# changelog

author: yaoxin <yao_xin001@hoperun.com> - 3.1.1-1
changelog:
  - Update to 3.1.1
    * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199
    * Issue 6172 - RFE: improve the performance of evaluation of filter component 
      when tested against a large valueset (like group members) #6173
    * Issue 6181 - RFE - Allow system to manage uid/gid at startup
    * Issue 6238 - RFE - add option to write audit log in JSON format
    * Issue 6241 - Add support for CRYPT-YESCRYPT #6242
    * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219
    * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124
    * Issue 6155 - ldap-agent fails to start because of permission error #6179
    * Issue 6170 - audit log buffering doesn’t handle large updates
    * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168
    * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208
    * Issue 6199 - unprotected search query during certificate based authentication #6205
    * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225
    * Issue 6229 - After an initial failure, subsequent online backups fail #6230
    * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255
    * Issue 6256 - nsslapd-numlisteners limit is not enforced
    * Issue 6265 - lmdb - missing entries in range searches #6266
    * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: yaoxin <yao_xin001@hoperun.com> - 2.12.0-1
changelog:
  - Update to 2.12.0
  - Bootloader Images:
      * remove unused plat_try_next_boot_source
  - Architecture:
      *Branch Record Buffer Extension (FEAT_BRBE)
      * allow RME builds with BRBE
  - Arm:
      * avoid stripping kernel trampoline
      * add DRAM memory regions that linux kernel can share
      * add optee specific mem-size attribute
      * add secure uart interrupt in device region
      * enable FEAT_MTE2
      * fix the FF-A optee manifest by adding the boot info node
      * update the memory size allocated to optee at EL1
  - Intel:
      * add cache invalidation during BL31 initialization
      * add in JTAG ID for Linux FCS
      * add in missing ECC register
      * add in watchdog for QSPI driver
      * bridge ack timing issue causing fpga config hung
      * correct macro naming
      * f2sdram bridge quick write thru failed
      * fix bridge enable and disable function
      * fix CCU for cache maintenance
      * flush L1/L2/L3/Sys cache before HPS cold reset
      * implement soc and lwsoc bridge control for burst speed
      * refactor SDMMC driver for Altera products
      * remove redundant BIT_32 macro
      * software workaround for bridge timeout
      * update Agilex5 BL2 init flow and other misc changes
      * update Agilex5 warm reset subroutines
      * update all the platforms hand-off data offset value
      * update CCU configuration for Agilex5 platform
      * update mailbox SDM printout message
      * update memcpy to memcpy_s ([e264b55]
      * update outdated code for Linux direct boot
      * update preloaded_bl33_base for legacy product
      * update sip smc config addr for agilex5
      * update the size with addition 0x8000 0000 base


author: zhengxiaoxiao<zhengxiaoxiao2@huawei.com> - 1:3.1.2-1
changelog:
  - update version to 3.1.2
    - When processing a run level change, make auditd exit
    - In auditd, fix return code when rules added in immutable mode
    - In auparse, when files are given, also consider EUID for access
    - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
    - Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
    - Update all lookup tables for the 6.5 kernel
    - Don't be as paranoid about auditctl -R file permissions
    - In ausearch, correct subject/object search to be an and if both are given
    - Adjust formats for 64 bit time_t
    - Fix segfault in python bindings around the feed API
    - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.37-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-2
changelog:
  - Type:CVE
  - CVE:CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: Funda Wang <fundawang@yeah.net> - 2.41-14
changelog:
  - Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying
    symbols without version info.
  - Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes


author: Li Nan <linan122@huawei.com> - 6.6.0-89.0.0.94
changelog:
  - !16087  CVE-2025-21979
  - !16102 V3:mm: shmem: skip swapcache for swapin of synchronous swap device
  - !16144 [openEuler-24.03-LTS-SP2] drivers: update Yunsilicon drivers to 2412GA
  - !16101  scsi: qla1280: Fix kernel oops when debug level > 2
  - !16103  md/raid1,raid10: don't ignore IO flags
  - !16055 mailbox: pcc: Always clear the platform ack interrupt first
  - !16143  Revert "tmpfs: fault in smaller chunks if large folio allocation not allowed"
  - !16108  mm: zswap: handle incorrect attempts to load large folios
  - !16075  mpage: fix softlockup in mpage_readahead()
  - !16079 v2  tracing: Verify event formats that have "%*p.."
  - Revert "tmpfs: fault in smaller chunks if large folio allocation not allowed"
  - !16117  PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
  - !16116  spufs: fix gang directory lifetimes
  - drivers: update Yunsilicon drivers to version rel_2412_std_card
  - mailbox: pcc: Always clear the platform ack interrupt first
  - mailbox: pcc: Fix the possible race in updation of chan_in_use flag
  - !16099  fs/resctrl: Create l2 cache monitors
  - PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
  - spufs: fix gang directory lifetimes
  - !15719 vdpa/iommufd: Support taking over vDPA devices' iommu groups through the iommufd API
  - !14169 [OLK-6.6] Fix rnp errors dmesg show in hygon
  - !14174 [OLK-6.6] Fix os crash when cat some sys interface when net down
  - !14100 [OLK-6.6] mucse: rnpm ocp nic support hotplug and show sub-zero temperature
  - !16080  PCI/ASPM: Fix link state exit during switch upstream function removal
  - !16074  x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
  - !16073  acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
  - !15908  soc: qcom: pdr: Fix the potential deadlock
  - !16094  ksmbd: fix session use-after-free in multichannel connection
  - mm: zswap: handle incorrect attempts to load large folios
  - md/raid1,raid10: don't ignore IO flags
  - !16086  media: streamzap: fix race between device disconnection and urb callback
  - mm: shmem: skip swapcache for swapin of synchronous swap device
  - mm: swap: remove 'synchronous' argument to swap_read_folio()
  - vhost/vdpa: Add support to bind and attach iommufd
  - scsi: qla1280: Fix kernel oops when debug level > 2
  - !15897 Two backport bugfix patches
  - !15948 mm/huge_memory: drop beyond-EOF folios with the right number of refs
  - arm64/mpam: Refuse to enter powerdown state after L2 msc updated
  - arm64/mpam: Refuse cpu offline when L2 msc is enabled
  - fs/resctrl: Add l2 mount option to enable L2 msc
  - arm64: mpam: Restore the expected MPAM sysregs on cpuhp
  - arm64: mpam: Add cpu_pm notifier to restore MPAM sysregs
  - fs/resctrl: Create l2 cache monitors
  - x86/resctrl: Add a handling path of default label in get_arch_mbm_state()
  - ksmbd: fix session use-after-free in multichannel connection
  - !16034  swap-in support large folio
  - !15994  ksmbd: fix use-after-free in ksmbd_sessions_deregister()
  - !16066  rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
  - !16062  arm64/mpam: Expanding MPAM's QoS capability
  - !16053  jfs: add check read-only before truncation in jfs_truncate_nolock()
  - !16037  ext4: fix the logic to determine whether buffered IO can use iomap
  - wifi: cfg80211: init wiphy_work before allocating rfkill fails
  - wifi: cfg80211: cancel wiphy_work before freeing wiphy
  - media: streamzap: fix race between device disconnection and urb callback
  - !15986  RDMA/hns: Fix the compatibility between the kernel mode and user mode
  - PCI/ASPM: Fix link state exit during switch upstream function removal
  - tracing: Verify event formats that have "%*p.."
  - mpage: fix softlockup in mpage_readahead()
  - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
  - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
  - !16045  irqchip/mbigen: add check before deference 'mgn_chip'
  - rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
  - arm64/mpam: Add limit feature
  - arm64/mpam: Add PRIO feature
  - arm64/mpam: Add mbw_min and cmin features
  - arm64/mpam: Add CMAX feature
  - fs/resctrl: As a pre-patch for expanding MPAM's QoS capability
  - soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
  - jfs: add check read-only before truncation in jfs_truncate_nolock()
  - !15887  LoongArch: sync internal repository 20250414
  - !15937  md/raid1: fix memleak and double free in
  - irqchip/mbigen: add check before deference 'mgn_chip'
  - ext4: fix the logic to determine whether buffered IO can use iomap
  - mm: add per-order mTHP swap-in fallback/fallback_charge counters
  - mm: add per-order mTHP swpin counters
  - mm: fix PSWPIN counter for large folios swap-in
  - mm: remove unused stub for can_swapin_thp()
  - mm: zswap: fix zswap_never_enabled() for CONFIG_ZSWAP==N
  - mm: support large folios swap-in for sync io devices
  - mm: add nr argument in mem_cgroup_swapin_uncharge_swap() helper to support large folios
  - mm: zswap: add zswap_never_enabled()
  - mm: convert swap_cluster_readahead and swap_vma_readahead to return a folio
  - mm: return a folio from read_swap_cache_async()
  - mm: remove page_swap_info()
  - mm: convert swap_readpage() to swap_read_folio()
  - mm: convert swap_page_sector() to swap_folio_sector()
  - mm: pass a folio to swap_readpage_bdev_async()
  - mm: pass a folio to swap_readpage_bdev_sync()
  - mm: pass a folio to swap_readpage_fs()
  - mm: pass a folio to swap_writepage_bdev_async()
  - mm: pass a folio to swap_writepage_bdev_sync()
  - mm: pass a folio to swap_writepage_fs()
  - mm: pass a folio to __swap_writepage()
  - mm: return the folio from __read_swap_cache_async()
  - !15931  CVE-2025-22113
  - !16023  CVE-2025-22121
  - ext4: Restore the deleted check paths of the xattr.
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
  - ext4: introduce ITAIL helper
  - !15918 [OLK-6.6] 从上游linux-6.6.y回合nvme驱动重要bugfix
  - !15589 [OLK-6.6] Ethernet: Supports Linkdata ethernet Controllers
  - !15962  LoongArch: BPF: Don't override subprog's return value
  - !16007  compile error: implicit declaration of
  - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration
  - !15981  LoongArch: BPF: Fix off-by-one error in build_prologue()
  - !15935  HID: appleir: Fix potential NULL dereference at raw event handle
  - !15988  fs/resctrl: Fix configuration to wrong control group when CDP is enabled
  - ksmbd: fix use-after-free in ksmbd_sessions_deregister()
  - !15970  erofs/cachefiles: Change the unmark inuse sequence in erofs ondemand mode
  - fs/resctrl: Fix configuration to wrong control group when CDP is enabled
  - arm64/mpam: Add debugging information about CDP monitor value
  - arm64/mpam: Fix allocated cache size information
  - fs/resctrl: Fix kmemleak caused by closid_init()
  - arm64/mpam: Correct the judgment condition of the CMAX feature
  - arm64/mpam: Set the cpbm width of msc class with the minimum
  - fs/resctrl: Determine whether the MBM monitors require overflow checking
  - arm64/mpam: Optimize CSU/MBWU monitor multiplexing
  - arm64/mpam: fix impossible condition in resctrl_arch_rmid_read()
  - arm64/mpam: fix impossible condition in get_cpumask_from_cache_id()
  - arm64/mpam: fix memleak in resctrl_arch_mon_ctx_alloc_no_wait()
  - RDMA/hns: Fix the compatibility between the kernel mode and user mode
  - LoongArch: BPF: Fix off-by-one error in build_prologue()
  - erofs/cachefiles: Change the unmark inuse sequence in erofs ondemand mode
  - LoongArch: BPF: Don't override subprog's return value
  - mm/huge_memory: drop beyond-EOF folios with the right number of refs
  - md/raid1: fix memory leak in raid1_run() if no active rdev
  - md/raid1: don't free conf on raid0_run failure
  - HID: appleir: Fix potential NULL dereference at raw event handle
  - ext4: avoid journaling sb update on error if journal is destroying
  - ext4: define ext4_journal_destroy wrapper
  - mm: fix filemap_get_folios_contig returning batches of identical folios
  - nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
  - nvme-tcp: fix possible UAF in nvme_tcp_poll
  - soc: qcom: pdr: Fix the potential deadlock
  - selftests: mincore: fix tmpfs mincore test failure
  - LoongArch: Export some signal functions
  - LoongArch: Make some signal and ptrace functions non-static
  - LoongArch: Handle fp, lsx, lasx and lbt assembly symbols
  - LoongArch: Preserve firmware configuration if ACPI requires.
  - LoongArch: configs: enable some configs
  - LoongArch: configs: set CONFIG_UNWINDER_ORC=y
  - LoongArch: configs: Disable CONFIG_RT_GROUP_SCHED to prevent cgroup2 issues
  - objtool: Fix C jump table annotations for Clang
  - Ethernet: Linkdata: Supports Linkdata ethernet Controllers
  - RNP: NET: Fix rnp errors dmesg show in hygon
  - net: mucse: Fix os crash when cat some sys interface when net down
  - mucse: rnpm ocp nic support hotplug and show sub-zero temperature


author: Li Nan <linan122@huawei.com> - 6.6.0-90.0.0.95
changelog:
  - !16277 Revert DP HPD module to fix the problem
  - !16192 drivers/yunsilicon: fix query/modify pkt_dst_info return error
  - !16180 PINCTRL:ENABLE_CONFIG_PINCTRL for resolve Intel notebook touchpad issue;  fw, net: wireless: Add RTW88 driver and compressed firmware support
  - !16231  LoongArch: Return NULL from huge_pte_offset() for invalid PMD
  - !16256  CVE-2025-21916
  - !16257  CVE-2025-21950
  - Revert "drm/sysfs: Register "ddc" symlink later"
  - Revert "drm/ast: Implement polling for VGA and SIL164 connectors"
  - Revert "drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers"
  - Revert "drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER"
  - Revert "drm/hisilicon/hibmc: Restructuring the header dp_reg.h"
  - Revert "drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis"
  - Revert "drm/hisilicon/hibmc: Add dp serdes cfg in dp process"
  - Revert "drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp"
  - Revert "drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel"
  - Revert "drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file"
  - Revert "drm/hisilicon/hibmc: Enable this hot plug detect of irq feature"
  - Revert "drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD"
  - Revert "drm/hisilicon/hibmc: Add vga connector detect functions"
  - Revert "drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior"
  - Revert "drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local"
  - !16039 [OLK-6.6] 优化海光密钥管理虚拟化场景的性能
  - !16233  usb: chipidea: ci_hdrc_imx: fix usbmisc handling
  - !16208 Fix CVE-2025-37860
  - !16189  jfs: Fix uninit-value access of imap allocated in the diMount() function
  - drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
  - usb: atm: cxacru: fix a flaw in existing endpoint checks
  - !16183 xhci: Limit time spent with xHC interrupts disabled during bus resume
  - !16193  net: libwx: handle page_pool_dev_alloc_pages error
  - !16224  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  - !16198  Fix CVE-2025-37830
  - sfc: fix NULL dereferences in ef100_process_design_param()
  - !16174 Add gpio-hisi softdepend
  - usb: chipidea: ci_hdrc_imx: fix usbmisc handling
  - LoongArch: Return NULL from huge_pte_offset() for invalid PMD
  - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  - !16196  net/hinic3: Synchronize new NIC features and bug fixes
  - !16165  vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
  - !12616 [OLK-6.6] fix bug：compiler error on loongarch64 for mucse rnpm driver
  - !16186 【olk 6.6】net: hns3: backport some bugfixes
  - !15158  Add support for Hygon family 18h model 8h
  - !14328 Fixed multiple vfio devices not working properly
  - !16081  Revert "LoongArch: Set hugetlb mmap base address aligned with pmd size"
  - !16024 [OLK-6.6][bugfix]Hygon: Remove HYDCU fixup header driver from kernel source code
  - !16026 [OLK-6.6]Hygon: In a CSV3 VM, the hypercall should notify real page enc/dec status
  - !16025 [OLK-6.6][bugfix]Hygon：Avoid concurrent pinning shared pages at both KVM side and vfio side when passthrough device to CSV3 VM
  - !16020 [OLK-6.6]Backport some mm related commits from Linux upstream
  - !16019 [OLK-6.6][bugfix]Hygon: Return 0 at the beginning of csv_guest_hygon_coco_extension() for non-CSV3 VMs
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
  - net/hinic3: Synchronize new NIC features and bug fixes
  - drivers/yunsilicon: fix query/modify pkt_dst_info return error
  - net: libwx: handle page_pool_dev_alloc_pages error
  - jfs: Fix uninit-value access of imap allocated in the diMount() function
  - xhci: Limit time spent with xHC interrupts disabled during bus resume
  - Add gpio-hisi softdepend
  - net: hns3: defer calling ptp_clock_register()
  - net: hns3: fixed debugfs tm_qset size
  - net: hns3: fix an interrupt residual problem
  - net: hns3: store rx VLAN tag offload state for VF
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
  - Revert "LoongArch: Set hugetlb mmap base address aligned with pmd size"
  - crypto: ccp: Support vpsp ringbuffer overcommit
  - crypto: ccp: Use a workqueue to clean up the vpsp ringbuffer
  - crypto: ccp: move vpsp-related functions to vpsp.c
  - x86/kvm: Don't hypercall to enc all usable RAM on CSV3 platform
  - KVM: SVM: CSV: fix CSV3 launch failures because of concurrent longterm pin
  - Revert "drm/hygon: Add support to passthrough Hygon DCU to virtual machine"
  - Revert "x86/config: Set CONFIG_HYDCU_FIXUP_HEADER=y by default"
  - mm/hugetlb: wait for hugetlb folios to be freed
  - mm: replace free hugepage folios after migration
  - mm/cma: using per-CMA locks to improve concurrent allocation performance
  - KVM: SEV: Use long-term pin when registering encrypted memory regions
  - Revert "KVM: SEV: Pin SEV guest memory out of CMA area"
  - KVM: SVM: CSV: Return 0 at the beginning of csv_guest_hygon_coco_extension() for non-CSV3 VMs
  - drivers/pci: Enable pci bridge acs capability
  - driver/iommu: Set iommu driver buildin kernel
  - LoongArch: Revert "LoongArch: Fix cpu hotplug issue"
  - LoongArch: KVM: Repair the restart pressure test virtual machine hang dead problem
  - LoongArch:config: enable pci host controller fdt driver
  - PINCTRL:ENABLE_CONFIG_PINCTRL_AMD
  - LoongArch: KVM: Add interrupt checking with Loongson AVEC
  - LoongArch: KVM: Reload guest CSR registers after S4
  - anolis: LoongArch: KVM: add virt extioi cpu encode support
  - anolis: LoongArch: KVM: Fixed VM migration failure after ptw was enabled
  - anolis: LoongArch: KVM: Add reset function for irqchip
  - anolis: LoongArch: LSVZ: Clear LLBCTL if secondary mmu mapping is changed
  - anolis: driver/iommu: Fixed multiple vfio devices not working properly
  - anolis: LoongArch: KVM: enable ptw for kvm
  - anolis: LoongArch: fix compile error when enable CONFIG_PARAVIRT
  - EDAC/amd64: Add support for Hygon family 18h model 8h
  - x86/amd_nb: Add support for Hygon family 18h model 8h
  - mucse: rnpm compiler error on loongarch64


author: Li Nan <linan122@huawei.com> - 6.6.0-91.0.0.96
changelog:
  - !16281 【OLK-6.6】新增海光psp/ccp device id以及优化海光可信功能内核驱动
  - !16344 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y
  - !16325  perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
  - !16326  mfd: ene-kb3930: Fix a potential NULL pointer dereference
  - crypto: ccp: Fix for potential memory Out-of-Bounds access due to insufficient array size
  - !16324  LoongArch: add PCA953X/2K3000 GMAC/IGC netcard/NR_CPUS=2048/SCHED_MC support
  - !16352 [OLK-6.6] Fix sxe compile errors without CONFIG_PM_SLEEP
  - Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
  - !16280  Add Loongson PWM controller support
  - !16279  crypto: loongson: add wst se chip support
  - !16342 v5  Memory access profiler(SPE) driven NUMA balancing and damon
  - !16302 IMA: support virtcca extend assigned register
  - !15384 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.63-6.6.64 LTS Conflicts Patches
  - !16229 drivers/iommu: Enhance the robustness of the iommu module
  - !16328  drm/amd/display: prevent hang on link training fail
  - !16310  ocfs2: validate l_tree_depth to avoid out-of-bounds access
  - IMA: support virtcca extend assigned register
  - nvme-tcp: fix premature queue removal and I/O failover
  - config: Enable memory sampling based pmu for numa balance and damon by default
  - arm-spe: Export boost SPE sampling info via tracefs tracepoint
  - arm-spe: Add kernel cmdline option to enable SPE boost
  - arm-spe: Boost SPE add TLB hot page and remote access tracking
  - mm/damon/vaddr: Add demotion interface for migrating cold pages to target nodemask
  - mm/damon/vaddr: Extend mem_sampling sysctl to support DAMON
  - mm/damon/vaddr: Support hardware-assisted memory access sampling
  - mm/numa: Add tracepoints for access sampling and NUMA page migration
  - mm/mem_sampling: Add sysctl control for NUMA balancing integration
  - mm/numa: Enable mem_sampling-based access tracking for NUMA balancing
  - mm/numa: Use mem_sampling framework for NUMA balancing
  - mm/mem_sampling:: Add proc and cmdline interface to control sampling enable
  - sched: Enable per-process mem_sampling from sched switch path
  - mm/mem_sampling: Add sched switch hook to control sampling state
  - mm/mem_sampling: Add eBPF interface for memory access tracing
  - mm_monitor/mm_spe: Introduce arm_spe_user to abstract SPE usage
  - mm_monitor/mm_spe: Add PMU based memory sampling abstract layer
  - mm_monitor/mm_spe: Init per-CPU buffers and SPE state
  - mm_monitor/mm_spe: Introduce standalone SPE profiling framework
  - !16323  bpf: Fix WARN() in get_bpf_raw_tp_regs
  - !16286 arm64: Add support for FEAT_{LS64, LS64_V}.
  - !12573 [OLK-6.6] Fix rnpvf compile errors without CONFIG_MXGBEVF_FIX_VF_QUEUE
  - !15434 Backport PRM update and bugfixes up to v6.14.
  - !16278  drm: LoongArch: fix rx550/gfx6/gfx7/gfx8 error
  - drm/amd/display: prevent hang on link training fail
  - mfd: ene-kb3930: Fix a potential NULL pointer dereference
  - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
  - LoongArch: Prevent cond_resched() occurring within kernel-fpu
  - LoongArch: 2K3000 GMAC support.
  - LoongArch: Add SCHED_MC (Multi-core scheduler) support
  - LoongArch: Enable GPIO_PCA953X driver
  - LoongArch: Enable IGC driver
  - LoongArch: CONFIG_NR_CPUS expanded to 2048
  - bpf: Fix WARN() in get_bpf_raw_tp_regs
  - !16298 v2  CVE-2024-58098
  - !16218  bpf: Fix kmemleak warning for percpu hashmap
  - !16217  bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
  - KVM: arm64: Enable FEAT_{LS64, LS64_V} in the supported guest
  - Workaround the issue when compile with CONFIG_FUNCTION_ALIGNMENT_64B
  - arm64: Add support for FEAT_{LS64, LS64_V}
  - arm64: Provide basic EL2 setup for FEAT_{LS64, LS64_V} usage at EL0/1
  - !16300 【olk 6.6】 add two bugfixes for ptp_hisi driver
  - binfmt_elf: Wire up AT_HWCAP3 at AT_HWCAP4
  - uapi/auxvec: Define AT_HWCAP3 and AT_HWCAP4 aux vector, entries
  - arm64: Support AT_HWCAP3
  - ocfs2: validate l_tree_depth to avoid out-of-bounds access
  - ptp: hisi: the print of element in ptp need protected by lock
  - ptp: hisi: fix list not delete problem
  - !15157 Add support edac for hygon family 18h model 10h
  - !15155 Add LS and IF mce types for Hygon family 18h model 7h
  - bpf: Fix kabi breakage in struct bpf_subprog_info
  - selftests/bpf: test for changing packet data from global functions
  - bpf: track changes_pkt_data property for global functions
  - bpf: refactor bpf_helper_changes_pkt_data to use helper number
  - bpf: add find_containing_subprog() utility function
  - crypto: ccp: add new pci device id and modify psp_do_cmd() interface to not rely on sev device
  - !16271  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
  - !16284  Sync from 6.6 for the sam kabi
  - !15291 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
  - tracing: Return from tracing_buffers_read() if the file has been closed
  - trace: Fix kabi breakage in struct trace_iterator
  - ring-buffer: Make wake once of ring_buffer_wait() more robust
  - tracing/ring-buffer: Fix wait_on_pipe() race
  - pwm: Add Loongson pwm driver support
  - dt-bindings: pwm: Add Loongson PWM controller
  - crypto: loongson: add wst se chip support
  - drm/amdgpu: Fix RX550 pcie order dislocation.
  - drm/amdgpu: make duplicated EOP packet for GFX6 have real content
  - drm/amdgpu: make duplicated EOP packet for GFX7/8 have real content
  - drm/radeon: repeat the same EOP packet for EOP workaround on CIK
  - drm/amdgpu: Fix pcie order dislocation
  - kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
  - drivers/iommu: Enhance the robustness of the iommu module
  - driver/vfio: disable vfio pci intx
  - drivers/iommu: Define the alias of the iommu device
  - loongarch/configs: enable vfio mdev config
  - drivers/iommu: Add the "iommu disable" probe
  - bpf: Fix kmemleak warning for percpu hashmap
  - bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
  - KVM: arm64: vgic-its: Add stronger type-checking to the ITS entry sizes
  - mptcp: fix possible integer overflow in mptcp_reset_tout_timer
  - ext4: fix race in buffer_head read fault injection
  - ext4: remove array of buffer_heads from mext_page_mkuptodate()
  - ext4: pipeline buffer reads in mext_page_mkuptodate()
  - Revert "ext4: Fix race in buffer_head read fault injection"
  - scsi: sg: Enable runtime power management
  - gfs2: Remove and replace gfs2_glock_queue_work
  - gfs2: Fix unlinked inode cleanup
  - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async
  - gfs2: No longer use 'extern' in function declarations
  - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*
  - ACPI: PRM: Remove unnecessary strict handler address checks
  - ACPI: PRM: Add PRM handler direct call support
  - ACPI: PRM: Annotate struct prm_module_info with __counted_by
  - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE
  - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device
  - dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
  - EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
  - EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
  - EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
  - x86/amd_nb: Add helper function to identify Hygon family 18h model 10h
  - RNPVF: NET: Fix rnpvf compile errors without CONFIG_MXGBEVF_FIX_VF_QUEUE


author: Li Nan <linan122@huawei.com> - 6.6.0-92.0.0.97
changelog:
  - !16367  scsi: sg: fix refcount underflow in
  - scsi: sg: Enable runtime power management
  - Revert "scsi: sg: Enable runtime power management"
  - !16349 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.82-6.6.83 LTS Patches
  - !16359 net: hns3: some bugfixes for hns3 driver
  - !16350 [OLK-6.6]Hygon: Address boot failures of CSV1/CSV2 VMs on Hygon 2g and C86-3g CPUs with firmware build ID below 1878 and 1810.
  - net: hns3: disable interrupt when ptp init failed
  - net: hns3: avoid unnecessary checking when unmap buffer
  - net: hns3: fix a use of uninitialized variable problem
  - kbuild: userprogs: use correct lld when linking through clang
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0
  - spi-mxs: Fix chipselect glitch
  - x86/boot: Sanitize boot params before parsing command line
  - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr'
  - ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattr
  - x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
  - drm/i915/dsi: Use TRANS_DDI_FUNC_CTL's own port width macro
  - ALSA: hda: realtek: fix incorrect IS_REACHABLE() usage
  - mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear()
  - iio: adc: at91-sama5d2_adc: fix sama7g5 realbits value
  - iio: dac: ad3552r: clear reset status flag
  - iio: filter: admv8818: Force initialization of SDO
  - eeprom: digsy_mtc: Make GPIO lookup table match the device
  - bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock
  - drivers: core: fix device leak in __fw_devlink_relax_cycles()
  - intel_th: pci: Add Panther Lake-P/U support
  - intel_th: pci: Add Panther Lake-H support
  - intel_th: pci: Add Arrow Lake support
  - mei: me: add panther lake P DID
  - cdx: Fix possible UAF error in driver_override_show()
  - KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM
  - KVM: SVM: Suppress DEBUGCTL.BTF on AMD
  - KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value
  - usb: xhci: Enable the TRB overfetch quirk on VIA VL805
  - xhci: pci: Fix indentation in the PCI device ID definitions
  - usb: gadget: Check bmAttributes only if configuration is valid
  - usb: gadget: Fix setting self-powered state on suspend
  - usb: gadget: Set self-powered based on MaxPower and bmAttributes
  - usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
  - usb: typec: ucsi: increase timeout for PPM reset operations
  - usb: dwc3: gadget: Prevent irq storm when TH re-executes
  - usb: dwc3: Set SUSPENDENABLE soon after phy init
  - usb: gadget: u_ether: Set is_suspend flag if remote wakeup fails
  - usb: renesas_usbhs: Flush the notify_hotplug_work
  - usb: typec: ucsi: Fix NULL pointer access
  - usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
  - usb: hub: lack of clearing xHC resources
  - usb: renesas_usbhs: Use devm_usb_get_phy()
  - usb: renesas_usbhs: Call clk_put()
  - gpio: rcar: Fix missing of_node_put() call
  - net: dsa: mt7530: Fix traffic flooding for MMIO devices
  - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
  - ublk: set_params: properly check if parameters can be applied
  - net-timestamp: support TCP GSO case for a few missing flags
  - exfat: fix soft lockup in exfat_clear_bitmap
  - x86/sgx: Fix size overflows in sgx_encl_create()
  - vlan: enforce underlying device type
  - ppp: Fix KMSAN uninit-value warning with bpf
  - net: ipa: Enable checksum for IPA_ENDPOINT_AP_MODEM_{RX,TX} for v4.7
  - net: ipa: Fix QSB data for v4.7
  - net: ipa: Fix v4.7 resource group names
  - be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
  - drm/sched: Fix preprocessor guard
  - hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
  - llc: do not use skb_get() before dev_queue_xmit()
  - ALSA: usx2y: validate nrpacks module parameter on probe
  - tracing: probe-events: Remove unused MAX_ARG_BUF_LEN macro
  - hwmon: (ad7314) Validate leading zero bits and return error
  - hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
  - hwmon: (pmbus) Initialise page count in pmbus_identify()
  - caif_virtio: fix wrong pointer check in cfv_probe()
  - net: gso: fix ownership in __udp_gso_segment
  - bluetooth: btusb: Initialize .owner field of force_poll_sync_fops
  - HID: google: fix unused variable warning under !CONFIG_ACPI
  - wifi: iwlwifi: limit printed string from FW file
  - mm: don't skip arch_sync_kernel_mappings() in error paths
  - mm/page_alloc: fix uninitialized variable
  - block: fix conversion of GPT partition name to 7-bit
  - s390/traps: Fix test_monitor_call() inline assembly
  - dma: kmsan: export kmsan_handle_dma() for modules
  - rapidio: fix an API misues when rio_add_net() fails
  - wifi: nl80211: reject cooked mode if it is set along with other flags
  - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
  - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
  - mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
  - x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
  - x86/cpu: Validate CPUID leaf 0x2 EDX output
  - x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
  - platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
  - drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
  - hwmon: (peci/dimmtemp) Do not provide fake thresholds data
  - ALSA: hda/realtek: update ALC222 depop optimize
  - ALSA: hda/realtek - add supported Mic Mute LED for Lenovo platform
  - ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
  - ALSA: seq: Avoid module auto-load handling at event delivery
  - gpio: rcar: Use raw_spinlock to protect register access
  - ksmbd: fix bug on trap in smb2_lock
  - ksmbd: fix use-after-free in smb2_lock
  - ksmbd: fix type confusion via race condition when using ipc_msg_send_request
  - LoongArch: Set max_pfn with the PFN of the last page
  - LoongArch: Use polling play_dead() when resuming from hibernation
  - LoongArch: Convert unreachable() to BUG()
  - tracing: tprobe-events: Fix a memory leak when tprobe with $retval
  - riscv: cacheinfo: Use of_property_present() for non-boolean properties
  - riscv: Prevent a bad reference count on CPU nodes
  - riscv: cacheinfo: initialize cacheinfo's level and type from ACPI PPTT
  - riscv: cacheinfo: remove the useless input parameter (node) of ci_leaf_init()
  - NFS: O_DIRECT writes must check and adjust the file length
  - x86/speculation: Add __update_spec_ctrl() helper
  - net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
  - net: enetc: Replace ifdef with IS_ENABLED
  - net: enetc: Remove setting of RX software timestamp
  - drm/amdgpu: disable BAR resize on Dell G5 SE
  - drm/amdgpu: Check extended configuration space register when system uses large bar
  - smb: client: fix chmod(2) regression with ATTR_READONLY
  - drm/i915/ddi: Fix HDMI port width programming in DDI_BUF_CTL
  - drm/i915/xe2lpd: Move D2D enable/disable
  - efi: Don't map the entire mokvar table to determine its size
  - x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range()
  - KVM: SVM: CSV is unsupported if both the firmware with a build ID < 1878 and SME is not in use
  - KVM: SVM: The ASID range available for CSV2 guests vary across different firmware


