the free of inner map when necessary
  - bpf: Set need_defer as false when clearing fd array during map free
  - bpf: Add map and need_defer parameters to .map_fd_put_ptr()
  - !4632 [OLK-5.10] drivers: update yunsilicon drivers to version 1.1.0.375
  - !5307  drm/msm/dpu: Add mutex lock in control vblank irq
  - bus: mhi: host: Add alignment check for event ring read pointer
  - drm/msm/dpu: Add mutex lock in control vblank irq
  - !5242  Revert two stable patches to keep binary compatible
  - !5188 Backport 5.10.198 LTS patches from upstream
  - !5229  iommu/arm-smmu-v3: Disable ECMDQ before reset
  - !5240  powerpc/lib: Validate size for vector operations
  - !5231  af_unix: fix lockdep positive in sk_diag_dump_icons()
  - !5222  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
  - !5245  ceph: fix deadlock or deadcode of misusing dget()
  - mmc: renesas_sdhi: only reset SCC when its pointer is populated
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write
  - netfilter: nf_tables: fix kdoc warnings after gc rework
  - parisc: Restore __ldcw_align for PA-RISC 2.0 processors
  - RDMA/mlx5: Fix NULL string error
  - RDMA/siw: Fix connection failure handling
  - RDMA/uverbs: Fix typo of sizeof argument
  - RDMA/cma: Fix truncation compilation warning in make_cma_ports
  - RDMA/cma: Initialize ib_sa_multicast structure to 0 when join
  - gpio: pxa: disable pinctrl calls for MMP_GPIO
  - gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config()
  - IB/mlx4: Fix the size of a buffer in add_port_entries()
  - of: dynamic: Fix potential memory leak in of_changeset_action()
  - RDMA/core: Require admin capabilities to set system parameters
  - dm zoned: free dmz->ddev array in dmz_put_zoned_devices
  - cpupower: add Makefile dependencies for install targets
  - sctp: update hb timer immediately after users change hb_interval
  - sctp: update transport state when processing a dupcook packet
  - tcp: fix delayed ACKs for MSS boundary condition
  - tcp: fix quick-ack counting to count actual ACKs of new data
  - net: stmmac: dwmac-stm32: fix resume on STM32 MCU
  - net: ethernet: ti: am65-cpsw: Fix error code in am65_cpsw_nuss_init_tx_chns()
  - net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent
  - modpost: add missing else to the "of" check
  - NFSv4: Fix a nfs4_state_manager() race
  - scsi: target: core: Fix deadlock due to recursive locking
  - ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig
  - regmap: rbtree: Fix wrong register marked as in-cache when creating new node
  - wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling
  - drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close()
  - bpf: Fix tr dereferencing
  - wifi: iwlwifi: dbg_ini: fix structure packing
  - arm64: Add Cortex-A520 CPU part definition
  - net: prevent rewrite of msg_name in sock_sendmsg()
  - net: replace calls to sock->ops->connect() with kernel_connect()
  - wifi: mwifiex: Fix tlv_buf_left calculation
  - qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info
  - scsi: zfcp: Fix a double put in zfcp_port_enqueue()
  - Revert "PCI: qcom: Disable write access to read only registers for IP v2.3.3"
  - Revert "clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz"
  - rbd: take header_rwsem in rbd_dev_refresh() only when updating
  - rbd: decouple parent info read-in from updating rbd_dev
  - rbd: decouple header read-in from updating rbd_dev->header
  - rbd: move rbd_dev_refresh() definition
  - ring-buffer: Fix bytes info in per_cpu buffer stats
  - ring-buffer: remove obsolete comment for free_buffer_page()
  - NFSv4: Fix a state manager thread deadlock regression
  - NFS: rename nfs_client_kset to nfs_kset
  - NFS: Cleanup unused rpc_clnt variable
  - spi: zynqmp-gqspi: fix clock imbalance on probe failure
  - spi: spi-zynqmp-gqspi: Fix runtime PM imbalance in zynqmp_qspi_probe
  - fs: binfmt_elf_efpic: fix personality for ELF-FDPIC
  - ata: libata-sata: increase PMP SRST timeout to 10s
  - ata: libata-core: Do not register PM operations for SAS ports
  - ata: libata-core: Fix port and device removal
  - ata: libata-core: Fix ata_port_request_pm() locking
  - net: thunderbolt: Fix TCPv6 GSO checksum calculation
  - bpf: Fix BTF_ID symbol generation collision in tools/
  - bpf: Fix BTF_ID symbol generation collision
  - btrfs: properly report 0 avail for very full file systems
  - ring-buffer: Update "shortest_full" in polling
  - proc: nommu: /proc/<pid>/maps: release mmap read lock
  - Revert "SUNRPC dont update timeout value on connection reset"
  - i2c: i801: unregister tco_pdev in i801_probe() error path
  - ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES
  - ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q
  - serial: 8250_port: Check IRQ data before use
  - Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux"
  - Smack:- Use overlay inode label in smack_inode_copy_up()
  - smack: Retrieve transmuting information in smack_inode_getsecurity()
  - smack: Record transmuting in smk_transmuted
  - nvme-pci: always return an ERR_PTR from nvme_pci_alloc_dev
  - netfilter: nft_exthdr: Fix for unsafe packet data read
  - netfilter: nft_exthdr: Search chunks in SCTP packets only
  - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running
  - watchdog: iTCO_wdt: No need to stop the timer in probe
  - nvme-pci: do not set the NUMA node of device if it has none
  - nvme-pci: factor out a nvme_pci_alloc_dev helper
  - nvme-pci: factor the iod mempool creation into a helper
  - ACPI: Check StorageD3Enable _DSD property in ACPI code
  - cgroup: Fix suspicious rcu_dereference_check() usage warning
  - perf build: Define YYNOMEM as YYNOABORT for bison < 3.81
  - fbdev/sh7760fb: Depend on FB=y
  - ncsi: Propagate carrier gain/loss events to the NCSI controller
  - powerpc/watchpoints: Disable preemption in thread_change_pc()
  - media: vb2: frame_vector.c: replace WARN_ONCE with a comment
  - bpf: Clarify error expectations from bpf_clone_redirect
  - spi: nxp-fspi: reset the FLSHxCR1 registers
  - scsi: pm80xx: Use phy-specific SAS address when sending PHY_START command
  - platform/mellanox: mlxbf-bootctl: add NET dependency into Kconfig
  - selftests: fix dependency checker script
  - ring-buffer: Avoid softlockup in ring_buffer_resize()
  - selftests/ftrace: Correctly enable event in instance-event.tc
  - scsi: qedf: Add synchronization between I/O completions and abort
  - parisc: irq: Make irq_stack_union static to avoid sparse warning
  - parisc: drivers: Fix sparse warning
  - parisc: iosapic.c: Fix sparse warnings
  - parisc: sba: Fix compile warning wrt list of SBA devices
  - dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
  - i2c: npcm7xx: Fix callback completion ordering
  - gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip
  - xtensa: boot/lib: fix function prototypes
  - xtensa: boot: don't add include-dirs
  - xtensa: iss/network: make functions static
  - xtensa: add default definition for XCHAL_HAVE_DIV32
  - power: supply: ucs1002: fix error code in ucs1002_get_property()
  - bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up
  - ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot
  - ARM: dts: Unify pwm-omap-dmtimer node names
  - ARM: dts: am335x: Guardian: Update beeper label
  - ARM: dts: motorola-mapphone: Drop second ti,wlcore compatible value
  - ARM: dts: motorola-mapphone: Add 1.2GHz OPP
  - ARM: dts: motorola-mapphone: Configure lower temperature passive cooling
  - ARM: dts: ti: omap: Fix bandgap thermal cells addressing for omap3/4
  - ARM: dts: omap: correct indentation
  - clk: tegra: fix error return case for recalc_rate
  - bus: ti-sysc: Fix missing AM35xx SoC matching
  - bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset()
  - MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled
  - btrfs: reset destination buffer when read_extent_buffer() gets invalid range
  - ata: ahci: Add Elkhart Lake AHCI controller
  - ata: ahci: Rename board_ahci_mobile
  - ata: ahci: Add support for AMD A85 FCH (Hudson D4)
  - ata: libata: Rename link flag ATA_LFLAG_NO_DB_DELAY
  - netfilter: nft_exthdr: Fix non-linear header modification
  - netfilter: exthdr: add support for tcp option removal
  - netfilter: nft_exthdr: break evaluation if setting TCP option fails
  - netfilter: nf_tables: add and use nft_thoff helper
  - netfilter: nf_tables: add and use nft_sk helper
  - netfilter: nft_exthdr: Support SCTP chunks
  - netfilter: use actual socket sk for REJECT action
  - media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts
  - media: venus: hfi: Add a 6xx boot logic
  - media: venus: core: Add differentiator IS_V6(core)
  - media: venus: hfi: Define additional 6xx registers
  - media: venus: hfi,pm,firmware: Convert to block relative addressing
  - media: venus: core: Add io base variables for each block
  - mmc: renesas_sdhi: register irqs before registering controller
  - mmc: tmio: support custom irq masks
  - mmc: renesas_sdhi: populate SCC pointer at the proper place
  - mmc: renesas_sdhi: probe into TMIO after SCC parameters have been setup
  - Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN
  - Input: i8042 - rename i8042-x86ia64io.h to i8042-acpipnpio.h
  - netfilter: nf_tables: double hook unregistration in netns path
  - netfilter: nf_tables: unregister flowtable hooks on netns exit
  - i2c: mux: demux-pinctrl: check the return value of devm_kstrdup()
  - gpio: tb10x: Fix an error handling path in tb10x_gpio_probe()
  - bnxt_en: Flush XDP for bnxt_poll_nitroa0()'s NAPI
  - locking/seqlock: Do the lockdep annotation before locking in do_write_seqcount_begin_nested()
  - seqlock: Prefix internal seqcount_t-only macros with a "do_"
  - seqlock: Rename __seqprop() users
  - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
  - x86/srso: Fix SBPB enablement for spec_rstack_overflow=off
  - x86/srso: Fix srso_show_state() side effect
  - platform/x86: intel_scu_ipc: Fail IPC send if still busy
  - platform/x86: intel_scu_ipc: Don't override scu in intel_scu_ipc_dev_simple_command()
  - platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt()
  - platform/x86: intel_scu_ipc: Check status after timeout in busy_loop()
  - powerpc/perf/hv-24x7: Update domain value check
  - i40e: Fix VF VLAN offloading when port VLAN is configured
  - ASoC: imx-audmix: Fix return error with devm_clk_get()
  - selftests: tls: swap the TX and RX sockets in some tests
  - bpf: Avoid deadlock when using queue and stack maps from NMI
  - netfilter: nf_tables: disallow element removal on anonymous sets
  - ASoC: meson: spdifin: start hw on dai probe
  - netfilter: nf_tables: fix memleak when more than 255 elements expired
  - netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration
  - netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails
  - netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention
  - netfilter: nf_tables: defer gc run if previous batch is still pending
  - netfilter: nf_tables: use correct lock to protect gc_list
  - netfilter: nf_tables: GC transaction race with abort path
  - netfilter: nf_tables: GC transaction race with netns dismantle
  - netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path
  - netfilter: nf_tables: don't fail inserts if duplicate has expired
  - netfilter: nf_tables: remove busy mark and gc batch API
  - netfilter: nft_set_hash: mark set element as dead when deleting from packet path
  - netfilter: nf_tables: adapt set backend to use GC transaction API
  - netfilter: nf_tables: GC transaction API to avoid race with control plane
  - netfilter: nf_tables: don't skip expired elements during walk
  - netfilter: nf_tables: integrate pipapo into commit protocol
  - ext4: do not let fstrim block system suspend
  - ext4: move setting of trimmed bit into ext4_try_to_trim_range()
  - ext4: replace the traditional ternary conditional operator with with max()/min()
  - ext4: mark group as trimmed only if it was fully scanned
  - ext4: change s_last_trim_minblks type to unsigned long
  - ext4: scope ret locally in ext4_try_to_trim_range()
  - ext4: add new helper interface ext4_try_to_trim_range()
  - ext4: remove the 'group' parameter of ext4_trim_extent
  - SUNRPC: Mark the cred for revalidation if the server rejects it
  - NFS/pNFS: Report EINVAL errors from connect() to the server
  - NFS: Use the correct commit info in nfs_join_page_group()
  - ceph: fix deadlock or deadcode of misusing dget()
  - Revert "modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules"
  - Revert "media: dvb: symbol fixup for dvb_attach()"
  - powerpc/lib: Validate size for vector operations
  - af_unix: fix lockdep positive in sk_diag_dump_icons()
  - iommu/arm-smmu-v3: Disable ECMDQ before reset
  - !3297 [OLK-5.10] Add drivers support for Mucse Network Adapter(N10/N400)
  - !3308 [OLK-5.10] initial support for KPU FLEXFLOW-2100P driver from Yusur Technology
  - !5195  dmaengine: fix NULL pointer in channel unregistration function
  - !5171  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
  - !5197  drm: Don't unref the same fb many times by mistake due to deadlock handling
  - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
  - drm: Don't unref the same fb many times by mistake due to deadlock handling
  - !5178  net: nfc: llcp: Add lock when modifying device list
  - dmaengine: fix NULL pointer in channel unregistration function
  - !5164  nfc: nci: assert requested protocol is valid
  - drivers: initial support for KPU FLEXFLOW-2100P driver from Yusur Technology
  - !5156  RDMA/srp: Do not call scsi_done() from srp_abort()
  - !5038 [OLK-5.10] Do not serialize MSR accesses on AMD
  - net: nfc: llcp: Add lock when modifying device list
  - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
  - nfc: nci: assert requested protocol is valid
  - RDMA/srp: Do not call scsi_done() from srp_abort()
  - x86/barrier: Do not serialize MSR accesses on AMD
  - drivers: update yunsilicon drivers to version 1.1.0.375
  - drivers: support for rnpm drivers from Mucse Technology N10/N400


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-193.0.0.106
changelog:
  - !5521  md/raid5: fix atomicity violation in raid5_cache_count
  - !5494  mm/sparsemem: fix race in accessing memory_section->usage
  - !5516  netfilter: nf_tables: disallow timeout for anonymous sets
  - !5441  net/sched: act_ct: fix skb leak and crash on ooo frags
  - !5519  scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
  - !5445  KVM: x86/mmu: Don't advance iterator after restart due to yielding
  - !5510  bus: mhi: host: Drop chan lock before queuing buffers
  - !5466  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
  - !5491  CVE-2024-26640
  - md/raid5: fix atomicity violation in raid5_cache_count
  - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
  - netfilter: nf_tables: disallow timeout for anonymous sets
  - !5495  llc: Drop support for ETH_P_TR_802_2.
  - !5496  llc: make llc_ui_sendmsg() more robust against bonding changes
  - !5266  llc: call sock_orphan() at release time
  - bus: mhi: host: Drop chan lock before queuing buffers
  - !5500  pstore/ram: Fix crash when setting number of cpus to an odd number
  - !5460 v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
  - pstore/ram: Fix crash when setting number of cpus to an odd number
  - !5368  media: pvrusb2: fix use after free on context disconnection
  - llc: make llc_ui_sendmsg() more robust against bonding changes
  - llc: Drop support for ETH_P_TR_802_2.
  - mm/sparsemem: fix race in accessing memory_section->usage
  - tcp: add sanity checks to rx zerocopy
  - net-zerocopy: Refactor frag-is-remappable test.
  - !5269  printk: avoid deadlock in panic
  - !5316 v2  iomap: add support to track dirty state of sub pages
  - !5075  x86/reboot: VMCLEAR active VMCSes before emergency reboot
  - !5385 v3  enable arm64_pbha by default
  - !5093  wifi: mac80211: fix potential key use-after-free
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
  - !5327  UBSAN: array-index-out-of-bounds in dtSplitRoot
  - !5322  jfs: fix slab-out-of-bounds Read in dtSearch
  - crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
  - !5308  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - KVM: x86/mmu: Don't advance iterator after restart due to yielding
  - net/sched: act_ct: fix skb leak and crash on ooo frags
  - !5286  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
  - !5232  jfs: fix cve issue
  - !5348  s390/ptrace: handle setting of fpc register correctly
  - !5317  KVM: s390: fix setting of fpc register
  - !5259  CVE-2024-26627​
  - config: Enable ARM64_PBHA by default
  - arm64: mm: pagemap: Export pbha bit0 info
  - arm64: mm: Hide pbha_bit0 in procfs if pbha is not enabled
  - arm64: mm: Do not show info during startup if pbha is not enabled
  - mm: cpufeature: Make update_pbha_perf_only_bit static
  - arm64: mm: Cleanup in pbha_bit0_pte_range
  - proc: introduce proc_hide_ents to hide proc files
  - !5339  binder: fix race between mmput() and do_exit()
  - !5253  tomoyo: fix UAF write bug in tomoyo_write_control()
  - media: pvrusb2: fix use after free on context disconnection
  - s390/ptrace: handle setting of fpc register correctly
  - binder: fix race between mmput() and do_exit()
  - UBSAN: array-index-out-of-bounds in dtSplitRoot
  - jfs: fix slab-out-of-bounds Read in dtSearch
  - KVM: s390: fix setting of fpc register
  - iomap: add support to track dirty state of sub pages
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
  - printk: avoid deadlock in panic
  - llc: call sock_orphan() at release time
  - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
  - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
  - tomoyo: fix UAF write bug in tomoyo_write_control()
  - jfs: fix array-index-out-of-bounds in diNewExt
  - jfs: fix uaf in jfs_evict_inode
  - wifi: mac80211: fix potential key use-after-free
  - x86/reboot: VMCLEAR active VMCSes before emergency reboot


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-194.0.0.107
changelog:
  - !5684 Backport 5.10.200 LTS patches from upstream
  - ALSA: hda: intel-dsp-config: Fix JSL Chromebook quirk detection
  - tty: 8250: Add support for Intashield IS-100
  - tty: 8250: Add support for Brainboxes UP cards
  - tty: 8250: Add support for additional Brainboxes UC cards
  - tty: 8250: Remove UC-257 and UC-431
  - usb: raw-gadget: properly handle interrupted requests
  - usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility
  - PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device
  - can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior
  - can: isotp: isotp_bind(): do not validate unused address information
  - can: isotp: add local echo tx processing and tx without FC
  - can: isotp: handle wait_event_interruptible() return values
  - can: isotp: check CAN address family in isotp_bind()
  - can: isotp: isotp_bind(): return -EINVAL on incorrect CAN ID formatting
  - can: isotp: set max PDU size to 64 kByte
  - can: isotp: Add error message if txqueuelen is too small
  - can: isotp: add symbolic error message to isotp_module_init()
  - can: isotp: change error format from decimal to symbolic error names
  - powerpc/mm: Fix boot crash with FLATMEM
  - net: chelsio: cxgb4: add an error code check in t4_load_phy_fw
  - platform/mellanox: mlxbf-tmfifo: Fix a warning message
  - scsi: mpt3sas: Fix in error path
  - fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit()
  - ASoC: rt5650: fix the wrong result of key button
  - netfilter: nfnetlink_log: silence bogus compiler warning
  - spi: npcm-fiu: Fix UMA reads when dummy.nbytes == 0
  - fbdev: atyfb: only use ioremap_uc() on i386 and ia64
  - Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport
  - dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe
  - irqchip/stm32-exti: add missing DT IRQ flag translation
  - net: sched: cls_u32: Fix allocation size in u32_init()
  - x86: Fix .brk attribute in linker script
  - objtool/x86: add missing embedded_insn check
  - x86/mm: Fix RESERVE_BRK() for older binutils
  - x86/mm: Simplify RESERVE_BRK()
  - smbdirect: missing rc checks while waiting for rdma events
  - x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility
  - iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature thresholds
  - iio: adc: xilinx: use more devres helpers and remove remove()
  - iio: adc: xilinx: use devm_krealloc() instead of kfree() + kcalloc()
  - iio: adc: xilinx: use helper variable for &pdev->dev
  - clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name
  - sparc32: fix a braino in fault handling in csum_and_copy_..._user()
  - nvmem: imx: correct nregs for i.MX6UL
  - nvmem: imx: correct nregs for i.MX6SLL
  - nvmem: imx: correct nregs for i.MX6ULL
  - misc: fastrpc: Clean buffers on remote invocation failures
  - tracing/kprobes: Fix the description of variable length arguments
  - i2c: aspeed: Fix i2c bus hang in slave read
  - i2c: stm32f7: Fix PEC handling in case of SMBUS transfers
  - i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node()
  - i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node()
  - i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node()
  - iio: exynos-adc: request second interupt only when touchscreen mode is used
  - kasan: print the original fault addr when access invalid shadow
  - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR
  - gtp: fix fragmentation needed check with gso
  - gtp: uapi: fix GTPA_MAX
  - tcp: fix wrong RTO timeout when received SACK reneging
  - r8152: Release firmware if we have an error in probe
  - r8152: Cancel hw_phy_work if we have an error in probe
  - r8152: Run the unload routine if we have errors during probe
  - r8152: Increase USB control msg timeout to 5000ms as per spec
  - net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
  - net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show()
  - igc: Fix ambiguity in the ethtool advertising
  - neighbour: fix various data-races
  - igb: Fix potential memory leak in igb_add_ethtool_nfc_entry
  - treewide: Spelling fix in comment
  - r8169: fix the KCSAN reported data race in rtl_rx while reading desc->opts1
  - r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1
  - mmc: renesas_sdhi: use custom mask for TMIO_MASK_ALL
  - mm/page_alloc: correct start page when guard page debug is enabled
  - virtio-mmio: fix memory leak of vm_dev
  - virtio_balloon: Fix endless deflation and inflation on arm64
  - mcb-lpc: Reallocate memory region to avoid memory overlapping
  - mcb: Return actual parsed size when reading chameleon table
  - selftests/ftrace: Add new test case which checks non unique symbol
  - !5580  CVE-2023-52622
  - !5617 v4  Fix I/O high when memory almost met memcg limit
  - !5518  dm: revert partial fix for redundant bio-based IO accounting
  - !5493  arm64/mpam: Fix repeated enabling in mpam_enable()
  - !5566  tracing: Ensure visibility when inserting an element into tracing_map
  - !5606  mm/mlock: return EINVAL for illegal user memory range in mlock
  - mm/readahead: don't decrease mmap_miss when folio has workingset flags
  - mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
  - !5499 Backport 5.10.199 LTS patches from upstream
  - mm/mlock: return EINVAL for illegal user memory range in mlock
  - ext4: avoid online resizing failures due to oversized flex bg
  - ext4: unify the type of flexbg_size to unsigned int
  - ext4: remove unnecessary check from alloc_flex_gd()
  - !5473  jfs: fix array-index-out-of-bounds in dbAdjTree
  - !5553  mm: ksm: fix use-after-free kasan report in ksm_might_need_to_copy
  - tracing: Ensure visibility when inserting an element into tracing_map
  - !5431  block/rnbd-srv: Check for unlikely string overflow
  - !5537  netfilter: nf_tables: disallow anonymous set with timeout flag
  - !5527  netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
  - mm: ksm: fix use-after-free kasan report in ksm_might_need_to_copy
  - netfilter: nf_tables: disallow anonymous set with timeout flag
  - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
  - dm: revert partial fix for redundant bio-based IO accounting
  - Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name
  - Bluetooth: hci_sock: fix slab oob read in create_monitor_event
  - phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
  - phy: mapphone-mdm6600: Fix runtime PM for remove
  - phy: mapphone-mdm6600: Fix runtime disable on probe
  - ASoC: pxa: fix a memory leak in probe()
  - gpio: vf610: set value before the direction to avoid a glitch
  - platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events
  - platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e
  - s390/pci: fix iommu bitmap allocation
  - USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
  - USB: serial: option: add entry for Sierra EM9191 with new firmware
  - USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
  - nvme-rdma: do not try to stop unallocated queues
  - nvme-pci: add BOGUS_NID for Intel 0a54 device
  - ACPI: irq: Fix incorrect return value in acpi_register_gsi()
  - pNFS: Fix a hang in nfs4_evict_inode()
  - Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
  - mmc: core: Capture correct oemid-bits for eMMC cards
  - mmc: core: sdio: hold retuning if sdio in 1-bit mode
  - mtd: physmap-core: Restore map_rom fallback
  - mtd: spinand: micron: correct bitmask for ecc status
  - mtd: rawnand: arasan: Ensure program page operations are successful
  - mtd: rawnand: marvell: Ensure program page operations are successful
  - mtd: rawnand: qcom: Unmap the right resource upon probe failure
  - Bluetooth: hci_event: Fix using memcmp when comparing keys
  - net/mlx5: Handle fw tracer change ownership event based on MTRC
  - platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
  - HID: multitouch: Add required quirk for Synaptics 0xcd7e device
  - btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c
  - drm: panel-orientation-quirks: Add quirk for One Mix 2S
  - sky2: Make sure there is at least one frag_addr available
  - regulator/core: Revert "fix kobject release warning and memory leak in regulator_register()"
  - wifi: cfg80211: avoid leaking stack data into trace
  - wifi: mac80211: allow transmitting EAPOL frames with tainted key
  - wifi: cfg80211: Fix 6GHz scan configuration
  - Bluetooth: hci_core: Fix build warnings
  - Bluetooth: Avoid redundant authentication
  - HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event
  - tracing: relax trace_event_eval_update() execution with cond_resched()
  - ata: libata-eh: Fix compilation warning in ata_eh_link_report()
  - gpio: timberdale: Fix potential deadlock on &tgpio->lock
  - overlayfs: set ctime when setting mtime and atime
  - i2c: mux: Avoid potential false error message in i2c_mux_add_adapter
  - btrfs: initialize start_slot in btrfs_log_prealloc_extents
  - btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1
  - ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone
  - serial: 8250_omap: Fix errors with no_console_suspend
  - serial: 8250: omap: Fix imprecise external abort for omap_8250_pm()
  - xhci: track port suspend state correctly in unsuccessful resume cases
  - xhci: decouple usb2 port resume and get_port_status request handling
  - xhci: clear usb2 resume related variables in one place.
