# changelog

author: maminjie <maminjie1@huawei.com> - 1.3.30-7
changelog:
  - fix some CVEs: CVE-2018-18544 CVE-2019-7397 CVE-2019-11005 CVE-2019-11006
    CVE-2019-11010 CVE-2019-12921 CVE-2020-10938 CVE-2020-12672


author: gaoxingwang <gaoxingwang@huawei.com> - 1.32.12-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:merge multiple modifications into one patch to fix the dependency problem


author: gaoxingwang <gaoxingwang@huawei.com> - 1.32.12-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the issue that NetworkManager service does not slf-heal when the dbus service is abnormal


author: gaoxingwang <gaoxingwang1@huawei.com> - 1.32.12-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 33.19-42
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add support for configuration of additional boot arguments
         change the startup mode of do_transaction sub process to spawn


author: wangkerong <wangkerong@huawei.com> - 1.13.0-3
changelog:
  - Fix OOM during fuzz test
  - We don't run some testcase,because the patch of fuzz test will lead to the failure of testcase


author: jiangheng<jiangheng12@huawei.com> - 9.16.23-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove set-timeout-inteval-of-some-cases-to-600s.patch
         specify ISC_TASK_WORKERS value to fix some test cases execute time too long


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.13.0.45
changelog:
  - mm/dynamic_hugetlb: initialize subpages before merging
  - mm/dynamic_hugetlb: set/clear HPageFreed
  - mm/dynamic_hugetlb: only support to merge 2M dynamicly
  - mm/dynamic_hugetlb: hold the lock until pages back to hugetlb
  - mm/dynamic_hugetlb: use mem_cgroup_force_empty to reclaim pages
  - mm/dynamic_hugetlb: check page using check_new_page
  - mm/dynamic_hugetlb: use pfn to traverse subpages
  - mm/dynamic_hugetlb: improve the initialization of huge pages
  - mm/dynamic_hugetlb: check free_pages_prepares when split pages


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.14.0.46
changelog:
  - vfs: fs_context: fix up param length parsing in legacy_parse_param
  - NFS: LOOKUP_DIRECTORY is also ok with symlinks
  - blk-mq: fix potential uaf for 'queue_hw_ctx'
  - blk-mq: add exception handling when srcu->sda alloc failed


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.16.0.48
changelog:
  - Revert "Compress modules to xz format in kernel.spec, which reduces disk consumption"
  - esp: Fix possible buffer overflow in ESP transformation
  - sock: remove one redundant SKB_FRAG_PAGE_ORDER macro
  - kabi: only reserve flags on X86_64 and ARM64
  - mm/dynamic_hugetlb: only compile PG_pool on X86_64 and ARM64


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.17.0.49
changelog:
  - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern
  - net: snmp: inline snmp_get_cpu_field()


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.19.0.51
changelog:
  - sched/fair: Add qos_throttle_list node in struct cfs_rq
  - ARM: 9142/1: kasan: work around LPAE build warning
  - mm: kfence: fix missing objcg housekeeping for SLAB
  - cgroup: Export cgroup.kill from cgroupv2 to cgroupv1
  - cgroup: introduce cgroup.kill
  - memcg: Fix inconsistent oom event behavior for OOM_MEMCG_KILL
  - memcg: Export memory.events and memory.events.local from cgroupv2 to cgroupv1
  - net: hns3: fix phy can not link up when autoneg off and reset
  - net: hns3: add NULL pointer check for hns3_set/get_ringparam()
  - net: hns3: add netdev reset check for hns3_set_tunable()
  - net: hns3: clean residual vf config after disable sriov
  - net: hns3: add max order judgement for tx spare buffer
  - net: hns3: fix ethtool tx copybreak buf size indicating not aligned issue
  - net: hns3: refine the process when PF set VF VLAN
  - net: hns3: add vlan list lock to protect vlan list
  - net: hns3: fix port base vlan add fail when concurrent with reset
  - net: hns3: fix bug when PF set the duplicate MAC address for VFs
  - net: hns3: handle empty unknown interrupt for VF
  - net: hns3: fix race condition in debugfs
  - arm64: cpu_park: Move into stand-alone file
  - arm64: quick_kexec: Move to stand-alone file
  - jffs2: fix NULL pointer dereference in jffs2_scan_medium
  - rseq, ptrace: Add PTRACE_GET_RSEQ_CONFIGURATION request
  - config: enable CONFIG_MEMCG_MEMFS_INFO by default
  - mm/memcg_memfs_info: show files that having pages charged in mem_cgroup
  - share_pool: don't trace the invalid spa address
  - mm: share_pool: adjust sp_alloc behavior when coredump
  - mm: share_pool: adjust sp_make_share_k2u behavior when coredump


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.20.0.52
changelog:
  - USB: gadget: validate endpoint index for xilinx udc
  - sr9700: sanity check for packet length
  - Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""
  - swiotlb: fix info leak with DMA_FROM_DEVICE


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.20.0.53
changelog:
  - Add java-1.8.0-openjdk-devel BuildRequires for kernel.spec
  - Compress modules to xz format in kernel.spec, which reduces disk consumption
  - kabichk: do kabi check only for 4K page_size


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.21.0.54
changelog:
  - SUNRPC: Ensure we flush any closed sockets before xs_xprt_free()
  - scsi: hisi_sas: Use autosuspend for the host controller
  - scsi: libsas: Keep host active while processing events
  - scsi: hisi_sas: Keep controller active between ISR of phyup and the event being processed
  - scsi: libsas: Defer works of new phys during suspend
  - scsi: libsas: Refactor sas_queue_deferred_work()
  - scsi: libsas: Add flag SAS_HA_RESUMING
  - scsi: libsas: Resume host while sending SMP I/Os
  - scsi: hisi_sas: Add more logs for runtime suspend/resume
  - scsi: libsas: Insert PORTE_BROADCAST_RCVD event for resuming host
  - scsi: mvsas: Add spin_lock/unlock() to protect asd_sas_port->phy_list
  - scsi: hisi_sas: Fix some issues related to asd_sas_port->phy_list
  - scsi: libsas: Add spin_lock/unlock() to protect asd_sas_port->phy_list
  - scsi: block: pm: Always set request queue runtime active in blk_post_runtime_resume()
  - scsi: Revert "scsi: hisi_sas: Filter out new PHY up events during suspend"
  - scsi: libsas: Don't always drain event workqueue for HA resume
  - scsi: hisi_sas: Wait for phyup in hisi_sas_control_phy()
  - scsi: hisi_sas: Initialise devices in .slave_alloc callback
  - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
  - drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()
  - hamradio: remove needs_free_netdev to avoid UAF
  - hamradio: defer 6pack kfree after unregister_netdev
  - mm: page_counter: mitigate consequences of a page_counter underflow
  - nbd: fix possible overflow on 'first_minor' in nbd_dev_add()
  - io_uring: don't keep looping for more events if we can't flush overflow
  - hugetlbfs: fix a truncation issue in hugepages parameter
  - spi: hisi-kunpeng: Fix the debugfs directory name incorrect
  - spi: hisi-kunpeng: Add debugfs support
  - xen/netfront: react properly to failing gnttab_end_foreign_access_ref()
  - xen/gnttab: fix gnttab_end_foreign_access() without page specified
  - xen/pvcalls: use alloc/free_pages_exact()
  - xen/9p: use alloc/free_pages_exact()
  - xen: remove gnttab_query_foreign_access()
  - xen/gntalloc: don't use gnttab_query_foreign_access()
  - xen/scsifront: don't use gnttab_query_foreign_access() for mapped status
  - xen/netfront: don't use gnttab_query_foreign_access() for mapped status
  - xen/blkfront: don't use gnttab_query_foreign_access() for mapped status
  - xen/grant-table: add gnttab_try_end_foreign_access()
  - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case
  - net: sched: fix use-after-free in tc_new_tfilter()
  - mtd: fixup CFI on ixp4xx
  - powerpc/pseries: Get entry and uaccess flush required bits from H_GET_CPU_CHARACTERISTICS
  - ALSA: hda/realtek: Re-order quirk entries for Lenovo
  - ALSA: hda/realtek: Add quirk for Legion Y9000X 2020
  - ALSA: hda: ALC287: Add Lenovo IdeaPad Slim 9i 14ITL5 speaker quirk
  - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after reboot from Windows
  - ALSA: hda/realtek: Add speaker fixup for some Yoga 15ITL5 devices
  - KVM: x86: remove PMU FIXED_CTR3 from msrs_to_save_all
  - firmware: qemu_fw_cfg: fix kobject leak in probe error path
  - firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries
  - firmware: qemu_fw_cfg: fix sysfs information leak
  - rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled
  - media: uvcvideo: fix division by zero at stream start
  - video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
  - 9p: only copy valid iattrs in 9P2000.L setattr implementation
  - KVM: s390: Clarify SIGP orders versus STOP/RESTART
  - KVM: x86: Register Processor Trace interrupt hook iff PT enabled in guest
  - perf: Protect perf_guest_cbs with RCU
  - remoteproc: qcom: pil_info: Don't memcpy_toio more than is provided
  - orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()
  - devtmpfs regression fix: reconfigure on each mount
  - kbuild: Add $(KBUILD_HOSTLDFLAGS) to 'has_libelf' test
  - staging: greybus: fix stack size warning with UBSAN
  - drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk()
  - staging: wlan-ng: Avoid bitwise vs logical OR warning in hfa384x_usb_throttlefn()
  - media: Revert "media: uvcvideo: Set unique vdev name based in type"
  - random: fix crash on multiple early calls to add_bootloader_randomness()
  - random: fix data race on crng init time
  - random: fix data race on crng_node_pool
  - can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved}
  - can: isotp: convert struct tpcon::{idx,len} to unsigned int
  - can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data
  - mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()
  - veth: Do not record rx queue hint in veth_xmit
  - mmc: sdhci-pci: Add PCI ID for Intel ADL
  - ath11k: Fix buffer overflow when scanning with extraie
  - USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
  - USB: core: Fix bug in resuming hub's handling of wakeup requests
  - ARM: dts: exynos: Fix BCM4330 Bluetooth reset polarity in I9100
  - Bluetooth: bfusb: fix division by zero in send path
  - Bluetooth: btusb: Add support for Foxconn QCA 0xe0d0
  - Bluetooth: btusb: Add support for Foxconn MT7922A
  - Bluetooth: btusb: Add two more Bluetooth parts for WCN6855
  - Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb()
  - workqueue: Fix unbind_workers() VS wq_worker_running() race


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.22.0.55
changelog:
  - scsi: hisi_sas: Limit users changing debugfs BIST count value
  - netfilter: nf_tables: initialize registers in nft_do_chain()
  - sched: Fix yet more sched_fork() races
  - USB: gadget: validate interface OS descriptor requests
  - usb: gadget: don't release an existing dev->buf
  - usb: gadget: clear related members when goto fail
  - usb: gadget: rndis: check size of RNDIS_MSG_SET command
  - locking/csd_lock: Add boot parameter for controlling CSD lock debugging
  - mm/mempolicy: fix a race between offset_il_node and mpol_rebind_task
  - PCI: fix kabi change in struct pci_dev
  - PCI/RCEC: Fix RCiEP device to RCEC association
  - PCI/AER: Add RCEC AER error injection support
  - PCI/PME: Add pcie_walk_rcec() to RCEC PME handling
  - PCI/AER: Add pcie_walk_rcec() to RCEC AER handling
  - PCI/ERR: Recover from RCiEP AER errors
  - PCI/ERR: Add pcie_link_rcec() to associate RCiEPs
  - PCI/ERR: Recover from RCEC AER errors
  - PCI/ERR: Clear AER status only when we control AER
  - PCI/ERR: Add pci_walk_bridge() to pcie_do_recovery()
  - PCI/ERR: Avoid negated conditional for clarity
  - PCI/ERR: Use "bridge" for clarity in pcie_do_recovery()
  - PCI/ERR: Simplify by computing pci_pcie_type() once
  - PCI/ERR: Simplify by using pci_upstream_bridge()
  - PCI/ERR: Rename reset_link() to reset_subordinates()
  - PCI/ERR: Cache RCEC EA Capability offset in pci_init_capabilities()
  - PCI/ERR: Bind RCEC devices to the Root Port driver
  - PCI/AER: Write AER Capability only when we control it
  - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.23.0.56
changelog:
  - sysctl: Modify sysctl_overload_detect_period minimum to 100ms
  - ax25: Fix NULL pointer dereferences in ax25 timers
  - ax25: fix NPD bug in ax25_disconnect
  - ax25: Fix NULL pointer dereference in ax25_kill_by_device
  - ax25: improve the incomplete fix to avoid UAF and NPD bugs
  - arm64: clear_page() shouldn't use DC ZVA when DCZID_EL0.DZP == 1
  - mm: gup: fix potential pgmap refcnt leak in __gup_device_huge()
  - mtd: phram: Fix error return code in phram_setup()