author: Li Nan <linan122@huawei.com> - 6.6.0-93.0.0.98
changelog:
  - !16510 v5  Support soft domain
  - !16509 v2  Support thp policy control per process
  - !16479  wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
  - !16478  pds_core: make wait_context part of q_info
  - !16476  drm/i915/huc: Fix fence not released on early probe errors
  - !16499  padata: do not leak refcount in reorder_work
  - config: Configurate CONFIG_SCHED_SOFT_DOMAIN
  - sched: fair: Disable numa migrate for soft domian task
  - sched: fair: Select idle cpu in soft domain
  - sched: Attach task group to soft domain
  - sched: topology: Build soft domain for LLC
  - mm: tool: add task_thpctl to control thp per process
  - mm: add thp process control interface module
  - !16489 v5  Cgroup-Based Interference Statistics
  - !16453  perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
  - !16458 v3  arm64: idle: Handle idle state for xcall/xint
  - !16496  fbdev: omapfb: Add 'plane' value check
  - !16459  fs/jfs: Prevent integer overflow in AG size calculation
  - !16486 v10  High Performance Container Resource View Isolation
  - padata: do not leak refcount in reorder_work
  - !16461 net: hns3: add set_loopback interface to realtek phy driver
  - !16414  drm/nouveau: prime: fix ttm_bo_delayed_delete oops
  - !16413  bus: mhi: host: Fix race between unprepare and queue_buf
  - !15156 Add IOAPIC  support for Hygon family 18h model 10h
  - fbdev: omapfb: Add 'plane' value check
  - !16449 [OLK-6.6]Hygon: Support to dec and enc userspace pages
  - !16488 drm/hisilicon/hibmc: add HPD, getting EDID, colorbar features in DP function
  - !16431 v5  IPIV-BUGFIX for HIP12
  - drm/hisilicon/hibmc: hibmc-drm bugfix for DP
  - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on
  - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
  - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
  - drm/hisilicon/hibmc: Add vga connector detect functions
  - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
  - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
  - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
  - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
  - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
  - drm/hisilicon/hibmc: Add dp serdes cfg in dp process
  - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
  - drm/hisilicon/hibmc: Restructuring the header dp_reg.h
  - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
  - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
  - drm/ast: Implement polling for VGA and SIL164 connectors
  - drm/sysfs: Register "ddc" symlink later
  - openeuler_defconfig: Disable CGROUP_IFS config by default
  - interference: Add cgroup v1 support for CGROUP_IFS
  - interference: Add irq interference track support
  - interference: Add sched wakelat interference track support
  - interference: Exclude throttle time from rundelay
  - interference: Add sched throttle interference track support
  - interference: Add sched sleep interference track support
  - interference: Add sched rundelay interference track support
  - interference: Add smt interference track support
  - interference: Add cgroup-based inteference statistics framework
  - cgroup: Export cgroup_addrm_files as internal interface
  - cgroup: Export cgroup_init_cftypes as internal interface
  - interference: Add CGROUP_IFS_DEFAULT_ENABLED config
  - interference: Add CGROUP_IFS config
  - !16487 hisi_sas: Misc patches and cleanups
  - scsi: hisi_sas: Fix warning detected by sparse
  - scsi: hisi_sas: Wait until error handling is complete
  - scsi: hisi_sas: Code style cleanup
  - scsi: hisi_sas: Call I_T_nexus after soft reset for SATA disk
  - scsi: hisi_sas: Use macro instead of magic number
  - scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
  - scsi: hisi_sas: Enable force phy when SATA disk directly connected
  - scsi: hisi_sas: Fixed failure to issue vendor specific commands
  - Revert "Revert "scsi: hisi_sas: Disable SATA disk phy for severe I_T nexus reset failure""
  - Revert "scsi: hisi_sas: Enable force phy when SATA disk directly connected"
  - !15150 correct address translation  for Hygon family 18h model 4h~10h
  - !16445 [OLK-6.6][Bugfix]hugetlb: Fix NULL pointer dereference BUG
  - !16484  v5: ucounts: rlimit scalability issues
  - !16481  net: tcp: scale connect() under pressure
  - config: Turn on CONFIG_BPF_RVI for openeuler_defconfig
  - samples/bpf: Add iterator program for cpu_online
  - samples/bpf: Add iterator program for cpuinfo_x86
  - bpf: Add bpf_arch_flags kunc for x86
  - bpf: Add cpuinfo_x86 iterator target
  - bpf: pidns: Add {bpf,get}_current_level1_reaper()
  - bpf: Add bpf_cpumask_weight() kfunc
  - cpuset: Add task_effective_cpumask()
  - bpf: cpuset: Add bpf_cpuset_from_task() kfunc
  - bpf: Add generic_single_iter
  - bpf: Add CONFIG_BPF_RVI
  - ucount: fix kabi for ucounts
  - ucounts: reinplement rlimit with percpu_counter
  - ucounts: add input for inc_rlimit_[get_]ucounts_limit
  - ucounts: add CONFIG_UCOUNTS_PERCPU_COUNTER
  - ucount: use rcuref_t for reference counting
  - ucount: use RCU for ucounts lookups
  - ucount: replace get_ucounts_or_wrap() with atomic_inc_not_zero()
  - ucounts: move kfree() out of critical zone protected by ucounts_lock
  - rcu: provide a static initializer for hlist_nulls_head
  - !16473  RDMA/hns: Trace support and bugfixes
  - !15148 Add  hygon_set_guest_pat_wb parameter  to  enhance performance for non-passthrough application scenarios
  - tcp: Fix bind() regression for v6-only wildcard and v4-mapped-v6 non-wildcard addresses.
  - inet: call inet6_ehashfn() once from inet6_hash_connect()
  - inet: change lport contribution to inet_ehashfn() and inet6_ehashfn()
  - tcp: use RCU lookup in __inet_hash_connect()
  - tcp: add RCU management to inet_bind_bucket
  - tcp: optimize inet_use_bhash2_on_bind()
  - tcp: Use bhash2 for v4-mapped-v6 non-wildcard address.
  - tcp: use RCU in __inet{6}_check_established()
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
  - pds_core: make wait_context part of q_info
  - drm/i915/huc: Fix fence not released on early probe errors
  - !16422 v3  fuse: Backport Anolis Features and Performance patches
  - RDMA/hns: Optimize HW performance by limiting ACK request frequency
  - RDMA/hns: Fix scc_param failed logic judgments
  - RDMA/hns: Fix congestion control algorithm parameter range
  - RDMA/hns: Fix address information leakage of DCA memory
  - RDMA/hns: Inappropriate format characters cleanup
  - RDMA/hns: Add trace for CMDQ dumping
  - RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
  - RDMA/hns: Add trace for MR/MTR attribute dumping
  - RDMA/hns: Add trace for AEQE dumping
  - RDMA/hns: Add trace for WQE dumping
  - RDMA/hns: Add trace for flush CQE
  - !16448 [OLK-6.6]riscv: fix kprobe crash due to broken patch_text() API
  - !16447 Intel: Intel_idle add GNRD and CWF platform support for 6.6
  - !16441  ext4: better scalability for ext4 block allocation
  - !16456 v5  xfs: support log grant track bytes
  - !16346  yt6801: Add Motorcomm yt6801 PCIe driver
  - !16028 [OLK-6.6][eNFS]add nfs feature to support multipath
  - !16398  cachefiles: Parse the "secctx" immediately
  - net: hns3: add set_loopback interface to realtek phy driver
  - !16363 [OLK-6.6]:update patches for sw64 architecture
  - riscv: livepatch.c adapt patch_text() changes
  - !15153 Get the correct  instance id  calculation for Hygon family 18h model 6h~10h
  - fs/jfs: Prevent integer overflow in AG size calculation
  - arm64: entry: Support hardware xcall and xint
  - arm64/Kconfig: Add turbo features submenuconfig
  - xfs: fix incorrect tail lsn tracking when AIL is empty
  - xfs: revert AIL TASK_KILLABLE threshold
  - xfs: skip flushing log items during push
  - xfs: grant heads track byte counts, not LSNs
  - xfs: pass the full grant head to accounting functions
  - xfs: track log space pinned by the AIL
  - xfs: collapse xlog_state_set_callback in caller
  - xfs: l_last_sync_lsn is really AIL state
  - xfs: ensure log tail is always up to date
  - xfs: background AIL push should target physical space
  - xfs: AIL doesn't need manual pushing
  - xfs: move and rename xfs_trans_committed_bulk
  - Revert "xfs: update the last_sync_lsn with ctx start lsn"
  - !16404 FIX CVE-2024-58096
  - !16432 wifi: ath11k: fix RCU stall while reaping monitor destination ring
  - perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
  - !16433 Fix CVE-2025-21972
  - x86/mm: support to dec and enc userspace pages
  - !16399 CVE-2025-37925
  - !16291 Fix CVE-2025-37773
  - !16317 Fix CVE-2025-37782
  - !16378 vdpa:Adding compilation macro to decouple the vdpa and iommufd modules
  - riscv: Pass patch_text() the length in bytes
  - intel_idle: add Clearwater Forest SoC support
  - intel_idle: add Granite Rapids Xeon D support
  - !16041 [OLK-6.6] 支持用户态通过hygon_psp_resource2设备节点mmap PSP设备的mmio内存
  - mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios
  - ext4: move mb_last_[group|start] to ext4_inode_info
  - ext4: add ext4_try_lock_group() to skip busy groups
  - !16366  Backport 6.6.55-6.6.60 LTS
  - !16389  mm: remove unnecessary calls to lru_add_drain
  - !16388  cgroup: Eliminate the need for cgroup_mutex in proc_cgroup_show()
  - vdpa:Adding compilation macro to decouple the vdpa and iommufd modules
  - EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
  - EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
  - EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
  - EDAC/amd64: Rename the address translation function for hygon family 18h model 4h
  - crypto: ccp: Support userspace mmap psp mmio
  - !16100 kvm:Optimize the processing performance of multiple eventfd and irqfd
  - !16427 [OLK-6.6] 移除vpsp运行时对CSV功能的依赖
  - !16428  RDMA/core: Silence oversized kvmalloc() warning
  - !16408  drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
  - wifi: ath11k: fix RCU stall while reaping monitor destination ring
  - !16423  arm64/mpam: Update QoS partition default value
  - net: mctp: unshare packets when reassembling
  - arm64/kabi: use KABI_EXTEND to skip KABI check
  - kvm: hisi: print error for IPIV
  - KVM: arm64: using kvm_vgic_global_state for ipiv
  - kvm: hisi: Don't allow to change mpidr in IPIv
  - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv
  - KVM: arm64: fix live migration bug of IPIv
  - irqchip/gic: Add HiSilicon PV SGI support
  - KVM: arm64: Implement PV_SGI related calls
  - KVM: arm64: Document PV-sgi interface
  - KVM: arm64: Introduce ipiv enable ioctl
  - arm64/config: add config to control whether enable IPIV feature
  - !15657 [OLK-6.6] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
  - RDMA/core: Silence oversized kvmalloc() warning
  - !16421  mm: fix VMA heap bounds checking
  - crypto: ccp: support psp generic ringbuffer
  - crypto: ccp: Remove vpsp's dependency on sev module
  - !15903 bcache: call force_wake_up_gc() if necessary in check_should_bypass()
  - !16394  CVE-2025-37970
  - arm64/mpam: Update QoS partition default value
  - x86/resctrl: Add max_bw to struct resctrl_membw
  - x86/resctrl: Remove hard-coded memory bandwidth limit
  - arm64/mpam: Set 1 as the minimum setting value for MBA
  - arm64/mpam: Fix num_rmids information
  - fs/resctrl: Fix the crash caused by mounting resctrl but not support RDT
  - fuse: remove an unnecessary if statement
  - fuse: use fuse_range_is_writeback() instead of iterating pages
  - fuse: remove unneeded lock which protecting update of congestion_threshold
  - fuse: clear FR_PENDING if abort is detected when sending request
  - fuse: cleanup request queuing towards virtiofs
  - fuse: add fast path for fuse_range_is_writeback
  - fuse: enable dynamic configuration of fuse max pages limit (FUSE_MAX_MAX_PAGES)
  - fuse: Add initial support for fs-verity
  - anolis: fuse: introduce write alignment
  - anolis: fuse: separate bg_queue for write and other requests
  - fuse: check aborted connection before adding requests to pending list for resending
  - fuse: clear FR_SENT when re-adding requests into pending list
  - fuse: set FR_PENDING atomically in fuse_resend()
  - fuse: Use the high bit of request ID for indicating resend requests
  - fuse: Introduce a new notification type for resend pending requests
  - fuse: add support for explicit export disabling
  - config: enable FS_STACK at correct position
  - mm: fix VMA heap bounds checking
  - drm/nouveau: prime: fix ttm_bo_delayed_delete oops
  - bus: mhi: host: Fix race between unprepare and queue_buf
  - add enfs feature
  - !16392 【olk 6.6】backport two bugfixes for hibmcge driver
  - drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
  - !16401 v7  Add FUSE Passthrough Support
  - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode
  - fuse: config: enable FUSE_PASSTHROUGH and FS_STACK
  - fs: use do_splice_direct() for nfsd/ksmbd server-side-copy
  - fs: move file_start_write() into direct_splice_actor()
  - fs: fork splice_file_range() from do_splice_direct()
  - backing-file: convert to using fops->splice_write
  - fuse: update inode size after extending passthrough write
  - fs: pass offset and result to backing_file end_write() callback
  - fuse: disable the combination of passthrough and writeback cache
  - fs: fix __sb_write_started() kerneldoc formatting
  - remap_range: merge do_clone_file_range() into vfs_clone_file_range()
  - ovl: relax WARN_ON in ovl_verify_area()
  - ovl: fix dentry reference leak after changes to underlying layers
  - fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set
  - fuse: respect FOPEN_KEEP_CACHE on opendir
  - fuse: verify zero padding in fuse_backing_map
  - fuse: fix parallel dio write on file open in passthrough mode
  - fuse: fix wrong ff->iomode state changes from parallel dio write
  - fuse: implement passthrough for mmap
  - fuse: implement splice read/write passthrough
  - fuse: implement read/write passthrough
  - fuse: implement open in passthrough mode
  - fuse: prepare for opening file in passthrough mode
  - fuse: implement ioctls to manage backing files
  - fuse: introduce FUSE_PASSTHROUGH capability
  - fuse: factor out helper for FUSE_DEV_IOC_CLONE
  - fs: factor out backing_file_mmap() helper
  - fs: factor out backing_file_splice_{read,write}() helpers
  - fs: factor out backing_file_{read,write}_iter() helpers
  - fs: prepare for stackable filesystems backing file helpers
  - fs: create {sb,file}_write_not_started() helpers
  - fs: create file_write_started() helper
  - fs: create __sb_write_started() helper
  - fs: move kiocb_start_write() into vfs_iocb_iter_write()
  - fs: move permission hook out of do_iter_read()
  - fs: move permission hook out of do_iter_write()
  - fs: move file_start_write() into vfs_iter_write()
  - coda: change locking order in coda_file_write_iter()
  - btrfs: move file_start_write() to after permission hook
  - remap_range: move file_start_write() to after permission hook
  - remap_range: move permission hooks out of do_clone_file_range()
  - splice: remove permission hook from iter_file_splice_write()
  - splice: move permission hook out of splice_file_to_pipe()
  - splice: move permission hook out of splice_direct_to_actor()
  - splice: remove permission hook from do_splice_direct()
  - ovl: add permission hooks outside of do_splice_direct()
  - ovl: do not encode lower fh with upper sb_writers held
  - ovl: do not open/llseek lower file with upper sb_writers held
  - ovl: reorder ovl_want_write() after ovl_inode_lock()
  - ovl: split ovl_want_write() into two helpers
  - ovl: add helper ovl_file_modified()
  - fs: store real path instead of fake path in backing file f_path
  - fs: create helper file_user_path() for user displayed mapped file path
  - fs: get mnt_writers count for an open backing file's real path
  - ovl: protect copying of realinode attributes to ovl inode
  - ovl: punt write aio completion to workqueue
  - ovl: propagate IOCB_APPEND flag on writes to realfile
  - ovl: use simpler function to convert iocb to rw flags
  - fuse: allow parallel dio writes with FUSE_DIRECT_IO_ALLOW_MMAP
  - fuse: introduce inode io modes
  - fuse: prepare for failing open response
  - fuse: break up fuse_open_common()
  - fuse: allocate ff->release_args only if release is needed
  - fuse: factor out helper fuse_truncate_update_attr()
  - fuse: add fuse_dio_lock/unlock helper functions
  - fuse: create helper function if DIO write needs exclusive lock
  - fs: export mnt_{get,put}_write_access() to modules
  - fs: rename __mnt_{want,drop}_write*() helpers
  - jfs: reject on-disk inodes of an unsupported type
  - cachefiles: Parse the "secctx" immediately
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
  - net: hibmcge: fix wrong ndo.open() after reset fail issue.
  - net: hibmcge: fix incorrect statistics update issue
  - sw64: adapt to the upstream changes in early_init_dt_(scan/verify)
  - sw64: gpu: replace __sw_64__ with CONFIG_SW64
  - sw64: kprobe on ftrace: fix bug in restoring regs
  - sw64: iommu: do real map on iova in 32bit mmio space
  - mm: remove unnecessary calls to lru_add_drain
  - cgroup: Eliminate the need for cgroup_mutex in proc_cgroup_show()
  - !16374  LTS Conflicts Backport
  - sw64: qspinlock: add CNA support for sw64
  - sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
  - sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
  - Revert "sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu"
  - sw64: move syscall handling to sys_sw64.c
  - sw64: improve sw64_rrk
  - sw64: fix printing issue when using kprobe on ftrace
  - sw64: add powercap driver
  - sw64: clocksource: fix the issue of clockevents not being notified
  - sw64: modify the interface for firmware to pass the running mode
  - sw64: fix shared_cpu_map of L3 Cache
  - sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
  - sw64: kvm: optimize the compatibility of guest interrupt
  - sw64: kvm: optimize the implementation of guest interrupt
  - sw64: fix some compile issues for cpuautoplug.c
  - sw64: cpufreq: fix for emulator that do not support cpufreq
  - sw64: cpufreq: refactor cpufreq related code
  - sw64: iommu: work around iova range check after resv_region
  - sw64: gpu: fix SIMD IO access issues
  - sw64: msi: fix guest msi interrupt handling
  - sw64: msi: modify msi migration strategy
  - sw64: msi: clear the residual vector_irq information of cpu
  - sw64: ftrace: add notrace attribute to memset&memcpy
  - sw64: ftrace: fix bug in restoring regs
  - sw64: cpufreq: remove some meaningless code
  - sw64: cpufreq: move cpufreq notifier to its user
  - sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
  - sw64: cpufreq: remove debugfs code
  - sw64: fix an error in BPF exception handling
  - sw64: modify CPU autoplug initialization process
  - sw64: iommu: print more info for interrupts
  - sw64: msi: fix irq affinity setting during migration
  - sw64: use CONFIG_HZ_PERIODIC by default
  - sw64: fix specific performance counter error
  - sw64: enable all HW PMUs for max sampling period events
  - sw64: update exclusive counter handling
  - sw64: fix perf event L1I cache write support
  - sw64: locking/atomic: make atomic*_{cmp,}xchg optional
  - sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
  - sw64: kexec: add support for crashkernel=size[KMG]
  - sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
  - sw64: ftrace: save&restore more stack frame in ftrace_caller
  - sw64: enable -fsw-unalign-byte for new subarchs
  - sw64: reduce jump instructions in entUna
  - sw64: simplify GP handling for entUna
  - sw64: fix secondary_cpu_start for CORE3B
  - sw64: reimplement cmpxchg and xchg
  - sw64: change condition of some cflags
  - sw64: put cpu_set_node() in init text
  - sw64: make sw64_(read/write)_csr always inline
  - sw64: compile divide.S for c3b only
  - sw64: vdso: add support for time namespaces
  - sw64: rename PT_REGS_SP to PT_REGS_R30
  - sw64: modify parameters of the exception functions
  - sw64: kvm: modify parameters of the exception functions
  - sw64/vdso: Support mremap() for vDSO
  - sw64/kvm: fix a bug for starting CORE3 VM
  - sw64: ftrace: fix atomicity bugs in ftrace
  - sw64: fix copy_oldmem_page according to upstream
  - sw64: fix nmi_(enter/exit) error in CORE3B
  - sw64: add a 1ms delay before CPU offline
  - sw64: topology: discard topology information from PPTT
  - sw64: iommu: implement resv_region APIs
  - sw64: pci: fix secondary bus reset issue
  - sw64: sound: avoid pagefault in pcm driver's memset
  - sw64: flush TLB after modifying ptbr_sys
  - sw64: fix an error when running no main() program
  - sw64: cache: fix cache ID is not unique when ACPI disabled
  - sw64: ftrace: implement ftrace_modify_call
  - sw64: kvm: fix incorrect vm_flags in vmem_mmap()
  - sw64: cpu: give preference to CPU information from SMBIOS
  - sw64: irqchip: use sunway as vendor prefix in device tree
  - sw64: irqchip: use pr_fmt instead of prefix string macro
  - sw64: numa: decrease CONFIG_NODES_SHIFT to 3
  - sw64: acpi: suppress meaningless error log when acpi=off
  - sw64: emulator: refactor shutdown and restart functions
  - perf jitdump: Add SW64 support
  - sw64: emulator: add shutdown and restart functions
  - sw64: emulator: fix the multi-core boot issue
  - sw64: fix bad address error for vfio
  - sw64: acpi: add support for ACPI S3
  - sw64: iommu: restore iommu_map/unmap callbacks
  - sw64: iommu: work around lazy translation initialization
  - sw64: iommu: adjust def_domain_type
  - sw64: iommu: fix iommu_v1 capability
  - sw64: fix iommu commandline parameter
  - sw64: iommu: remove unnecessary locking in map/unmap_pages
  - sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
  - sw64: fix kprobe function
  - sw64: perf: fix specific performance events can be sampled
  - sw64: bpf: optimize JIT for load imm
  - sw64: bpf: fix BPF_CALL JIT for multi-function programs
  - sw64: bpf: optimize some instructions
  - sw64: bpf: fix XADD32 and XADD64
  - sw64: kexec: fix a bug in menuconfig
  - sw64: kexec: fix a compilation error
  - sw64: iommu: mark hose->iommu_enable as true before probing
  - sw64: iommu: fix work around of iommu interrupt remapping capability
  - sw64: iommu: fix def_domain_type callback
  - sw64: iommu: introduce PCI device check before iommu probing
  - !16085  init/Kconfig: Add SMP to the dependencies of QOS_SCHED
  - !16311  kernel: Remove signal hacks for vhost_tasks
  - !16365  Add CFTYPE_NOT_ON_ROOT for qos_level
  - !16364  gfp: include __GFP_NOWARN in GFP_NOWAIT
  - eventfd:Introduce the eventfd batch processing interface
  - !16369  ftrace: Add cond_resched() to ftrace_graph_set_hash()
  - x86/ptrace: Fix kabi breakage in struct pt_regs
  - x86/ptrace: Add FRED additional information to the pt_regs structure
  - x86/ptrace: Cleanup the definition of the pt_regs structure
  - ftrace: Add cond_resched() to ftrace_graph_set_hash()
  - net: Fix kabi breakage in struct netlink_dump_control
  - net: Fix kabi breakage in struct netlink_callback
  - rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag
  - rtnetlink: change nlk->cb_mutex role
  - Add CFTYPE_NOT_ON_ROOT for qos_level
  - docs/core-api: memory-allocation: GFP_NOWAIT doesn't need __GFP_NOWARN
  - gfp: include __GFP_NOWARN in GFP_NOWAIT
  - yt6801: Add Motorcomm yt6801 PCIe driver
  - kernel: Remove signal hacks for vhost_tasks
  - hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
  - bcache: call force_wake_up_gc() if necessary in check_should_bypass()
  - virtiofs: add filesystem context source name check
  - KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
  - init/Kconfig: Add SMP to the dependencies of QOS_SCHED
  - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
  - EDAC/amd64: Refactor the calculation of instance id for Hygon family 18h model 10h
  - EDAC/amd64: Calculate instance id for hygon family 18h model 7h
  - iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
  - EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h


author: Li Nan <linan122@huawei.com> - 6.6.0-95.0.0.99
changelog:
  - !16482 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Conflicts Patches
  - !16211 [OLK-6.6] Fix CVE-2025-22028
  - !16210 [OLK-6.6] Fix CVE-2025-22109
  - !16209 [OLK-6.6] Fix CVE-2025-22127
  - !16207 [OLK-6.6] Fix CVE-2025-22104
  - !16563 Some random fixes and cleanup to shmem
  - !16564  tracing: Fix filter string testing
  - mm/shmem: remove unneeded xa_is_value() check in shmem_unuse_swap_entries()
  - mm/shmem: fix potential dead loop in shmem_unuse()
  - mm: shmem: add missing shmem_unacct_size() in __shmem_file_setup()
  - !16536  sched: fair: Use rq_clock_task to account rq->idle_avg
  - tracing: Fix filter string testing
  - mm: shmem: avoid unpaired folio_unlock() in shmem_swapin_folio()
  - !16542  perf: Fix hang while freeing sigtrap event
  - !16313  PCI: Fix reference leak in pci_register_host_bridge()
  - !16395  PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
  - !16246 backport mainline mm bugfix
  - !16541  irqchip/gic: remove useless printing in pv sgi
  - !16477  CVE-2024-50140
  - !16435  fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
  - !16372  ksmbd: Fix UAF in __close_file_table_ids
  - !16371  ext4: ignore xattrs past end
  - perf: Fix hang while freeing sigtrap event
  - irqchip/gic: remove useless printing in pv sgi
  - !16532  memcg: always call cond_resched() after fn()
  - sched: fair: Use rq_clock_task to account rq->idle_avg
  - memcg: always call cond_resched() after fn()
  - !16524 v3  CVE-2024-27079
  - !16527 v2  some fix about ifs
  - !16521  drm/amd/display: Fix slab-use-after-free in hdcp
  - !16513  fs/resctrl: Restore default settings for all resctrl_res_level
  - interference: Fix IFS cannot show in cgroup v1 sub-cgroup
  - interference: Fix compilation issue
  - !16523 v2  arm64: entry: Fix ACTLR_XCALL_XINT not set build problem
  - iommu/vt-d: Fix NULL domain on device release
  - iommu: Fix kabi breakage for release_domain in struct iommu_ops
  - iommu: Add static iommu_ops->release_domain
  - !16515  ASoC: qcom: Fix sc7280 lpass potential buffer overflow
  - !16483 bugfix for hisilicon accelerator driver
  - arm64: entry: Fix ACTLR_XCALL_XINT not set build problem
  - drm/amd/display: Fix slab-use-after-free in hdcp
  - ASoC: qcom: Fix sc7280 lpass potential buffer overflow
  - fs/resctrl: Add missing rdt_last_cmd_clear() after rdtgroup_kn_lock_live()
  - fs/resctrl: Restore default settings for all resctrl_res_level
  - fs/resctrl: Free mbm_total and mbm_local when fails
  - usb: typec: ucsi: Set orientation as none when connector is unplugged
  - crypto: hisilicon/zip - do not expose hashagg algorithm when uacce mode is 2
  - crypto: hisilicon/trng - use DEFINE_MUTEX() for mutex lock
  - crypto: hisilicon - enable error reporting again
  - crypto: hisilicon/qm - alloc power of 2 interrupts
  - crypto: hisilicon/qm - fix vfs_num error
  - uacce: fix unsigned long print format
  - uacce: delete some redundant code
  - uacce: fix isolate sysfs check condition
  - usb: typec: ucsi: glink: fix off-by-one in connector_status
  - usb: typec: ucsi: glink: be more precise on orientation-aware ports
  - usb: typec: ucsi: glink: set orientation aware if supported
  - usb: typec: ucsi: glink: move GPIO reading into connector_status callback
  - task_work: make TWA_NMI_CURRENT handling conditional on IRQ_WORK
  - task_work: Fix kabi breakage in enum task_work_notify_mode
  - sched/core: Disable page allocation in task_tick_mm_cid()
  - task_work: Add TWA_NMI_CURRENT as an additional notify mode.
  - wifi: ath12k: Optimize the mac80211 hw data access
  - mm/huge_memory: fix dereferencing invalid pmd migration entry
  - selftests/mm: compaction_test: support platform with huge mount of memory
  - fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
  - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
  - ksmbd: Fix UAF in __close_file_table_ids
  - ext4: ignore xattrs past end
  - PCI: Fix reference leak in pci_register_host_bridge()
  - media: vimc: skip .s_stream() for stopped entities
  - media: subdev: Add v4l2_subdev_is_streaming()
  - media: subdev: Improve v4l2_subdev_enable/disable_streams_fallback
  - media: subdev: Fix use of sd->enabled_streams in call_s_stream()
  - f2fs: fix potential deadloop in prepare_compress_overwrite()
  - ax25: Remove broken autobind
  - ibmvnic: Use kernel helpers for hex dumps


author: Li Nan <linan122@huawei.com> - 6.6.0-96.0.0.100
changelog:
  - !16670  mm/mm_spe.c: remove redundant checks and debug prints in mm_spe probe
  - !16668  Remove useless file
  - mm/mm_spe.c: remove redundant checks and debug prints in mm_spe probe
  - Remove useless file
  - !15819 [OLK-6.6]drm/phytium: Fix some Bugs in Phytium Display Engine
  - !16627  fix move_pages return value
  - !16620  close_files(): don't bother with xchg()
  - !16604  pds_core: remove write-after-free of client_id
  - !16434  ksmbd: fix use-after-free in ksmbd_session_rpc_open
  - !16585  tracing: Fix oob write in trace_seq_to_buffer()
  - mm/migrate: convert add_page_for_migration() from follow_page() to folio_walk
  - mm/pagewalk: fix usage of pmd_leaf()/pud_leaf() without present check
  - mm/pagewalk: introduce folio_walk_start() + folio_walk_end()
  - mm: introduce vma_pgtable_walk_{begin|end}()
  - mm/migrate: use folio_likely_mapped_shared() in add_page_for_migration()
  - !16537  md: fix mddev uaf while iterating all_mddevs list
  - !16538  md/raid10: wait barrier before returning discard request with REQ_NOWAIT
  - !16494  scsi: st: Fix array overflow in st_setup()
  - !16582  module: ensure that kobject_put() is safe for module type kobjects
  - !16605  iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
  - !16606  CVE-2024-58100
  - close_files(): don't bother with xchg()
  - !16609 migration: update status after RAS error
  - !16586  dlm: prevent NPD when writing a positive value to event_done
  - !16580  dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
  - bpf: Fix kabi breakage for changes_pkt_data in struct bpf_prog_aux
  - bpf: fix null dereference when computing changes_pkt_data of prog w/o subprogs
  - bpf: check changes_pkt_data property for extension programs
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
  - pds_core: remove write-after-free of client_id
  - !16571  Fix erofs fid overflow
  - !16574  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
  - !16550  media: venus: hfi_parser: refactor hfi packet parsing logic
  - !16549  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
  - !16600  ftrace: Fix preemption accounting for stacktrace trigger command
  - !16596  powerpc/crash: Fix non-smp kexec preparation
  - !16562 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 6.6
  - !16593  vxlan: vnifilter: Fix unlocked deletion of default FDB entry
  - finally take no_llseek out
  - migration: update status after RAS error
  - ftrace: Fix preemption accounting for stacktrace trigger command
  - powerpc/crash: Fix non-smp kexec preparation
  - !16588  ipc: fix to protect IPCS lookups using RCU
  - vxlan: vnifilter: Fix unlocked deletion of default FDB entry
  - ipc: fix to protect IPCS lookups using RCU
  - dlm: prevent NPD when writing a positive value to event_done
  - tracing: Fix compilation warning on arm32
  - tracing: Fix oob write in trace_seq_to_buffer()
  - module: ensure that kobject_put() is safe for module type kobjects
  - dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
  - !16492  arm64/watchdog: fix watchdog failure in low power scenarios
  - cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
  - erofs: fix file handle encoding for 64-bit NIDs
  - exportfs: define FILEID_INO64_GEN* file handle types
  - media: venus: hfi_parser: refactor hfi packet parsing logic
  - soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
  - md/raid10: wait barrier before returning discard request with REQ_NOWAIT
  - md: fix mddev uaf while iterating all_mddevs list
  - platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
  - platform/x86/intel-uncore-freq: Add support for efficiency latency control
  - platform/x86/intel-uncore-freq: Do not present separate package-die domain
  - scsi: st: Fix array overflow in st_setup()
  - arm64/watchdog: fix watchdog failure in low power scenarios
  - drm/phytium: Fix some Bugs in Phytium Display Engine
  - ksmbd: fix use-after-free in ksmbd_session_rpc_open


author: Li Nan <linan122@huawei.com> - 6.6.0-98.0.0.101
changelog:
  - !16740  KVM: arm64: check if IPIV is enabled in BIOS
  - !16737  drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu
  - KVM: arm64: check if IPIV is enabled in BIOS
  - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu
  - !16694  RDMA/hns: Fix double destruction of rsv_qp
  - !16730  uacce: removal of the Shared Memory Feature for Queues
  - !16727  perf: Remove unstable events for uncore L3C PMU
  - !16732  drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface
  - !16728  drivers/perf: hisi: Add cacheable option for L3C PMU
  - !16724  drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu
  - !16723  perf iostat: hisi: Fix port range retrival
  - !16729  arm64: Fix unmet direct dependencies for DEBUG_FEATURE_BYPASS
  - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface
  - crypto: hisilicon/qm - check whether the input parameters and device PF match
  - uacce: removal of the Shared Memory Feature for Queues
  - arm64: Fix unmet direct dependencies for DEBUG_FEATURE_BYPASS
  - !16721 cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus
  - drivers/perf: hisi: Add cacheable option for L3C PMU
  - perf: Remove unstable events for uncore L3C PMU
  - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu
  - perf iostat: hisi: Fix port range retrival
  - !16701  Add HiSilicon uncore frequency scaling driver
  - !16712 crypto: hisilicon - support algorithm fallback v2
  - arm64: topology: Setup amu fie when cpu hotplugging
  - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn()
  - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus
  - topology: Set capacity_freq_ref in all cases
  - arm64/amu: Use capacity_ref_freq() to set AMU ratio
  - cpufreq/cppc: Set the frequency used for computing the capacity
  - energy_model: Use a fixed reference frequency
  - cpufreq/schedutil: Use a fixed reference frequency
  - cpufreq: Use the fixed and coherent frequency for scaling capacity
  - !16717  Fix issues of nfs mounting
  - !16714 v2  Fix file content inconsistency issue and incorporate subsequent fix patches
  - sched/topology: Add a new arch_scale_freq_ref() method
  - !16696  KVM: arm64: Check whether GICv4.0 is enabled
  - nfs: ignore SB_RDONLY when remounting nfs
  - nfs: clear SB_RDONLY before getting superblock
  - vfs: generate FS_CREATE before FS_OPEN when ->atomic_open used.
  - NFS: abort nfs_atomic_open_v23 if name is too long.
  - NFS: add atomic_open for NFSv3 to handle O_TRUNC correctly.
  - !16680  Fix the problem of NFS client mount read/write permission failure
  - crypto: hisilicon/qm - check the value obtained from the hardware
  - crypto: hisilicon/hpre - support the hpre algorithm fallback
  - crypto: hisilicon - implement full backlog support for sec
  - uacce: add queue lock for uacce_get_ss_dma
  - uacce: use WARN_ON_ONCE instead of WARN_ON
  - !16705  fs/resctrl: Fix return value in rdtgroup_pseudo_locked_in_hierarchy()
  - !16691 v3  Rewrite smt interference account logic
  - !16662  Fix watchdog false positive problem
  - !16711  af_unix: Read 0 bytes with MSG_PEEK loops if last skb is OOB
  - af_unix: Read 0 bytes with MSG_PEEK loops if last skb is OOB
  - fs/resctrl: Fix return value in rdtgroup_pseudo_locked_in_hierarchy()
  - !16287 Update the watchdog period according to real CPU frequency
  - !16679  fs/resctrl: L2_MON does not support the limbo mechanism
  - openeuler_defconfig: Enable devfreq and hisi_uncore_freq by default
  - PM / devfreq: Add HiSilicon uncore frequency scaling driver
  - PM / devfreq: Allow devfreq driver to add custom sysfs ABIs
  - PM / devfreq: Check governor before using governor->name
  - PM / devfreq: Remove redundant devfreq_get_freq_range() calling in devfreq_add_device()
  - PM / devfreq: Limit max_freq with scaling_min_freq
  - PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
  - mailbox: pcc: Refactor and simplify check_and_ack()
  - mailbox: pcc: Always map the shared memory communication address
  - mailbox: pcc: Refactor error handling in irq handler into separate function
  - mailbox: pcc: Use acpi_os_ioremap() instead of ioremap()
  - mailbox: pcc: Return early if no GAS register from pcc_mbox_cmd_complete_check
  - mailbox: pcc: Drop unnecessary endianness conversion of pcc_hdr.flags
  - !16653 [OLK-6.6] Revert "USB: xHCI: fix resume issue of some ZHAOXIN hosts"
  - !16699  mm: provide vm_normal_(page|folio)_pmd() with CONFIG_PGTABLE_HAS_HUGE_LEAVES
  - mm: provide vm_normal_(page|folio)_pmd() with CONFIG_PGTABLE_HAS_HUGE_LEAVES
  - KVM: arm64: Check whether GICv4.0 is enabled
  - RDMA/hns: Fix double destruction of rsv_qp
  - interference: Rewrite smt interference account logic
  - interference: Fix the compilation warning of sched_task_is_throttled()
  - !16686 v2  Soft domain improves and bugfixes
  - sched: Fix might sleep in atomic section issue
  - sched: Consider task affinity in wake_soft_domain()
  - sched: Fix soft domain group memleak
  - sched: Rework cpu.soft_domain_nr_cpu
  - sched: Add cmdline sched_soft_domain switch for soft domain feature
  - !16639  arm64/mpam: Add MPAM manual
  - Revert "nfs: ignore SB_RDONLY when mounting nfs"
  - Revert "nfs: pass flags to second superblock"
  - Revert "nfs: fix the loss of superblock's initialized flags"
  - !16651  iommu/arm-smmu-v3: Fix global-out-of-bounds access in arm_smmu_group_get_mpam()
  - fs/resctrl: L2_MON does not support the limbo mechanism
  - watchdog: fix the SOFTLOCKUP_DETECTOR=n case
  - watchdog: fix watchdog may detect false positive of softlockup
  - Revert "USB: xHCI: fix resume issue of some ZHAOXIN hosts"
  - iommu/arm-smmu-v3: Fix global-out-of-bounds access in arm_smmu_group_get_mpam()
  - fs/resctrl: Prevent idle RMIDs from not being released in time from limbo
  - arm64/mpam: Update the chip condition judgment in resctrl_arch_would_mbm_overflow()
  - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh
  - watchdog/perf: Provide function for adjusting the event period
  - arm64/mpam: Add MPAM manual