  - xhci: rename resume_done to resume_timestamp
  - xhci: move port specific items such as state completions to port structure
  - xhci: cleanup xhci_hub_control port references
  - usb: core: Track SuperSpeed Plus GenXxY
  - selftests/mm: fix awk usage in charge_reserved_hugetlb.sh and hugetlb_reparenting_test.sh that may cause error
  - selftests/vm: make charge_reserved_hugetlb.sh work with existing cgroup setting
  - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
  - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA
  - ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA
  - ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks
  - ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA
  - ACPI: resource: Add ASUS model S5402ZA to quirks
  - ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA
  - ACPI: resources: Add DMI-based legacy IRQ override quirk
  - thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge
  - net: pktgen: Fix interface flags printing
  - netfilter: nft_set_rbtree: .deactivate fails if element has expired
  - neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section
  - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
  - net: dsa: bcm_sf2: Fix possible memory leak in bcm_sf2_mdio_register()
  - i40e: prevent crash on probe if hw registers have invalid values
  - net: usb: smsc95xx: Fix an error code in smsc95xx_reset()
  - ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr
  - tun: prevent negative ifindex
  - tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb
  - tcp: fix excessive TLP and RACK timeouts from HZ rounding
  - net: rfkill: gpio: prevent value glitch during probe
  - net: ipv6: fix return value check in esp_remove_trailer
  - net: ipv4: fix return value check in esp_remove_trailer
  - qed: fix LL2 RX buffer allocation
  - drm/i915: Retry gtt fault when out of fence registers
  - netfilter: nft_payload: fix wrong mac header matching
  - tcp: check mptcp-level constraints for backlog coalescing
  - KVM: x86: Mask LVTPC when handling a PMI
  - regmap: fix NULL deref on lookup
  - ice: reset first in crash dump kernels
  - ice: fix over-shifted variable
  - Bluetooth: avoid memcmp() out of bounds warning
  - Bluetooth: hci_event: Fix coding style
  - Bluetooth: vhci: Fix race when opening vhci device
  - Bluetooth: Fix a refcnt underflow problem for hci_conn
  - Bluetooth: Reject connection with the device which has same BD_ADDR
  - Bluetooth: hci_event: Ignore NULL link key
  - usb: hub: Guard against accesses to uninitialized BOS descriptors
  - Documentation: sysctl: align cells in second content column
  - mm/memory_hotplug: rate limit page migration warnings
  - lib/Kconfig.debug: do not enable DEBUG_PREEMPT by default
  - dev_forward_skb: do not scrub skb mark within the same name space
  - RDMA/srp: Fix srp_abort()
  - RDMA/srp: Set scmnd->result only when scmnd is not NULL
  - x86/alternatives: Disable KASAN in apply_alternatives()
  - powerpc/64e: Fix wrong test in __ptep_test_and_clear_young()
  - powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE
  - dmaengine: mediatek: Fix deadlock caused by synchronize_irq()
  - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
  - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
  - counter: microchip-tcb-capture: Fix the use of internal GCLK logic
  - pinctrl: avoid unsafe code pattern in find_pinctrl()
  - cgroup: Remove duplicates in cgroup v1 tasks file
  - tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
  - Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case
  - Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table
  - Input: xpad - add PXN V900 support
  - Input: psmouse - fix fast_reconnect function for PS/2 mode
  - ceph: fix type promotion bug on 32bit systems
  - ceph: fix incorrect revoked caps assert in ceph_fill_file_size()
  - libceph: use kernel_connect()
  - thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding
  - mcb: remove is_added flag from mcb_device struct
  - iio: pressure: ms5611: ms5611_prom_is_valid false negative bug
  - iio: pressure: dps310: Adjust Timeout Settings
  - iio: pressure: bmp280: Fix NULL pointer exception
  - usb: musb: Modify the "HWVers" register address
  - usb: musb: Get the musb_qh poniter after musb_giveback
  - usb: dwc3: Soft reset phy on probe for host
  - net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
  - usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer
  - dmaengine: stm32-mdma: abort resume if no ongoing transfer
  - media: mtk-jpeg: Fix use after free bug due to uncanceled work
  - Revert "spi: spi-zynqmp-gqspi: Fix runtime PM imbalance in zynqmp_qspi_probe"
  - Revert "spi: zynqmp-gqspi: fix clock imbalance on probe failure"
  - pinctrl: renesas: rzn1: Enable missing PINMUX
  - ixgbe: fix crash with empty VF macvlan list
  - net: phy: mscc: macsec: reject PN update requests
  - net: macsec: indicate next pn update when offloading
  - drm/vmwgfx: fix typo of sizeof argument
  - riscv, bpf: Sign-extend return values
  - riscv, bpf: Factor out emit_call for kernel and bpf context
  - xen-netback: use default TX queue size for vifs
  - mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type
  - ravb: Fix up dma_free_coherent() call in ravb_remove()
  - drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow
  - drm/msm/dsi: skip the wait for video mode done if not applicable
  - drm/msm/dp: do not reinitialize phy unless retry during link training
  - net: prevent address rewrite in kernel_bind()
  - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  - lib/test_meminit: fix off-by-one error in test_pages()
  - perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7
  - RDMA/cxgb4: Check skb value for failure to allocate
  - RDMA/srp: Make struct scsi_cmnd and struct srp_request adjacent
  - arm64/mpam: Fix repeated enabling in mpam_enable()
  - jfs: fix array-index-out-of-bounds in dbAdjTree
  - block/rnbd-srv: Check for unlikely string overflow


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-195.0.0.108
changelog:
  - !5831  fbdev: sis: Error out if pixclock equals zero
  - !5861  ksmbd: fix uaf in smb20_oplock_break_ack
  - !5911  CVE-2023-52484
  - !5895  i2c: i801: Fix block process call transactions
  - !5870  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
  - !5863  CVE-2024-26788
  - iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
  - iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
  - !5811  Fixed CVE-2021-47037
  - !5808  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
  - i2c: i801: Fix block process call transactions
  - !5845 [OLK 5.10] bugfixes of vf id of mailbox and port duplex configure
  - !5747  ksmbd: fix global oob in ksmbd_nl_policy
  - !5832  CVE-2023-52467
  - !5795  netfilter: nft_limit: reject configurations that cause integer overflow
  - !5751  net: atlantic: Fix DMA mapping for PTP hwts ring
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table
  - dmaengine: fsl-qdma: init irq after reg initialization
  - ksmbd: fix uaf in smb20_oplock_break_ack
  - net: hns3: fix port duplex configure error in IMP reset
  - net: hns3: add checking for vf id of mailbox
  - mfd: syscon: Fix null pointer dereference in of_syscon_register()
  - fbdev: sis: Error out if pixclock equals zero
  - !5785  net: qualcomm: rmnet: fix global oob in rmnet_policy
  - !5789  perf/x86/lbr: Filter vsyscall addresses
  - !5780  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
  - !5787  bpf: fix check for attempt to corrupt spilled pointer
  - !5770 v2  scsi: hisi_sas: Fixed some issues in the SAS
  - ASoC: q6afe-clocks: fix reprobing of the driver
  - ASoC: q6afe-clocks: fix warning on symbol scope
  - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
  - !5794  um: time-travel: fix time corruption
  - !5773  patches for CVE-2023-52617
  - !5772  firmware: arm_scmi: Check mailbox/SMT channel for consistency
  - !5788 v2  Patches to Fix CVE-2023-52454
  - netfilter: nft_limit: reject configurations that cause integer overflow
  - um: time-travel: fix time corruption
  - perf/x86/lbr: Filter vsyscall addresses
  - nvmet-tcp: Fix the H2C expected PDU len calculation
  - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
  - bpf: fix check for attempt to corrupt spilled pointer
  - net: qualcomm: rmnet: fix global oob in rmnet_policy
  - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
  - !5724  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
  - PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
  - PCI: switchtec: Fix stdev_release() crash after surprise hot remove
  - firmware: arm_scmi: Check mailbox/SMT channel for consistency
  - !5738 [OLK 5.10] net: hns3: fix port vlan filter not disabled problem in dynamic vlan mode
  - !5757  inet: read sk->sk_family once in inet_recv_error()
  - scsi: hisi_sas: Add cond_resched() to cq_thread_v3_hw()
  - scsi: hisi_sas: Default enable interrupt coalescing
  - inet: read sk->sk_family once in inet_recv_error()
  - !5745 v2  iommu/arm-smmu-v3: fix using uninitialized or unchecked symbol
  - net: atlantic: Fix DMA mapping for PTP hwts ring
  - ksmbd: fix global oob in ksmbd_nl_policy
  - iommu/arm-smmu-v3: fix using uninitialized or unchecked symbol
  - net: hns3: fix port vlan filter not disabled problem in dynamic vlan mode
  - !5698  sr9800: Add check for usbnet_get_endpoints
  - !5711 Backport 5.10.201 LTS patches from upstream
  - !5728  fix CVE-2021-47101
  - btrfs: use u64 for buffer sizes in the tree search ioctls
  - Revert "mmc: core: Capture correct oemid-bits for eMMC cards"
  - tracing/kprobes: Fix the order of argument descriptions
  - fbdev: fsl-diu-fb: mark wr_reg_wa() static
  - fbdev: imsttfb: fix a resource leak in probe
  - fbdev: imsttfb: Fix error path of imsttfb_probe()
  - spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies
  - drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE
  - x86/sev-es: Allow copy_from_kernel_nofault() in earlier boot
  - x86: Share definition of __is_canonical_address()
  - netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses
  - netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate eval call-backs
  - netfilter: xt_recent: fix (increase) ipv6 literal buffer length
  - r8169: respect userspace disabling IFF_MULTICAST
  - tg3: power down device only on SYSTEM_POWER_OFF
  - net/smc: put sk reference if close work was canceled
  - net/smc: allow cdc msg send rather than drop it with NULL sndbuf_desc
  - net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs
  - Fix termination state for idr_for_each_entry_ul()
  - net: r8169: Disable multicast filter for RTL8168H and RTL8107E
  - dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.
  - dccp: Call security_inet_conn_request() after setting IPv4 addresses.
  - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
  - hsr: Prevent use after free in prp_create_tagged_frame()
  - llc: verify mac len before reading mac header
  - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
  - pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume
  - pwm: sti: Reduce number of allocations and drop usage of chip_data
  - pwm: sti: Avoid conditional gotos
  - regmap: prevent noinc writes from clobbering cache
  - media: dvb-usb-v2: af9035: fix missing unlock
  - media: cedrus: Fix clock/reset sequence
  - media: vidtv: mux: Add check and kfree for kstrdup
  - media: vidtv: psi: Add check for kstrdup
  - media: s3c-camif: Avoid inappropriate kfree()
  - media: bttv: fix use after free error due to btv->timeout timer
  - media: i2c: max9286: Fix some redundant of_node_put() calls
  - pcmcia: ds: fix possible name leak in error path in pcmcia_device_add()
  - pcmcia: ds: fix refcount leak in pcmcia_device_add()
  - pcmcia: cs: fix possible hung task and memory leak pccardd()
  - rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call
  - i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs
  - perf hist: Add missing puts to hist__account_cycles
  - perf machine: Avoid out of bounds LBR memory read
  - usb: host: xhci-plat: fix possible kernel oops while resuming
  - xhci: Loosen RPM as default policy to cover for AMD xHC 1.1
  - powerpc/pseries: fix potential memory leak in init_cpu_associativity()
  - powerpc/imc-pmu: Use the correct spinlock initializer.
  - powerpc/xive: Fix endian conversion size
  - powerpc/40x: Remove stale PTE_ATOMIC_UPDATES macro
  - modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host
  - f2fs: fix to initialize map.m_pblk in f2fs_precache_extents()
  - dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc()
  - USB: usbip: fix stub_dev hub disconnect
  - tools: iio: iio_generic_buffer ensure alignment
  - tools: iio: iio_generic_buffer: Fix some integer type and calculation
  - tools: iio: privatize globals and functions in iio_generic_buffer.c file
  - misc: st_core: Do not call kfree_skb() under spin_lock_irqsave()
  - dmaengine: ti: edma: handle irq_of_parse_and_map() errors
  - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
  - livepatch: Fix missing newline character in klp_resolve_symbols()
  - leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu'
  - leds: pwm: Don't disable the PWM when the LED should be off
  - ASoC: ams-delta.c: use component after check
  - padata: Fix refcnt handling in padata_free_shell()
  - padata: Convert from atomic_t to refcount_t on parallel_data->refcnt
  - ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails
  - HID: logitech-hidpp: Move get_wireless_feature_index() check to hidpp_connect_event()
  - HID: logitech-hidpp: Revert "Don't restart communication if not necessary"
  - HID: logitech-hidpp: Don't restart IO, instead defer hid_connect() only
  - HID: logitech-hidpp: Remove HIDPP_QUIRK_NO_HIDINPUT quirk
  - Revert "HID: logitech-hidpp: add a module parameter to keep firmware gestures"
  - sh: bios: Revive earlyprintk support
  - hid: cp2112: Fix IRQ shutdown stopping polling for all IRQs on chip
  - RDMA/hfi1: Workaround truncation compilation error
  - scsi: ufs: core: Leave space for '0' in utf8 desc string
  - ASoC: fsl: Fix PM disable depth imbalance in fsl_easrc_probe
  - IB/mlx5: Fix rdma counter binding for RAW QP
  - ASoC: fsl: mpc5200_dma.c: Fix warning of Function parameter or member not described
  - ext4: move 'ix' sanity check to corrent position
  - ARM: 9321/1: memset: cast the constant byte to unsigned char
  - hid: cp2112: Fix duplicate workqueue initialization
  - crypto: qat - increase size of buffers
  - crypto: qat - mask device capabilities with soft straps
  - crypto: caam/jr - fix Chacha20 + Poly1305 self test failure
  - crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure
  - nd_btt: Make BTT lanes preemptible
  - libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value
  - hwrng: geode - fix accessing registers
  - selftests/resctrl: Ensure the benchmark commands fits to its array
  - selftests/pidfd: Fix ksft print formats
  - clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped
  - firmware: ti_sci: Mark driver as non removable
  - xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled
  - drm/rockchip: Fix type promotion bug in rockchip_gem_iommu_map()
  - drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe()
  - drm/mediatek: Fix iommu fault during crtc enabling
  - drm/bridge: tc358768: Fix bit updates
  - drm/bridge: tc358768: Disable non-continuous clock mode
  - drm/bridge: tc358768: Fix use of uninitialized variable
  - drm/rockchip: vop: Fix call to crtc reset helper
  - drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs
  - hwmon: (coretemp) Fix potentially truncated sysfs attribute name
  - hwmon: (axi-fan-control) Fix possible NULL pointer dereference
  - hwmon: (axi-fan-control) Support temperature vs pwm points
  - platform/x86: wmi: Fix opening of char device
  - platform/x86: wmi: remove unnecessary initializations
  - platform/x86: wmi: Fix probe failure when failing to register WMI devices
  - clk: qcom: config IPQ_APSS_6018 should depend on QCOM_SMEM
  - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
  - clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
  - clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
  - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
  - clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
  - clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
  - clk: npcm7xx: Fix incorrect kfree
  - clk: ti: fix double free in of_ti_divider_clk_setup()
  - clk: ti: change ti_clk_register[_omap_hw]() API
  - clk: ti: Update component clocks to use ti_dt_clk_name()
  - clk: ti: Update pll and clockdomain clocks to use ti_dt_clk_name()
  - clk: ti: Add ti_dt_clk_name() helper to use clock-output-names
  - clk: keystone: pll: fix a couple NULL vs IS_ERR() checks
  - spi: nxp-fspi: use the correct ioremap function
  - clk: linux/clk-provider.h: fix kernel-doc warnings and typos
  - clk: asm9260: use parent index to link the reference clock
  - clk: imx: imx8mq: correct error handling path
  - clk: imx: Select MXC_CLK for CLK_IMX8QXP
  - clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src
  - clk: qcom: gcc-sm8150: use ARRAY_SIZE instead of specifying num_parents
  - clk: qcom: mmcc-msm8998: Fix the SMMU GDSC
  - clk: qcom: mmcc-msm8998: Set bimc_smmu_gdsc always on
  - clk: qcom: mmcc-msm8998: Don't check halt bit on some branch clks
  - clk: qcom: mmcc-msm8998: Add hardware clockgating registers to some clks
  - clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies
  - regmap: debugfs: Fix a erroneous check after snprintf()
  - ipv6: avoid atomic fragment on GSO packets
  - ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias()
  - tcp: fix cookie_init_timestamp() overflows
  - chtls: fix tp->rcv_tstamp initialization
  - r8169: fix rare issue with broken rx after link-down on RTL8125
  - r8169: use tp_to_dev instead of open code
  - thermal: core: prevent potential string overflow
  - PM / devfreq: rockchip-dfi: Make pmu regmap mandatory
  - can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on()
  - can: dev: can_restart(): don't crash kernel if carrier is OK
  - wifi: rtlwifi: fix EDCA limit set by BT coexistence
  - tcp_metrics: do not create an entry from tcp_init_metrics()
  - tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics()
  - tcp_metrics: add missing barriers on delete
  - wifi: mt76: mt7603: rework/fix rx pse hang check
  - wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file()
  - net: spider_net: Use size_add() in call to struct_size()
  - tipc: Use size_add() in calls to struct_size()
  - mlxsw: Use size_mul() in call to struct_size()
  - gve: Use size_add() in call to struct_size()
  - overflow: Implement size_t saturating arithmetic helpers
  - tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed
  - udp: add missing WRITE_ONCE() around up->encap_rcv
  - i40e: fix potential memory leaks in i40e_remove()
  - genirq/matrix: Exclude managed interrupts in irq_matrix_allocated()
  - pstore/platform: Add check for kstrdup
  - x86/boot: Fix incorrect startup_gdt_descr.size
  - futex: Don't include process MM in futex key on no-MMU
  - x86/srso: Fix SBPB enablement for (possible) future fixed HW
  - vfs: fix readahead(2) on block devices
  - asix: fix wrong return value in asix_check_host_enable()
  - asix: fix uninit-value in asix_mdio_read()
  - net: asix: fix uninit value bugs
  - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
  - !5642  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
  - !5712 [sync] PR-5672:  arm64/mpam_ctrlmon: Update ctrl group config with rdtgrp's partid
  - !5189 vhost_vdpa: Fix the error of not executing atomic_dec
  - !5530  net: Fix CVE-2024-26641
  - !5532  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
  - arm64/mpam: Allocate new partid for the created ctrl group
  - arm64/mpam_ctrlmon: Update ctrl group config with rdtgrp's partid
  - !5670  cpufreq: CPPC: Eliminate the impact of cpc_read() latency error
  - !5506  ext4: dio: Put endio under irq context for overwrite
  - !5507  ext4: Validate inode pa before using preallocation blocks
  - sr9800: Add check for usbnet_get_endpoints
  - cpufreq: CPPC: Eliminate the impact of cpc_read() latency error
  - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
  - vhost_vdpa: Fix the error of not executing atomic_dec
  - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
  - ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
  - ip6_tunnel: use dev_sw_netstats_rx_add()
  - ext4: Validate inode pa before using preallocation blocks
  - ext4: Optimize endio process for DIO overwrites
  - iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
  - iomap: pass a flags argument to iomap_dio_rw
  - iomap: rename the flags variable in __iomap_dio_rw
  - iomap: add IOMAP_DIO_INLINE_COMP
  - iomap: use an unsigned type for IOMAP_DIO_* defines
  - iomap: cleanup up iomap_dio_bio_end_io()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-196.0.0.109
changelog:
  - !6074  Fix CVE-2024-26787
  - !6193  uio_hv_generic: Fix another memory leak in error handling paths
  - !6192  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
  - !6178  CVE-2024-26812
  - !6112  cifs: Fix UAF in cifs_demultiplex_thread()
  - uio_hv_generic: Fix another memory leak in error handling paths
  - arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
  - vfio/pci: Create persistent INTx handler
  - vfio: Introduce interface to flush virqfd inject workqueue
  - !6124  xen/events: close evtchn after mapping cleanup
  - !6137  vfio/pci: Lock external INTx masking ops
  - !6161 Backport 5.10.203 LTS patches from upstream
  - driver core: Release all resources during unbind before updating device links
  - r8169: fix deadlock on RTL8125 in jumbo mtu mode
  - r8169: disable ASPM in case of tx timeout
  - mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled
  - mmc: core: add helpers mmc_regulator_enable/disable_vqmmc
  - mmc: block: Retry commands in CQE error recovery
  - mmc: core: convert comma to semicolon
  - mmc: cqhci: Fix task clearing in CQE error recovery
  - mmc: cqhci: Warn of halt or task clear failure
  - mmc: cqhci: Increase recovery halt timeout
  - cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily
  - cpufreq: imx6q: don't warn for disabling a non-existing frequency
  - scsi: qla2xxx: Fix system crash due to bad pointer access
  - scsi: qla2xxx: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
  - scsi: core: Introduce the scsi_cmd_to_rq() function
  - smb3: fix caching of ctime on setxattr
  - fs: add ctime accessors infrastructure
  - ima: annotate iint mutex to avoid lockdep false positive warnings
  - fbdev: stifb: Make the STI next font pointer a 32-bit signed offset
  - misc: pci_endpoint_test: Add deviceID for J721S2 PCIe EP device support
  - misc: pci_endpoint_test: Add deviceID for AM64 and J7200
  - s390/cmma: fix detection of DAT pages
  - s390/mm: fix phys vs virt confusion in mark_kernel_pXd() functions family
  - ASoC: SOF: sof-pci-dev: Fix community key quirk detection
  - ASoC: SOF: sof-pci-dev: don't use the community key on APL Chromebooks
  - ASoC: SOF: sof-pci-dev: add parameter to override topology filename
  - ASoC: SOF: sof-pci-dev: use community key on all Up boards
  - ASoC: Intel: Move soc_intel_is_foo() helpers to a generic header
  - smb3: fix touch -h of symlink
  - net: ravb: Start TX queues after HW initialization succeeded
  - net: ravb: Use pm_runtime_resume_and_get()
  - r8169: prevent potential deadlock in rtl8169_close
  - Revert "workqueue: remove unused cancel_work()"
  - octeontx2-pf: Fix adding mbox work queue entry when num_vfs > 64
  - net: stmmac: xgmac: Disable FPE MMC interrupts
  - selftests/net: mptcp: fix uninitialized variable warnings
  - selftests/net: ipsec: fix constant out of range
  - dpaa2-eth: increase the needed headroom to account for alignment
  - usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
  - USB: core: Change configuration warnings to notices
  - hv_netvsc: fix race of netvsc and VF register_netdevice
  - Input: xpad - add HyperX Clutch Gladiate Support
  - btrfs: make error messages more clear when getting a chunk map
  - btrfs: send: ensure send_fd is writable
  - btrfs: fix off-by-one when checking chunk map includes logical address
  - btrfs: ref-verify: fix memory leaks in btrfs_ref_tree_mod()
  - btrfs: add dmesg output for first mount and last unmount of a filesystem
  - parisc: Drop the HP-UX ENOSYM and EREMOTERELEASE error codes
  - powerpc: Don't clobber f0/vs0 during fp|altivec register save
  - iommu/vt-d: Add MTL to quirk list to skip TE disabling
  - bcache: revert replacing IS_ERR_OR_NULL with IS_ERR
  - dm verity: don't perform FEC for failed readahead IO
  - dm-verity: align struct dm_verity_fec_io properly
  - ALSA: hda/realtek: Add supported ALC257 for ChromeOS
  - ALSA: hda/realtek: Headset Mic VREF to 100%
  - ALSA: hda: Disable power-save on KONTRON SinglePC
  - mmc: block: Do not lose cache flush during CQE error recovery
  - firewire: core: fix possible memory leak in create_units()
  - pinctrl: avoid reload of p state in list iteration
  - io_uring: fix off-by one bvec index
  - USB: dwc3: qcom: fix wakeup after probe deferral
  - usb: dwc3: set the dma max_seg_size
  - usb: dwc3: Fix default mode initialization
  - USB: dwc2: write HCINT with INTMASK applied
  - USB: serial: option: don't claim interface 4 for ZTE MF290
  - USB: serial: option: fix FM101R-GL defines
  - USB: serial: option: add Fibocom L7xx modules
  - bcache: fixup lock c->root error
  - bcache: fixup init dirty data errors