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.27.0.57
changelog:
  - llc: only change llc->dev when bind() succeeds
  - netdevice: add the case if dev is NULL
  - llc: fix netdevice reference leaks in llc_ui_bind()
  - Revert "clocksource: Reduce clocksource-skew threshold"
  - Revert "clocksource: Avoid accidental unstable marking of clocksources"
  - Revert "xfrm: rate limit SA mapping change message to user space"
  - ipvlan: Modify the value of ipvlan modes
  - of: Enable crashkernel=X,high to support kexec option -s
  - arm64: kdump: Try not to use NO_BLOCK_MAPPINGS for memory under 4G
  - arm64: kdump: Use page-level mapping for the high memory of crashkernel
  - arm64: kdump: Don't force page-level mappings for memory above 4G
  - arm64: kdump: Update the name of crashk_low_res
  - x86: KVM: Fixed the bug that WAITmax cannot be updated in real time
  - powerpc: Free fdt on error in elf64_load()
  - powerpc: If kexec_build_elf_info() fails return immediately from elf64_load()
  - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
  - ixgbevf: add disable link state
  - ixgbe: add improvement for MDD response functionality
  - ixgbe: add the ability for the PF to disable VF link state
  - can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path
  - RDMA/rtrs-clt: Fix possible double free in error case
  - arm64: fix clang warning about TRAMP_VALIAS
  - arm64: kvm: Fix copy-and-paste error in bhb templates for v5.10 stable
  - arm64: proton-pack: Include unprivileged eBPF status in Spectre v2 mitigation reporting
  - arm64: Use the clearbhb instruction in mitigations
  - KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated
  - arm64: Mitigate spectre style branch history side channels
  - KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A
  - arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2
  - arm64: Add percpu vectors for EL1
  - arm64: entry: Add macro for reading symbol addresses from the trampoline
  - arm64: entry: Add vectors that have the bhb mitigation sequences
  - arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations
  - arm64: entry: Allow the trampoline text to occupy multiple pages
  - arm64: entry: Make the kpti trampoline's kpti sequence optional
  - arm64: entry: Move trampoline macros out of ifdef'd section
  - arm64: entry: Don't assume tramp_vectors is the start of the vectors
  - arm64: entry: Allow tramp_alias to access symbols after the 4K boundary
  - arm64: entry: Move the trampoline data page before the text page
  - arm64: entry: Free up another register on kpti's tramp_exit path
  - arm64: entry: Make the trampoline cleanup optional
  - arm64: spectre: Rename spectre_v4_patch_fw_mitigation_conduit
  - arm64: entry.S: Add ventry overflow sanity checks
  - ARM: Spectre-BHB: provide empty stub for non-config
  - ARM: Do not use NOCROSSREFS directive with ld.lld
  - ARM: include unprivileged BPF status in Spectre V2 reporting
  - ARM: Spectre-BHB workaround
  - ARM: use LOADADDR() to get load address of sections
  - ARM: early traps initialisation
  - ARM: report Spectre v2 status through sysfs
  - arm64: add ID_AA64ISAR2_EL1 sys register
  - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT
  - x86/speculation: Warn about Spectre v2 LFENCE mitigation
  - x86/speculation: Update link to AMD speculation whitepaper
  - x86/speculation: Use generic retpoline by default on AMD
  - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting
  - Documentation/hw-vuln: Update spectre doc
  - x86/speculation: Add eIBRS + Retpoline options
  - x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE
  - x86,bugs: Unconditionally allow spectre_v2=retpoline,amd
  - can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path
  - scripts: sphinx-pre-install: Fix ctex support on Debian
  - scripts: sphinx-pre-install: add required ctex dependency
  - ath10k: Fix the MTU size on QCA9377 SDIO
  - mtd: nand: bbt: Fix corner case in bad block table handling
  - lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test
  - mm/hmm.c: allow VM_MIXEDMAP to work with hmm_range_fault
  - lib82596: Fix IRQ check in sni_82596_probe
  - scripts/dtc: dtx_diff: remove broken example from help text
  - dt-bindings: watchdog: Require samsung,syscon-phandle for Exynos7
  - dt-bindings: display: meson-vpu: Add missing amlogic,canvas property
  - dt-bindings: display: meson-dw-hdmi: add missing sound-name-prefix property
  - net: mscc: ocelot: fix using match before it is set
  - net: sfp: fix high power modules without diagnostic monitoring
  - net: ethernet: mtk_eth_soc: fix error checking in mtk_mac_config()
  - bcmgenet: add WOL IRQ check
  - net_sched: restore "mpu xxx" handling
  - net: bonding: fix bond_xmit_broadcast return value error bug
  - arm64: dts: qcom: msm8996: drop not documented adreno properties
  - devlink: Remove misleading internal_flags from health reporter dump
  - perf probe: Fix ppc64 'perf probe add events failed' case
  - dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
  - dmaengine: at_xdmac: Fix lld view setting
  - dmaengine: at_xdmac: Fix concurrency over xfers_list
  - dmaengine: at_xdmac: Print debug message after realeasing the lock
  - dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending
  - dmaengine: at_xdmac: Don't start transactions at tx_submit level
  - perf script: Fix hex dump character output
  - libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route()
  - gre: Don't accidentally set RTO_ONLINK in gre_fill_metadata_dst()
  - xfrm: Don't accidentally set RTO_ONLINK in decode_session4()
  - netns: add schedule point in ops_exit_list()
  - inet: frags: annotate races around fqdir->dead and fqdir->high_thresh
  - taskstats: Cleanup the use of task->exit_code
  - virtio_ring: mark ring unused on error
  - vdpa/mlx5: Fix wrong configuration of virtio_version_1_0
  - rtc: pxa: fix null pointer dereference
  - HID: vivaldi: fix handling devices not using numbered reports
  - net: axienet: increase default TX ring size to 128
  - net: axienet: fix for TX busy handling
  - net: axienet: fix number of TX ring slots for available check
  - net: axienet: Fix TX ring slot available check
  - net: axienet: limit minimum TX ring size
  - net: axienet: add missing memory barriers
  - net: axienet: reset core on initialization prior to MDIO access
  - net: axienet: Wait for PhyRstCmplt after core reset
  - net: axienet: increase reset timeout
  - net/smc: Fix hung_task when removing SMC-R devices
  - clk: si5341: Fix clock HW provider cleanup
  - clk: Emit a stern warning with writable debugfs enabled
  - af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
  - f2fs: fix to reserve space for IO align feature
  - f2fs: compress: fix potential deadlock of compress file
  - parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries
  - net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module
  - net/fsl: xgmac_mdio: Add workaround for erratum A-009885
  - ipv4: avoid quadratic behavior in netns dismantle
  - ipv4: update fib_info_cnt under spinlock protection
  - perf evsel: Override attr->sample_period for non-libpfm4 events
  - xdp: check prog type before updating BPF link
  - bpftool: Remove inclusion of utilities.mak from Makefiles
  - powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses
  - powerpc/cell: Fix clang -Wimplicit-fallthrough warning
  - Revert "net/mlx5: Add retry mechanism to the command entry index allocation"
  - dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK
  - RDMA/rxe: Fix a typo in opcode name
  - dmaengine: uniphier-xdmac: Fix type of address variables
  - scsi: core: Show SCMD_LAST in text form
  - Bluetooth: hci_sync: Fix not setting adv set duration
  - Documentation: fix firewire.rst ABI file path error
  - Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization
  - Documentation: ACPI: Fix data node reference documentation
  - Documentation: dmaengine: Correctly describe dmatest with channel unset
  - media: correct MEDIA_TEST_SUPPORT help text
  - drm/vc4: hdmi: Make sure the device is powered with CEC
  - media: rcar-csi2: Optimize the selection PHTW register
  - can: mcp251xfd: mcp251xfd_tef_obj_read(): fix typo in error message
  - firmware: Update Kconfig help text for Google firmware
  - of: base: Improve argument length mismatch error
  - drm/radeon: fix error handling in radeon_driver_open_kms
  - ext4: don't use the orphan list when migrating an inode
  - ext4: destroy ext4_fc_dentry_cachep kmemcache on module removal
  - ext4: fast commit may miss tracking unwritten range during ftruncate
  - ext4: use ext4_ext_remove_space() for fast commit replay delete range
  - ext4: set csum seed in tmp inode while migrating to extents
  - ext4: fix fast commit may miss tracking range for FALLOC_FL_ZERO_RANGE
  - ext4: initialize err_blk before calling __ext4_get_inode_loc
  - ext4: fix a possible ABBA deadlock due to busy PA
  - ext4: make sure quota gets properly shutdown on error
  - ext4: make sure to reset inode lockdep class when quota enabling fails
  - btrfs: respect the max size in the header when activating swap file
  - btrfs: check the root node for uptodate before returning it
  - btrfs: fix deadlock between quota enable and other quota operations
  - xfrm: fix policy lookup for ipv6 gre packets
  - PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device
  - PCI: pci-bridge-emul: Correctly set PCIe capabilities
  - PCI: pci-bridge-emul: Fix definitions of reserved bits
  - PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space
  - PCI: pci-bridge-emul: Make expansion ROM Base Address register read-only
  - PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors
  - PCI: xgene: Fix IB window setup
  - powerpc/64s/radix: Fix huge vmap false positive
  - parisc: Fix lpa and lpa_user defines
  - drm/bridge: analogix_dp: Make PSR-exit block less
  - drm/nouveau/kms/nv04: use vzalloc for nv04_display
  - drm/etnaviv: limit submit sizes
  - device property: Fix fwnode_graph_devcon_match() fwnode leak
  - s390/mm: fix 2KB pgtable release race
  - iwlwifi: mvm: Increase the scan timeout guard to 30 seconds
  - tracing/kprobes: 'nmissed' not showed correctly for kretprobe
  - cputime, cpuacct: Include guest time in user time in cpuacct.stat
  - serial: Fix incorrect rs485 polarity on uart open
  - fuse: Pass correct lend value to filemap_write_and_wait_range()
  - xen/gntdev: fix unmap notification order
  - spi: uniphier: Fix a bug that doesn't point to private data correctly
  - tpm: fix NPE on probe for missing device
  - ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers
  - crypto: caam - replace this_cpu_ptr with raw_cpu_ptr
  - crypto: stm32/crc32 - Fix kernel BUG triggered in probe()
  - crypto: omap-aes - Fix broken pm_runtime_and_get() usage
  - rpmsg: core: Clean up resources on announce_create failure.
  - phy: mediatek: Fix missing check in mtk_mipi_tx_probe
  - ASoC: mediatek: mt8183: fix device_node leak
  - ASoC: mediatek: mt8173: fix device_node leak
  - scsi: sr: Don't use GFP_DMA
  - MIPS: Octeon: Fix build errors using clang
  - i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters
  - irqchip/gic-v4: Disable redistributors' view of the VPE table at boot time
  - MIPS: OCTEON: add put_device() after of_find_device_by_node()
  - udf: Fix error handling in udf_new_inode()
  - powerpc/fadump: Fix inaccurate CPU state info in vmcore generated with panic
  - powerpc: handle kdump appropriately with crash_kexec_post_notifiers option
  - selftests/powerpc/spectre_v2: Return skip code when miss_percent is high
  - powerpc/40x: Map 32Mbytes of memory at startup
  - MIPS: Loongson64: Use three arguments for slti
  - ALSA: seq: Set upper limit of processed events
  - scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup
  - dm: fix alloc_dax error handling in alloc_dev
  - nvmem: core: set size for sysfs bin file
  - w1: Misuse of get_user()/put_user() reported by sparse
  - KVM: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST
  - KVM: PPC: Book3S: Suppress warnings when allocating too big memory slots
  - powerpc/powermac: Add missing lockdep_register_key()
  - clk: meson: gxbb: Fix the SDM_EN bit for MPLL0 on GXBB
  - i2c: mpc: Correct I2C reset procedure
  - powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING
  - i2c: i801: Don't silently correct invalid transfer size
  - powerpc/watchdog: Fix missed watchdog reset due to memory ordering race
  - powerpc/btext: add missing of_node_put
  - powerpc/cell: add missing of_node_put
  - powerpc/powernv: add missing of_node_put
  - powerpc/6xx: add missing of_node_put
  - x86/kbuild: Enable CONFIG_KALLSYMS_ALL=y in the defconfigs
  - parisc: Avoid calling faulthandler_disabled() twice
  - random: do not throw away excess input to crng_fast_load
  - serial: core: Keep mctrl register state and cached copy in sync
  - serial: pl010: Drop CR register reset on set_termios
  - regulator: qcom_smd: Align probe function with rpmh-regulator
  - net: gemini: allow any RGMII interface mode
  - net: phy: marvell: configure RGMII delays for 88E1118
  - mlxsw: pci: Avoid flow control for EMAD packets
  - dm space map common: add bounds check to sm_ll_lookup_bitmap()
  - dm btree: add a defensive bounds check to insert_at()
  - mac80211: allow non-standard VHT MCS-10/11
  - net: mdio: Demote probed message to debug print
  - btrfs: remove BUG_ON(!eie) in find_parent_nodes
  - btrfs: remove BUG_ON() in find_parent_nodes()
  - ACPI: battery: Add the ThinkPad "Not Charging" quirk
  - amdgpu/pm: Make sysfs pm attributes as read-only for VFs
  - drm/amdgpu: fixup bad vram size on gmc v8
  - ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5
  - ACPICA: Fix wrong interpretation of PCC address
  - ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()
  - ACPICA: Utilities: Avoid deleting the same object twice in a row
  - ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions
  - drm/etnaviv: consider completed fence seqno in hang check
  - xfrm: rate limit SA mapping change message to user space
  - Bluetooth: vhci: Set HCI_QUIRK_VALID_LE_STATES
  - ath11k: Fix napi related hang
  - um: registers: Rename function names to avoid conflicts and build problems
  - iwlwifi: pcie: make sure prph_info is set when treating wakeup IRQ
  - iwlwifi: mvm: Fix calculation of frame length
  - iwlwifi: remove module loading failure message
  - iwlwifi: fix leaks/bad data after failed firmware load
  - PM: AVS: qcom-cpr: Use div64_ul instead of do_div
  - rtw88: 8822c: update rx settings to prevent potential hw deadlock
  - ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
  - usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0
  - cpufreq: Fix initialization of min and max frequency QoS requests
  - PM: runtime: Add safety net to supplier device release
  - arm64: tegra: Adjust length of CCPLEX cluster MMIO region
  - arm64: dts: ls1028a-qds: move rtc node to the correct i2c bus
  - mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO
  - media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach()
  - media: igorplugusb: receiver overflow should be reported
  - HID: quirks: Allow inverting the absolute X/Y values
  - bpf: Do not WARN in bpf_warn_invalid_xdp_action()
  - net: bonding: debug: avoid printing debug logs when bond is not notifying peers
  - x86/mce: Mark mce_read_aux() noinstr
  - x86/mce: Mark mce_end() noinstr
  - x86/mce: Mark mce_panic() noinstr
  - x86/mce: Allow instrumentation during task work queueing
  - ath11k: Avoid false DEADLOCK warning reported by lockdep
  - selftests/ftrace: make kprobe profile testcase description unique
  - gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock
  - net: phy: prefer 1000baseT over 1000baseKX
  - net-sysfs: update the queue counts in the unregistration path
  - ath10k: Fix tx hanging
  - ath11k: avoid deadlock by change ieee80211_queue_work for regd_update_work
  - iwlwifi: mvm: avoid clearing a just saved session protection id
  - iwlwifi: mvm: synchronize with FW after multicast commands
  - thunderbolt: Runtime PM activate both ends of the device link
  - media: m920x: don't use stack on USB reads
  - media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach()
  - media: rcar-vin: Update format alignment constraints
  - media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds.
  - drm: rcar-du: Fix CRTC timings when CMM is used
  - x86/mm: Flush global TLB when switching to trampoline page-table
  - floppy: Add max size check for user space request
  - usb: uhci: add aspeed ast2600 uhci support
  - arm64: dts: ti: j7200-main: Fix 'dtbs_check' serdes_ln_ctrl node
  - ACPI / x86: Add not-present quirk for the PCI0.SDHB.BRC1 device on the GPD win
  - ACPI / x86: Allow specifying acpi_device_override_status() quirks by path
  - ACPI: Change acpi_device_always_present() into acpi_device_override_status()
  - ACPI / x86: Drop PWM2 device on Lenovo Yoga Book from always present table
  - media: venus: avoid calling core_clk_setrate() concurrently during concurrent video sessions
  - ath11k: Avoid NULL ptr access during mgmt tx cleanup
  - rsi: Fix out-of-bounds read in rsi_read_pkt()
  - rsi: Fix use-after-free in rsi_rx_done_handler()
  - crypto: jitter - consider 32 LSB for APT
  - HSI: core: Fix return freed object in hsi_new_client
  - gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use
  - tty: serial: imx: disable UCR4_OREN in .stop_rx() instead of .shutdown()
  - drm/bridge: megachips: Ensure both bridges are probed before registration
  - mlxsw: pci: Add shutdown method in PCI driver
  - soc: ti: pruss: fix referenced node in error message
  - drm/amdgpu/display: set vblank_disable_immediate for DC
  - drm/amd/display: check top_pipe_to_program pointer
  - ARM: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART
  - EDAC/synopsys: Use the quirk for version instead of ddr version
  - media: b2c2: Add missing check in flexcop_pci_isr:
  - HID: apple: Do not reset quirks when the Fn key is not found
  - drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L
  - usb: gadget: f_fs: Use stream_open() for endpoint files
  - ath11k: Fix crash caused by uninitialized TX ring
  - media: atomisp: handle errors at sh_css_create_isp_params()
  - batman-adv: allow netlink usage in unprivileged containers
  - ARM: shmobile: rcar-gen2: Add missing of_node_put()
  - media: atomisp-ov2680: Fix ov2680_set_fmt() clobbering the exposure
  - media: atomisp: set per-device's default mode
  - media: atomisp: fix try_fmt logic
  - drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR
  - drm/bridge: dw-hdmi: handle ELD when DRM_BRIDGE_ATTACH_NO_CONNECTOR
  - ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply
  - selftests/bpf: Fix bpf_object leak in skb_ctx selftest
  - drm/lima: fix warning when CONFIG_DEBUG_SG=y & CONFIG_DMA_API_DEBUG=y
  - fs: dlm: filter user dlm messages for kernel locks
  - Bluetooth: Fix debugfs entry leak in hci_register_dev()
  - ARM: dts: omap3-n900: Fix lp5523 for multi color
  - of: base: Fix phandle argument length mismatch error message
  - clk: bm1880: remove kfrees on static allocations
  - ASoC: fsl_asrc: refine the check of available clock divider
  - RDMA/cxgb4: Set queue pair state when being queried
  - ASoC: fsl_mqs: fix MODULE_ALIAS
  - powerpc/xive: Add missing null check after calling kmalloc
  - mips: bcm63xx: add support for clk_set_parent()
  - mips: lantiq: add support for clk_set_parent()
  - arm64: tegra: Remove non existent Tegra194 reset
  - arm64: tegra: Fix Tegra194 HDA {clock,reset}-names ordering
  - counter: stm32-lptimer-cnt: remove iio counter abi
  - misc: lattice-ecp3-config: Fix task hung when firmware load failed
  - ASoC: samsung: idma: Check of ioremap return value
  - ASoC: mediatek: Check for error clk pointer
  - phy: uniphier-usb3ss: fix unintended writing zeros to PHY register
  - ASoC: Intel: catpt: Test dmaengine_submit() result before moving on
  - iommu/amd: Restore GA log/tail pointer on host resume
  - iommu/amd: Remove iommu_init_ga()
  - dmaengine: pxa/mmp: stop referencing config->slave_id
  - mips: fix Kconfig reference to PHYS_ADDR_T_64BIT
  - mips: add SYS_HAS_CPU_MIPS64_R5 config for MIPS Release 5 support
  - clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system enter shell
  - of: unittest: 64 bit dma address test requires arch support
  - of: unittest: fix warning on PowerPC frame size warning
  - ASoC: rt5663: Handle device_property_read_u32_array error codes
  - RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry
  - RDMA/core: Let ib_find_gid() continue search even after empty entry
  - powerpc/powermac: Add additional missing lockdep_register_key()
  - PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity()
  - RDMA/qedr: Fix reporting max_{send/recv}_wr attrs
  - scsi: ufs: Fix race conditions related to driver data
  - iommu/io-pgtable-arm: Fix table descriptor paddr formatting
  - openrisc: Add clone3 ABI wrapper
  - binder: fix handling of error during copy
  - char/mwave: Adjust io port register size
  - ALSA: usb-audio: Drop superfluous '0' in Presonus Studio 1810c's ID
  - ALSA: oss: fix compile error when OSS_DEBUG is enabled
  - clocksource: Avoid accidental unstable marking of clocksources
  - clocksource: Reduce clocksource-skew threshold
  - powerpc/32s: Fix shift-out-of-bounds in KASAN init
  - powerpc/perf: Fix PMU callbacks to clear pending PMI before resetting an overflown PMC
  - powerpc/irq: Add helper to set regs->softe
  - powerpc/perf: move perf irq/nmi handling details into traps.c
  - powerpc/perf: MMCR0 control for PMU registers under PMCC=00
  - powerpc/64s: Convert some cpu_setup() and cpu_restore() functions to C
  - dt-bindings: thermal: Fix definition of cooling-maps contribution property
  - ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA
  - powerpc/prom_init: Fix improper check of prom_getprop()
  - clk: imx8mn: Fix imx8mn_clko1_sels
  - scsi: pm80xx: Update WARN_ON check in pm8001_mpi_build_cmd()
  - RDMA/bnxt_re: Scan the whole bitmap when checking if "disabling RCFW with pending cmd-bit"
  - ALSA: hda: Add missing rwsem around snd_ctl_remove() calls
  - ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls
  - ALSA: jack: Add missing rwsem around snd_ctl_remove() calls
  - ext4: avoid trim error on fs with small groups
  - net: mcs7830: handle usb read errors properly
  - iwlwifi: mvm: Use div_s64 instead of do_div in iwl_mvm_ftm_rtt_smoothing()
  - pcmcia: fix setting of kthread task states
  - can: xilinx_can: xcan_probe(): check for error irq
  - can: softing: softing_startstop(): fix set but not used variable warning
  - tpm_tis: Fix an error handling path in 'tpm_tis_core_init()'
  - tpm: add request_locality before write TPM_INT_ENABLE
  - can: mcp251xfd: add missing newline to printed strings
  - regmap: Call regmap_debugfs_exit() prior to _init()
  - netrom: fix api breakage in nr_setsockopt()
  - ax25: uninitialized variable in ax25_setsockopt()
  - spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe
  - Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt()
  - lib/mpi: Add the return value check of kcalloc()
  - net/mlx5: Set command entry semaphore up once got index free
  - Revert "net/mlx5e: Block offload of outer header csum for UDP tunnels"
  - net/mlx5e: Don't block routes with nexthop objects in SW
  - net/mlx5e: Fix page DMA map/unmap attributes
  - debugfs: lockdown: Allow reading debugfs files that are not world readable
  - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_frame_init_v1_buttonpad
  - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_huion_init
  - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_get_str_desc
  - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init
  - usb: dwc3: qcom: Fix NULL vs IS_ERR checking in dwc3_qcom_probe
  - Bluetooth: hci_qca: Fix NULL vs IS_ERR_OR_NULL check in qca_serdev_probe
  - Bluetooth: hci_bcm: Check for error irq
  - fsl/fman: Check for null pointer after calling devm_ioremap
  - staging: greybus: audio: Check null pointer
  - rocker: fix a sleeping in atomic bug
  - ppp: ensure minimum packet size in ppp_write()
  - netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone
  - bpf: Fix SO_RCVBUF/SO_SNDBUF handling in _bpf_setsockopt().
  - bpf: Don't promote bogus looking registers after null check.
  - netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
  - power: reset: mt6397: Check for null res pointer
  - pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region()
  - pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region()
  - ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes
  - x86/mce/inject: Avoid out-of-bounds write when setting flags
  - hwmon: (mr75203) fix wrong power-up delay value
  - x86/boot/compressed: Move CLANG_FLAGS to beginning of KBUILD_CFLAGS
  - Bluetooth: hci_qca: Stop IBS timer during BT OFF
  - software node: fix wrong node passed to find nargs_prop
  - backlight: qcom-wled: Respect enabled-strings in set_brightness
  - backlight: qcom-wled: Use cpu_to_le16 macro to perform conversion
  - backlight: qcom-wled: Override default length with qcom,enabled-strings
  - backlight: qcom-wled: Fix off-by-one maximum with default num_strings
  - backlight: qcom-wled: Pass number of elements to read to read_u32_array
  - backlight: qcom-wled: Validate enabled string indices in DT
  - bpftool: Enable line buffering for stdout
  - Bluetooth: L2CAP: Fix using wrong mode
  - um: virtio_uml: Fix time-travel external time propagation
  - um: fix ndelay/udelay defines
  - selinux: fix potential memleak in selinux_add_opt()
  - mmc: meson-mx-sdio: add IRQ check
  - mmc: meson-mx-sdhc: add IRQ check
  - iwlwifi: mvm: test roc running status bits before removing the sta
  - iwlwifi: mvm: fix 32-bit build in FTM
  - ARM: dts: armada-38x: Add generic compatible to UART nodes
  - arm64: dts: marvell: cn9130: enable CP0 GPIO controllers
  - arm64: dts: marvell: cn9130: add GPIO and SPI aliases
  - usb: ftdi-elan: fix memory leak on device disconnect
  - ARM: 9159/1: decompressor: Avoid UNPREDICTABLE NOP encoding
  - xfrm: state and policy should fail if XFRMA_IF_ID 0
  - xfrm: interface with if_id 0 should return error
  - media: hantro: Fix probe func error path
  - drm/tegra: vic: Fix DMA API misuse
  - drm/bridge: ti-sn65dsi86: Set max register for regmap
  - drm/msm/dpu: fix safe status debugfs file
  - arm64: dts: qcom: ipq6018: Fix gpio-ranges property
  - arm64: dts: qcom: c630: Fix soundcard setup
  - ath11k: Fix a NULL pointer dereference in ath11k_mac_op_hw_scan()
  - media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes
  - media: msi001: fix possible null-ptr-deref in msi001_probe()
  - media: dw2102: Fix use after free
  - ARM: dts: gemini: NAS4220-B: fis-index-block with 128 KiB sectors
  - ath11k: Fix deleting uninitialized kernel timer during fragment cache flush
  - crypto: stm32 - Revert broken pm_runtime_resume_and_get changes
  - crypto: stm32/cryp - fix bugs and crash in tests
  - crypto: stm32/cryp - fix lrw chaining mode
  - crypto: stm32/cryp - fix double pm exit
  - crypto: stm32/cryp - check early input data
  - crypto: stm32/cryp - fix xts and race condition in crypto_engine requests
  - crypto: stm32/cryp - fix CTR counter carry
  - crypto: stm32 - Fix last sparse warning in stm32_cryp_check_ctr_counter
  - selftests: harness: avoid false negatives if test has no ASSERTs
  - selftests: clone3: clone3: add case CLONE3_ARGS_NO_TEST
  - x86/uaccess: Move variable into switch case statement
  - xfrm: fix a small bug in xfrm_sa_len()
  - mwifiex: Fix possible ABBA deadlock
  - rcu/exp: Mark current CPU as exp-QS in IPI loop second pass
  - drm/msm/dp: displayPort driver need algorithm rational
  - sched/rt: Try to restart rt period timer when rt runtime exceeded
  - Revert "sched/rt: Try to restart rt period timer when rt runtime exceeded"
  - wireless: iwlwifi: Fix a double free in iwl_txq_dyn_alloc_dma
  - media: si2157: Fix "warm" tuner state detection
  - media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach()
  - media: dib8000: Fix a memleak in dib8000_init()
  - bpf: Remove config check to enable bpf support for branch records
  - bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD)
  - bpf: Adjust BTF log size limit.
  - sched/fair: Fix per-CPU kthread and wakee stacking for asym CPU capacity
  - sched/fair: Fix detection of per-CPU kthreads waking a task
  - Bluetooth: btmtksdio: fix resume failure
  - staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib()
  - staging: rtl8192e: return error code from rtllib_softmac_init()
  - floppy: Fix hang in watchdog when disk is ejected
  - serial: amba-pl011: do not request memory region twice
  - tty: serial: uartlite: allow 64 bit address
  - arm64: dts: ti: k3-j7200: Correct the d-cache-sets info
  - arm64: dts: ti: k3-j721e: Fix the L2 cache sets
  - arm64: dts: ti: k3-j7200: Fix the L2 cache sets
  - drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms()
  - drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode()
  - thermal/drivers/imx8mm: Enable ADC when enabling monitor
  - ACPI: EC: Rework flushing of EC work while suspended to idle
  - cgroup: Trace event cgroup id fields should be u64
  - arm64: dts: qcom: msm8916: fix MMC controller aliases
  - netfilter: bridge: add support for pppoe filtering
  - thermal/drivers/imx: Implement runtime PM support
  - media: venus: core: Fix a resource leak in the error handling path of 'venus_probe()'
  - media: venus: core: Fix a potential NULL pointer dereference in an error handling path
  - media: venus: core, venc, vdec: Fix probe dependency error
  - media: venus: pm_helpers: Control core power domain manually
  - media: coda: fix CODA960 JPEG encoder buffer overflow
  - media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released
  - media: si470x-i2c: fix possible memory leak in si470x_i2c_probe()
  - media: imx-pxp: Initialize the spinlock prior to using it
  - media: rcar-csi2: Correct the selection of hsfreqrange
  - mfd: atmel-flexcom: Use .resume_noirq
  - mfd: atmel-flexcom: Remove #ifdef CONFIG_PM_SLEEP
  - tty: serial: atmel: Call dma_async_issue_pending()
  - tty: serial: atmel: Check return code of dmaengine_submit()
  - arm64: dts: ti: k3-j721e: correct cache-sets info
  - ath11k: Use host CE parameters for CE interrupts configuration
  - crypto: qat - fix undetected PFVF timeout in ACK loop
  - crypto: qat - make pfvf send message direction agnostic
  - crypto: qat - remove unnecessary collision prevention step in PFVF
  - crypto: qat - fix spelling mistake: "messge" -> "message"
  - ARM: dts: stm32: fix dtbs_check warning on ili9341 dts binding on stm32f429 disco
  - mtd: hyperbus: rpc-if: fix bug in rpcif_hb_remove
  - crypto: qce - fix uaf on qce_skcipher_register_one
  - crypto: qce - fix uaf on qce_ahash_register_one
  - media: dmxdev: fix UAF when dvb_register_device() fails
  - arm64: dts: renesas: cat875: Add rx/tx delays
  - drm/vboxvideo: fix a NULL vs IS_ERR() check
  - fs: dlm: fix build with CONFIG_IPV6 disabled
  - tee: fix put order in teedev_close_context()
  - ath11k: reset RSN/WPA present state for open BSS
  - ath11k: clear the keys properly via DISABLE_KEY
  - ath11k: Fix ETSI regd with weather radar overlap
  - Bluetooth: stop proccessing malicious adv data
  - memory: renesas-rpc-if: Return error in case devm_ioremap_resource() fails
  - fs: dlm: don't call kernel_getpeername() in error_report()
  - fs: dlm: use sk->sk_socket instead of con->sock
  - arm64: dts: meson-gxbb-wetek: fix missing GPIO binding
  - arm64: dts: meson-gxbb-wetek: fix HDMI in early boot
  - arm64: dts: amlogic: Fix SPI NOR flash node name for ODROID N2/N2+
  - arm64: dts: amlogic: meson-g12: Fix GPU operating point table node name
  - media: aspeed: Update signal status immediately to ensure sane hw state
  - media: em28xx: fix memory leak in em28xx_init_dev
  - media: aspeed: fix mode-detect always time out at 2nd run
  - media: atomisp: fix uninitialized bug in gmin_get_pmic_id_and_addr()
  - media: atomisp: fix enum formats logic
  - media: atomisp: add NULL check for asd obtained from atomisp_video_pipe
  - media: staging: media: atomisp: pci: Balance braces around conditional statements in file atomisp_cmd.c
  - media: atomisp: fix ifdefs in sh_css.c
  - media: atomisp: fix inverted error check for ia_css_mipi_is_source_port_valid()
  - media: atomisp: do not use err var when checking port validity for ISP2400
  - media: atomisp: fix inverted logic in buffers_needed()
  - media: atomisp: fix punit_ddr_dvfs_enable() argument for mrfld_power up case
  - media: atomisp: add missing media_device_cleanup() in atomisp_unregister_entities()
  - media: videobuf2: Fix the size printk format
  - mtd: hyperbus: rpc-if: Check return value of rpcif_sw_init()
  - ath11k: Send PPDU_STATS_CFG with proper pdev mask to firmware
  - wcn36xx: fix RX BD rate mapping for 5GHz legacy rates
  - wcn36xx: populate band before determining rate on RX
  - wcn36xx: Put DXE block into reset before freeing memory
  - wcn36xx: Release DMA channel descriptor allocations
  - wcn36xx: Fix DMA channel enable/disable cycle
  - wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND
  - wcn36xx: ensure pairing of init_scan/finish_scan and start_scan/end_scan
  - drm/vc4: hdmi: Set a default HSM rate
  - clk: bcm-2835: Remove rounding up the dividers
  - clk: bcm-2835: Pick the closest clock rate
  - Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails
  - drm/rockchip: dsi: Reconfigure hardware on resume()
  - drm/rockchip: dsi: Disable PLL clock on bind error
  - drm/rockchip: dsi: Hold pm-runtime across bind/unbind
  - drm/rockchip: dsi: Fix unbalanced clock on probe error
  - drm/panel: innolux-p079zca: Delete panel on attach() failure
  - drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure
  - drm: fix null-ptr-deref in drm_dev_init_release()
  - drm/bridge: display-connector: fix an uninitialized pointer in probe()
  - Bluetooth: L2CAP: Fix not initializing sk_peer_pid
  - drm/ttm: Put BO in its memory manager's lru list
  - shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode
  - mm/page_alloc.c: do not warn allocation failure on zone DMA if no managed pages
  - dma/pool: create dma atomic pool only if dma zone has managed pages
  - mm_zone: add function to check if managed dma zone exists
  - PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller
  - dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled()
  - gpu: host1x: Add back arm_iommu_detach_device()
  - iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure
  - lkdtm: Fix content of section containing lkdtm_rodata_do_nothing()
  - iio: adc: ti-adc081c: Partial revert of removal of ACPI IDs
  - can: softing_cs: softingcs_probe(): fix memleak on registration failure
  - media: cec-pin: fix interrupt en/disable handling
  - media: stk1160: fix control-message timeouts
  - media: pvrusb2: fix control-message timeouts
  - media: redrat3: fix control-message timeouts
  - media: dib0700: fix undefined behavior in tuner shutdown
  - media: s2255: fix control-message timeouts
  - media: cpia2: fix control-message timeouts
  - media: em28xx: fix control-message timeouts
  - media: mceusb: fix control-message timeouts
  - media: flexcop-usb: fix control-message timeouts
  - media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE
  - rtc: cmos: take rtc_lock while reading from CMOS
  - tools/nolibc: fix incorrect truncation of exit code
  - tools/nolibc: i386: fix initial stack alignment
  - tools/nolibc: x86-64: Fix startup code bug
  - x86/gpu: Reserve stolen memory for first integrated Intel GPU
  - mtd: rawnand: davinci: Rewrite function description
  - mtd: rawnand: davinci: Avoid duplicated page read
  - mtd: rawnand: davinci: Don't calculate ECC when reading page
  - mtd: Fixed breaking list in __mtd_del_partition.
  - mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6
  - mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings
  - nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()
  - HID: wacom: Avoid using stale array indicies to read contact count
  - HID: wacom: Ignore the confidence flag when a touch is removed
  - HID: wacom: Reset expected and received contact counts at the same time
  - HID: uhid: Fix worker destroying device without any protection
  - KVM: VMX: switch blocked_vcpu_on_cpu_lock to raw spinlock