author: Li Nan <linan122@huawei.com> - 6.6.0-99.0.0.102
changelog:
  - !16556 [OLK-6.6] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
  - !16559 mm: mincore: use pte_batch_hint() to batch process large folios
  - !16689 mm/madvise: batch tlb flushes for MADV_DONTNEED and MADV_FREE
  - !16426 FIX CVE-2025-40014
  - !16601 add virtcca capability and kae vf interface
  - !16866 v2  mempolicy: optimize queue_folios_pte_range by PTE batching
  - !16865  pci:vga fix race condition in vga_arb_write
  - !16770 [OLK-6.6] Intel: Backport to fix QuickAssist Technology(QAT) in-tree driver from v6.10 to v6.16
  - !16773  mm:userswap: change VM_USWAP_BIT to bit 61
  - !16820 v2  Fix some smmu bugs
  - !16803  CVE-2025-38060
  - !16828  orangefs: Do not truncate file size
  - !16812 perf hisi-ptt: Fix memory leak in lseek failure handling
  - !16827  btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
  - !16775 [OLK-6.6]fix enfs bug
  - !16861  arm64: kaslr: fix nokaslr cmdline parsing
  - mempolicy: optimize queue_folios_pte_range by PTE batching
  - !16804  HID: uclogic: Add NULL check in uclogic_input_configured()
  - !16806  vhost-scsi: protect vq->log_used with vq->mutex
  - !14552 [OLK-6.6]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
  - !16573  Backport 6.6.64-6.6.72 LTS
  - !16757  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
  - !16756  mm: pcp: increase pcp->free_count threshold to trigger free_high
  - pci:vga fix race condition in vga_arb_write
  - !16656  merge CVE patches into OLK-6.6
  - !16512  perf/x86/intel: Only check the group flag for X86 leader
  - !16617  SELinux: Add check for the user data passed to kcalloc in hashtab_init
  - !16748  arm64: xcall: Fix GPR touch as the original step
  - !16778  drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
  - !16848  tracing: probes: Fix a possible race in trace_probe_log APIs
  - !16842  ftrace: Fix UAF when lookup kallsym after ftrace disabled
  - !16837  ftrace: Fix preemption accounting for stacktrace filter command
  - !16845  bpf: Avoid __bpf_prog_ret0_warn when jit fails
  - !16652 v2  CVE-2025-37948
  - !16791  ALSA: pcm: Fix race of buffer access at PCM OSS layer
  - arm64: kaslr: fix nokaslr cmdline parsing
  - !16851  drm/amd/display: Increase block_sequence array size
  - drm/amd/display: Increase block_sequence array size
  - tracing: probes: Fix a possible race in trace_probe_log APIs
  - bpf: Avoid __bpf_prog_ret0_warn when jit fails
  - ftrace: Fix UAF when lookup kallsym after ftrace disabled
  - ftrace: Fix preemption accounting for stacktrace filter command
  - orangefs: Do not truncate file size
  - btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
  - iommu/arm-smmu-v3: Fix the problematic platform detection logic
  - iommu/arm-smmu-v3: Fix the extra atc tlb flush
  - fix review issue
  - vhost-scsi: protect vq->log_used with vq->mutex
  - perf hisi-ptt: Fix memory leak in lseek failure handling
  - HID: uclogic: Add NULL check in uclogic_input_configured()
  - bpf: abort verification if env->cur_state->loop_entry != NULL
  - bpf: copy_verifier_state() should copy 'loop_entry' field
  - ALSA: pcm: Fix race of buffer access at PCM OSS layer
  - fix enfs bug
  - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
  - mm:userswap: change VM_USWAP_BIT to bit 61
  - crypto: qat - switch to standard pattern for PCI IDs
  - crypto: qat - remove BITS_IN_DWORD()
  - crypto: qat - remove initialization in device class
  - crypto: qat - add shutdown handler to qat_c3xxx
  - crypto: qat - remove redundant prototypes in qat_c3xxx
  - crypto: qat - add shutdown handler to qat_c62x
  - crypto: qat - remove redundant prototypes in qat_c62x
  - crypto: qat - add shutdown handler to qat_dh895xcc
  - crypto: qat - remove redundant prototypes in qat_dh895xcc
  - crypto: qat - add shutdown handler to qat_420xx
  - crypto: qat - add shutdown handler to qat_4xxx
  - crypto: qat - Remove dst_null support
  - crypto: qat - remove access to parity register for QAT GEN4
  - crypto: qat - set parity error mask for qat_420xx
  - crypto: qat - optimize allocations for fw authentication
  - crypto: qat - remove redundant FW image size check
  - crypto: qat - remove unused members in suof structure
  - crypto: qat - introduce fuse array
  - crypto: qat - add macro to write 64-bit values to registers
  - crypto: qat - refactor service parsing logic
  - crypto: qat - do not export adf_cfg_services
  - crypto: qat - reorder objects in qat_common Makefile
  - crypto: qat - fix object goals in Makefiles
  - crypto: qat - set command ids as reserved
  - crypto: drivers - Use str_enable_disable-like helpers
  - vfio/qat: fix overflow check in qat_vf_resume_write()
  - crypto: qat - Fix missing destroy_workqueue in adf_init_aer()
  - crypto: qat - Fix typo "accelaration"
  - crypto: qat - Constify struct pm_status_row
  - crypto: qat - remove unused adf_devmgr_get_first
  - lib/string_choices: Add str_up_down() helper
  - crypto: qat - Remove trailing space after 
  - crypto: qat - fix "Full Going True" macro definition
  - crypto: qat - Use static_assert() to check struct sizes
  - crypto: qat - allow disabling SR-IOV VFs
  - crypto: qat - ensure correct order in VF restarting handler
  - crypto: qat - fix recovery flow for VFs
  - crypto: qat - disable IOV in adf_dev_stop()
  - crypto: qat - preserve ADF_GENERAL_SEC
  - crypto: qat - initialize user_input.lock for rate_limiting
  - crypto: qat - make adf_ctl_class constant
  - crypto: qat - Fix typo
  - crypto: qat - fix linking errors when PCI_IOV is disabled
  - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
  - mm: pcp: increase pcp->free_count threshold to trigger free_high
  - mm: page_alloc: remove redundant READ_ONCE
  - arm64: xcall: Fix GPR touch as the original step
  - mm/madvise: handle madvise_lock() failure during race unwinding
  - mm/madvise: batch tlb flushes for MADV_DONTNEED[_LOCKED]
  - mm/memory: split non-tlb flushing part from zap_page_range_single()
  - mm/madvise: batch tlb flushes for MADV_FREE
  - mm/madvise: define and use madvise_behavior struct for madvise_do_behavior()
  - mm/madvise: remove len parameter of madvise_do_behavior()
  - mm/madvise: remove redundant mmap_lock operations from process_madvise()
  - mm/madvise: split out madvise() behavior execution
  - mm/madvise: split out madvise input validity check
  - mm/madvise: split out mmap locking operations for madvise()
  - mm/madvise: unrestrict process_madvise() for current process
  - mm/madvise: don't perform madvise VMA walk for MADV_POPULATE_(READ|WRITE)
  - crypto: iaa - Fix potential use after free bug
  - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
  - mm: migrate_device: use more folio in migrate_device_finalize()
  - Revert "remoteproc: core: Clear table_sz when rproc_shutdown"
  - remoteproc: core: Clear table_sz when rproc_shutdown
  - jfs: fix slab-out-of-bounds read in ea_get()
  - tpm: do not start chip while suspended
  - KVM: arm64: Tear down vGIC on failed vCPU creation
  - drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()
  - arm64: proton-pack: Add new CPUs 'k' values for branch mitigation
  - arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
  - arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
  - arm64: proton-pack: Expose whether the branchy loop k value
  - arm64: proton-pack: Expose whether the platform is mitigated by firmware
  - arm64: insn: Add support for encoding DSB
  - arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
  - arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
  - arm64: cputype: Add MIDR_CORTEX_A76AE
  - arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
  - arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
  - arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
  - add virtcca capability and kae vf interface
  - SELinux: Add check for the user data passed to kcalloc in hashtab_init
  - PCI: Supplement ACS quirk for more Zhaoxin Root Ports
  - seq_buf: Make DECLARE_SEQ_BUF() usable
  - seq_buf: Introduce DECLARE_SEQ_BUF and seq_buf_str()
  - mm: mincore: use pte_batch_hint() to batch process large folios
  - perf/x86/intel: Only check the group flag for X86 leader
  - objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()
  - irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
  - irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
  - irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
  - acpi/iort: Add func to get used deviceid bitmap


author: Li Nan <linan122@huawei.com> - 6.6.0-100.0.0.103
changelog:
  - !17003  net_sched: red: fix a race in __red_change()
  - !16747  LoongArch: Fix bugs in huge_pte_offset/__alloc_pages_slowpath/iommu
  - !17026  CVE-2025-37842
  - !17022  spi-rockchip: Fix register out of bounds access
  - !17039  iio: light: opt3001: fix deadlock due to concurrent flag access
  - !17036  parisc: Fix double SIGFPE crash
  - !17001  Fix CVE-2025-38182
  - !17034  fix CVE-2025-38118
  - !17033  LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
  - !17035  drm/amdkfd: Fix mode1 reset crash issue
  - !16792 v3  Support CCA Guest
  - iio: light: opt3001: fix deadlock due to concurrent flag access
  - !17023  bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
  - parisc: Fix double SIGFPE crash
  - drm/amdkfd: Fix mode1 reset crash issue
  - Bluetooth: MGMT: Fix sparse errors
  - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
  - LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
  - spi: fsl-qspi: Fix double cleanup in probe error path
  - spi: fsl-qspi: use devm function instead of driver remove
  - !16991  hwmon: (asus-ec-sensors) check sensor index in read_string()
  - !17014 v2  CVE-2025-38099
  - !17013  crypto: null - Use spin lock instead of mutex
  - bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
  - spi-rockchip: Fix register out of bounds access
  - !16983  crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
  - !16982  KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
  - !16957  f2fs: fix to do sanity check on sbi->total_valid_block_count
  - !16999  octeon_ep: Fix host hang issue during device reboot
  - !16995  f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
  - !17000 v2  mm: respect mmap hint address when aligning for THP
  - !17006  drivers/rapidio/rio_cm.c: prevent possible heap overwrite
  - Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers
  - Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken
  - Bluetooth: Add quirk for broken READ_PAGE_SCAN_TYPE
  - Bluetooth: Add quirk for broken READ_VOICE_SETTING
  - crypto: null - Use spin lock instead of mutex
  - !16467 drm/virtio: implement virtio_gpu_shutdown
  - !16565 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y
  - !16743 [OLK-6.6] backport important bugfix for lpfc driver from upstream linux-6.6.y
  - !16902  cachefiles: Fix the incorrect return value in cachefiles_ondemand_fd_write_iter()
  - !16994  net: cadence: macb: Fix a possible deadlock in macb_halt_tx.
  - !16996  wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
  - drivers/rapidio/rio_cm.c: prevent possible heap overwrite
  - net_sched: red: fix a race in __red_change()
  - ublk: santizize the arguments from userspace when adding a device
  - mm: respect mmap hint address when aligning for THP
  - octeon_ep: Fix host hang issue during device reboot
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
  - f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
  - net: cadence: macb: Fix a possible deadlock in macb_halt_tx.
  - !16988  Fix compile problem for psi_grained
  - hwmon: (asus-ec-sensors) check sensor index in read_string()
  - Fix compile problem for psi_grained
  - crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
  - KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
  - !16969  Fix CVE-2025-38170
  - !16967  net: openvswitch: Fix the dead loop of MPLS parse
  - !16964  dma-buf: insert memory barrier before updating num_fences
  - arm64/fpsimd: Discard stale CPU state when handling SME traps
  - !16891 fix some build errors of enfs
  - net: openvswitch: Fix the dead loop of MPLS parse
  - dma-buf: insert memory barrier before updating num_fences
  - !16557 [OLK-6.6] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
  - !16919  Backport mainline patches
  - f2fs: fix to do sanity check on sbi->total_valid_block_count
  - !16567 [OLK-6.6]:update patches for sw64 architecture
  - !16897  CVE-2025-37784
  - !16922 v2  irqchip/gic-v3: Fix xint sleeping function called from invalid context
  - !16926  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
  - !16912 Unbinding VF drivers in virtCCA CoDA SR-IOV scenarios.
  - !16908  OLK-6.6 Bperf
  - !16603 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.83-6.6.84 LTS Patches
  - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
  - irqchip/gic-v3: Fix xint sleeping function called from invalid context
  - !16906  rseq: Fix segfault on registration when rseq_cs is non-zero
  - xfrm: Clear low order bits of ->flowi4_tos in decode_session4().
  - xfrm: policy: fix layer 4 flowi decoding
  - xfrm: policy: replace session decode with flow dissector
  - xfrm: move mark and oif flowi decode into common code
  - xfrm: pass struct net to xfrm_decode_session wrappers
  - !16898  libnvdimm/labels: Fix divide error in nd_label_data_init()
  - !16903  some optimization patches for inet_diag dump
  - Unbinding VF drivers in virtCCA CoDA SR-IOV scenarios.
  - !16895 virtCCA supports SR-IOV in CoDA scenarios.
  - perf stat: Fix incorrect display of bperf when event count is 0
  - perf stat: Increase perf_attr_map entries
  - perf test: Use sqrtloop workload to test bperf event
  - perf test stat_bpf_counter.sh: Stabilize the test results
  - perf test bpf-counters: Add test for BPF event modifier
  - perf stat: Support inherit events during fork() for bperf
  - !16896  drm/v3d: Add job to pending list if the reset was skipped
  - rseq: Fix segfault on registration when rseq_cs is non-zero
  - inet_diag: skip over empty buckets
  - sock_diag: remove sock_diag_mutex
  - inet_diag: allow concurrent operations
  - inet_diag: add module pointer to "struct inet_diag_handler"
  - cachefiles: Fix the incorrect return value in cachefiles_ondemand_fd_write_iter()
  - !16780 v2  mm/mem_sampling: add trace event for spe based damon record
  - !16781 v4  mm/mem_sampling: fix some mem sampling issues
  - libnvdimm/labels: Fix divide error in nd_label_data_init()
  - net: ti: icss-iep: Fix possible NULL pointer dereference for perout request
  - net: ti: icss-iep: Add phase offset configuration for perout signal
  - net: ti: icss-iep: Add pwidth configuration for perout signal
  - drm/v3d: Add job to pending list if the reset was skipped
  - !16753  nfs: handle failure of nfs_get_lock_context in unlock path
  - !16237  pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
  - virtCCA supports SR-IOV in CoDA scenarios.
  - sunrpc, nfs: CONFIG_ENFS should select CONFIG_SUNRPC_ENFS
  - sunrpc, nfs: fix build errors when CONFIG_SUNRPC_ENFS=m && CONFIG_ENFS=m && CONFIG_NFS=y
  - nfs: fix build errors when CONFIG_ENFS=m && CONFIG_NFS_FS=y
  - nfs: fix enfs mount failure when CONFIG_ENFS=y
  - sw64: adapt to the upstream changes in huge_ptep_get_and_clear
  - sw64: sort arch/sw64/Kconfig
  - sw64: iommu: implement map_pages/unmap_pages API
  - gicv3: add lpi support for virtcca cvm guest
  - MAINTAINERS: Add CCA and pKVM CoCO guest support to the ARM64 entry
  - configfs-tsm-report: Fix NULL dereference of tsm_ops
  - arm64: Document Arm Confidential Compute
  - virt: arm-cca-guest: TSM_REPORT support for realms
  - mm/slab: Add __free() support for kvfree
  - configfs-tsm: Introduce a shared ABI for attestation reports
  - virt: coco: Add a coco/Makefile and coco/Kconfig
  - arm64: realm: Use aliased addresses for device DMA to shared buffers
  - dma: Introduce generic dma_addr_*crypted helpers
  - dma: Fix encryption bit clearing for dma_to_phys
  - rme: make sure realm guest map memory in page granularity
  - arm64: realm: ioremap: Allow mapping memory as encrypted
  - parisc: Delay write-protection until mark_rodata_ro() call
  - jump_label,module: Don't alloc static_key_mod for __ro_after_init keys
  - irqchip/gic-v3-its: Rely on genpool alignment
  - irqchip/gic-v3-its: Fix over allocation in itt_alloc_pool()
  - irqchip/gic-v3-its: Share ITS tables with a non-trusted hypervisor
  - arm64: Enable memory encrypt for Realms
  - arm64: mm: Avoid TLBI when marking pages as valid
  - arm64: Enforce bounce buffers for realm DMA
  - efi: arm64: Map Device with Prot Shared
  - arm64: rsi: Map unprotected MMIO as decrypted
  - arm64: rsi: Add support for checking whether an MMIO is protected
  - arm64: realm: Query IPA size from the RMM
  - arm64: Detect if in a realm and set RIPAS RAM
  - arm64: rsi: Add RSI definitions
  - arm64: mm: Add confidential computing hook to ioremap_prot()
  - arm64: mm: Add top-level dispatcher for internal mem_encrypt API
  - Revert "gicv3: add lpi support for cvm guest"
  - Revert "virtcca feature : disable swiotlb for passthrough device"
  - mm/mem_sampling: Fix inaccurate sampling for NUMA balancing and DAMON
  - mm/mem_sampling: Prevent mem_sampling from being enabled if SPE init failed
  - mm/mem_sampling: add trace event for spe based damon record
  - nfs: handle failure of nfs_get_lock_context in unlock path
  - iommu/loongarch: fix potential hung task when error occurred
  - LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
  - mm/page_alloc.c: avoid infinite retries caused by cpuset race
  - LoongArch: Fix early_numa_add_cpu() usage for FDT systems
  - scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails
  - ksmbd: fix r_count dec/increment mismatch
  - Input: xpad - fix two controller table values
  - cifs: Ensure that all non-client-specific reparse points are processed by the server
  - nvme: unblock ctrl state transition for firmware update
  - vboxsf: Add __nonstring annotations for unterminated strings
  - netfilter: nf_tables: allow clone callbacks to sleep
  - netfilter: nf_tables: bail out if stateful expression provides no .clone
  - netfilter: nf_tables: use timestamp to check for set element timeout
  - rust: lockdep: Remove support for dynamically allocated LockClassKeys
  - HID: apple: disable Fn key handling on the Omoton KB066
  - nvme-fc: rely on state transitions to handle connectivity loss
  - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
  - smb: client: Fix match_session bug preventing session reuse
  - smb3: add support for IAKerb
  - i2c: sis630: Fix an error handling path in sis630_probe()
  - i2c: ali15x3: Fix an error handling path in ali15x3_probe()
  - i2c: ali1535: Fix an error handling path in ali1535_probe()
  - cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from parse_reparse_point()
  - cifs: Validate content of WSL reparse point buffers
  - cifs: Fix integer overflow while processing closetimeo mount option
  - cifs: Fix integer overflow while processing actimeo mount option
  - scripts: generate_rust_analyzer: add missing macros deps
  - ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
  - ASoC: rt722-sdca: add missing readable registers
  - rust: init: add missing newline to pr_info! calls
  - ASoC: cs42l43: Fix maximum ADC Volume
  - drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
  - rust: error: add missing newline to pr_warn! calls
  - ASoC: ops: Consistently treat platform_max as control value
  - smb: client: fix regression with guest option
  - qlcnic: fix memory leak issues in qlcnic_sriov_common.c
  - arm64: mm: Populate vmemmap at the page level if not section aligned
  - ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model
  - clk: samsung: update PLL locktime for PLL142XX used on FSD platform
  - ksmbd: prevent connection release during oplock break notification
  - ksmbd: fix use-after-free in ksmbd_free_work_struct
  - drm/amd/display: Fix slab-use-after-free on hdcp_work
  - drm/amd/display: Assign normalized_pix_clk when color depth = 14
  - drm/amd/display: Restore correct backlight brightness after a GPU reset
  - drm/amd/display: Disable unneeded hpd interrupts during dm_init
  - drm/dp_mst: Fix locking when skipping CSN before topology probing
  - drm/atomic: Filter out redundant DPMS calls
  - drm/i915/cdclk: Do cdclk post plane programming later
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
  - USB: serial: option: match on interface class for Telit FN990B
  - USB: serial: option: fix Telit Cinterion FE990A name
  - USB: serial: option: add Telit Cinterion FE990B compositions
  - USB: serial: ftdi_sio: add support for Altera USB Blaster 3
  - Input: i8042 - swap old quirk combination with new quirk for more devices
  - Input: i8042 - swap old quirk combination with new quirk for several devices
  - Input: i8042 - add required quirks for missing old boardnames
  - Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ
  - Input: xpad - rename QH controller to Legion Go S
  - Input: xpad - add support for TECNO Pocket Go
  - Input: xpad - add support for ZOTAC Gaming Zone
  - Input: xpad - add multiple supported devices
  - Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE controllers
  - Input: iqs7222 - preserve system status register
  - Input: ads7846 - fix gpiod allocation
  - io_uring: use unpin_user_pages() where appropriate
  - io_uring/kbuf: vmap pinned buffer ring
  - io_uring: use vmap() for ring mapping
  - io_uring: fix corner case forgetting to vunmap
  - io_uring: don't attempt to mmap larger than what the user asks for
  - io_uring: get rid of remap_pfn_range() for mapping rings/sqes
  - mm: add nommu variant of vm_insert_pages()
  - block: fix 'kmem_cache of name 'bio-108' already exists'
  - net: Handle napi_schedule() calls from non-interrupt
  - drm/nouveau: Do not override forced connector status
  - mptcp: safety check before fallback
  - x86/irq: Define trace events conditionally
  - perf/x86/intel: Use better start period for frequency mode
  - drm/vkms: Round fixp2int conversion in lerp_u16
  - fuse: don't truncate cached, mutated symlink
  - ASoC: tas2764: Set the SDOUT polarity correctly
  - ASoC: tas2764: Fix power control mask
  - ASoC: tas2770: Fix volume scale
  - nvme: only allow entering LIVE from CONNECTING state
  - sctp: Fix undefined behavior in left shift operation
  - cifs: Treat unhandled directory name surrogate reparse points as mount directory nodes
  - apple-nvme: Release power domains when probe fails
  - nvmet-rdma: recheck queue state is LIVE in state lock in recv done
  - nvme-pci: quirk Acer FA100 for non-uniqueue identifiers
  - io-wq: backoff when retrying worker creation
  - net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
  - ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE
  - ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
  - ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
  - ASoC: rsnd: adjust convert rate limitation
  - ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
  - ASoC: rsnd: indicate unsupported clock rate
  - ALSA: hda/realtek: Limit mic boost on Positivo ARN50
  - ASoC: simple-card-utils.c: add missing dlc->of_node
  - selftests/bpf: Fix invalid flag of recv()
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
  - Xen/swiotlb: mark xen_swiotlb_fixup() __init
  - thermal/cpufreq_cooling: Remove structure member documentation
  - s390/cio: Fix CHPID "configure" attribute caching
  - platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles
  - platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e
  - sched: Clarify wake_up_q()'s write to task->wake_q.next
  - objtool: Ignore dangling jump table entries
  - HID: apple: fix up the F6 key on the Omoton KB066 keyboard
  - HID: hid-apple: Apple Magic Keyboard a3203 USB-C support
  - HID: topre: Fix n-key rollover on Realforce R3S TKL boards
  - usb: phy: generic: Use proper helper for property detection
  - HID: ignore non-functional sensor in HP 5MP Camera
  - HID: intel-ish-hid: Send clock sync message immediately after reset
  - HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
  - vboxsf: fix building with GCC 15
  - alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
  - smb: client: fix noisy when tree connecting to DFS interlink targets
  - ACPI: resource: IRQ override for Eluktronics MECH-17
  - scsi: ufs: core: Fix error return with query response
  - scsi: core: Use GFP_NOIO to avoid circular locking dependency
  - platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show()
  - sched/debug: Provide slice length for fair tasks
  - powercap: call put_device() on an error path in powercap_register_control_type()
  - hrtimers: Mark is_migration_base() with __always_inline
  - nvme-fc: do not ignore connectivity loss during connecting
  - nvme-fc: go straight to connecting state when initializing
  - net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
  - net/mlx5: Bridge, fix the crash caused by LAG state check
  - net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch
  - net: openvswitch: remove misbehaving actions length check
  - netfilter: nft_exthdr: fix offset with ipv4_find_option()
  - net_sched: Prevent creation of classes with TC_H_ROOT
  - ipvs: prevent integer overflow in do_ip_vs_get_ctl()
  - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
  - bonding: fix incorrect MAC address setting to receive NS messages
  - net: switchdev: Convert blocking notification chain to a raw one
  - eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
  - net/mlx5: handle errors in mlx5_chains_create_table()
  - Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
  - netpoll: hold rcu read lock in __netpoll_send_skb()
  - net: mctp i2c: Copy headers if cloned
  - net: dsa: mv88e6xxx: Verify after ATU Load ops
  - net/mlx5: Fill out devlink dev info only for PFs
  - Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"
  - Bluetooth: hci_event: Fix enabling passive scanning
  - sched: address a potential NULL pointer dereference in the GRED scheduler.
  - netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around
  - ice: fix memory leak in aRFS after reset
  - netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
  - pinctrl: bcm281xx: Fix incorrect regmap max_registers value
  - fbdev: hyperv_fb: iounmap() the correct memory when removing a device
  - tcp: fix forever orphan socket caused by tcp_abort
  - tcp: fix races in tcp_abort()
  - hrtimer: Use and report correct timerslack values for realtime tasks
  - zram: fix NULL pointer in comp_algorithm_show()
  - sched/isolation: Prevent boot crash when the boot CPU is nohz_full
  - clockevents/drivers/i8253: Fix stop sequence for timer 0
  - PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
  - sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
  - sw64: optimize unaligned access
  - sw64: ftrace: Add direct call trampoline samples support
  - sw64: ftrace: Add direct call support
  - sw64: ftrace: No need to save original function's temporary registers
  - sw64: perf: fix perf test 'import perf' in python failed
  - sw64: add support for function error injection
  - sw64: add sw64 rethook implementation
  - sw64: emit fixed-length instructions for BPF_PSEUDO_FUNC
  - sw64: ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL
  - sw64: mm: adjust userspace memory layout
  - sw64: cpufreq: fix the frequency returned by cpufreq_driver->get()
  - sw64: ioremap: map some IO space with ioremap
  - sw64: ioremap: fix an overflow in pci_remap_cfgspace
  - sw64: ioremap: support generic ioremap for C4
  - nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable
  - drm/virtio: implement virtio_gpu_shutdown
  - virtgpu: don't reset on shutdown
  - virtio: break and reset virtio devices on device_shutdown()
  - LoongArch: sync kvm head file from upstream
  - LoongArch: fix migrate issue
  - LoongArch: Save and restore CSR.CNTC for hibernation
  - pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-64.0.0.68
changelog:
  - !14106 uacce: some bugfix and cleanup
  - migration: modify dfx error type without VM driver
  - crypto: hisilicon_qm - fix the uacce_alloc return value check
  - crypto: hisilicon_zip - correct the wrong word in the printed information
  - uacce: add mutex for check qfr
  - uacce: add stop_queue to replace put_queue in ioctl
  - uacce: check the qfr address before releasing the qfr
  - uacce: add error number for the unsupported mremap
  - !14117  mm/page_alloc: Separate THP PCP into movable and non-movable categories
  - mm: fix kabi breakage due to struct per_cpu_pages
  - mm/page_alloc: Separate THP PCP into movable and non-movable categories
  - !14120  bpf: sync_linked_regs() must preserve subreg_def
  - bpf: sync_linked_regs() must preserve subreg_def
  - !14128  sched: Optimize the latency of select_task_rq and pick_next_task.
  - sched: Optimize the latency of select_task_rq and pick_next_task.
  - !13991  virtio-fs: introduce multi-queue support
  - virtio-fs: add multi-queue support
  - virtio-fs: limit number of request queues
  - virtiofs: include a newline in sysfs tag
  - virtiofs: emit uevents on filesystem events
  - virtiofs: export filesystem tags through sysfs
  - !14126 [OLK-6.6]perf:Add PMCG platform information for HiSilicon HIP09A
  - ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
  - Revert "perf: Add PMCG platform information for HiSilicon HIP09A"
  - !14103  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
  - !13841 Fix livepatch selftest
  - selftests/livepatch: fix selftest execution error
  - !14069 MPTCP Upstream part 23
  - tcp: socket option to check for MPTCP fallback to TCP
  - mptcp: fix typos in comments
  - !13970  LoongArch: fix AVEC related issue
  - drivers/irqchip: Disable pci_irq_limit when using AVEC interrupt controller
  - irqchip/avec: Support AVEC for 3C6000 multi-node machine
  - !13981  LoongArch: backport ptw&set_pte patches from upstream
  - LoongArch: Set initial pte entry with PAGE_GLOBAL for kernel space
  - LoongArch: Improve hardware page table walker
  - LoongArch: Use accessors to page table entries instead of direct dereference
  - LoongArch: Remove superfluous flush_dcache_page() definition
  - !14107 ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf()
  - ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf()
  - !14101 [sync] PR-14087: v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - !14095 ima: Fix violation digests extending issue in virtcca
  - ima: Fix violation digests extending issue in virtcca
  - !14079 v3  irqchip: gic: some bugfix of hip10
  - irqchip/gic-v4.1:Check whether indirect table is supported in allocate_vpe_l1_table
  - KVM: arm64: vgic-v3: Fix a issue of hip10 erratum 162200806
  - irqchip/gic-v3: Exclude GICv4.1 for hip10 erratum 162200803
  - !14085  ocfs2: uncache inode which has failed entering the group
  - ocfs2: uncache inode which has failed entering the group
  - !13837 update patches for sw64 architecture
  - sw64: wrap frequency workaround into standalone functions
  - sw64: remove redudant save_ktp
  - sw64: fix compile warning of smp_callin()
  - sw64: distribute intx interrupts by hose
  - sw64: acpi: remove constraint that cid of boot core must be zero
  - sw64: pci: get register base address from firmware
  - sw64: fix compile warning of do_entUna()
  - sw64: fix save_ktp compatibility for C3
  - sw64: fix PTBR save/restore for hibernation
  - sw64: add syscall pfh_ops
  - sw64: fix broken rdfpcr()
  - sw64: force kernel stack to be 16 bytes aligned
  - sw64: match platform device by acpi method
  - sw64: spi: update spi controller driver
  - sw64: add -fno-sw-unalign-byte to cflags for C4
  - sw64: define cpu_relax() as imb()
  - sw64: fix the .endm in hibernate_asm.S
  - sw64: fix compile error of efi.systab
  - sw64: pci: adjust the maximum number of RC per node
  - sw64: get mclk and external clk from firmware
  - sw64: fix compile error of MMSIZE
  - sw64: acpi: disable ACPI for xuelang
  - sw64: ahci: disable parallel bus scan
  - sw64: redesign run mode setup method
  - sw64: rename static key and related simd libraries
  - sw64: fix secondary cpu bring up bug
  - sw64: irq: fix compile error when PINTC or LPC-INTC is not set
  - sw64: improve the verification logic of DTB
  - sw64: apply new boot params from DTB chosen node
  - sw64: receive new boot params from firmware
  - sw64: setup stackframe at kernel entry point
  - sw64: save and restore CSR_WR_FREGS for SIMD libs
  - sw64: rename copy and set lib functions
  - sw64: rename copy and set lib files
  - sw64: choose lib at compile time
  - sw64: store topology and numa info by each cpu itself
  - sw64: work around suspend for C4
  - sw64: employ trick on regs.pc for specific exception
  - sw64: enable CONFIG_FRAME_POINTER by default for junzhang
  - sw64: fix syscall_fallback() for vdso gettimeofday
  - sw64: dts: add Junzhang
  - sw64: lpc: work around hardware flaws
  - sw64: improve cpu bring up method
  - sw64: introduce new entry framework for C4
  - sw64: irq: update the initial value of nr_irqs
  - sw64: dynamically switch between lib implementation
  - sw64: msi: remove redundant interrupt enables
  - sw64: add unaligned access support for C4 new instructions
  - sw64: acpi: fix missed upper bits of rcid for junzhang
  - sw64: pci: remove duplicate pcie operations
  - sw64: irq: remove unnecessary initialization
  - sw64: acpi: enable generic GSI
  - sw64: irqchip: support ACPI-based interrupt controller initialization
  - sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
  - sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
  - sw64: fix compilation warning
  - sw64: fix kconfig selections
  - sw64: use a new wrap_asid hmcall when asid wraps
  - sw64: rewrite fpcr and swcr conversion
  - sw64: enable hardware denorm by default
  - sw64: add four-socket system support
  - sw64: add a new kernel parameter to override mclk
  - sw64: improve sw64_printk()
  - sw64: msi: fix bugs in multi-msi interrupts allocation and release
  - sw64: pci: change pci transaction ordering rule settings
  - sw64: irqchip: fix virtual PINTC not working properly
  - sw64: dts: improve properties for PINTC
  - sw64: dts: improve properties for LPC-INTC
  - sw64: dts: fix interrupt related properties for GPIO
  - sw64: dts: add chosen node
  - sw64: dts: fix properties for spi controller device node
  - sw64: acpi: fix coding style and typos
  - sw64: fix rd_f compatibility issue for C4
  - sw64: refactor device interrupt domain
  - sw64: fix macro definition compilation error
  - USB: xHCI: fix resume issue of some ZHAOXIN hosts
  - USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
  - sw64: pci: fix compile error when CONFIG_ACPI=n
  - sw64: smp: suppress function setup_smp() when ACPI enabled
  - sw64: acpi: parse SW CINTC for SMP initialization
  - sw64: acpi: support MADT entry print for SW CINTC
  - sw64: acpi: add ACPI-style structures for SW CINTC
  - sw64: smp: add new structure to record rcid information
  - sw64: smp: modify function smp_rcb_init() to receive base address
  - sw64: pci: synchronize the OEM table ID of MCFG with BIOS
  - sw64: iommu: fix the bug when vfio_iommu unpin pages
  - sw64: use rvpcr() to setup run mode
  - sw64: kgdb: add single-step debug support
  - sw64: fix lockdep error
  - sw64: perf: do all event checks in sw64_pmu_event_init()
  - sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
  - sw64: pci: export some pci functions
  - sw64: uapi: fix a compile error for headers_install
  - sw64: perf: hide hardware performance events in guest os
  - sw64: fix hugepage support
  - sw64: extern vdso_start and vdso_end as char[]
  - sw64: remove useless current_policy
  - sw64: add arch-specific SYM_END definition
  - !13151 [OLK-6.6] arm64: errata: Unify and expand speculative SSBS workaround
  - openeuler_defconfig: Enable CONFIG_ARM64_ERRATUM_3194386 by default
  - arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386
  - arm64: errata: Expand speculative SSBS workaround once more
  - arm64: errata: Expand speculative SSBS workaround (again)
  - arm64: errata: Expand speculative SSBS workaround
  - arm64: errata: Unify speculative SSBS errata logic
  - arm64: errata: Add workaround for Arm errata 3194386 and 3312417