  - bcache: prevent potential division by zero error
  - bcache: check return value from btree_node_alloc_replacement()
  - dm-delay: fix a race between delay_presuspend and delay_bio
  - hv_netvsc: Mark VF as slave before exposing it to user-mode
  - hv_netvsc: Fix race of register_netdevice_notifier and VF register
  - USB: serial: option: add Luat Air72*U series products
  - s390/dasd: protect device queue against concurrent access
  - bcache: fixup multi-threaded bch_sectors_dirty_init() wake-up race
  - bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce()
  - swiotlb-xen: provide the "max_mapping_size" method
  - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
  - ASoC: simple-card: fixup asoc_simple_probe() error handling
  - nfsd: lock_rename() needs both directories to live on the same fs
  - ext4: using nofail preallocation in ext4_es_insert_extent()
  - ext4: using nofail preallocation in ext4_es_insert_delayed_block()
  - ext4: use pre-allocated es in __es_remove_extent()
  - ext4: use pre-allocated es in __es_insert_extent()
  - ext4: factor out __es_alloc_extent() and __es_free_extent()
  - ext4: add a new helper to check if es must be kept
  - MIPS: KVM: Fix a build warning about variable set but not used
  - media: ccs: Correctly initialise try compose rectangle
  - lockdep: Fix block chain corruption
  - USB: dwc3: qcom: fix ACPI platform device leak
  - USB: dwc3: qcom: fix resource leaks on probe deferral
  - afs: Fix file locking on R/O volumes to operate in local mode
  - afs: Return ENOENT if no cell DNS record can be found
  - net: axienet: Fix check for partial TX checksum
  - amd-xgbe: propagate the correct speed and duplex status
  - amd-xgbe: handle the corner-case during tx completion
  - amd-xgbe: handle corner-case during sfp hotplug
  - arm/xen: fix xen_vcpu_info allocation alignment
  - net/smc: avoid data corruption caused by decline
  - net: usb: ax88179_178a: fix failed operations during ax88179_reset
  - ipv4: Correct/silence an endian warning in __ip_do_redirect
  - HID: fix HID device resource race between HID core and debugging support
  - HID: core: store the unique system identifier in hid_device
  - drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full
  - ata: pata_isapnp: Add missing error check for devm_ioport_map()
  - wireguard: use DEV_STATS_INC()
  - drm/panel: simple: Fix Innolux G101ICE-L01 timings
  - drm/panel: simple: Fix Innolux G101ICE-L01 bus flags
  - drm/panel: auo,b101uan08.3: Fine tune the panel power sequence
  - drm/panel: boe-tv101wum-nl6: Fine tune the panel power sequence
  - afs: Make error on cell lookup failure consistent with OpenAFS
  - afs: Fix afs_server_list to be cleaned up with RCU
  - PCI: keystone: Drop __init from ks_pcie_add_pcie_{ep,port}()
  - !5612 【OLK-5.10】Add Chengdu BeiZhongWangXin Technology N5/N6 Series Network Card Driver
  - !5736 Backport 5.10.202 LTS patches from upstream
  - !6033  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
  - !6003  KVM: s390: vsie: fix race during shadow creation
  - !6103  riscv: Sparse-Memory/vmemmap out-of-bounds fix
  - !6065 v4  arm64 bpf trampoline for olk-5.10
  - !6116  wifi: rt2x00: restart beacon queue when hardware reset
  - !6047  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
  - vfio/pci: Lock external INTx masking ops
  - !6108 udma: optimize latency for non-share-jfr mode
  - !6101  vfio/pci: Disable auto-enable of exclusive INTx IRQ
  - !5486 [OLK-5.10] support the AMD Zen5 Turin
  - !5717 v2  fix CVE-2023-52587
  - !6050  wifi: mac80211: fix race condition on enabling fast-xmit
  - !4923  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
  - xen/events: close evtchn after mapping cleanup
  - wifi: rt2x00: restart beacon queue when hardware reset
  - cifs: Fix UAF in cifs_demultiplex_thread()
  - hns3 udma: optimize latency for non-share-jfr mode
  - riscv: Sparse-Memory/vmemmap out-of-bounds fix
  - vfio/pci: Disable auto-enable of exclusive INTx IRQ
  - !6016  btrfs: don't drop extent_map for free space inode on write error
  - !6031  nilfs2: fix potential bug in end_buffer_async_write
  - !5847  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
  - mmc: mmci: stm32: fix DMA API overlapping mappings warning
  - mmc: mmci: stm32: use a buffer for unaligned DMA requests
  - !5803  fs/ntfs3: Fix an NULL dereference bug
  - !5977  btrfs: dev-replace: properly validate device names
  - !5921  ext4: fix double-free of blocks due to wrong extents moved_len
  - !6029  ceph: prevent use-after-free in encode_cap_msg()
  - !5973  EDAC/thunderx: Fix possible out-of-bounds string access
  - !6052  fs/ntfs3: fix lbk-CVE-2023-52640
  - !6037  fix-CVE-2024-26706
  - !6040  nilfs2: fix data corruption in dsync block recovery for small block sizes
  - config: Enable DYNAMIC_FTRACE_WITH_DIRECT_CALLS
  - arm64: ftrace: Support direct call for no literal module functions
  - arm64: ftrace: Add ftrace direct call support
  - arm64: ftrace: Support long jump for ftrace direct call
  - ftrace: Allow users to disable ftrace direct call
  - bpf, arm64: Fix BTI type used for freplace attached functions
  - bpf, arm64: Fixed a BTI error on returning to patched function
  - bpf, arm64: Fix bpf trampoline instruction endianness
  - bpf, arm64: Fix compile error in dummy_tramp()
  - bpf, arm64: Mark dummy_tramp as global
  - bpf, arm64: Add bpf trampoline for arm64
  - bpf, arm64: Implement bpf_arch_text_poke() for arm64
  - arm64: Add LDR (literal) instruction
  - bpf, arm64: Adjust the offset of str/ldr(immediate) to positive number
  - bpf, arm64: Optimize BPF store/load using arm64 str/ldr(immediate offset)
  - arm64, insn: Add ldr/str with immediate offset
  - x86/ibt,ftrace: Search for __fentry__ location
  - !6017  drm/amdgpu: fix use-after-free bug
  - fs/ntfs3: Fix oob in ntfs_listxattr
  - fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
  - ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
  - wifi: mac80211: fix race condition on enabling fast-xmit
  - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
  - !6020  net/sched: act_mirred: use the backlog for mirred ingress
  - !5995  mm/swap: fix race when skipping swapcache
  - nilfs2: fix data corruption in dsync block recovery for small block sizes
  - !6006  fix CVE-2024-26669
  - parisc/unaligned: Fix emulate_ldw() breakage
  - parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
  - parisc: Fix random data corruption from exception handler
  - parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
  - parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
  - parisc/unaligned: Rewrite inline assembly of emulate_ldw()
  - parisc: Mark ex_table entries 32-bit aligned in uaccess.h
  - parisc: Fix some apparent put_user() failures
  - parisc: Implement __get/put_kernel_nofault()
  - parisc: Drop strnlen_user() in favour of generic version
  - parisc: Switch user access functions to signal errors in r29 instead of r8
  - parisc/unaligned: Rewrite inline assembly of emulate_ldh()
  - parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
  - !5969  fbdev: savage: Error out if pixclock equals zero
  - drivers: add Chengdu BeiZhongWangXin Technology N5/N6 Series Network Card Driver
  - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
  - !5976  dm-crypt: don't modify the data when using authenticated encryption
  - objtool/x86: Use asm/nops.h
  - !6011 udma: fix a bug in udma dfx
  - nilfs2: fix potential bug in end_buffer_async_write
  - !6018 v2  IB/hfi1: Fix sdma.h tx->num_descs off-by-one error
  - ceph: prevent use-after-free in encode_cap_msg()
  - !5979  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
  - !5970  fixup CVE-2024-26751
  - net/sched: act_mirred: use the backlog for mirred ingress
  - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error
  - drm/amdgpu: fix use-after-free bug
  - !5950  RDMA/qedr: Fix qedr_create_user_qp error flow
  - btrfs: don't drop extent_map for free space inode on write error
  - !5998  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
  - !5996  mptcp: fix double-free on socket dismantle
  - !5993  ipv6: sr: fix possible use-after-free and null-ptr-deref
  - !5763  CVE-2024-26684 bugfix for OLK-5.10
  - hns3 udma: fix the dfx structure is deleted concurrently.
  - !5975 udma: fix a bug in QP creation
  - net/sched: flower: Fix kabi change
  - net/sched: flower: Fix chain template offload
  - KVM: s390: vsie: fix race during shadow creation
  - net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
  - mptcp: fix double-free on socket dismantle
  - mm/swap: fix race when skipping swapcache
  - ipv6: sr: fix possible use-after-free and null-ptr-deref
  - !5901  CVE-2024-26695
  - !5853  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
  - !5930  RDMA/srpt: Support specifying the srpt_service_guid parameter
  - !5758  tunnels: fix out of bounds access when building IPv6 PMTU error
  - !5812  afs: Increase buffer size in afs_update_volume_status()
  - !5852  CVE-2024-26809
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
  - btrfs: dev-replace: properly validate device names
  - dm-crypt: don't modify the data when using authenticated encryption
  - hns3 udma: modify the process of create qp
  - EDAC/thunderx: Fix possible out-of-bounds string access
  - !5943  CVE-2021-46926
  - interconnect: qcom: Add support for mask-based BCMs
  - netfilter: nf_tables: disable toggling dormant table state more than once
  - netfilter: nf_tables: fix table flag updates
  - netfilter: nftables: update table flags from the commit phase
  - drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox
  - drm/amdgpu: fix error handling in amdgpu_bo_list_get()
  - drm/amd/pm: Handle non-terminated overdrive commands.
  - ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks
  - ext4: correct the start block of counting reserved clusters
  - ext4: correct offset of gdb backup in non meta_bg group to update_backups
  - ext4: apply umask if ACL support is disabled
  - Revert "net: r8169: Disable multicast filter for RTL8168H and RTL8107E"
  - media: qcom: camss: Fix vfe_get() error jump
  - mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors
  - nfsd: fix file memleak on client_opens_release
  - media: venus: hfi: add checks to handle capabilities from firmware
  - media: venus: hfi: fix the check to handle session buffer requirement
  - media: venus: hfi_parser: Add check to keep the number of codecs within range
  - media: sharp: fix sharp encoding
  - media: lirc: drop trailing space from scancode transmit
  - f2fs: avoid format-overflow warning
  - i2c: i801: fix potential race in i801_block_transaction_byte_by_byte
  - net: phylink: initialize carrier state at creation
  - net: dsa: lan9303: consequently nested-lock physical MDIO
  - i2c: designware: Disable TX_EMPTY irq while waiting for block length byte
  - lsm: fix default return value for inode_getsecctx
  - lsm: fix default return value for vm_enough_memory
  - Revert ncsi: Propagate carrier gain/loss events to the NCSI controller
  - arm64: dts: qcom: ipq6018: Fix tcsr_mutex register size
  - arm64: dts: qcom: ipq6018: switch TCSR mutex to MMIO
  - PCI: exynos: Don't discard .remove() callback
  - Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE
  - Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables
  - bluetooth: Add device 13d3:3571 to device tables
  - bluetooth: Add device 0bda:887b to device tables
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559
  - cpufreq: stats: Fix buffer overflow detection in trans_stats()
  - tty: serial: meson: fix hard LOCKUP on crtscts mode
  - serial: meson: Use platform_get_irq() to get the interrupt
  - tty: serial: meson: retrieve port FIFO size from DT
  - serial: meson: remove redundant initialization of variable id
  - ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC
  - ALSA: hda/realtek - Add Dell ALC295 to pin fall back table
  - ALSA: info: Fix potential deadlock at disconnection
  - xhci: Enable RPM on controllers that support low-power states
  - parisc/pgtable: Do not drop upper 5 address bits of physical address
  - parisc: Prevent booting 64-bit kernels on PA1.x machines
  - i3c: master: cdns: Fix reading status register
  - mtd: cfi_cmdset_0001: Byte swap OTP info
  - mm/memory_hotplug: use pfn math in place of direct struct page manipulation
  - mm/cma: use nth_page() in place of direct struct page manipulation
  - dmaengine: stm32-mdma: correct desc prep when channel running
  - mcb: fix error handling for different scenarios when parsing
  - i2c: core: Run atomic i2c xfer when !preemptible
  - kernel/reboot: emergency_restart: Set correct system_state
  - quota: explicitly forbid quota files from being encrypted
  - PCI: keystone: Don't discard .probe() callback
  - PCI: keystone: Don't discard .remove() callback
  - genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware
  - mmc: meson-gx: Remove setting of CMD_CFG_ERROR
  - wifi: ath11k: fix htt pktlog locking
  - wifi: ath11k: fix dfs radar event locking
  - wifi: ath11k: fix temperature event locking
  - ima: detect changes to the backing overlay file
  - firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit
  - btrfs: don't arbitrarily slow down delalloc if we're committing
  - rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects
  - PM: hibernate: Clean up sync_read handling in snapshot_write_next()
  - PM: hibernate: Use __get_safe_page() rather than touching the list
  - arm64: dts: qcom: ipq6018: Fix hwlock index for SMEM
  - PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common()
  - mmc: sdhci_am654: fix start loop index for TAP value parsing
  - mmc: vub300: fix an error code
  - clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks
  - clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks
  - parisc/pdc: Add width field to struct pdc_model
  - arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
  - ACPI: resource: Do IRQ override on TongFang GMxXGxx
  - watchdog: move softlockup_panic back to early_param
  - PCI/sysfs: Protect driver's D3cold preference from user space
  - hvc/xen: fix error path in xen_hvc_init() to always register frontend driver
  - hvc/xen: fix console unplug
  - tty/sysrq: replace smp_processor_id() with get_cpu()
  - audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare()
  - audit: don't take task_lock() in audit_exe_compare() code path
  - KVM: x86: Ignore MSR_AMD64_TW_CFG access
  - KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space
  - scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers
  - scsi: mpt3sas: Fix loop logic
  - bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END
  - bpf: Fix check_stack_write_fixed_off() to correctly spill imm
  - randstruct: Fix gcc-plugin performance mode to stay in group
  - powerpc/perf: Fix disabling BHRB and instruction sampling
  - media: venus: hfi: add checks to perform sanity on queue pointers
  - cifs: fix check of rc in function generate_smb3signingkey
  - cifs: spnego: add ';' in HOST_KEY_LEN
  - tools/power/turbostat: Fix a knl bug
  - macvlan: Don't propagate promisc change to lower dev in passthru
  - net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors
  - net/mlx5_core: Clean driver version and name
  - net/mlx5e: fix double free of encap_header
  - net: stmmac: fix rx budget limit check
  - netfilter: nf_conntrack_bridge: initialize err to 0
  - net: ethernet: cortina: Fix MTU max setting
  - net: ethernet: cortina: Handle large frames
  - net: ethernet: cortina: Fix max RX frame define
  - bonding: stop the device in bond_setup_by_slave()
  - ptp: annotate data-race around q->head and q->tail
  - xen/events: fix delayed eoi list handling
  - ppp: limit MRU to 64K
  - tipc: Fix kernel-infoleak due to uninitialized TLV value
  - tty: Fix uninit-value access in ppp_sync_receive()
  - gfs2: Silence "suspicious RCU usage in gfs2_permission" warning
  - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
  - NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO
  - SUNRPC: Add an IS_ERR() check back to where it was
  - SUNRPC: ECONNRESET might require a rebind
  - xhci: turn cancelled td cleanup to its own function
  - wifi: iwlwifi: Use FW rate for non-data frames
  - pwm: Fix double shift bug
  - drm/amdgpu: fix software pci_unplug on some chips
  - ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings
  - kgdb: Flush console before entering kgdb on panic
  - drm/amd/display: Avoid NULL dereference of timing generator
  - media: imon: fix access to invalid resource for the second interface
  - media: cobalt: Use FIELD_GET() to extract Link Width
  - gfs2: fix an oops in gfs2_permission
  - gfs2: ignore negated quota changes
  - media: vivid: avoid integer overflow
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker
  - i2c: sun6i-p2wi: Prevent potential division by zero
  - 9p/trans_fd: Annotate data-racy writes to file::f_flags
  - usb: gadget: f_ncm: Always set current gadget in ncm_bind()
  - tty: vcc: Add check for kstrdup() in vcc_probe()
  - exfat: support handle zero-size directory
  - HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W
  - misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
  - atm: iphase: Do PCI error checks on own line
  - PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields
  - ALSA: hda: Fix possible null-ptr-deref when assigning a stream
  - ARM: 9320/1: fix stack depot IRQ stack filter
  - HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround
  - jfs: fix array-index-out-of-bounds in diAlloc
  - jfs: fix array-index-out-of-bounds in dbFindLeaf
  - fs/jfs: Add validity check for db_maxag and db_agpref
  - fs/jfs: Add check for negative db_l2nbperpage
  - RDMA/hfi1: Use FIELD_GET() to extract Link Width
  - ASoC: soc-card: Add storage for PCI SSID
  - selftests/efivarfs: create-read: fix a resource leak
  - drm/panel: st7703: Pick different reset sequence
  - drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
  - drm/panel: fix a possible null pointer dereference
  - drm/amdgpu: Fix potential null pointer derefernce
  - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
  - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
  - drm/msm/dp: skip validity check for DP CTS EDID checksum
  - drm/komeda: drop all currently held locks if deadlock happens
  - platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e
  - Bluetooth: Fix double free in hci_conn_cleanup
  - Bluetooth: btusb: Add date->evt_skb is NULL check
  - wifi: ath10k: Don't touch the CE interrupt registers after power up
  - net: annotate data-races around sk->sk_dst_pending_confirm
  - net: annotate data-races around sk->sk_tx_queue_mapping
  - wifi: ath10k: fix clang-specific fortify warning
  - wifi: ath9k: fix clang-specific fortify warnings
  - bpf: Detect IP == ksym.end as part of BPF program
  - wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
  - wifi: mac80211_hwsim: fix clang-specific fortify warning
  - x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size
  - clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware
  - clocksource/drivers/timer-imx-gpt: Fix potential memory leak
  - perf/core: Bail out early if the request AUX area is out of bound
  - locking/ww_mutex/test: Fix potential workqueue corruption
  - ARM: ep93xx: Add terminator to gpiod_lookup_table
  - fbdev: savage: Error out if pixclock equals zero
  - !5781  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
  - !5884  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
  - RDMA/qedr: Fix qedr_create_user_qp error flow
  - ALSA: hda: intel-sdw-acpi: harden detection of controller
  - RDMA/srpt: Support specifying the srpt_service_guid parameter
  - ext4: fix double-free of blocks due to wrong extents moved_len
  - crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
  - KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
  - dmaengine: ti: edma: Add some null pointer checks to the edma_probe
  - netfilter: nft_set_pipapo: release elements in clone only from destroy path
  - netfilter: nft_set_pipapo: remove scratch_aligned pointer
  - netfilter: nft_set_pipapo: add helper to release pcpu scratch area
  - netfilter: nft_set_pipapo: store index in scratch maps
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
  - afs: Increase buffer size in afs_update_volume_status()
  - fs/ntfs3: Fix an NULL dereference bug
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
  - net: stmmac: xgmac: fix a typo of register name in DPP safety handling
  - net: stmmac: xgmac: use #define for string constants
  - net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
  - tunnels: fix out of bounds access when building IPv6 PMTU error
  - IB/ipoib: Fix mcast list locking
  - RDMA/IPoIB: Fix error code return in ipoib_mcast_join
  - x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled
  - x86/CPU/AMD: Check vendor in the AMD microcode callback
  - x86/CPU/AMD: Add more models to X86_FEATURE_ZEN5
  - x86/CPU/AMD: Add X86_FEATURE_ZEN5
  - x86/cpu: Support AMD Automatic IBRS
  - Documentation/hw-vuln: Update spectre doc
  - x86: Remove dynamic NOP selection
  - x86/CPU/AMD: Add X86_FEATURE_ZEN1
  - x86/CPU/AMD: Drop now unused CPU erratum checking function
  - x86/CPU/AMD: Get rid of amd_erratum_1485[]
  - x86/CPU/AMD: Get rid of amd_erratum_400[]
  - x86/CPU/AMD: Get rid of amd_erratum_383[]
  - x86/CPU/AMD: Get rid of amd_erratum_1054[]
  - x86/CPU/AMD: Move the DIV0 bug detection to the Zen1 init function
  - x86/CPU/AMD: Move Zenbleed check to the Zen2 init function
  - x86/CPU/AMD: Rename init_amd_zn() to init_amd_zen_common()
  - x86/CPU/AMD: Call the spectral chicken in the Zen2 init function
  - x86/CPU/AMD: Move erratum 1076 fix into the Zen1 init function
  - x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function
  - x86/CPU/AMD: Carve out the erratum 1386 fix
  - x86/CPU/AMD: Add ZenX generations flags
  - x86/CPU/AMD: Make sure EFER[AIBRSE] is set
  - x86: Fix comment for X86_FEATURE_ZEN
  - x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
  - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-197.0.0.110
changelog:
  - !5273  net/smc: fix illegal rmb_desc access in SMC-D connection dump
  - !6486  devlink: fix possible use-after-free and memory leaks in devlink_init()
  - !6515  fix CVE-2023-52498
  - !5468  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
  - !6314  fixup CVE-2024-26908
  - PM: sleep: Fix error handling in dpm_prepare()
  - PM: sleep: Fix possible deadlocks in core system-wide PM code
  - PM: core: Remove unnecessary (void *) conversions
  - PM: sleep: Avoid calling put_device() under dpm_list_mtx
  - PM: sleep: Use dev_printk() when possible
  - async: Introduce async_schedule_dev_nocall()
  - async: Split async_schedule_node_domain()
  - !6316  scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
  - !6399  wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces
  - !6407  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
  - !6455  CVE-2021-47182
  - devlink: fix possible use-after-free and memory leaks in devlink_init()
  - !6423  tracing/trigger: Fix to return error if failed to alloc snapshot
  - scsi: core: Fix scsi_mode_sense() buffer length handling
  - scsi: core: Reshuffle response handling in scsi_mode_sense()
  - !6281 v2  net/mlx5: Update error handler for UCTX and UMEM
  - !6428  net/sched: flower: Fix unable to handle page fault bug in fl_init
  - !6267  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
  - !6279  Bluetooth: Avoid potential use-after-free in hci_error_reset
  - !6259  arp: Prevent overflow in arp_req_get().
  - !6312  fix CVE-2024-24861 for 5.10
  - !6308 v3  ima: Avoid blocking in RCU read-side critical section
  - net/sched: flower: Fix unable to handle page fault bug in fl_init
  - tracing/trigger: Fix to return error if failed to alloc snapshot
  - !6291  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
  - wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces
  - !6295 hns3 udma: adjustment of the maximum number of Jettys
  - !6202  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
  - scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
  - !6294 [sync] PR-6177:  arm64/mpam: Not allowed setting 0 to cache portion bit mask
  - !6293 [sync] PR-6176:  arm64/mpam: return EOPNOTSUPP when changing rmid of monitor group or resource group with monitor
  - !6284  net/mlx5e: CT, Fix multiple allocations and memleak of mod acts
  - x86/xen: Add some null pointer checking to smp.c
  - media: xc4000: Fix atomicity violation in xc4000_get_frequency
  - ima: Avoid blocking in RCU read-side critical section
  - !6076  Fix CVE-2024-26764
  - arm64/mpam: Not allowed setting 0 to cache portion bit mask
  - arm64/mpam: return EOPNOTSUPP when changing rmid of monitor group or resource group with monitor
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
  - hns3 udma: adjustment of the maximum number of Jettys
  - !6263 udma: fix a bug of jfr record_db
  - net/mlx5e: CT, Fix multiple allocations and memleak of mod acts
  - net/mlx5: Update error handler for UCTX and UMEM
  - Bluetooth: Avoid potential use-after-free in hci_error_reset
  - !6262 scsi: hisi_sas: Remove hisi_hba->timer for v3 hw
  - !5965  Fix CVE-2023-52441 and integrate the pre-patch
  - !6086  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
  - !6085  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
  - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
  - scsi: hisi_sas: Remove hisi_hba->timer for v3 hw
  - hns3 udma: fixes errors related to jfr RECORD_DB.
  - arp: Prevent overflow in arp_req_get().