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.28.0.58
changelog:
  - tcp: add missing tcp_skb_can_collapse() test in tcp_shift_skb_data()
  - af_packet: fix data-race in packet_setsockopt / packet_setsockopt
  - cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask()
  - rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
  - fanotify: Fix stale file descriptor in copy_event_to_user()
  - net: amd-xgbe: Fix skb data length underflow
  - net: amd-xgbe: ensure to reset the tx_timer_active flag
  - ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback
  - net/mlx5: E-Switch, Fix uninitialized variable modact
  - net/mlx5: Use del_timer_sync in fw reset flow of halting poll
  - net/mlx5e: Fix handling of wrong devices during bond netevent
  - drm/vc4: hdmi: Make sure the device is powered with CEC
  - x86/cpu: Add Xeon Icelake-D to list of CPUs that support PPIN
  - x86/mce: Add Xeon Sapphire Rapids to list of CPUs that support PPIN
  - psi: Fix uaf issue when psi trigger is destroyed while being polled
  - KVM: x86: Forcibly leave nested virt when SMM state is toggled
  - Revert "drivers: bus: simple-pm-bus: Add support for probing simple bus only devices"
  - net: ipa: prevent concurrent replenish
  - net: ipa: use a bitmap for endpoint replenish_enabled
  - net: ipa: fix atomic update in ipa_endpoint_replenish()
  - PCI: pciehp: Fix infinite loop in IRQ handler upon power fault
  - mtd: rawnand: mpc5121: Remove unused variable in ads5121_select_chip()
  - block: Fix wrong offset in bio_truncate()
  - fsnotify: invalidate dcache before IN_DELETE event
  - usr/include/Makefile: add linux/nfc.h to the compile-test coverage
  - dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config
  - net: bridge: vlan: fix memory leak in __allowed_ingress
  - ipv4: remove sparse error in ip_neigh_gw4()
  - ipv4: tcp: send zero IPID in SYNACK messages
  - ipv4: raw: lock the socket in raw_bind()
  - net: bridge: vlan: fix single net device option dumping
  - Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values"
  - net: cpsw: Properly initialise struct page_pool_params
  - drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc
  - drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy
  - video: hyperv_fb: Fix validation of screen resolution
  - ibmvnic: don't spin in tasklet
  - ibmvnic: init ->running_cap_crqs early
  - ipv4: fix ip option filtering for locally generated fragments
  - net: ipv4: Fix the warning for dereference
  - net: ipv4: Move ip_options_fragment() out of loop
  - powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending
  - hwmon: (lm90) Mark alert as broken for MAX6654
  - efi/libstub: arm64: Fix image check alignment at entry
  - rxrpc: Adjust retransmission backoff
  - octeontx2-pf: Forward error codes to VF
  - phylib: fix potential use-after-free
  - net: phy: broadcom: hook up soft_reset for BCM54616S
  - sched/pelt: Relax the sync of util_sum with util_avg
  - kernel: delete repeated words in comments
  - netfilter: conntrack: don't increment invalid counter on NF_REPEAT
  - powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06
  - NFS: Ensure the server has an up to date ctime before renaming
  - NFS: Ensure the server has an up to date ctime before hardlinking
  - ipv6: annotate accesses to fn->fn_sernum
  - drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
  - drm/msm/dsi: Fix missing put_device() call in dsi_get_phy
  - drm/msm: Fix wrong size calculation
  - net-procfs: show net devices bound packet types
  - hwmon: (lm90) Reduce maximum conversion rate for G781
  - ipv4: avoid using shared IP generator for connected sockets
  - ping: fix the sk_bound_dev_if match in ping_lookup
  - hwmon: (lm90) Mark alert as broken for MAX6680
  - hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649
  - ipv6_tunnel: Rate limit warning messages
  - scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
  - rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev
  - rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
  - usb: roles: fix include/linux/usb/role.h compile issue
  - i40e: fix unsigned stat widths
  - i40e: Fix for failed to init adminq while VF reset
  - i40e: Fix queues reservation for XDP
  - i40e: Fix issue when maximum queues is exceeded
  - i40e: Increase delay to 1 s after global EMP reset
  - powerpc/32: Fix boot failure with GCC latent entropy plugin
  - powerpc/32s: Fix kasan_init_region() for KASAN
  - powerpc/32s: Allocate one 256k IBAT instead of two consecutives 128k IBATs
  - x86/MCE/AMD: Allow thresholding interface updates after init
  - sched/membarrier: Fix membarrier-rseq fence command missing from query bitmask
  - ocfs2: fix a deadlock when commit trans
  - jbd2: export jbd2_journal_[grab|put]_journal_head
  - ucsi_ccg: Check DEV_INT bit only when starting CCG4
  - usb: typec: tcpm: Do not disconnect while receiving VBUS off
  - USB: core: Fix hang in usb_kill_urb by adding memory barriers
  - usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS
  - usb: common: ulpi: Fix crash in ulpi_match()
  - usb: xhci-plat: fix crash when suspend if remote wake enable
  - usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge
  - tty: Add support for Brainboxes UC cards.
  - tty: n_gsm: fix SW flow control encoding/handling
  - serial: stm32: fix software flow control transfer
  - serial: 8250: of: Fix mapped region size when using reg-offset property
  - netfilter: nft_payload: do not update layer 4 checksum when mangling fragments
  - arm64: errata: Fix exec handling in erratum 1418040 workaround
  - KVM: x86: Update vCPU's runtime CPUID on write to MSR_IA32_XSS
  - drm/etnaviv: relax submit size limits
  - perf/x86/intel/uncore: Fix CAS_COUNT_WRITE issue for ICX
  - Revert "KVM: SVM: avoid infinite loop on NPF from bad address"
  - fsnotify: fix fsnotify hooks in pseudo filesystems
  - ceph: set pool_ns in new inode layout for async creates
  - ceph: properly put ceph_string reference after async create attempt
  - tracing: Don't inc err_log entry count if entry allocation fails
  - tracing/histogram: Fix a potential memory leak for kstrdup()
  - PM: wakeup: simplify the output logic of pm_show_wakelocks()
  - efi: runtime: avoid EFIv2 runtime services on Apple x86 machines
  - scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices
  - bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack()
  - s390/hypfs: include z/VM guests with access control group set
  - s390/module: fix loading modules with a lot of relocations
  - net: stmmac: skip only stmmac_ptp_register when resume from suspend
  - net: sfp: ignore disabled SFP node
  - media: venus: core: Drop second v4l2 device unregister
  - Bluetooth: refactor malicious adv data check
  - drm/vmwgfx: Fix stale file descriptors on failed usercopy
  - select: Fix indefinitely sleeping task in poll_schedule_timeout()
  - KVM: x86/mmu: Fix write-protection of PTs mapped by the TDP MMU
  - rcu: Tighten rcu_advance_cbs_nowake() checks
  - bnx2x: Invalidate fastpath HSI version for VFs
  - bnx2x: Utilize firmware 7.13.21.0
  - drm/i915: Flush TLBs before releasing backing store


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.30.0.59
changelog:
  - crypto: api - Move cryptomgr soft dependency into algapi
  - moxart: fix potential use-after-free on remove path
  - selftests: nft_concat_range: add test for reload with no element add/del
  - cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning
  - net: dsa: mt7530: make NET_DSA_MT7530 select MEDIATEK_GE_PHY
  - ext4: fix incorrect type issue during replay_del_range
  - ext4: fix error handling in ext4_fc_record_modified_inode()
  - ext4: fix error handling in ext4_restore_inline_data()
  - ext4: modify the logic of ext4_mb_new_blocks_simple
  - ext4: prevent used blocks from being allocated during fast commit replay
  - EDAC/xgene: Fix deferred probing
  - EDAC/altera: Fix deferred probing
  - x86/perf: Default set FREEZE_ON_SMI for all
  - perf/x86/intel/pt: Fix crash with stop filters in single-range mode
  - perf stat: Fix display of grouped aliased events
  - fbcon: Add option to enable legacy hardware acceleration
  - Revert "fbcon: Disable accelerated scrolling"
  - rtc: cmos: Evaluate century appropriate
  - tools/resolve_btfids: Do not print any commands when building silently
  - selftests: futex: Use variable MAKE instead of make
  - selftests/exec: Remove pipe from TEST_GEN_FILES
  - bpf: Use VM_MAP instead of VM_ALLOC for ringbuf
  - gve: fix the wrong AdminQ buffer queue index check
  - nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client.
  - scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe
  - pinctrl: bcm2835: Fix a few error paths
  - pinctrl: intel: fix unexpected interrupt
  - pinctrl: intel: Fix a glitch when updating IRQ flags on a preconfigured line
  - ASoC: max9759: fix underflow in speaker_gain_control_put()
  - ASoC: cpcap: Check for NULL pointer after calling of_get_child_by_name
  - ASoC: xilinx: xlnx_formatter_pcm: Make buffer bytes multiple of period bytes
  - ASoC: fsl: Add missing error handling in pcm030_fabric_probe
  - drm/i915/overlay: Prevent divide by zero bugs in scaling
  - net: stmmac: ensure PTP time register reads are consistent
  - net: stmmac: dump gmac4 DMA registers correctly
  - net: macsec: Verify that send_sci is on when setting Tx sci explicitly
  - net: macsec: Fix offload support for NETDEV_UNREGISTER event
  - net: ieee802154: Return meaningful error codes from the netlink helpers
  - net: ieee802154: ca8210: Stop leaking skb's
  - net: ieee802154: mcr20a: Fix lifs/sifs periods
  - net: ieee802154: hwsim: Ensure proper channel selection at probe time
  - spi: uniphier: fix reference count leak in uniphier_spi_probe()
  - spi: meson-spicc: add IRQ check in meson_spicc_probe
  - spi: mediatek: Avoid NULL pointer crash in interrupt
  - spi: bcm-qspi: check for valid cs before applying chip select
  - iommu/amd: Fix loop timeout issue in iommu_ga_log_enable()
  - iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()
  - RDMA/mlx4: Don't continue event handler after memory allocation failure
  - RDMA/siw: Fix broken RDMA Read Fence/Resume logic.
  - IB/rdmavt: Validate remote_addr during loopback atomic tests
  - RDMA/ucma: Protect mc during concurrent multicast leaves
  - RDMA/cma: Use correct address when leaving multicast group
  - Revert "ASoC: mediatek: Check for error clk pointer"
  - IB/hfi1: Fix AIP early init panic
  - dma-buf: heaps: Fix potential spectre v1 gadget
  - block: bio-integrity: Advance seed correctly for larger interval sizes
  - mm/kmemleak: avoid scanning potential huge holes
  - mm/pgtable: define pte_index so that preprocessor could recognize it
  - mm/debug_vm_pgtable: remove pte entry from the page table
  - nvme-fabrics: fix state check in nvmf_ctlr_matches_baseopts()
  - drm/amd/display: Force link_rate as LINK_RATE_RBR2 for 2018 15" Apple Retina panels
  - drm/nouveau: fix off by one in BIOS boundary checking
  - btrfs: fix deadlock between quota disable and qgroup rescan worker
  - ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus Xtreme after reboot from Windows
  - ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus Master (newer chipset)
  - ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte X570 ALC1220 quirks
  - ALSA: hda/realtek: Add quirk for ASUS GU603
  - ALSA: hda: realtek: Fix race at concurrent COEF updates
  - ALSA: hda: Fix UAF of leds class devs at unbinding
  - ALSA: usb-audio: Correct quirk for VF0770
  - ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
  - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
  - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
  - selinux: fix double free of cond_list on error paths
  - Revert "drm/vc4: hdmi: Make sure the device is powered with CEC" again
  - Revert "drm/vc4: hdmi: Make sure the device is powered with CEC"
  - psi: fix failure of create cgroup psi trigger
  - mbigen: fix mbigen driver defer probe
  - md/raid1: fix missing bitmap update w/o WriteMostly devices
  - md/raid1: only allocate write behind bio for WriteMostly device
  - raid1: ensure write behind bio has less than BIO_MAX_VECS sectors
  - arm64: entry: Save some nops when CONFIG_ARM64_PSEUDO_NMI is not set
  - crypto: crct10dif-neon - fix use via crypto_shash_digest()
  - net: fix information leakage in /proc/net/ptype
  - config: enable CONFIG_QOS_SCHED_SMT_EXPELLER by
  - sched: Add tracepoint for qos smt expeller
  - sched: Add statistics for qos smt expeller
  - sched: Implement the function of qos smt expeller
  - sched: Introduce qos smt expeller for co-location
  - ext4: fix symlink file size not match to file content
  - ext4: fix bug_on in start_this_handle during umount filesystem
  - ext4: fix use-after-free in ext4_search_dir
  - KVM: s390: Return error on SIDA memop on normal guest
  - fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages
  - ubi: fastmap: Fix high cpu usage of ubi_bgt by making sure wl_pool not empty
  - perf c2c: Update documentation for display option 'all'
  - perf c2c: Sort on all cache hit for load operations
  - perf c2c: Refactor node header
  - perf c2c: Add dimensions for load miss
  - perf c2c: Add dimensions for load hit
  - perf c2c: Add dimensions for total load hit
  - rcu/nocb: Make rcu_core() callbacks acceleration preempt-safe
  - livepatch/arm64: Fix incorrect endian conversion when long jump
  - livepatch: Print logs when register failed
  - livepatch: Print logs when check calltrace failed
  - livepatch: Print logs when patch text failed
  - livepatch: Optimize list_del operation in 'arch_klp_unpatch_func'
  - livepatch: Use 'old_insns' to replace 'old_insn'
  - livepatch: Remove redundant copy for old codes
  - livepatch: Reduce duplicate codes and fix issue on patch text
  - mm: export collect_procs()
  - rcu: Prevent expedited GP from enabling tick on offline CPU


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.31.0.60
changelog:
  - io_uring: fix race between timeout flush and removal
  - net/x25: Fix null-ptr-deref caused by x25_disconnect
  - iommu: Fix potential use-after-free during probe
  - perf: Fix list corruption in perf_cgroup_switch()
  - arm64: dts: imx8mq: fix lcdif port node
  - scsi: lpfc: Reduce log messages seen after firmware download
  - scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled
  - can: isotp: fix error path in isotp_sendmsg() to unlock wait queue
  - Makefile.extrawarn: Move -Wunaligned-access to W=1
  - hwmon: (dell-smm) Speed up setting of fan speed
  - phy: ti: Fix missing sentinel for clk_div_table
  - speakup-dectlk: Restore pitch setting
  - USB: serial: cp210x: add CPI Bulk Coin Recycler id
  - USB: serial: cp210x: add NCR Retail IO box id
  - USB: serial: ch341: add support for GW Instek USB2.0-Serial devices
  - USB: serial: option: add ZTE MF286D modem
  - USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320
  - usb: raw-gadget: fix handling of dual-direction-capable endpoints
  - usb: gadget: f_uac2: Define specific wTerminalType
  - usb: gadget: udc: renesas_usb3: Fix host to USB_ROLE_NONE transition
  - usb: dwc3: gadget: Prevent core from processing stale TRBs
  - usb: ulpi: Call of_node_put correctly
  - usb: ulpi: Move of_node_put to ulpi_dev_release
  - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
  - Revert "usb: dwc2: drd: fix soft connect when gadget is unconfigured"
  - usb: dwc2: drd: fix soft connect when gadget is unconfigured
  - eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX
  - n_tty: wake up poll(POLLRDNORM) on receiving data
  - vt_ioctl: add array_index_nospec to VT_ACTIVATE
  - vt_ioctl: fix array_index_nospec in vt_setactivate
  - net: dsa: mv88e6xxx: fix use-after-free in mv88e6xxx_mdios_unregister
  - net: mscc: ocelot: fix mutex lock error during ethtool stats read
  - ice: fix IPIP and SIT TSO offload
  - ice: fix an error code in ice_cfg_phy_fec()
  - dpaa2-eth: unregister the netdev before disconnecting from the PHY
  - net: amd-xgbe: disable interrupts during pci removal
  - tipc: rate limit warning for received illegal binding update
  - net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE
  - veth: fix races around rq->rx_notify_masked
  - net: fix a memleak when uncloning an skb dst and its metadata
  - net: do not keep the dst cache when uncloning an skb dst and its metadata
  - nfp: flower: fix ida_idx not being released
  - ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
  - net: dsa: lantiq_gswip: don't use devres for mdiobus
  - net: dsa: felix: don't use devres for mdiobus
  - net: dsa: bcm_sf2: don't use devres for mdiobus
  - net: dsa: ar9331: register the mdiobus under devres
  - net: dsa: mv88e6xxx: don't use devres for mdiobus
  - bonding: pair enable_port with slave_arr_updates
  - gpio: sifive: use the correct register to read output values
  - ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE
  - drm/panel: simple: Assign data from panel_dpi_probe() correctly
  - ixgbevf: Require large buffers for build_skb on 82599VF
  - arm64: dts: meson-g12b-odroid-n2: fix typo 'dio2133'
  - netfilter: ctnetlink: disable helper autoassign
  - misc: fastrpc: avoid double fput() on failed usercopy
  - drm/vc4: hdmi: Allow DBLCLK modes even if horz timing is odd.
  - gpio: aggregator: Fix calling into sleeping GPIO controllers
  - usb: f_fs: Fix use-after-free for epfile
  - ARM: dts: imx7ulp: Fix 'assigned-clocks-parents' typo
  - phy: xilinx: zynqmp: Fix bus width setting for SGMII
  - ARM: dts: imx6qdl-udoo: Properly describe the SD card detect
  - staging: fbtft: Fix error path in fbtft_driver_module_init()
  - ARM: dts: meson8b: Fix the UART device-tree schema validation
  - ARM: dts: meson8: Fix the UART device-tree schema validation
  - ARM: dts: meson: Fix the UART compatible strings
  - ARM: dts: Fix timer regression for beagleboard revision c
  - drm/rockchip: vop: Correct RK3399 VOP register fields
  - PM: s2idle: ACPI: Fix wakeup interrupts handling
  - ACPI/IORT: Check node revision for PMCG resources
  - nvme-tcp: fix bogus request completion when failing to send AER
  - ARM: socfpga: fix missing RESET_CONTROLLER
  - ARM: dts: Fix boot regression on Skomer
  - ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group
  - riscv: fix build with binutils 2.38
  - KVM: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow
  - KVM: SVM: Don't kill SEV guest if SMAP erratum triggers in usermode
  - KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS
  - KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER
  - KVM: eventfd: Fix false positive RCU usage warning
  - net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout()
  - nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs
  - perf: Always wake the parent event
  - usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend
  - PM: hibernate: Remove register_nosave_region_late()
  - scsi: myrs: Fix crash in error case
  - scsi: ufs: Treat link loss as fatal error
  - scsi: pm8001: Fix bogus FW crash for maxcpus=1
  - scsi: qedf: Fix refcount issue when LOGO is received during TMF
  - scsi: qedf: Add stag_work to all the vports
  - scsi: ufs: ufshcd-pltfrm: Check the return value of devm_kstrdup()
  - scsi: target: iscsi: Make sure the np under each tpg is unique
  - powerpc/fixmap: Fix VM debug warning on unmap
  - net: sched: Clarify error message when qdisc kind is unknown
  - drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer
  - x86/perf: Avoid warning for Arch LBR without XSAVE
  - NFSv4 handle port presence in fs_location server string
  - NFSv4 expose nfs_parse_server_name function
  - NFSv4 remove zero number of fs_locations entries error check
  - NFSv4.1: Fix uninitialised variable in devicenotify
  - nfs: nfs4clinet: check the return value of kstrdup()
  - NFSv4 only print the label when its queried
  - NFS: change nfs_access_get_cached to only report the mask
  - tracing: Propagate is_signed to expression
  - drm/amdgpu: Set a suitable dev_info.gart_page_size
  - NFSD: Fix offset type in I/O trace points
  - NFSD: Clamp WRITE offsets
  - NFS: Fix initialisation of nfs_client cl_flags field
  - net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs
  - net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible PHYs
  - can: isotp: fix potential CAN frame reception race in isotp_rcv()
  - mmc: sdhci-of-esdhc: Check for error num after setting mask
  - ima: Do not print policy rule with inactive LSM labels
  - ima: Allow template selection with ima_template[_fmt]= after ima_hash=
  - ima: Remove ima_policy file before directory
  - integrity: check the return value of audit_log_start()


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.32.0.61
changelog:
  - ext4: fix bug_on in ext4_writepages
  - ext4: fix warning in ext4_handle_inode_extension
  - ext4: fix use-after-free in ext4_rename_dir_prepare
  - ext4: fix warning when submitting superblock in ext4_commit_super()
  - ipv6: annotate some data-races around sk->sk_prot
  - net/sched: cls_u32: fix netns refcount changes in u32_change()
  - ext4: fix bug_on in __es_tree_search
  - exec: Remove redundant check in do_open_execat/uselib
  - floppy: use a statically allocated error counter
  - ext4: fix race condition between ext4_write and ext4_convert_inline_data
  - arm64: Fix some build errors related to KEXEC
  - ubi: ubi_create_volume: Fix use-after-free when volume creation failed
  - ubi: fastmap: Don't reserve beb_rsvd_pebs while filling fm pool
  - net: ipv6: fix use after free of struct seg6_pernet_data
  - net: ipv6: check return value of rhashtable_init
  - KVM: arm64: vgic: Drop WARN from vgic_get_irq
  - Documentation: arm64: Add limitation for exactmap
  - arm64: Fix reserved memory via memmap
  - ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame()


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.33.0.62
changelog:
  - huge tmpfs: remove shrinklist addition from shmem_setattr()
  - huge tmpfs: fix split_huge_page() after FALLOC_FL_KEEP_SIZE
  - huge tmpfs: fix fallocate(vanilla) advance over huge pages
  - nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs
  - dynamic_hugetlb: fix undefined struct cftype
  - file: fix kabi change since add f_ctl_mode
  - selftests/bpf: add demo for file read pattern detection
  - libbpf: Support detecting writable tracepoint program
  - ext4: add trace for the read and release of regular file
  - xfs: add trace for read and release of regular file
  - fs: add helper fs_file_read_do_trace()
  - vfs: add bare tracepoints for vfs read and release
  - bpf: Support writable context for bare tracepoint
  - trace: bpf: Allow bpf to attach to bare tracepoints
  - readahead: introduce FMODE_CTL_WILLNEED to read first 2MB of file
  - lockdep: Correct lock_classes index mapping
  - i2c: brcmstb: fix support for DSL and CM variants
  - copy_process(): Move fd_install() out of sighand->siglock critical section
  - i2c: qcom-cci: don't put a device tree node before i2c_add_adapter()
  - i2c: qcom-cci: don't delete an unregistered adapter
  - dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size
  - dmaengine: stm32-dmamux: Fix PM disable depth imbalance in stm32_dmamux_probe
  - dmaengine: sh: rcar-dmac: Check for error num after setting mask
  - net: sched: limit TC_ACT_REPEAT loops
  - EDAC: Fix calculation of returned address and next offset in edac_align_ptr()
  - scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop
  - kconfig: fix failing to generate auto.conf
  - net: macb: Align the dma and coherent dma masks
  - net: usb: qmi_wwan: Add support for Dell DW5829e
  - tracing: Fix tp_printk option related with tp_printk_stop_on_boot
  - drm/rockchip: dw_hdmi: Do not leave clock enabled in error case
  - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create
  - soc: aspeed: lpc-ctrl: Block error printing on probe defer cases
  - ata: libata-core: Disable TRIM on M88V29
  - kconfig: let 'shell' return enough output for deep path names
  - selftests: fixup build warnings in pidfd / clone3 tests
  - pidfd: fix test failure due to stack overflow on some arches
  - arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610
  - arm64: dts: meson-g12: add ATF BL32 reserved-memory region
  - arm64: dts: meson-gx: add ATF BL32 reserved-memory region
  - netfilter: conntrack: don't refresh sctp entries in closed state
  - irqchip/sifive-plic: Add missing thead,c900-plic match string
  - phy: usb: Leave some clocks running during suspend
  - ARM: OMAP2+: adjust the location of put_device() call in omapdss_init_of
  - ARM: OMAP2+: hwmod: Add of_node_put() before break
  - NFS: Don't set NFS_INO_INVALID_XATTR if there is no xattr cache
  - KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW
  - KVM: x86/pmu: Don't truncate the PerfEvtSeln MSR when creating a perf event
  - KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id()
  - Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
  - mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status
  - mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe()
  - tty: n_tty: do not look ahead for EOL character past the end of the buffer
  - NFS: Do not report writeback errors in nfs_getattr()
  - block/wbt: fix negative inflight counter when remove scsi device
  - ASoC: tas2770: Insert post reset delay
  - KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests
  - mtd: rawnand: gpmi: don't leak PM reference in error path
  - powerpc/lib/sstep: fix 'ptesync' build error
  - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range()
  - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw()
  - ALSA: hda: Fix missing codec probe on Shenker Dock 15
  - ALSA: hda: Fix regression on forced probe mask option
  - ALSA: hda/realtek: Fix deadlock by COEF mutex
  - ALSA: hda/realtek: Add quirk for Legion Y9000X 2019
  - selftests/exec: Add non-regular to TEST_GEN_PROGS
  - perf bpf: Defer freeing string after possible strlen() on it
  - dpaa2-eth: Initialize mutex used in one step timestamping path
  - libsubcmd: Fix use-after-free for realloc(..., 0)
  - bonding: fix data-races around agg_select_timer
  - net_sched: add __rcu annotation to netdev->qdisc
  - drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
  - ping: fix the dif and sdif check in ping_lookup
  - net: ieee802154: ca8210: Fix lifs/sifs periods
  - net: dsa: lantiq_gswip: fix use after free in gswip_remove()
  - net: dsa: lan9303: fix reset on probe
  - netfilter: nft_synproxy: unregister hooks on init error path
  - selftests: netfilter: fix exit value for nft_concat_range
  - iwlwifi: pcie: gen2: fix locking when "HW not ready"
  - iwlwifi: pcie: fix locking when "HW not ready"
  - drm/i915/gvt: Make DRM_I915_GVT depend on X86
  - vsock: remove vsock from connected table when connect is interrupted by a signal
  - drm/i915/opregion: check port number bounds for SWSCI display power state
  - drm/radeon: Fix backlight control on iMac 12,1
  - iwlwifi: fix use-after-free
  - kbuild: lto: Merge module sections if and only if CONFIG_LTO_CLANG is enabled
  - kbuild: lto: merge module sections
  - random: wake up /dev/random writers after zap
  - gcc-plugins/stackleak: Use noinstr in favor of notrace
  - Revert "module, async: async_synchronize_full() on module init iff async is used"
  - x86/Xen: streamline (and fix) PV CPU enumeration
  - drm/amdgpu: fix logic inversion in check
  - nvme-rdma: fix possible use-after-free in transport error_recovery work
  - nvme-tcp: fix possible use-after-free in transport error_recovery work
  - nvme: fix a possible use-after-free in controller reset during load
  - scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
  - scsi: pm8001: Fix use-after-free for aborted TMF sas_task
  - quota: make dquot_quota_sync return errors from ->sync_fs
  - vfs: make freeze_super abort when sync_filesystem returns error
  - selftests: skip mincore.check_file_mmap when fs lacks needed support
  - selftests: openat2: Skip testcases that fail with EOPNOTSUPP
  - selftests: openat2: Add missing dependency in Makefile
  - selftests: openat2: Print also errno in failure messages
  - selftests/zram: Adapt the situation that /dev/zram0 is being used
  - selftests/zram01.sh: Fix compression ratio calculation
  - selftests/zram: Skip max_comp_streams interface on newer kernel
  - net: ieee802154: at86rf230: Stop leaking skb's
  - kselftest: signal all child processes
  - selftests: rtc: Increase test timeout so that all tests run
  - platform/x86: ISST: Fix possible circular locking dependency detected
  - platform/x86: touchscreen_dmi: Add info for the RWC NANOTE P8 AY07J 2-in-1
  - btrfs: send: in case of IO error log it
  - parisc: Add ioread64_lo_hi() and iowrite64_lo_hi()
  - PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology
  - mm: don't try to NUMA-migrate COW pages that have other uses
  - mmc: block: fix read single on recovery logic
  - parisc: Fix sglist access in ccio-dma.c
  - parisc: Fix data TLB miss in sba_unmap_sg
  - parisc: Drop __init from map_pages declaration
  - serial: parisc: GSC: fix build when IOSAPIC is not set
  - Revert "svm: Add warning message for AVIC IPI invalid target"
  - HID:Add support for UGTABLET WP5540
  - scsi: lpfc: Fix mailbox command failure during driver initialization
  - can: isotp: add SF_BROADCAST support for functional addressing
  - can: isotp: prevent race between isotp_bind() and isotp_setsockopt()
  - fs/proc: task_mmu.c: don't read mapcount for migration entry
  - mm: memcg: synchronize objcg lists with a dedicated spinlock
  - drm/nouveau/pmu/gm200-: use alternate falcon reset sequence