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-66.0.0.70
changelog:
  - !13846 [OLK-6.6] cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
  - cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
  - !9184 [OLK-6.6] i2c: smbus: Add support for Zhaoxin SMBUS controller
  - configs: Add Zhaoxin i2c smbus items in openeuler_config
  - i2c: smbus: Add support for Zhaoxin SMBUS controller
  - !9223 [OLK-6.6] x86/hpet: Read HPET directly if panic in progress
  - x86/hpet: Read HPET directly if panic in progress
  - !14088 ACPI: CPPC: Introduce new EPP capabilities and update auto selection functions
  - ACPI: CPPC: Introduce new EPP capabilities and update auto selection functions
  - !14112  xfs: Fix data overflow
  - xfs: Fix data overflow in xfs_mod_fdblocks()
  - Revert "xfs: split xfs_mod_freecounter"
  - !14099 [6.6] [Feature] : update patches for sw64 architecture
  - sw64: pci: fix compile error when CONFIG_PCI_MSI=n
  - sw64: pci: fix unable to get node ID when numa_off is set
  - sw64: add uapi reg.h
  - sw64: pciehp: remove useless code
  - sw64: dts: support online-capable property for cpu device node
  - sw64: kvm: resolve a compile warning
  - sw64: pciehp: update code
  - sw64: kvm: fix mmio GPA for C4
  - sw64: handle null MSI irq in guest os
  - sw64: fix guest memory and cpu hotplug function
  - sw64: kvm: walk host page tables to find THP mapping size
  - sw64: kvm: convert to the gfn-based MMU notifier callbacks
  - sw64: kvm: rename mmu_notifier_* to mmu_invalidate_*
  - sw64: kvm: fix compiler errors caused by mismatched parameters
  - sw64: kvm: use get_page() instead of kvm_get_pfn()
  - sw64: kvm: fix the handling when the live migration fails
  - sw64: kvm: fix NULL poniter access in kvm_arch_prepare_memory_region
  - sw64: kvm: fix link error with CONFIG_KVM=m
  - sw64: kvm: fix build failure about KVM
  - sw64: add dependency for sunway-ged driver
  - sw64: fix compile error with CONFIG_SUNWAY_GED=m
  - sw64: remove unused sunway_memory_get_meminfo()
  - sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
  - sw64: add cpu hotplug support for C4 guest
  - sw64: kvm: support up to 256 vCPUs for C4
  - sw64: kvm: fix inconsistent vcpucb of C4
  - sw64: kvm: implement kvm_arch_set_irq_inatomic()
  - sw64: fix guest send ipi target
  - sw64: kvm: add numa support for memory hotplug
  - sw64: kvm: fix bug when vcpu disable irq
  - sw64: kvm: acpi: match sunway_ged by acpi method
  - sw64: kvm: use generic kvm mmu memory caches
  - sw64: kvm: remove some unused codes
  - sw64: kvm: fix pmd_trans_cont
  - sw64: kvm: fix size of struct kvm_regs for C3B
  - sw64: kvm: add the member of the vcpucb structure
  - sw64: kvm: fix the check for THP
  - sw64: kvm: fix page walk error of unmap_apt_range()
  - sw64: redesign struct kvm_regs for C4
  - sw64: kvm: fix live migration bug
  - sw64: kvm: fix APT fault handler
  - sw64: kvm: fix unmap_apt_{ptes, pmds}
  - sw64: kvm: fix clock sync of CORE4 live migration
  - sw64: kvm: delete memory hotplug codes for CORE3B
  - sw64: add missing c4 legacy power management code
  - sw64: kvm: scale up the range of target vcpu parsed by hypervisor
  - sw64: kvm: fix return value of vmem_mmap
  - sw64: kvm: add trace kvm function
  - sw64: fix rc resource setup
  - sw64: 6.6 update: sunway_pciehp_reset_slot()
  - sw64: 6.6 update: arch_remove_memory()
  - sw64: bypass sunway pcie hotplug driver in non-physical scenario
  - sw64: defconfig: update defconfig for kata-containers
  - sw64: add HARDLOCKUP_DETECTOR support
  - sw64: fix bugs in decreasing frequency
  - sw64: add NMI support
  - sw64: add CSR_CAUSE into pt_regs
  - sw64: optimize the code in do_entInt()
  - sw64: seperate IRQ_MSI configs for sub-architectures
  - sw64: handle null MSI irq
  - sw64: fix a compilation warning
  - sw64: fix a base address of msiaddr register
  - sw64: fix some S3 CSRs problems for C4
  - sw64: fix io resource remapping
  - sw64: amdgpu/radeon: correct low-level mmio memset/memcpy direct calls
  - sw64: fix pci resource assignment bug
  - sw64: fix MSI compilation warnings
  - sw64: 6.6 io.h fixup
  - sw64: iommu: support SW64 IOMMU on 6.6 kernel
  - sw64: fix msi interrupt for guest os
  - sw64: msi: update code
  - sw64: gpio: fix compile error of sunway_gpio_add_port
  - sw64: fdt: map physical node ID to logical node ID
  - sw64: fix regs.pc on single-step with ptrace
  - sw64: modify some interrupt target core to logic 0 core
  - sw64: fix sw64_is_fake_mcount() of recordmcount
  - sw64: remove some unused module init/exit/license
  - sw64: numa: support NUMA initialization based on device tree
  - sw64: smp: support SMP initialization based on device tree
  - sw64: dtb: disable built-in DTB for junzhang
  - sw64: ata: add ata_hrst_delay cmdline option
  - sw64: kconfig: add I2C and SPI defconfig for junzhang
  - sw64: kconfig: set default y for GPIO if ACPI enabled
  - sw64: fix a bug in gpio-sunway.c
  - sw64: pci: use readq/writeq to read/write RC and PIU IO registers
  - sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
  - sw64: pciehp: add pcie hotplug driver support for C4
  - sw64: remove redundant intx code
  - sw64: irq: support interrupt for virtual GPIO
  - sw64: acpi: enable ACPI by default
  - sw64: mm: fix mem=xxx command line invalid in some cases
  - sw64: use generic page_is_ram()
  - sw64: mm: take memory information from firmware
  - sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
  - sw64: fix typo in gpio-sunway
  - sw64: fix compile warning of handle_pci_msi_interrupt
  - sw64: fix usage of __add_memory() in sunway-ged driver
  - sw64: change FORCE_MAX_ZONEORDER default value
  - sw64: perf: fix event check order


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-67.0.0.71
changelog:
  - !14144 [6.6] [Feature] : update patches for sw64 architecture
  - sw64: fix compile errors
  - sw64: work around gcc bugs with 'asm goto' with output
  - libbpf: add sw64 support
  - sw64: rename mmap protection_map
  - sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
  - sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
  - sw64 bpf: add BPF_NOSPEC jit
  - sw64: rename _PFN_BITS to __PFN_BITS
  - sw64: update defconfig
  - sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
  - sw64: implementing VDSO with generic code
  - sw64: irqchip: fix irq_enable/disable callback for MCU controller
  - sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
  - sw64: acpi: support reset and S5
  - sw64: kvm: use vma_lookup() instead of find_vma_intersection()
  - sw64: refactor reset routines with new API
  - sw64: kvm: remove unused kvm_arch_flush_remote_tlbs_memslot()
  - sw64: kvm: optimize the calling and implementation of functions in mmu.c
  - sw64: irqchip: remove fallback after kzalloc_node()
  - sw64: irqchip: improve intx implementation
  - sw64: pci: remove function fix_jm585_reset()
  - sw64: fix mmap protection_map
  - sw64: show CPU feature UNA in /proc/cpuinfo
  - sw64: fix the error of cpufreq update
  - sw64: fix compilation issues on match.c
  - sw64: mm: fix PFN of PMDs for 512M hugepage
  - sw64: kvm: fix an error when unmapping 512M hugepages
  - sw64: modify sys_pfh_ops
  - sw64: fix set_huge_pte_at for C4
  - sw64: add the missed clear_flush()
  - sw64: fix compilation issues
  - sw64: add arch_hugetlb_valid_size for C4
  - sw64: kvm: adjust interrupt priority for guest
  - sw64: compatible with suspend implementation
  - sw64: add junzhang_v1/2/3_key
  - sw64: fix numa setup when acpi is disabled
  - sw64: fix setup_mem_size()
  - sw64: fix the register bug in do_entUna
  - sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
  - sw64: select different MUX to read cpu frequency
  - sw64: lpc: fix ast2400 driver error for C4
  - sw64: improve lib performance for new archs
  - sw64: remove unnecessary parameter passing
  - sw64: add __vdso_getcpu support
  - sw64: kexec: fix kernel crashdump bugs
  - sw64: bpf: fix BPF_CALL address
  - sw64: fix irq work
  - sw64: reset the CSR:PTBR_USR
  - sw64: kvm: add KVM_CAP_READONLY_MEM support
  - sw64: pci: fix incorrect pointer of struct pci_controller
  - sw64: perf: add core4 pmu support
  - sw64: mm: support fdt memory reservation
  - sw64: provide a cleaner raw_smp_processor_id()
  - sw64: remove deprecated annotation in irq.h
  - sw64: introduce a fine-grained intx mask/unmask system
  - sw64: move handle_intx() into pci-intx handle
  - sw64: iommu: fix NULL hose check
  - sw64: fix judgements about legacy pci support
  - sw64: cacheinfo: give preference to cache information from PPTT table
  - sw64: cache: fix shared_cpu_map of cacheinfo
  - sw64: cpu: refactor cpuinfo related code
  - sw64: cache: refactor cacheinfo related code
  - sw64: cpu: move cpu related code to the newly created cpu.c
  - sw64: topology: support initializing topology via DT or ACPI
  - sw64: spi: convert SPI_MASTER_GPIO_SS to SPI_CONTROLLER_GPIO_SS
  - sw64: defconfig: fix SPI related configuration items
  - sw64: irqchip: add version 3 for PINTC
  - sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
  - sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
  - sw64: clk: further fix the clock frequency of SPI and I2C
  - sw64: smp: fix function fdt_setup_smp()
  - Revert "sw64: fdt: map physical node ID to logical node ID"
  - sw64: pci: remove legacy io reservation
  - sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
  - sw64: 6.6 upgrade
  - sw64: mm: remove legacy memory detection for JunZhang platform
  - sw64: iommu: improve iommu initialization
  - sw64: clk: fix the clock frequency of SPI and I2C
  - sw64: fix a bug in huge_pte_offset()
  - sw64: pci: rename some functions
  - sw64: pci: support PCIe controller driver based on device tree
  - sw64: remove sw64_io related functions
  - sw64: platform: add misc platform driver
  - sw64: add basic frequency scaling support for JunZhang
  - sw64: remove redundant link options
  - sw64: kvm: enable ring-based dirty page tracking
  - sw64: kvm: fix invalid memslot flags checking during dirty logging
  - sw64: pciehp: fix compile error when CONFIG_PCIE_DPC=y
  - sw64: kvm: don't retrieve memory slot again in page fault handler
  - sw64: kexec: remove code for compatibility with builtin DTB
  - sw64: smp: allow NR_CPUS less than the number detected by firmware
  - sw64: fix C4 INTx configuration
  - !14166  Align per_cpu osq_node to 64 Byte size cacheline
  - Align per_cpu osq_node to 64 Byte size cacheline
  - !14130 [virtcca] delete unused interfaces: tmi_data_destroy and tmi_ttt_unmap_range
  - virtCCA Feature: remove unused interfaces and add cpumask check
  - !14152  crypto: hisilicon/sec2 - the aead algorithm of sec2 is fixed.
  - crypto: hisilicon/trng - support to obtain random numbers from soft algorithm
  - crypto: hisilicon/sec2 - fix for aead invalid authsize
  - crypto: hisilicon/sec2 - fix for aead icv error
  - crypto: hisilicon/qm - disable error report before flr
  - !13824 mm: some mTHPs improve
  - mm: fix docs for the kernel parameter ``thp_anon=``
  - mm: count the number of anonymous THPs per size
  - mm: tidy up shmem mTHP controls and stats
  - mm: cleanup count_mthp_stat() definition
  - mm: huge_mm: fix undefined reference to `mthp_stats' for CONFIG_SYSFS=n
  - mm: override mTHP "enabled" defaults at kernel cmdline
  - !10305 [OLK-6.6] Backport bugfixes for mm LRU from Linux upstream
  - mm: vmscan.c: fix OOM on swap stress test
  - mm/gup: clear the LRU flag of a page before adding to LRU batch


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-68.0.0.72
changelog:
  - !14161  drm/rockchip: vop: Fix a dereferenced before check warning
  - drm/rockchip: vop: Fix a dereferenced before check warning
  - !14143 KVM:arm64:Add a kvm parameter to control guest wfi trapping
  - KVM:arm64:Add a kvm parameter to control guest wfi trapping
  - !14177 v2  kabi: restrict the KABI fix to a specific architecture and dist
  - kabi: enable KABI_COMPAT series by default on x86_64 & ARM64
  - kabi: restrict the KABI fix to a specific architecture and dist
  - !14151  CVE-2024-53142
  - initramfs: avoid filename buffer overrun
  - !14183  mm/dynamic_pool: use __GENKSYMS__ to revert the kabi change
  - mm/dynamic_pool: use __GENKSYMS__ to revert the kabi change
  - !13999 add iommu support for loongarch
  - LoongArch: add iommu support
  - LoongArch: Fix cpu hotplug issue
  - !13998 Synchronization with patch for loongarch virtualization
  - LoongArch: Fix AP booting issue in VM mode
  - LoongArch: KVM: Remove unnecessary CSR register saving during enter guest
  - LoongArch: KVM: Remove undefined a6 argument comment for kvm_hypercall()
  - LoongArch: KVM: Add vcpu mapping from physical cpuid
  - LoongArch: KVM: Remove unnecessary definition of KVM_PRIVATE_MEM_SLOTS
  - LoongArch: KVM: Add cpucfg area for kvm hypervisor
  - LoongArch: KVM: Add KVM hypercalls documentation for LoongArch
  - LoongArch: KVM: Implement function kvm_para_has_feature()
  - LoongArch: KVM: Enable paravirt feature control from VMM
  - LoongArch: KVM: Add PMU support for guest
  - LoongArch: KVM: Add vm migration support for LBT registers
  - LoongArch: KVM: Add Binary Translation extension support
  - LoongArch: KVM: Add VM feature detection function
  - LoongArch: Revert qspinlock to test-and-set simple lock on VM
  - LoongArch: KVM: Invalidate guest steal time address on vCPU reset
  - KVM: Discard zero mask with function kvm_dirty_ring_reset
  - perf kvm: Add kvm-stat for loongarch64
  - LoongArch: KVM: Add PV steal time support in guest side
  - LoongArch: KVM: Add PV steal time support in host side
  - LoongArch: KVM: always make pte young in page map's fast path
  - LoongArch: KVM: Mark page accessed and dirty with page ref added
  - LoongArch: KVM: Add dirty bitmap initially all set support
  - LoongArch: KVM: Add memory barrier before update pmd entry
  - LoongArch: KVM: Discard dirty page tracking on readonly memslot
  - LoongArch: KVM: Select huge page only if secondary mmu supports it
  - LoongArch: KVM: Delay secondary mmu tlb flush until guest entry
  - LoongArch: KVM: Sync pending interrupt when getting ESTAT from user mode
  - LoongArch: KVM: Add mmio trace events support
  - LoongArch: KVM: Add software breakpoint support
  - LoongArch: KVM: Add PV IPI support on guest side
  - LoongArch: KVM: Add PV IPI support on host side
  - !14163  LeapIOraid： Remove Unnecessary header file references: version.h
  - LeapIOraid： Remove Unnecessary header file references: version.h
  - !13997 Add interrupt controller emulation in the kernel
  - LoongArch: KVM: Add irqfd support
  - LoongArch: KVM: Add PCHPIC user mode read and write functions
  - LoongArch: KVM: Add PCHPIC read and write functions
  - LoongArch: KVM: Add PCHPIC device support
  - LoongArch: KVM: Add EXTIOI user mode read and write functions
  - LoongArch: KVM: Add EXTIOI read and write functions
  - LoongArch: KVM: Add EXTIOI device support
  - LoongArch: KVM: Add IPI user mode read and write function
  - LoongArch: KVM: Add IPI read and write function
  - LoongArch: KVM: Add IPI device support
  - LoongArch: KVM: Add iocsr and mmio bus simulation in kernel
  - !14111  LeapIOraid： Fix the compilation warnings in LeapIOraid driver in loongarch64
  - LeapIOraid： Fix the compilation warnings in LeapIOraid driver in loongarch64
  - !14162  LeapIOraid： Fix too many invalid interruptes in arm64
  - LeapIOraid： Fix too many invalid interruptes in arm64
  - !11509 [OLK-6.6] Enhanced Hygon processor's processing capabilities for large memory copying
  - mm: Enhanced copy capabilities for Hygon processor
  - !14155  drm/amd/display: Adjust VSDB parser for replay feature
  - drm/amd/display: Adjust VSDB parser for replay feature


author: Xie XiuQi <xiexiuqi@huawei.com> - 6.6.0-68.0.0.73
changelog:
  - kabi: add kabi_ext1 list for checking
  - check-kabi: fix kabi check failed when no namespace
  - kernel.spec: fix with_kabichk on non-arm64 platform


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-69.0.0.75
changelog:
  - !14221  KABI for cgroup
  - cgroup: add more reserve kabi
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show()
  - cgroup: Move rcu_head up near the top of cgroup_root
  - cgroup: Make operations on the cgroup root_list RCU safe
  - Revert "cgroup: fix uaf when proc_cpuset_show"
  - !14220  fs: Allow fine-grained control of folio sizes
  - fs: Allow fine-grained control of folio sizes
  - !12108  include/msi: modify kabi size of msi_desc
  - include/msi: modify kabi size of msi_desc
  - !14195 [OLK-6.6]Hygon: Enable CONFIG_CMA by default on X86 architecture
  - x86/Kconfig: Select CONFIG_CMA if CONFIG_HYGON_CSV=y
  - x86/config: Enable CONFIG_CMA by default in openeuler_defconfig
  - !14215  iommu: Reserve extra KABI entry for struct iopf_group
  - iommu: Reserve extra KABI entry for struct iopf_group
  - !14223 v2  kabi: net: reserve space for xdp subsystem related structure
  - kabi: net: reserve space for xdp subsystem related structure
  - !14224  net/kabi: Reserve space for net structures
  - net/kabi: Reserve space for net structures
  - !14236 v2  statx: kabi: KABI reservation for kstat
  - statx: kabi: KABI reservation for kstat
  - !14218  seq_file: kabi: KABI reservation for seq_file
  - seq_file: kabi: KABI reservation for seq_file
  - !14203  tcp: Fix use-after-free of nreq in reqsk_timer_handler().
  - tcp: Fix use-after-free of nreq in reqsk_timer_handler().
  - !14191  nfs: fix the loss of superblock's initialized flags
  - nfs: fix the loss of superblock's initialized flags


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-72.0.0.76
changelog:
  - !14213 v2  bpf: Add kabi reserve padding for uapi struct bpf_link_info
  - bpf: Add kabi reserve padding for uapi struct bpf_link_info
  - !14225  kabi OLK-6.6 reverve space
  - kabi: reserve space for uprobes.h
  - kabi: reserve space for internal.h
  - kabi: reserve space for perf_event.h
  - !14259 【OLK-6.6】 Hygon  family 18h model 6h~fh L3 PMU config incorrect issue fix
  - perf/x86/uncore: Correct the L3 PMU config for Hygon processors
  - !14251  kabi reserver space for i2c
  - kabi reserver space for i2c
  - !14258 v2  scsi: hisi_sas: Enable force phy when SATA disk directly connected
  - scsi: hisi_sas: Enable force phy when SATA disk directly connected


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-73.0.0.77
changelog:
  - !14618  drm: zynqmp_kms: Unplug DRM device before removal
  - drm: zynqmp_kms: Unplug DRM device before removal
  - !14621  brd: defer automatic disk creation until module initialization succeeds
  - brd: defer automatic disk creation until module initialization succeeds
  - !14617  block: fix uaf for flush rq while iterating tags
  - block: fix uaf for flush rq while iterating tags
  - !14614  scsi: sg: Fix slab-use-after-free read in sg_release()
  - scsi: sg: Fix slab-use-after-free read in sg_release()
  - !14519  bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
  - bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
  - !14593  CVE-2024-56702
  - bpf: Augment raw_tp arguments with PTR_MAYBE_NULL
  - bpf: Revert "bpf: Mark raw_tp arguments with PTR_MAYBE_NULL"
  - bpf: Mark raw_tp arguments with PTR_MAYBE_NULL
  - !14415  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  - !14439  sh: intc: Fix use-after-free bug in register_intc_controller()
  - sh: intc: Fix use-after-free bug in register_intc_controller()
  - !14635  Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
  - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
  - !14648  memcg: fix soft lockup in the OOM process
  - memcg: fix soft lockup in the OOM process
  - !14562  f2fs: fix to do sanity check on node blkaddr in truncate_node()
  - f2fs: fix to do sanity check on node blkaddr in truncate_node()
  - !14524  The bugfix for LPM trie
  - bpf: Handle in-place update for full LPM trie correctly
  - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
  - !14459  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - !14454  drm/vc4: hdmi: Avoid hang with debug registers when suspended
  - drm/vc4: hdmi: Avoid hang with debug registers when suspended
  - !14385  media: imx-jpeg: Ensure power suppliers be suspended before detach them
  - media: imx-jpeg: Ensure power suppliers be suspended before detach them
  - !14546  media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - !14244  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
  - !14243  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
  - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
  - !14504  apparmor: test: Fix memory leak for aa_unpack_strdup()
  - apparmor: test: Fix memory leak for aa_unpack_strdup()
  - !14418  LoongArch: Add CPU HWMon platform driver
  - LoongArch: Add CPU HWMon platform driver
  - !14387  LoongArch: compile loongson drm driver as module
  - drm/loongson: compile loongson drm driver as module
  - LoongArch: cleanup loongson3 defconfig
  - !14441  crypto: bcm - add error check in the ahash_hmac_init function
  - crypto: bcm - add error check in the ahash_hmac_init function
  - !14438  media: imx-jpeg: Set video drvdata before register video device
  - media: imx-jpeg: Set video drvdata before register video device
  - !14389  CVE-2024-53173
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open()
  - NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
  - Revert "NFSv4: release seqid when open failed for nfs4.0"
  - Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
  - !14469  io_uring/tctx: work around xa_store() allocation error issue
  - io_uring/tctx: work around xa_store() allocation error issue
  - !14447  Fix CVE-2024-56744
  - f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()
  - !14394  scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
  - scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
  - !14518  hfsplus: don't query the device logical block size multiple times
  - hfsplus: don't query the device logical block size multiple times
  - !14517  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - !14516  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
  - f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
  - !14475  ext4: correct behaviors under errors=remount-ro mode
  - Revert "ext4: drop EXT4_MF_FS_ABORTED flag"
  - Revert "ext4: warn on read-only filesystem in ext4_journal_check_start()"
  - Revert "ext4: drop read-only check in ext4_init_inode_table()"
  - Revert "ext4: drop read-only check in ext4_write_inode()"
  - Revert "ext4: drop read-only check from ext4_force_commit()"
  - Revert "ext4: replace read-only check for shutdown check in mmp code"
  - Revert "ext4: don't set SB_RDONLY after filesystem errors"
  - sb_writers: fix kabi broken
  - fs: fix a hungtask problem when freeze/unfreeze fs
  - !14506  iommufd: Fix out_fput in iommufd_fault_alloc()
  - iommufd: Fix out_fput in iommufd_fault_alloc()
  - !14369  crypto: qat/qat_420xx - fix off by one in uof_get_name()
  - crypto: qat/qat_420xx - fix off by one in uof_get_name()
  - !14417 v2  drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()
  - drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()
  - !14423 v2  EDAC/igen6: Avoid segmentation fault on module unload
  - EDAC/igen6: Avoid segmentation fault on module unload
  - !14365  EDAC/bluefield: Fix potential integer overflow
  - EDAC/bluefield: Fix potential integer overflow
  - !14364  clk: clk-apple-nco: Add NULL check in applnco_probe
  - clk: clk-apple-nco: Add NULL check in applnco_probe
  - !14408  bpf: fix OOB devmap writes when deleting elements
  - bpf: fix OOB devmap writes when deleting elements
  - !14367  io_uring: check if iowq is killed before queuing
  - io_uring: check if iowq is killed before queuing
  - !14355  btrfs: ref-verify: fix use-after-free after invalid ref action
  - btrfs: ref-verify: fix use-after-free after invalid ref action
  - !14350  jfs: array-index-out-of-bounds fix in dtReadFirst
  - jfs: array-index-out-of-bounds fix in dtReadFirst
  - !14348  ksmbd: fix use-after-free in SMB request handling
  - ksmbd: fix use-after-free in SMB request handling
  - !14102  OLK-6.6-fix-CVE-2024-49906
  - drm/amd/display: Check null pointer before try to access it
  - drm/amd/display: Check null pointer before try to access it
  - !14346  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  - !14420  HID: wacom: fix when get product name maybe null pointer
  - HID: wacom: fix when get product name maybe null pointer
  - !14301  Revert "unicode: Don't special case ignorable code points"
  - Revert "unicode: Don't special case ignorable code points"
  - !14332  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
  - mm: avoid unconditional one-tick sleep when swapcache_prepare fails
  - !14362  CVE-2024-53217
  - nfsd: restore callback functionality for NFSv4.0
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
  - !14319  exfat: fix out-of-bounds access of directory entries
  - exfat: fix out-of-bounds access of directory entries
  - !14405  NFSD: Prevent a potential integer overflow
  - NFSD: Prevent a potential integer overflow
  - !14395  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  - !14401  gpio: grgpio: Add NULL check in grgpio_probe
  - gpio: grgpio: Add NULL check in grgpio_probe
  - !14400  bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
  - bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
  - !14329  svcrdma: Address an integer overflow
  - svcrdma: Address an integer overflow
  - !14376  fix CVE-2024-53197
  - ALSA: usb-audio: Fix a DMA to stack memory bug
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
  - !14206 v4  erofs/fscache/cachefiles: Add ondemand loading support
  - cachefiles: Fix missing pos updates in cachefiles_ondemand_fd_write_iter()
  - cachefiles: Fix incorrect length return value in cachefiles_ondemand_fd_write_iter()
  - cachefiles: Clean up in cachefiles_commit_tmpfile()
  - cachefiles: Fix NULL pointer dereference in object->file
  - cachefiles: add support for buffer I/O in ondemand mode
  - fscache: clean up for fscache_clear_volume_priv
  - fscache: Add the synchronous waiting mechanism for the volume unhash in erofs ondemand mode
  - cachefiles: Introduce "dir_has_put" in cachefiles_volume
  - erofs: remove EXPERIMENTAL feature warning for fscache-based
  - cachefiles: Add restrictions to cachefiles_daemon_cull()
  - erofs: add erofs_ondemand switch
  - erofs: add erofs switch to better control it
  - fscache: modify the waiting mechanism with duplicate volumes
  - cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
  - fscache: add a memory barrier for FSCACHE_VOLUME_CREATING
  - !14377  ftrace: Fix regression with module command in stack_trace_filter
  - ftrace: Fix regression with module command in stack_trace_filter
  - !14373 [OLK-6.6]Hygon: Fix objtool warning cause by csv3_active()
  - x86: mm: Fix objtool warning about bool noinstr csv3_active()
  - !14358  firmware_loader: Fix possible resource leak in fw_log_firmware_info()
  - firmware_loader: Fix possible resource leak in fw_log_firmware_info()
  - !14342  hwmon: (nct6775-core) Fix overflows seen when writing limit attributes
  - hwmon: (nct6775-core) Fix overflows seen when writing limit attributes
  - !14271  iomap: fix zero padding data issue in concurrent append writes
  - iomap: fix zero padding data issue in concurrent append writes
  - !14340  ocfs2: free inode when ocfs2_get_init_inode() fails
  - ocfs2: free inode when ocfs2_get_init_inode() fails
  - !14312 OLK-6.6: Some patches of RDMA/hns from Linux to olk-6.6 v2
  - RDMA/hns: Fix missing flush CQE for DWQE
  - RDMA/hns: Fix warning storm caused by invalid input in IO path
  - RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
  - Revert "RDMA/hns: Fix accessing invalid dip_ctx during destroying QP"
  - RDMA/hns: Fix mapping error of zero-hop WQE buffer
  - !14338  CVE-2024-53230
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost()
  - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
  - !14336  mm: Backport mainline patch
  - mm: don't install PMD mappings when THPs are disabled by the hw/process/vma
  - mm: huge_memory: add vma_thp_disabled() and thp_disabled_by_hw()
  - mm: fix arithmetic for max_prop_frac when setting max_ratio
  - mm: fix arithmetic for bdi min_ratio
  - mm/kmemleak: fix partially freeing unknown object warning
  - mm: kmemleak: add __find_and_remove_object()
  - mm: kmemleak: use mem_pool_free() to free object
  - mm: kmemleak: split __create_object into two functions
  - mm/hugetlb: fix nodes huge page allocation when there are surplus pages
  - !14337  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  - !14322  back some mainline patches for damon
  - mm/damon/core: fix return value from damos_wmark_metric_value
  - mm/damon/core: remove unnecessary si_meminfo invoke.
  - !14323  zram: fix NULL pointer in comp_algorithm_show()
  - zram: fix NULL pointer in comp_algorithm_show()
  - !14201 【OLK-6.6】  drivers: arch_topology: Refactor do-while loops
  - drivers: arch_topology: Refactor do-while loops
  - !14295  pmdomain: imx93-blk-ctrl: correct remove path
  - pmdomain: imx93-blk-ctrl: correct remove path
  - !14190  Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
  - Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
  - !14134  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
  - x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
  - !14214  mm: revert "mm: shmem: fix data-race in shmem_getattr()"
  - mm: revert "mm: shmem: fix data-race in shmem_getattr()"
  - !14229 Fix extioi restart issue in vm
  - LoongArch: arch/loongarch/kvm: Fix extioi restart issue
  - !14127 MPTCP Upstream part 24
  - mptcp: refer to 'MPTCP' socket in comments
  - mptcp: add mptcp_space_from_win helper
  - mptcp: use mptcp_win_from_space helper
  - doc: new 'mptcp' page in 'networking'
  - doc: mptcp: alphabetical order
  - doc: mptcp: add missing 'available_schedulers' entry
  - selftests: mptcp: join: mark 'fastclose' tests as flaky
  - selftests: mptcp: lib: support flaky subtests
  - selftests: mptcp: export ip_mptcp to mptcp_lib
  - !13359 [OLK-6.6] [Backport] individual submission
  - MIPS: RB532: Declare prom_setup_cmdline() and rb532_gpio_init() static
  - MIPS: BCM47XX: Declare early_tlb_init() static
  - MIPS: BCM47XX: include header for bcm47xx_prom_highmem_init() prototype
  - ocfs2: spelling fix
  - !14291  vdpa: solidrun: Fix UB bug with devres
  - vdpa: solidrun: Fix UB bug with devres
  - !14256  RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
  - RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-73.0.0.78
changelog:
  - riscv kernel upgrade to 6.6.0-73.0.0
  - Backport RISC-V AIA driver from mainline linux
  - Fix kernel-mode FPU support on riscv
  - Add cache info for SG2042 dts