  - !6199  writeback fix softlockup
  - !6087  net/sched: act_mirred: don't override retval if we already lost the skb
  - !6082  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
  - !6058  net: ip_tunnel: prevent perpetual headroom growth
  - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
  - cgroup_writeback: fix softlockup for blkcg->memcg_list
  - net/sched: act_mirred: don't override retval if we already lost the skb
  - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
  - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
  - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
  - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
  - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
  - net: ip_tunnel: prevent perpetual headroom growth
  - ksmbd: fix out of bounds in init_smb2_rsp_hdr()
  - ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
  - ksmbd: return unsupported error on smb1 mount
  - ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect
  - media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-198.0.0.111
changelog:
  - !6904  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
  - !6918  bpf: Fix hashtab overflow check on 32-bit arches
  - !6928  firmware: arm_scmi: Harden accesses to the reset domains
  - !6924  bpf: Fix stackmap overflow check on 32-bit arches
  - !6861  media: dvb-frontends: avoid stack overflow warnings with clang
  - !6840  CVE-2023-52650
  - !6851  serial/pmac_zilog: Remove flawed mitigation for rx irq flood
  - !6826  fat: fix uninitialized field in nostale filehandles
  - !6838  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
  - !6808  CVE-2024-26923
  - firmware: arm_scmi: Harden accesses to the reset domains
  - bpf: Fix stackmap overflow check on 32-bit arches
  - bpf: Fix hashtab overflow check on 32-bit arches
  - !6846  perf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf NMI and throttling
  - bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
  - !6849  erofs: fix pcluster use-after-free on UP platforms
  - !6740  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
  - !6473  nvme-fc: do not wait in vain when unloading module
  - media: dvb-frontends: avoid stack overflow warnings with clang
  - !6802  x86,static_call: Fix __static_call_return0 for i386
  - serial/pmac_zilog: Remove flawed mitigation for rx irq flood
  - !6835  kprobes: Fix check for probe enabled in kill_kprobe()
  - erofs: fix pcluster use-after-free on UP platforms
  - perf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf NMI and throttling
  - drm/tegra: dsi: Add missing check for of_find_device_by_node
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection()
  - !6799  rtmutex: Add acquire semantics for rtmutex lock acquisition slow path
  - kprobes: Fix check for probe enabled in kill_kprobe()
  - !6797  scsi: target: core: Add TMF to tmr_list handling
  - fat: fix uninitialized field in nostale filehandles
  - !6798  media: ir_toy: fix a memleak in irtoy_tx
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
  - af_unix: Fix garbage collector racing against connect()
  - !6756  vfio/fsl-mc: Block calling interrupt handler without trigger
  - x86,static_call: Fix __static_call_return0 for i386
  - !6704  x86/thermal: Fix LVT thermal setup for SMI delivery mode
  - !6702  static_call: Don't make __static_call_return0 static
  - rtmutex: Add acquire semantics for rtmutex lock acquisition slow path
  - !6700  PCI/IOV: Enlarge virtfn sysfs name buffer
  - !5905 [OLK 5.10] RDMA/hns: Fix incorrect iteration number of DCA umem sg entries and error return in hns_roce_v2_modify_srq()
  - media: ir_toy: fix a memleak in irtoy_tx
  - scsi: target: core: Add TMF to tmr_list handling
  - !6684  infiniband/hw/hiroce3: Add Huawei Intelligent Network Card RDMA Driver
  - !6755  binder: check offset alignment in binder_get_object()
  - !6729  PCI/IOV: Improve performance of creating VFs concurrently
  - !6669  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
  - !6680  cifs: fix underflow in parse_server_interfaces()
  - !6719  drm/amdgpu: validate the parameters of bo mapping operations more clearly
  - vfio/fsl-mc: Block calling interrupt handler without trigger
  - binder: check offset alignment in binder_get_object()
  - !6739 v2  Apply patches of ses from stable
  - !6677 v3  olk-5.10: bugfix for mm
  - !6654  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
  - !6683 v2  CVE-2024-26921
  - cpuset: fix race between rebuild scheduler domains and hotplug work
  - scsi: ses: Handle enclosure with just a primary component gracefully
  - Revert "scsi: ses: Handle enclosure with just a primary component gracefully"
  - Revert "scsi: ses: Fix crash caused by kfree an invalid pointer"
  - scsi: ses: Fix possible desc_ptr out-of-bounds accesses
  - Revert "scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process"
  - !6501  cachefiles: fix memory leak in cachefiles_add_cache()
  - PCI/IOV: Improve performance of creating VFs concurrently
  - drm/amdgpu: validate the parameters of bo mapping operations more clearly
  - !6676  cvm feature patches
  - x86/thermal: Fix LVT thermal setup for SMI delivery mode
  - static_call: Don't make __static_call_return0 static
  - PCI/IOV: Enlarge virtfn sysfs name buffer
  - !6567  CVE-2024-26896
  - !6580  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
  - infiniband/hw/hiroce3: Add Huawei Intelligent Network Card RDMA Driver
  - net/ethernet/huawei/hinic3: Add the CQM on which the RDMA depends
  - sk_buff: Fix KABI break for the modification of struct sk_buff
  - inet: inet_defrag: prevent sk release while still in use
  - net: Fix KABI break for introducing is_skb_wmem()
  - skb_expand_head() adjust skb->truesize incorrectly
  - skbuff: introduce skb_expand_head()
  - cifs: fix underflow in parse_server_interfaces()
  - mm/madvise: fix potential pte_unmap_unlock pte error
  - mm/page_alloc: always attempt to allocate at least one page during bulk allocation
  - gicv3: add lpi support for cvm guest
  - config: modify arm64 defconfig for cvm feature
  - mm: enable swiotlb alloc for cvm share mem
  - swiotlb: add swiotlb io_tlb_list release slots methd
  - swiotlb: Add restricted DMA alloc/free support
  - kvm: add support for multi-numa and fix kabi change
  - pmu: enable pmu phys irq inject for cvm
  - kvm: add cvm host feature
  - !6660 udma: fix bugs of record_db
  - !6640  hsr: Fix uninit-value access in hsr_get_node()
  - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
  - !6620  packet: annotate data-races around ignore_outgoing
  - !6618  net/bnx2x: Prevent access to a freed page in page_pool
  - !6592  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
  - !6619  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  - !6635 backport RDMA/hns: Fix DCA's dependence on ib_uverbs from OLK-6.6
  - hns3 udma: addressing stage adaptation
  - !6257 HNS3: Do some optimizing job and support fast path
  - !6623  amdkfd: use calloc instead of kzalloc to avoid integer overflow
  - hns3 udma: unified coding style
  - hns3 udma: Interface for adding a user ctrl.
  - hsr: Fix uninit-value access in hsr_get_node()
  - !6561  md: fix kmemleak of rdev->serial
  - !6631 Backport 5.10.205 LTS patches from upstream
  - powerpc/ftrace: Fix stack teardown in ftrace_no_trace
  - powerpc/ftrace: Create a dummy stackframe to fix stack unwind
  - tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf()
  - tty: n_gsm, remove duplicates of parameters
  - tty: n_gsm: fix tty registration before control channel open
  - USB: gadget: core: adjust uevent timing on gadget unbind
  - ring-buffer: Fix a race in rb_time_cmpxchg() for 32 bit archs
  - ring-buffer: Fix writing to the buffer with max_data_size
  - ring-buffer: Have saved event hold the entire event
  - tracing: Update snapshot buffer on resize if it is allocated
  - ring-buffer: Fix memory leak of free page
  - team: Fix use-after-free when an option instance allocation fails
  - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify
  - soundwire: stream: fix NULL pointer dereference for multi_link
  - HID: hid-asus: add const to read-only outgoing usb buffer
  - net: usb: qmi_wwan: claim interface 4 for ZTE MF290
  - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation
  - HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad
  - HID: hid-asus: reset the backlight brightness level on resume
  - HID: add ALWAYS_POLL quirk for Apple kb
  - HID: glorious: fix Glorious Model I HID report
  - platform/x86: intel_telemetry: Fix kernel doc descriptions
  - bcache: avoid NULL checking to c->root in run_cache_set()
  - bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc()
  - bcache: remove redundant assignment to variable cur_idx
  - bcache: avoid oversize memory allocation by small stripe_size
  - blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!"
  - usb: aqc111: check packet for fixup for true limit
  - drm/mediatek: Add spinlock for setting vblank event in atomic_begin
  - Revert "PCI: acpiphp: Reassign resources on bridge if necessary"
  - ALSA: hda/realtek: Apply mute LED quirk for HP15-db
  - ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants
  - fuse: dax: set fc->dax to NULL in fuse_dax_conn_free()
  - net: atlantic: fix double free in ring reinit logic
  - net: stmmac: Handle disabled MDIO busses from devicetree
  - net: stmmac: use dev_err_probe() for reporting mdio bus registration failure
  - vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space()
  - sign-file: Fix incorrect return values check
  - net: ena: Fix XDP redirection error
  - net: ena: Destroy correct number of xdp queues upon failure
  - net: Remove acked SYN flag from packet in the transmit queue correctly
  - qed: Fix a potential use-after-free in qed_cxt_tables_alloc
  - net: fec: correct queue selection
  - net: vlan: introduce skb_vlan_eth_hdr()
  - atm: solos-pci: Fix potential deadlock on &tx_queue_lock
  - atm: solos-pci: Fix potential deadlock on &cli_queue_lock
  - qca_spi: Fix reset behavior
  - qca_debug: Fix ethtool -G iface tx behavior
  - qca_debug: Prevent crash on TX ring changes
  - HID: lenovo: Restrict detection of patched firmware only to USB cptkbd
  - afs: Fix refcount underflow from error handling race
  - netfilter: nf_tables: fix 'exist' matching on bigendian arches
  - !6485  CVE-2024-26843
  - HNS3: Support debugfs dump fastpath info
  - Support configuration of fastpath feature
  - !6247  ubi: Check for too small LEB size in VTBL code
  - amdkfd: use calloc instead of kzalloc to avoid integer overflow
  - packet: annotate data-races around ignore_outgoing
  - !6539 Backport 5.10.204 LTS patches from upstream
  - !6546 v2  CVE-2024-26907
  - Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  - net/bnx2x: Prevent access to a freed page in page_pool
  - !6597 v3  Fix CVE-2024-26869
  - !6401  btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve
  - !6555 udma: fix bugs in non-share jfr and remove rm mode
  - !6568  IB/hfi1: Fix a memleak in init_credit_return
  - !6579  media: rc: bpf attach/detach requires write permission
  - !6543  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
  - !6520  firmware: arm_scmi: Fix double free in SMC transport cleanup path
  - !6584  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
  - f2fs: fix to truncate meta inode pages forcely
  - f2fs: invalidate meta pages only for post_read required inode
  - f2fs: fix to invalidate META_MAPPING before DIO write
  - f2fs: invalidate META_MAPPING before IPU/DIO write
  - !6566  nfc: nci: free rx_data_reassembly skb on NCI device cleanup
  - !6588  Add hugetlb MADV_DONTNEED support
  - !6437  dm: call the resume method on internal suspend
  - !6442  scsi: pm80xx: Fix memory leak during rmmod
  - !6474  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
  - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
  - hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
  - madvise: use zap_page_range_single for madvise dontneed
  - mm,madvise,hugetlb: fix unexpected data loss with MADV_DONTNEED on hugetlbfs
  - mm: enable MADV_DONTNEED for hugetlb mappings
  - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
  - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
  - media: rc: bpf attach/detach requires write permission
  - !6417  media: pvrusb2: fix uaf in pvr2_context_set_notify
  - !6493  RDMA/srpt: Do not register event handler until srpt device is fully setup
  - IB/hfi1: Fix a memleak in init_credit_return
  - wifi: wfx: fix memory leak when starting AP
  - nfc: nci: free rx_data_reassembly skb on NCI device cleanup
  - !6458  CVE-2024-26813
  - md: fix kmemleak of rdev->serial
  - hns3 udma: modifying the sge address offset in RC Mode.
  - RDMA/mlx5: Fix fortify source warning while accessing Eth segment
  - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
  - stddef: Introduce DECLARE_FLEX_ARRAY() helper
  - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
  - hns3 udma: Code clipping related to RM mode.
  - hns3 udma: Modify qpn alloc function when share jfr is disabled.
  - r8169: fix rtl8125b PAUSE frames blasting when suspended
  - devcoredump: Send uevent once devcd is ready
  - devcoredump : Serialize devcd_del work
  - smb: client: fix potential NULL deref in parse_dfs_referrals()
  - cifs: Fix non-availability of dedup breaking generic/304
  - Revert "btrfs: add dmesg output for first mount and last unmount of a filesystem"
  - mmc: block: Be sure to wait while busy in CQE error recovery
  - platform/x86: asus-wmi: Document the dgpu_disable sysfs attribute
  - tools headers UAPI: Sync linux/perf_event.h with the kernel sources
  - platform/x86: asus-wmi: Fix kbd_dock_devid tablet-switch reporting
  - MIPS: Loongson64: Enable DMA noncoherent support
  - MIPS: Loongson64: Reserve vgabios memory on boot
  - KVM: s390/mm: Properly reset no-dat
  - serial: 8250_omap: Add earlycon support for the AM654 UART controller
  - serial: 8250: 8250_omap: Do not start RX DMA on THRI interrupt
  - serial: 8250: 8250_omap: Clear UART_HAS_RHR_IT_DIS bit
  - serial: sc16is7xx: address RX timeout interrupt errata
  - ARM: PL011: Fix DMA support
  - usb: typec: class: fix typec_altmode_put_partner to put plugs
  - Revert "xhci: Loosen RPM as default policy to cover for AMD xHC 1.1"
  - parport: Add support for Brainboxes IX/UC/PX parallel cards
  - usb: gadget: f_hid: fix report descriptor allocation
  - gpiolib: sysfs: Fix error handling on failed export
  - tracing: Stop current tracer when resizing buffer
  - tracing: Set actual size after ring buffer resize
  - ring-buffer: Force absolute timestamp on discard of event
  - misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write
  - misc: mei: client.c: return negative error code in mei_cl_write
  - arm64: dts: mediatek: mt8183: Fix unit address for scp reserved memory
  - arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names
  - arm64: dts: mediatek: mt7622: fix memory node warning check
  - packet: Move reference count in packet_sock to atomic_long_t
  - tracing: Fix a possible race when disabling buffered events
  - tracing: Fix incomplete locking when disabling buffered events
  - tracing: Disable snapshot buffer when stopping instance tracers
  - tracing: Always update snapshot buffer size
  - checkstack: fix printed address
  - nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage()
  - nilfs2: fix missing error check for sb_set_blocksize call
  - ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5
  - ALSA: pcm: fix out-of-bounds in snd_pcm_state_names
  - riscv: fix misaligned access handling of C.SWSP and C.SDSP
  - ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt
  - ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init
  - scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle()
  - tracing: Fix a warning when allocating buffered events fails
  - ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate
  - hwmon: (acpi_power_meter) Fix 4.29 MW bug
  - RDMA/bnxt_re: Correct module description string
  - RDMA/rtrs-clt: Remove the warnings for req in_use check
  - arm64: dts: rockchip: Expand reg size of vdec node for RK3399
  - tee: optee: Fix supplicant based device enumeration
  - bpf: sockmap, updating the sg structure should also update curr
  - tcp: do not accept ACK of bytes we never sent
  - netfilter: xt_owner: Fix for unsafe access of sk->sk_socket
  - ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit()
  - ionic: Fix dim work handling in split interrupt mode
  - ionic: fix snprintf format length warning
  - net: bnxt: fix a potential use-after-free in bnxt_init_tc
  - i40e: Fix unexpected MFS warning message
  - arcnet: restoring support for multiple Sohard Arcnet cards
  - net: arcnet: com20020 fix error handling
  - mlxbf-bootctl: correctly identify secure boot with development keys
  - hv_netvsc: rndis_filter needs to select NLS
  - octeontx2-pf: Add missing mutex lock in otx2_get_pauseparam
  - ipv6: fix potential NULL deref in fib6_add()
  - of: dynamic: Fix of_reconfig_get_state_change() return value documentation
  - of: Add missing 'Return' section in kerneldoc comments
  - of: Fix kerneldoc output formatting
  - of: base: Fix some formatting issues and provide missing descriptions
  - platform/x86: asus-wmi: Move i8042 filter install to shared asus-wmi code
  - platform/x86: asus-wmi: Simplify tablet-mode-switch handling
  - platform/x86: asus-wmi: Simplify tablet-mode-switch probing
  - platform/x86: asus-wmi: Add support for ROG X13 tablet mode
  - platform/x86: asus-wmi: Adjust tablet/lidflip handling to use enum
  - asus-wmi: Add dgpu disable method
  - platform/x86: asus-nb-wmi: Add tablet_mode_sw=lid-flip quirk for the TP200s
  - platform/x86: asus-nb-wmi: Allow configuring SW_TABLET_MODE method with a module option
  - platform/x86: asus-wmi: Add support for SW_TABLET_MODE on UX360
  - kconfig: fix memory leak from range properties
  - tg3: Increment tx_dropped in tg3_tso_bug()
  - tg3: Move the [rt]x_dropped counters to tg3_napi
  - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test
  - i2c: designware: Fix corrupted memory seen in the ISR
  - firmware: arm_scmi: Fix double free in SMC transport cleanup path
  - cachefiles: fix memory leak in cachefiles_add_cache()
  - RDMA/hns: Fix DCA's dependence on ib_uverbs
  - RDMA/srpt: Do not register event handler until srpt device is fully setup
  - efi: runtime: Fix potential overflow of soft-reserved region size
  - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
  - nvme-fc: do not wait in vain when unloading module
  - vfio/platform: Create persistent IRQ handlers
  - vfio/platform: Disable virqfds on cleanup
  - HNS3: Solve the problem that the tc qdisc configuration in the hardware registration cannot be cleared
  - HNS3: Modify the io process of unic to improve bandwidth
  - HNS3: Do some cleancode job to eliminate warnings
  - HNS3: Change the function name from ubn to ubl
  - HNS3: fix up magic numbers and impertinent judge position
  - scsi: pm80xx: Fix memory leak during rmmod
  - dm: call the resume method on internal suspend
  - media: pvrusb2: fix uaf in pvr2_context_set_notify
  - btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve
  - RDMA/hns: Fix incorrect iteration number of DCA umem sg entries
  - RDMA/hns: fix error return in hns_roce_v2_modify_srq()
  - ubi: Check for too small LEB size in VTBL code


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-199.0.0.112
changelog:
  - !7018  fix CVE-2024-26865
  - !7226  x86/fpu: Invalidate FPU state correctly on exec()
  - !7128 Backport 5.10.206 LTS patches from upstream
  - x86/fpu: Invalidate FPU state correctly on exec()
  - !7213 v2  cpufreq/cppc: fix perf_to_khz/khz_to_perf conversion
  - smb3: Replace smb2pdu 1-element arrays with flex-arrays
  - !7204 udma: fix bugs of DCA and record db
  - cpufreq/cppc: fix perf_to_khz/khz_to_perf conversion
  - !6744  cpufreq/cppc: changing highest_perf to nominal_perf in cppc_cpufreq_cpu_init()
  - !7048  nilfs2: prevent kernel bug at submit_bh_wbc()
  - !7174  CVE-2022-48689
  - !6783 [OLK-5.10] fix HEST memory usage is too high
  - !6685 v2  char: imx-rngc: fix clk_disable_unprepare missing in error path
  - !7189  NTB: fix possible name leak in ntb_register_device()
  - hns3 udma: resolve the problem when resources are reclaimed.
  - hns3 udma: fixed a bug when enabling DCA.
  - NTB: fix possible name leak in ntb_register_device()
  - !7177  ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path
  - !7122 v2  clk: zynq: Prevent null pointer dereference caused by kmalloc failure
  - !7031  Revert "tracing/trigger: Fix to return error if failed to alloc snapshot"
  - ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path
  - tcp: TX zerocopy should not sense pfmemalloc status
  - net: skbuff: update comment about pfmemalloc propagating
  - net: introduce __skb_fill_page_desc_noacc
  - tcp: factor out tcp_build_frag()
  - !6972  ksmbd: validate payload size in ipc response
  - !7143  media: usbtv: Remove useless locks in usbtv_video_free()
  - !6809  memcg: fix possible use-after-free in memcg_write_event_control()
  - !7148  scsi: sd: Fix sd_do_mode_sense() buffer length handling
  - !7139  SUNRPC: fix some memleaks in gssx_dec_option_array
  - !7129  SUNRPC: fix a memleak in gss_import_v2_context
  - scsi: sd: Fix sd_do_mode_sense() buffer length handling
  - spi: atmel: Fix PDC transfer setup bug
  - Bluetooth: SMP: Fix crash when receiving new connection when debug is enabled
  - Revert "MIPS: Loongson64: Enable DMA noncoherent support"
  - dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata()
  - netfilter: nf_tables: skip set commit for deleted/destroyed sets
  - tracing: Fix blocked reader of snapshot buffer
  - ring-buffer: Fix wake ups when buffer_percent is set to 100
  - spi: atmel: Fix CS and initialization bug
  - spi: atmel: Switch to transfer_one transfer method
  - smb: client: fix OOB in SMB2_query_info_init()
  - usb: fotg210-hcd: delete an incorrect bounds test
  - Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE
  - Bluetooth: use inclusive language in SMP
  - Bluetooth: SMP: Convert BT_ERR/BT_DBG to bt_dev_err/bt_dev_dbg
  - ARM: dts: Fix occasional boot hang for am3 usb
  - 9p/net: fix possible memory leak in p9_check_errors()
  - x86/alternatives: Sync core before enabling interrupts
  - lib/vsprintf: Fix %pfwf when current node refcount == 0
  - bus: ti-sysc: Flush posted write only after srst_udelay
  - tracing / synthetic: Disable events after testing in synth_event_gen_test_init()
  - dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp
  - net: ks8851: Fix TX stall caused by TX buffer overrun
  - net: rfkill: gpio: set GPIO direction
  - net: 9p: avoid freeing uninit memory in p9pdu_vreadf
  - Input: soc_button_array - add mapping for airplane mode button
  - Bluetooth: L2CAP: Send reject on command corrupted request
  - Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent
  - USB: serial: option: add Quectel RM500Q R13 firmware support
  - USB: serial: option: add Foxconn T99W265 with new baseline
  - USB: serial: option: add Quectel EG912Y module support
  - USB: serial: ftdi_sio: update Actisense PIDs constant names
  - wifi: cfg80211: fix certs build to not depend on file order
  - wifi: cfg80211: Add my certificate
  - iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma()
  - iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table
  - scsi: bnx2fc: Fix skb double free in bnx2fc_rcv()
  - Input: ipaq-micro-keys - add error handling for devm_kmemdup
  - iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw
  - interconnect: Treat xlate() returning NULL node as an error
  - btrfs: do not allow non subvolume root targets for snapshot
  - smb: client: fix NULL deref in asn1_ber_decoder()
  - ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB
  - ALSA: hda/hdmi: Add quirk to force pin connectivity on NUC10
  - pinctrl: at91-pio4: use dedicated lock class for IRQ
  - i2c: aspeed: Handle the coalesced stop conditions with the start conditions.
  - afs: Fix overwriting of result of DNS query
  - keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
  - net: check dev->gso_max_size in gso_features_check()
  - net: warn if gso_type isn't set for a GSO SKB
  - afs: Fix dynamic root lookup DNS check
  - afs: Fix the dynamic root's d_delete to always delete unused dentries
  - net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()
  - net/rose: fix races in rose_kill_by_device()
  - ethernet: atheros: fix a memleak in atl1e_setup_ring_resources
  - net: sched: ife: fix potential use-after-free
  - net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors
  - net/mlx5: Fix fw tracer first block check
  - net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list()
  - Revert "net/mlx5e: fix double free of encap_header"
  - wifi: mac80211: mesh_plink: fix matches_local logic
  - s390/vx: fix save/restore of fpu kernel context
  - reset: Fix crash when freeing non-existent optional resets
  - ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init
  - smb: client: fix OOB in smb2_query_reparse_point()
  - ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE
  - media: usbtv: Remove useless locks in usbtv_video_free()
  - SUNRPC: fix some memleaks in gssx_dec_option_array
  - !7044 v2  nfs: fix UAF in direct writes
  - !7092  Squashfs: check the inode number is not the invalid value of zero
  - SUNRPC: fix a memleak in gss_import_v2_context
  - clk: zynq: Prevent null pointer dereference caused by kmalloc failure
  - !6965 v2  memcg: fix incorrect value of sysctl_memcg_swap_qos_stat
  - !7054  CVE-2024-27024
  - !7047  backport patch for thp deferred list
  - !7080  drm: nv04: Fix out of bounds access
  - !7086  media: ttpci: fix two memleaks in budget_av_attach
  - !7042  CVE-2024-27034
  - !6818  mm: memcg: fix stale protection of reclaim target memcg
  - Squashfs: check the inode number is not the invalid value of zero
  - media: ttpci: fix two memleaks in budget_av_attach
  - !7013  media: edia: dvbdev: fix a use-after-free
  - !6994 v2  net/mlx5e: Prevent deadlock while disabling aRFS
  - drm: nv04: Fix out of bounds access
  - !7039  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
  - !6655 [OLK-5.10] mucse rnpm driver fw mailbox maybe failed to communicate with PF for mucse N10/N400 chips
  - !5964 drivers: close default yusur KPU FLEXFLOW-2100P driver support
  - !6954 [OLK-5.10]Fix some bugs of the Mini-IO module
  - !7056  scsi: qla2xxx: Fix command flush on cable pull
  - !7006  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
  - !7003  wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
  - !7041  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
  - scsi: qla2xxx: Fix command flush on cable pull
  - net/rds: fix possible cp null dereference
  - net/rds: fix WARNING in rds_conn_connect_if_down
  - nilfs2: prevent kernel bug at submit_bh_wbc()
  - THP: avoid lock when check whether THP is in deferred list
  - mm/mmu_gather: limit free batch count and add schedule point in tlb_batch_pages_flush
  - nfs: fix UAF in direct writes
  - f2fs: compress: fix to cover normal cluster write with cp_rwsem
  - f2fs: reduce stack memory cost by using bitfield in struct f2fs_io_info
  - f2fs: replace congestion_wait() calls with io_schedule_timeout()
  - f2fs: fix to stop filesystem update once CP failed
  - !6990  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
  - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
  - !7000  fix CVE-2024-27010
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
  - Revert "tracing/trigger: Fix to return error if failed to alloc snapshot"
  - !6843 v2  scsi: core: Fix unremoved procfs host directory regression
  - !6939  USB: core: Fix deadlock in usb_deauthorize_interface()
  - !6906  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
  - !6977  wireguard: netlink: access device through ctx instead of peer
  - !6956  netfilter: nf_tables: fix memleak in map from abort path
  - !6988  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
  - !6914  usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error
  - !6855  KVM: Always flush async #PF workqueue when vCPU is being destroyed
  - tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge()
  - tcp: Clean up kernel listener's reqsk in inet_twsk_purge()
  - media: edia: dvbdev: fix a use-after-free
  - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
  - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
  - net/sched: fix kabi change in struct Qdisc
  - net/sched: Fix mirred deadlock on device recursion
  - net/mlx5e: Prevent deadlock while disabling aRFS
  - !6943  speakup: Avoid crash on very long word
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
  - !6959  mac802154: fix llsec key resources release in mac802154_llsec_key_del
  - !6932  net: enetc: deny offload of tc-based TSN features on VF interfaces
  - !6689  quota: Fix potential NULL pointer dereference
  - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
  - !6964 v2  CVE-2024-27000
  - wireguard: netlink: access device through ctx instead of peer
  - !6891  ima: fix deadlock when traversing "ima_default_rules".