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.34.0.63
changelog:
  - arm64: Fix wrong logic in gic_arch_restore_irqs()
  - secure_seq: use the 64 bits of the siphash for port offset calculation
  - vfio/iommu: Fix uncorrect type parameters which used in bitmap operations
  - ipv6: per-netns exclusive flowlabel checks
  - memblock: use kfree() to release kmalloced memblock regions
  - gpio: tegra186: Fix chip_data type confusion
  - tty: n_gsm: fix deadlock in gsmtty_open()
  - tty: n_gsm: fix wrong tty control line for flow control
  - tty: n_gsm: fix NULL pointer access due to DLCI release
  - tty: n_gsm: fix proper link termination after failed open
  - tty: n_gsm: fix encoding of control signal octet bit DV
  - riscv: fix oops caused by irqsoff latency tracer
  - thermal: int340x: fix memory leak in int3400_notify()
  - RDMA/cma: Do not change route.addr.src_addr outside state checks
  - driver core: Free DMA range map when device is released
  - xhci: Prevent futile URB re-submissions due to incorrect return value.
  - xhci: re-initialize the HC during resume if HCE was set
  - usb: dwc3: gadget: Let the interrupt handler disable bottom halves.
  - usb: dwc3: pci: Fix Bay Trail phy GPIO mappings
  - usb: dwc2: drd: fix soft connect when gadget is unconfigured
  - USB: serial: option: add Telit LE910R1 compositions
  - USB: serial: option: add support for DW5829e
  - tracefs: Set the group ownership in apply_options() not parse_options()
  - usb: gadget: rndis: add spinlock for rndis response list
  - Revert "USB: serial: ch341: add new Product ID for CH341A"
  - ata: pata_hpt37x: disable primary channel on HPT371
  - sc16is7xx: Fix for incorrect data being transmitted
  - iio: Fix error handling for PM
  - iio: imu: st_lsm6dsx: wait for settling time in st_lsm6dsx_read_oneshot
  - iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits
  - iio: adc: men_z188_adc: Fix a resource leak in an error handling path
  - tracing: Have traceon and traceoff trigger honor the instance
  - RDMA/ib_srp: Fix a deadlock
  - RDMA/rtrs-clt: Move free_permit from free_clt to rtrs_clt_close
  - RDMA/rtrs-clt: Kill wait_for_inflight_permits
  - regmap-irq: Update interrupt clear register for proper reset
  - spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op()
  - net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets
  - net/mlx5: Fix wrong limitation of metadata match on ecpf
  - net/mlx5: Fix possible deadlock on rule deletion
  - udp_tunnel: Fix end of loop test in udp_tunnel_nic_unregister()
  - surface: surface3_power: Fix battery readings on batteries without a serial number
  - net/smc: Use a mutex for locking "struct smc_pnettable"
  - netfilter: nf_tables: fix memory leak during stateful obj update
  - nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()
  - net: Force inlining of checksum functions in net/checksum.h
  - net: ll_temac: check the return value of devm_kmalloc()
  - net/sched: act_ct: Fix flow table lookup after ct clear or switching zones
  - net/mlx5e: Fix wrong return value on ioctl EEPROM query failure
  - drm/edid: Always set RGB444
  - openvswitch: Fix setting ipv6 fields causing hw csum failure
  - gso: do not skip outer ip header in case of ipip and net_failover
  - tipc: Fix end of loop tests for list_for_each_entry()
  - net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends
  - io_uring: add a schedule point in io_add_buffers()
  - bpf: Add schedule points in batch ops
  - selftests: bpf: Check bpf_msg_push_data return value
  - bpf: Do not try bpf_msg_push_data with len 0
  - hwmon: Handle failure to register sensor with thermal zone correctly
  - bnxt_en: Fix active FEC reporting to ethtool
  - bnx2x: fix driver load from initrd
  - perf data: Fix double free in perf_session__delete()
  - ping: remove pr_err from ping_lookup
  - optee: use driver internal tee_context for some rpc
  - tee: export teedev_open() and teedev_close_context()
  - x86/fpu: Correct pkru/xstate inconsistency
  - CDC-NCM: avoid overflow in sanity checking
  - USB: zaurus: support another broken Zaurus
  - drm/i915: Correctly populate use_sagv_wm for all pipes
  - drm/amdgpu: disable MMHUB PG for Picasso
  - KVM: x86/mmu: make apf token non-zero to fix bug
  - parisc/unaligned: Fix ldw() and stw() unalignment handlers
  - parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel
  - vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
  - clk: jz4725b: fix mmc0 clock gating
  - btrfs: tree-checker: check item_size for dev_item
  - btrfs: tree-checker: check item_size for inode_item


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.35.0.64
changelog:
  - sched/qos: Add qos_tg_{throttle,unthrottle}_{up,down}
  - sched: Throttle offline task at tracehook_notify_resume()
  - kfence: parse param before alloc kfence_pool
  - arm64: remove page granularity limitation from KFENCE
  - Revert "arm64: remove page granularity limitation from KFENCE"
  - slub: add back check for free nonslab objects
  - audit: improve audit queue handling when "audit=1" on cmdline
  - Revert "audit: bugfix for infinite loop when flush the hold queue"
  - hamradio: fix macro redefine warning
  - Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6"
  - btrfs: add missing run of delayed items after unlink during log replay
  - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup
  - btrfs: fix lost prealloc extents beyond eof after full fsync
  - tracing: Fix return value of __setup handlers
  - tracing/histogram: Fix sorting on old "cpu" value
  - HID: add mapping for KEY_ALL_APPLICATIONS
  - HID: add mapping for KEY_DICTATE
  - Input: samsung-keypad - properly state IOMEM dependency
  - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume
  - Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power()
  - net: dcb: disable softirqs in dcbnl_flush_dev()
  - drm/amdgpu: fix suspend/resume hang regression
  - nl80211: Handle nla_memdup failures in handle_nan_filter
  - iavf: Refactor iavf state machine tracking
  - net: chelsio: cxgb3: check the return value of pci_find_capability()
  - ibmvnic: complete init_done on transport events
  - ARM: tegra: Move panels to AUX bus
  - soc: fsl: qe: Check of ioremap return value
  - soc: fsl: guts: Add a missing memory allocation failure check
  - soc: fsl: guts: Revert commit 3c0d64e867ed
  - ARM: dts: Use 32KiHz oscillator on devkit8000
  - ARM: dts: switch timer config to common devkit8000 devicetree
  - s390/extable: fix exception table sorting
  - memfd: fix F_SEAL_WRITE after shmem huge page allocated
  - ibmvnic: free reset-work-item when flushing
  - igc: igc_write_phy_reg_gpy: drop premature return
  - pinctrl: sunxi: Use unique lockdep classes for IRQs
  - selftests: mlxsw: tc_police_scale: Make test more robust
  - ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions
  - ARM: Fix kgdb breakpoint for Thumb2
  - igc: igc_read_phy_reg_gpy: drop premature return
  - arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output
  - can: gs_usb: change active_channels's type from atomic_t to u8
  - ASoC: cs4265: Fix the duplicated control name
  - firmware: arm_scmi: Remove space in MODULE_ALIAS name
  - efivars: Respect "block" flag in efivar_entry_set_safe()
  - ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc()
  - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
  - ibmvnic: register netdev after init of adapter
  - net: sxgbe: fix return value of __setup handler
  - iavf: Fix missing check for running netdev
  - mac80211: treat some SAE auth steps as final
  - net: stmmac: fix return value of __setup handler
  - mac80211: fix forwarded mesh frames AC & queue selection
  - ice: fix concurrent reset and removal of VFs
  - ice: Fix race conditions between virtchnl handling and VF ndo ops
  - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server
  - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client
  - net/smc: fix connection leak
  - net: dcb: flush lingering app table entries for unregistered devices
  - net: ipv6: ensure we call ipv6_mc_down() at most once
  - batman-adv: Don't expect inter-netns unique iflink indices
  - batman-adv: Request iflink once in batadv_get_real_netdevice
  - batman-adv: Request iflink once in batadv-on-batadv check
  - netfilter: nf_queue: handle socket prefetch
  - netfilter: nf_queue: fix possible use-after-free
  - netfilter: nf_queue: don't assume sk is full socket
  - net: fix up skbs delta_truesize in UDP GRO frag_list
  - e1000e: Correct NVM checksum verification flow
  - xfrm: enforce validity of offload input flags
  - xfrm: fix the if_id check in changelink
  - bpf, sockmap: Do not ignore orig_len parameter
  - netfilter: fix use-after-free in __nf_register_net_hook()
  - xfrm: fix MTU regression
  - mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
  - ntb: intel: fix port config status offset for SPR
  - thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
  - xen/netfront: destroy queues before real_num_tx_queues is zeroed
  - drm/i915: s/JSP2/ICP2/ PCH
  - iommu/amd: Recover from event log overflow
  - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
  - riscv: Fix config KASAN && DEBUG_VIRTUAL
  - riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP
  - riscv/efi_stub: Fix get_boot_hartid_from_fdt() return value
  - ALSA: intel_hdmi: Fix reference to PCM buffer address
  - tracing: Add ustring operation to filtering string pointers
  - drm/amdgpu: check vm ready by amdgpu_vm->evicting flag
  - ata: pata_hpt37x: fix PCI clock detection
  - serial: stm32: prevent TDR register overwrite when sending x_char
  - tracing: Add test for user space strings when filtering on string pointers
  - exfat: fix i_blocks for files truncated over 4 GiB
  - exfat: reuse exfat_inode_info variable instead of calling EXFAT_I()
  - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990
  - i2c: qup: allow COMPILE_TEST
  - i2c: cadence: allow COMPILE_TEST
  - dmaengine: shdma: Fix runtime PM imbalance on error
  - selftests/seccomp: Fix seccomp failure by adding missing headers
  - cifs: fix double free race when mount fails in cifs_get_root()
  - tipc: fix a bit overflow in tipc_crypto_key_rcv()
  - KVM: arm64: vgic: Read HW interrupt pending state from the HW
  - Input: clear BTN_RIGHT/MIDDLE on buttonpads
  - regulator: core: fix false positive in regulator_late_cleanup()
  - ASoC: rt5682: do not block workqueue if card is unbound
  - ASoC: rt5668: do not block workqueue if card is unbound
  - i2c: bcm2835: Avoid clock stretching timeouts
  - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
  - mac80211_hwsim: report NOACK frames in tx_status


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.36.0.65
changelog:
  - net, xdp: Update pkt_type if generic XDP changes unicast MAC
  - KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID
  - sched/psi: report zeroes for CPU full at the system level
  - psi: Fix PSI_MEM_FULL state when tasks are in memstall and doing reclaim
  - psi: Fix psi state corruption when schedule() races with cgroup move
  - psi: Reduce calls to sched_clock() in psi
  - psi: Optimize task switch inside shared cgroups
  - psi: Pressure states are unlikely
  - psi: Use ONCPU state tracking machinery to detect reclaim
  - psi: Add PSI_CPU_FULL state
  - block/psi: remove PSI annotations from direct IO
  - psi: make kabi compatibility for psi in struct cgroup
  - psi, tracepoint: introduce tracepoints for psi_memstall_{enter, leave}
  - psi: fix wrong iteration in iterate_groups
  - config: change CONFIG_DMATEST from y to m
  - perf: Fix sys_perf_event_open() race against self
  - blk-mq: fix kabi broken by "blk-mq: Use request queue-wide tags for tagset-wide sbitmap"
  - blk-mq: fix use-after-free in blk_mq_exit_sched
  - blk-mq: Use request queue-wide tags for tagset-wide sbitmap
  - blk-mq: Some tag allocation code refactoring
  - arm64: Add memmap reserve range check to avoid conflict
  - ext4: add reserved GDT blocks check
  - ax25: Fix UAF bugs in ax25 timers
  - ax25: fix UAF bug in ax25_send_control()
  - ax25: Fix refcount leaks caused by ax25_cb_del()
  - ax25: fix UAF bugs of net_device caused by rebinding operation
  - ax25: fix reference count leaks of ax25_dev
  - ax25: add refcount in ax25_dev to avoid UAF bugs
  - driver core: fix deadlock in __driver_attach
  - driver core: fix deadlock in __device_attach
  - inet: fully convert sk->sk_rx_dst to RCU rules
  - Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE"
  - arm64: cpufeature: add HWCAP for FEAT_RPRES
  - arm64: cpufeature: add HWCAP for FEAT_AFP
  - arm64: Add Cortex-A510 CPU part definition
  - arm64: Add Cortex-X2 CPU part definition
  - arm64: Add Neoverse-N2, Cortex-A710 CPU part definition
  - arm64: cputype: Add CPU implementor & types for the Apple M1 cores


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.37.0.66
changelog:
  - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE
  - proc: Fix a dentry lock race between release_task and lookup
  - x86/sgx: Fix race between reclaimer and page fault handler
  - x86/sgx: Mark PCMD page as dirty when modifying contents
  - x86/sgx: Free backing memory after faulting the enclave page
  - KVM: SEV: add cache flush to solve SEV cache incoherency issues
  - mm/sharepool: Fix sharepool node id invalid when using sp_alloc
  - share_pool: Fix ABBA deadlock
  - sharepool: fix hisi oom deadlock
  - floppy: disable FDRAWCMD by default
  - xhci: Fix a logic issue when display Zhaoxin XHCI root hub speed
  - sw64: optimize simd version of memcpy and memset
  - sw64: fix sendfile system call
  - sw64: fix the number of aux entries in ARCH_DLINFO
  - sw64: pcie: enable PME and AER support
  - sw64: unify 32-bit MEMIO address of host and guest
  - hwmon: add support for sw64 temperature sensor
  - sw64: pci: align the address of mmio resource to PAGE_SIZE
  - sw64: signal: save/restore fpregs with copy user
  - sw64: push and pop kernel stack with ldi instruction
  - ipmi: add ipmi driver support
  - sw64: add pvt device to chip3.dts
  - hwmon: add voltage sensor support for sw64
  - sw64: remap PA with |= in early_ioremap
  - sw64: vdso: fix CFI directives for fpregs in vrt_sigreturn
  - sw64: vdso: fix backtrace of vrt_sigreturn
  - sw64: kvm: simplify the code
  - sw64: force signal and fault for traps and debugging
  - sw64: fix compile error for DISCONTIGMEM=y
  - sw64: add old sigprocmask back for compatibility
  - sw64: add dynamic turning on/off cores support
  - sw64: add dynamic frequency scaling support
  - sw64: fix ip checksum calculation
  - sw64: remove unnecessary parameter in REG_OFFSET_NAME
  - sw64: kvm: fix bad page state setting outside of kvm memory pool
  - sw64: fix setup_rt_frame for non SA_SIGINFO
  - sw64: do some cleanups for rt_sigframe
  - sw64: kvm: handle ldl_u and stl_u when exit mmio
  - sw64: fix some compile errors
  - sw64: add missing global __constant_c_memset
  - sw64: remove unnecessary include headers
  - sw64: increase position index in c_next for cpuinfo
  - sw64: Kconfig: remove dependence on ARCH_SUPPORTS_ACPI
  - sw64: Kconfig: remove dependence on !PREEMPT
  - sw64: clean up out-of-date selected options
  - sw64: add kbuild defconfig rule
  - sw64: ptrace: clean up debug codes
  - sw64: add ARCH_HAS_PTE_SPECIAL support
  - sw64: kvm: remap pages of guest by vm_insert_page()
  - sw64: clean up a.out and ECOFF binary related headers
  - sw64: switch to old-style semctl/shmctl syscalls
  - sw64: define NR_SYSCALLS as generated __NR_syscalls
  - sw64: add SO_RCVTIMEO/ SO_SNDTIMEO socket options
  - sw64: dts: rename spi flash partition to fix warning
  - sw64: fix ex_table entries from misalignment handlers
  - sw64: radeon: add a force flush to delay work when radeon uvd suspend
  - sw64: add set time support for hypervisor based rtc
  - sw64: add regs and stack access APIs to support kprobe events
  - sw64: unify access to LONGTIME for guest and emulator
  - sw64: enable more than 32 CPUs for guest
  - sw64: fix SPDX license identifier in uapi headers
  - sw64: add required include headers to ptrace.h
  - sw64: fix the VDSO symbol generation for nm
  - sw64: add clone3 syscall support
  - sw64: add missing pkey syscall numbers
  - sw64: reformat syscall.tbl
  - sw64: fix printk method for guest os
  - sw64: remove unused a.out.h
  - sw64: switch GUP to the generic get_user_pages_fast() implementation
  - sw64: kvm: fix bug when open file with the O_DIRECT flag
  - sw64: fix compile error for CONFIG_PCI=n
  - sw64: rename kvm_mem variables
  - sw64: fix coding style problems
  - sw64: kvm: remove MAX_VPN
  - sw64: clean up useless #if 0 and #if 1
  - sw64: fix coding style problems
  - sw64: remove MAX_ASN
  - sw64: add support for emulator running mode
  - sw64: optimize ip checksum calculation
  - sw64: use jump label for running modes
  - sw64: mm: mark pci and memmap region as nomap
  - sw64: fix the value of QEMU_PRINTF_BUFF_BASE
  - sw64: clean up some useless codes
  - sw64: numa: switch to arch node_distance
  - sw64: fix all compile warnings
  - sw64: remove CONFIG_USE_PERCPU_NUMA_NODE_ID=n code
  - sw64: simplify cpumask_of_node
  - sw64: modify tc_sched_clock debugfs file
  - sw64: remove redundant Kconfig source
  - sw64: switch to generic pcibios_set_master and pci_common_swizzle
  - sw64: print correct initrd address
  - sw64: mm: use memblock to find the end of memory
  - sw64: mm: warn overlapped memmap and DMA region
  - sw64: pci: remove some useless code
  - sw64: mm: reorder memblock_init process
  - sw64: vdso: fix time calculation
  - sw64: vdso: change vdso version
  - sw64: vdso: add automatic syscall fallback
  - sw64: iommu: fix 32-bit devices dma ops
  - sw64: re-implement sw64_dma_direct_ops according upstream
  - config: add initial openeuler_defconfig for sw64
  - watch_queue: Fix filter limit check
  - ext4: add check to prevent attempting to resize an fs with sparse_super2
  - x86/traps: Mark do_int3() NOKPROBE_SYMBOL
  - x86/boot: Add setup_indirect support in early_memremap_is_setup_data()
  - x86/boot: Fix memremap of setup_indirect structures
  - watch_queue: Make comment about setting ->defunct more accurate
  - watch_queue: Fix lack of barrier/sync/lock between post and read
  - watch_queue: Free the alloc bitmap when the watch_queue is torn down
  - watch_queue: Fix the alloc bitmap size to reflect notes allocated
  - watch_queue: Fix to always request a pow-of-2 pipe ring size
  - watch_queue: Fix to release page in ->release()
  - watch_queue, pipe: Free watchqueue state after clearing pipe ring
  - virtio: acknowledge all features before access
  - virtio: unexport virtio_finalize_features
  - arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0
  - riscv: Fix auipc+jalr relocation range checks
  - mmc: meson: Fix usage of meson_mmc_post_req()
  - net: macb: Fix lost RX packet wakeup race in NAPI receive
  - staging: gdm724x: fix use after free in gdm_lte_rx()
  - staging: rtl8723bs: Fix access-point mode deadlock
  - selftests/memfd: clean up mapping in mfd_fail_write
  - selftest/vm: fix map_fixed_noreplace test failure
  - tracing: Ensure trace buffer is at least 4096 bytes large
  - ipv6: prevent a possible race condition with lifetimes
  - Revert "xen-netback: Check for hotplug-status existence before watching"
  - Revert "xen-netback: remove 'hotplug-status' once it has served its purpose"
  - gpio: Return EPROBE_DEFER if gc->to_irq is NULL
  - hwmon: (pmbus) Clear pmbus fault/warning bits after read
  - net-sysfs: add check for netdevice being present to speed_show
  - spi: rockchip: terminate dma transmission when slave abort
  - spi: rockchip: Fix error in getting num-cs property
  - selftests/bpf: Add test for bpf_timer overwriting crash
  - net: bcmgenet: Don't claim WOL when its not available
  - sctp: fix kernel-infoleak for SCTP sockets
  - net: phy: DP83822: clear MISR2 register to disable interrupts
  - gianfar: ethtool: Fix refcount leak in gfar_get_ts_info
  - gpio: ts4900: Do not set DAT and OE together
  - selftests: pmtu.sh: Kill tcpdump processes launched by subshell.
  - NFC: port100: fix use-after-free in port100_send_complete
  - net/mlx5e: Lag, Only handle events from highest priority multipath entry
  - net/mlx5: Fix a race on command flush flow
  - net/mlx5: Fix size field in bufferx_reg struct
  - net: ethernet: lpc_eth: Handle error for clk_enable
  - net: ethernet: ti: cpts: Handle error for clk_enable
  - tipc: fix incorrect order of state message data sanity check
  - ethernet: Fix error handling in xemaclite_of_probe
  - ice: Fix curr_link_speed advertised speed
  - ice: Rename a couple of variables
  - ice: Remove unnecessary checker loop
  - ice: Align macro names to the specification
  - ice: stop disabling VFs due to PF error responses
  - i40e: stop disabling VFs due to PF error responses
  - ARM: dts: aspeed: Fix AST2600 quad spi group
  - net: dsa: mt7530: fix incorrect test in mt753x_phylink_validate()
  - drm/sun4i: mixer: Fix P010 and P210 format numbers
  - qed: return status of qed_iov_get_link
  - esp: Fix BEET mode inter address family tunneling on GSO
  - net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare()
  - isdn: hfcpci: check the return value of dma_set_mask() in setup_hw()
  - virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero
  - mISDN: Fix memory leak in dsp_pipeline_build()
  - mISDN: Remove obsolete PIPELINE_DEBUG debugging information
  - tipc: fix kernel panic when enabling bearer
  - arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias
  - HID: vivaldi: fix sysfs attributes leak
  - clk: qcom: gdsc: Add support to update GDSC transition delay
  - ARM: boot: dts: bcm2711: Fix HVS register range