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-75.0.0.79
changelog:
  - !14904  net: renesas: rswitch: avoid use-after-put for a device tree node
  - net: renesas: rswitch: avoid use-after-put for a device tree node
  - !14898  Revert "Revert "driver core: Fix uevent_show() vs driver detach race""
  - Revert "Revert "driver core: Fix uevent_show() vs driver detach race""
  - !14741  io_uring: check for overflows in io_pin_pages
  - io_uring: check for overflows in io_pin_pages
  - !14863  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
  - !14882  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
  - usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
  - !14879  CVE-2024-57872
  - scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()
  - scsi: ufs: pltfrm: Drop PM runtime reference count after ufshcd_remove()
  - scsi: ufs: pltfrm: Disable runtime PM during removal of glue drivers
  - scsi: ufs: Convert all platform drivers to return void
  - !14880  pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
  - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
  - !14873 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.62-6.6.63 LTS Patches
  - mm/damon/core: copy nr_accesses when splitting region
  - mm/damon/core: handle zero schemes apply interval
  - mm/damon/core: check apply interval in damon_do_apply_schemes()
  - mm: refactor map_deny_write_exec()
  - mm: unconditionally close VMAs on error
  - drm/amd/pm: Vangogh: Fix kernel memory out of bounds write
  - mptcp: pm: use _rcu variant under rcu_read_lock
  - mptcp: hold pm lock when deleting entry
  - NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point
  - lib/buildid: Fix build ID parsing logic
  - staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation
  - staging: vchiq_arm: Get the rid off struct vchiq_2835_state
  - mm/damon/core: handle zero {aggregation,ops_update} intervals
  - mm/damon/core: implement scheme-specific apply interval
  - drm/amd: Fix initialization mistake for NBIO 7.7.0
  - nouveau: fw: sync dma after setup is called.
  - drm/bridge: tc358768: Fix DSI command tx
  - mmc: sunxi-mmc: Fix A100 compatible description
  - LoongArch: Make KASAN work with 5-level page-tables
  - LoongArch: Disable KASAN if PGDIR_SIZE is too large for cpu_vabits
  - ocfs2: fix UBSAN warning in ocfs2_verify_volume()
  - ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10
  - ALSA: hda/realtek - Fixed Clevo platform headset Mic issue
  - nommu: pass NULL argument to vma_iter_prealloc()
  - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN
  - KVM: x86: Unconditionally set irr_pending when updating APICv state
  - KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled
  - vdpa/mlx5: Fix PA offset with unaligned starting iotlb map
  - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof
  - x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y
  - tools/mm: fix compile error
  - ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels
  - bonding: add ns target multicast address to slave device
  - net: ti: icssg-prueth: Fix 1 PPS sync
  - stmmac: dwmac-intel-plat: fix call balance of tx_clk handling routines
  - net: stmmac: rename stmmac_pltfr_remove_no_dt to stmmac_pltfr_remove
  - net: stmmac: dwmac-visconti: use devm_stmmac_probe_config_dt()
  - net: stmmac: dwmac-intel-plat: use devm_stmmac_probe_config_dt()
  - net: Make copy_safe_from_sockptr() match documentation
  - net: stmmac: dwmac-mediatek: Fix inverted handling of mediatek,mac-wol
  - samples: pktgen: correct dev to DEV
  - net: sched: cls_u32: Fix u32's systematic failure to free IDR entries for hnodes.
  - net/sched: cls_u32: replace int refcounts with proper refcounts
  - Bluetooth: btintel: Direct exception event to bluetooth stack
  - Bluetooth: hci_core: Fix calling mgmt_device_connected
  - Revert "RDMA/core: Fix ENODEV error for iWARP test over vlan"
  - virtio/vsock: Fix accept_queue memory leak
  - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow
  - net/mlx5e: clear xdp features on non-uplink representors
  - net/mlx5e: kTLS, Fix incorrect page refcounting
  - net/mlx5: fs, lock FTE when checking if active
  - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
  - mptcp: error out earlier on disconnect
  - net: vertexcom: mse102x: Fix tx_bytes calculation
  - sctp: fix possible UAF in sctp_v6_available()
  - netlink: terminate outstanding dump on socket close
  - !14856  sched: psi: fix bogus pressure spikes from aggregation race
  - sched: psi: fix bogus pressure spikes from aggregation race
  - !14861  drm/sti: avoid potential dereference of error pointers
  - drm/sti: avoid potential dereference of error pointers
  - !14846  net: stmmac: fix TSO DMA API usage causing oops
  - net: stmmac: fix TSO DMA API usage causing oops
  - !14789  erofs: handle NONHEAD !delta[1
  - erofs: handle NONHEAD !delta[1] lclusters gracefully
  - !14848  LoongArch: Fix sleeping in atomic context for PREEMPT_RT
  - LoongArch: Fix sleeping in atomic context for PREEMPT_RT
  - !14840 [OLK-6.6][bugfix]Hygon: Remove 'CONFIG_' prefix under Kconfig entry HYGON_CSV
  - x86/config: Remove 'CONFIG_' prefix under Kconfig entry HYGON_CSV
  - !14690 Improve the tmpfs large folio read performance
  - mm: shmem: fallback to page size splice if large folio has poisoned pages
  - mm: shmem: improve the tmpfs large folio read performance
  - mm: shmem: update iocb->ki_pos directly to simplify tmpfs read logic
  - !14466  bpf: Call free_htab_elem() after htab_unlock_bucket()
  - bpf: Call free_htab_elem() after htab_unlock_bucket()
  - !14818  olk-6.6
  - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
  - !14738  LoongArch: fix some dwmac/pci/SE/i2c/interrupt issues
  - LoongArch: adjust the calc method of number of packages.
  - LoongArch: eiointc: fix ext irq route error
  - drivers/char: add ACPI firmware support for Loongson SE driver
  - LoongArch: fix i2c related issues
  - net: stmmac: dwmac-loongson: fix Mac DMA reset
  - pci/quirks: LS7A2000: fix pm transition of devices under pcie port
  - !14573  RDMA/rxe: Fix the qp flush warnings in req
  - RDMA/rxe: Fix the qp flush warnings in req
  - !14574  ALSA: pcm: Add sanity NULL check for the default mmap fault handler
  - ALSA: pcm: Add sanity NULL check for the default mmap fault handler
  - !14035  Backport fs optimizing patch from mainline
  - fs/file.c: conditionally clear full_fds
  - !14828  cgroup/cpuset: remove kernfs active break
  - cgroup/cpuset: remove kernfs active break
  - !14589  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
  - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
  - !14800  Bluetooth: fix use-after-free in device_for_each_child()
  - Bluetooth: fix use-after-free in device_for_each_child()
  - !14792  jfs: fix shift-out-of-bounds in dbSplit
  - jfs: fix shift-out-of-bounds in dbSplit
  - !14791  scsi: ufs: core: sysfs: Prevent div by zero
  - scsi: ufs: core: sysfs: Prevent div by zero
  - !14787  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  - !14786  x86/xen: don't do PV iret hypercall through hypercall page
  - x86/xen: don't do PV iret hypercall through hypercall page
  - !14785  drm/i915: Fix NULL pointer dereference in capture_engine
  - drm/i915: Fix NULL pointer dereference in capture_engine
  - !14817  olk-6.6
  - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
  - !14784  wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
  - wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
  - !14807  btrfs: fix use-after-free in btrfs_encoded_read_endio()
  - btrfs: fix use-after-free in btrfs_encoded_read_endio()
  - !14591  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
  - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
  - !14587  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  - !14747  net: enetc: Do not configure preemptible TCs if SIs do not support
  - net: enetc: Do not configure preemptible TCs if SIs do not support
  - !14796  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  - !14655  vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
  - vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
  - !14656  iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
  - iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
  - !14659  firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
  - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
  - !14712  CVE-2024-56654
  - Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating
  - Bluetooth: ISO: Reassociate a socket with an active BIS
  - !14761  Add Huawei Intelligent Network Card Driver:hibifur
  - Add Huawei Intelligent Network Card Driver:hibifur
  - !14772  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  - !14769  svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()
  - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()
  - !14770  bpf, sockmap: Several fixes to bpf_msg_pop_data
  - bpf, sockmap: Several fixes to bpf_msg_pop_data
  - !14730  sched: Fix bpf cpustats refcount leak
  - sched: Fix bpf cpustats refcount leak
  - !14739  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  - !14731  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c
  - !14759  wifi: ath12k: Skip Rx TID cleanup for self peer
  - wifi: ath12k: Skip Rx TID cleanup for self peer
  - !14757  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
  - media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
  - !14605  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  - !14490  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  - !14489  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  - !14488  ovl: Filter invalid inodes with missing lookup function
  - ovl: Filter invalid inodes with missing lookup function
  - !14486  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  - !14754  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  - !14776  tracing: Prevent bad count for tracing_cpumask_write
  - tracing: Prevent bad count for tracing_cpumask_write
  - !14766  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
  - drm/i915/hdcp: Add encoder check in hdcp2_get_capability
  - !14765  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  - !14764  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
  - !14729  KVM: arm64: Don't retire aborted MMIO instruction
  - KVM: arm64: Don't retire aborted MMIO instruction
  - !14763  usb: musb: Fix hardware lockup on first Rx endpoint request
  - usb: musb: Fix hardware lockup on first Rx endpoint request
  - !14762  sched/numa: fix memory leak due to the overwritten vma->numab_state
  - sched/numa: fix memory leak due to the overwritten vma->numab_state
  - !14749  net/mlx5: DR, prevent potential error pointer dereference
  - net/mlx5: DR, prevent potential error pointer dereference
  - !14746  nvme-pci: fix freeing of the HMB descriptor table
  - nvme-pci: fix freeing of the HMB descriptor table
  - !14722  Bluetooth: MGMT: Fix possible deadlocks
  - Bluetooth: MGMT: Fix possible deadlocks
  - !14670  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  - !14608  scsi: qla2xxx: Fix use after free on unload
  - scsi: qla2xxx: Fix use after free on unload
  - !14724  etmem: fix use-after-free of mm in the scan release process
  - etmem: fix use-after-free of mm in the scan release process
  - !14384  virtiofs: use pages instead of pointer for kernel direct IO
  - virtiofs: use pages instead of pointer for kernel direct IO
  - !14673  ALSA: 6fire: Release resources at card release
  - ALSA: 6fire: Release resources at card release
  - !14666  Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
  - Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
  - !14634  backport mainline bugfix patch
  - genirq/msi: Fix off-by-one error in msi_domain_alloc()
  - !14611  merge mainline patches into OLK-6.6
  - mm/vmscan: wake up flushers conditionally to avoid cgroup OOM
  - mm/mglru: reset page lru tier bits when activating
  - tmpfs: don't enable large folios if not supported
  - mm: migrate: annotate data-race in migrate_folio_unmap()
  - mm: Kconfig: fixup zsmalloc configuration
  - mm: ignore data-race in __swap_writepage
  - !14602  blk-cgroup: Fix UAF in blkcg_unpin_online()
  - blk-cgroup: Fix UAF in blkcg_unpin_online()
  - !14720  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  - !14719  rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu
  - rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu
  - !14718  PCI: Fix reset_method_store() memory leak
  - PCI: Fix reset_method_store() memory leak
  - !14455  f2fs: fix race in concurrent f2fs_stop_gc_thread
  - f2fs: fix race in concurrent f2fs_stop_gc_thread
  - !14542  net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
  - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
  - !14531  sched/deadline: Fix warning in migrate_enable for boosted tasks
  - sched/deadline: Fix warning in migrate_enable for boosted tasks
  - !14528  drm/amdgpu: set the right AMDGPU sg segment limitation
  - drm/amdgpu: set the right AMDGPU sg segment limitation
  - !14525  CVE-2024-56609
  - wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb
  - wifi: mac80211: export ieee80211_purge_tx_queue() for drivers
  - !14667  sched: fix warning in sched_setaffinity
  - sched: fix warning in sched_setaffinity
  - !14412 [OLK-6.6]Workaround ARM PMUs cpu maps having offline cpus
  - perf arm: Workaround ARM PMUs cpu maps having offline cpus
  - !14698  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
  - bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
  - !14694  arm64: probes: Disable kprobes/uprobes on MOPS instructions
  - arm64: probes: Disable kprobes/uprobes on MOPS instructions
  - !14677  drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
  - !14569  PCI: Fix use-after-free of slot->bus on hot remove
  - PCI: Fix use-after-free of slot->bus on hot remove
  - !14568  wifi: ath12k: fix warning when unbinding
  - wifi: ath12k: fix warning when unbinding
  - !14424  octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c
  - !14714  Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
  - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
  - !14715  media: atomisp: Add check for rgby_data memory allocation failure
  - media: atomisp: Add check for rgby_data memory allocation failure
  - !14699  CVE-2024-53158
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
  - !14710  CVE-2024-56546
  - drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend()
  - !14507  sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
  - sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
  - !14511  netfilter: nft_inner: incorrect percpu area handling under softirq
  - netfilter: nft_inner: incorrect percpu area handling under softirq
  - !14472  jfs: fix array-index-out-of-bounds in jfs_readdir
  - jfs: fix array-index-out-of-bounds in jfs_readdir
  - !14664 v2  CVE-2024-53224
  - RDMA/mlx5: Move events notifier registration to be after device registration
  - IB/mlx5: Allocate resources just before first QP/SRQ is created


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-76.0.0.80
changelog:
  - !14997  wifi: rtw89: check return value of ieee80211_probereq_get() for RNR
  - wifi: rtw89: check return value of ieee80211_probereq_get() for RNR
  - !14941  CVE-2024-57906
  - iio: adc: ti-ads8688: fix information leak in triggered buffer
  - !14990  mainline patches
  - cgroup/bpf: only cgroup v2 can be attached by bpf programs
  - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline"
  - cgroup/cpuset: Prevent leakage of isolated CPUs into sched domains
  - !14993  arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
  - arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
  - !14952  drm/mediatek: Set private->all_drm_private[i
  - drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err
  - !14835 v2  media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
  - media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
  - !14994  mm/compaction: fix UBSAN shift-out-of-bounds warning
  - mm/compaction: fix UBSAN shift-out-of-bounds warning
  - !14893  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
  - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
  - !14876  *** jffs2: Prevent rtime decompress memory corruption ***
  - jffs2: Fix rtime decompressor
  - jffs2: Prevent rtime decompress memory corruption
  - !14833  btrfs: check folio mapping after unlock in relocate_one_folio()
  - btrfs: check folio mapping after unlock in relocate_one_folio()
  - !14588  smb: Initialize cfid->tcon before performing network ops
  - smb: Initialize cfid->tcon before performing network ops
  - !14977  PCI: imx6: Fix suspend/resume support on i.MX6QDL
  - PCI: imx6: Fix suspend/resume support on i.MX6QDL
  - !14984  vsock/bpf: return early if transport is not assigned
  - vsock/bpf: return early if transport is not assigned
  - !14976  x86/fpu: Ensure shadow stack is active before "getting" registers
  - x86/fpu: Ensure shadow stack is active before "getting" registers
  - !14682  CVE-2024-56701
  - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
  - !14780  CVE-2024-56677
  - powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()
  - powerpc/fadump: Refactor and prepare fadump_cma_init for late init
  - !14681  CVE-2024-56567
  - ad7780: fix division by zero in ad7780_write_raw()
  - !14981  nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
  - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
  - !14916  CVE-2024-56641
  - net/smc: initialize close_work early to avoid warning
  - net/smc: refactoring initialization of smc sock
  - !14914  bnxt_en: Fix receive ring space parameters when XDP is active
  - bnxt_en: Fix receive ring space parameters when XDP is active
  - !14915  net/smc: protect link down work from execute after lgr freed
  - net/smc: protect link down work from execute after lgr freed
  - !14913  xsk: fix OOB map writes when deleting elements
  - xsk: fix OOB map writes when deleting elements
  - !14911  net/smc: fix LGR and link use-after-free issue
  - net/smc: fix LGR and link use-after-free issue
  - !14912  net: fix data-races around sk->sk_forward_alloc
  - net: fix data-races around sk->sk_forward_alloc
  - !14907  ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
  - !14908  net: dsa: improve shutdown sequence
  - net: dsa: improve shutdown sequence
  - !14877  sched: qos sched support online task to preempt offline task
  - sched: qos sched support online task to preempt offline task
  - !14974  BMA: Fix Oops and spin lock deadlock problem, and change the version number.
  - BMA: Fix Oops and spin lock deadlock problem, and change the version number.
  - !14973 v2  fix CVE-2024-54193
  - accel/ivpu: Fix WARN in ivpu_ipc_send_receive_internal()
  - accel/ivpu: Move set autosuspend delay to HW specific code
  - !14901  Fix CVE-2024-47794
  - bpf: Fix kabi breakage in struct bpf_prog_aux
  - selftests/bpf: Add test to verify tailcall and freplace restrictions
  - selftests/bpf: Add testcase for updating attached freplace prog to prog_array map
  - bpf: Prevent tailcall infinite loop caused by freplace
  - !14874  bpf: Check size for BTF-based ctx access of pointer members
  - bpf: Check size for BTF-based ctx access of pointer members
  - !14847  bpf: put bpf_link's program when link is safe to be deallocated
  - bpf: put bpf_link's program when link is safe to be deallocated
  - !14945  btrfs: avoid NULL pointer dereference if no valid extent tree
  - btrfs: avoid NULL pointer dereference if no valid extent tree
  - !14823 mm：some shmem bugfix
  - mm: shmem: fix ShmemHugePages at swapout
  - mm: shmem: extend shmem_unused_huge_shrink() to all sizes
  - mm: shmem: fix minor off-by-one in shrinkable calculation
  - docs: mm: fix the incorrect 'FileHugeMapped' field
  - mm: shmem: fix the update of 'shmem_falloc->nr_unswapped'
  - mm: shmem: fix incorrect index alignment for within_size policy
  - !14970  drm/amd/display: Add check for granularity in dml ceil/floor helpers
  - drm/amd/display: Add check for granularity in dml ceil/floor helpers
  - !14969  topology: Keep the cpumask unchanged when printing cpumap
  - topology: Keep the cpumask unchanged when printing cpumap
  - !14935  Two CVE fixes for ksmbd
  - ksmbd: fix potencial out-of-bounds when buffer offset is invalid
  - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
  - !14930  tracing/kprobe: Make trace_kprobe's module callback called after jump_label update
  - tracing/kprobe: Make trace_kprobe's module callback called after jump_label update
  - !14931  bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()
  - bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()
  - !14953  mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma
  - mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma
  - !14767 mm: shmem: control THP support through the kernel command line
  - mm: shmem: remove __shmem_huge_global_enabled()
  - mm: shmem: override mTHP shmem default with a kernel parameter
  - mm: move ``get_order_from_str()`` to internal.h
  - mm: shmem: control THP support through the kernel command line
  - !14962  memcg: fix memcg_swapmax_read() not declared warning
  - memcg: fix memcg_swapmax_read() not declared warning
  - !14944  ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
  - !14946  swiotlb: fix swiotlb_bounce() to do partial sync's correctly
  - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices
  - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single()
  - swiotlb: fix swiotlb_bounce() to do partial sync's correctly
  - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary
  - !14897  perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG
  - perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG
  - !14920  iio: light: vcnl4035: fix information leak in triggered buffer
  - iio: light: vcnl4035: fix information leak in triggered buffer
  - !14964 v2  fix BUG: unable to handle kernel paging request in build_id_parse
  - lib/buildid: Handle memfd_secret() files in build_id_parse()
  - mm: merge folio_is_secretmem() and folio_fast_pin_allowed() into gup_fast_folio_allowed()
  - !14951  Mainline patch to olk-6.6
  - RDMA/hns: Fix UAF for cq async event
  - Revert "RDMA/hns: Fix UAF for cq async event"
  - RDMA/hns: Check atomic wr length
  - Revert "RDMA/hns: Fix a missing check of atomic wr length"
  - Revert "RDMA/hns: Check atomic wr length"
  - !14925  RDMA/hns: Fix unmatch exception handling when request_irq() fails
  - RDMA/hns: Fix unmatch exception handling when request_irq() fails
  - !14884  um: Fix potential integer overflow during physmem setup
  - um: Fix potential integer overflow during physmem setup
  - !14886  Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
  - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
  - !14889  clk: ralink: mtmips: clock fixes for Ralink SoCs
  - clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs
  - clk: ralink: mtmips: fix clock plan for Ralink SoC RT3883
  - !14888  usb: dwc3: gadget: Fix looping of queued SG entries
  - usb: dwc3: gadget: Fix looping of queued SG entries
  - !14924  soc: imx8m: Probe the SoC driver as platform driver
  - soc: imx8m: Probe the SoC driver as platform driver
  - !14813  drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability
  - drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-77.0.0.81
changelog:
  - !15062  gpio: xilinx: Convert gpio_lock to raw spinlock
  - gpio: xilinx: Convert gpio_lock to raw spinlock
  - !15060  RDMA/hns: Fix mbox timing out by adding retry mechanism
  - RDMA/hns: Fix mbox timing out by adding retry mechanism
  - !15052 [OLK-6.6] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-6.6
  - KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
  - !15048 net: hns3: add sync command to sync io-pgtable
  - net: hns3: add sync command to sync io-pgtable
  - Revert "net: hns3: add sync command to sync io-pgtable"
  - net: hns3: fix oops when unload drivers paralleling
  - !15031  nbd: don't allow reconnect after disconnect
  - nbd: don't allow reconnect after disconnect
  - !15002  riscv: Fix sleeping in invalid context in die()
  - riscv: Fix sleeping in invalid context in die()
  - !14989  ksmbd: fix a missing return value check bug
  - ksmbd: fix a missing return value check bug
  - !15027  pinmux: Use sequential access to access desc->pinmux data
  - pinmux: Use sequential access to access desc->pinmux data
  - !14321 [OLK-6.6] rcu: Provide a boot time parameter to control lazy RCU
  - rcu: Provide a boot time parameter to control lazy RCU
  - rcu/tree: Remove superfluous return from void call_rcu* functions
  - !14900  LeapIOraid: update leapioraid driver version
  - LeapIOraid: update leapioraid driver version
  - !14325  LeapIOraid: Fix hiding ugood disk problem
  - LeapIOraid: Fix hiding ugood disk problem
  - !15016  spi: mpc52xx: Add cancel_work_sync before module remove
  - spi: mpc52xx: Add cancel_work_sync before module remove
  - !15041  gve: guard XDP xmit NDO on existence of xdp queues
  - gve: guard XDP xmit NDO on existence of xdp queues
  - !15040  gve: guard XSK operations on the existence of queues
  - gve: guard XSK operations on the existence of queues
  - !15039  mptcp: fix TCP options overflow.
  - mptcp: fix TCP options overflow.
  - !15038  net: fix memory leak in tcp_conn_request()
  - net: fix memory leak in tcp_conn_request()
  - !15037  net/smc: check smcd_v2_ext_offset when receiving proposal msg
  - net/smc: check smcd_v2_ext_offset when receiving proposal msg
  - !15036  net/smc: check return value of sock_recvmsg when draining clc data
  - net/smc: check return value of sock_recvmsg when draining clc data
  - !15025  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
  - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
  - !15019  platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it
  - platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it
  - !15020  drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
  - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
  - !14979  igb: Fix potential invalid memory access in igb_init_module()
  - igb: Fix potential invalid memory access in igb_init_module()
  - !14963  exfat: fix the infinite loop in exfat_readdir()
  - exfat: fix the infinite loop in exfat_readdir()
  - !14988  net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
  - net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
  - !14987  workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker
  - workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker
  - !14985  i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock
  - i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock
  - !14892  s390/cpum_sf: Handle CPU hotplug remove during sampling
  - s390/cpum_sf: Handle CPU hotplug remove during sampling
  - !15013 v2  nilfs2: prevent use of deleted inode
  - nilfs2: prevent use of deleted inode
  - !14845  merge HULK-6.6 patches into OLK-6.6
  - mm: refactor map_deny_write_exec()
  - drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()
  - nommu: pass NULL argument to vma_iter_prealloc()
  - mm: page_alloc: move mlocked flag clearance into free_pages_prepare()
  - cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU
  - kcsan: Turn report_filterlist_lock into a raw_spinlock
  - ionic: Fix netdev notifier unregister on failure
  - !15018  misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling
  - misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling
  - !15009  i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request
  - i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request
  - !15008  nvme-rdma: unquiesce admin_q before destroy it
  - nvme-rdma: unquiesce admin_q before destroy it