  - ksmbd: validate payload size in ipc response
  - !6872  pstore: inode: Only d_invalidate() is needed
  - !6882  f2fs: compress: fix to guarantee persisting compressed blocks by CP
  - !6895  tun: limit printing rate when illegal packet received by tun dev
  - !6879  net/smc: Fix possible access to freed memory in link clear
  - !6736  add LTS patches to OLK-5.10
  - memcg: fix incorrect value of sysctl_memcg_swap_qos_stat
  - serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
  - serial: mxs-auart: add spinlock around changing cts state
  - serial: core: Provide port lock wrappers
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del
  - netfilter: nf_tables: fix memleak in map from abort path
  - spi: hisi-kunpeng: Delete the dump interface of data registers in debugfs
  - i2c: hisi: Correct the description comment for PIN_MUX METHOD
  - i2c: hisi: Add I2C controller reset and initialization proccess in bus recovery action
  - speakup: Avoid crash on very long word
  - USB: core: Fix deadlock in usb_deauthorize_interface()
  - net: enetc: deny offload of tc-based TSN features on VF interfaces
  - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error
  - drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
  - tun: limit printing rate when illegal packet received by tun dev
  - ima: fix deadlock when traversing "ima_default_rules".
  - f2fs: compress: fix to guarantee persisting compressed blocks by CP
  - net/smc: Fix possible access to freed memory in link clear
  - pstore: inode: Only d_invalidate() is needed
  - KVM: Always flush async #PF workqueue when vCPU is being destroyed
  - scsi: core: Fix unremoved procfs host directory regression
  - mm: memcg: fix stale protection of reclaim target memcg
  - ACPI: APEI: Skip initialization of GHES_ASSIST structures for Machine Check Architecture
  - memcg: fix possible use-after-free in memcg_write_event_control()
  - cpufreq/cppc: changing highest_perf to nominal_perf in cppc_cpufreq_cpu_init()
  - net: fix kabi in struct ipv6_devconf
  - net: release reference to inet6_dev pointer
  - net: change accept_ra_min_rtr_lft to affect all RA lifetimes
  - net: add sysctl accept_ra_min_rtr_lft
  - genetlink: fix kabi change in struct genl_multicast_group
  - genetlink: Use internal flags for multicast groups
  - drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group
  - genetlink: add CAP_NET_ADMIN test for multicast bind
  - quota: Fix potential NULL pointer dereference
  - char: imx-rngc: fix clk_disable_unprepare missing in error path
  - mucse: rnpm fw mailbox maybe failed to communicate with PF
  - drivers: close default yusur KPU FLEXFLOW-2100P driver support


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-200.0.0.113
changelog:
  - !7644  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
  - !7705  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
  - !7749 v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
  - !7651 fix the SPI driver failed to obtain the GPIO pin
  - !7655 v3  KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region()
  - !7675  bpf: Guard stack limits against 32bit overflow
  - !7732 HNS3: Fixed a deadlock issue caused by concurrent VF deactivation and PF reset
  - !7722 urma: fix bugs of urma and udma
  - wifi: iwlwifi: dbg-tlv: ensure NUL termination
  - !7686  ext4: fix corruption during on-line resize
  - !7599  irqchip/gic-v3-its: Prevent double free on error
  - !7674  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
  - HNS3: Fixed a deadlock issue caused by concurrent VF deactivation and PF reset
  - hns3 udma: support user-mode TP connection API
  - urma: upload kernel patch for 20240516_day
  - urma: upload kernel patch for 20240511_mig
  - urma: upload kernel patch for 20240318_happy_birthday
  - urma: upload kernel patch for 20240224_rain
  - urma: upload kernel patch for 20240219_Spring
  - !7579  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
  - !7665 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
  - !7661 [sync] PR-7590:  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
  - pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
  - ext4: fix corruption during on-line resize
  - !7574  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
  - gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
  - driver core: Provide device_match_acpi_handle() helper
  - bpf: Guard stack limits against 32bit overflow
  - net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
  - !7601  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
  - powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
  - drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
  - !7588  mm/swapfile: fix infinite loop in get_swap_pages after set memory.swapfile
  - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region()
  - !7563 udma: fix a bug of segment
  - !7385  CVE-2024-27002
  - hwrng: core - Fix page fault dead lock on mmap-ed hwrng
  - !7577 spi: hisi-kunpeng：backport some bugfixes
  - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
  - irqchip/gic-v3-its: Prevent double free on error
  - !7548  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
  - mm/swapfile: fix infinite loop in get_swap_pages after set memory.swapfile
  - powerpc/powernv: Add a null pointer check to scom_debug_init_one()
  - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
  - spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
  - spi: Add verification for the max_frequency provided by the firmware
  - spi: hisi-kunpeng: switch to use modern name
  - spi: hisi-kunpeng: Fix error checking
  - !7520  drm/i915/gt: Reset queue_priority_hint on parking
  - hns3 udma: the SEG registration failure is rectified.
  - !7538 v2  rcu: shorten the critical section that rnp->lock protects in rcu_dump_cpu_stacks
  - btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
  - !5557 [OLK-5.10]Add support for Mont-TSSE
  - !4642 Add support for Hygon family 18h model 5h HD-Audio
  - !4640 Add support for Hygon model 6h L3 PMU
  - !4639 Some fixes for Hygon model 4h~6h processors
  - !4641 Add support for Hygon model 4h QoS
  - !2583 [OLK-5.10] Driver for Zhaoxin AES and SHA algorithm
  - !6801  block: fix discard
  - rcu: shorten the critical section that rnp->lock protects in rcu_dump_cpu_stacks
  - !7515 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
  - !7356  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
  - !7351  PM / devfreq: Synchronize devfreq_monitor_[start/stop
  - !7361  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
  - drm/i915/gt: Reset queue_priority_hint on parking
  - !7484  fix CVE-2024-26661
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
  - !7402  scsi: lpfc: Fix possible file string name overflow when updating firmware
  - !7404  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
  - !7403  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
  - !7400  net/tg3: fix race condition in tg3_reset_task()
  - !7401  nvme-core: check for too small lba shift
  - !7396  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
  - !7397  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
  - !7398  drm/amd/display: Fix memory leak in dm_sw_fini()
  - !7399  drm/amd/pm: fix a double-free in si_dpm_init
  - drm/amd/display: Fix && vs || typos
  - drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
  - !7476  firewire: nosy: ensure user_length is taken into account when fetching packet contents
  - !7456  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
  - !6524  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  - !7424  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
  - !7346  ppp_async: limit MRU to 64K
  - !5793  um: time-travel: fix time corruption
  - !7315  CVE-2024-26686
  - firewire: nosy: ensure user_length is taken into account when fetching packet contents
  - !7297  powerpc/kasan: Fix addr error caused by page alignment
  - !7229  s390/zcrypt: fix reference counting on zcrypt card objects
  - !7234  SUNRPC: Fix a suspicious RCU usage warning
  - !7235  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
  - !7394 v2  scsi: sr: Do not leak information in ioctl
  - !7308  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
  - netfilter: nf_conntrack_h323: Add protection for bmp length out of range
  - !7420  x86/CPU/AMD: Update the Zenbleed microcode revisions
  - !7426  net: gtp: Fix Use-After-Free in gtp_dellink
  - !7437  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
  - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
  - !7368  bugfix from mainline
  - !7416  cpu/SMT: Make SMT control more robust against enumeration failures
  - net: gtp: Fix Use-After-Free in gtp_dellink
  - net: openvswitch: Fix Use-After-Free in ovs_ct_exit
  - x86/CPU/AMD: Update the Zenbleed microcode revisions
  - !7414  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
  - !7218  CVE-2024-27017
  - cpu/SMT: Make SMT control more robust against enumeration failures
  - clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
  - !7223  major bugfix before 2023
  - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
  - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
  - scsi: lpfc: Fix possible file string name overflow when updating firmware
  - nvme-core: check for too small lba shift
  - net/tg3: fix race condition in tg3_reset_task()
  - drm/amd/pm: fix a double-free in si_dpm_init
  - drm/amd/display: Fix memory leak in dm_sw_fini()
  - drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
  - drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
  - scsi: sr: Do not leak information in ioctl
  - !5469  wifi: iwlwifi: fix a memory corruption
  - clk: mediatek: Do a runtime PM get on controllers during probe
  - x86/srso: Fix vulnerability reporting for missing microcode
  - x86/srso: Don't probe microcode in a guest
  - x86/srso: Set CPUID feature bits independently of bug or mitigation status
  - sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
  - blk-iocost: Fix an UBSAN shift-out-of-bounds warning
  - PM / devfreq: Synchronize devfreq_monitor_[start/stop]
  - ppp_async: limit MRU to 64K
  - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
  - fs/proc: do_task_stat: use __for_each_thread()
  - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
  - exit: Use the correct exit_code in /proc/<pid>/stat
  - iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
  - powerpc/kasan: Fix addr error caused by page alignment
  - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
  - SUNRPC: Fix a suspicious RCU usage warning
  - s390/zcrypt: fix reference counting on zcrypt card objects
  - powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe()
  - irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling
  - genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()
  - netfilter: nf_tables: missing iterator type in lookup walk
  - netfilter: nft_set_pipapo: walk over current view on netlink dump
  - block: check io size before submit discard
  - block: fix overflow in blk_ioctl_discard()
  - Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  - um: time-travel: fix time corruption
  - add support for Mont-TSSE Driver
  - wifi: iwlwifi: fix a memory corruption
  - EDAC/amd64: Adjust UMC channel for Hygon family 18h model 6h
  - x86/amd_nb: Get DF ID from F5 device for Hygon family 18h model 6h
  - EDAC/amd64: Fix intlv_num_chan for Hygon family 18h model 4h
  - EDAC/amd64: Revert hi_addr_offset for Hygon family 18h model 4h
  - ALSA: hda: Fix single byte write failure issue for Hygon
  - ALSA: hda: Add Hygon HD-Audio support
  - x86/resctrl: Add Hygon QoS support
  - perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 6h
  - configs: Add Zhaoxin aes/sha items in openeuler_config
  - Zhaoxin: Driver for Zhaoxin SHA algorithm
  - Zhaoxin: Driver for Zhaoxin AES algorithm


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-201.0.0.114
changelog:
  - !7870  CVE-2024-35995
  - !7810  net-memcg: Fix scope of sockmem pressure indicators
  - !8159 v3  iommu: Reserve kabi for iommu and memory related functions
  - !7207 cgroup1_writeback:bind blkcg and memcg
  - !8067 irqchip: gic: some bugfix of hip09
  - iommu: Reserve kabi for iommu and memory related functions
  - !8057 v8  arm64: Allow CPU0 to be nohz_full
  - !7744 v3  Port livepatch related patches
  - !8042  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
  - !8060  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
  - !8023  fs/ntfs3: Fixed overflow check in mi_enum_attr()
  - !7947 【OLK-5.10】Fix BUILD REGRESSION warnings in bzwx N5/N6 series NIC drivers
  - !7413 Backport Intel VT-d critical fix to olk-5.10
  - !7985  cvm_tsi: add cvm tsi interface
  - !7395  smart_grid: introducing rebuild_affinity_domain
  - !7993  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
  - !8008 【OLK-5.10】backport PCC patches to support shared interrupt for multiple subspaces and platform notification handling
  - !7886  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
  - !5483 [OLK-5.10] Add support for Mucse Virtual Function Network Adapter(N10/N400)
  - !7980  Fix CVE-2021-47455
  - !8019  pstore/zone: Add a null pointer check to the psz_kmsg_read
  - !7912 RDMA/hns: Some bugfixes for openeuler 22.03 sp4
  - !7693  Bluetooth: af_bluetooth: Fix deadlock
  - !8029  mm: introduce vm_swap_extension sysctl
  - !8039 v2  dynamic_hugetlb: backport some bugfix
  - !7813  kobject: Fix global-out-of-bounds in kobject_action_type()
  - !7940  fix crypto_queue backlog handling
  - !3736 Add nokaslr memory region avoid support
  - !8030  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
  - irqchip/gic-v4.1:Check whether indirect table is supported in allocate_vpe_l1_table
  - irqchip: gicv3: Add workaround for hip09 erratum 162200806
  - irqchip: gicv3: Add workaround for hip09 erratum 162200803
  - soc: fsl: qbman: Always disable interrupts when taking cgr_lock
  - arm64: defconfig: Enable CONFIG_ARCH_SUSPEND_NONZERO_CPU and CONFIG_ARCH_SUSPEND_NONZERO_CPU
  - arm64: Kconfig: select ARCH_SUSPEND_NONZERO_CPU by default
  - isolation: Check whether there exists a housekeeping CPU online
  - isolation: Do not check whether housekeeping CPUs are present
  - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
  - mm/dynamic_hugetlb: refine error info in the destruction
  - mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
  - mm/dynamic_hugetlb: check NULL pointer for early parameter
  - mm/dynamic_hugetlb: add lru_add_drain_all() before migration
  - mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
  - mm/dynamic_hugetlb: reduce the number of migration attempts
  - mm/dpool: Use helper function to lock/unlock
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
  - openeuler_defconfig: enable swap_extension for x86 and arm64
  - mm/vmscan: introduce vm_swap_extension sysctl
  - fs/ntfs3: Fixed overflow check in mi_enum_attr()
  - pstore/zone: Add a null pointer check to the psz_kmsg_read
  - drivers: initial support for rnpvf drivers from Mucse Technology
  - !7961  net: atlantic: eliminate double free in error handling logic
  - !7970  fbmon: prevent division by zero in fb_videomode_from_videomode()
  - mailbox: pcc: Support shared interrupt for multiple subspaces
  - mailbox: pcc: Add support for platform notification handling
  - mailbox: pcc: Use mbox_bind_client
  - !7903  virtio_ring : keep used_wrap_counter in
  - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
  - mailbox: omap: Use mbox_bind_client
  - mailbox: Allow direct registration to a channel
  - mailbox: pcc: Fix kernel doc warnings
  - !7983 v2  Enhance memcg KSM feature.
  - !7960  ipv6: Fix infinite recursion in fib6_dump_done().
  - !7934  fix CVE-2024-35839
  - cvm_tsi: add cvm tsi interface
  - !5118  [OLK-5.10] Add support for Mucse Network Adapter(N500/N210)
  - !7452 v2  ip: Treat IPv4 segment's lowest address as unicast
  - !7801  netfilter: nft_flow_offload: reset dst in route object after setting up flow
  - !7758  netfilter: nf_tables: discard table flag update with pending basechain deletion
  - !7959 v2  Add network relationship for NUMA isolation and consolidation
  - mm/memcontrol: enable KSM for tasks moving to new memcg
  - mm/memcontrol: add ksm state for memcg
  - mm/ksm: fix ksm exec support for prctl
  - mm/ksm: support fork/exec for prctl
  - !7224 [OLK-5.10] Fixed display error for ps23xx when using ast and pe2201 bmc card
  - ptp: fix code indentation issues
  - ptp: Fix possible memory leak in ptp_clock_register()
  - !7949  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
  - fbmon: prevent division by zero in fb_videomode_from_videomode()
  - !7943 v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
  - !7955 v3  sched: QOS_SCHED_DYNAMIC_AFFINITY depend on FAIR_GROUP_SCHED
  - net: atlantic: eliminate double free in error handling logic
  - ipv6: Fix infinite recursion in fib6_dump_done().
  - drivers: initial support for rnpgbe drivers from Mucse Technology
  - config: Add new config entry to default config file to fix CI warning
  - net: add some bpf hooks in tcp stack for network numa relationship
  - net: add one bpf prog type for network numa relationship
  - net: retrieve netns cookie via getsocketopt
  - net: fix kabi breakage in struct net
  - net: initialize net->net_cookie at netns setup
  - !5484 [OLK-5.10] Add support for Mucse Virtual Function Network Adapter(N500/N210)
  - sched: QOS_SCHED_DYNAMIC_AFFINITY depend on FAIR_GROUP_SCHED
  - Revert "sched: QOS_SCHED_DYNAMIC_AFFINITY depend on FAIR_CGROUP_SCHED"
  - drivers: Fix BUILD REGRESSION warning in bzwx N5/N6 series NIC drivers
  - !6106  SCSI: hisi_raid: add sg_raw command feature
  - drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
  - !7923  Fix allmodconfig build error
  - !7645  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
  - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
  - crypto: engine - fix crypto_queue backlog handling
  - !7916 v5  Introduce NUMA isolation and consolidation
  - netfilter: bridge: replace physindev with physinif in nf_bridge_info
  - netfilter: propagate net to nf_bridge_get_physindev
  - netfilter: nfnetlink_log: use proper helper for fetching physinif
  - !7911  ACPI: LPIT: Avoid u32 multiplication overflow
  - net/ethernet/huawei/hiroce3: Fix allmodconfig build error
  - !7865  netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser
  - RDMA/hns: Fix allocating POE channels after IB device registeration
  - RDMA/hns : Fix scc delay_work to execute after sysfs shutdown
  - RDMA/hns: Fix missing resetting notify
  - RDMA/hns: Use mutex to protect uconctext
  - config: Enable NUMA isolation and consolidation by default
  - sched: Introduce CONFIG_QOS_SCHED_NUMA_ICON
  - bpf:programmable: Add helper to set preferred node
  - sched: Update numa group preferred node periodically
  - sched: Add ioctl to get relationship
  - bpf:programmable: Add helper to get memory and net relationship
  - sched: Introduce task relationship by net and memory
  - bpf:programmable: Add nodemask operation collection
  - sched: Some fixes for select_rq hook
  - sched: Add can_migrate_task hook
  - sched: Introduce CONFIG_TASK_PLACEMENT_BY_CPU_RANGE
  - ACPI: LPIT: Avoid u32 multiplication overflow
  - !7877 v4  eeprom: at24: fix memory corruption race condition
  - !7741  ipv4: check for NULL idev in ip_route_use_hint()
  - !7731  sched: QOS_SCHED_DYNAMIC_AFFINITY depend on FAIR_CGROUP_SCHED
  - !7689 [sync] PR-7370: v2  sched: smart_grid: silence complier error
  - virtio_ring : keep used_wrap_counter in vq->last_used_idx
  - drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
  - eeprom: at24: fix memory corruption race condition
  - !7733 backport some bugfix of HiSilicon PCIe PMU driver
  - !7691 net: hns3: backport some bugfixes
  - !7853  net/mlx5e: fix a double-free in arfs_create_groups
  - ACPI: CPPC: Fix access width used for PCC registers
  - ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
  - ACPI: CPPC: Use access_width over bit_width for system memory accesses
  - ACPI: CPPC: Fix up I/O port access in cpc_read()
  - ACPI: CPPC: Implement support for SystemIO registers
  - !5545 backport dirty-ring feature
  - netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser
  - !7846  netrom: Fix a data-race around sysctl_netrom_transport_timeout
  - !7773  Fix CVE-2023-52698
  - net/mlx5e: fix a double-free in arfs_create_groups
  - net: hns3: use appropriate barrier function after setting a bit value
  - net: hns3: release PTP resources if pf initialization failed
  - !7841  cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter()
  - !7062 [openEuler-22.03-SP4]drivers: support Yunsilicon's metaScale/metaVisor series NICs
  - !6300 【OLK-5.10】fix compiling problem in bzwx N5/N6 series NIC drivers
  - netrom: Fix a data-race around sysctl_netrom_transport_timeout
  - !7816  f2fs: fix to wait on block writeback for post_read case
  - !7576  f2fs: compress: fix reserve_cblocks counting error when out of space
  - !7757  Fix CVE-2023-52656
  - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter()
  - !7681  xfs: three bug fix recently
  - !7779  LoongArch: Define the __io_aw() hook as mmiowb()
  - !7714  CVE-2024-35936
  - drivers: fix compiling problem in bzwx N5/N6 series NIC drivers
  - drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
  - drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
  - drivers/perf: hisi_pcie: Merge find_related_event() and get_event_idx()
  - drivers/perf: hisi_pcie: Relax the check on related events
  - drivers/perf: hisi_pcie: Check the target filter properly
  - drivers/perf: hisi_pcie: Add more events for counting TLP bandwidth
  - drivers/perf: hisi_pcie: Fix incorrect counting under metric mode
  - drivers/perf: hisi_pcie: Introduce hisi_pcie_pmu_get_event_ctrl_val()
  - drivers/perf: hisi_pcie: Rename hisi_pcie_pmu_{config,clear}_filter()
  - !7684  dm snapshot: fix lockup in dm_exception_table_exit
  - iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected
  - PCI: Make pci_dev_is_disconnected() helper public for other drivers
  - f2fs: fix to wait on block writeback for post_read case
  - kobject: Fix global-out-of-bounds in kobject_action_type()
  - net-memcg: Fix scope of sockmem pressure indicators
  - netfilter: nft_flow_offload: reset dst in route object after setting up flow
  - !7743  netrom: Fix data-races around sysctl_net_busy_read
  - !7734  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
  - LoongArch: Define the __io_aw() hook as mmiowb()
  - calipso: fix memory leak in netlbl_calipso_add_pass()
  - netlabel: remove unused parameter in netlbl_netlink_auditinfo()
  - net: netlabel: Fix kerneldoc warnings
  - !7753  wifi: ath11k: decrease MHI channel buffer length to 8KB
  - netfilter: nf_tables: discard table flag update with pending basechain deletion
  - io_uring: drop any code related to SCM_RIGHTS
  - io_uring/unix: drop usage of io_uring socket
  - wifi: ath11k: decrease MHI channel buffer length to 8KB
  - livepatch: Update related configs in openeuler_defconfig
  - arm64: Recover kretprobe modified return address in stacktrace
  - x86/unwind: Compile kretprobe fixup code only if CONFIG_KRETPROBES=y
  - x86/unwind: Recover kretprobe trampoline entry
  - kprobes: Add kretprobe_find_ret_addr() for searching return address
  - livepatch: Avoid patching conflicts with kprobes
  - kprobes: Fix possible use-after-free issue on kprobe registration
  - ftrace: Fix possible use-after-free issue in ftrace_location()
  - livepatch: Reduce duplicate definition of 'struct walk_stackframe_args'
  - livepatch: Fix warning C_RULE_ID_SINGLE_BRANCH_IF_AND_LOOP_BRACKET
  - livepatch/core: Make several functions to be static
  - livepatch: Use func->func_node directly
  - livepatch: Fix huge_depth in arch_klp_check_activeness_func()
  - livepatch: Organize active functions with struct 'list_head'
  - livepatch: Check calltrace of idle tasks
  - livepatch: Complete check calltrace for running tasks
  - livepatch/core: No stop machine in KLP_STACK_OPTIMIZE mode
  - livepatch/ppc64: Adjust instruction replace order for KLP_STACK_OPTIMIZE mode
  - livepatch/ppc32: Adjust instruction replace order for KLP_STACK_OPTIMIZE mode
  - livepatch/arm64: Adjust instruction replace order for KLP_STACK_OPTIMIZE mode
  - livepatch/arm: Adjust instruction replace order for KLP_STACK_OPTIMIZE mode
  - livepatch/x86: Ajust instruction replace order for KLP_STACK_OPTIMIZE mode
  - livepatch/ppc64: Implement arch_klp_check_task_calltrace()
  - livepatch/ppc32: Implement arch_klp_check_task_calltrace()
  - livepatch/arm64: Implement arch_klp_check_task_calltrace()
  - livepatch/arm: Implement arch_klp_check_task_calltrace()
  - livepatch/x86: Implement arch_klp_check_task_calltrace()
  - livepatch/ppc64: Remove duplicate 'struct klp_func_list' related codes