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.38.0.67
changelog:
  - jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction()
  - NFSv4: fix open failure with O_ACCMODE flag
  - Revert "NFSv4: Handle the special Linux file open access mode"
  - jbd2: fix a potential race while discarding reserved buffers after an abort
  - x86: Pin task-stack in __get_wchan()
  - x86: Fix __get_wchan() for !STACKTRACE
  - x86: Fix get_wchan() to support the ORC unwinder
  - netfilter: nf_tables: disallow non-stateful expression in sets earlier
  - io_uring: fix using under-expanded iters
  - io_uring: don't re-import iovecs from callbacks
  - nfc: replace improper check device_is_registered() in netlink related functions
  - io_uring: always use original task when preparing req identity
  - block: fix NULL pointer dereference in disk_release()
  - block, bfq: make bfq_has_work() more accurate
  - blk-mq: fix panic during blk_mq_run_work_fn()
  - blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and disk_release()
  - net: hns3: fix incorrect type of argument in declaration of function hclge_comm_get_rss_indir_tbl
  - net: hns3: add query vf ring and vector map relation
  - net: hns3: add byte order conversion for VF to PF mailbox message
  - net: hns3: add byte order conversion for PF to VF mailbox message
  - net: hns3: remove the affinity settings of vector0
  - net: hns3: fix access null pointer issue when set tx-buf-size as 0
  - net: hns3: add return value for mailbox handling in PF
  - net: hns3: add validity check for message data length
  - net: hns3: modify the return code of hclge_get_ring_chain_from_mbx
  - net: hns3: fix error log of tx/rx tqps stats
  - net: hns3: align the debugfs output to the left
  - net: hns3: clear inited state and stop client after failed to register netdev
  - net: hns3: Fix spelling mistake "actvie" -> "active"
  - net: hns3: remove unnecessary line wrap for hns3_set_tunable
  - net: hns3: replace magic value by HCLGE_RING_REG_OFFSET
  - net: hns3: fix the wrong words in comments
  - net: hns3: update the comment of function hclgevf_get_mbx_resp
  - net: hns3: add log for setting tx spare buf size
  - net: hns3: add failure logs in hclge_set_vport_mtu
  - net: hns3: refine the definition for struct hclge_pf_to_vf_msg
  - net: hns3: refactor hns3_set_ringparam()
  - net: hns3: add ethtool parameter check for CQE/EQE mode
  - net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware
  - net: hns3: fix the concurrency between functions reading debugfs
  - skbuff: fix coalescing for page_pool fragment recycling
  - netfilter: nf_tables: sanitize nft_set_desc_concat_parse()
  - kselftest/vm: fix tests build with old libc
  - sfc: extend the locking on mcdi->seqno
  - tcp: make tcp_read_sock() more robust
  - nl80211: Update bss channel on channel switch for P2P_CLIENT
  - drm/vrr: Set VRR capable prop only if it is attached to connector
  - iwlwifi: don't advertise TWT support
  - atm: firestream: check the return value of ioremap() in fs_init()
  - can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready
  - ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE
  - MIPS: smp: fill in sibling and core maps earlier
  - mac80211: refuse aggregations sessions before authorized
  - ARM: dts: rockchip: fix a typo on rk3288 crypto-controller
  - ARM: dts: rockchip: reorder rk322x hmdi clocks
  - arm64: dts: agilex: use the compatible "intel,socfpga-agilex-hsotg"
  - arm64: dts: rockchip: reorder rk3399 hdmi clocks
  - arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity
  - xfrm: Fix xfrm migrate issues when address family changes
  - xfrm: Check if_id in xfrm_migrate
  - Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.39.0.68
changelog:
  - eulerfs: fix potential sbi->persisters free error
  - fs/ntfs3: Fix invalid free in log_replay
  - Revert "nfs: nfs_file_write() should check for writeback errors"
  - xfs: Skip repetitive warnings about mount options
  - xfs: rename variable mp to parsing_mp
  - ext4: convert from atomic_t to refcount_t on ext4_io_end->count
  - powerpc/32: Fix overread/overwrite of thread_struct via ptrace
  - RDMA/hns: Refactor the alloc_cqc()
  - RDMA/hns: Refactor the alloc_srqc()
  - RDMA/hns: Clean up the return value check of hns_roce_alloc_cmd_mailbox()
  - RDMA/hns: Remove similar code that configures the hardware contexts
  - RDMA/hns: Refactor mailbox functions
  - RDMA/hns: Fix the wrong type of parameter "op" of the mailbox
  - RDMA/hns: Remove redundant parameter "mailbox" in the mailbox
  - RDMA/hns: Remove fixed parameter "timeout" in the mailbox
  - RDMA/hns: Remove the unused parameter "op_modifier" in mailbox
  - tcp: increase source port perturb table to 2^16
  - tcp: change source port randomizarion at connect() time
  - ext4: correct the judgment of BUG in ext4_mb_normalize_request
  - ext4: fix bug_on ext4_mb_use_inode_pa
  - net/ns: put workqueue of cleanup_net sleep for a while when notify.
  - bcache: avoid unnecessary soft lockup in kworker update_writeback_rate()
  - md: bcache: check the return value of kzalloc() in detached_dev_do_request()
  - bcache: memset on stack variables in bch_btree_check() and bch_sectors_dirty_init()
  - bcache: avoid journal no-space deadlock by reserving 1 journal bucket
  - bcache: remove incremental dirty sector counting for bch_sectors_dirty_init()
  - bcache: improve multithreaded bch_sectors_dirty_init()
  - bcache: improve multithreaded bch_btree_check()
  - bcache: fixup multiple threads crash
  - bcache: fixup bcache_dev_sectors_dirty_add() multithreaded CPU false sharing
  - bcache: use default_groups in kobj_type
  - bcache: fix NULL pointer reference in cached_dev_detach_finish
  - bcache: replace snprintf in show functions with sysfs_emit
  - bcache: move uapi header bcache.h to bcache code directory
  - bcache: move calc_cached_dev_sectors to proper place on backing device detach
  - bcache: fix error info in register_bcache()
  - md: bcache: Fix spelling of 'acquire'
  - bcache: avoid oversized read request in cache missing code path
  - bcache: remove bcache device self-defined readahead
  - lib: crc64: fix kernel-doc warning
  - bcache: fix a regression of code compiling failure in debug.c
  - bcache: Use 64-bit arithmetic instead of 32-bit
  - md: bcache: Trivial typo fixes in the file journal.c
  - md: bcache: avoid -Wempty-body warnings
  - bcache: use NULL instead of using plain integer as pointer
  - bcache: remove PTR_CACHE
  - bcache: reduce redundant code in bch_cached_dev_run()
  - bcache: Avoid comma separated statements
  - bcache: Fix register_device_aync typo
  - bcache: consider the fragmentation when update the writeback rate
  - bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded in 'cache_set'
  - bcache: set pdev_set_uuid before scond loop iteration
  - md/bcache: convert comma to semicolon
  - bcache:remove a superfluous check in register_bcache
  - bcache: fix race between setting bdev state to none and new write request direct to backing
  - Revert "selftests/bpf: Add test for bpf_timer overwriting crash"
  - smsc95xx: Ignore -ENODEV errors when device is unplugged
  - net: usb: Correct reset handling of smsc95xx
  - net: usb: Correct PHY handling of smsc95xx
  - perf symbols: Fix symbol size calculation condition
  - Input: aiptek - properly check endpoint type
  - scsi: mpt3sas: Page fault in reply q processing
  - usb: usbtmc: Fix bug in pipe direction for control transfers
  - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
  - usb: gadget: rndis: prevent integer overflow in rndis_set_response()
  - net: mscc: ocelot: fix backwards compatibility with single-chain tc-flower offload
  - net: bcmgenet: skip invalid partial checksums
  - bnx2x: fix built-in kernel driver load failure
  - net: phy: mscc: Add MODULE_FIRMWARE macros
  - net: dsa: Add missing of_node_put() in dsa_port_parse_of
  - net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit()
  - drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings
  - drm/imx: parallel-display: Remove bus flags check in imx_pd_bridge_atomic_check()
  - hv_netvsc: Add check for kvmalloc_array
  - atm: eni: Add check for dma_map_single
  - net/packet: fix slab-out-of-bounds access in packet_recvmsg()
  - net: phy: marvell: Fix invalid comparison in the resume and suspend functions
  - esp6: fix check on ipv6_skip_exthdr's return value
  - vsock: each transport cycles only on its own sockets
  - efi: fix return value of __setup handlers
  - mm: swap: get rid of livelock in swapin readahead
  - ocfs2: fix crash when initialize filecheck kobj fails
  - crypto: qcom-rng - ensure buffer for generate is completely filled


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.40.0.69
changelog:
  - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address
  - bpf: Fix KASAN use-after-free Read in compute_effective_progs
  - fs, mm: fix race in unlinking swapfile
  - ext4: recover csum seed of tmp_inode after migrating to extents
  - lockdown: also lock down previous kgdb use
  - nds32: fix access_ok() checks in get/put_user
  - wcn36xx: Differentiate wcn3660 from wcn3620
  - tpm: use try_get_ops() in tpm-space.c
  - mac80211: fix potential double free on mesh join
  - rcu: Don't deboost before reporting expedited quiescent state
  - Revert "ath: add support for special 0x0 regulatory domain"
  - crypto: qat - disable registration of algorithms
  - ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU
  - ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3
  - ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board
  - drivers: net: xgene: Fix regression in CRC stripping
  - ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec
  - ALSA: cmipci: Restore aux vol on suspend/resume
  - ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB
  - ALSA: pcm: Add stream lock during PCM reset ioctl operations
  - ALSA: pcm: Fix races among concurrent prealloc proc writes
  - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls
  - ALSA: pcm: Fix races among concurrent read/write and buffer changes
  - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls
  - ALSA: hda/realtek: Add quirk for ASUS GA402
  - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671
  - ALSA: hda/realtek: Add quirk for Clevo NP50PNJ
  - ALSA: hda/realtek: Add quirk for Clevo NP70PNJ
  - ALSA: usb-audio: add mapping for new Corsair Virtuoso SE
  - ALSA: oss: Fix PCM OSS buffer allocation overflow
  - ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call
  - staging: fbtft: fb_st7789v: reset display before initialization
  - tpm: Fix error handling in async work
  - cgroup-v1: Correct privileges check in release_agent writes
  - exfat: avoid incorrectly releasing for root inode
  - net: ipv6: fix skb_over_panic in __ip6_append_data


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.41.0.70
changelog:
  - NFC: netlink: fix sleep in atomic bug when firmware download timeout
  - KVM: x86: avoid calling x86 emulator without a decoded instruction
  - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization
  - net: hns3: fix PF rss size initialization bug
  - net: hns3: restore tm priority/qset to default settings when tc disabled
  - net: hns3: modify the ring param print info
  - net: hns3: don't push link state to VF if unalive
  - net: hns3: set port base vlan tbl_sta to false before removing old vlan


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.42.0.71
changelog:
  - smp: fix early_param csdlock_debug boot panic
  - RDMA/hns: Use hr_reg_read() instead of remaining roce_get_xxx()
  - RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx()
  - RDMA/hns: Remove the num_cqc_timer variable
  - RDMA/hns: Add the detection for CMDQ status in the device initialization process
  - RDMA/hns: Remove unnecessary ret variable from hns_roce_dereg_mr()
  - RDMA/hns: Init the variable at the suitable place
  - RDMA/hns: Add judgment on the execution result of CMDQ that free vf resource
  - RDMA/hns: Remove redundant variable "ret"
  - RDMA/hns: Remove unused function to_hns_roce_state()
  - RDMA/hns: Remove unnecessary check for the sgid_attr when modifying QP
  - ipmi:watchdog: Set panic count to proper value on a panic
  - ipmi/watchdog: replace atomic_add() and atomic_sub()
  - scsi: hisi_sas: Change the debugfs parameters dump count default value
  - blk-mq: don't clear flush_rq from tags->rqs[]
  - ext4: correct the misjudgment in ext4_iget_extra_inode
  - ext4: correct max_inline_xattr_value_size computing
  - ext4: fix use-after-free in ext4_xattr_set_entry
  - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h
  - x86/speculation/mmio: Print SMT warning
  - KVM: x86/speculation: Disable Fill buffer clear within guests
  - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
  - x86/speculation/srbds: Update SRBDS mitigation selection
  - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
  - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle
  - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations
  - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
  - x86/speculation: Add a common function for MD_CLEAR mitigation update
  - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug
  - Documentation: Add documentation for Processor MMIO Stale Data
  - PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup"
  - can: m_can: m_can_tx_handler(): fix use after free of skb
  - openvswitch: Fixed nd target mask field in the flow dump.
  - docs: sysctl/kernel: add missing bit to panic_print
  - um: Fix uml_mconsole stop/go
  - ARM: dts: spear13xx: Update SPI dma properties
  - ARM: dts: spear1340: Update serial node properties
  - ASoC: topology: Allow TLV control to be either read or write
  - dt-bindings: spi: mxic: The interrupt property is not mandatory
  - dt-bindings: mtd: nand-controller: Fix a comment in the examples
  - dt-bindings: mtd: nand-controller: Fix the reg property description
  - bpf: Fix comment for helper bpf_current_task_under_cgroup()
  - bpf: Adjust BPF stack helper functions to accommodate skip > 0
  - mm/usercopy: return 1 from hardened_usercopy __setup() handler
  - mm/memcontrol: return 1 from cgroup.memory __setup() handler
  - ARM: 9187/1: JIVE: fix return value of __setup handler
  - mm/mmap: return 1 from stack_guard_gap __setup() handler
  - batman-adv: Check ptr for NULL before reducing its refcnt
  - ASoC: soc-compress: Change the check for codec_dai
  - staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet
  - proc: bootconfig: Add null pointer check
  - can: isotp: restore accidentally removed MSG_PEEK feature
  - platform/chrome: cros_ec_typec: Check for EC device
  - ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
  - riscv module: remove (NOLOAD)
  - io_uring: fix memory leak of uid in files registration
  - ARM: iop32x: offset IRQ numbers by 1
  - ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs
  - pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE()
  - pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR()
  - watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function
  - pinctrl: pinconf-generic: Print arguments for bias-pull-*
  - watch_queue: Free the page array when watch_queue is dismantled
  - crypto: arm/aes-neonbs-cbc - Select generic cbc and aes
  - mailbox: imx: fix wakeup failure from freeze mode
  - rxrpc: Fix call timer start racing with call destruction
  - gfs2: Make sure FITRIM minlen is rounded up to fs block size
  - rtc: check if __rtc_read_time was successful
  - XArray: Update the LRU list in xas_split()
  - can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value
  - can: mcba_usb: properly check endpoint type
  - XArray: Fix xas_create_range() when multi-order entry present
  - wireguard: socket: ignore v6 endpoints when ipv6 is disabled
  - wireguard: socket: free skb in send6 when ipv6 is disabled
  - wireguard: queueing: use CFI-safe ptr_ring cleanup function
  - ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM
  - KVM: SVM: fix panic on out-of-bounds guest IRQ
  - KVM: x86: fix sending PV IPI
  - KVM: Prevent module exit until all VMs are freed
  - KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated
  - platform: chrome: Split trace include file
  - scsi: qla2xxx: Use correct feature type field during RFF_ID processing
  - scsi: qla2xxx: Reduce false trigger to login
  - scsi: qla2xxx: Fix N2N inconsistent PLOGI
  - scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests
  - scsi: qla2xxx: Fix hang due to session stuck
  - scsi: qla2xxx: Fix incorrect reporting of task management failure
  - scsi: qla2xxx: Fix disk failure to rediscover
  - scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
  - scsi: qla2xxx: Check for firmware dump already collected
  - scsi: qla2xxx: Add devids and conditionals for 28xx
  - scsi: qla2xxx: Fix device reconnect in loop topology
  - scsi: qla2xxx: Fix warning for missing error code
  - scsi: qla2xxx: Fix wrong FDMI data for 64G adapter
  - scsi: qla2xxx: Fix scheduling while atomic
  - scsi: qla2xxx: Fix stuck session in gpdb
  - powerpc: Fix build errors with newer binutils
  - powerpc/lib/sstep: Fix build errors with newer binutils
  - powerpc/lib/sstep: Fix 'sthcx' instruction
  - powerpc/kasan: Fix early region not updated correctly
  - KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU
  - ALSA: hda/realtek: Add alc256-samsung-headphone fixup
  - media: atomisp: fix bad usage at error handling logic
  - mmc: host: Return an error when ->enable_sdio_irq() ops is missing
  - media: hdpvr: initialize dev->worker at hdpvr_register_videodev
  - media: Revert "media: em28xx: add missing em28xx_close_extension"
  - video: fbdev: sm712fb: Fix crash in smtcfb_write()
  - ARM: mmp: Fix failure to remove sram device
  - ARM: tegra: tamonten: Fix I2C3 pad setting
  - lib/test_lockup: fix kernel pointer check for separate address spaces
  - uaccess: fix type mismatch warnings from access_ok()
  - media: cx88-mpeg: clear interrupt status register before streaming video
  - ASoC: soc-core: skip zero num_dai component in searching dai name
  - ARM: dts: bcm2711: Add the missing L1/L2 cache information
  - video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit
  - video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf()
  - video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf()
  - arm64: defconfig: build imx-sdma as a module
  - ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk
  - ARM: ftrace: avoid redundant loads or clobbering IP
  - media: atomisp: fix dummy_ptr check to avoid duplicate active_bo
  - media: atomisp_gmin_platform: Add DMI quirk to not turn AXP ELDO2 regulator off on some boards
  - ASoC: madera: Add dependencies on MFD
  - ARM: dts: bcm2837: Add the missing L1/L2 cache information
  - ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960
  - video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit
  - video: fbdev: cirrusfb: check pixclock to avoid divide by zero
  - video: fbdev: w100fb: Reset global state
  - video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
  - media: ir_toy: free before error exiting
  - media: staging: media: zoran: fix various V4L2 compliance errors
  - media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com
  - media: staging: media: zoran: move videodev alloc
  - ntfs: add sanity check on allocation size
  - f2fs: compress: fix to print raw data size in error path of lz4 decompression
  - NFSD: Fix nfsd_breaker_owns_lease() return values
  - f2fs: fix to do sanity check on curseg->alloc_type
  - ext4: don't BUG if someone dirty pages without asking ext4 first
  - ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit
  - ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb
  - locking/lockdep: Iterate lock_classes directly when reading lockdep files
  - spi: tegra20: Use of_device_get_match_data()
  - nvme-tcp: lockdep: annotate in-kernel sockets
  - parisc: Fix handling off probe non-access faults
  - PM: core: keep irq flags in device_pm_check_callbacks()
  - ACPI/APEI: Limit printable size of BERT table data
  - Revert "Revert "block, bfq: honor already-setup queue merges""
  - lib/raid6/test/Makefile: Use $(pound) instead of # for Make 4.3
  - ACPICA: Avoid walking the ACPI Namespace if it is not there
  - fs/binfmt_elf: Fix AT_PHDR for unusual ELF files
  - irqchip/nvic: Release nvic_base upon failure
  - irqchip/qcom-pdc: Fix broken locking
  - Fix incorrect type in assignment of ipv6 port for audit
  - loop: use sysfs_emit() in the sysfs xxx show()
  - selinux: allow FIOCLEX and FIONCLEX with policy capability
  - selinux: use correct type for context length
  - pinctrl: npcm: Fix broken references to chip->parent_device
  - gcc-plugins/stackleak: Exactly match strings instead of prefixes
  - regulator: rpi-panel: Handle I2C errors/timing to the Atmel
  - LSM: general protection fault in legacy_parse_param
  - fs: fix fd table size alignment properly
  - lib/test: use after free in register_test_dev_kmod()
  - fs: fd tables have to be multiples of BITS_PER_LONG
  - net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator
  - NFSv4/pNFS: Fix another issue with a list iterator pointing to the head
  - qlcnic: dcb: default to returning -EOPNOTSUPP
  - selftests: test_vxlan_under_vrf: Fix broken test case
  - net: phy: broadcom: Fix brcm_fet_config_init()
  - net: enetc: report software timestamping via SO_TIMESTAMPING
  - xen: fix is_xen_pmu()
  - clk: Initialize orphan req_rate
  - clk: qcom: gcc-msm8994: Fix gpll4 width
  - kdb: Fix the putarea helper function
  - NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error
  - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options
  - jfs: fix divide error in dbNextAG
  - driver core: dd: fix return value of __setup handler
  - firmware: google: Properly state IOMEM dependency
  - kgdbts: fix return value of __setup handler
  - serial: 8250: fix XOFF/XON sending when DMA is used
  - kgdboc: fix return value of __setup handler
  - tty: hvc: fix return value of __setup handler
  - pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe
  - pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe
  - pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual GPIOs
  - pinctrl: mediatek: paris: Fix pingroup pin config state readback
  - pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get()
  - pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback
  - pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init
  - staging: mt7621-dts: fix GB-PC2 devicetree
  - staging: mt7621-dts: fix pinctrl properties for ethernet
  - staging: mt7621-dts: fix formatting
  - staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree
  - NFS: remove unneeded check in decode_devicenotify_args()
  - clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver
  - clk: clps711x: Terminate clk_div_table with sentinel element
  - clk: loongson1: Terminate clk_div_table with sentinel element
  - clk: actions: Terminate clk_div_table with sentinel element
  - nvdimm/region: Fix default alignment for small regions
  - remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region
  - remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region
  - remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region
  - dmaengine: hisi_dma: fix MSI allocate fail when reload hisi_dma
  - clk: qcom: clk-rcg2: Update the frac table for pixel clock
  - clk: qcom: clk-rcg2: Update logic to calculate D value for RCG
  - clk: at91: sama7g5: fix parents of PDMCs' GCLK
  - clk: imx7d: Remove audio_mclk_root_clk
  - dma-debug: fix return value of __setup handlers
  - NFS: Return valid errors from nfs2/3_decode_dirent()
  - habanalabs: Add check for pci_enable_device
  - iio: adc: Add check for devm_request_threaded_irq
  - serial: 8250: Fix race condition in RTS-after-send handling
  - NFS: Use of mapping_set_error() results in spurious errors
  - serial: 8250_lpss: Balance reference count for PCI DMA device
  - serial: 8250_mid: Balance reference count for PCI DMA device
  - phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure})
  - clk: qcom: ipq8074: Use floor ops for SDCC1 clock
  - pinctrl: renesas: checker: Fix miscalculation of number of states
  - pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel
  - staging:iio:adc:ad7280a: Fix handing of device address bit reversing.
  - iio: mma8452: Fix probe failing when an i2c_device_id is used
  - clk: qcom: ipq8074: fix PCI-E clock oops
  - soundwire: intel: fix wrong register name in intel_shim_wake
  - cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse
  - misc: alcor_pci: Fix an error handling path
  - fsi: Aspeed: Fix a potential double free
  - fsi: aspeed: convert to devm_platform_ioremap_resource
  - pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add()
  - mxser: fix xmit_buf leak in activate when LSR == 0xff
  - mfd: asic3: Add missing iounmap() on error asic3_mfd_probe
  - tipc: fix the timer expires after interval 100ms
  - openvswitch: always update flow key after nat
  - tcp: ensure PMTU updates are processed during fastopen
  - net: bcmgenet: Use stronger register read/writes to assure ordering
  - PCI: Avoid broken MSI on SB600 USB devices
  - selftests/bpf/test_lirc_mode2.sh: Exit with proper code
  - i2c: mux: demux-pinctrl: do not deactivate a master that is not active
  - i2c: meson: Fix wrong speed use from probe
  - af_netlink: Fix shift out of bounds in group mask calculation
  - ipv4: Fix route lookups when handling ICMP redirects and PMTU updates
  - Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt
  - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed
  - selftests/bpf: Fix error reporting from sock_fields programs
  - bareudp: use ipv6_mod_enabled to check if IPv6 enabled
  - can: isotp: support MSG_TRUNC flag when reading from socket
  - can: isotp: return -EADDRNOTAVAIL when reading from unbound socket
  - USB: storage: ums-realtek: fix error code in rts51x_read_mem()
  - samples/bpf, xdpsock: Fix race when running for fix duration of time
  - bpf, sockmap: Fix double uncharge the mem of sk_msg
  - bpf, sockmap: Fix more uncharged while msg has more_data
  - bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full
  - RDMA/mlx5: Fix memory leak in error flow for subscribe event routine
  - mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init
  - MIPS: pgalloc: fix memory leak caused by pgd_free()
  - MIPS: RB532: fix return value of __setup handler
  - mips: cdmm: Fix refcount leak in mips_cdmm_phys_base
  - ath10k: Fix error handling in ath10k_setup_msa_resources
  - vxcan: enable local echo for sent CAN frames
  - powerpc: 8xx: fix a return value error in mpc8xx_pic_init
  - platform/x86: huawei-wmi: check the return value of device_create_file()
  - selftests/bpf: Make test_lwt_ip_encap more stable and faster
  - libbpf: Unmap rings when umem deleted
  - mfd: mc13xxx: Add check for mc13xxx_irq_request
  - powerpc/sysdev: fix incorrect use to determine if list is empty
  - mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n
  - net: axienet: fix RX ring refill allocation failure handling
  - IB/hfi1: Allow larger MTU without AIP
  - power: supply: wm8350-power: Add missing free in free_charger_irq
  - power: supply: wm8350-power: Handle error for wm8350_register_irq
  - i2c: xiic: Make bus names unique
  - hv_balloon: rate-limit "Unhandled message" warning
  - KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor()
  - KVM: x86: Fix emulation in writing cr8
  - powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit
  - powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties()
  - libbpf: Skip forward declaration when counting duplicated type names
  - gpu: host1x: Fix a memory leak in 'host1x_remove()'
  - bpf, arm64: Feed byte-offset into bpf line info
  - bpf, arm64: Call build_prologue() first in first JIT pass
  - drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt
  - scsi: hisi_sas: Change permission of parameter prot_mask
  - power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return
  - drm/tegra: Fix reference leak in tegra_dsi_ganged_probe
  - ext2: correct max file size computing
  - TOMOYO: fix __setup handlers return values
  - drm/amd/display: Remove vupdate_int_entry definition
  - RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR
  - scsi: pm8001: Fix abort all task initialization
  - scsi: pm8001: Fix NCQ NON DATA command completion handling
  - scsi: pm8001: Fix NCQ NON DATA command task initialization
  - scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req()
  - scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req()
  - scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update()
  - scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config()
  - scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config()
  - scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req()
  - scsi: pm8001: Fix command initialization in pm80XX_send_read_log()
  - dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS
  - drm/msm/dpu: fix dp audio condition
  - drm/msm/dpu: add DSPP blocks teardown
  - drm/msm/dp: populate connector of struct dp_panel
  - iwlwifi: mvm: Fix an error code in iwl_mvm_up()
  - iwlwifi: Fix -EIO error code that is never returned
  - dax: make sure inodes are flushed before destroy cache
  - IB/cma: Allow XRC INI QPs to set their local ACK timeout
  - drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug
  - drm/amd/pm: enable pm sysfs write for one VF mode
  - iommu/ipmmu-vmsa: Check for error num after setting mask
  - HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports
  - power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init
  - drm/bridge: dw-hdmi: use safe format when first in bridge chain
  - PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge
  - scripts/dtc: Call pkg-config POSIXly correct
  - net: dsa: mv88e6xxx: Enable port policy support on 6097
  - mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update
  - mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update
  - mt76: mt7915: use proper aid value in mt7915_mcu_sta_basic_tlv
  - mt76: mt7915: use proper aid value in mt7915_mcu_wtbl_generic_tlv in sta mode
  - powerpc/perf: Don't use perf_hw_context for trace IMC PMU
  - KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init
  - powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch
  - ray_cs: Check ioremap return value
  - power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe
  - i40e: respect metadata on XSK Rx to skb
  - i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb
  - KVM: PPC: Fix vmx/vsx mixup in mmio emulation
  - RDMA/core: Set MR type in ib_reg_user_mr
  - ath9k_htc: fix uninit value bugs
  - drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function
  - drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()
  - drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl()
  - ionic: fix type complaint in ionic_dev_cmd_clean()
  - drm/edid: Don't clear formats if using deep color
  - mtd: rawnand: gpmi: fix controller timings setting
  - mtd: onenand: Check for error irq
  - Bluetooth: hci_serdev: call init_rwsem() before p->open()
  - udmabuf: validate ubuf->pagecount
  - libbpf: Fix possible NULL pointer dereference when destroying skeleton
  - drm/panfrost: Check for error num after setting mask
  - ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern
  - drm: bridge: adv7511: Fix ADV7535 HPD enablement
  - drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe
  - drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe
  - drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev
  - drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops
  - ARM: configs: multi_v5_defconfig: re-enable CONFIG_V4L_PLATFORM_DRIVERS
  - ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data
  - ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe
  - ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe
  - ASoC: atmel: sam9x5_wm8731: use devm_snd_soc_register_card()
  - mmc: davinci_mmc: Handle error for clk_enable
  - ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe
  - ASoC: imx-es8328: Fix error return code in imx_es8328_probe()
  - ASoC: fsl_spdif: Disable TX clock when stop
  - ASoC: mxs: Fix error handling in mxs_sgtl5000_probe
  - ASoC: dmaengine: do not use a NULL prepare_slave_config() callback
  - ASoC: SOF: Add missing of_node_put() in imx8m_probe
  - ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in rockchip_i2s_probe
  - ASoC: rockchip: i2s: Use devm_platform_get_and_ioremap_resource()
  - ivtv: fix incorrect device_caps for ivtvfb
  - media: saa7134: fix incorrect use to determine if list is empty
  - media: saa7134: convert list_for_each to entry variant
  - video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of
  - ASoC: fsi: Add check for clk_enable
  - ASoC: wm8350: Handle error for wm8350_register_irq
  - ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe
  - media: vidtv: Check for null return of vzalloc
  - media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED
  - m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined
  - arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly
  - ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
  - memory: emif: check the pointer temp in get_device_details()
  - memory: emif: Add check for setup_interrupts
  - ASoC: soc-compress: prevent the potentially use of null pointer
  - ASoC: dwc-i2s: Handle errors for clk_enable
  - ASoC: atmel_ssc_dai: Handle errors for clk_enable
  - ASoC: mxs-saif: Handle errors for clk_enable
  - printk: fix return value of printk.devkmsg __setup handler
  - arm64: dts: broadcom: Fix sata nodename
  - arm64: dts: ns2: Fix spi-cpol and spi-cpha property
  - ALSA: spi: Add check for clk_enable()
  - ASoC: ti: davinci-i2s: Add check for clk_enable()
  - ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp()
  - uaccess: fix nios2 and microblaze get_user_8()
  - ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put
  - media: cedrus: h264: Fix neighbour info buffer size
  - media: cedrus: H265: Fix neighbour info buffer size
  - media: usb: go7007: s2250-board: fix leak in probe()
  - media: em28xx: initialize refcount before kref_get
  - media: video/hdmi: handle short reads of hdmi info frame.
  - ARM: dts: imx: Add missing LVDS decoder on M53Menlo
  - ARM: dts: sun8i: v3s: Move the csi1 block to follow address order
  - soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe
  - firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is not defined
  - arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc
  - arm64: dts: qcom: sdm845: fix microphone bias properties and values
  - soc: qcom: aoss: remove spurious IRQF_ONESHOT flags
  - soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem
  - soc: qcom: rpmpd: Check for null return of devm_kcalloc
  - ARM: dts: qcom: ipq4019: fix sleep clock
  - firmware: qcom: scm: Remove reassignment to desc following initializer
  - video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name()
  - video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe()
  - video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
  - video: fbdev: controlfb: Fix COMPILE_TEST build
  - video: fbdev: controlfb: Fix set but not used warnings
  - video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen
  - media: aspeed: Correct value for h-total-pixels
  - media: hantro: Fix overfill bottom register field name
  - media: meson: vdec: potential dereference of null pointer
  - media: coda: Fix missing put_device() call in coda_get_vdoa_data
  - ASoC: generic: simple-card-utils: remove useless assignment
  - ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting
  - media: bttv: fix WARNING regression on tunerless devices
  - media: mtk-vcodec: potential dereference of null pointer
  - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls
  - media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size
  - kunit: make kunit_test_timeout compatible with comment
  - selftests, x86: fix how check_cc.sh is being invoked
  - f2fs: fix compressed file start atomic write may cause data corruption
  - f2fs: compress: remove unneeded read when rewrite whole cluster
  - btrfs: fix unexpected error path when reflinking an inline extent
  - f2fs: fix to avoid potential deadlock
  - nfsd: more robust allocation failure handling in nfsd_file_cache_init
  - f2fs: fix missing free nid in f2fs_handle_failed_inode
  - perf/x86/intel/pt: Fix address filter config for 32-bit kernel
  - perf/core: Fix address filter parser for multiple filters
  - rseq: Optimise rseq_get_rseq_cs() and clear_rseq_cs()
  - sched/core: Export pelt_thermal_tp
  - sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa
  - f2fs: fix to enable ATGC correctly via gc_idle sysfs interface
  - watch_queue: Actually free the watch
  - watch_queue: Fix NULL dereference in error cleanup
  - io_uring: terminate manual loop iterator loop correctly for non-vecs
  - clocksource: acpi_pm: fix return value of __setup handler
  - hwmon: (pmbus) Add Vin unit off handling
  - hwrng: nomadik - Change clk_disable to clk_disable_unprepare
  - amba: Make the remove callback return void
  - vfio: platform: simplify device removal
  - crypto: ccree - Fix use after free in cc_cipher_exit()
  - crypto: ccp - ccp_dmaengine_unregister release dma channels
  - ACPI: APEI: fix return value of __setup handlers
  - clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init()
  - clocksource/drivers/timer-microchip-pit64b: Use notrace
  - clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts
  - clocksource/drivers/exynos_mct: Refactor resources allocation
  - clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix
  - crypto: vmx - add missing dependencies
  - crypto: amlogic - call finalize with bh disabled
  - crypto: sun8i-ce - call finalize with bh disabled
  - crypto: sun8i-ss - call finalize with bh disabled
  - hwrng: atmel - disable trng on failure path
  - spi: spi-zynqmp-gqspi: Handle error for dma_set_mask
  - PM: suspend: fix return value of __setup handler
  - PM: hibernate: fix __setup handler error handling
  - block: don't delete queue kobject before its children
  - nvme: cleanup __nvme_check_ids
  - hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING
  - hwmon: (pmbus) Add mutex to regulator ops
  - spi: pxa2xx-pci: Balance reference count for PCI DMA device
  - crypto: ccree - don't attempt 0 len DMA mappings
  - EVM: fix the evm= __setup handler return value
  - audit: log AUDIT_TIME_* records only from rules
  - crypto: rockchip - ECB does not need IV
  - selftests/x86: Add validity check and allow field splitting
  - arm64/mm: avoid fixmap race condition when create pud mapping
  - spi: tegra114: Add missing IRQ check in tegra_spi_probe
  - thermal: int340x: Check for NULL after calling kmemdup()
  - crypto: mxs-dcp - Fix scatterlist processing
  - crypto: authenc - Fix sleep in atomic context in decrypt_tail
  - crypto: sun8i-ss - really disable hash on A80
  - hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER
  - hwrng: cavium - Check health status while reading random data
  - selinux: check return value of sel_make_avc_files
  - regulator: qcom_smd: fix for_each_child.cocci warnings
  - PCI: xgene: Revert "PCI: xgene: Fix IB window setup"
  - PCI: pciehp: Clear cmd_busy bit in polling mode
  - drm/i915/gem: add missing boundary check in vm_access
  - brcmfmac: pcie: Fix crashes due to early IRQs
  - brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio
  - brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path
  - brcmfmac: firmware: Allocate space for default boardrev in nvram
  - xtensa: fix xtensa_wsr always writing 0
  - xtensa: fix stop_machine_cpuslocked call in patch_text
  - media: davinci: vpif: fix unbalanced runtime PM enable
  - media: davinci: vpif: fix unbalanced runtime PM get
  - media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC
  - DEC: Limit PMAX memory probing to R3k systems
  - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete()
  - crypto: rsa-pkcs1pad - restore signature length check
  - crypto: rsa-pkcs1pad - correctly get hash from source scatterlist
  - crypto: rsa-pkcs1pad - only allow with rsa
  - exec: Force single empty string when argv is empty
  - lib/raid6/test: fix multiple definition linking error
  - thermal: int340x: Increase bitmap size
  - pstore: Don't use semaphores in always-atomic-context code
  - carl9170: fix missing bit-wise or operator for tx_params
  - mgag200 fix memmapsl configuration in GCTL6 register
  - ARM: dts: exynos: add missing HDMI supplies on SMDK5420
  - ARM: dts: exynos: add missing HDMI supplies on SMDK5250
  - ARM: dts: exynos: fix UART3 pins configuration in Exynos5250
  - ARM: dts: at91: sama5d2: Fix PMERRLOC resource size
  - video: fbdev: atari: Atari 2 bpp (STe) palette bugfix
  - video: fbdev: sm712fb: Fix crash in smtcfb_read()
  - drm/edid: check basic audio support on CEA extension block
  - block: limit request dispatch loop duration
  - mailbox: tegra-hsp: Flush whole channel
  - ext4: fix fs corruption when tring to remove a non-empty directory with IO error
  - ext4: fix ext4_fc_stats trace point
  - coredump: Also dump first pages of non-executable ELF libraries
  - ACPI: properties: Consistently return -ENOENT if there are no more references
  - arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs
  - arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs
  - arm64: dts: ti: k3-am65: Fix gic-v3 compatible regs
  - arm64: signal: nofpsimd: Do not allocate fp/simd context when not available
  - udp: call udp_encap_enable for v6 sockets when enabling encap
  - powerpc/kvm: Fix kvm_use_magic_page
  - can: isotp: sanitize CAN ID checks in isotp_bind()
  - drbd: fix potential silent data corruption
  - dm integrity: set journal entry unused when shrinking device
  - mm/kmemleak: reset tag when compare object pointer
  - mm,hwpoison: unmap poisoned page before invalidation
  - Revert "mm: madvise: skip unmapped vma holes passed to process_madvise"
  - mm: madvise: return correct bytes advised with process_madvise
  - mm: madvise: skip unmapped vma holes passed to process_madvise
  - ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020
  - ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
  - ALSA: hda: Avoid unsol event during RPM suspending
  - ALSA: cs4236: fix an incorrect NULL check on list iterator
  - cifs: fix NULL ptr dereference in smb2_ioctl_query_info()
  - cifs: prevent bad output lengths in smb2_ioctl_query_info()
  - Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads"
  - riscv: Increase stack size under KASAN
  - riscv: Fix fill_callchain return value
  - qed: display VF trust config
  - scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands
  - mempolicy: mbind_range() set_policy() after vma_merge()
  - mm: invalidate hwpoison page cache page in fault path
  - mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node
  - mtd: rawnand: protect access to rawnand devices while in suspend
  - spi: mxic: Fix the transmit path
  - pinctrl: samsung: drop pin banks references on error paths
  - remoteproc: Fix count check in rproc_coredump_write()
  - f2fs: fix to do sanity check on .cp_pack_total_block_count
  - f2fs: quota: fix loop condition at f2fs_quota_sync()
  - f2fs: fix to unlock page correctly in error path of is_alive()
  - NFSD: prevent integer overflow on 32 bit systems
  - NFSD: prevent underflow in nfssvc_decode_writeargs()
  - SUNRPC: avoid race between mod_timer() and del_timer_sync()
  - HID: intel-ish-hid: Use dma_alloc_coherent for firmware update
  - firmware: stratix10-svc: add missing callback parameter on RSU
  - Documentation: update stable tree link
  - Documentation: add link to stable release candidate tree
  - KEYS: fix length validation in keyctl_pkey_params_get_2()
  - clk: uniphier: Fix fixed-rate initialization
  - greybus: svc: fix an error handling bug in gb_svc_hello()
  - iio: inkern: make a best effort on offset calculation
  - iio: inkern: apply consumer scale when no channel scale is available
  - iio: inkern: apply consumer scale on IIO_VAL_INT cases
  - iio: afe: rescale: use s64 for temporary scale calculations
  - coresight: Fix TRCCONFIGR.QE sysfs interface
  - mei: avoid iterator usage outside of list_for_each_entry
  - mei: me: add Alder Lake N device id.
  - xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx()
  - xhci: make xhci_handshake timeout for xhci_reset() adjustable
  - xhci: fix runtime PM imbalance in USB2 resume
  - xhci: fix garbage USBSTS being logged in some cases
  - USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c
  - virtio-blk: Use blk_validate_block_size() to validate block size
  - tpm: fix reference counting for struct tpm_chip
  - iommu/iova: Improve 32-bit free space estimate
  - locking/lockdep: Avoid potential access of invalid memory in lock_class
  - net: dsa: microchip: add spi_device_id tables
  - Input: zinitix - do not report shadow fingers
  - spi: Fix erroneous sgs value with min_t()
  - Revert "gpio: Revert regression in sysfs-gpio (gpiolib.c)"
  - net:mcf8390: Use platform_get_irq() to get the interrupt
  - spi: Fix invalid sgs value
  - gpio: Revert regression in sysfs-gpio (gpiolib.c)
  - ethernet: sun: Free the coherent when failing in probing
  - tools/virtio: fix virtio_test execution
  - vdpa/mlx5: should verify CTRL_VQ feature exists for MQ
  - virtio_console: break out of buf poll on remove
  - ARM: mstar: Select HAVE_ARM_ARCH_TIMER
  - xfrm: fix tunnel model fragmentation behavior
  - HID: logitech-dj: add new lightspeed receiver id
  - hv: utils: add PTP_1588_CLOCK to Kconfig to fix build
  - USB: serial: simple: add Nokia phone driver
  - USB: serial: pl2303: add IBM device IDs