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-78.0.0.83
changelog:
  - !15076 [olk 6.6] backport some feature patches for hibmcge driver
  - net: hibmcge: Add nway_reset supported in this module
  - net: hibmcge: Add reset supported in this module
  - net: hibmcge: Add pauseparam supported in this module
  - net: hibmcge: Add register dump supported in this module
  - net: hibmcge: Add unicast frame filter supported in this module
  - net: hibmcge: Add irq_info file to debugfs
  - net: hibmcge: Add debugfs supported in this module
  - lib/string_choices: Add str_true_false()/str_false_true() helper
  - !15109  net: Fix icmp host relookup triggering ip_rt_bug
  - net: Fix icmp host relookup triggering ip_rt_bug
  - !15105  ipv6: Fix soft lockups in fib6_select_path under high next hop churn
  - ipv6: Fix soft lockups in fib6_select_path under high next hop churn
  - !15106  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX
  - !15101  net/mlx5e: Don't call cleanup on profile rollback failure
  - net/mlx5e: Don't call cleanup on profile rollback failure
  - !15103  ethtool: fail closed if we can't get max channel used in indirection tables
  - ethtool: fail closed if we can't get max channel used in indirection tables
  - !15102 v2  net: Fix CVE-2024-56658
  - net: Fix kabi breakage in struct net
  - net: defer final 'struct net' free in netns dismantle
  - !15107  netfilter: IDLETIMER: Fix for possible ABBA deadlock
  - netfilter: IDLETIMER: Fix for possible ABBA deadlock
  - !15110  net/mlx5e: Skip restore TC rules for vport rep without loaded flag
  - net/mlx5e: Skip restore TC rules for vport rep without loaded flag
  - !15111  net: wwan: t7xx: Fix FSM command timeout issue
  - net: wwan: t7xx: Fix FSM command timeout issue
  - !15112  net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
  - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
  - !15113  sched: sch_cake: add bounds checks to host bulk flow fairness counts
  - sched: sch_cake: add bounds checks to host bulk flow fairness counts
  - !15119  mm: resolve faulty mmap_region() error path behaviour
  - mm: resolve faulty mmap_region() error path behaviour
  - !15118  iio: adc: at91: call input_free_device() on allocated iio_dev
  - iio: adc: at91: call input_free_device() on allocated iio_dev
  - !15123  mm, madvise: fix potential workingset node list_lru leaks
  - mm, madvise: fix potential workingset node list_lru leaks
  - mm: move mapping_set_update out of <linux/swap.h>
  - !15055  iomap: avoid avoid truncating 64-bit offset to 32 bits
  - iomap: avoid avoid truncating 64-bit offset to 32 bits
  - !15128  ALSA: seq: oss: Fix races at processing SysEx messages
  - ALSA: seq: oss: Fix races at processing SysEx messages
  - !14972  selinux: ignore unknown extended permissions
  - selinux: ignore unknown extended permissions
  - !15121  KVM: arm64: Get rid of userspace_irqchip_in_use
  - KVM: arm64: Get rid of userspace_irqchip_in_use
  - !13446 [OLK-6.6]crypto: montage - fix variable 'device_handle' is uninitialized warning for Mont-TSSE driver
  - crypto: montage - fix variable 'device_handle' is unintialized warning for Mont-TSSE driver
  - !15133 Upgrade Hygon HCT driver to version 0.6
  - hct: remove the unused variables from hct shared structure.
  - hct: add write support for node use of MDEV devices.
  - hct: fix vm_start issue caused by pre allocated vma changes.
  - hct: compatible with hct.ko modules in versions 0.5 and earlier.
  - hct: update pasid type from int to long.
  - hct: sharing CCP resources between host and virtual machines.
  - hct: adding node to identifies hct mdev device usage status.
  - !15083  mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operation
  - mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operation
  - !15080 [OLK-6.6] crypto: zhaoxin - Fix incorrect parameter in sm4 driver
  - crypto: zhaoxin - Fix incorrect parameter in sm4 driver
  - !15078 [OLK-6.6] crypto: zhaoxin - Optimize the assembly code in the SM3 driver
  - crypto: zhaoxin - Optimize the assembly code in the SM3 driver
  - !15068 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.64-6.6.66 LTS Patches
  - i3c: master: svc: fix possible assignment of the same address to two devices
  - i3c: master: Remove i3c_dev_disable_ibi_locked(olddev) on device hotjoin
  - serial: amba-pl011: fix build regression
  - platform/x86: asus-wmi: Fix thermal profile initialization
  - ALSA: usb-audio: Update UMP group attributes for GTB blocks, too
  - usb: dwc3: ep0: Don't reset resource alloc flag
  - drm/amdgpu: rework resume handling for display (v2)
  - ASoC: Intel: avs: Fix return status of avs_pcm_hw_constraints_init()
  - ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume"
  - btrfs: add cancellation points to trim loops
  - iio: invensense: fix multiple odr switch when FIFO is off
  - xhci: dbc: Fix STALL transfer event handling
  - mm/damon/vaddr: fix issue in damon_va_evenly_split_region()
  - KVM: x86/mmu: Ensure that kvm_release_pfn_clean() takes exact pfn from kvm_faultin_pfn()
  - vfio/mlx5: Align the page tracking max message size with the device capability
  - x86: Fix build regression with CONFIG_KEXEC_JUMP enabled
  - tracing/eprobe: Fix to release eprobe when failed to add dyn_event
  - clk: en7523: Initialize num before accessing hws in en7523_register_clocks()
  - btrfs: fix missing snapshot drew unlock when root is dead during swap activation
  - setlocalversion: work around "git describe" performance
  - smb: client: don't try following DFS links in cifs_tree_connect()
  - serial: 8250_dw: Add Sophgo SG2044 quirk
  - rtc: cmos: avoid taking rtc_lock for extended period of time
  - misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle
  - powerpc/prom_init: Fixup missing powermac #size-cells
  - ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6 21M1CTO1WW
  - MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a
  - drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3
  - ASoC: amd: yc: fix internal mic on Redmi G 2022
  - iio: light: ltr501: Add LTER0303 to the supported devices
  - usb: chipidea: udc: handle USB Error Interrupt if IOC not set
  - fs/ntfs3: Fix case when unmarked clusters intersect with zone
  - ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[]
  - ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840
  - f2fs: fix to shrink read extent node in batches
  - f2fs: print message if fscorrupted was found in f2fs_new_node_page()
  - PCI: Add ACS quirk for Wangxun FF5xxx NICs
  - PCI: Add 'reset_subordinate' to reset hierarchy below bridge
  - PCI: Detect and trust built-in Thunderbolt chips
  - PCI: vmd: Set devices to D0 before enabling PM L1 Substates
  - PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs
  - PCI: qcom: Add support for IPQ9574
  - KMSAN: uninit-value in inode_go_dump (5)
  - verification/dot2: Improve dot parser robustness
  - smb: client: memcpy() with surrounding object base address
  - nvdimm: rectify the illogical code within nd_dax_probe()
  - thermal/drivers/qcom/tsens-v1: Add support for MSM8937 tsens
  - pinctrl: qcom: spmi-mpp: Add PM8937 compatible
  - pinctrl: qcom-pmic-gpio: add support for PM8937
  - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset
  - scsi: st: Don't modify unknown block number in MTIOCGET
  - leds: class: Protect brightness_show() with led_cdev->led_access mutex
  - clk: qcom: tcsrcc-sm8550: add SAR2130P support
  - clk: qcom: rpmh: add support for SAR2130P
  - clk: qcom: rcg2: add clk_rcg2_shared_floor_ops
  - scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths
  - scsi: ufs: core: Make DMA mask configuration more flexible
  - rtla/timerlat: Make timerlat_top_cpu->*_count unsigned long long
  - tools/rtla: fix collision with glibc sched_attr/sched_set_attr
  - tracing: Use atomic64_inc_return() in trace_clock_counter()
  - tracing/ftrace: disable preemption in syscall probe
  - pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU
  - netpoll: Use rcu_access_pointer() in __netpoll_setup
  - net/neighbor: clear error in case strict check is not set
  - rocker: fix link status detection in rocker_carrier_init()
  - ASoC: hdmi-codec: reorder channel allocation list
  - Bluetooth: Set quirks for ATS2851
  - Bluetooth: Support new quirks for ATS2851
  - Bluetooth: Add new quirks for ATS2851
  - Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables
  - dsa: qca8k: Use nested lock to avoid splat
  - wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()
  - wifi: ipw2x00: libipw_rx_any(): fix bad alignment
  - ALSA: usb-audio: Make mic volume workarounds globally applicable
  - virtio-net: fix overflow inside virtnet_rq_alloc
  - drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov
  - fsl/fman: Validate cell-index value obtained from Device Tree
  - dma-debug: fix a possible deadlock on radix_lock
  - drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr
  - netlink: specs: Add missing bitset attrs to ethtool spec
  - drm/amdgpu: Dereference the ATCS ACPI buffer
  - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih
  - drm/sched: memset() 'job' in drm_sched_job_init()
  - net: stmmac: Programming sequence for VLAN packets with split header
  - net: sfp: change quirks for Alcatel Lucent G-010S-P
  - drm/panel: simple: Add Microchip AC69T88A LVDS Display panel
  - fanotify: allow reporting errors on failure to open fd
  - wifi: ath5k: add PCI ID for Arcadyan devices
  - wifi: ath5k: add PCI ID for SX76X
  - net: inet6: do not leave a dangling sk pointer in inet6_create()
  - net: inet: do not leave a dangling sk pointer in inet_create()
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
  - net: af_can: do not leave a dangling sk pointer in can_create()
  - af_packet: avoid erroring out after sock_init_data() in packet_create()
  - net/sched: cbs: Fix integer overflow in cbs_set_port_rate()
  - net: ethernet: fs_enet: Use %pa to format resource_size_t
  - net: fec_mpc52xx_phy: Use %pa to format resource_size_t
  - samples/bpf: Fix a resource leak
  - r8169: don't apply UDP padding quirk on RTL8126A
  - drm/display: Fix building with GCC 15
  - dlm: fix possible lkb_resource null dereference
  - drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check()
  - drm/mcde: Enable module autoloading
  - drm/bridge: it6505: Enable module autoloading
  - drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK
  - drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition
  - drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model
  - drm/vc4: hvs: Set AXI panic modes for the HVS
  - drm/vc4: hdmi: Avoid log spam for audio start failure
  - HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support
  - selftests/resctrl: Protect against array overflow when reading strings
  - regmap: maple: Provide lockdep (sub)class for maple tree's internal lock
  - mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED
  - mmc: core: Add SD card quirk for broken poweroff notification
  - media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108
  - media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera
  - media: uvcvideo: RealSense D421 Depth module metadata
  - HID: add per device quirk to force bind to hid-generic
  - spi: spi-fsl-lpspi: Adjust type of scldiv
  - perf/x86/amd: Warn only on new bits set
  - ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID
  - hwmon: (nct6775) Add 665-ACE/600M-CL to ASUS WMI monitoring list
  - kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all()
  - btrfs: do not clear read-only when adding sprout device
  - btrfs: avoid unnecessary device path update for the same device
  - btrfs: don't take dev_replace rwsem on task already holding it
  - kselftest/arm64: Log fp-stress child startup errors to stdout
  - epoll: annotate racy check
  - x86/mm: Add _PAGE_NOPTISHADOW bit to avoid updating userspace page tables
  - kasan: make report_lock a raw spinlock
  - lib: stackinit: hide never-taken branch from compiler
  - ocfs2: update seq_file index in ocfs2_dlm_seq_next
  - mmc: core: Further prevent card detect during shutdown
  - mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet
  - regmap: detach regmap from dev on regmap_exit
  - dma-fence: Use kernel's sort for merging fences
  - dma-fence: Fix reference leak on fence merge failure path
  - dma-buf: fix dma_fence_array_signaled v4
  - x86/kexec: Restore GDT on return from ::preserve_context kexec
  - modpost: Add .irqentry.text to OTHER_SECTIONS
  - drm/amdgpu/hdp5.2: do a posting read when flushing HDP
  - drm/dp_mst: Fix resetting msg rx state after topology removal
  - drm/dp_mst: Verify request type in the corresponding down message reply
  - drm/dp_mst: Fix MST sideband message body length check
  - bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
  - smb3.1.1: fix posix mounts to older servers
  - fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points
  - fs/smb/client: Implement new SMB3 POSIX type
  - fs/smb/client: avoid querying SMB2_OP_QUERY_WSL_EA for SMB3 POSIX
  - scsi: ufs: core: Add missing post notify for power mode change
  - scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt
  - scsi: qla2xxx: Supported speed displayed incorrectly for VPorts
  - scsi: qla2xxx: Fix NVMe and NPIV connect issue
  - scsi: qla2xxx: Fix abort in bsg timeout
  - ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG)
  - ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8
  - ALSA: usb-audio: add mixer mapping for Corsair HS80
  - arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs
  - tracing: Fix cmp_entries_dup() to respect sort() comparison rules
  - can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum DS80000789E 6.
  - can: dev: can_set_termination(): allow sleeping GPIOs
  - watchdog: rti: of: honor timeout-sec property
  - LoongArch: Add architecture specific huge_pte_clear()
  - x86/CPU/AMD: WARN when setting EFER.AUTOIBRS if and only if the WRMSR fails
  - bpf: Fix exact match conditions in trie_get_next_key()
  - iio: magnetometer: yas530: use signed integer type for clamp limits
  - scatterlist: fix incorrect func name in kernel-doc
  - drm/v3d: Enable Performance Counters before clearing them
  - ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec
  - scsi: scsi_debug: Fix hrtimer support for ndelay
  - ASoC: SOF: ipc3-topology: fix resource leaks in sof_ipc3_widget_setup_comp_dai()
  - ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index
  - tools: Override makefile ARCH variable if defined, but empty
  - ALSA: usb-audio: Notify xrun for low-latency mode
  - ALSA: seq: ump: Fix seq port updates per FB info notify
  - ALSA: ump: Update substream name from assigned FB names
  - ALSA: seq: ump: Use automatic cleanup of kfree()
  - drm/sti: Add __iomem for mixer_dbg_mxn's parameter
  - bpftool: fix potential NULL pointer dereferencing in prog_dump()
  - xsk: always clear DMA mapping information when unmapping the pool
  - bpf, vsock: Invoke proto::close on close()
  - bpf, vsock: Fix poll() missing a queue
  - scsi: ufs: core: Add ufshcd_send_bsg_uic_cmd() for UFS BSG
  - scsi: ufs: core: Always initialize the UIC done completion
  - drm/bridge: it6505: Fix inverted reset polarity
  - drm/bridge: it6505: update usleep_range for RC circuit charge time
  - i3c: master: Fix dynamic address leak when 'assigned-address' is present
  - i3c: master: Extend address status bit to 4 and add I3C_ADDR_SLOT_EXT_DESIRED
  - i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS
  - i3c: master: svc: Modify enabled_events bit 7:0 to act as IBI enable counter
  - i3c: master: svc: use slow speed for first broadcast address
  - i3c: master: support to adjust first broadcast address speed
  - i3c: master: fix kernel-doc check warning
  - i3c: master: svc: add hot join support
  - i3c: master: add enable(disable) hot join in sys entry
  - f2fs: fix to drop all discards after creating snapshot on lvm device
  - driver core: fw_devlink: Stop trying to optimize cycle detection logic
  - driver core: Add FWLINK_FLAG_IGNORE to completely ignore a fwnode link
  - driver core: fw_devlink: Improve logs for cycle detection
  - ntp: Remove invalid cast in time offset math
  - powerpc/vdso: Drop -mstack-protector-guard flags in 32-bit files with clang
  - powerpc/vdso: Refactor CFLAGS for CVDSO build
  - mmc: mtk-sd: Fix MMC_CAP2_CRYPTO flag setting
  - mmc: mtk-sd: fix devm_clk_get_optional usage
  - mmc: mtk-sd: Fix error handle of probe function
  - mmc: mtk-sd: use devm_mmc_alloc_host
  - usb: dwc3: ep0: Don't clear ep0 DWC3_EP_TRANSFER_STARTED
  - usb: dwc3: ep0: Don't reset resource alloc flag (including ep0)
  - usb: dwc3: gadget: Rewrite endpoint allocation flow
  - soc: fsl: cpm1: qmc: Set the ret error code on platform_get_irq() failure
  - soc: fsl: cpm1: qmc: Introduce qmc_{init,exit}_xcc() and their CPM1 version
  - soc: fsl: cpm1: qmc: Introduce qmc_init_resource() and its CPM1 version
  - soc: fsl: cpm1: qmc: Re-order probe() operations
  - soc: fsl: cpm1: qmc: Fix blank line and spaces
  - soc/fsl: cpm: qmc: Convert to platform remove callback returning void
  - serial: amba-pl011: Fix RX stall when DMA is used
  - serial: amba-pl011: Use port lock wrappers
  - xhci: Fix control transfer error on Etron xHCI host
  - xhci: Don't issue Reset Device command to Etron xHCI host
  - xhci: Combine two if statements for Etron xHCI host
  - xhci: remove XHCI_TRUST_TX_LENGTH quirk
  - xhci: Allow RPM on the USB controller (1022:43f7) by default
  - net: avoid potential UAF in default_operstate()
  - net/mlx5e: Remove workaround to avoid syndrome for internal port
  - geneve: do not assume mac header is set in geneve_xmit_skb()
  - mlxsw: spectrum_acl_flex_keys: Use correct key block on Spectrum-4
  - mlxsw: spectrum_acl_flex_keys: Constify struct mlxsw_afk_element_inst
  - mlxsw: Mark high entropy key blocks
  - mlxsw: Edit IPv6 key blocks to use one less block for multicast forwarding
  - mlxsw: spectrum_acl_flex_keys: Add 'ipv4_5b' flex key
  - mlxsw: Add 'ipv4_5' flex key
  - ethtool: Fix wrong mod state in case of verbose and no_mask bitset
  - netfilter: nft_set_hash: skip duplicated elements pending gc run
  - netfilter: ipset: Hold module reference while requesting a module
  - net: sched: fix erspan_opt settings in cls_flower
  - ixgbe: downgrade logging of unsupported VF API version to debug
  - ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5
  - net/qed: allow old cards not supporting "num_images" to work
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer().
  - dccp: Fix memory leak in dccp_feat_change_recv
  - net/ipv6: release expired exception dst cached in socket
  - ipv6: introduce dst_rt6_info() helper
  - net-timestamp: make sk_tskey more predictable in error path
  - platform/x86: asus-wmi: Ignore return value when writing thermal policy
  - platform/x86: asus-wmi: Fix inconsistent use of thermal policies
  - platform/x86: asus-wmi: add support for vivobook fan profiles
  - can: j1939: j1939_session_new(): fix skb reference counting
  - net: hsr: avoid potential out-of-bound access in fill_frame_info()
  - net/sched: tbf: correct backlog statistic for GSO packets
  - ptp: Add error handling for adjfine callback in ptp_clock_adjtime
  - selftests: hid: fix typo and exit code
  - netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
  - netfilter: x_tables: fix LED ID check in led_tg_check()
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
  - can: f81604: f81604_handle_can_bus_errors(): fix {rx,tx}_errors statistics
  - can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics
  - can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics
  - can: sja1000: sja1000_err(): fix {rx,tx}_errors statistics
  - can: hi311x: hi3110_can_ist(): fix {rx,tx}_errors statistics
  - can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics
  - can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics
  - can: hi311x: hi3110_can_ist(): fix potential use-after-free
  - can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL
  - can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails
  - can: gs_usb: add usb endpoint address detection at driver probe step
  - can: gs_usb: add VID/PID for Xylanta SAINT3 product family
  - watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart()
  - watchdog: apple: Actually flush writes after requesting watchdog restart
  - watchdog: xilinx_wwdt: Calculate max_hw_heartbeat_ms using clock frequency
  - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call
  - openrisc: Use asm-generic's version of fix_to_virt() & virt_to_fix()
  - Revert "x86/pvh: Set phys_base when calling xen_prepare_pvh()"
  - Revert "x86/pvh: Call C code via the kernel virtual mapping"
  - !15069  fs/proc: fix softlockup in __read_vmcore (part 2)
  - fs/proc: fix softlockup in __read_vmcore (part 2)
  - !15067  irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()
  - irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()
  - !15065  fix CVE-2025-21668
  - pmdomain: imx8mp-blk-ctrl: add missing loop break condition
  - !15056 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.63-6.6.64 LTS Patches
  - posix-timers: Target group sigqueue to current task only if not exiting
  - drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu v13.0.7
  - drm/amdgpu: fix usage slab after free
  - drm/amdkfd: Use the correct wptr size
  - drm: xlnx: zynqmp_dpsub: fix hotplug detection
  - drm/etnaviv: flush shader L1 cache after user commandstream
  - drm/mediatek: Fix child node refcount handling in early exit
  - drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check
  - udmabuf: use vmf_insert_pfn and VM_PFNMAP for handling mmap
  - powerpc: Adjust adding stack protector flags to KBUILD_CLAGS for clang
  - powerpc: Fix stack protector Kconfig test for clang
  - iio: gts: fix infinite loop for gain_to_scaletables()
  - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name()
  - iio: accel: kx022a: Fix raw read format
  - nfsd: make sure exp active before svc_export_show
  - PCI: rockchip-ep: Fix address translation unit programming
  - PCI: of_property: Assign PCI instead of CPU bus address to dynamic PCI nodes
  - dm thin: Add missing destroy_work_on_stack()
  - dm: Fix typo in error message
  - ovl: properly handle large files in ovl_security_fileattr
  - leds: flash: mt6360: Fix device_for_each_child_node() refcounting in error paths
  - thermal: int3400: Fix reading of current_uuid for active policy
  - fs/proc/kcore.c: Clear ret value in read_kcore_iter after successful iov_iter_zero
  - PCI: endpoint: Clear secondary (not primary) EPC in pci_epc_remove_epf()
  - PCI: keystone: Add link up check to ks_pcie_other_map_bus()
  - PCI: keystone: Set mode as Root Complex for "ti,keystone-pcie" compatible
  - i3c: master: svc: Fix pm_runtime_set_suspended() with runtime pm enabled
  - scsi: ufs: exynos: Fix hibern8 notify callbacks
  - util_macros.h: fix/rework find_closest() macros
  - ceph: extract entity name from device id
  - mm/slub: Avoid list corruption when removing a slab from the full list
  - ARM: 9431/1: mm: Pair atomic_set_release() with _read_acquire()
  - ARM: 9430/1: entry: Do a dummy read from VMAP shadow
  - s390/entry: Mark IRQ entries to fix stack depot warnings
  - ARM: 9429/1: ioremap: Sync PGDs for VMALLOC shadow
  - clk: qcom: gcc-qcs404: fix initial rate of GPLL3
  - leds: lp55xx: Remove redundant test for invalid channel number
  - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables
  - zram: clear IDLE flag after recompression
  - vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event
  - maple_tree: refine mas_store_root() on storing NULL
  - media: uvcvideo: Require entities to have a non-zero unique ID
  - media: uvcvideo: Stop stream during unregister
  - media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate()
  - media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled
  - media: amphion: Fix pm_runtime_set_suspended() with runtime pm enabled
  - efi/libstub: Free correct pointer on failure
  - media: platform: exynos4-is: Fix an OF node reference leak in fimc_md_is_isp_available
  - media: ts2020: fix null-ptr-deref in ts2020_probe()
  - media: verisilicon: av1: Fix reference video buffer pointer assignment
  - media: i2c: tc358743: Fix crash in the probe error path when using polling
  - arm64: dts: freescale: imx8mp-verdin: Fix SD regulator startup delay
  - media: i2c: dw9768: Fix pm_runtime_set_suspended() with runtime pm enabled
  - media: mtk-jpeg: Fix null-ptr-deref during unload module
  - media: amphion: Set video drvdata before register video device
  - arm64: dts: ti: k3-am62-verdin: Fix SD regulator startup delay
  - arm64: dts: freescale: imx8mm-verdin: Fix SD regulator startup delay
  - arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer
  - md/md-bitmap: Add missing destroy_work_on_stack()
  - btrfs: add a sanity check for btrfs root in btrfs_search_slot()
  - btrfs: don't loop for nowait writes when checking for cross references
  - quota: flush quota_release_work upon quota writeback
  - xfs: remove unknown compat feature check in superblock write validation
  - SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT
  - cifs: unlock on error in smb3_reconfigure()
  - cifs: during remount, make sure passwords are in sync
  - modpost: remove incorrect code in do_eisa_entry()
  - Rename .data.once to .data..once to fix resetting WARN*_ONCE
  - Rename .data.unlikely to .data..unlikely
  - init/modpost: conditionally check section mismatch to __meminit*
  - modpost: squash ALL_{INIT,EXIT}_TEXT_SECTIONS to ALL_TEXT_SECTIONS
  - modpost: use ALL_INIT_SECTIONS for the section check from DATA_SECTIONS
  - modpost: disallow the combination of EXPORT_SYMBOL and __meminit*
  - modpost: remove EXIT_SECTIONS macro
  - modpost: remove MEM_INIT_SECTIONS macro
  - modpost: disallow *driver to reference .meminit* sections
  - modpost: remove ALL_EXIT_DATA_SECTIONS macro
  - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification
  - cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE session
  - cifs: Fix parsing native symlinks relative to the export
  - smb: client: disable directory caching when dir_cache_timeout is zero
  - perf/arm-cmn: Ensure port and device id bits are set properly
  - perf/arm-smmuv3: Fix lockdep assert in ->event_init()
  - 9p/xen: fix release of IRQ
  - 9p/xen: fix init sequence
  - block: return unsigned int from bdev_io_min
  - nvme/multipath: Fix RCU list traversal to use SRCU primitive
  - nvme-multipath: avoid hang on inaccessible namespaces
  - nvme-multipath: implement "queue-depth" iopolicy
  - nvme-multipath: prepare for "queue-depth" iopolicy
  - rtc: rzn1: fix BCD to rtc_time conversion errors
  - jffs2: fix use of uninitialized variable
  - ubi: fastmap: Fix duplicate slab cache names while attaching
  - ubifs: Correct the total block count by deducting journal reservation
  - ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
  - rtc: abx80x: Fix WDT bit position of the status register
  - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq()
  - um: Always dump trace for specified task in show_stack
  - um: Fix the return value of elf_core_copy_task_fpregs
  - SUNRPC: make sure cache entry active before cache_show
  - ipc: fix memleak if msg_init_ns failed in create_ipc_ns
  - lib: string_helpers: silence snprintf() output truncation warning
  - ublk: fix error code for unsupported command
  - usb: dwc3: gadget: Fix checking for number of TRBs left
  - smb: During unmount, ensure all cached dir instances drop their dentry
  - smb: prevent use-after-free due to open_cached_dir error paths
  - smb: Don't leak cfid when reconnect races with open_cached_dir
  - smb: client: handle max length for SMB symlinks
  - smb3: request handle caching when caching directories
  - ALSA: hda/realtek: Apply quirk for Medion E15433
  - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max
  - ALSA: hda/realtek: Set PCBeep to default value for ALC274
  - ALSA: hda/realtek: Update ALC225 depop procedure
  - ALSA: ump: Fix evaluation of MIDI 1.0 FB info
  - media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
  - soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting()
  - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values
  - blk-mq: Make blk_mq_quiesce_tagset() hold the tag list mutex less long
  - block: fix ordering between checking BLK_MQ_S_STOPPED request adding
  - block: fix ordering between checking QUEUE_FLAG_QUIESCED request adding
  - block: fix missing dispatching request when queue is started or unquiesced
  - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled
  - ublk: fix ublk_ch_mmap() for 64K page size
  - iio: gts: Fix uninitialized symbol 'ret'
  - um: vector: Do not use drvdata in release
  - serial: 8250: omap: Move pm_runtime_get_sync
  - serial: 8250_fintek: Add support for F81216E
  - dt-bindings: serial: rs485: Fix rs485-rts-delay property
  - um: net: Do not use drvdata in release
  - um: ubd: Do not use drvdata in release
  - ubi: wl: Put source PEB into correct list if trying locking LEB failed
  - platform/chrome: cros_ec_typec: fix missing fwnode reference decrement
  - smb: client: fix NULL ptr deref in crypto_aead_setkey()
  - parisc/ftrace: Fix function graph tracing disablement
  - cifs: support mounting with alternate password to allow password rotation
  - cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power()
  - mtd: spi-nor: core: replace dummy buswidth from addr to data
  - spi: Fix acpi deferred irq probe
  - netfilter: ipset: add missing range check in bitmap_ip_uadt
  - gpio: exar: set value when external pull-up or pull-down is present
  - Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit"
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit
  - Revert "usb: gadget: composite: fix OS descriptors w_value logic"
  - wifi: brcmfmac: release 'root' node in all execution paths
  - wifi: ath12k: fix crash when unbinding
  - ARM: dts: omap36xx: declare 1GHz OPP as turbo again
  - usb: xhci: Fix TD invalidation under pending Set TR Dequeue
  - Compiler Attributes: disable __counted_by for clang < 19.1.3
  - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}()
  - exfat: fix uninit-value in __exfat_get_dentry_set
  - dt-bindings: iio: dac: ad3552r: fix maximum spi speed
  - pinctrl: qcom: spmi: fix debugfs drive strength
  - tools/nolibc: s390: include std.h
  - locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()
  - tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler
  - comedi: Flush partial mappings in error case
  - fsnotify: fix sending inotify event with unexpected filename
  - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status
  - KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR
  - powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector
  - KVM: x86/mmu: Skip the "try unsync" path iff the old SPTE was a leaf SPTE
  - crypto: x86/aegis128 - access 32-bit arguments as 32-bit
  - perf/x86/intel/pt: Fix buffer full but size is 0 case
  - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata()
  - ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5 21MES00B00
  - jfs: xattr: check invalid xattr size more strictly
  - ext4: fix FS_IOC_GETFSMAP handling
  - ext4: supress data-race warnings in ext4_free_inodes_{count,set}()
  - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe()
  - ASoC: Intel: sst: Fix used of uninitialized ctx to log an error
  - arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
  - Revert "arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled"
  - btrfs: do not BUG_ON() when freeing tree block after error
  - dm-bufio: fix warnings about duplicate slab caches
  - dm-cache: fix warnings about duplicate slab caches
  - closures: Change BUG_ON() to WARN_ON()
  - usb: ehci-spear: fix call balance of sehci clk handling routines
  - xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
  - nvme: fix metadata handling in nvme-passthrough
  - mailbox: mtk-cmdq: Move devm_mbox_controller_register() after devm_pm_runtime_enable()
  - f2fs: fix fiemap failure issue when page size is 16KB
  - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru
  - ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry
  - apparmor: fix 'Do simple duplicate message elimination'
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp
  - drm/radeon: Fix spurious unplug event on radeon HDMI
  - drm/radeon: change rdev->ddev to rdev_to_drm(rdev)
  - drm/radeon: add helper rdev_to_drm(rdev)
  - ALSA: hda/realtek: Update ALC256 depop procedure
  - counter: ti-ecap-capture: Add check for clk_enable()
  - counter: stm32-timer-cnt: Add check for clk_enable()
  - misc: apds990x: Fix missing pm_runtime_disable()
  - USB: chaoskey: Fix possible deadlock chaoskey_list_lock
  - USB: chaoskey: fail open after removal
  - usb: yurex: make waiting on yurex_write interruptible
  - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read()
  - iio: light: al3010: Fix an error handling path in al3010_probe()
  - ipmr: fix tables suspicious RCU usage
  - ip6mr: fix tables suspicious RCU usage
  - rxrpc: Improve setsockopt() handling of malformed user input
  - llc: Improve setsockopt() handling of malformed user input
  - bnxt_en: Unregister PTP during PCI shutdown and suspend
  - bnxt_en: Refactor bnxt_ptp_init()
  - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
  - net: hsr: fix hsr_init_sk() vs network/transport headers.
  - spi: atmel-quadspi: Fix register name in verbose logging function
  - octeontx2-af: Quiesce traffic before NIX block reset
  - octeontx2-af: RPM: fix stale FCFEC counters
  - octeontx2-af: RPM: fix stale RSFEC counters
  - octeontx2-pf: Reset MAC stats during probe
  - octeontx2-af: RPM: Fix low network performance
  - octeontx2-af: RPM: Fix mismatch in lmac type
  - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken
  - marvell: pxa168_eth: fix call balance of pep->clk handling routines
  - net: mdio-ipq4019: add missing error check
  - net/ipv6: delete temporary address if mngtmpaddr is removed or unmanaged
  - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()
  - net: microchip: vcap: Add typegroup table terminators in kunit tests
  - net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration
  - tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets
  - net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device
  - power: supply: rt9471: Use IC status regfield to report real charger status
  - power: supply: rt9471: Fix wrong WDT function regfield declaration
  - power: supply: bq27xxx: Fix registers of bq27426
  - power: supply: core: Remove might_sleep() from power_supply_put()
  - LoongArch: BPF: Sign-extend return values
  - LoongArch: Fix build failure with GCC 15 (-std=gnu23)
  - fs_parser: update mount_api doc to match function signature
  - vfio/pci: Properly hide first-in-list PCIe extended capability
  - gpio: zevio: Add missed label initialisation
  - selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels
  - vdpa/mlx5: Fix suboptimal range on iotlb iteration
  - hwmon: (tps23861) Fix reporting of negative temperatures
  - NFSD: Fix nfsd4_shutdown_copy()
  - nfsd: release svc_expkey/svc_export with rcu_work
  - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir()
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
  - PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio'
  - remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region
  - rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length
  - remoteproc: qcom: pas: add minidump_id to SM8350 resources
  - perf trace: Avoid garbage when not printing a syscall's arguments
  - perf trace: Do not lose last events in a race
  - perf trace: Fix tracing itself, creating feedback loops
  - perf list: Fix topic and pmu_name argument order
  - m68k: coldfire/device.c: only build FEC when HW macros are defined
  - m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x
  - perf trace: avoid garbage when not printing a trace event's arguments
  - f2fs: fix to avoid forcing direct write to use buffered IO on inline_data inode
  - PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds
  - PCI: j721e: Add suspend and resume support
  - PCI: j721e: Use T_PERST_CLK_US macro
  - PCI: j721e: Add reset GPIO to struct j721e_pcie
  - PCI: cadence: Set cdns_pcie_host_init() global
  - PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup()
  - PCI: j721e: Add PCIe 4x lane selection support
  - PCI: j721e: Add per platform maximum lane settings
  - PCI: Add T_PVPERL macro
  - f2fs: fix to avoid use GC_AT when setting gc_mode as GC_URGENT_LOW or GC_URGENT_MID
  - f2fs: check curseg->inited before write_sum_page in change_curseg
  - f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block
  - perf ftrace latency: Fix unit on histogram first entry when using --use-nsec
  - PCI: cpqphp: Fix PCIBIOS_* return value confusion
  - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads
  - rust: macros: fix documentation of the paste! macro
  - perf probe: Correct demangled symbols in C++ program
  - perf probe: Fix libdw memory leak
  - f2fs: fix to account dirty data in __get_secs_required()
  - f2fs: compress: fix inconsistent update of i_blocks in release_compress_blocks and reserve_compress_blocks
  - perf test attr: Add back missing topdown events
  - perf trace: Keep exited threads for summary
  - perf stat: Fix affinity memory leaks on error path
  - perf stat: Close cork_fd when create_perf_stat_counter() failed
  - gfs2: Allow immediate GLF_VERIFY_DELETE work
  - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE
  - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw
  - perf cs-etm: Don't flush when packet_queue fills up
  - mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb()
  - smb: cached directories can be more than root file handle
  - pinctrl: k210: Undef K210_PC_DEFAULT
  - arm64: dts: qcom: sc8180x: Add a SoC-specific compatible to cpufreq-hw
  - clk: clk-axi-clkgen: make sure to enable the AXI bus clock
  - dt-bindings: clock: axi-clkgen: include AXI clk
  - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
  - powerpc/kexec: Fix return of uninitialized variable
  - powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static
  - KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on pending doorbells
  - KVM: PPC: Book3S HV: Stop using vc->dpdes for nested KVM guests
  - dax: delete a stale directory pmem
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power()
  - x86/tdx: Dynamically disable SEPT violations from causing #VEs
  - x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup()
  - x86/tdx: Introduce wrappers to read and write TD metadata
  - x86/tdx: Pass TDCALL/SEAMCALL input/output registers via a structure
  - x86/tdx: Rename __tdx_module_call() to __tdcall()
  - x86/tdx: Make macros of TDCALLs consistent with the spec
  - x86/tdx: Skip saving output regs when SEAMCALL fails with VMFailInvalid
  - scsi: fusion: Remove unused variable 'rc'
  - fs/proc/kcore.c: fix coccinelle reported ERROR instances
  - mfd: rt5033: Fix missing regmap_del_irq_chip()
  - checkpatch: always parse orig_commit in fixes tag
  - checkpatch: check for missing Fixes tags
  - iommu/vt-d: Fix checks and print in pgtable_walk()
  - iommu/vt-d: Fix checks and print in dmar_fault_dump_ptes()
  - clk: imx: imx8-acm: Fix return value check in clk_imx_acm_attach_pm_domains()
  - clk: imx: clk-scu: fix clk enable state save and restore
  - clk: imx: fracn-gppll: fix pll power up
  - clk: imx: fracn-gppll: correct PLL initialization flow
  - clk: imx: lpcg-scu: SW workaround for errata (e10858)
  - RISC-V: KVM: Fix APLIC in_clrip and clripnum write emulation
  - RDMA/rxe: Set queue pair cur_qp_state when being queried
  - clk: renesas: rzg2l: Fix FOUTPOSTDIV clk
  - clk: sunxi-ng: d1: Fix PLL_AUDIO0 preset
  - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey
  - mtd: spi-nor: spansion: Use nor->addr_nbytes in octal DTR mode in RD_ANY_REG_OP
  - powerpc/mm/fault: Fix kfence page fault reporting
  - mtd: rawnand: atmel: Fix possible memory leak
  - mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE
  - mtd: hyperbus: rpc-if: Convert to platform remove callback returning void
  - cpufreq: loongson2: Unregister platform_driver on failure
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device
  - mfd: da9052-spi: Change read-mask to write-mask
  - mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race
  - powerpc/vdso: Flag VDSO64 entry points as functions
  - pinctrl: zynqmp: drop excess struct member description
  - trace/trace_event_perf: remove duplicate samples on the first tracepoint event
  - clk: mediatek: drop two dead config options
  - unicode: Fix utf8_load() error path
  - bpf: fix recursive lock when verdict program return SK_PASS
  - wireguard: selftests: load nf_conntrack if not present
  - netpoll: Use rcu_access_pointer() in netpoll_poll_lock
  - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
  - ALSA: us122l: Use snd_card_free_when_closed() at disconnection
  - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
  - net: rfkill: gpio: Add check for clk_enable()
  - bpf: Force uprobe bpf program to always return 0
  - drm/amdkfd: Fix wrong usage of INIT_WORK()
  - selftests: net: really check for bg process completion
  - ipv6: release nexthop on device removal
  - net: use unrcu_pointer() helper
  - sock_diag: allow concurrent operation in sock_diag_rcv_msg()
  - sock_diag: allow concurrent operations
  - sock_diag: add module pointer to "struct sock_diag_handler"
  - bpf, sockmap: Fix sk_msg_reset_curr
  - bpf, sockmap: Several fixes to bpf_msg_push_data
  - selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap
  - selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap
  - selftests/bpf: Fix SENDPAGE data logic in test_sockmap
  - selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap
  - netlink: typographical error in nlmsg_type constants definition
  - netfilter: nf_tables: must hold rcu read lock while iterating object type list
  - netfilter: nf_tables: skip transaction if update object is not implemented
  - netfilter: nf_tables: must hold rcu read lock while iterating expression type list
  - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion
  - netfilter: nf_tables: Introduce nf_tables_getrule_single()
  - netfilter: nf_tables: Open-code audit log call in nf_tables_getrule()
  - drm: use ATOMIC64_INIT() for atomic64_t
  - drm/vkms: Drop unnecessary call to drm_crtc_cleanup()
  - bpf, bpftool: Fix incorrect disasm pc
  - drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk()
  - wifi: wfx: Fix error handling in wfx_core_init()
  - drm/etnaviv: hold GPU lock across perfmon sampling
  - drm/etnaviv: Request pages from DMA32 zone on addressing_limited
  - drm/msm/gpu: Check the status of registration to PM QoS
  - drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq()
  - bpf, arm64: Remove garbage frame for struct_ops trampoline
  - drm/panfrost: Remove unused id_mask from struct panfrost_model
  - selftests/bpf: fix test_spin_lock_fail.c's global vars usage
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c
  - drm/msm/dpu: drop LM_3 / LM_4 on MSM8998
  - drm/msm/dpu: drop LM_3 / LM_4 on SDM845
  - drm/msm/dpu: on SDM845 move DSPP_3 to LM_5 block
  - drm: fsl-dcu: enable PIXCLK on LS1021A
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
  - selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap
  - selftests/bpf: Fix msg_verify_data in test_sockmap
  - drm/bridge: tc358767: Fix link properties discovery
  - netdevsim: copy addresses for both in and out paths
  - libbpf: never interpret subprogs in .text as entry programs
  - ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c
  - libbpf: fix sym_is_subprog() logic for weak global subprogs
  - drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_atomic_flush
  - ice: consistently use q_idx in ice_vc_cfg_qs_msg()
  - ice: Support FCS/CRC strip disable for VF
  - virtchnl: Add CRC stripping capability
  - wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR
  - bpf: Fix the xdp_adjust_tail sample prog issue
  - libbpf: Fix expected_attach_type set handling in program load callback
  - drm/bridge: it6505: Drop EDID cache on bridge power off
  - drm/bridge: anx7625: Drop EDID cache on bridge power off
  - ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode
  - ASoC: fsl_micfil: fix regmap_write_bits usage
  - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1
  - drm/v3d: Address race-condition in MMU flush
  - drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq()
  - drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq()
  - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq()
  - wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq()
  - drm/omap: Fix locking in omap_gem_new_dmabuf()
  - drm/omap: Fix possible NULL dereference
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
  - drm/vc4: hvs: Correct logic on stopping an HVS channel
  - drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function
  - drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer
  - drm/vc4: hvs: Don't write gamma luts on 2711
  - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused
  - platform/x86: panasonic-laptop: Return errno correctly in show callback
  - HID: hyperv: streamline driver probe to avoid devres issues
  - arm64: dts: rockchip: correct analog audio name on Indiedroid Nova
  - selftests/resctrl: Protect against array overrun during iMC config parsing
  - selftests/resctrl: Fix memory overflow due to unhandled wraparound
  - selftests/resctrl: Refactor fill_buf functions
  - selftests/resctrl: Split fill_buf to allow tests finer-grained control
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed regulators
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names
  - arm64: dts: mediatek: mt6358: fix dtbs_check error
  - arm64: dts: mediatek: Add ADC node on MT6357, MT6358, MT6359 PMICs
  - arm64: dts: renesas: hihope: Drop #sound-dai-cells
  - regmap: irq: Set lockdep class for hierarchical IRQ domains
  - spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time​
  - spi: tegra210-quad: Avoid shift-out-of-bounds
  - pmdomain: ti-sci: Add missing of_node_put() for args.np
  - of/fdt: add dt_phys arg to early_init_dt_scan and early_init_dt_verify
  - x86/of: Unconditionally call unflatten_and_copy_device_tree()
  - um: Unconditionally call unflatten_device_tree()
  - arm64: dts: ti: k3-j721s2: Fix clock IDs for MCSPI instances
  - arm64: dts: ti: k3-j721e: Fix clock IDs for MCSPI instances
  - arm64: dts: ti: k3-j7200: Fix clock ids for MCSPI instances
  - arm64: dts: ti: k3-j7200: Fix register map for main domain pmx
  - arm64: dts: ti: k3-j7200: use ti,j7200-padconf compatible
  - ARM: dts: cubieboard4: Fix DCDC5 regulator constraints
  - pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle
  - arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns
  - arm64: dts: mt8183: cozmo: add i2c2's i2c-scl-internal-delay-ns
  - arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns
  - arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns
  - regulator: rk808: Restrict DVS GPIOs to the RK808 variant only
  - arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad
  - arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4
  - arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4
  - media: i2c: ds90ub960: Fix missing return check on ub960_rxport_read call
  - tpm: fix signed/unsigned bug when checking event logs
  - efi/libstub: fix efi_parse_options() ignoring the default command line
  - openrisc: Implement fixmap to fix earlycon
  - mmc: mmc_spi: drop buggy snprintf()
  - ARM: dts: microchip: sam9x60: Add missing property atmel,usart-mode
  - arm64: dts: qcom: sm6350: Fix GPU frequencies missing on some speedbins
  - soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq()
  - arm64: dts: mt8195: Fix dtbs_check error for infracfg_ao node
  - arm64: dts: mt8195: Fix dtbs_check error for mutex node
  - microblaze: Export xmb_manager functions
  - spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq()
  - clocksource/drivers/timer-ti-dm: Fix child node refcount handling
  - clocksource/drivers:sp804: Make user selectable
  - kcsan, seqlock: Fix incorrect assumption in read_seqbegin()
  - kcsan, seqlock: Support seqcount_latch_t
  - time: Fix references to _msecs_to_jiffies() handling of values
  - time: Partially revert cleanup on msecs_to_jiffies() documentation
  - x86/unwind/orc: Fix unwind for newly forked tasks
  - thermal/lib: Fix memory leak on error in thermal_genl_auto()
  - tools/lib/thermal: Make more generic the command encoding function
  - rcuscale: Do a proper cleanup if kfree_scale_init() fails
  - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
  - crypto: caam - add error check to caam_rsa_set_priv_key_form
  - hwmon: (pmbus/core) clear faults after setting smbalert mask
  - hwmon: (pmbus_core) Allow to hook PMBUS_SMBALERT_MASK
  - doc: rcu: update printed dynticks counter bits
  - crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init()
  - amd-pstate: Set min_perf to nominal_perf for active mode performance gov
  - crypto: cavium - Fix the if condition to exit loop after timeout
  - EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
  - EDAC/skx_common: Differentiate memory error sources
  - EDAC/fsl_ddr: Fix bad bit shift operations
  - thermal: core: Initialize thermal zones before registering them
  - crypto: qat - remove faulty arbiter config reset
  - firmware: google: Unregister driver_info on failure
  - crypto: qat/qat_4xxx - fix off by one in uof_get_name()
  - crypto: qat - remove check after debugfs_create_dir()
  - crypto: caam - Fix the pointer passed to caam_qi_shutdown()
  - virtio_blk: reverse request order in virtio_queue_rqs
  - nvme-pci: reverse request order in nvme_queue_rqs
  - ext4: remove calls to to set/clear the folio error flag
  - s390/syscalls: Avoid creation of arch/arch/ directory
  - block: fix bio_split_rw_at to take zone_write_granularity into account
  - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block()
  - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG
  - m68k: mvme147: Reinstate early console
  - m68k: mvme16x: Add and use "mvme16x.h"
  - m68k: mvme147: Fix SCSI controller IRQ numbers
  - mips: asm: fix warning when disabling MIPS_FP_SUPPORT
  - x86/pvh: Call C code via the kernel virtual mapping
  - x86/pvh: Set phys_base when calling xen_prepare_pvh()
  - s390/pageattr: Implement missing kernel_page_present()
  - s390/cio: Do not unregister the subchannel based on DNV
  - kselftest/arm64: mte: fix printf type warnings about longs
  - kselftest/arm64: mte: fix printf type warnings about __u64
  - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
  - drm/amd/display: Don't refer to dc_sink in is_dsc_need_re_compute
  - x86/stackprotector: Work around strict Clang TLS symbol requirements
  - ipmr: Fix access to mfc_cache_list without lock held
  - ARM: 9420/1: smp: Fix SMP for xip kernels
  - ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry
  - LoongArch: Define a default value for VM_DATA_DEFAULT_FLAGS
  - ASoC: audio-graph-card2: Purge absent supplies for device tree nodes
  - proc/softirqs: replace seq_printf with seq_put_decimal_ull_width
  - drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F DMI match less strict
  - ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div()
  - ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate()
  - ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad E14 Gen 6
  - platform/x86: thinkpad_acpi: Fix for ThinkPad's with ECFW showing incorrect fan speed
  - can: j1939: fix error in J1939 documentation.
  - tools/lib/thermal: Remove the thermal.h soft link when doing make clean
  - ASoC: tas2781: Add new driver version for tas2563 & tas2781 qfn chip
  - platform/x86: dell-wmi-base: Handle META key Lock/Unlock events
  - platform/x86: dell-smbios-base: Extends support to Alienware products
  - regulator: rk808: Add apply_bit for BUCK3 on RK809
  - firmware: arm_scmi: Reject clear channel request on A2P
  - soc: qcom: Add check devm_kasprintf() returned value
  - net: usb: qmi_wwan: add Quectel RG650V
  - bpf: fix filed access without lock
  - x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB
  - ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13
  - usb: typec: use cleanup facility for 'altmodes_node'
  - usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver
  - mac80211: fix user-power when emulating chanctx
  - wifi: iwlwifi: mvm: Use the sync timepoint API in suspend
  - ASoC: Intel: sst: Support LPE0F28 ACPI HID
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet
  - ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec
  - ASoC: codecs: rt5640: Always disable IRQs from rt5640_cancel_work()
  - wifi: radiotap: Avoid -Wflex-array-member-not-at-end warnings