  - livepatch/ppc32: Remove duplicate 'struct klp_func_list' related codes
  - livepatch/arm64: Remove duplicate 'struct klp_func_list' related codes
  - livepatch/arm: Remove duplicate 'struct klp_func_list' related codes
  - livepatch/x86: Move 'struct klp_func_list' related codes out of arch
  - livepatch: Move 'struct klp_func_list' out of arch
  - netrom: Fix data-races around sysctl_net_busy_read
  - ipv4: check for NULL idev in ip_route_use_hint()
  - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
  - sched: QOS_SCHED_DYNAMIC_AFFINITY depend on FAIR_CGROUP_SCHED
  - net: hns3: change type of numa_node_mask as nodemask_t
  - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
  - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
  - net: hns3: direct return when receive a unknown mailbox message
  - net: hns3: using user configure after hardware reset
  - net: hns3: fix kernel crash problem in concurrent scenario
  - Bluetooth: af_bluetooth: Fix deadlock
  - net: hns3: add cond_resched() to hns3 ring buffer init process
  - net: hns3: move constants from hclge_debugfs.h to hclge_debugfs.c
  - net: hns3: add 
  - net: hns3: don't need to check an unsigned number is less than 0
  - net: hns3: set irq affinity directly
  - net: hns3: using cpumask_copy when set value to cpumask_t
  - net: hns3: mark unexcuted loopback test result as UNEXECUTED
  - net: hns3: fix index limit to support all queue stats
  - sched: smart_grid: silence complier error
  - dm snapshot: fix lockup in dm_exception_table_exit
  - xfs: update dir3 leaf block metadata after swap
  - xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
  - iomap: fix warning in xfs_iomap_write_delalloc_release()
  - KVM: selftests: Add dirty ring buffer test
  - KVM: selftests: Introduce after_vcpu_run hook for dirty log test
  - KVM: Don't allocate dirty bitmap if dirty ring is enabled
  - KVM: Make dirty ring exclusive to dirty bitmap log
  - KVM: X86: Implement ring-based dirty memory tracking
  - KVM: Pass in kvm pointer into mark_page_dirty_in_slot()
  - KVM: X86: Don't track dirty for KVM_SET_[TSS_ADDR|IDENTITY_MAP_ADDR]
  - ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
  - f2fs: compress: fix reserve_cblocks counting error when out of space
  - drm/ast: Fixed display error for ps23xx when using ast bmc card
  - drm/phytium: Bugfix Xorg startup for ps23xx when using pe2201 bmc card
  - ip: Treat IPv4 segment's lowest address as unicast
  - smart_grid: introducing rebuild_affinity_domain
  - cgroup_writeback: bind blkcg and memcg
  - drivers: support Yunsilicon's MS and MV series NICs
  - SCSI: hisi_raid: add sg_raw command feature
  - drivers: initial support for rnpgbevf drivers from Mucse Technology
  - kaslr: enable CONFIG_NOKASLR_MEM_RANGE in openeuler_defconfig
  - x86/boot: add x86 nokaslr memory regions
  - efi/libstub: add arm64 nokaslr memory regions
  - kaslr: add nokaslr memory region Kconfig support

   at the end when print msg


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-202.0.0.115
changelog:
  - !8425  CVE-2023-52677
  - !8519  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
  - !8545 v2  arm64 mpam fix patch
  - !8468 v2  CVE-2024-35808
  - !8046  block: prevent division by zero in blk_rq_stat_sum()
  - !8605  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
  - !7670  btrfs: send: handle path ref underflow in header iterate_inode_ref()
  - !8513  net: ena: Fix incorrect descriptor free behavior
  - !8535 v4  Fix soft lockup in stress test
  - !8561  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
  - !8497  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
  - smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
  - !7803 v2  selinux: avoid dereference of garbage after mount failure
  - !6393  crypto: xilinx - call finalize with bh disabled
  - !8539 v2  iommu/arm-smmu-v3: Reducing the CMD_SYNC times
  - !8504  CVE: CVE-2024-36015
  - !8261  tty: fix hang on tty device with no_room set
  - !8110  drm/client: Fully protect modes[
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
  - !8472  fix CVE-2024-27415
  - !8527 v8  Add support for l0
  - !8395  5.10: fix CVE-2024-35978
  - !8541 v2  iommu/iova: move depot up to avoid cache conflict
  - !8407  pinctrl: core: delete incorrect free in pinctrl_enable()
  - !8240 v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
  - arm64/mpam: Fix softlockup when reading mondata
  - arm64/mpam: Fix wrong seconds to jiffies conversion
  - arm64/mpam: change allocation mode from GFP_KERNEL to GFP_NOWAIT
  - mpam/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup
  - mpam/resctrl: Clean up resctrl_group_rmdir_[ctrl/mon]()
  - mpam/resctrl: Clean up unused function parameter in mkdir path
  - mpam/resctrl: Fix a deadlock due to inaccurate reference
  - iommu/iova: move depot up to avoid cache conflict
  - iommu/arm-smmu-v3: Reducing the CMD_SYNC times
  - iommu/iova: Try to schedule out when free iova too long
  - iommu/iova: free iovas on each cpu in flush queue
  - arm64: config: Enable hisi l3t & l0 by default
  - hisi: l0: Add support for l0
  - hisi: l3t: Add L3 cache driver for hisi
  - mm/mempolicy: Add and export get_vma_policy_node
  - arm64: export cpu_logical_map
  - export symbol alloc_contig_pages
  - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
  - net: ena: Fix incorrect descriptor free behavior
  - ppdev: Add an error check in register_device
  - ppdev: Remove usage of the deprecated ida_simple_xx() API
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
  - !8397  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
  - !8373  dma-direct: Leak pages on dma_set_decrypted() failure
  - !8428  drm/amdgpu: Fix even more out of bound writes from debugfs
  - !8339  soc: qcom: llcc: Handle a second device without data corruption
  - !8368  efi/capsule-loader: fix incorrect allocation size
  - netfilter: br_netfilter: skip conntrack input hook for promisc packets
  - netfilter: bridge: confirm multicast packets before passing them up the stack
  - md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
  - md/dm-raid: don't call md_reap_sync_thread() directly
  - !8454 v3  net: Bacport hulk patches
  - !8069  CVE-2021-47427
  - !8299  xfs: Fix file creation failure
  - !8426 Backport 5.10.209 LTS patches from upstream
  - !8416  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
  - net: xfrm: skip policies marked as dead while reinserting policies
  - tcp_comp: modify default value of TCP_COMP to n
  - bpf: socketmap: add Kconfig for customized socketmap
  - bpf: fix magic numbers in bpf_get_sockops_uid_gid()
  - netfilter: make return-type and function-name in the same line
  - bpf: fix type incompatible warning
  - bpf: fix format type mismatch warning
  - !8342  net/mlx5: Properly link new fs rules into the tree
  - drm/amdgpu: Fix even more out of bound writes from debugfs
  - arm64: dts: armada-3720-turris-mox: set irq type for RTC
  - i2c: s3c24xx: fix transferring more than one message in polling mode
  - i2c: s3c24xx: fix read transfers in polling mode
  - selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes
  - selftests: mlxsw: qos_pfc: Convert to iproute2 dcb
  - ethtool: netlink: Add missing ethnl_ops_begin/complete
  - kdb: Fix a potential buffer overflow in kdb_local()
  - ipvs: avoid stat macros calls from preemptible context
  - netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description
  - netfilter: nf_tables: skip dead set elements in netlink dump
  - netfilter: nf_tables: do not allow mismatch field size and set key length
  - net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe
  - net: ravb: Fix dma_addr_t truncation in error case
  - net: phy: micrel: populate .soft_reset for KSZ9131
  - net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames
  - s390/pci: fix max size calculation in zpci_memcpy_toio()
  - PCI: keystone: Fix race condition when initializing PHYs
  - serial: imx: Correct clock error message in function probe()
  - perf env: Avoid recursively taking env->bpf_progs.lock
  - nvmet-tcp: fix a crash in nvmet_req_complete()
  - usb: cdc-acm: return correct error code on unsupported break
  - tty: use 'if' in send_break() instead of 'goto'
  - tty: don't check for signal_pending() in send_break()
  - tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK
  - tty: change tty_write_lock()'s ndelay parameter to bool
  - perf genelf: Set ELF program header addresses properly
  - iio: adc: ad9467: fix scale setting
  - iio: adc: ad9467: don't ignore error codes
  - iio: adc: ad9467: fix reset gpio handling
  - iio: adc: ad9467: Benefit from devm_clk_get_enabled() to simplify
  - software node: Let args be NULL in software_node_get_reference_args
  - acpi: property: Let args be NULL in __acpi_node_get_property_reference
  - libapi: Add missing linux/types.h header to get the __u64 type on io.h
  - power: supply: cw2015: correct time_to_empty units in sysfs
  - MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup()
  - MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup()
  - mips: Fix incorrect max_low_pfn adjustment
  - mips: dmi: Fix early remap on MIPS32
  - leds: aw2013: Select missing dependency REGMAP_I2C
  - HID: wacom: Correct behavior when processing some confidence == false touches
  - iio: adc: ad7091r: Pass iio_dev to event handler
  - x86/kvm: Do not try to disable kvmclock if it was not enabled
  - wifi: mwifiex: configure BSSID consistently when starting AP
  - wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors
  - wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code
  - iommu/arm-smmu-qcom: Add missing GMU entry to match table
  - io_uring/rw: ensure io->bytes_done is always initialized
  - pwm: jz4740: Don't use dev_err_probe() in .request()
  - fbdev: flush deferred work in fb_deferred_io_fsync()
  - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx
  - ALSA: oxygen: Fix right channel of capture volume mixer
  - serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock
  - usb: mon: Fix atomicity violation in mon_bin_vma_fault
  - usb: typec: class: fix typec_altmode_put_partner to put plugs
  - Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs"
  - usb: chipidea: wait controller resume finished for wakeup irq
  - Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only"
  - Revert "usb: dwc3: Soft reset phy on probe for host"
  - usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart
  - usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host()
  - tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
  - net: ethernet: mtk_eth_soc: remove duplicate if statements
  - kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list
  - Revert "ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek"
  - virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()
  - virtio-crypto: fix memory-leak
  - dma-mapping: Fix build error unused-value
  - Input: atkbd - use ab83 as id when skipping the getid command
  - binder: fix unused alloc->free_async_space
  - binder: fix async space check for 0-sized buffers
  - keys, dns: Fix size check of V1 server-list header
  - of: unittest: Fix of_count_phandle_with_args() expected value message
  - of: Fix double free in of_parse_phandle_with_args_map
  - IB/iser: Prevent invalidating wrong MR
  - mmc: sdhci_omap: Fix TI SoC dependencies
  - mmc: sdhci_am654: Fix TI SoC dependencies
  - pwm: stm32: Fix enable count for clk in .probe()
  - pwm: stm32: Use hweight32 in stm32_pwm_detect_channels
  - pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable
  - clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw
  - clk: fixed-rate: add devm_clk_hw_register_fixed_rate
  - clk: si5341: fix an error code problem in si5341_output_clk_set_rate
  - watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused
  - watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling
  - watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO
  - watchdog: set cdev owner before adding
  - drivers: clk: zynqmp: update divider round rate logic
  - clk: zynqmp: Add a check for NULL pointer
  - clk: zynqmp: make bestdiv unsigned
  - drivers: clk: zynqmp: calculate closest mux rate
  - clk: qcom: videocc-sm8150: Add missing PLL config property
  - clk: qcom: videocc-sm8150: Update the videocc resets
  - dt-bindings: clock: Update the videocc resets for sm8150
  - gpu/drm/radeon: fix two memleaks in radeon_vm_init
  - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL
  - media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe()
  - media: dvbdev: drop refcount on error path in dvb_device_open()
  - f2fs: fix to update iostat correctly in f2fs_filemap_fault()
  - f2fs: fix to check compress file in f2fs_move_file_range()
  - media: rkisp1: Disable runtime PM in probe error path
  - clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config
  - media: cx231xx: fix a memleak in cx231xx_init_isoc
  - drm/bridge: tc358767: Fix return value on error case
  - drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table
  - drm/radeon/dpm: fix a memleak in sumo_parse_power_table
  - drm/drv: propagate errors from drm_modeset_register_all()
  - drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks
  - drm/msm/mdp4: flush vblank event on disable
  - ASoC: cs35l34: Fix GPIO name and drop legacy include
  - ASoC: cs35l33: Fix GPIO name and drop legacy include
  - drm/radeon: check return value of radeon_ring_lock()
  - drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check()
  - drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg()
  - drm/bridge: Fix typo in post_disable() description
  - drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer
  - rcu: Create an unrcu_pointer() to remove __rcu from a pointer
  - drm/panel-elida-kd35t133: hold panel in reset for unprepare
  - RDMA/usnic: Silence uninitialized symbol smatch warnings
  - ARM: davinci: always select CONFIG_CPU_ARM926T
  - Bluetooth: btmtkuart: fix recv_buf() return value
  - Bluetooth: Fix bogus check for re-auth no supported with non-ssp
  - netfilter: nf_tables: mark newset as dead on transaction abort
  - wifi: rtlwifi: rtl8192se: using calculate_bit_shift()
  - wifi: rtlwifi: rtl8192ee: using calculate_bit_shift()
  - wifi: rtlwifi: rtl8192de: using calculate_bit_shift()
  - rtlwifi: rtl8192de: make arrays static const, makes object smaller
  - wifi: rtlwifi: rtl8192ce: using calculate_bit_shift()
  - wifi: rtlwifi: rtl8192cu: using calculate_bit_shift()
  - wifi: rtlwifi: rtl8192c: using calculate_bit_shift()
  - wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift()
  - wifi: rtlwifi: add calculate_bit_shift()
  - dma-mapping: clear dev->dma_mem to NULL after freeing it
  - dma-mapping: Add dma_release_coherent_memory to DMA API
  - virtio/vsock: fix logic which reduces credit update messages
  - selftests/net: fix grep checking for fib_nexthop_multiprefix
  - arm64: dts: qcom: sdm845-db845c: correct LED panic indicator
  - arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator
  - scsi: fnic: Return error if vmalloc() failed
  - arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type
  - wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior
  - firmware: meson_sm: populate platform devices from sm device tree data
  - firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create()
  - net/ncsi: Fix netlink major/minor version numbers
  - ncsi: internal.h: Fix a spello
  - ARM: dts: qcom: apq8064: correct XOADC register address
  - wifi: libertas: stop selecting wext
  - wifi: ath11k: Defer on rproc_get failure
  - bpf: Add crosstask check to __bpf_get_stack
  - bpf, lpm: Fix check prefixlen before walking trie
  - wifi: rtw88: fix RX filter in FIF_ALLMULTI flag
  - NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT
  - blocklayoutdriver: Fix reference leak of pnfs_device_node
  - crypto: scomp - fix req->dst buffer overflow
  - crypto: sahara - do not resize req->src when doing hash operations
  - crypto: sahara - fix processing hash requests with req->nbytes < sg->length
  - crypto: sahara - improve error handling in sahara_sha_process()
  - crypto: sahara - fix wait_for_completion_timeout() error handling
  - crypto: sahara - fix ahash reqsize
  - crypto: sahara - handle zero-length aes requests
  - crypto: sahara - avoid skcipher fallback code duplication
  - gfs2: Also reflect single-block allocations in rgd->rd_extfail_pt
  - Revert "gfs2: Don't reject a supposedly full bitmap if we have blocks reserved"
  - fs: indicate request originates from old mount API
  - crypto: sahara - fix error handling in sahara_hw_descriptor_create()
  - crypto: sahara - fix processing requests with cryptlen < sg->length
  - crypto: sahara - fix ahash selftest failure
  - crypto: sahara - fix cbc selftest failure
  - crypto: sahara - remove FLAGS_NEW_KEY logic
  - crypto: af_alg - Disallow multiple in-flight AIO requests
  - crypto: ccp - fix memleak in ccp_init_dm_workarea
  - crypto: sa2ul - Return crypto_aead_setkey to transfer the error
  - crypto: virtio - Handle dataq logic with tasklet
  - virtio-crypto: wait ctrl queue instead of busy polling
  - virtio-crypto: use private buffer for control request
  - virtio-crypto: change code style
  - virtio-crypto: implement RSA algorithm
  - virtio-crypto: introduce akcipher service
  - virtio_crypto: Introduce VIRTIO_CRYPTO_NOSPC
  - selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket
  - ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error
  - spi: sh-msiof: Enforce fixed DTDL for R-Car H3
  - cpufreq: scmi: process the result of devm_of_clk_add_hw_provider()
  - cpufreq: Use of_property_present() for testing DT property presence
  - of: Add of_property_present() helper
  - of: property: define of_property_read_u{8,16,32,64}_array() unconditionally
  - ACPI: video: check for error while searching for backlight device parent
  - mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response
  - spi: spi-zynqmp-gqspi: fix driver kconfig dependencies
  - powerpc/powernv: Add a null pointer check in opal_powercap_init()
  - powerpc/powernv: Add a null pointer check in opal_event_init()
  - selftests/powerpc: Fix error handling in FPU/VMX preemption tests
  - powerpc/44x: select I2C for CURRITUCK
  - powerpc: Remove in_kernel_text()
  - powerpc: add crtsavres.o to always-y instead of extra-y
  - x86/lib: Fix overflow when counting digits
  - coresight: etm4x: Fix width of CCITMIN field
  - PCI: Add ACS quirk for more Zhaoxin Root Ports
  - parport: parport_serial: Add Brainboxes device IDs and geometry
  - parport: parport_serial: Add Brainboxes BAR details
  - binder: fix comment on binder_alloc_new_buf() return value
  - binder: fix trivial typo of binder_free_buf_locked()
  - binder: use EPOLLERR from eventpoll.h
  - ACPI: resource: Add another DMI match for the TongFang GMxXGxx
  - drm/crtc: fix uninitialized variable use
  - ARM: sun9i: smp: fix return code check of of_property_match_string
  - net: qrtr: ns: Return 0 if server port is not present
  - i2c: rk3x: fix potential spinlock recursion on poll
  - Input: xpad - add Razer Wolverine V2 support
  - ARC: fix spare error
  - s390/scm: fix virtual vs physical address confusion
  - Input: i8042 - add nomux quirk for Acer P459-G2-M
  - Input: atkbd - skip ATKBD_CMD_GETID in translated mode
  - reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning
  - ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI
  - tracing: Add size check when printing trace_marker output
  - tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing
  - neighbour: Don't let neigh_forced_gc() disable preemption for long
  - drm/crtc: Fix uninit-value bug in drm_mode_setcrtc
  - jbd2: correct the printing of write_flags in jbd2_write_superblock()
  - clk: rockchip: rk3128: Fix HCLK_OTG gate register
  - drm/exynos: fix a wrong error checking
  - drm/exynos: fix a potential error pointer dereference
  - nvme: introduce helper function to get ctrl state
  - ASoC: da7219: Support low DC impedance headset
  - nouveau/tu102: flush all pdbs on vmm flush
  - ASoC: rt5650: add mutex to avoid the jack detection failure
  - ASoC: cs43130: Fix incorrect frame delay configuration
  - ASoC: cs43130: Fix the position of const qualifier
  - ASoC: Intel: Skylake: mem leak in skl register function
  - ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16
  - ASoC: Intel: Skylake: Fix mem leak in few functions
  - ASoC: wm8974: Correct boost mixer inputs
  - debugfs: fix automount d_fsdata usage
  - mptcp: fix uninit-value in mptcp_incoming_options
  - ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro
  - pinctrl: lochnagar: Don't build on MIPS
  - riscv: Check if the code to patch lies in the exit section
  - !8221 Backport 5.10.207- 5.10.208 LTS patches from upstream
  - !8140  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
  - iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
  - pinctrl: core: delete incorrect free in pinctrl_enable()
  - !7471  x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ
  - !8367  cvm: clean code for cvm init
  - mm/hugetlb: fix missing hugetlb_lock for resv uncharge
  - Bluetooth: Fix memory leak in hci_req_sync_complete()
  - !8300  ipvlan: add ipvlan_route_v6_outbound() helper
  - !8271  netfilter: nf_tables: reject new basechain after table flag update
  - !8212  fix CVE-2024-35877
  - dma-direct: Leak pages on dma_set_decrypted() failure
  - !8306  mptcp: ensure tx skbs always have the MPTCP ext
  - efi/capsule-loader: fix incorrect allocation size
  - cvm: clean code for cvm init
  - !8195  CVE-2024-35956
  - !8153  cpu/hotplug: Don't offline the last non-isolated CPU
  - net/mlx5: Properly link new fs rules into the tree
  - soc: qcom: llcc: Handle a second device without data corruption
  - !8254  sysv: don't call sb_bread() with pointers_lock held
  - !8275  usb: udc: remove warning when queue disabled ep
  - !8263 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
  - !8243 【OLK 5.10】RDMA/hns some bugfix
  - mptcp: ensure tx skbs always have the MPTCP ext
  - ipvlan: add ipvlan_route_v6_outbound() helper
  - xfs: Fix file creation failure
  - !7831 IMA: Support the measurement extending of TSI TMM
  - !8230  Remove redundants code for proc_cgroupstats_show
  - !8255  IMA: Introduce a config for fix on IMA with Overlayfs issue
  - !8250  Control KABI reservation codes with config
  - !7889  vt: fix unicode buffer corruption when deleting characters
  - !8220  improve security for cvm host feature
  - !8150  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
  - !8127  mlxsw: spectrum_acl_tcam: Fix warning during rehash
  - !8063  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
  - !8258 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
  - !8133  fix CVE-2021-47265
  - usb: udc: remove warning when queue disabled ep
  - netfilter: nf_tables: reject new basechain after table flag update
  - ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
  - tty: fix hang on tty device with no_room set
  - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
  - !8238  arm: unwinder: Fix pc off-by-one in arm unwinder
  - !8237  x86: profiling: Using generic unwinding in profile_pc
  - !8236  x86: profiling: Check prof_buffer in profile_tick()
  - !8229  LLVM fix compile warning options
  - RDMA/hns: Add max_ah and cq moderation capacities in query_device()
  - RDMA/hns: Fix return value in hns_roce_map_mr_sg
  - RDMA/hns: Fix deadlock on SRQ async events.
  - IMA: Introduce a config for fix on IMA with Overlayfs issue
  - RDMA/hns: Fix UAF for cq async event
  - RDMA/hns: Fix mismatch exception rollback
  - sysv: don't call sb_bread() with pointers_lock held
  - RDMA/hns: Fix GMV table pagesize
  - RDMA/hns: Add mutex_destroy()
  - Control KABI reservation codes with config
  - RDMA/hns: Modify the print level of CQE error
  - !8109  vhost-vdpa: fix use after free in vhost_vdpa_probe()
  - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
  - arm: unwinder: Fix pc off-by-one in arm unwinder
  - x86: profiling: Using generic unwinding in profile_pc
  - x86: profiling: Check prof_buffer in profile_tick()
  - Remove redundants code for proc_cgroupstats_show
  - kbuild: Fix grep -q waring
  - Makefile: Exclude false positive warning options for Clang
  - !8054  CVE-2023-52669
  - !8190  crypto: jitter - change module_init(jent_mod_init) to subsys_initcall(jent_mod_init)
  - !8203  efi/libstub: arm64: Add macro isolation memmap detection code
  - PCI: Disable ATS for specific Intel IPU E2000 devices
  - PCI: Extract ATS disabling to a helper function
  - net: tls, update curr on splice as well
  - powerpc: update ppc_save_regs to save current r1 in pt_regs
  - mmc: sdhci-sprd: Fix eMMC init failure after hw reset
  - mmc: core: Cancel delayed work before releasing host
  - mmc: rpmb: fixes pause retune on all RPMB partitions.