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.43.0.72
changelog:
  - vt: drop old FONT ioctls
  - genirq: Take the proposed affinity at face value if force==true
  - irqchip/gic-v3: Always trust the managed affinity provided by the core code
  - genirq: Always limit the affinity to online CPUs
  - genirq/msi: Shutdown managed interrupts with unsatifiable affinities
  - sign-file: Support SM signature
  - arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory zones


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.45.0.73
changelog:
  - powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit
  - Revert "powerpc: Fix virt_addr_valid() check"
  - mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning
  - irqchip/gic, gic-v3: Prevent GSI to SGI translations
  - Drivers: hv: vmbus: Replace smp_store_mb() with virt_store_mb()
  - arm64: module: remove (NOLOAD) from linker script
  - selftests: cgroup: Test open-time cgroup namespace usage for migration checks
  - selftests: cgroup: Test open-time credential usage for migration checks
  - selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644
  - selftests/cgroup: Fix build on older distros
  - mm: don't skip swap entry even if zap_details specified
  - ubsan: remove CONFIG_UBSAN_OBJECT_SIZE
  - dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error"
  - tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts
  - tools build: Filter out options and warnings not supported by clang
  - perf python: Fix probing for some clang command line options
  - perf build: Don't use -ffat-lto-objects in the python feature test when building with clang-13
  - drm/amdkfd: Create file descriptor after client is added to smi_clients list
  - drm/nouveau/pmu: Add missing callbacks for Tegra devices
  - drm/amdgpu/smu10: fix SoC/fclk units in auto mode
  - irqchip/gic-v3: Fix GICR_CTLR.RWP polling
  - perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator
  - ata: sata_dwc_460ex: Fix crash due to OOB write
  - gpio: Restrict usage of GPIO chip irq members before initialization
  - RDMA/hfi1: Fix use-after-free bug for mm struct
  - arm64: patch_text: Fixup last cpu should be master
  - btrfs: prevent subvol with swapfile from being deleted
  - btrfs: fix qgroup reserve overflow the qgroup limit
  - x86/speculation: Restore speculation related MSRs during S3 resume
  - x86/pm: Save the MSR validity status at context setup
  - mm/mempolicy: fix mpol_new leak in shared_policy_replace
  - mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
  - lz4: fix LZ4_decompress_safe_partial read out of bound
  - mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete
  - mmc: mmci: stm32: correctly check all elements of sg list
  - Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning"
  - arm64: Add part number for Arm Cortex-A78AE
  - perf session: Remap buf if there is no space for event
  - perf tools: Fix perf's libperf_print callback
  - perf: arm-spe: Fix perf report --mem-mode
  - iommu/omap: Fix regression in probe for NULL pointer dereference
  - SUNRPC: svc_tcp_sendmsg() should handle errors from xdr_alloc_bvec()
  - SUNRPC: Handle low memory situations in call_status()
  - SUNRPC: Handle ENOMEM in call_transmit_status()
  - io_uring: don't touch scm_fp_list after queueing skb
  - drbd: Fix five use after free bugs in get_initial_state
  - bpf: Support dual-stack sockets in bpf_tcp_check_syncookie
  - spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op()
  - qede: confirm skb is allocated before using
  - net: phy: mscc-miim: reject clause 45 register accesses
  - rxrpc: fix a race in rxrpc_exit_net()
  - net: openvswitch: fix leak of nested actions
  - net: openvswitch: don't send internal clone attribute to the userspace.
  - ice: synchronize_rcu() when terminating rings
  - ipv6: Fix stats accounting in ip6_pkt_drop
  - ice: Do not skip not enabled queues in ice_vc_dis_qs_msg
  - ice: Set txq_teid to ICE_INVAL_TEID on ring creation
  - dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe
  - IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition
  - RDMA/mlx5: Don't remove cache MRs when a delay is needed
  - sfc: Do not free an empty page_ring
  - bnxt_en: reserve space inside receive page for skb_shared_info
  - drm/imx: Fix memory leak in imx_pd_connector_get_modes
  - drm/imx: imx-ldb: Check for null pointer after calling kmemdup
  - net: stmmac: Fix unset max_speed difference between DT and non-DT platforms
  - net: ipv4: fix route with nexthop object delete warning
  - ice: Clear default forwarding VSI during VSI release
  - net/tls: fix slab-out-of-bounds bug in decrypt_internal
  - scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
  - Drivers: hv: vmbus: Fix potential crash on module unload
  - drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()
  - Revert "hv: utils: add PTP_1588_CLOCK to Kconfig to fix build"
  - mm: fix race between MADV_FREE reclaim and blkdev direct IO read
  - parisc: Fix patch code locking and flushing
  - parisc: Fix CPU affinity for Lasi, WAX and Dino chips
  - NFS: Avoid writeback threads getting stuck in mempool_alloc()
  - NFS: nfsiod should not block forever in mempool_alloc()
  - SUNRPC: Fix socket waits for write buffer space
  - jfs: prevent NULL deref in diFree
  - virtio_console: eliminate anonymous module_init & module_exit
  - serial: samsung_tty: do not unlock port->lock for uart_write_wakeup()
  - x86/Kconfig: Do not allow CONFIG_X86_X32_ABI=y with llvm-objcopy
  - NFS: swap-out must always use STABLE writes.
  - NFS: swap IO handling is slightly different for O_DIRECT IO
  - SUNRPC: remove scheduling boost for "SWAPPER" tasks.
  - SUNRPC/xprt: async tasks mustn't block waiting for memory
  - SUNRPC/call_alloc: async tasks mustn't block waiting for memory
  - clk: Enforce that disjoints limits are invalid
  - clk: ti: Preserve node in ti_dt_clocks_register()
  - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32
  - NFSv4: Protect the state recovery thread against direct reclaim
  - NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify()
  - w1: w1_therm: fixes w1_seq for ds28ea00 sensors
  - staging: wfx: fix an error handling in wfx_init_common()
  - phy: amlogic: meson8b-usb2: Use dev_err_probe()
  - staging: vchiq_core: handle NULL result of find_service_by_handle
  - clk: si5341: fix reported clk_rate when output divider is 2
  - minix: fix bug when opening a file with O_DIRECT
  - init/main.c: return 1 from handled __setup() functions
  - ceph: fix memory leak in ceph_readdir when note_last_dentry returns error
  - netlabel: fix out-of-bounds memory accesses
  - Bluetooth: Fix use after free in hci_send_acl
  - MIPS: ingenic: correct unit node address
  - xtensa: fix DTC warning unit_address_format
  - usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm
  - net: sfp: add 2500base-X quirk for Lantech SFP module
  - net: limit altnames to 64k total
  - net: account alternate interface name memory
  - can: isotp: set default value for N_As to 50 micro seconds
  - scsi: libfc: Fix use after free in fc_exch_abts_resp()
  - powerpc/secvar: fix refcount leak in format_show()
  - MIPS: fix fortify panic when copying asm exception handlers
  - PCI: endpoint: Fix misused goto label
  - bnxt_en: Eliminate unintended link toggle during FW reset
  - Bluetooth: use memset avoid memory leaks
  - Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg}
  - tuntap: add sanity checks about msg_controllen in sendmsg
  - macvtap: advertise link netns via netlink
  - mips: ralink: fix a refcount leak in ill_acc_of_setup()
  - net/smc: correct settings of RMB window update limit
  - scsi: hisi_sas: Free irq vectors in order for v3 HW
  - scsi: aha152x: Fix aha152x_setup() __setup handler return value
  - mt76: mt7615: Fix assigning negative values to unsigned variable
  - scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req()
  - scsi: pm8001: Fix tag leaks on error
  - scsi: pm8001: Fix task leak in pm8001_send_abort_all()
  - scsi: pm8001: Fix pm8001_mpi_task_abort_resp()
  - scsi: pm8001: Fix pm80xx_pci_mem_copy() interface
  - drm/amdkfd: make CRAT table missing message informational only
  - dm ioctl: prevent potential spectre v1 gadget
  - ipv4: Invalidate neighbour for broadcast address upon address addition
  - iwlwifi: mvm: Correctly set fragmented EBS
  - power: supply: axp288-charger: Set Vhold to 4.4V
  - PCI: pciehp: Add Qualcomm quirk for Command Completed erratum
  - tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH.
  - PCI: endpoint: Fix alignment fault error in copy tests
  - usb: ehci: add pci device support for Aspeed platforms
  - iommu/arm-smmu-v3: fix event handling soft lockup
  - PCI: aardvark: Fix support for MSI interrupts
  - drm/amdgpu: Fix recursive locking warning
  - powerpc: Set crashkernel offset to mid of RMA region
  - ipv6: fix kabi for mc_forwarding in struct ipv6_devconf
  - ipv6: make mc_forwarding atomic
  - libbpf: Fix build issue with llvm-readelf
  - cfg80211: don't add non transmitted BSS to 6GHz scanned channels
  - mt76: dma: initialize skip_unmap in mt76_dma_rx_fill
  - power: supply: axp20x_battery: properly report current when discharging
  - scsi: bfa: Replace snprintf() with sysfs_emit()
  - scsi: mvsas: Replace snprintf() with sysfs_emit()
  - bpf: Make dst_port field in struct bpf_sock 16-bit wide
  - ath11k: mhi: use mhi_sync_power_up()
  - ath11k: fix kernel panic during unload/load ath11k modules
  - powerpc: dts: t104xrdb: fix phy type for FMAN 4/5
  - ptp: replace snprintf with sysfs_emit
  - usb: gadget: tegra-xudc: Fix control endpoint's definitions
  - usb: gadget: tegra-xudc: Do not program SPARAM
  - drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj
  - drm/amd/display: Add signal type check when verify stream backends same
  - ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
  - drm: Add orientation quirk for GPD Win Max
  - KVM: x86/emulator: Emulate RDPID only if it is enabled in guest
  - KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs
  - rtc: wm8350: Handle error for wm8350_register_irq
  - gfs2: gfs2_setattr_size error path fix
  - gfs2: Fix gfs2_release for non-writers regression
  - gfs2: Check for active reservation in gfs2_release
  - xen/blkfront: force data bouncing when backend is untrusted
  - xen/netfront: force data bouncing when backend is untrusted
  - xen/netfront: fix leaking data in shared pages
  - xen/blkfront: fix leaking data in shared pages
  - netfilter: nf_tables: stricter validation of element data
  - xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses()
  - tmpfs: fix the issue that the mount and remount results are inconsistent.
  - tmpfs: fix undefined-behaviour in shmem_reconfigure()
  - mm/filemap: fix UAF in find_lock_entries
  - shmem: allow reporting fanotify events with file handles on tmpfs
  - fs: introduce a wrapper uuid_to_fsid()
  - Revert "iommu: handle page response timeout"
  - mm/filemap: fix that first page is not mark accessed in filemap_read()
  - block: don't use cmpxchg64() on 32-bit platform
  - block: fix that iostat can show huge wait time
  - block: fix sleeping function called from invalid context in part_get_stat_info()
  - block: fix kabi broken in struct hd_struct
  - blk-mq: fix kabi broken in struct request
  - block: update nsecs[] in part_stat_show() and diskstats_show()
  - blk-throttle: fix io hung due to configuration updates
  - kabi: deduplication friendly structs