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-79.0.0.84
changelog:
  - !15203  usb: cdc-acm: Check control transfer buffer size before access
  - usb: cdc-acm: Check control transfer buffer size before access
  - !15214  USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
  - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
  - !15178 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Conflicts Patches
  - perf time-utils: Fix 32-bit nsec parsing
  - perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time
  - perf stat: Display iostat headers correctly
  - perf sched timehist: Fix missing free of session in perf_sched__timehist()
  - perf report: Fix --total-cycles --stdio output error
  - perf ui/browser/annotate: Use global annotation_options
  - perf annotate: Move some source code related fields from 'struct annotation' to 'struct annotated_source'
  - perf annotate: Split branch stack cycles info from 'struct annotation'
  - perf inject: Fix leader sampling inserting additional samples
  - perf mem: Free the allocated sort string, fixing a leak
  - !14179 [OLK-6.6] update ITMT support patch for Zhaoxin CPUs
  - cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
  - cpufreq: ACPI: add ITMT support when CPPC enabled
  - Revert "cpufreq: ACPI: add ITMT support when CPPC enabled"
  - !15200  arm64/mpam: Try reading again if monitor instance returns not ready
  - arm64/mpam: Try reading again if monitor instance returns not ready
  - !15197 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.68-6.6.69 LTS Patches
  - block: avoid to reuse `hctx` not removed from cpuhp callback list
  - ALSA: hda/realtek: Fix spelling mistake "Firelfy" -> "Firefly"
  - ALSA: sh: Fix wrong argument order for copy_from_iter()
  - btrfs: sysfs: fix direct super block member reads
  - btrfs: avoid monopolizing a core when activating a swap file
  - power: supply: gpio-charger: Fix set charge current limits
  - drm/amdkfd: pause autosuspend when creating pdd
  - drm/amdkfd: Use device based logging for errors
  - drm/amdkfd: drop struct kfd_cu_info
  - drm/amdkfd: reduce stack size in kfd_topology_add_device()
  - drm/amdgpu/hdp6.0: do a posting read when flushing HDP
  - drm/amdgpu/hdp5.0: do a posting read when flushing HDP
  - drm/amdgpu/hdp4.0: do a posting read when flushing HDP
  - drm/amd/amdgpu: allow use kiq to do hdp flush under sriov
  - pmdomain: core: Add missing put_device()
  - ALSA: hda/realtek: fix micmute LEDs don't work on HP Laptops
  - ALSA: hda/realtek: fix mute/micmute LEDs don't work for EliteBook X G1i
  - MIPS: mipsregs: Set proper ISA level for virt extensions
  - MIPS: Probe toolchain support of -msym32
  - blk-mq: move cpuhp callback registering out of q->sysfs_lock
  - blk-mq: register cpuhp callback after hctx is added to xarray table
  - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
  - spi: omap2-mcspi: Fix the IS_ERR() bug for devm_clk_get_optional_enabled()
  - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error
  - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
  - spi: intel: Add Panther Lake SPI controller support
  - platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
  - LoongArch: BPF: Adjust the parameter of emit_jirl()
  - LoongArch: Fix reserving screen info memory for above-4G firmware
  - regmap: Use correct format specifier for logging range errors
  - smb: server: Fix building with GCC 15
  - ALSA: sh: Use standard helper for buffer accesses
  - ALSA: hda/conexant: fix Z60MR100 startup pop issue
  - udf: Skip parent dir link count update if corrupted
  - scsi: qla1280: Fix hw revision numbering for ISP1020/1040
  - watchdog: mediatek: Add support for MT6735 TOPRGU/WDT
  - watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
  - stddef: make __struct_group() UAPI C++-friendly
  - powerpc/pseries/vas: Add close() callback in vas_vm_ops struct
  - mtd: rawnand: fix double free in atmel_pmecc_create_user()
  - dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
  - dmaengine: apple-admac: Avoid accessing registers in probe
  - dmaengine: fsl-edma: implement the cleanup path of fsl_edma3_attach_pd()
  - dmaengine: tegra: Return correct DMA status when paused
  - dmaengine: dw: Select only supported masters for ACPI devices
  - dmaengine: mv_xor: fix child node refcount handling in early exit
  - phy: rockchip: naneng-combphy: fix phy reset
  - phy: usb: Toggle the PHY power during init
  - phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
  - phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider
  - phy: core: Fix that API devm_phy_put() fails to release the phy
  - phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
  - phy: core: Fix an OF node refcount leakage in _of_phy_get()
  - phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP
  - mtd: rawnand: arasan: Fix missing de-registration of NAND
  - mtd: rawnand: arasan: Fix double assertion of chip-select
  - mtd: diskonchip: Cast an operand to prevent potential overflow
  - nfsd: restore callback functionality for NFSv4.0
  - nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
  - bpf: Check negative offsets in __bpf_skb_min_len()
  - tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
  - mm/vmstat: fix a W=1 clang compiler warning
  - ceph: allocate sparse_ext map only for sparse reads
  - ceph: fix memory leak in ceph_direct_read_write()
  - ceph: try to allocate a smaller extent map for sparse read
  - !15190 v2  fs/resctrl: Adapt to the hardware topology structures of RDT and MPAM
  - arm64/mpam: Add write memory barrier to guarantee monitor results
  - arm64/mpam: Improve conversion accuracy between percent and fixed-point fraction
  - arm64/mpam: Fix out-of-bound access of cfg array
  - arm64/mpam: fix bug in percent_to_mbw_max()
  - arm64/mpam: fix MBA granularity conversion formula
  - arm64/mpam: Fix out-of-bound access of mbwu_state array
  - arm64/mpam: Add judgment to distinguish MSMON_MBWU_CAPTURE definition
  - arm64/mpam: Support MATA monitor feature for MPAM
  - fs/resctrl: Adapt to the hardware topology structures of RDT and MPAM
  - !15192  scsi: megaraid_sas: Fix for a potential deadlock
  - scsi: megaraid_sas: Fix for a potential deadlock
  - !15191  gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
  - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
  - !15170  The QoS feature adapts to the cfs bandwidth throttling
  - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug
  - sched/qos: Fix qos throttling in SMT expelled
  - hungtask: fixed offline group hung task issue under high load scenarios
  - !15176  virtio-blk: don't keep queue frozen during system suspend
  - virtio-blk: don't keep queue frozen during system suspend
  - !15175  block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
  - block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
  - !15167  Backport tracing fix patch
  - trace: Fix kabi breakage for trace_event_fields
  - tracing: Check "%s" dereference via the field and not the TP_printk format
  - !15181  kobject: Fix global-out-of-bounds in kobject_action_type()
  - kobject: Fix global-out-of-bounds in kobject_action_type()
  - !15184  binfmt_flat: Fix integer overflow bug on 32 bit systems
  - binfmt_flat: Fix integer overflow bug on 32 bit systems
  - !15161 Revert "irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0"
  - Revert "irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0"
  - !15166  tracing: Have process_string() also allow arrays
  - tracing: Have process_string() also allow arrays
  - !14939 Fix  the performance monitor  relates to core for Hygon family 18h processor
  - perf/x86/amd/core: Fix performance monitor for Hygon family 18h processor
  - !15159  mm/thp: fix deferred split unqueue naming and locking
  - mm/thp: fix deferred split unqueue naming and locking
  - !15142 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.66-6.6.68 LTS Patches
  - dt-bindings: net: fec: add pps channel property
  - drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
  - net: fec: make PPS channel configurable
  - net: fec: refactor PPS channel configuration
  - io_uring/rw: avoid punting to io-wq directly
  - io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN
  - io_uring/rw: split io_read() into a helper
  - epoll: Add synchronous wakeup support for ep_poll_callback
  - ceph: fix memory leaks in __ceph_sync_read()
  - ceph: improve error handling and short/overflow-read logic in __ceph_sync_read()
  - ceph: validate snapdirname option length when mounting
  - of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
  - of: Fix error path in of_parse_phandle_with_args_map()
  - udmabuf: also check for F_SEAL_FUTURE_WRITE
  - nilfs2: fix buffer head leaks in calls to truncate_inode_pages()
  - of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
  - of/irq: Fix interrupt-map cell length check in of_irq_parse_imap_parent()
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget
  - io_uring: Fix registered ring file refcount leak
  - selftests/bpf: Use asm constraint "m" for LoongArch
  - selftests/memfd: run sysctl tests when PID namespace support is enabled
  - tracing: Add "%s" check in test_event_printk()
  - tracing: Add missing helper functions in event pointer dereference check
  - tracing: Fix test_event_printk() to process entire print argument
  - smb: client: fix TCP timers deadlock after rmmod
  - Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
  - btrfs: tree-checker: reject inline extent items with 0 ref count
  - vmalloc: fix accounting with i915
  - zram: fix uninitialized ZRAM not releasing backing device
  - zram: refuse to use zero sized block device as backing device
  - hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers
  - hwmon: (tmp513) Fix Current Register value interpretation
  - hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers
  - hwmon: (tmp513) Use SI constants from units.h
  - hwmon: (tmp513) Simplify with dev_err_probe()
  - hwmon: (tmp513) Don't use "proxy" headers
  - drm/amdgpu: don't access invalid sched
  - i915/guc: Accumulate active runtime on gt reset
  - i915/guc: Ensure busyness counter increases motonically
  - i915/guc: Reset engine utilization buffer before registration
  - drm/panel: novatek-nt35950: fix return value check in nt35950_probe()
  - thunderbolt: Improve redrive mode handling
  - USB: serial: option: add Telit FE910C04 rmnet compositions
  - USB: serial: option: add MediaTek T7XX compositions
  - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
  - USB: serial: option: add MeiG Smart SLM770A
  - USB: serial: option: add TCL IK512 MBIM & ECM
  - hexagon: Disable constant extender optimization for LLVM prior to 19.1.0
  - efivarfs: Fix error on non-existent file
  - i2c: riic: Always round-up when calculating bus period
  - chelsio/chtls: prevent potential integer overflow on 32bit
  - net: tun: fix tun_napi_alloc_frags()
  - KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init
  - EDAC/amd64: Simplify ECC check on unified memory controllers
  - mmc: mtk-sd: disable wakeup in .remove() and in the error path of .probe()
  - mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
  - net: mdiobus: fix an OF node reference leak
  - selftests: openvswitch: fix tcpdump execution
  - netfilter: ipset: Fix for recursive locking warning
  - ipvs: Fix clamp() of ip_vs_conn_tab on small memory systems
  - net: ethernet: bgmac-platform: fix an OF node reference leak
  - ksmbd: fix broken transfers when exceeding max simultaneous operations
  - ksmbd: count all requests in req_running counter
  - net: renesas: rswitch: rework ts tags management
  - ionic: use ee->offset when returning sprom data
  - netdevsim: prevent bad user input in nsim_dev_health_break_write()
  - net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic()
  - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
  - cxl/region: Fix region creation for greater than x2 switches
  - cxl/pci: Fix potential bogus return value upon successful probing
  - tools: hv: change permissions of NetworkManager configuration file
  - xfs: reset rootdir extent size hint after growfsrt
  - xfs: take m_growlock when running growfsrt
  - xfs: Fix the owner setting issue for rmap query in xfs fsmap
  - xfs: conditionally allow FS_XFLAG_REALTIME changes if S_DAX is set
  - xfs: attr forks require attr, not attr2
  - xfs: remove unused parameter in macro XFS_DQUOT_LOGRES
  - xfs: fix file_path handling in tracepoints
  - xfs: convert comma to semicolon
  - xfs: Fix xfs_prepare_shift() range for RT
  - xfs: Fix xfs_flush_unmap_range() range for RT
  - xfs: create a new helper to return a file's allocation unit
  - xfs: declare xfs_file.c symbols in xfs_file.h
  - xfs: use consistent uid/gid when grabbing dquots for inodes
  - xfs: verify buffer, inode, and dquot items every tx commit
  - xfs: fix the contact address for the sysfs ABI documentation
  - i2c: pnx: Fix timeout in wait functions
  - p2sb: Do not scan and remove the P2SB device when it is unhidden
  - p2sb: Move P2SB hide and unhide code to p2sb_scan_and_cache()
  - p2sb: Introduce the global flag p2sb_hidden_by_bios
  - p2sb: Factor out p2sb_read_from_cache()
  - platform/x86: p2sb: Make p2sb_get_devfn() return void
  - usb: cdns3: Add quirk flag to enable suspend residency
  - PCI/AER: Disable AER service on suspend
  - PCI: Use preserve_config in place of pci_flags
  - ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C
  - ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP
  - MIPS: Loongson64: DTS: Fix msi node for ls7a
  - usb: cdns3-ti: Add workaround for Errata i2409
  - PCI: Add ACS quirk for Broadcom BCM5760X NIC
  - PCI: vmd: Create domain symlink before pci_bus_add_devices()
  - usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled
  - net: sched: fix ordering of qlen adjustment
  - x86/static-call: fix 32-bit build
  - x86/xen: remove hypercall page
  - x86/xen: use new hypercall functions instead of hypercall page
  - x86/xen: add central hypercall functions
  - x86/static-call: provide a way to do very early static-call updates
  - objtool/x86: allow syscall instruction
  - x86: make get_cpu_vendor() accessible from Xen code
  - xen/netfront: fix crash when removing device
  - net: rswitch: Avoid use-after-free in rswitch_poll()
  - selftests/bpf: remove use of __xlated()
  - tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe()
  - kselftest/arm64: abi: fix SVCR detection
  - blk-iocost: Avoid using clamp() on inuse in __propagate_weights()
  - net: dsa: microchip: KSZ9896 register regmap alignment to 32 bit boundaries
  - net: renesas: rswitch: fix initial MPIC register setting
  - Bluetooth: SCO: Add support for 16 bits transparent voice setting
  - Bluetooth: iso: Fix recursive locking warning
  - ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired
  - team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
  - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
  - net/sched: netem: account for backlog updates from child qdisc
  - net: dsa: felix: fix stuck CPU-injected packets with short taprio windows
  - netfilter: nf_tables: do not defer rule destruction via call_rcu
  - net: renesas: rswitch: handle stop vs interrupt race
  - net: renesas: rswitch: fix leaked pointer on error path
  - net: renesas: rswitch: fix race window between tx start and complete
  - net: rswitch: Add jumbo frames handling for TX
  - net: rswitch: Add a setting ext descriptor function
  - net: rswitch: Add unmap_addrs instead of dma address in each desc
  - net: rswitch: Use build_skb() for RX
  - net: rswitch: Use unsigned int for desc related array index
  - net: rswitch: Drop unused argument/return value
  - Documentation: PM: Clarify pm_runtime_resume_and_get() return value
  - ASoC: amd: yc: Fix the wrong return value
  - ALSA: control: Avoid WARN() for symlink errors
  - qca_spi: Make driver probing reliable
  - qca_spi: Fix clock speed for multiple QCA7000
  - cxgb4: use port number to set mac addr
  - ACPI: resource: Fix memory resource type union access
  - net: sparx5: fix the maximum frame length register
  - net: sparx5: fix FDMA performance issue
  - spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user()
  - net: mscc: ocelot: perform error cleanup in ocelot_hwstamp_set()
  - net: mscc: ocelot: be resilient to loss of PTP packets during transmission
  - net: mscc: ocelot: ocelot->ts_id_lock and ocelot_port->tx_skbs.lock are IRQ-safe
  - net: mscc: ocelot: improve handling of TX timestamp for unknown skb
  - net: mscc: ocelot: fix memory leak on ocelot_port_add_txtstamp_skb()
  - net: lapb: increase LAPB_HEADER_LEN
  - ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()
  - selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted
  - selftests: mlxsw: sharedbuffer: Remove duplicate test cases
  - selftests: mlxsw: sharedbuffer: Remove h1 ingress test case
  - wifi: cfg80211: sme: init n_channels before channels[] access
  - tipc: fix NULL deref in cleanup_bearer()
  - batman-adv: Do not let TT changes list grows indefinitely
  - batman-adv: Remove uninitialized data in full table TT response
  - batman-adv: Do not send uninitialized TT changes
  - amdgpu/uvd: get ring reference from rq scheduler
  - wifi: mac80211: fix station NSS capability initialization order
  - wifi: mac80211: clean up 'ret' in sta_link_apply_parameters()
  - wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon
  - rtla/timerlat: Make timerlat_hist_cpu->*_count unsigned long long
  - bpf, sockmap: Fix update element with same
  - bpf, sockmap: Fix race between element replace and close()
  - xfs: only run precommits once per transaction object
  - xfs: fix scrub tracepoints when inode-rooted btrees are involved
  - xfs: return from xfs_symlink_verify early on V4 filesystems
  - xfs: don't drop errno values when we fail to ficlone the entire range
  - xfs: update btree keys correctly when _insrec splits an inode root block
  - drm/i915: Fix memory leak by correcting cache object name in error handler
  - usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode
  - usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer
  - usb: typec: anx7411: fix OF node reference leaks in anx7411_typec_switch_probe()
  - usb: typec: anx7411: fix fwnode_handle reference leak
  - usb: ehci-hcd: fix call balance of clocks handling routines
  - usb: gadget: midi2: Fix interpretation of is_midi1 bits
  - scsi: ufs: core: Update compl_time_stamp_local_clock after completing a cqe
  - usb: dwc2: Fix HCD port connection race
  - usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
  - usb: dwc2: Fix HCD resume
  - ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()
  - usb: host: max3421-hcd: Correctly abort a USB request.
  - riscv: Fix IPIs usage in kfence_protect_page()
  - ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5
  - riscv: Fix wrong usage of __pa() on a fixmap address
  - tcp: check space before adding MPTCP SYN options
  - splice: do not checksum AF_UNIX sockets
  - ksmbd: fix racy issue from session lookup and expire
  - !15144  hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
  - hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
  - !15143  scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
  - !15132  CVE-2024-56607 fix
  - wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()
  - wifi: mac80211: Add non-atomic station iterator
  - !15140  iio: adc: rockchip_saradc: fix information leak in triggered buffer
  - iio: adc: rockchip_saradc: fix information leak in triggered buffer


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-80.0.0.85
changelog:
  - !15278  tracing/osnoise: Fix resetting of tracepoints
  - tracing/osnoise: Fix resetting of tracepoints
  - !15227 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Conflicts Patches
  - mm: z3fold: deprecate CONFIG_Z3FOLD
  - null_blk: Remove usage of the deprecated ida_simple_xx() API
  - iomap: handle a post-direct I/O invalidate race in iomap_write_delalloc_release
  - proc: add config & param to block forcing mem writes
  - HID: Ignore battery for all ELAN I2C-HID devices
  - ata: sata_sil: Rename sil_blacklist to sil_quirks
  - ata: pata_serverworks: Do not use the term blacklist
  - scsi: aacraid: Rearrange order of struct aac_srb_unit
  - uprobes: Fix race in uprobe_free_utask
  - perf,x86: Fix kabi breakage in struct uprobe_task
  - perf,x86: avoid missing caller address in stack traces captured in uprobe
  - i2c: synquacer: Deal with optional PCLK correctly
  - i2c: synquacer: Remove a clk reference from struct synquacer_i2c
  - !15248 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.64-6.6.66 LTS Conflicts Patches
  - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
  - selftests/ftrace: adjust offset for kprobe syntax error test
  - bpf: Remove unnecessary kfree(im_node) in lpm_trie_update_elem
  - iommu/arm-smmu: Defer probe of clients after smmu device bound
  - gpio: grgpio: use a helper variable to store the address of ofdev->dev
  - KVM: arm64: Change kvm_handle_mmio_return() return polarity
  - !15270 v2  mm: Backport two patch
  - arm64/mm: Drop setting PTE_TYPE_PAGE in pte_mkcont()
  - arm64/mm: Re-organize arch_make_huge_pte()
  - mm/hugetlb: use arch_make_huge_pte() in __hugetlb_insert_pfn()
  - !14820 [OLK-6.6]Hygon: Support kernel boot verification and secret injection for Hygon CSV3 VM
  - KVM: SVM: CSV: Support inject secret to Hygon CSV3 guest
  - KVM: SVM: CSV: Support issue non-4K aligned CSV3_CMD_LAUNCH_ENCRYPT_DATA and more than once
  - KVM: SVM: CSV: Provide KVM_CSV3_SET_GUEST_PRIVATE_MEMORY ioctl interface
  - KVM: SVM: CSV: Provide KVM_CAP_HYGON_COCO_EXT interface
  - crypto: ccp: Provide csv_get_extension_info() to present extensions of newer CSV firmware
  - KVM: SVM: CSV: Ensure all the GPRs and some non-GPRs are synced before LAUNCH_ENCRYPT_VMCB
  - crypto: ccp: Get api version again when update Hygon CSV firmware at runtime
  - KVM: SVM: CSV: Fix the vm_size even if CSV3 feature is unsupported on Hygon CPUs
  - !14819 [OLK-6.6]Hygon: Support CSV3 Attestation
  - x86/configs: openeuler_defconfig: Set CONFIG_VIRT_DRIVERS=y and CONFIG_EFI_SECRET=m
  - virt/csv-guest: Provide interface for request of CSV3 attestation report
  - x86/csv: Add support for CSV3 ATTESTATION secure call
  - x86/csv: Define ATTESTATION secure call command
  - !15251 Intel: Backport upstream auto-tune per-CPU pageset size patchset
  - mm and cache_info: remove unnecessary CPU cache info update
  - !15185 hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
  - hwtracing: hisi_ptt: Check duplicate filters before allocation
  - hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-82.0.0.86
changelog:
  - !15440 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.70-6.6.72 LTS Patches
  - drm/mediatek: Only touch DISP_REG_OVL_PITCH_MSB if AFBC is supported
  - riscv: Fix text patching when IPI are used
  - mm: hugetlb: independent PMD page table shared count
  - mm/hugetlb: enforce that PMD PT sharing has split PMD PT locks
  - pgtable: fix s390 ptdesc field comments
  - workqueue: Add rcu lock check at the end of work item execution
  - pmdomain: imx: gpcv2: fix an OF node reference leak in imx_gpcv2_probe()
  - pmdomain: imx: gpcv2: Simplify with scoped for each OF child loop
  - arm64: dts: rockchip: add hevc power domain clock to rk3328
  - ARM: dts: imxrt1050: Fix clocks for mmc
  - io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
  - riscv: kprobes: Fix incorrect address calculation
  - iio: adc: ad7124: Disable all channels at probe time
  - iio: inkern: call iio_device_put() only on mapped devices
  - iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
  - iio: gyro: fxas21002c: Fix missing data update in trigger handler
  - iio: imu: kmx61: fix information leak in triggered buffer
  - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
  - iio: pressure: zpa2326: fix information leak in triggered buffer
  - usb: gadget: configfs: Ignore trailing LF for user strings to cdev
  - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
  - usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm()
  - usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints
  - usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in the error path of .probe()
  - usb: gadget: midi2: Reverse-select at the right place
  - usb: fix reference leak in usb_new_device()
  - USB: core: Disable LPM only for non-suspended ports
  - USB: usblp: return error when setting unsupported protocol
  - usb: dwc3-am62: Disable autosuspend during remove
  - usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null
  - tty: serial: 8250: Fix another runtime PM usage counter underflow
  - misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config
  - usb: dwc3: gadget: fix writing NYET threshold
  - USB: serial: cp210x: add Phoenix Contact UPS Device
  - usb-storage: Add max sectors quirk for Nokia 208
  - staging: iio: ad9832: Correct phase range check
  - staging: iio: ad9834: Correct phase range check
  - USB: serial: option: add Neoway N723-EA support
  - USB: serial: option: add MeiG Smart SRM815
  - dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2)
  - io_uring/timeout: fix multishot updates
  - drm/amd/display: increase MAX_SURFACES to the value supported by hw
  - drm/amdkfd: fixed page fault when enable MES shader debugger
  - ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]
  - ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]
  - smb: client: sync the root session and superblock context passwords before automounting
  - thermal: of: fix OF node leak in of_thermal_zone_find()
  - ksmbd: Implement new SMB3 POSIX type
  - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
  - sctp: sysctl: udp_port: avoid using current->nsproxy
  - sctp: sysctl: auth_enable: avoid using current->nsproxy
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
  - mptcp: sysctl: sched: avoid using current->nsproxy
  - dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY
  - scsi: ufs: qcom: Power off the PHY if it was already powered on in ufs_qcom_power_up_sequence()
  - dm thin: make get_first_thin use rcu-safe list first function
  - riscv: mm: Fix the out of bound issue of vmemmap address
  - cpuidle: riscv-sbi: fix device node release in early exit of for_each_possible_cpu
  - ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked
  - afs: Fix the maximum cell name length
  - drm/mediatek: Add return value check when reading DPCD
  - drm/mediatek: Fix mode valid issue for dp
  - drm/mediatek: Fix YCbCr422 color format issue for DP
  - drm/mediatek: stop selecting foreign drivers
  - net/mlx5: Fix variable not being completed when function returns
  - net: stmmac: dwmac-tegra: Read iommu stream id from device tree
  - netfilter: nf_tables: imbalance in flowtable binding
  - iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on
  - x86/mm/numa: Use NUMA_NO_NODE when calling memblock_set_node()
  - memblock tests: fix implicit declaration of function 'numa_valid_node'
  - riscv: Fix early ftrace nop patching
  - tcp: Annotate data-race around sk->sk_mark in tcp_v4_send_reset
  - Bluetooth: btnxpuart: Fix driver sending truncated data
  - Bluetooth: MGMT: Fix Add Device to responding before completing
  - Bluetooth: hci_sync: Fix not setting Random Address when required
  - eth: gve: use appropriate helper to set xdp_features
  - ipvlan: Fix use-after-free in ipvlan_get_iflink().
  - tls: Fix tls_sw_sendmsg error handling
  - igc: return early when failing to read EECD register
  - igc: field get conversion
  - ice: fix incorrect PHY settings for 100 GB/s
  - cxgb4: Avoid removal of uninserted tid
  - bnxt_en: Fix possible memory leak when hwrm_req_replace fails
  - pds_core: limit loop over fw name list
  - net: libwx: fix firmware mailbox abnormal return
  - tcp/dccp: allow a connection when sk_max_ack_backlog is zero
  - tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog
  - net: 802: LLC+SNAP OID:PID lookup on start of skb data
  - ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
  - selftests/alsa: Fix circular dependency involving global-timer
  - ASoC: mediatek: disable buffer pre-allocation
  - ASoC: rt722: add delay time to wait for the calibration procedure
  - erofs: fix PSI memstall accounting
  - erofs: handle overlapped pclusters out of crafted images properly
  - ovl: support encoding fid from inode with no alias
  - ovl: pass realinode to ovl_encode_real_fh() instead of realdentry
  - ovl: do not encode lower fh with upper sb_writers held
  - exfat: fix the infinite loop in __exfat_free_cluster()
  - dm array: fix cursor index when skipping across block boundaries
  - dm array: fix unreleased btree blocks on closing a faulty array cursor
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end
  - jbd2: flush filesystem device before updating tail sequence
  - jbd2: increase IO priority for writing revoke records
  - memblock: make memblock_set_node() also warn about use of MAX_NUMNODES
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation
  - Revert "x86, crash: wrap crash dumping code into crash related ifdefs"
  - Revert "x86/hyperv: Fix hv tsc page based sched_clock for hibernation"
  - !15423 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Additional Patches
  - !15423 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Additional Patches
  - RDMA/bnxt_re: Fix max SGEs for the Work Request
  - mptcp: don't always assume copied data in mptcp_cleanup_rbuf()
  - mptcp: fix recvbuffer adjust on sleeping rcvmsg
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()
  - mm/kmemleak: fix sleeping function called from invalid context at print message
  - mm/readahead: fix large folio support in async readahead
  - fs/proc/task_mmu: fix pagemap flags with PMD THP entries on 32bit
  - drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
  - dt-bindings: display: adi,adv7533: Drop single lane support
  - drm: adv7511: Drop dsi single lane support
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init()
  - sky2: Add device ID 11ab:4373 for Marvell 88E8075
  - RDMA/uverbs: Prevent integer overflow issue
  - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
  - kcov: mark in_softirq_really() as __always_inline
  - ALSA hda/realtek: Add quirk for Framework F111:000C
  - ALSA: seq: Check UMP support for midi_version change
  - modpost: fix the missed iteration for the max bit in do_input()
  - modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
  - RDMA/bnxt_re: Fix the max WQE size for static WQE support
  - ARC: build: Try to guess GCC variant of cross compiler
  - irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
  - Bluetooth: hci_core: Fix sleeping function called from invalid context
  - net: usb: qmi_wwan: add Telit FE910C04 compositions
  - smb: client: destroy cfid_put_wq on module exit
  - ksmbd: set ATTR_CTIME flags when setting mtime
  - ksmbd: retry iterate_dir in smb2_query_dir
  - bpf: fix potential error return
  - sound: usb: format: don't warn that raw DSD is unsupported
  - sound: usb: enable DSD output for ddHiFi TC44C
  - ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model
  - drm/amdkfd: Correct the migration DMA map direction
  - wifi: mac80211: wake the queues in case of failure in resume
  - net: ti: icssg-prueth: Fix clearing of IEP_CMP_CFG registers during iep_init
  - ila: serialize calls to nf_register_net_hooks()
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
  - af_packet: fix vlan_get_tci() vs MSG_PEEK
  - net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
  - net: restrict SO_REUSEPORT to inet sockets
  - net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets
  - net: sfc: Correct key_len for efx_tc_ct_zone_ht_params
  - RDMA/rtrs: Ensure 'ib_sge list' is accessible
  - net: mv643xx_eth: fix an OF node reference leak
  - eth: bcmsysport: fix call balance of priv->clk handling routines
  - ALSA: usb-audio: US16x08: Initialize array before use
  - net: llc: reset skb->transport_header
  - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
  - drm/i915/dg1: Fix power gate sequence.
  - net/mlx5e: macsec: Maintain TX SA from encoding_sa
  - net/mlx5: DR, select MSIX vector 0 for completion queue creation
  - netrom: check buffer length before accessing it
  - net: Fix netns for ip_tunnel_init_flow()
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit()
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit()
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev()
  - ip_tunnel: annotate data-races around t->parms.link
  - net: stmmac: restructure the error path of stmmac_probe_config_dt()
  - net: stmmac: don't create a MDIO bus if unnecessary
  - net: dsa: microchip: Fix LAN937X set_ageing_time function
  - net: dsa: microchip: Fix KSZ9477 set_ageing_time function
  - drm/bridge: adv7511_audio: Update Audio InfoFrame properly
  - RDMA/bnxt_re: Fix the locking while accessing the QP table
  - RDMA/bnxt_re: Fix MSN table size for variable wqe mode
  - RDMA/bnxt_re: Add send queue size check for variable wqe
  - RDMA/bnxt_re: Disable use of reserved wqes
  - RDMA/bnxt_re: Add support for Variable WQE in Genp7 adapters
  - RDMA/bnxt_re: Fix max_qp_wrs reported
  - RDMA/bnxt_re: Fix reporting hw_ver in query_device
  - RDMA/bnxt_re: Add check for path mtu in modify_qp
  - RDMA/bnxt_re: Fix the check for 9060 condition
  - nvme-pci: 512 byte aligned dma pool segment quirk
  - RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters
  - RDMA/bnxt_re: Avoid initializing the software queue for user queues
  - RDMA/mlx5: Enforce same type port association for multiport RoCE
  - RDMA/bnxt_re: Remove always true dattr validity check
  - RDMA/bnxt_re: Allow MSN table capability check
  - powerpc: Remove initialisation of readpos
  - net: mctp: handle skb cleanup on sock_queue failures
  - ceph: give up on paths longer than PATH_MAX
  - mmc: sdhci-msm: fix crypto key eviction
  - !15418  ocfs2: handle a symlink read error correctly
  - ocfs2: handle a symlink read error correctly
  - !15299  ptp: Ensure info->enable callback is always set
  - !15299  ptp: Ensure info->enable callback is always set
  - ptp: Ensure info->enable callback is always set
  - !15424  bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
  - !15424  bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
  - bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
  - !15367  libbpf: Fix segfault due to libelf functions not setting errno
  - !15367  libbpf: Fix segfault due to libelf functions not setting errno
  - libbpf: Fix segfault due to libelf functions not setting errno
  - !15417 [Intel-SIG] x86/cpu: Clearwater Forest support including CPU model and new ISAs
  - x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
  - x86/cpu: Add model number for Intel Clearwater Forest processor
  - !15225  cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0
  - !15225  cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0
  - cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0
  - !15390  backport mainline bugfix patch
  - !15390  backport mainline bugfix patch
  - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
  - genirq: Make handle_enforce_irqctx() unconditionally available
  - !15229  NFS: remove unused variable nfs_rpcstat
  - NFS: remove unused variable nfs_rpcstat
  - !14975 [OLK-6.6] [Backport] scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE
  - scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE
  - !15302 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Conflicts Patches
  - selftests: mptcp: join: test for prohibited MPC to port-based endp
  - !15292 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.56-6.6.57 LTS Conflicts Patches
  - HID: mcp2200: added driver for GPIOs of MCP2200
  - !15326 [OLK-6.6]Hygon: Rename Hygon SM{3,4} feature macro to X86_FEATURE_HYGON_SM{3,4}
  - !15326 [OLK-6.6]Hygon: Rename Hygon SM{3,4} feature macro to X86_FEATURE_HYGON_SM{3,4}
  - x86/cpufeatures: Rename X86_FEATURE_SM{3,4} to X86_FEATURE_HYGON_SM{3,4}
  - !15402  nilfs2: fix possible int overflows in nilfs_fiemap()
  - !15402  nilfs2: fix possible int overflows in nilfs_fiemap()
  - nilfs2: fix possible int overflows in nilfs_fiemap()
  - !15043  wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
  - wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
  - !15283  wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion
  - wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion
  - !15308  CVE-2025-21732
  - RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error
  - RDMA/mlx5: Ensure created mkeys always have a populated rb_key
  - RDMA/mlx5: Change check for cacheable mkeys
  - !15298  usbnet: ipheth: fix possible overflow in DPE length check
  - usbnet: ipheth: fix possible overflow in DPE length check
  - !15334  perf/core: Save raw sample data conditionally based on sample type
  - perf/core: Save raw sample data conditionally based on sample type
  - !15347  Mainline Patch
  - bpf: Use preempt_count() directly in bpf_send_signal_common()
  - bpf: Send signals asynchronously if !preemptible
  - !15331  Fixes CVE-2025-21767
  - clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context
  - clocksource: Use pr_info() for "Checking clocksource synchronization" message
  - !15221  smb: client: Fix netns refcount imbalance causing leaks and use-after-free
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free
  - !15364  LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
  - LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
  - !15345  USB: hub: Ignore non-compliant devices with too many configs or interfaces
  - USB: hub: Ignore non-compliant devices with too many configs or interfaces
  - !15363  gpiolib: Fix crash on error in gpiochip_get_ngpios()
  - gpiolib: Fix crash on error in gpiochip_get_ngpios()
  - !15385  orangefs: fix a oob in orangefs_debug_write
  - orangefs: fix a oob in orangefs_debug_write
  - !15265  NFSD: fix hang in nfsd4_shutdown_callback
  - NFSD: fix hang in nfsd4_shutdown_callback
  - !15263  NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
  - NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
  - !15266  nfsd: clear acl_access/acl_default after releasing them
  - nfsd: clear acl_access/acl_default after releasing them
  - !15346  block: mark GFP_NOIO around sysfs ->store()
  - block: mark GFP_NOIO around sysfs ->store()
  - !15309  usb: xhci: Fix NULL pointer dereference on certain command aborts
  - !15309  usb: xhci: Fix NULL pointer dereference on certain command aborts
  - usb: xhci: Fix NULL pointer dereference on certain command aborts
  - !15204 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Patches
  - !15204 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Patches
  - platform/x86: mlx-platform: call pci_dev_put() to balance the refcount
  - ALSA: ump: Shut up truncated string warning
  - usb: xhci: Avoid queuing redundant Stop Endpoint commands
  - cleanup: Remove address space of returned pointer
  - crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes
  - Bluetooth: btusb: mediatek: add callback function in btusb_disconnect
  - Bluetooth: btusb: add callback function in btusb suspend/resume
  - scsi: mpi3mr: Start controller indexing from 0
  - scsi: mpi3mr: Use ida to manage mrioc ID
  - ALSA: ump: Update legacy substream names upon FB info update
  - ALSA: ump: Indicate the inactive group in legacy substream names
  - ALSA: ump: Don't open legacy substream for an inactive group
  - ALSA: ump: Use guard() for locking
  - udf: Verify inode link counts before performing rename
  - udf_rename(): only access the child content on cross-directory rename
  - watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler
  - watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset
  - watchdog: rzg2l_wdt: Remove reset de-assert from probe
  - of: address: Preserve the flags portion on 1:1 dma-ranges mapping
  - of: address: Store number of bus flag cells rather than bool
  - of: address: Remove duplicated functions
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation
  - x86, crash: wrap crash dumping code into crash related ifdefs
  - thunderbolt: Don't display nvm_version unless upgrade supported
  - thunderbolt: Add support for Intel Panther Lake-M/P
  - thunderbolt: Add support for Intel Lunar Lake
  - xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
  - usb: xhci: Limit Stop Endpoint retries
  - xhci: retry Stop Endpoint on buggy NEC controllers
  - net: renesas: rswitch: fix possible early skb release
  - softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel
  - net/mlx5: unique names for per device caches
  - Revert "nvme: make keep-alive synchronous operation"
  - nvme: use helper nvme_ctrl_state in nvme_keep_alive_finish function
  - usb: typec: ucsi: add update_connector callback
  - usb: typec: ucsi: add callback for connector status updates
  - iio: adc: ad7192: properly check spi_get_device_match_data()
  - iio: adc: ad7192: Convert from of specific to fwnode property handling
  - usb: chipidea: udc: limit usb request length to max 16KB
  - usb: chipidea: add CI_HDRC_HAS_SHORT_PKT_LIMIT flag
  - usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag
  - fs/ntfs3: Fix warning in ni_fiemap
  - fs/ntfs3: Implement fallocate for compressed files
  - remoteproc: qcom: pas: enable SAR2130P audio DSP support
  - remoteproc: qcom: pas: Add support for SA8775p ADSP, CDSP and GPDSP
  - remoteproc: qcom: pas: Add sc7180 adsp
  - mailbox: pcc: Check before sending MCTP PCC response ACK
  - clk: qcom: clk-alpha-pll: Add NSS HUAYRA ALPHA PLL support for ipq9574
  - clk: qcom: clk-alpha-pll: Add support for zonda ole pll configure
  - Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925
  - Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925
  - Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925
  - Bluetooth: Add support ITTIM PE50-M75C
  - Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions
  - i2c: i801: Add support for Intel Panther Lake
  - i2c: i801: Add support for Intel Arrow Lake-H
  - wifi: ath10k: avoid NULL pointer error during sdio remove
  - wifi: ath10k: Update Qualcomm Innovation Center, Inc. copyrights
  - media: uvcvideo: Force UVC version to 1.0a for 0408:4033
  - media: uvcvideo: Force UVC version to 1.0a for 0408:4035
  - cleanup: Adjust scoped_guard() macros to avoid potential warning
  - cleanup: Add conditional guard support
  - crypto: ecdsa - Avoid signed integer overflow on signature decoding
  - crypto: ecdsa - Use ecc_digits_from_bytes to convert signature
  - crypto: ecdsa - Rename keylen to bufsize where necessary
  - crypto: ecdsa - Convert byte arrays with key coordinates to digits
  - ext4: partial zero eof block on unaligned inode size extension
  - ext4: convert to new timestamp accessors
  - memblock: allow zero threshold in validate_numa_converage()
  - NUMA: optimize detection of memory with no node id assigned by firmware
  - sched: Initialize idle tasks only once
  - usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic
  - smb: client: fix use-after-free of signing key
  - smb: client: stop flooding dmesg in smb2_calc_signature()
  - fs/smb/client: implement chmod() for SMB3 POSIX Extensions
  - smb/client: rename cifs_ace to smb_ace
  - smb/client: rename cifs_acl to smb_acl
  - smb/client: rename cifs_sid to smb_sid
  - smb/client: rename cifs_ntsd to smb_ntsd
  - x86/mm: Carve out INVLPG inline asm for use by others
  - docs: media: update location of the media patches
  - drm/amd/display: Fix incorrect DSC recompute trigger
  - drm/amd/display: Fix DSC-re-computing