  - mmc: meson-mx-sdhc: Fix initialization frozen issue
  - mm: fix unmap_mapping_range high bits shift bug
  - i2c: core: Fix atomic xfer check for non-preempt config
  - firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards
  - mm/memory-failure: check the mapcount of the precise page
  - net: Implement missing SO_TIMESTAMPING_NEW cmsg support
  - bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters()
  - asix: Add check for usbnet_get_endpoints
  - net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues
  - net/qla3xxx: switch from 'pci_' to 'dma_' API
  - i40e: Restore VF MSI-X state during PCI reset
  - ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux
  - ASoC: meson: g12a-toacodec: Fix event generation
  - ASoC: meson: g12a-tohdmitx: Validate written enum values
  - ASoC: meson: g12a-toacodec: Validate written enum values
  - i40e: fix use-after-free in i40e_aqc_add_filters()
  - net: Save and restore msg_namelen in sock_sendmsg
  - netfilter: nft_immediate: drop chain reference counter on error
  - netfilter: nftables: add loop check helper function
  - net: bcmgenet: Fix FCS generation for fragmented skbuffs
  - sfc: fix a double-free bug in efx_probe_filters
  - ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init
  - net: sched: em_text: fix possible memory leak in em_text_destroy()
  - i40e: Fix filter input checks to prevent config with invalid values
  - drm/i915/dp: Fix passing the correct DPCD_REV for drm_dp_set_phy_test_pattern
  - octeontx2-af: Fix marking couple of structure as __packed
  - nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local
  - ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6
  - block: Don't invalidate pagecache for invalid falloc modes
  - keys, dns: Fix missing size check of V1 server-list header
  - cvm: improve security for cvm host feature
  - cvm: add secure memory query method
  - cvm: enable secure memory alloc on multiple numa nodes
  - x86/mm/pat: fix VM_PAT handling in COW mappings
  - !7110 [22.03-LTS-SP4] KVM TDP MMU new refactors
  - !8143  add kconfig for OLK-5.10
  - efi/libstub: arm64: Add macro isolation memmap detection code
  - btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
  - btrfs: fix anon_dev leak in create_subvol()
  - crypto: jitter - change module_init(jent_mod_init) to subsys_initcall(jent_mod_init)
  - cpu/hotplug: Don't offline the last non-isolated CPU
  - mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
  - memcg: Introduce CONFIG_MEMCG_V1_THRESHOLD_QOS
  - kabi: use CONFIG_KABI_RESERVE to isolate bpf cgroup reserve flags
  - cgroup: add config isolation for cgroup_kill in cgroupv1
  - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
  - RDMA: Verify port when creating flow rule
  - IB/mlx4: Use port iterator and validation APIs
  - mlxsw: spectrum_acl_tcam: Fix warning during rehash
  - drm/client: Fully protect modes[] with dev->mode_config.mutex
  - vhost-vdpa: fix use after free in vhost_vdpa_probe()
  - KVM: x86/mmu: Make KVM parameter tdp_mmu writeable
  - KVM: x86/mmu: Stop zapping invalidated TDP MMU roots asynchronously
  - kvm: x86: Do proper cleanup if kvm_x86_ops->vm_init() fails
  - KVM: x86/mmu: Do not filter address spaces in for_each_tdp_mmu_root_yield_safe()
  - KVM: x86/mmu: Open code leaf invalidation from mmu_notifier
  - KVM: x86/mmu: Include mmu.h in spte.h
  - KVM: x86/mmu: Harden TDP MMU iteration against root w/o shadow page
  - KVM: x86/mmu: Move the lockdep_assert of mmu_lock to inside clear_dirty_pt_masked()
  - KVM: x86/mmu: Add "never" option to allow sticky disabling of nx_huge_pages
  - KVM: x86/mmu: Use kstrtobool() instead of strtobool()
  - KVM: x86/mmu: Grab memslot for correct address space in NX recovery worker
  - KVM: x86/mmu: Add comment on try_cmpxchg64 usage in tdp_mmu_set_spte_atomic
  - KVM: x86: Preserve TDP MMU roots until they are explicitly invalidated
  - KVM: x86/mmu: Refresh CR0.WP prior to checking for emulated permission faults
  - KVM: x86/mmu: Merge all handle_changed_pte*() functions
  - KVM: x86/mmu: Remove handle_changed_spte_dirty_log()
  - KVM: x86/mmu: Remove "record_acc_track" in __tdp_mmu_set_spte()
  - KVM: x86/mmu: Bypass __handle_changed_spte() when aging TDP MMU SPTEs
  - KVM: x86/mmu: Drop unnecessary dirty log checks when aging TDP MMU SPTEs
  - KVM: x86/mmu: Clear only A-bit (if enabled) when aging TDP MMU SPTEs
  - KVM: x86/mmu: Remove "record_dirty_log" in __tdp_mmu_set_spte()
  - KVM: x86/mmu: Bypass __handle_changed_spte() when clearing TDP MMU dirty bits
  - KVM: x86/mmu: Drop access tracking checks when clearing TDP MMU dirty bits
  - KVM: x86/mmu: Atomically clear SPTE dirty state in the clear-dirty-log flow
  - KVM: x86/mmu: Consolidate Dirty vs. Writable clearing logic in TDP MMU
  - KVM: x86/mmu: Use kvm_ad_enabled() to determine if TDP MMU SPTEs need wrprot
  - KVM: x86/mmu: Add a helper function to check if an SPTE needs atomic write
  - KVM: VMX: Make CR0.WP a guest owned bit
  - KVM: x86: Make use of kvm_read_cr*_bits() when testing bits
  - KVM: x86: Ignore CR0.WP toggles in non-paging mode
  - KVM: x86: Do not unload MMU roots when only toggling CR0.WP with TDP enabled
  - KVM: x86/mmu: Fix comment typo
  - KVM: x86/mmu: Avoid indirect call for get_cr3
  - KVM: x86/mmu: Use gfn_t in kvm_flush_remote_tlbs_range()
  - KVM: x86/mmu: Rename kvm_flush_remote_tlbs_with_address()
  - KVM: x86/mmu: Collapse kvm_flush_remote_tlbs_with_{range,address}() together
  - KVM: x86/mmu: Make tdp_mmu_allowed static
  - KVM: x86/mmu: Cleanup range-based flushing for given page
  - KVM: x86/mmu: Fix wrong gfn range of tlb flushing in validate_direct_spte()
  - KVM: x86/mmu: Fix wrong start gfn of tlb flushing with range
  - KVM: x86/mmu: Reduce gfn range of tlb flushing in tdp_mmu_map_handle_target_level()
  - KVM: x86/mmu: Fix wrong gfn range of tlb flushing in kvm_set_pte_rmapp()
  - KVM: x86/mmu: Move round_gfn_for_level() helper into mmu_internal.h
  - KVM: x86/mmu: fix an incorrect comment in kvm_mmu_new_pgd()
  - kvm: x86/mmu: Rename SPTE_TDP_AD_ENABLED_MASK to SPTE_TDP_AD_ENABLED
  - KVM: x86/mmu: Pivot on "TDP MMU enabled" when handling direct page faults
  - KVM: x86/mmu: Pivot on "TDP MMU enabled" to check if active MMU is TDP MMU
  - KVM: x86/mmu: Replace open coded usage of tdp_mmu_page with is_tdp_mmu_page()
  - KVM: x86/mmu: Rename __direct_map() to direct_map()
  - KVM: x86/mmu: Stop needlessly making MMU pages available for TDP MMU faults
  - KVM: x86/mmu: Split out TDP MMU page fault handling
  - KVM: x86/mmu: Initialize fault.{gfn,slot} earlier for direct MMUs
  - KVM: x86/mmu: Handle no-slot faults in kvm_faultin_pfn()
  - KVM: x86/mmu: Avoid memslot lookup during KVM_PFN_ERR_HWPOISON handling
  - KVM: x86/mmu: Handle error PFNs in kvm_faultin_pfn()
  - KVM: x86/mmu: Grab mmu_invalidate_seq in kvm_faultin_pfn()
  - KVM: x86/mmu: Move TDP MMU VM init/uninit behind tdp_mmu_enabled
  - KVM: x86/mmu: Change tdp_mmu to a read-only parameter
  - KVM: x86/mmu: Don't install TDP MMU SPTE if SP has unexpected level
  - KVM: x86/mmu: Re-check under lock that TDP MMU SP hugepage is disallowed
  - KVM: x86/mmu: Map TDP MMU leaf SPTE iff target level is reached
  - KVM: x86/mmu: Don't attempt to map leaf if target TDP MMU SPTE is frozen
  - KVM: x86/mmu: Fix race condition in direct_page_fault
  - KVM: x86/mmu: Do not recover dirty-tracked NX Huge Pages
  - KVM: x86/mmu: simplify kvm_tdp_mmu_map flow when guest has to retry
  - KVM: x86/mmu: Split huge pages mapped by the TDP MMU on fault
  - KVM: x86/mmu: Block all page faults during kvm_zap_gfn_range()
  - KVM: x86/mmu: WARN if TDP MMU SP disallows hugepage after being zapped
  - KVM: x86/mmu: explicitly check nx_hugepage in disallowed_hugepage_adjust()
  - KVM: x86/mmu: Add helper to convert SPTE value to its shadow page
  - KVM: x86/mmu: Track the number of TDP MMU pages, but not the actual pages
  - KVM: x86/mmu: Set disallowed_nx_huge_page in TDP MMU before setting SPTE
  - KVM: x86/mmu: Properly account NX huge page workaround for nonpaging MMUs
  - KVM: x86/mmu: Rename NX huge pages fields/functions for consistency
  - KVM: x86/mmu: Tag disallowed NX huge pages even if they're not tracked
  - KVM: x86/mmu: add missing update to max_mmu_rmap_size
  - KVM: X86: avoid uninitialized 'fault.async_page_fault' from fixed-up #PF
  - KVM: x86/mmu: remove unused variable
  - KVM, x86/mmu: Fix the comment around kvm_tdp_mmu_zap_leafs()
  - KVM: x86/mmu: Don't bottom out on leafs when zapping collapsible SPTEs
  - KVM: x86/mmu: Document the "rules" for using host_pfn_mapping_level()
  - KVM: x86/mmu: Don't require refcounted "struct page" to create huge SPTEs
  - KVM: x86/mmu: Remove underscores from __pte_list_remove()
  - KVM: x86/mmu: Rename pte_list_{destroy,remove}() to show they zap SPTEs
  - KVM: x86/mmu: Rename rmap zap helpers to eliminate "unmap" wrapper
  - KVM: x86/mmu: Rename __kvm_zap_rmaps() to align with other nomenclature
  - KVM: x86/mmu: Drop the "p is for pointer" from rmap helpers
  - KVM: x86/mmu: Directly "destroy" PTE list when recycling rmaps
  - KVM: x86/mmu: Return a u64 (the old SPTE) from mmu_spte_clear_track_bits()
  - KVM: x86/mmu: Fix typo and tweak comment for split_desc_cache capacity
  - KVM: x86/mmu: Expand quadrant comment for PG_LEVEL_4K shadow pages
  - KVM: x86/mmu: Add optimized helper to retrieve an SPTE's index
  - KVM: x86/mmu: Replace UNMAPPED_GVA with INVALID_GPA for gva_to_gpa()
  - KVM: x86/mmu: Buffer nested MMU split_desc_cache only by default capacity
  - KVM: x86/mmu: Use "unsigned int", not "u32", for SPTEs' @access info
  - KVM: x86/mmu: Avoid unnecessary flush on eager page split
  - KVM: x86/mmu: Extend Eager Page Splitting to nested MMUs
  - KVM: Allow for different capacities in kvm_mmu_memory_cache structs
  - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page()
  - KVM: x86/mmu: Zap collapsible SPTEs in shadow MMU at all possible levels
  - KVM: x86/mmu: Extend make_huge_page_split_spte() for the shadow MMU
  - KVM: x86/mmu: Cache the access bits of shadowed translations
  - KVM: x86/mmu: Update page stats in __rmap_add()
  - KVM: x86/mmu: Decouple rmap_add() and link_shadow_page() from kvm_vcpu
  - KVM: x86/mmu: Allow NULL @vcpu in kvm_mmu_find_shadow_page()
  - KVM: x86/mmu: Pass kvm pointer separately from vcpu to kvm_mmu_find_shadow_page()
  - KVM: x86/mmu: Replace vcpu with kvm in kvm_mmu_alloc_shadow_page()
  - KVM: x86/mmu: Pass memory caches to allocate SPs separately
  - KVM: x86/mmu: Move guest PT write-protection to account_shadowed()
  - KVM: x86/mmu: Rename shadow MMU functions that deal with shadow pages
  - KVM: x86/mmu: Consolidate shadow page allocation and initialization
  - KVM: x86/mmu: Decompose kvm_mmu_get_page() into separate functions
  - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes
  - KVM: x86/mmu: Derive shadow MMU page role from parent
  - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root()
  - KVM: x86/mmu: Use a bool for direct
  - KVM: x86/mmu: Optimize MMU page cache lookup for all direct SPs
  - KVM: X86/MMU: Fix shadowing 5-level NPT for 4-level NPT L1 guest
  - KVM: X86/MMU: Add sp_has_gptes()
  - KVM: Do not zero initialize 'pfn' in hva_to_pfn()
  - KVM: x86/mmu: Shove refcounted page dependency into host_pfn_mapping_level()
  - KVM: Rename/refactor kvm_is_reserved_pfn() to kvm_pfn_to_refcounted_page()
  - KVM: Take a 'struct page', not a pfn in kvm_is_zone_device_page()
  - KVM: Remove kvm_vcpu_gfn_to_page() and kvm_vcpu_gpa_to_page()
  - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page
  - KVM: Don't WARN if kvm_pfn_to_page() encounters a "reserved" pfn
  - KVM: Avoid pfn_to_page() and vice versa when releasing pages
  - KVM: x86/mmu: Use common logic for computing the 32/64-bit base PA mask
  - KVM: x86/mmu: Truncate paging32's PT_BASE_ADDR_MASK to 32 bits
  - KVM: x86/mmu: Use common macros to compute 32/64-bit paging masks
  - KVM: x86/mmu: Use separate namespaces for guest PTEs and shadow PTEs
  - KVM: x86/mmu: Dedup macros for computing various page table masks
  - KVM: x86/mmu: Bury 32-bit PSE paging helpers in paging_tmpl.h
  - KVM: VMX: Refactor 32-bit PSE PT creation to avoid using MMU macro
  - KVM: X86/MMU: Remove unused PT32_DIR_BASE_ADDR_MASK from mmu.c
  - KVM: x86/MMU: Zap non-leaf SPTEs when disabling dirty logging
  - KVM: x86/mmu: Check every prev_roots in __kvm_mmu_free_obsolete_roots()
  - KVM: x86/mmu: Use IS_ENABLED() to avoid RETPOLINE for TDP page faults
  - KVM: x86/mmu: Make all page fault handlers internal to the MMU
  - KVM: x86/mmu: Add RET_PF_CONTINUE to eliminate bool+int* "returns"
  - KVM: x86/mmu: Drop exec/NX check from "page fault can be fast"
  - KVM: x86/mmu: Don't attempt fast page fault just because EPT is in use
  - KVM: x86/mmu: Use atomic XCHG to write TDP MMU SPTEs with volatile bits
  - KVM: x86/mmu: Move shadow-present check out of spte_has_volatile_bits()
  - KVM: x86/mmu: Don't treat fully writable SPTEs as volatile (modulo A/D)
  - KVM: x86/mmu: replace direct_map with root_role.direct
  - KVM: x86/mmu: replace root_level with cpu_role.base.level
  - KVM: x86/mmu: replace shadow_root_level with root_role.level
  - KVM: x86/mmu: pull CPU mode computation to kvm_init_mmu
  - KVM: x86/mmu: simplify and/or inline computation of shadow MMU roles
  - KVM: x86/mmu: remove redundant bits from extended role
  - KVM: x86/mmu: rename kvm_mmu_role union
  - KVM: x86/mmu: remove extended bits from mmu_role, rename field
  - KVM: x86/mmu: store shadow EFER.NX in the MMU role
  - KVM: x86/mmu: cleanup computation of MMU roles for shadow paging
  - KVM: x86/mmu: cleanup computation of MMU roles for two-dimensional paging
  - KVM: x86/mmu: remove kvm_calc_shadow_root_page_role_common
  - KVM: x86/mmu: remove ept_ad field
  - KVM: x86/mmu: do not recompute root level from kvm_mmu_role_regs
  - KVM: x86/mmu: split cpu_role from mmu_role
  - KVM: x86/mmu: remove "bool base_only" arguments
  - KVM: x86/mmu: rephrase unclear comment
  - KVM: x86/mmu: pull computation of kvm_mmu_role_regs to kvm_init_mmu
  - KVM: x86/mmu: constify uses of struct kvm_mmu_role_regs
  - KVM: x86/mmu: nested EPT cannot be used in SMM
  - KVM: x86/mmu: include EFER.LMA in extended mmu role
  - KVM: x86/mmu: fix potential races when walking host page table
  - KVM: x86/mmu: Do not create SPTEs for GFNs that exceed host.MAXPHYADDR
  - KVM: x86/mmu: Derive EPT violation RWX bits from EPTE RWX bits
  - KVM: VMX: replace 0x180 with EPT_VIOLATION_* definition
  - KVM: x86/mmu: remove unnecessary flush_workqueue()
  - KVM: x86/mmu: Don't rebuild page when the page is synced and no tlb flushing is required
  - KVM: x86: mmu: trace kvm_mmu_set_spte after the new SPTE was set
  - KVM: x86/mmu: Zap only TDP MMU leafs in zap range and mmu_notifier unmap
  - KVM: MMU: propagate alloc_workqueue failure
  - Revert "KVM: x86/mmu: Zap only TDP MMU leafs in kvm_zap_gfn_range()"
  - kvm: x86/mmu: Flush TLB before zap_gfn_range releases RCU
  - KVM: x86/mmu: WARN on any attempt to atomically update REMOVED SPTE
  - KVM: x86/mmu: Check for a REMOVED leaf SPTE before making the SPTE
  - KVM: x86/mmu: Zap defunct roots via asynchronous worker
  - KVM: x86/mmu: Zap roots in two passes to avoid inducing RCU stalls
  - KVM: x86/mmu: Allow yielding when zapping GFNs for defunct TDP MMU root
  - KVM: x86/mmu: Zap invalidated roots via asynchronous worker
  - KVM: x86/mmu: Defer TLB flush to caller when freeing TDP MMU shadow pages
  - KVM: x86/mmu: Do remote TLB flush before dropping RCU in TDP MMU resched
  - KVM: x86/mmu: Zap only TDP MMU leafs in kvm_zap_gfn_range()
  - KVM: x86/mmu: Require mmu_lock be held for write to zap TDP MMU range
  - KVM: x86/mmu: Add dedicated helper to zap TDP MMU root shadow page
  - KVM: x86/mmu: Skip remote TLB flush when zapping all of TDP MMU
  - KVM: x86/mmu: Zap only the target TDP MMU shadow page in NX recovery
  - KVM: x86/mmu: Refactor low-level TDP MMU set SPTE helper to take raw values
  - KVM: x86/mmu: Add helpers to read/write TDP MMU SPTEs and document RCU
  - KVM: x86/mmu: Drop RCU after processing each root in MMU notifier hooks
  - KVM: x86/mmu: Batch TLB flushes from TDP MMU for MMU notifier change_spte
  - KVM: x86/mmu: Check for !leaf=>leaf, not PFN change, in TDP MMU SP removal
  - KVM: x86/mmu: do not allow readers to acquire references to invalid roots
  - KVM: x86/mmu: only perform eager page splitting on valid roots
  - KVM: x86/mmu: Require mmu_lock be held for write in unyielding root iter
  - KVM: x86/mmu: Document that zapping invalidated roots doesn't need to flush
  - KVM: x86/mmu: Formalize TDP MMU's (unintended?) deferred TLB flush logic
  - KVM: WARN if is_unsync_root() is called on a root without a shadow page
  - KVM: s390: Replace KVM_REQ_MMU_RELOAD usage with arch specific request
  - KVM: x86/mmu: Zap only obsolete roots if a root shadow page is zapped
  - KVM: Drop kvm_reload_remote_mmus(), open code request in x86 users
  - KVM: x86: Invoke kvm_mmu_unload() directly on CR4.PCIDE change
  - KVM: x86: flush TLB separately from MMU reset
  - KVM: x86/mmu: clear MMIO cache when unloading the MMU
  - KVM: x86/mmu: load new PGD after the shadow MMU is initialized
  - KVM: x86/mmu: look for a cached PGD when going from 32-bit to 64-bit
  - KVM: x86/mmu: do not pass vcpu to root freeing functions
  - KVM: x86/mmu: do not consult levels when freeing roots
  - KVM: x86: use struct kvm_mmu_root_info for mmu->root
  - KVM: x86: do not deliver asynchronous page faults if CR0.PG=0
  - KVM: x86: Reinitialize context if host userspace toggles EFER.LME
  - KVM: x86: Retry page fault if MMU reload is pending and root has no sp
  - KVM: x86/mmu: Remove MMU auditing
  - KVM: x86/mmu: Add tracepoint for splitting huge pages
  - KVM: x86/mmu: Split huge pages mapped by the TDP MMU during KVM_CLEAR_DIRTY_LOG
  - KVM: x86/mmu: Split huge pages mapped by the TDP MMU when dirty logging is enabled
  - KVM: x86/mmu: Separate TDP MMU shadow page allocation and initialization
  - KVM: x86/mmu: Derive page role for TDP MMU shadow pages from parent
  - KVM: x86/mmu: Remove redundant role overrides for TDP MMU shadow pages
  - KVM: x86/mmu: Refactor TDP MMU iterators to take kvm_mmu_page root
  - KVM: x86/mmu: Move restore_acc_track_spte() to spte.h
  - KVM: x86/mmu: Drop new_spte local variable from restore_acc_track_spte()
  - KVM: x86/mmu: Remove unnecessary warnings from restore_acc_track_spte()
  - KVM: x86/mmu: Consolidate logic to atomically install a new TDP MMU page table
  - KVM: x86/mmu: Rename handle_removed_tdp_mmu_page() to handle_removed_pt()
  - KVM: x86/mmu: Rename TDP MMU functions that handle shadow pages
  - KVM: x86/mmu: Change tdp_mmu_{set,zap}_spte_atomic() to return 0/-EBUSY
  - KVM: x86/mmu: Automatically update iter->old_spte if cmpxchg fails
  - KVM: x86/mmu: Rename __rmap_write_protect() to rmap_write_protect()
  - KVM: x86/mmu: Rename rmap_write_protect() to kvm_vcpu_write_protect_gfn()
  - KVM: x86/mmu: Consolidate comments about {Host,MMU}-writable
  - KVM: x86/mmu: Rename DEFAULT_SPTE_MMU_WRITEABLE to DEFAULT_SPTE_MMU_WRITABLE
  - KVM: x86/mmu: Move is_writable_pte() to spte.h
  - KVM: x86/mmu: Check SPTE writable invariants when setting leaf SPTEs
  - KVM: x86/mmu: Move SPTE writable invariant checks to a helper function
  - KVM: x86/mmu_audit: Remove unused "level" of audit_spte_after_sync()
  - KVM: x86/tdp_mmu: Remove unused "kvm" of kvm_tdp_mmu_get_root()
  - KVM: x86/mmu: Remove unused "kvm" of __rmap_write_protect()
  - KVM: x86/mmu: Remove unused "kvm" of kvm_mmu_unlink_parents()
  - KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU
  - KVM: x86/mmu: Move "invalid" check out of kvm_tdp_mmu_get_root()
  - KVM: x86/mmu: Use common TDP MMU zap helper for MMU notifier unmap hook
  - KVM: remove async parameter of hva_to_pfn_remapped()
  - KVM: x86/mmu: Improve TLB flush comment in kvm_mmu_slot_remove_write_access()
  - KVM: x86/mmu: Document and enforce MMU-writable and Host-writable invariants
  - KVM: x86/mmu: Clear MMU-writable during changed_pte notifier
  - KVM: x86/MMU: Simplify flow of vmx_get_mt_mask
  - KVM: x86/mmu: Remove need for a vcpu from mmu_try_to_unsync_pages
  - KVM: x86/mmu: Remove need for a vcpu from kvm_slot_page_track_is_active
  - KVM: x86/mmu: Use shadow page role to detect PML-unfriendly pages for L2
  - KVM: x86/mmu: Retry page fault if root is invalidated by memslot update
  - KVM: x86/mmu: Handle "default" period when selectively waking kthread
  - KVM: x86/mmu: Remove spurious TLB flushes in TDP MMU zap collapsible path
  - KVM: x86/mmu: Use yield-safe TDP MMU root iter in MMU notifier unmapping
  - KVM: X86: Rename gpte_is_8_bytes to has_4_byte_gpte and invert the direction
  - KVM: MMU: update comment on the number of page role combinations
  - KVM: X86: Add parameter huge_page_level to kvm_init_shadow_ept_mmu()
  - KVM: X86: Add huge_page_level to __reset_rsvds_bits_mask_ept()
  - KVM: X86: Remove mmu->translate_gpa
  - KVM: x86: Subsume nested GPA read helper into load_pdptrs()
  - KVM: X86: Add parameter struct kvm_mmu *mmu into mmu->gva_to_gpa()
  - KVM: X86: Calculate quadrant when !role.gpte_is_8_bytes
  - KVM: X86: Remove useless code to set role.gpte_is_8_bytes when role.direct
  - KVM: X86: Remove unused declaration of __kvm_mmu_free_some_pages()
  - KVM: X86: Fix comment in __kvm_mmu_create()
  - KVM: X86: Skip allocating pae_root for vcpu->arch.guest_mmu when !tdp_enabled
  - KVM: x86: Forbid KVM_SET_CPUID{,2} after KVM_RUN
  - KVM: x86/mmu: Pass parameter flush as false in kvm_tdp_mmu_zap_collapsible_sptes()
  - KVM: x86/mmu: Skip tlb flush if it has been done in zap_gfn_range()
  - kvm: mmu: Use fast PF path for access tracking of huge pages when possible
  - KVM: x86/mmu: Properly dereference rcu-protected TDP MMU sptep iterator
  - KVM: x86/mmu: Extract zapping of rmaps for gfn range to separate helper
  - KVM: x86/mmu: Drop a redundant remote TLB flush in kvm_zap_gfn_range()
  - KVM: x86/mmu: Drop a redundant, broken remote TLB flush
  - KVM: X86: Don't unload MMU in kvm_vcpu_flush_tlb_guest()
  - KVM: x86/mmu: Unexport MMU load/unload functions
  - KVM: X86: pair smp_wmb() of mmu_try_to_unsync_pages() with smp_rmb()
  - KVM: X86: Cache CR3 in prev_roots when PCID is disabled
  - KVM: X86: Fix tlb flush for tdp in kvm_invalidate_pcid()
  - KVM: X86: Don't reset mmu context when toggling X86_CR4_PGE
  - KVM: X86: Don't reset mmu context when X86_CR4_PCIDE 1->0
  - kvm: x86: mmu: Make NX huge page recovery period configurable
  - KVM: x86/mmu: Rename slot_handle_leaf to slot_handle_level_4k
  - KVM: x86/mmu: clean up prefetch/prefault/speculative naming
  - KVM: cleanup allocation of rmaps and page tracking data
  - KVM: X86: fix lazy allocation of rmaps
  - KVM: x86/mmu: kvm_faultin_pfn has to return false if pfh is returned
  - KVM: x86: only allocate gfn_track when necessary
  - KVM: x86: add config for non-kvm users of page tracking