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.46.0.74
changelog:
  - KEYS: Fix mistaken sizeof call in pgp_key_generate_id
  - KEYS: Add safe guard against faulty PGP key
  - KEYS: Fix error path return value in pgp_generate_fingerprint
  - block: fix mismatch size for flush_rq
  - crypto: hisilicon/sec - don't sleep when in softirq
  - xen/arm: Fix race in RB-tree based P2M accounting
  - nbd: fix io hung while disconnecting device
  - nbd: don't clear 'NBD_CMD_INFLIGHT' flag if request is not completed
  - filemap: Correct the conditions for marking a folio as accessed
  - Revert "mm/filemap: fix that first page is not mark accessed in filemap_read()"
  - net: rose: fix UAF bugs caused by timer handler
  - nbd: fix race between nbd_alloc_config() and module removal
  - nbd: call genl_unregister_family() first in nbd_cleanup()
  - openeuler_defconfig: Enable SENSORS_ZHAOXIN_CPUTEMP as module by default
  - Driver for Zhaoxin CPU core temperature monitoring
  - scsi: iscsi: fix kabi broken in struct iscsi_transport
  - scsi: iscsi: fix kabi broken in struct iscsi_cls_conn
  - scsi: iscsi: Fix unbound endpoint error handling
  - scsi: iscsi: Fix endpoint reuse regression
  - dma-direct: avoid redundant memory sync for swiotlb
  - timers: Fix warning condition in __run_timers()
  - i2c: pasemi: Wait for write xfers to finish
  - smp: Fix offline cpu check in flush_smp_call_function_queue()
  - dm integrity: fix memory corruption when tag_size is less than digest size
  - ARM: davinci: da850-evm: Avoid NULL pointer dereference
  - tick/nohz: Use WARN_ON_ONCE() to prevent console saturation
  - genirq/affinity: Consider that CPUs on nodes can be unbalanced
  - drm/amdgpu: Enable gfxoff quirk on MacBook Pro
  - drm/amd/display: don't ignore alpha property on pre-multiplied mode
  - ipv6: fix panic when forwarding a pkt with no in6 dev
  - nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size
  - ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
  - ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers
  - ALSA: hda/realtek: Add quirk for Clevo PD50PNT
  - btrfs: mark resumed async balance as writing
  - btrfs: fix root ref counts in error handling in btrfs_get_root_ref
  - ath9k: Fix usage of driver-private space in tx_info
  - ath9k: Properly clear TX status area before reporting to mac80211
  - gcc-plugins: latent_entropy: use /dev/urandom
  - memory: renesas-rpc-if: fix platform-device leak in error path
  - KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded
  - mm: kmemleak: take a full lowmem check in kmemleak_*_phys()
  - mm: fix unexpected zeroed page mapping with zram swap
  - mm, page_alloc: fix build_zonerefs_node()
  - perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant
  - drivers: net: slip: fix NPD bug in sl_tx_timeout()
  - scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan
  - scsi: mvsas: Add PCI ID of RocketRaid 2640
  - drm/amd/display: Fix allocate_mst_payload assert on resume
  - drm/amd/display: Revert FEC check in validation
  - myri10ge: fix an incorrect free for skb in myri10ge_sw_tso
  - net: usb: aqc111: Fix out-of-bounds accesses in RX fixup
  - net: axienet: setup mdio unconditionally
  - tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry
  - arm64: alternatives: mark patch_alternative() as `noinstr`
  - regulator: wm8994: Add an off-on delay for WM8994 variant
  - gpu: ipu-v3: Fix dev_dbg frequency output
  - ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs
  - net: micrel: fix KS8851_MLL Kconfig
  - scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024
  - scsi: lpfc: Fix queue failures when recovering from PCI parity error
  - scsi: target: tcmu: Fix possible page UAF
  - Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer
  - drm/amdkfd: Check for potential null return of kmalloc_array()
  - drm/amdgpu/vcn: improve vcn dpg stop procedure
  - drm/amdkfd: Fix Incorrect VMIDs passed to HWS
  - drm/amd/display: Update VTEM Infopacket definition
  - drm/amd/display: FEC check in timing validation
  - drm/amd/display: fix audio format not updated after edid updated
  - btrfs: do not warn for free space inode in cow_file_range
  - btrfs: fix fallocate to use file_modified to update permissions consistently
  - drm/amd: Add USBC connector ID
  - net: bcmgenet: Revert "Use stronger register read/writes to assure ordering"
  - dm mpath: only use ktime_get_ns() in historical selector
  - cifs: potential buffer overflow in handling symlinks
  - nfc: nci: add flush_workqueue to prevent uaf
  - perf tools: Fix misleading add event PMU debug message
  - testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set
  - sctp: Initialize daddr on peeled off socket
  - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart
  - scsi: iscsi: Fix offload conn cleanup when iscsid restarts
  - scsi: iscsi: Move iscsi_ep_disconnect()
  - scsi: iscsi: Fix in-kernel conn failure handling
  - scsi: iscsi: Rel ref after iscsi_lookup_endpoint()
  - scsi: iscsi: Use system_unbound_wq for destroy_work
  - scsi: iscsi: Force immediate failure during shutdown
  - scsi: iscsi: Stop queueing during ep_disconnect
  - scsi: pm80xx: Enable upper inbound, outbound queues
  - scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63
  - net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
  - drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init()
  - drm/msm: Fix range size vs end confusion
  - cfg80211: hold bss_lock while updating nontrans_list
  - net/sched: taprio: Check if socket flags are valid
  - net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link
  - net: dsa: felix: suppress -EPROBE_DEFER errors
  - net/sched: fix initialization order when updating chain 0 head
  - mlxsw: i2c: Fix initialization error flow
  - net: mdio: Alphabetically sort header inclusion
  - gpiolib: acpi: use correct format characters
  - veth: Ensure eth header is in skb's linear part
  - SUNRPC: Fix the svc_deferred_event trace class
  - media: rockchip/rga: do proper error checking in probe
  - firmware: arm_scmi: Fix sorting of retrieved clock rates
  - memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe
  - drm/msm: Add missing put_task_struct() in debugfs path
  - btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups()
  - ACPI: processor idle: Check for architectural support for LPI
  - cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function
  - drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.47.0.75
changelog:
  - lockdown: Fix kexec lockdown bypass with ima policy
  - fbmem: Check virtual screen sizes in fb_set_var()
  - fbcon: Prevent that screen size is smaller than font size
  - fbcon: Disallow setting font bigger than screen size
  - inotify: show inotify mask flags in proc fdinfo
  - block: prevent lockdep false positive warning about 'bd_mutex'
  - block: fix that part scan is disabled in device_add_disk()
  - block: Fix warning in bd_link_disk_holder()
  - ucounts: add missing data type changes
  - bpf: Don't redirect packets with invalid pkt_len
  - Revert "net: micrel: fix KS8851_MLL Kconfig"
  - block/compat_ioctl: fix range check in BLKGETSIZE
  - staging: ion: Prevent incorrect reference counting behavour
  - spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller
  - can: isotp: stop timeout monitoring when no first frame was sent
  - ext4: force overhead calculation if the s_overhead_cluster makes no sense
  - ext4: fix overhead calculation to account for the reserved gdt blocks
  - ext4, doc: fix incorrect h_reserved size
  - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
  - ext4: fix fallocate to use file_modified to update permissions consistently
  - perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event
  - powerpc/perf: Fix power9 event alternatives
  - drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
  - KVM: PPC: Fix TCE handling for VFIO
  - drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare
  - drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised
  - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled
  - sched/pelt: Fix attach_entity_load_avg() corner case
  - arm_pmu: Validate single/group leader events
  - ARC: entry: fix syscall_trace_exit argument
  - e1000e: Fix possible overflow in LTR decoding
  - ASoC: soc-dapm: fix two incorrect uses of list iterator
  - gpio: Request interrupts after IRQ is initialized
  - openvswitch: fix OOB access in reserve_sfa_size()
  - xtensa: fix a7 clobbering in coprocessor context load/store
  - xtensa: patch_text: Fixup last cpu should be master
  - net: atlantic: invert deep par in pm functions, preventing null derefs
  - dma: at_xdmac: fix a missing check on list iterator
  - ata: pata_marvell: Check the 'bmdma_addr' beforing reading
  - mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove()
  - mm, hugetlb: allow for "high" userspace addresses
  - EDAC/synopsys: Read the error count from the correct register
  - nvme-pci: disable namespace identifiers for Qemu controllers
  - nvme: add a quirk to disable namespace identifiers
  - stat: fix inconsistency between struct stat and struct compat_stat
  - scsi: qedi: Fix failed disconnect handling
  - net: macb: Restart tx only if queue pointer is lagging
  - drm/msm/mdp5: check the return of kzalloc()
  - dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info()
  - brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant
  - mt76: Fix undefined behavior due to shift overflowing the constant
  - net: atlantic: Avoid out-of-bounds indexing
  - cifs: Check the IOCB_DIRECT flag, not O_DIRECT
  - vxlan: fix error return code in vxlan_fdb_append
  - arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes
  - ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant
  - platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative
  - reset: tegra-bpmp: Restore Handle errors in BPMP response
  - ARM: vexpress/spc: Avoid negative array index when !SMP
  - arm64: mm: fix p?d_leaf()
  - arm64/mm: Remove [PUD|PMD]_TABLE_BIT from [pud|pmd]_bad()
  - selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets
  - dmaengine: idxd: add RO check for wq max_transfer_size write
  - dmaengine: idxd: add RO check for wq max_batch_size write
  - net: stmmac: Use readl_poll_timeout_atomic() in atomic state
  - netlink: reset network and mac headers in netlink_dump()
  - ipv6: fix kabi for ip6_rt_gc_expire in struct netns_ipv6
  - ipv6: make ip6_rt_gc_expire an atomic_t
  - l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu
  - net/sched: cls_u32: fix possible leak in u32_init_knode()
  - ip6_gre: Fix skb_under_panic in __gre6_xmit()
  - ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit()
  - net/packet: fix packet_sock xmit return value checking
  - net/smc: Fix sock leak when release after smc_shutdown()
  - rxrpc: Restore removed timer deletion
  - igc: Fix BUG: scheduling while atomic
  - igc: Fix infinite loop in release_swfw_sync
  - esp: limit skb_page_frag_refill use to a single page
  - spi: spi-mtk-nor: initialize spi controller after resume
  - dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources
  - dmaengine: imx-sdma: Fix error checking in sdma_event_remap
  - ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use
  - ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component
  - ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek
  - ALSA: hda/realtek: Add quirk for Clevo NP70PNP
  - ALSA: usb-audio: Clear MIDI port active flag after draining
  - gfs2: assign rgrp glock before compute_bitstructs
  - perf tools: Fix segfault accessing sample_id xyarray
  - tracing: Dump stacktrace trigger to the corresponding instance
  - mm: page_alloc: fix building error on -Werror=array-compare
  - etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.48.0.76
changelog:
  - ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr
  - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup()
  - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
  - jbd2: Fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted
  - RDMA/hns: Recover 1bit-ECC error of RAM on chip
  - RDMA/hns: Refactor the abnormal interrupt handler function
  - RDMA/hns: Fix incorrect clearing of interrupt status register
  - RDMA/hns: Fix the wrong type of return value of the interrupt handler
  - RDMA/hns: Remove unused abnormal interrupt of type RAS
  - ext4: Fix race when reusing xattr blocks
  - ext4: Unindent codeblock in ext4_xattr_block_set()
  - ext4: Remove EA inode entry from mbcache on inode eviction
  - mbcache: Add functions to delete entry if unused
  - mbcache: Don't reclaim used entries
  - md/raid6: refactor raid5_read_one_chunk
  - md/raid10: enable io accounting
  - md/raid1: enable io accounting
  - md/raid1: rename print_msg with r1bio_existed
  - md/raid5: avoid redundant bio clone in raid5_read_one_chunk
  - md: add io accounting for raid0 and raid5
  - mmc: rtsx: add 74 Clocks in power on flow
  - PCI: aardvark: Fix reading MSI interrupt number
  - PCI: aardvark: Clear all MSIs at setup
  - dm: interlock pending dm_io and dm_wait_for_bios_completion
  - rcu: Apply callbacks processing time limit only on softirq
  - rcu: Fix callbacks processing time limit retaining cond_resched()
  - KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised
  - KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs
  - KVM: x86: Do not change ICR on write to APIC_SELF_IPI
  - x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume
  - net/mlx5: Fix slab-out-of-bounds while reading resource dump menu
  - kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU
  - net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter()
  - btrfs: always log symlinks in full mode
  - smsc911x: allow using IRQ0
  - selftests: ocelot: tc_flower_chains: specify conform-exceed action for policer
  - bnxt_en: Fix unnecessary dropping of RX packets
  - bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag
  - selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational
  - net: emaclite: Add error handling for of_address_to_resource()
  - net: cpsw: add missing of_node_put() in cpsw_probe_dt()
  - net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux()
  - net: dsa: mt7530: add missing of_node_put() in mt7530_setup()
  - net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init()
  - NFSv4: Don't invalidate inode attributes on delegation return
  - RDMA/siw: Fix a condition race issue in MPA request processing
  - selftests/seccomp: Don't call read() on TTY from background pgrp
  - net/mlx5: Avoid double clear or set of sync reset requested
  - net/mlx5e: Fix the calling of update_buffer_lossy() API
  - net/mlx5e: CT: Fix queued up restore put() executing after relevant ft release
  - net/mlx5e: Fix trust state reset in reload
  - ASoC: dmaengine: Restore NULL prepare_slave_config() callback
  - hwmon: (adt7470) Fix warning on module removal
  - gpio: pca953x: fix irq_stat not updated when irq is disabled (irq_mask not set)
  - can: grcan: only use the NAPI poll budget for RX
  - can: grcan: grcan_probe(): fix broken system id check for errata workaround needs
  - can: grcan: use ofdev->dev when allocating DMA memory
  - can: isotp: remove re-binding of bound socket
  - can: grcan: grcan_close(): fix deadlock
  - s390/dasd: Fix read inconsistency for ESE DASD devices
  - s390/dasd: Fix read for ESE with blksize < 4k
  - s390/dasd: prevent double format of tracks for ESE devices
  - s390/dasd: fix data corruption for ESE devices
  - ASoC: meson: Fix event generation for AUI CODEC mux
  - ASoC: meson: Fix event generation for G12A tohdmi mux
  - ASoC: meson: Fix event generation for AUI ACODEC mux
  - ASoC: wm8958: Fix change notifications for DSP controls
  - ASoC: da7219: Fix change notifications for tone generator frequency
  - genirq: Synchronize interrupt thread startup
  - net: stmmac: disable Split Header (SPH) for Intel platforms
  - firewire: core: extend card->lock in fw_core_handle_bus_reset
  - firewire: remove check of list iterator against head past the loop body
  - firewire: fix potential uaf in outbound_phy_packet_callback()
  - Revert "SUNRPC: attempt AF_LOCAL connect on setup"
  - drm/amd/display: Avoid reading audio pattern past AUDIO_CHANNELS_COUNT
  - iommu/vt-d: Calculate mask for non-aligned flushes
  - KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id
  - gpiolib: of: fix bounds check for 'gpio-reserved-ranges'
  - mmc: core: Set HS clock speed before sending HS CMD13
  - mmc: sdhci-msm: Reset GCC_SDCC_BCR register for SDHC
  - ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes
  - ALSA: hda/realtek: Add quirk for Yoga Duet 7 13ITL6 speakers
  - parisc: Merge model and model name into one line in /proc/cpuinfo
  - MIPS: Fix CP0 counter erratum detection for R4k CPUs
  - perf symbol: Remove arch__symbols__fixup_end()
  - tty: n_gsm: fix software flow control handling
  - tty: n_gsm: fix incorrect UA handling
  - tty: n_gsm: fix reset fifo race condition
  - tty: n_gsm: fix wrong command frame length field encoding
  - tty: n_gsm: fix wrong command retry handling
  - tty: n_gsm: fix missing explicit ldisc flush
  - tty: n_gsm: fix wrong DLCI release order
  - tty: n_gsm: fix insufficient txframe size
  - netfilter: nft_socket: only do sk lookups when indev is available
  - tty: n_gsm: fix malformed counter for out of frame data
  - tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2
  - tty: n_gsm: fix mux cleanup after unregister tty device
  - tty: n_gsm: fix decoupled mux resource
  - tty: n_gsm: fix restart handling via CLD command
  - perf symbol: Update symbols__fixup_end()
  - perf symbol: Pass is_kallsyms to symbols__fixup_end()
  - x86/cpu: Load microcode during restore_processor_state()
  - thermal: int340x: Fix attr.show callback prototype
  - net: ethernet: stmmac: fix write to sgmii_adapter_base
  - drm/i915: Fix SEL_FETCH_PLANE_*(PIPE_B+) register addresses
  - kasan: prevent cpu_quarantine corruption when CPU offline and cache shrink occur at same time
  - zonefs: Clear inode information flags on inode creation
  - zonefs: Fix management of open zones
  - powerpc/perf: Fix 32bit compile
  - drivers: net: hippi: Fix deadlock in rr_close()
  - cifs: destage any unwritten data to the server before calling copychunk_write
  - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32
  - ASoC: wm8731: Disable the regulator when probing fails
  - ASoC: Intel: soc-acpi: correct device endpoints for max98373
  - tcp: fix F-RTO may not work correctly when receiving DSACK
  - Revert "ibmvnic: Add ethtool private flag for driver-defined queue limits"
  - ibmvnic: fix miscellaneous checks
  - ixgbe: ensure IPsec VF<->PF compatibility
  - net: fec: add missing of_node_put() in fec_enet_init_stop_mode()
  - bnx2x: fix napi API usage sequence
  - tls: Skip tls_append_frag on zero copy size
  - drm/amd/display: Fix memory leak in dcn21_clock_source_create
  - drm/amdkfd: Fix GWS queue count
  - net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK
  - net: phy: marvell10g: fix return value on error
  - net: bcmgenet: hide status block before TX timestamping
  - clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource()
  - bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create()
  - tcp: make sure treq->af_specific is initialized
  - tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT
  - ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode
  - ip6_gre: Make o_seqno start from 0 in native mode
  - ip_gre: Make o_seqno start from 0 in native mode
  - net/smc: sync err code when tcp connection was refused
  - cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe
  - pinctrl: pistachio: fix use of irq_of_parse_and_map()
  - arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock
  - ARM: dts: imx6ull-colibri: fix vqmmc regulator
  - sctp: check asoc strreset_chunk in sctp_generate_reconf_event
  - wireguard: device: check for metadata_dst with skb_valid_dst()
  - pinctrl: stm32: Keep pinctrl block clock enabled when LEVEL IRQ requested
  - tcp: md5: incorrect tcp_header_len for incoming connections
  - pinctrl: rockchip: fix RK3308 pinmux bits
  - bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook
  - netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion
  - net: dsa: Add missing of_node_put() in dsa_port_link_register_of
  - memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode
  - pinctrl: stm32: Do not call stm32_gpio_get() for edge triggered IRQs in EOI
  - mtd: rawnand: Fix return value check of wait_for_completion_timeout
  - pinctrl: mediatek: moore: Fix build error
  - ipvs: correctly print the memory size of ip_vs_conn_tab
  - ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35
  - ARM: dts: am3517-evm: Fix misc pinmuxing
  - ARM: dts: Fix mmc order for omap3-gta04
  - phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe
  - phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe
  - ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name
  - ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek
  - phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks
  - bus: ti-sysc: Make omap3 gpt12 quirk handling SoC specific
  - ARM: OMAP2+: Fix refcount leak in omap_gic_of_init
  - phy: samsung: exynos5250-sata: fix missing device put in probe error paths
  - phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe
  - ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue
  - USB: Fix xhci event ring dequeue pointer ERDP update issue
  - mtd: rawnand: fix ecc parameters for mt7622
  - iio:imu:bmi160: disable regulator in error path
  - arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards
  - arm64: dts: meson: remove CPU opps below 1GHz for G12B boards
  - video: fbdev: udlfb: properly check endpoint type
  - iocost: don't reset the inuse weight of under-weighted debtors
  - x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests
  - riscv: patch_text: Fixup last cpu should be master
  - hex2bin: fix access beyond string end
  - pinctrl: samsung: fix missing GPIOLIB on ARM64 Exynos config
  - arch_topology: Do not set llc_sibling if llc_id is invalid
  - serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device
  - serial: 8250: Also set sticky MCR bits in console restoration
  - serial: imx: fix overrun interrupts in DMA mode
  - usb: phy: generic: Get the vbus supply
  - usb: cdns3: Fix issue for clear halt endpoint
  - usb: dwc3: gadget: Return proper request status
  - usb: dwc3: core: Only handle soft-reset in DCTL
  - usb: dwc3: core: Fix tx/rx threshold settings
  - usb: dwc3: Try usb-role-switch first in dwc3_drd_init
  - usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind()
  - usb: gadget: uvc: Fix crash when encoding data for usb request
  - usb: typec: ucsi: Fix role swapping
  - usb: typec: ucsi: Fix reuse of completion structure
  - usb: misc: fix improper handling of refcount in uss720_probe()
  - iio: imu: inv_icm42600: Fix I2C init possible nack
  - iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on()
  - iio: dac: ad5446: Fix read_raw not returning set value
  - iio: dac: ad5592r: Fix the missing return value.
  - xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms
  - xhci: stop polling roothubs after shutdown
  - xhci: Enable runtime PM on second Alderlake controller
  - USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions
  - USB: serial: option: add support for Cinterion MV32-WA/MV32-WB
  - USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader
  - USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS
  - USB: quirks: add STRING quirk for VCOM device
  - USB: quirks: add a Realtek card reader
  - usb: mtu3: fix USB 3.0 dual-role-switch from device to host
  - lightnvm: disable the subsystem


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.49.0.77
changelog:
  - netfilter: nf_queue: do not allow packet truncation below transport header offset
  - io_uring: use separate list entry for iopoll requests
  - io_uring: add missing item types for various requests
  - io_uring:drop identity before creating a private one
  - io-wq: Switch io_wqe_worker's fs before releasing request
  - coresight: etm4x: Workaround CPU hung bug on HiSilicon ETM
  - mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic()
  - mm: hugetlb: fix missing cache flush in copy_huge_page_from_user()
  - mm: fix missing cache flush for all tail pages of compound page
  - Bluetooth: Fix the creation of hdev->name
  - arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL
  - nfp: bpf: silence bitwise vs. logical OR warning
  - drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version, environment} types
  - block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit
  - regulator: consumer: Add missing stubs to regulator/consumer.h
  - MIPS: Use address-of operator on section symbols


author: xiechengliang <xiechengliang1@huawei.com> - 1:1.33.1-12
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386


author: chenyanpanHW <chenyanpan@huawei.com> - 6.12-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-CVE-2022-27239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-CVE-2022-29869.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yangyanchao <yangyanchao6@huawei.com> 1.2.0-106
changelog:
  - Type:requirement
  - ID:NA
  - CVE:NA
  - SUG:restart
  - DESC:containerd:vendor:add some symbol to support riscv


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-107
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix, include
         1. check task list to avoid unnecessary cleanup.
         2. fix dead loop
         3. cleanup dangling shim by brand new context
         4. fix potential panic for task in unknown state


author: songyanting<songyanting@huawei.com> - 1.2.0-300
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix, include
         1. add check in spec
         2. kill container init process if runc start returns error
         3. fix containerd-shim residual when kill containerd durin
         4. fix deadlock on commit error
         5. backport upstream & ttrpc patches
         6. fix exec event missing due to pid reuse
         7. fix dm left when pause container and kill shim
         8. add CGO security build options
         9. fix start container failed with id exists
        10. drop opt package
        11. fix race access for mobySubscribed
        12. improve log for debugging
        13. reduce permission for bundle dir
        14. fix publish command wait block forever


author: Vanient<xiadanni1@huawei.com> - 1.2.0-301
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Use fs.RootPath when mounting volumes for bundle dir to fix CVE-2022-23648


author: gaihuiying <gaihuiying1@huawei.com> - 4.12.5-5
changelog:
  - Type:cves
  - ID:CVE-2020-27840 CVE-2021-20277 CVE-2021-20254
  - SUG:NA
  - DESC:fix CVE-2020-27840 CVE-2021-20277 CVE-2021-20254


author: gaihuiying <eaglegai@163.com> - 4.15.3-3
changelog:
  - Type:cves
  - ID:CVE-2022-0336 CVE-2021-44142
  - SUG:NA
  - DESC:backport to fix CVE-2022-0336 CVE-2021-44142


author: xinghe <xinghe2@h-partners.com> - 4.15.3-7
changelog:
  - Type:cves
  - ID:CVE-2022-32746 CVE-2022-2031 CVE-2022-32744 CVE-2022-32742 CVE-2022-32745
  - SUG:NA
  - DESC:fix CVE-2022-32746 CVE-2022-2031 CVE-2022-32744 CVE-2022-32742 CVE-2022-32745


author: yanglu <yanglu72@huawei.com> - 7.77.0-3
changelog:
  - Type:CVE
  - CVE:CVE-2021-22945 CVE-2021-22946 CVE-2021-22947
  - SUG:NA
  - DESC:fix CVE-2021-22945 CVE-2021-22946CVE-2021-22947


author: gaihuiying <eaglegai@163.com> - 7.79.1-4
changelog:
  - Type:cves
  - CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
  - SUG:NA
  - DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776


author: gaoxingwang <gaoxingwang1@huawei.com> - 7.79.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix dict and neg telnet server start fail in upstream testcase


author: gaihuiying <eaglegai@163.com> - 7.79.1-7
changelog:
  - Type:cves
  - CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
  - SUG:NA
  - DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208


author: gaihuiying <eaglegai@163.com> - 7.79.1-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix build error when add --disable-http-auth configure option