  - KVM: x86/mmu: Avoid memslot lookup in make_spte and mmu_try_to_unsync_pages
  - KVM: x86/mmu: Avoid memslot lookup in rmap_add
  - KVM: MMU: pass struct kvm_page_fault to mmu_set_spte
  - KVM: MMU: pass kvm_mmu_page struct to make_spte
  - KVM: MMU: set ad_disabled in TDP MMU role
  - KVM: MMU: remove unnecessary argument to mmu_set_spte
  - KVM: MMU: clean up make_spte return value
  - KVM: MMU: inline set_spte in FNAME(sync_page)
  - KVM: MMU: inline set_spte in mmu_set_spte
  - KVM: x86/mmu: Avoid memslot lookup in page_fault_handle_page_track
  - KVM: x86/mmu: Pass the memslot around via struct kvm_page_fault
  - KVM: MMU: unify tdp_mmu_map_set_spte_atomic and tdp_mmu_set_spte_atomic_no_dirty_log
  - KVM: MMU: mark page dirty in make_spte
  - KVM: x86/mmu: Fold rmap_recycle into rmap_add
  - KVM: x86/mmu: Verify shadow walk doesn't terminate early in page faults
  - KVM: MMU: change tracepoints arguments to kvm_page_fault
  - KVM: MMU: change disallowed_hugepage_adjust() arguments to kvm_page_fault
  - KVM: MMU: change kvm_mmu_hugepage_adjust() arguments to kvm_page_fault
  - KVM: MMU: change fast_page_fault() arguments to kvm_page_fault
  - KVM: MMU: change tdp_mmu_map_handle_target_level() arguments to kvm_page_fault
  - KVM: MMU: change kvm_tdp_mmu_map() arguments to kvm_page_fault
  - KVM: MMU: change FNAME(fetch)() arguments to kvm_page_fault
  - KVM: MMU: change __direct_map() arguments to kvm_page_fault
  - KVM: MMU: change handle_abnormal_pfn() arguments to kvm_page_fault
  - KVM: MMU: change kvm_faultin_pfn() arguments to kvm_page_fault
  - KVM: MMU: change page_fault_handle_page_track() arguments to kvm_page_fault
  - KVM: MMU: change direct_page_fault() arguments to kvm_page_fault
  - KVM: MMU: change mmu->page_fault() arguments to kvm_page_fault
  - KVM: MMU: Introduce struct kvm_page_fault
  - KVM: MMU: pass unadulterated gpa to direct_page_fault
  - KVM: X86: Remove FNAME(update_pte)
  - KVM: X86: Zap the invalid list after remote tlb flushing
  - KVM: X86: Change kvm_sync_page() to return true when remote flush is needed
  - KVM: X86: Remove kvm_mmu_flush_or_zap()
  - KVM: X86: Don't flush current tlb on shadow page modification
  - KVM: X86: Don't unsync pagetables when speculative
  - KVM: x86/mmu: Complete prefetch for trailing SPTEs for direct, legacy MMU
  - KVM: Remove tlbs_dirty
  - KVM: X86: Synchronize the shadow pagetable before link it
  - KVM: X86: Fix missed remote tlb flush in rmap_write_protect()
  - KVM: x86/mmu: Move lpage_disallowed_link further "down" in kvm_mmu_page
  - KVM: x86/mmu: Relocate kvm_mmu_page.tdp_mmu_page for better cache locality
  - KVM: x86/mmu: Remove unused field mmio_cached in struct kvm_mmu_page
  - KVM: x86: clamp host mapping level to max_level in kvm_mmu_max_mapping_level
  - KVM: x86/mmu: Drop 'shared' param from tdp_mmu_link_page()
  - KVM: x86/mmu: Add detailed page size stats
  - KVM: x86/mmu: Avoid collision with !PRESENT SPTEs in TDP MMU lpage stats
  - KVM: x86/mmu: Remove redundant spte present check in mmu_set_spte
  - KVM: x86/mmu: allow kvm_faultin_pfn to return page fault handling code
  - KVM: x86/mmu: rename try_async_pf to kvm_faultin_pfn
  - KVM: x86/mmu: add comment explaining arguments to kvm_zap_gfn_range
  - KVM: x86/mmu: fix parameters to kvm_flush_remote_tlbs_with_address
  - Revert "KVM: x86/mmu: Allow zap gfn range to operate under the mmu read lock"
  - KVM: X86: Introduce kvm_mmu_slot_lpages() helpers
  - KVM: x86/mmu: Don't step down in the TDP iterator when zapping all SPTEs
  - KVM: x86/mmu: Don't leak non-leaf SPTEs when zapping all SPTEs
  - KVM: x86/mmu: Rename __gfn_to_rmap to gfn_to_rmap
  - KVM: x86/mmu: Leverage vcpu->last_used_slot for rmap_add and rmap_recycle
  - KVM: x86/mmu: Leverage vcpu->last_used_slot in tdp_mmu_map_handle_target_level
  - KVM: Cache the last used slot index per vCPU
  - KVM: Move last_used_slot logic out of search_memslots
  - KVM: Rename lru_slot to last_used_slot
  - KVM: X86: Optimize zapping rmap
  - KVM: X86: Optimize pte_list_desc with per-array counter
  - KVM: X86: MMU: Tune PTE_LIST_EXT to be bigger
  - KVM: Don't take mmu_lock for range invalidation unless necessary
  - KVM: Block memslot updates across range_start() and range_end()
  - KVM: Introduce kvm_get_kvm_safe()
  - KVM: X86: Add per-vm stat for max rmap list size
  - KVM: x86/mmu: Return old SPTE from mmu_spte_clear_track_bits()
  - KVM: x86/mmu: Refactor shadow walk in __direct_map() to reduce indentation
  - KVM: x86/mmu: Mark VM as bugged if page fault returns RET_PF_INVALID
  - KVM: x86: Use KVM_BUG/KVM_BUG_ON to handle bugs that are fatal to the VM
  - KVM: Export kvm_make_all_cpus_request() for use in marking VMs as bugged
  - KVM: x86: Do not write protect huge page in initially-all-set mode
  - KVM: x86: Support write protecting only large pages
  - KVM: x86/mmu: Remove a variety of unnecessary exports
  - KVM: x86: Fold "write-protect large" use case into generic write-protect
  - KVM: x86/mmu: Don't set dirty bits when disabling dirty logging w/ PML
  - KVM: VMX: Dynamically enable/disable PML based on memslot dirty logging
  - KVM: x86: Move MMU's PML logic to common code
  - KVM: x86/mmu: Make dirty log size hook (PML) a value, not a function
  - KVM: x86/mmu: Let guest use GBPAGES if supported in hardware and TDP is on
  - KVM: x86/mmu: Get CR4.SMEP from MMU, not vCPU, in shadow page fault
  - KVM: x86/mmu: Get CR0.WP from MMU, not vCPU, in shadow page fault
  - KVM: x86/mmu: Drop redundant rsvd bits reset for nested NPT
  - KVM: x86/mmu: Optimize and clean up so called "last nonleaf level" logic
  - KVM: x86: Enhance comments for MMU roles and nested transition trickiness
  - KVM: x86/mmu: WARN on any reserved SPTE value when making a valid SPTE
  - KVM: x86/mmu: Add helpers to do full reserved SPTE checks w/ generic MMU
  - KVM: x86/mmu: Use MMU's role to determine PTTYPE
  - KVM: x86/mmu: Collapse 32-bit PAE and 64-bit statements for helpers
  - KVM: x86/mmu: Add a helper to calculate root from role_regs
  - KVM: x86/mmu: Add helper to update paging metadata
  - KVM: x86/mmu: Don't update nested guest's paging bitmasks if CR0.PG=0
  - KVM: x86/mmu: Consolidate reset_rsvds_bits_mask() calls
  - KVM: x86/mmu: Use MMU role_regs to get LA57, and drop vCPU LA57 helper
  - KVM: x86/mmu: Get nested MMU's root level from the MMU's role
  - KVM: x86/mmu: Drop "nx" from MMU context now that there are no readers
  - KVM: x86/mmu: Use MMU's role to get EFER.NX during MMU configuration
  - KVM: x86/mmu: Use MMU's role/role_regs to compute context's metadata
  - KVM: x86/mmu: Use MMU's role to detect EFER.NX in guest page walk
  - KVM: x86/mmu: Use MMU's roles to compute last non-leaf level
  - KVM: x86/mmu: Use MMU's role to compute PKRU bitmask
  - KVM: x86/mmu: Use MMU's role to compute permission bitmask
  - KVM: x86/mmu: Drop vCPU param from reserved bits calculator
  - KVM: x86/mmu: Use MMU's role to get CR4.PSE for computing rsvd bits
  - KVM: x86/mmu: Don't grab CR4.PSE for calculating shadow reserved bits
  - KVM: x86/mmu: Always set new mmu_role immediately after checking old role
  - KVM: x86/mmu: Set CR4.PKE/LA57 in MMU role iff long mode is active
  - KVM: x86/mmu: Do not set paging-related bits in MMU role if CR0.PG=0
  - KVM: x86/mmu: Add accessors to query mmu_role bits
  - KVM: x86/mmu: Rename "nxe" role bit to "efer_nx" for macro shenanigans
  - KVM: x86/mmu: Use MMU's role_regs, not vCPU state, to compute mmu_role
  - KVM: x86/mmu: Ignore CR0 and CR4 bits in nested EPT MMU role
  - KVM: x86/mmu: Consolidate misc updates into shadow_mmu_init_context()
  - KVM: x86/mmu: Add struct and helpers to retrieve MMU role bits from regs
  - KVM: x86/mmu: Grab shadow root level from mmu_role for shadow MMUs
  - KVM: x86/mmu: Move nested NPT reserved bit calculation into MMU proper
  - KVM: x86: Read and pass all CR0/CR4 role bits to shadow MMU helper
  - KVM: x86: Introduce kvm_post_set_cr4 to post handle the CR4 emulation
  - KVM: x86: Introduce kvm_post_set_cr0 to post handle the CR0 emulation
  - KVM: x86: Add more protection against undefined behavior in rsvd_bits()
  - KVM: x86/mmu: Drop smep_andnot_wp check from "uses NX" for shadow MMUs
  - KVM: x86: Fix sizes used to pass around CR0, CR4, and EFER
  - KVM: x86/mmu: Rename unsync helper and update related comments
  - KVM: x86/mmu: Drop the intermediate "transient" __kvm_sync_page()
  - KVM: x86/mmu: comment on kvm_mmu_get_page's syncing of pages
  - KVM: x86/mmu: WARN and zap SP when sync'ing if MMU role mismatches
  - KVM: x86/mmu: Use MMU role to check for matching guest page sizes
  - KVM: x86/mmu: Unconditionally zap unsync SPs when creating >4k SP at GFN
  - Revert "KVM: MMU: record maximum physical address width in kvm_mmu_extended_role"
  - KVM: x86: Alert userspace that KVM_SET_CPUID{,2} after KVM_RUN is broken
  - KVM: x86: Force all MMUs to reinitialize if guest CPUID is modified
  - KVM: nVMX: WARN if subtly-impossible VMFUNC conditions occur
  - KVM: x86: Drop pointless @reset_roots from kvm_init_mmu()
  - KVM: x86: Defer MMU sync on PCID invalidation
  - KVM: nVMX: Use fast PGD switch when emulating VMFUNC[EPTP_SWITCH]
  - KVM: x86: Use KVM_REQ_TLB_FLUSH_GUEST to handle INVPCID(ALL) emulation
  - KVM: nVMX: Consolidate VM-Enter/VM-Exit TLB flush and MMU sync logic
  - KVM: x86: Drop skip MMU sync and TLB flush params from "new PGD" helpers
  - KVM: nSVM: Move TLB flushing logic (or lack thereof) to dedicated helper
  - KVM: x86: Uncondtionally skip MMU sync/TLB flush in MOV CR3's PGD switch
  - KVM: x86: Invalidate all PGDs for the current PCID on MOV CR3 w/ flush
  - KVM: nVMX: Free only guest_mode (L2) roots on INVVPID w/o EPT
  - scsi: iscsi: Fix iscsi_task use after free
  - scsi: iscsi: Have abort handler get ref to conn
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
  - crypto: s390/aes - Fix buffer overread in CTR mode
  - block: prevent division by zero in blk_rq_stat_sum()
  - IMA: Support the measurement extending of TSI TMM
  - vt: fix unicode buffer corruption when deleting characters
  - selinux: avoid dereference of garbage after mount failure
  - btrfs: send: handle path ref underflow in header iterate_inode_ref()
  - x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ
  - crypto: xilinx - call finalize with bh disabled


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-207.0.0.116
changelog:
  - !8599  Bluetooth: hci_core: Fix possible buffer overflow
  - !8949  CVE-2022-48652
  - !8602  netfilter: nf_tables: set dormant flag on hook register failure
  - !8867  ipv6: prevent NULL dereference in ip6_output()
  - !8779  smb: client: fix UAF in smb2_reconnect_server()
  - !8893 [sync] PR-8531:  gpiolib: cdev: fix uninitialised kfifo
  - !8985  cvm_tsi: Fix security issue for Confidential cVM TSI
  - !8686  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
  - !8711  ubifs: Set page uptodate in the correct place
  - !8860  blk-iocost: do not WARN if iocg was already offlined
  - !8639  s390/qeth: Fix kernel panic after setting hsuid
  - !8946  usb: typec: ucsi: Limit read size on v1.2
  - !8969  Fix CVE-2024-36949
  - cvm_tsi: Fix security issue for Confidential cVM TSI
  - !8216  ACPI: video: check for error while searching for backlight device parent
  - !8903  ALSA: scarlett2: Add missing error checks to *_ctl_get()
  - !8584  virtio-blk: fix implicit overflow on virtio_max_dma_size
  - !8838  blk-iocost: avoid out of bounds shift
  - !8856  PCI/PM: Drain runtime-idle callbacks before driver removal
  - amd/amdkfd: sync all devices to wait all processes being evicted
  - drm/amdkfd: Rework kfd_locked handling
  - !8906  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
  - !8910  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
  - ice: Fix crash by keep old cfg when update TCs more than queues
  - ice: ethtool: Prohibit improper channel config for DCB
  - !8879  net: core: reject skb_copy(_expand) for fraglist GSO skbs
  - !6695  netfilter: nft_set_pipapo: do not free live element
  - usb: typec: ucsi: Limit read size on v1.2
  - !8891  net: fix out-of-bounds access in ops_init
  - !8871 add sdma-dae for openeuler 22.03 SP4
  - !8762  tipc: fix UAF in error path
  - !8742  octeontx2-af: avoid off-by-one read from userspace
  - !8734  mptcp: ensure snd_nxt is properly initialized on connect
  - !8634  batman-adv: Avoid infinite loop trying to resize local TT
  - !8736  net: hns3: fix kernel crash when devlink reload during initialization
  - !8745  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
  - !3547  fs: mitigatin cacheline false sharing in struct file
  - !8887  nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
  - gpiolib: cdev: Fix use after free in lineinfo_changed_notify
  - net/mlx5e: Fix use-after-free of encap entry in neigh update handler
  - ALSA: scarlett2: Add missing error checks to *_ctl_get()
  - !8785  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  - drivers: misc: sdma-dae: enable sdma_dae for arm64
  - drivers: misc: sdma-dae: support page fault preprocess
  - gpiolib: cdev: fix uninitialised kfifo
  - !8849  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
  - net: fix out-of-bounds access in ops_init
  - !8666  phonet/pep: fix racy skb_queue_empty() use
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
  - net: core: reject skb_copy(_expand) for fraglist GSO skbs
  - drivers: misc: sdma-dae: support interrupt init and handle
  - drivers: misc: sdma-dae: support sqe task send and execute
  - drivers: misc: sdma-dae: support channel management
  - drivers: misc: sdma-dae: support getting streamID
  - drivers: misc: sdma-dae: support initializ sdma driver
  - ipv6: prevent NULL dereference in ip6_output()
  - blk-iocost: do not WARN if iocg was already offlined
  - PCI/PM: Drain runtime-idle callbacks before driver removal
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
  - !8684  tcp: properly terminate timers for kernel sockets
  - !8629  erspan: make sure erspan_base_hdr is present in skb->head
  - blk-iocost: avoid out of bounds shift
  - !8635  ipv6: Fix potential uninit-value access in __ip6_make_skb()
  - !8550  tipc: fix a possible memleak in tipc_buf_append
  - !8726  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
  - !8808 v2  Add support for PCC Operation Region
  - !8623  fs/9p: only translate RWX permissions for plain 9P2000
  - !8479  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
  - !8770 IMA: Check cvm world before call smc function
  - !8797 kvm: arm64: Fix a compilation error
  - !8782 drivers: net: ub: dev: network_mgmt: Modify the dguid of network control packets.
  - arm64: config: Enable ACPI_PCC
  - ACPI: PCC: Setup PCC Opregion handler only if platform interrupt is available
  - ACPI: PCC: Fix unintentional integer overflow
  - ACPI: PCC: Fix Tx acknowledge in the PCC address space handler
  - ACPI: PCC: replace wait_for_completion()
  - ACPI: PCC: Release resources on address space setup failure path
  - ACPI: PCC: pcc_ctx can be static
  - ACPI: PCC: Implement OperationRegion handler for the PCC Type 3 subtype
  - ACPICA: Add support for PCC Opregion special context data
  - kvm: arm64: Fix a compilation error
  - network_mgmt: Modify the dguid of network control packets.
  - !8781 HNS3: Supports the configuration of default mc guid
  - !8789  Bluetooth: SCO: Fix not validating setsockopt user input
  - !8658  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
  - !8673 IMA: Support uid and gid tamplate
  - IMA: Check cvm world before call smc function
  - Bluetooth: SCO: Fix not validating setsockopt user input
  - !8679  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
  - !8558  xen-netfront: Add missing skb_mark_for_recycle
  - !8725 v6  Fix CVE-2023-52732
  - !8222  Fix CVE-2023-52672
  - !8590  geneve: fix header validation in geneve[6
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  - HNS3: Supports the configuration of default mc guid
  - smb: client: fix UAF in smb2_reconnect_server()
  - !8355  powerpc: defconfig: Disable CONFIG_DW_EDMA and CONFIG_DW_EDMA_PCIE
  - tipc: fix UAF in error path
  - !8749  ubifs: Check @c->dirty_[n|p
  - ubifs: Check @c->dirty_[n|p]n_cnt and @c->nroot state under @c->lp_mutex
  - afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
  - octeontx2-af: avoid off-by-one read from userspace
  - !8723 crypto: hisilicon/qm - change function type to void
  - !8536  livepatch: Fix find wrong ftrace entry
  - !8682  ACPI: bus: Ensure that notify handlers are not running after removal
  - !8688  x86/signal: Fix the value returned by strict_sas_size()
  - !8618  CVE-2024-35896
  - net: hns3: fix kernel crash when devlink reload during initialization
  - !8607  CVE-2024-35895
  - mptcp: ensure snd_nxt is properly initialized on connect
  - !8586  fix CVE-2021-47558
  - !8548  fix CVE-2024-36906
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
  - ceph: blocklist the kclient when receiving corrupted snap trace
  - ceph: shut down access to inode when async create fails
  - ceph: refactor remove_session_caps_cb
  - ceph: fix auth cap handling logic in remove_session_caps_cb
  - ceph: drop private list from remove_session_caps_cb
  - crypto: hisilicon/qm - change function type to void
  - !7930  bpf: Protect against int overflow for stack access size
  - !8581 22.03-SP4-ACC patch
  - !8396 RDMA/hns: A set of bugfixes for openeuler 22.03 SP4
  - !8613  CVE-2024-35854
  - !8583  mmc: sdhci-msm: pervent access to suspended controller
  - ubifs: Set page uptodate in the correct place
  - !8693 【OLK-5.10】Fix some problems about patch "net: hns3: release PTP resources if pf initialization failed"
  - net: hns3: release PTP resources if pf initialization failed
  - Revert "net: hns3: release PTP resources if pf initialization failed"
  - x86/signal: Fix the value returned by strict_sas_size()
  - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
  - tcp: properly terminate timers for kernel sockets
  - ACPI: bus: Ensure that notify handlers are not running after removal
  - crypto: hisilicon/qm - Add the default processing branch
  - crypto: hisilicon/debugfs - Resolve the problem of applying for redundant space in sq dump
  - crypto: hisilicon/sec - Fix memory leak for sec resource release
  - crypto: hisilicon - Adjust debugfs creation and release order
  - crypto: hisilicon/debugfs - Fix the processing logic issue in the debugfs creation
  - crypto: hisilicon/sgl - Delete redundant parameter verification
  - crypto: hisilicon/debugfs - Fix debugfs uninit process issue
  - crypto: hisilicon/sec - Add the condition for configuring the sriov function
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
  - crypto: hisilicon/zip - fix the missing CRYPTO_ALG_ASYNC in cra_flags
  - !8646  Fix vf init and common user permissions issue
  - crypto: hisilicon - Fix smp_processor_id() warnings
  - !8534  riscv: process: Fix kernel gp leakage
  - !8542  octeontx2-af: Fix possible null pointer dereference.
  - phonet/pep: fix racy skb_queue_empty() use
  - !8642 v9  Memory access profiler(SPE) driven NUMA balancing
  - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
  - !8483 KVM: arm64: Translate logic cluster id to physical cluster id when updating lsudvmbm
  - net/ethernet/huawei/hiroce3: Fix vf init and common user permissions issue
  - !8461  i2c: smbus: fix NULL function pointer dereference
  - config: Enable memory sampling based pmu for numa balance by default
  - samples/bpf: Add program for memory access by spe
  - tracing, mem-sampling-sample: Adding tracking events to hardware-sampled page access
  - driver/arm/spe: making mem_sampling and perf mutually exclusive with spe driver
  - tracing, numa balance: add trace events for numa data caused by mem_sampling
  - mm/mem_sampling.c: Add controlling interface for mem_sampling on numa balance
  - mm/mem_sampling.c: Drive NUMA balancing via mem_sampling access data
  - sched: Enable per-process mem_sampling from sched switch path
  - mm/mem_sampling.c: Add controlling interface for mem_sampling
  - mm: Add PMU based memory sampling abstract layer
  - drivers/arm/spe: In-kernel SPE driver for page access profiling
  - !8555  rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back
  - s390/qeth: Fix kernel panic after setting hsuid
  - ipv6: Fix potential uninit-value access in __ip6_make_skb()
  - batman-adv: Avoid infinite loop trying to resize local TT
  - erspan: make sure erspan_base_hdr is present in skb->head
  - fs/9p: only translate RWX permissions for plain 9P2000
  - netfilter: complete validation of user input
  - netfilter: validate user input for expected length
  - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
  - Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
  - bpf: Allow delete from sockmap/sockhash only if update is allowed
  - bpf, sockmap: Prevent lock inversion deadlock in map delete elem
  - netfilter: nf_tables: set dormant flag on hook register failure
  - Bluetooth: hci_core: Fix possible buffer overflow
  - geneve: fix header validation in geneve[6]_xmit_skb
  - net: stmmac: Disable Tx queues when reconfiguring the interface
  - virtio-blk: fix implicit overflow on virtio_max_dma_size
  - mmc: sdhci-msm: pervent access to suspended controller
  - xen-netfront: Add missing skb_mark_for_recycle
  - rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back
  - tipc: fix a possible memleak in tipc_buf_append
  - ARM: 9381/1: kasan: clear stale stack poison
  - octeontx2-af: Fix possible null pointer dereference.
  - livepatch: Fix find wrong ftrace entry
  - riscv: process: Fix kernel gp leakage
  - KVM: arm64: Translate logic cluster id to physical cluster id when updating lsudvmbm
  - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
  - i2c: smbus: fix NULL function pointer dereference
  - RDMA/hns: Fix missing list_del in hns_roce_hem
  - RDMA/hns: Fix deadlock when using DCA debugfs.
  - RDMA/hns: Set NULL after mtr_node is freed
  - RDMA/hns: Fix missing validation check of DCA mem size
  - RDMA/hns: directly read the scc parameters in the driver instead of the firmware
  - RDMA/hns: Fix missing default values of scc parameters
  - RDMA/hns: Fix fmt output error
  - RDMA/hns: Fix cpu stuck by printings during reset
  - RDMA/hns: Fix CPU stuck due to read polling during reset
  - powerpc: defconfig: Disable CONFIG_DW_EDMA and CONFIG_DW_EDMA_PCIE
  - pipe: wakeup wr_wait after setting max_usage
  - fs/pipe: move check to pipe_has_watch_queue()
  - ACPI: video: check for error while searching for backlight device parent
  - ima: Define new template fields iuid and igid
  - ima: Add ima_show_template_uint() template library function
  - bpf: Protect against int overflow for stack access size
  - netfilter: nft_set_pipapo: do not free live element
  - fs: enable CONFIG_FILE_MITIGATION_FALSE_SHARING by default on arm64
  - fs: mitigatin cacheline false sharing in struct file