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: liulong <liulong20@huawei.com> - 2.82-3
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2020-25681 CVE-2020-25682 CVE-2020-25683 CVE-2020-25684 CVE-2020-25685 CVE-2020-25686 CVE-2020-25687


author: zengwefeng <zwfeng@huawei.com> - 2.82-5
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add missing check for NULL return from allocate_rfd
         Fix DNS reply when asking for DNSSEC


author: gaihuiying <gaihuiying1@huawei.com> - 2.82-7
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: Handle caching with EDNS options better
          Fix to 75e2f0aec33e58ef5b8d4d107d821c215a52827c
          Fix for 12af2b171de0d678d98583e2190789e544440e02
          Fix problem with DNS retries in 2.83 2.84 version
          Simplify preceding fix
          Update to new struct frec fields in conntrack code
          Use the values of min port and max port in TCP connection
          Correct occasional bind dynamic synchronization
          Move fd into frec_src fixes 15b60ddf935a531269bb8c68
          fix CVE-2021-3448


author: xiadanni<xiadanni1@huawei.com> - 18.09.0-114
changelog:
  - Type:bugfix
  - CVE:CVE-2021-21284,CVE-2021-21285
  - SUG:NA
  - DESC:sync bugfix, include:
         1.fix execCommands leak in health-check
         2.check containerd pid before kill it
         3.fix CVE-2021-21284
         4.fix CVE-2021-21285


author: panxiaohe <panxiaohe@huawei.com> - 050-4
changelog:
  - [add] backport patches from upstream
    backport-fix-always-use-mkdir-p.patch
    backport-fix-dracut.sh-omission-is-an-addition-to-other-omiss.patch


author: gaihuiying <eaglegai@163.com> - 2.0.11-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-config file access permisson
         fix ebt_print_error for prints null


author: Jinhua Cao <caojinhua1@huawei.com> - 202002-11
changelog:
  - BaseTools: fix ucs-2 lookup on python3.9
  - BaseTools: Work around array.array.tostring() removal in python3.9


author: chenyanpanHW <chenyanpan@huawei.com> - 4-4
changelog:
  - DESC: delete -S git from 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "efi-rpm-macros-4 base"
  , and delete BuildRequires git


author: gaihuiying <gaihuiying1@huawei.com> - 4-5
changelog:
  - DESC:revert "delete -S git from 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "efi-rpm-macros-4 base"
  , and delete BuildRequires git"


author: jiangheng <jiangheng14@huawei.com> - 1.0.1-10
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:update readme
         fix some bugs
         refactor pkt read send to improve performance
         refactoe kernle event to improve performanc


author: yang_zhuang_zhuang <yangzhuangzhuang1@huawei.com> - 2.27.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolved the problem that a failure message is displayed when the git-daemon package is uninstalled


author: panxiaohe <panxiaohe@huawei.com> - 2.30.0-4
changelog:
  - Fix CVE-2021-29468
  - Add gcc and gettext to BuildRequires
    - necessary for building and msgfmt command


author: weijin deng <weijin.deng@turbolinux.com.cn> - 2.68.1-10
changelog:
  - Type:bugfix
  - DESC:solve glib2 enable "glib2_debug" option causes gnome-calendar reopen
         coredumped in gtk3's _gtk_widget_get_toplevel()


author: Yang Yanchao<yangyanchao6@huawei.com> - 2.34-70
changelog:
  - malloc: Add madvise support for Transparent Huge Pages
  - malloc: Add THP/madvise support for sbrk
  - malloc: Move mmap logic to its own function
  - malloc: Add Huge Page support for mmap
  - malloc: Add Huge Page support to arenas
  - malloc: Move MORECORE fallback mmap to sysmalloc_mmap_fallback
  - malloc: Enable huge page support on main arena


author: Qingqing Li <liqingqing3@huawei.com> - 2.34-74
changelog:
  - libio: Ensure output buffer for wchars bug 28828
  - libio: libio Flush onlu _IO_str_overflow must not return EOF bug 28949
  - linux: Fix _closefrom_fallback iterates until max int bug 28993


author: hanchao <hanchao47@huawei.com> - 1.17.3-2
changelog:
  - Type:CVE
  - CVE:CVE-2022-28327,CVE-2022-24675
  - SUG:NA
  - DESC:fix CVE-2022-28327,CVE-2022-24675
  - fix CVE-2022-28327 CVE-2022-24675


author: hanchao <hanchao47@huawei.com> - 1.17.3-5
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC: fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
  	CVE-2022-30635,CVE-2022-30630,CVE-2022-30632,CVE-2022-28131,
  	CVE-2022-30631,CVE-2022-30629,CVE-2022-30634


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 2.06-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify the file permissions of grub-boot-indeterminate.service and
         10-grub2-logind-service.conf to 644


author: sunhai <sunhai10@huawei.com> - 1:2.06-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix PXE boot in IPv6 network when paring ICMP6_ROUTE_ADVERTISE messages


author: sunhai <sunhai10@huawei.com> - 1:2.06-9
changelog:
  - Type:CVE
  - CVE:CVE-2021-3697 CVE-2022-28735 CVE-2022-28736 CVE-2022-28734 CVE-2022-28733 CVE-2021-3695 CVE-2021-3696
  - SUG:NA
  - DESC:adapts to the open source code for log printing
         libgcrypt: Avoid -Wsign-compare in rijndael do_setkey()
         disk/ldm: Fix resource leak
         io/gzio: Fix possible use of uninitialized variable in huft_build()
         fs/zfs/zfs: Fix possible insecure use of chunk size in zap_leaf_array_get()
         util/grub-mkfont: Fix memory leak in write_font_pf2()
         util/grub-fstest: Fix resource leaks in cmd_cmp()
         util/grub-mkrescue: Fix memory leak in write_part()
         util/grub-install-common: Fix memory leak in copy_all()
         osdep/linux: Fix md array device enumeration
         double grub x86_64-efi mm pool
         net: fix null pointer dereference when parsing ICMP6_ROUTER_ADVERTISE messages
         efinet:Correct closing of SNP protocol
         configure:Fix misspelled variable BUILD_LDFAGS -> BUILD_LDFLAGS
         fix partmap_test failure
         UEFI mode uses /boot/efi/EFI/euleros/user.cfg as password
         util/resolve: Do not read past the end of the array in read_dep_list()
         fs/affs: Fix resource leaks
         Revert iee1275/datetime: Fix off-by-1 error
         commands/search: Fix bug stopping iteration when --no-floppy is used
         mm: Temporarily disable grub_mm_debug while calling grub_vprintf() in grub_printf()
         net: Check against nb->tail in grub_netbuff_pull()
         kern/rescue_parser: Ensure that parser allocated memory is not leaked
         net/net: Fix uninitialized scalar variable
         net/arp: Fix uninitialized scalar variable
         loader/i386/pc/linux: Fix uninitialized scalar variable
         net/bootp: Fix uninitialized scalar variable
         fix CVE-2021-3697 CVE-2022-28735 CVE-2022-28736 CVE-2022-28734 CVE-2022-28733 CVE-2021-3695 CVE-2021-3696


author: fengtao <fengtao40@huawei.com> - 2.04-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix arm64 kernel image not aligned on 64k boundary
         fix grub.patches file format to unix


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-26
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify some file permissions
  strip kernel.exec and lnboot.image


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 2.06-1
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:update to version 2.06
         disable partial grub_func_test cases because they are not supported


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.14-17
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/guile-multilib.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/guile-i18ntest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/guile-threadstest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/guile-2.0.14-gc_pkgconfig_private.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.48-2
changelog:
  - Type:cves
  - ID:CVE-2021-34798 CVE-2021-36160 CVE-2021-40438
  - SUG:restart
  - DESC:fix CVE-2021-34798 CVE-2021-36160 CVE-2021-40438


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.48-3
changelog:
  - Type:cves
  - ID:CVE-2021-40438 CVE-2021-39275
  - SUG:restart
  - DESC:fix CVE-2021-40438 fully and correctly
         fix CVE-2021-39275


author: gaihuiying <eaglegai@163.com> - 2.4.51-4
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-8
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556


author: zhangxiaoyu <zhangxiaoyu58@huawei.com> - 2.0.14-6
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: fix different type convert and add check to arguments


author: zhangxiaoyu <zhangxiaoyu58@huawei.com> - 2.0.14-7
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: fix type convert, add null pointer check, remove unuse macro


author: chenyanpanHW <chenyanpan@huawei.com> - 10.06-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-run-ifdown-on-all-interfaces.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/bugfix-initscripts-add-udev-wait-dependency-for-network.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/bugfix-mod-network-function-when-NM-unmanage-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/bugfix-initscripts-set-PERSISTENT_DHCLIENT-default-to-yes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/bugfix-network-need-chkconfig-on.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/bugfix-restart-network-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/new-network-fork-to-start-dhcp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/exec-udevadm-settle-when-network-start.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/remove-rename_device_lock-when-process-does-not-exis.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenyanpanHW <chenyanpan@huawei.com> - 1.8.7-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/bugfix-add-check-fw-in-entry.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/tests-extensions-add-some-testcases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: duyiwei <duyiwei@kylinos.cn> - 1.8.7-5
changelog:
  - change 
  Requires(post): systemd 
  Requires(preun): systemd 
  Requires(postun): systemd 
   to 
  Requires(post): systemd 
  Requires(preun): systemd 
  Requires(postun): systemd


author: eaglegai <eaglegai@163.com> - 20210722-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport to fix no reply when ping6 from Subnet-Router anycast address


author: zengweifeng <zwfeng@huawei.com> - 20210722-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix ping2 bingding to VRF and address
          Avoid binding to non-VRF
          Fix ARP protocol field for AX.25 and NETROM


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.332-b09.0
changelog:
  - deleted Support-Git-commit-ID-in-the-SOURCE-field-of-the-release.patch
  - deleted 8167014-jdeps-failed-with-Missing-message-warn-skippen-entry.patch
  - deleted fix-wrong-commitID-in-release-file.patch
  - deleted recreate-.java_pid-file-when-deleted-for-attach-mechanism.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8194154.patch
  - modified add-missing-test-case.patch
  - add fix-make-bugs-when-git-and-hg-not-exist.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.342-b07.0
changelog:
  - del 8168926.patch
  - del 8194154.patch
  - del 8202142-jfr-event-io-TestInstrumentation-is-unstable.patch
  - del 8266187_Memory_leak_in_appendBootClassPath.patch
  - del debuginfo.diz-should-not-contain-the-path-after-unzip.patch
  - del fix-make-bugs-when-git-and-hg-not-exist.patch
  - modified 7092821-java.security.Provider.getService-is-synchro.patch
  - modified 8268819-SA-Remove-libthread_db-dependency-on-Linux.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.15.10-0
changelog:
  - modified 8231441-3-AArch64-Initial-SVE-backend-support.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: noah <hedongbo@huawei.com> - 1:18.0.0.37-0.0.ea.rolling
changelog:
  - Update to jdk-18.0.0.0+37
  - adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.0.20-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:support more than one crash kernel regions.
         Fix bugs of unuseable quick kexec on arm64, becaues of arm64-kexec-allocate-memory-space-avoiding-reserved-regions
         excluding QUICK_KEXEC memory region.


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.0.20-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix bug: Filed to generate the vmcore file in the ARM architecture
         Fix bug: Filed to generate the vmcore-dmesg.txt file in the ARM architecture


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:kpatch: update sympos for duplicate symbols in vmlinux
         create-diff-object: fix segment fault when sec2->rela is NULL


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.5-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix "ERROR: util.o: find_local_syms: 185: found duplicate matches for util.c"


author: chengzeruizhi <chengzeruizhi@huawei.com> - 2.0.6-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: add new fields in config v2 and inspect to support modifications on iSulad


author: chenyanpanHW <chenyanpan@huawei.com> - 1.1.3-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-Add-getentropy-emulation-through-syscall.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenyanpanHW <chenyanpan@huawei.com> - 1.16.4-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-evdev-strip-the-device-name-of-format-directives.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git-core


author: yezengruan <yezengruan@huawei.com> - 0.7.3-7
changelog:
  - tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
  - tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
  - tpm2: Restore original value if unmarsalled value was illegal
  - fix CVE-2021-3623


author: imxcc <xingchaochao@huawei.com> - 6.2.0-32
changelog:
  - virQEMUBuildCommandLineJSON: Allow skipping certain keys
  - virQEMUBuildCommandLineJSON: Add possibility for using 'on/off' instead of 'yes/no'
  - util: virqemu: Introduce virQEMUBuildNetdevCommandlineFromJSON
  - util: json: Introduce virJSONValueObjectAppendStringPrintf
  - qemuBuildChannelsCommandLine: Use typecasted switch for channel type
  - qemuBuildChannelsCommandLine: Extract common formatting of 'chardev'
  - qemuBuildChannelChrDeviceStr: Remove formatting of properties for -netdev
  - qemuMonitorJSON(Add|Remove)Netdev: Refactor cleanup
  - qemuBuildHostNetStr: Stop using 'ipv6-net' convenience argument
  - qemu: command: Generate -netdev command line via JSON->cmdline conversion
  - qemuBuildChannelGuestfwdNetdevProps: Convert to generating JSON props
  - qemuMonitorAddNetdev: Convert to the native JSON props object
  - virCommand: Introduce virCommandGetArgList
  - testutilsqemuschema: Introduce testQEMUSchemaValidateCommand
  - testCompareXMLToArgv: Split out preparation and command formatting
  - virQEMUBuildNetdevCommandlineFromJSON: Prepare for quirky 'guestfwd'
  - qemu: Prepare for testing of 'netdev_add' props via qemuxml2argvtest
  - qemuxml2argvtest: Add QAPI/QMP schema validation for -blockdev and -netdev


author: yezengruan <yezengruan@huawei.com> - 6.2.0-33
changelog:
  - qemu: Probe for a few params supported by migrate-set-parameters
  - qemu: Avoid deprecated migrate_set_speed QMP command
  - qemu: Avoid deprecated migrate_set_downtime QMP command
  - qemu: Avoid deprecated query-migrate-cache-size QMP command
  - qemu: Avoid deprecated migrate-set-cache-size QMP command
  - qemu: Track numa-mem-supported machine attribute
  - qemuBuildNumaArgStr: Switch order of if() and for()
  - qemuBuildNumaArgStr: Use modern -numa memdev= if old -numa mem= is unsupported


author: yezengruan <yezengruan@huawei.com> - 6.2.0-34
changelog:
  - Revert libvirt: support aarch64 vtpm with parameter tpm-tis-device
  - qemu: Fix swtpm device with aarch64
  - qemu: Fix libvirt hang due to early TPM device stop
  - qemu_tpm: Move logfile path generation into a separate function
  - qemu_tpm: Generate log file path among with storage path
  - virtpm: Fix @path handling in virTPMEmulatorInit()


author: yezengruan <yezengruan@huawei.com> - 6.2.0-35
changelog:
  - qemuMonitorJSONSetMigrationParams: Take double pointer for @params
  - qemuMonitorJSONAddObject: Take double pointer for @props
  - :qemuMonitorJSONMakeCommandInternal: Clear @arguments when stolen
  - qemuMonitorAddObject: Fix semantics of @alias
  - qemuMonitorAddObject: Refactor cleanup
  - util: json: Replace virJSONValueObjectSteal by virJSONValueObjectRemoveKey
  - qemu: command: Generate commandline of 'masterKey0' secret via JSON
  - qemu: command: Generate commandline of 'sev0' sev-guest object via JSON
  - qemu: command: Generate commandline of iothread objects JSON
  - qemu: capabilities: Introduce QEMU_CAPS_OBJECT_QAPIFIED
  - qemu: monitor: Make wrapping of 'props' of 'object-add' optional
  - qemuMonitorCreateObjectPropsWrap: Open-code in qemuBuildMemoryBackendProps
  - qemu: monitor: Don't add 'props' wrapper if qemu has QEMU_CAPS_OBJECT_QAPIFIED
  - qemu: command: Use JSON for QAPIfied -object directly
  - tests: qemuxml2argv: Validate generation of JSON props for object-add
  - qemu: capabilities: Enable detection of QEMU_CAPS_OBJECT_QAPIFIED


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix heap-use-after-free in xmlXIncludeIncludeNode
         fix stack overflow in xmlDocDumpMemory
         fix stack overflow in htmlDocContentDumpOutput


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix memory leaks in XPointer string-range function
         fix null pointer deref in xmlXPtrRangeInsideFunction
         stop using maxParserDepth in xpath.c
         hardcode maximum XPath recursion depth
         fix XPath recursion limit


author: huangduirong <huangduirong@huawei.com> - 2.9.10-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues, fix null-deref in xmlSchemaGetComponentTargetNs


author: panxiaohe <panxiaohe@huawei.com> - 2.9.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add backport bug fixes.
         work around lxml API abuse
         fix regression in xmlNodeDumpOutputInternal
         fix whitespace when serializing empty HTML documents
         forbid epsilon-reduction of final states
         fix buffering in xmlOutputBufferWrite


author: fuanan <fuanan3@h-partners.com> - 2.9.12-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: fuanan <fuanan3@h-partners.com> - 2.9.12-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: wangfengtu<wangfengtu@huawei.com> - 4.0.3-2022052301
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: do not operate playload and attach cgroup if no controller found


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.15-2
changelog:
  - Fix the systemd service issue about the env variable.
  - Apply the patches from old branch.
  - Adaption the cmake version and integrate into the spec file.


author: bzhaoop <bzhaojyathousandy@gmail.com> - 5.7.34-1
changelog:
  - Bump from 5.7.21 to latest 5.7.34
  - Correct the test steps and options
  - Refactor part of the file structure according to the new packages


author: bzhaoop <bzhaojyathousandy@gmail.com> - 5.7.37-1
changelog:
  - Fix CVE issues for bump to the 5.7.37 version
  - CVE-2022-21245
  - CVE-2022-21270
  - CVE-2022-21303
  - CVE-2022-21304
  - CVE-2022-21344
  - CVE-2022-21367
  - CVE-2021-35624
  - CVE-2021-2356
  - CVE-2021-2011
  - CVE-2021-2010
  - CVE-2021-2007


author: Cui XuCui <cuixucui1@huawei.com> - 1.0.0-8
changelog:
  * Thu Jul 15 2021 zhangzikang <zhangzikang@kylinos.cn> - 1.0.0-7
  - Fix cdrom and cpufreq test failed


author: meitingli <bubble_mt@outlook.com> - 1.1.0-0
changelog:
  - 1. Add support os version: openEuler 22.03LTS
  - 2. Add FC/RAID/keycard/GPU/infiniband testcases
  - 3. Bugfix


author: cuixucui <cuixucui1@h-partners.com> - 1.1.1-0
changelog:
  -1. Reconstruct the log module and rectify the log printing
  -2. Add kabi testcase
  -3. Add driver, driver version, chip and module display to the console
  -4. Add configuration file for testsuite to improve automation rate
  -5. Add oech and oech-server version display
  -6. Add driver information display in hardware test logs


author: cuixucui <cuixucui1@h-partners> - 1.1.1-3
changelog:
  - Fix the problem that the client fails to send messages after the server port is modified
  - Fix the problem that the system test item failed to check the integrity of the software package


author: Noah <hedongbo@huawei.com> - 8u330.1
changelog:
  - change upstream to openeuler
  - rm 0004-Fix-Compilation-Flags.patch
  - rm 0005-fxpackager-extract-jre-accept-symlink.patch
  - rm 0003-fix-cast-between-incompatible-function-types.patch


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: liulong <liulong20@huawei.com> - 2.4.50-5
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224 CVE-2020-36225 CVE-2020-36226 CVE-2020-36227 CVE-2020-36228 CVE-2020-36229 CVE-2020-36230


author: panxiaohe <panxh.life@foxmail.com> - 8.0.0-8
changelog:
  - use lmdb instead of Berkeley DB for package dba
  - update %configure for riscv
  - delete unused rcver


author: xihaochen <xihaochen@huawei.com> - 3.3.1-1
changelog:
  - Type:requirements                                                                                            
  - Id:NA
  - SUG:NA
  - DESC:update python-ldap to 3.3.1


author: shixuantong <shixuantong@h-partners.com> - 3.9.9-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable profile guided optimizations for x86_64 and i686 architectures


author: shixuantong <shixuantong@h-partners.com> - 3.9.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:concurrent.futures.wait() now deduplicates futures given as arg.


author: gaihuiying <eaglegai@163.com> - 1.13.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove buildin key
         add macros to control if key files permissons is 600 or 644
         remove useless BuildRequires:unbound-libs


author: yanglu <yanglu72@h-partners.com> - 1.13.2-5
changelog:
  - Type:cves
  - CVE:CVE-2022-30698 CVE-2022-30699
  - SUG:NA
  - DESC:fix CVE-2022-30698 and CVE-2022-30699


author: yezengruan <yezengruan@huawei.com> - 6.2.0-30
changelog:
  - scsi-bus: fix incorrect call for blk_error_retry_reset_timeout()
  - Revert "monitor: limit io error qmp event to at most once per 60s"


author: yezengruan <yezengruan@huawei.com> - 6.2.0-31
changelog:
  - vhost-vsock: detach the virqueue element in case of error (CVE-2022-26354)
  - virtio-net: fix map leaking on error during receive (CVE-2022-26353)


author: yezengruan <yezengruan@huawei.com> - 2:6.2.0-34
changelog:
  - display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207)
  - ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206)


author: yezengruan <yezengruan@huawei.com> - 2:6.2.0-35
changelog:
  - hw/intc/arm_gicv3: Check for !MEMTX_OK instead of MEMTX_ERROR (CVE-2021-3750)
  - softmmu/physmem: Simplify flatview_write and address_space_access_valid
  - softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR


author: yezengruan <yezengruan@huawei.com> - 2:6.2.0-38
changelog:
  - acpi: fix QEMU crash when started with SLIC table
  - tests: acpi: whitelist expected blobs before changing them
  - tests: acpi: add SLIC table test
  - tests: acpi: SLIC: update expected blobs
  - hw/block/fdc: Prevent end-of-track overrun (CVE-2021-3507)
  - tests/qtest/fdc-test: Add a regression test for CVE-2021-3507


author: yezengruan <yezengruan@huawei.com> - 2:6.2.0-39
changelog:
  - hw/scsi/megasas: Use uint32_t for reply queue head/tail values
  - dma: Let dma_memory_valid() take MemTxAttrs argument
  - dma: Let dma_memory_set() take MemTxAttrs argument
  - dma: Let dma_memory_rw_relaxed() take MemTxAttrs argument
  - dma: Let dma_memory_rw() take MemTxAttrs argument
  - dma: Let dma_memory_read/write() take MemTxAttrs argument
  - dma: Let dma_memory_map() take MemTxAttrs argument
  - dma: Have dma_buf_rw() take a void pointer
  - dma: Have dma_buf_read() / dma_buf_write() take a void pointer
  - pci: Let pci_dma_rw() take MemTxAttrs argument
  - dma: Let dma_buf_rw() take MemTxAttrs argument
  - dma: Let dma_buf_write() take MemTxAttrs argument
  - dma: Let dma_buf_read() take MemTxAttrs argument
  - dma: Let dma_buf_rw() propagate MemTxResult
  - dma: Let st*_dma() take MemTxAttrs argument
  - dma: Let ld*_dma() take MemTxAttrs argument
  - dma: Let st*_dma() propagate MemTxResult
  - dma: Let ld*_dma() propagate MemTxResult
  - pci: Let st*_pci_dma() take MemTxAttrs argument
  - pci: Let ld*_pci_dma() take MemTxAttrs argument
  - pci: Let st*_pci_dma() propagate MemTxResult
  - pci: Let ld*_pci_dma() propagate MemTxResult
  - hw/audio/intel-hda: Do not ignore DMA overrun errors
  - hw/audio/intel-hda: Restrict DMA engine to memories (not MMIO devices)
  - tests/qtest/intel-hda-test: Add reproducer for issue #542


author: liuxiangdong <liuxiangdong5@huawei.com> - 2:6.2.0-42
changelog:
  - acpi: validate hotplug selector on access
  - virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358)


author: xihaochen <xihaochen@huawei.com> - 2.19-1
changelog:
  - Type:requirements                                                                                                                               
  - Id:NA
  - SUG:NA
  - DESC:update radvd to 2.19


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058, CVE-2020-15049, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606


author: xihaochen<xihaochen@huawei.com> - 4.9-8
changelog:
  - Type:cves
  - ID:CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620
  - SUG:NA
  - DESC:fix CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620


author: wangyuhang<wangyuhang27@huawei.com> -249-29
changelog:
  - fix build fail on meson-0.6
    1. delete invalid meson build option
    2. meson.build: change operator combining bools from + to and


author: yangzhuangzhuang <yangzhuangzhaung1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: wangyue <wangyue92@huawei.com> - 1:9.0.10-18
changelog:
  - Type:cve
  - ID: CVE-2021-25122 CVE-2021-25329
  - SUG:restart
  - DESC: fix CVE-2021-25122 CVE-2021-25329


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-34
changelog:
  - Type:CVE
  - ID:CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619
  - SUG:NA
  - DESC:fix CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-50
changelog:
  - Type:CVE
  - ID:CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345
  - SUG:NA
  - DESC:fix CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-51
changelog:
  - Type:CVE
  - ID:CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287
  - SUG:NA
  - DESC:fix CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:8.2-55
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the error of backport-cannot-list-options-one-per-line.patch


author: yangcheng<yangcheng87@huawei.com> - 1.20.11-2
changelog:
  - Type:CVE
  - Id:CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011
  - SUG:NA
  - DESC:fix CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011