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-82.0.0.87
changelog:
  - RISC-V kernel upgrade to 6.6.0-82.0.0
  - riscv: Fixed conflict created by commit c7c8e8a76904
  - riscv: Enable zstd-compressed firmware support
  - riscv: Enable AMDKFD driver for ROCm


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-83.0.0.88
changelog:
  - !15047 mm: Backport some mm patchs
  - mm/memmap: prevent double scanning of memmap by kmemleak
  - mm: kmemleak: fix upper boundary check for physical address objects
  - mm/vmscan: fix hard LOCKUP in function isolate_lru_folios
  - mm: compaction: use the proper flag to determine watermarks
  - !15271  LoongArch: fix cacheinfo/unaligned/rtc/s3/hda/usb issues
  - blutetooth/btusb: delay 1ms while suspending
  - LoongArch: Correct the cacheinfo sharing information
  - ice: fix unaligned access in ice_create_lag_recipe
  - LoongArch: set CONFIG_CMA_SIZE_MBYTES to 0
  - rtc: loongson: clear TOY_MATCH0_REG in loongson_rtc_isr()
  - hda/pci: Add AZX_DCAPS_NO_TCSEL flag for Loongson HDA devices
  - LoongArch: Update the flush cache policy
  - !15516 mm: shmem: remove unnecessary warning in shmem_writepage()
  - mm: shmem: remove unnecessary warning in shmem_writepage()
  - !15492  Add dp module in hibmc driver
  - drm/hisilicon/hibmc: add dp module in hibmc
  - drm/hisilicon/hibmc: refactored struct hibmc_drm_private
  - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver
  - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers
  - drm/hisilicon/hibmc: add dp aux in hibmc drivers
  - drm/hisilicon/hibmc: convert to struct drm_edid
  - !15395  clk: qcom: dispcc-sm6350: Add missing parent_map for a clock
  - clk: qcom: dispcc-sm6350: Add missing parent_map for a clock
  - !15459  perf: Configure BRBE correctly on VHE host
  - perf: Configure BRBE correctly on VHE host
  - !15369  media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
  - media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
  - !15421 [OLK-6.6] [Backport] upstream fix for driver nvme
  - nvme: handle connectivity loss in nvme_set_queue_count
  - nvme: fix bogus kzalloc() return check in nvme_init_effects_log()
  - nvme: Add error path for xa_store in nvme_init_effects
  - nvme: Add error check for xa_store in nvme_get_effects_log
  - !15370  wifi: brcmfmac: Check the return value of of_property_read_string_index()
  - wifi: brcmfmac: Check the return value of of_property_read_string_index()
  - !15483  CVE-2024-58069
  - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
  - !15470  some readahead improvement
  - readahead: properly shorten readahead when falling back to do_page_cache_ra()
  - readahead: don't shorten readahead window in read_pages()
  - readahead: make sure sync readahead reads needed page
  - !15404  ipmr: do not call mr_mfc_uses_dev() for unres entries
  - ipmr: do not call mr_mfc_uses_dev() for unres entries
  - !15376 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.62-6.6.63 LTS Conflicts Patches
  - mptcp: update local address flags when setting it
  - NFSD: Async COPY result needs to return a write verifier
  - !15164 [openEuler-24.03-LTS][linux-6.6.y sync] KVM: x86: Play nice with protected guests in complete_hypercall_exit()
  - KVM: x86: Play nice with protected guests in complete_hypercall_exit()
  - !15375 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Conflicts Patches
  - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone
  - !15149 Fix northbridge init warning in guest for Hygon family 18h model 4h
  - x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
  - !15147  Add device HID for Hygon GPIO controller
  - pinctrl: Add device HID for Hygon GPIO controller
  - !15438 fix HCT build err once VFIO disabled
  - hct: fix build err once VFIO disabled


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-84.0.0.89
changelog:
  - !15625 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.75-6.6.76 LTS Patches
  - HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
  - Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
  - selftests/landlock: Fix error message
  - LoongArch: Change 8 to 14 for LOONGARCH_MAX_{BRP,WRP}
  - s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
  - btrfs: output the reason for open_ctree() failure
  - media: imx-jpeg: Fix potential error pointer dereference in detach_pm()
  - staging: media: max96712: fix kernel oops when removing module
  - usb: gadget: f_tcm: Don't free command immediately
  - media: uvcvideo: Fix double free in error path
  - remoteproc: core: Fix ida_free call while not allocated
  - mptcp: handle fastopen disconnect correctly
  - mptcp: consolidate suboption status
  - usb: typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR PPS
  - usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE
  - usb: dwc3: core: Defer the probe until USB power supply ready
  - usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk()
  - usb: gadget: f_tcm: Fix Get/SetInterface return value
  - drivers/card_reader/rtsx_usb: Restore interrupt based detection
  - net: usb: rtl8150: enable basic endpoint checking
  - ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro
  - ktest.pl: Check kernelrelease return in get_version
  - selftests/rseq: Fix handling of glibc without rseq support
  - netfilter: nf_tables: reject mismatching sum of field_len with set key length
  - kbuild: switch from lz4c to lz4 for compression
  - Revert "SUNRPC: Reduce thread wake-up rate when receiving large RPC messages"
  - f2fs: Introduce linear search for dentries
  - hexagon: Fix unbalanced spinlock in die()
  - hexagon: fix using plain integer as NULL pointer warning in cmpxchg
  - kconfig: fix memory leak in sym_warn_unmet_dep()
  - kconfig: WERROR unmet symbol dependency
  - kconfig: deduplicate code in conf_read_simple()
  - kconfig: remove unused code for S_DEF_AUTO in conf_read_simple()
  - kconfig: require a space after '#' for valid input
  - kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST
  - cifs: Fix getting and setting SACLs over SMB1
  - cifs: Validate EAs for WSL reparse points
  - io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock()
  - ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback
  - RISC-V: Mark riscv_v_init() as __init
  - hostfs: fix the host directory parse when mounting.
  - hostfs: Add const qualifier to host_root in hostfs_fill_super()
  - hostfs: fix string handling in __dentry_name()
  - hostfs: convert hostfs to use the new mount API
  - genksyms: fix memory leak when the same symbol is read from *.symref file
  - genksyms: fix memory leak when the same symbol is added from source
  - net: hsr: fix fill_frame_info() regression vs VLAN packets
  - net: sh_eth: Fix missing rtnl lock in suspend/resume path
  - net: xdp: Disallow attaching device-bound programs in generic mode
  - tcp: correct handling of extreme memory squeeze
  - bgmac: reduce max frame size to support just MTU 1500
  - vsock: Allow retrying on connect() failure
  - Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming
  - perf trace: Fix runtime error of index out of bounds
  - net: stmmac: Limit FIFO size by hardware capability
  - net: stmmac: Limit the number of MTL queues to hardware capability
  - ptp: Properly handle compat ioctls
  - net: davicom: fix UAF in dm9000_drv_remove
  - vxlan: Fix uninit-value in vxlan_vnifilter_dump()
  - net: netdevsim: try to close UDP port harness races
  - net: rose: fix timer races against user threads
  - iavf: allow changing VLAN state without calling PF
  - PM: hibernate: Add error handling for syscore_suspend()
  - net: fec: implement TSO descriptor cleanup
  - gpio: mxc: remove dead code after switch to DT-only
  - regulator: core: Add missing newline character
  - ubifs: skip dumping tnc tree when zroot is null
  - xfrm: delete intermediate secpath entry in packet offload mode
  - dmaengine: ti: edma: fix OF node reference leaks in edma_driver
  - xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO
  - tools/bootconfig: Fix the wrong format specifier
  - NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE
  - NFSv4.2: fix COPY_NOTIFY xdr buf size calculation
  - serial: 8250: Adjust the timeout for FIFO mode
  - driver core: class: Fix wild pointer dereferences in API class_dev_iter_next()
  - module: Extend the preempt disabled section in dereference_symbol_descriptor().
  - nilfs2: protect access to buffers with no active references
  - nilfs2: convert nilfs_lookup_dirty_data_buffers to use folio_create_empty_buffers
  - buffer: make folio_create_empty_buffers() return a buffer_head
  - ocfs2: mark dquot as inactive if failed to start trans while releasing dquot
  - scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails
  - scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1
  - PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test
  - PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error
  - PCI: imx6: Skip controller_id generation logic for i.MX7D
  - PCI: imx6: Simplify clock handling by using clk_bulk*() function
  - media: dvb-usb-v2: af9035: fix ISO C90 compilation error on af9035_i2c_master_xfer
  - staging: media: imx: fix OF node leak in imx_media_add_of_subdevs()
  - watchdog: rti_wdt: Fix an OF node leak in rti_wdt_probe()
  - media: nxp: imx8-isi: fix v4l2-compliance test errors
  - mtd: hyperbus: hbmc-am654: fix an OF node reference leak
  - mtd: hyperbus: hbmc-am654: Convert to platform remove callback returning void
  - mtd: rawnand: brcmnand: fix status read of brcmnand_waitfunc
  - media: uvcvideo: Propagate buf->error to userspace
  - media: camif-core: Add check for clk_enable()
  - media: mipi-csis: Add check for clk_enable()
  - media: i2c: ov9282: Correct the exposure offset
  - media: i2c: imx412: Add missing newline to prints
  - media: i2c: imx290: Register 0x3011 varies between imx327 and imx290
  - media: marvell: Add check for clk_enable()
  - PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy()
  - media: lmedm04: Handle errors for lme2510_int_read
  - media: rc: iguanair: handle timeouts
  - spi: omap2-mcspi: Correctly handle devm_clk_get_optional() errors
  - RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"
  - efi: sysfb_efi: fix W=1 warnings when EFI is not set
  - of: reserved-memory: Do not make kmemleak ignore freed address
  - RDMA/mlx5: Fix indirect mkey ODP page count
  - i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition
  - i3c: dw: Add hot-join support.
  - arm64: tegra: Fix DMA ID for SPI2
  - fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device()
  - ARM: dts: mediatek: mt7623: fix IR nodename
  - arm64: dts: qcom: sm8250: Fix interrupt types of camss interrupts
  - arm64: dts: qcom: sdm845: Fix interrupt types of camss interrupts
  - arm64: dts: mediatek: add per-SoC compatibles for keypad nodes
  - dts: arm64: mediatek: mt8195: Remove MT8183 compatible for OVL
  - arm64: dts: qcom: sc8280xp: Fix up remoteproc register space sizes
  - arm64: dts: qcom: sm8150-microsoft-surface-duo: fix typos in da7280 properties
  - arm64: dts: qcom: sc7180: fix psci power domain node names
  - arm64: dts: qcom: sc7180: change labels to lower-case
  - arm64: dts: qcom: Add SM7125 device tree
  - arm64: dts: qcom: sc7180-trogdor-pompom: rename 5v-choke thermal zone
  - arm64: dts: qcom: sc7180-*: Remove thermal zone polling delays
  - arm64: dts: qcom: sc7180-trogdor-quackingstick: add missing avee-supply
  - arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: remove disabled ov7251 camera
  - arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: Convert mezzanine riser to dtso
  - ARM: omap1: Fix up the Retu IRQ on Nokia 770
  - RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error
  - arm64: dts: allwinner: a64: explicitly assign clock parent for TCON0
  - arm64: dts: ti: k3-am62a: Remove duplicate GICR reg
  - arm64: dts: ti: k3-am62: Remove duplicate GICR reg
  - ARM: dts: microchip: sama5d27_wlsom1_ek: Add no-1-8-v property to sdmmc0 node
  - ARM: dts: microchip: sama5d27_wlsom1_ek: Remove mmc-ddr-3_3v property from sdmmc0 node
  - arm64: dts: qcom: sm8450: correct sleep clock frequency
  - arm64: dts: qcom: sm8350: correct sleep clock frequency
  - arm64: dts: qcom: sm8250: correct sleep clock frequency
  - arm64: dts: qcom: sm6375: correct sleep clock frequency
  - arm64: dts: qcom: sm6125: correct sleep clock frequency
  - arm64: dts: qcom: sm4450: correct sleep clock frequency
  - arm64: dts: qcom: sdx75: correct sleep clock frequency
  - arm64: dts: qcom: sc7280: correct sleep clock frequency
  - arm64: dts: qcom: qrb4210-rb2: correct sleep clock frequency
  - arm64: dts: qcom: q[dr]u1000: correct sleep clock frequency
  - arm64: dts: qcom: qcs404: correct sleep clock frequency
  - arm64: dts: qcom: msm8994: correct sleep clock frequency
  - arm64: dts: qcom: msm8939: correct sleep clock frequency
  - arm64: dts: qcom: msm8916: correct sleep clock frequency
  - arm64: dts: qcom: sm7225-fairphone-fp4: Drop extra qcom,msm-id value
  - arm64: dts: qcom: msm8994: Describe USB interrupts
  - arm64: dts: qcom: msm8996: Fix up USB3 interrupts
  - arm64: dts: qcom: sa8775p: Update sleep_clk frequency
  - arm64: dts: qcom: move common parts for sa8775p-ride variants into a .dtsi
  - arm64: dts: qcom: sa8775p-ride: enable pmm8654au_0_pon_resin
  - arm64: dts: qcom: sa8775p-ride: Describe sgmii_phy1 irq
  - arm64: dts: qcom: sa8775p-ride: Describe sgmii_phy0 irq
  - arm64: dts: qcom: msm8996-xiaomi-gemini: Fix LP5562 LED1 reg property
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Drop pp3300_panel voltage settings
  - memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
  - ARM: dts: stm32: Swap USART3 and UART8 alias on STM32MP15xx DHCOM SoM
  - ARM: dts: stm32: Deduplicate serial aliases and chosen node for STM32MP15xx DHCOM SoM
  - arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie1
  - RDMA/srp: Fix error handling in srp_add_port
  - arm64: dts: mediatek: mt8183: willow: Support second source touchscreen
  - arm64: dts: mediatek: mt8183: kenzo: Support second source touchscreen
  - RDMA/rxe: Fix mismatched max_msg_sz
  - RDMA/rxe: Improve newline in printing messages
  - arm: dts: socfpga: use reset-name "stmmaceth-ocp" instead of "ahb"
  - ARM: dts: aspeed: yosemite4: correct the compatible string for max31790
  - ARM: dts: aspeed: yosemite4: Add required properties for IOE on fan boards
  - ARM: dts: aspeed: yosemite4: correct the compatible string of adm1272
  - arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names
  - arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names
  - arm64: dts: mediatek: mt8195-demo: Drop regulator-compatible property
  - arm64: dts: mediatek: mt8195-cherry: Drop regulator-compatible property
  - arm64: dts: mediatek: mt8192-asurada: Drop regulator-compatible property
  - arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property
  - arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property
  - rdma/cxgb4: Prevent potential integer overflow on 32bit
  - RDMA/mlx4: Avoid false error about access to uninitialized gids array
  - ARM: dts: stm32: Fix IPCC EXTI declaration on stm32mp151
  - arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A
  - arm64: dts: mediatek: mt8516: add i2c clock-div property
  - arm64: dts: mediatek: mt8516: fix wdt irq type
  - arm64: dts: mediatek: mt8516: fix GICv2 range
  - arm64: dts: mt8183: set DMIC one-wire mode on Damu
  - arm64: dts: mediatek: mt8186: Move wakeup to MTU3 to get working suspend
  - ARM: at91: pm: change BU Power Switch to automatic mode
  - soc: atmel: fix device_node release in atmel_soc_device_init()
  - cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM in readdir.c
  - smb: client: fix oops due to unset link speed
  - padata: avoid UAF for reorder_work
  - padata: add pd get/put refcnt helper
  - padata: fix UAF in padata_reorder
  - perf lock: Fix parse_lock_type which only retrieve one lock flag
  - ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop
  - bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write
  - pinctrl: amd: Take suspend type into consideration which pins are non-wake
  - pinctrl: stm32: Add check for clk_enable()
  - perf report: Fix misleading help message about --demangle
  - ASoC: Intel: avs: Fix theoretical infinite loop
  - ASoC: Intel: avs: Do not readq() u32 registers
  - ASoC: Intel: avs: Abstract IPC handling
  - ASoC: Intel: avs: Prefix SKL/APL-specific members
  - perf namespaces: Fixup the nsinfo__in_pidns() return type, its bool
  - perf namespaces: Introduce nsinfo__set_in_pidns()
  - perf machine: Don't ignore _etext when not a text symbol
  - perf top: Don't complain about lack of vmlinux when not resolving some kernel samples
  - padata: fix sysfs store callback check
  - ALSA: seq: Make dependency on UMP clearer
  - ALSA: seq: remove redundant 'tristate' for SND_SEQ_UMP_CLIENT
  - crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto()
  - ktest.pl: Remove unused declarations in run_bisect_test function
  - perf expr: Initialize is_test value in expr__ctx_new()
  - ASoC: renesas: rz-ssi: Use only the proper amount of dividers
  - perf bpf: Fix two memory leakages when calling perf_env__insert_bpf_prog_info()
  - perf header: Fix one memory leakage in process_bpf_prog_info()
  - perf header: Fix one memory leakage in process_bpf_btf()
  - crypto: caam - use JobR's space to access page 0 regs
  - selftests/bpf: Fix fill_link_info selftest on powerpc
  - ASoC: sun4i-spdif: Add clock multiplier settings
  - tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind
  - libbpf: don't adjust USDT semaphore address if .stapsdt.base addr is missing
  - net/rose: prevent integer overflows in rose_setsockopt()
  - tcp_cubic: fix incorrect HyStart round start detection
  - net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns()
  - netfilter: nft_flow_offload: update tcp state flags under lock
  - netfilter: nf_tables: fix set size with rbtree backend
  - netfilter: nft_set_rbtree: prefer sync gc to async worker
  - netfilter: nft_set_rbtree: rename gc deactivate+erase function
  - netfilter: nf_tables: de-constify set commit ops function argument
  - net: sched: Disallow replacing of child qdisc from one parent to another
  - net: avoid race between device unregistration and ethnl ops
  - octeon_ep: remove firmware stats fetch in ndo_get_stats64
  - net/mlxfw: Drop hard coded max FW flash image size
  - net: let net.core.dev_weight always be non-zero
  - pwm: stm32: Add check for clk_enable()
  - clk: analogbits: Fix incorrect calculation of vco rate delta
  - inet: ipmr: fix data-races
  - wifi: cfg80211: adjust allocation of colocated AP data
  - wifi: cfg80211: Handle specific BSSID in 6GHz scanning
  - selftests: harness: fix printing of mismatch values in __EXPECT()
  - selftests: timers: clocksource-switch: Adapt progress to kselftest framework
  - wifi: mt76: mt7996: fix ldpc setting
  - wifi: mt76: mt7996: fix incorrect indexing of MIB FW event
  - wifi: mt76: mt7996: fix HE Phy capability
  - wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU
  - wifi: mt76: mt7996: add max mpdu len capability
  - wifi: mt76: mt7996: fix register mapping
  - wifi: mt76: mt7915: fix register mapping
  - wifi: mt76: mt7915: fix omac index assignment after hardware reset
  - wifi: mt76: mt7915: improve hardware restart reliability
  - wifi: mt76: connac: move mt7615_mcu_del_wtbl_all to connac
  - wifi: mt76: mt7915: firmware restart on devices with a second pcie link
  - wifi: mt76: mt7996: fix rx filter setting for bfee functionality
  - wifi: mt76: mt7915: fix overflows seen when writing limit attributes
  - wifi: mt76: mt7921: fix using incorrect group cipher after disconnection.
  - wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO
  - landlock: Handle weird files
  - net/smc: fix data error when recvmsg with MSG_PEEK flag
  - clk: ralink: mtmips: remove duplicated 'xtal' clock for Ralink SoC RT3883
  - wifi: mac80211: don't flush non-uploaded STAs
  - wifi: mac80211: Fix common size calculation for ML element
  - wifi: mac80211: fix tid removal during mesh forwarding
  - wifi: mac80211: prohibit deactivating all links
  - wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC
  - wifi: wlcore: fix unbalanced pm_runtime calls
  - samples/landlock: Fix possible NULL dereference in parse_path()
  - mfd: syscon: Fix race in device_node_get_regmap()
  - mfd: syscon: Use scoped variables with memory allocators to simplify error paths
  - mfd: syscon: Add of_syscon_register_regmap() API
  - mfd: syscon: Remove extern from function prototypes
  - leds: cht-wcove: Use devm_led_classdev_register() to avoid memory leak
  - HID: fix generic desktop D-Pad controls
  - HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check
  - clk: qcom: gcc-sdm845: Do not use shared clk_ops for QUPs
  - wifi: ath12k: fix tx power, max reg power update to firmware
  - ipmi: ssif_bmc: Fix new request loss when bmc ready for a response
  - OPP: OF: Fix an OF node leak in _opp_add_static_v2()
  - ax25: rcu protect dev->ax25_ptr
  - regulator: of: Implement the unwind path of of_regulator_match()
  - clk: sunxi-ng: a64: stop force-selecting PLL-MIPI as TCON0 parent
  - clk: sunxi-ng: a64: drop redundant CLK_PLL_VIDEO0_2X and CLK_PLL_MIPI
  - dt-bindings: clock: sunxi: Export PLL_VIDEO_2X and PLL_MIPI
  - team: prevent adding a device which is already a team device lower
  - clk: imx8mp: Fix clkout1/2 support
  - cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq* clocks
  - cpufreq: qcom: Fix qcom_cpufreq_hw_recalc_rate() to query LUT if LMh IRQ is not available
  - gpio: pca953x: log an error when failing to get the reset GPIO
  - gpio: pca953x: Fully convert to device managed resources
  - gpio: pca953x: Drop unused fields in struct pca953x_platform_data
  - cpufreq: schedutil: Fix superfluous updates caused by need_freq_update
  - pwm: stm32-lp: Add check for clk_enable()
  - inetpeer: do not get a refcount in inet_getpeer()
  - inetpeer: update inetpeer timestamp in inet_getpeer()
  - inetpeer: remove create argument of inet_getpeer()
  - inetpeer: remove create argument of inet_getpeer_v[46]()
  - leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata()
  - dt-bindings: mfd: bd71815: Fix rsense and typos
  - cpupower: fix TSC MHz calculation
  - ACPI: fan: cleanup resources in the error path of .probe()
  - wifi: brcmfmac: add missing header include for brcmf_dbg
  - regulator: dt-bindings: mt6315: Drop regulator-compatible property
  - HID: multitouch: fix support for Goodix PID 0x01e9
  - wifi: rtlwifi: pci: wait for firmware loading before releasing memory
  - wifi: rtlwifi: fix memory leaks and invalid access at probe error path
  - wifi: rtlwifi: destroy workqueue at rtl_deinit_core
  - wifi: rtlwifi: remove unused check_buddy_priv
  - dt-bindings: leds: class-multicolor: Fix path to color definitions
  - clk: fix an OF node reference leak in of_clk_get_parent_name()
  - of: remove internal arguments from of_property_for_each_u32()
  - clk: si5351: allow PLLs to be adjusted without reset
  - serial: sc16is7xx: use device_property APIs when configuring irda mode
  - dt-bindings: mmc: controller: clarify the address-cells description
  - rxrpc: Fix handling of received connection abort
  - spi: zynq-qspi: Add check for clk_enable()
  - net_sched: sch_sfq: don't allow 1 packet limit
  - net_sched: sch_sfq: handle bigger packets
  - net_sched: sch_sfq: annotate data-races around q->perturb_period
  - wifi: rtlwifi: usb: fix workqueue leak when probe fails
  - wifi: rtlwifi: fix init_sw_vars leak when probe fails
  - wifi: rtlwifi: wait for firmware loading before releasing memory
  - wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step
  - wifi: rtlwifi: do not complete firmware loading needlessly
  - wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855
  - ipmi: ipmb: Add check devm_kasprintf() returned value
  - drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini()
  - drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE
  - drm/msm: Check return value of of_dma_configure()
  - drm/msm/dpu: link DSPP_2/_3 blocks on SM8550
  - drm/msm/dpu: link DSPP_2/_3 blocks on SM8350
  - drm/msm/dpu: link DSPP_2/_3 blocks on SM8250
  - drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X
  - drm/msm/dpu: link DSPP_2/_3 blocks on SM8150
  - OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
  - drm/amdgpu/vcn: reset fw_shared under SRIOV
  - drm/rockchip: vop2: include rockchip_drm_drv.h
  - drm/rockchip: move output interface related definition to rockchip_drm_drv.h
  - drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8
  - drm/rockchip: vop2: Fix the windows switch between different layers
  - drm/rockchip: vop2: set bg dly and prescan dly at vop2_post_config
  - drm/rockchip: vop2: Set YUV/RGB overlay mode
  - drm/rockchip: vop2: Fix the mixer alpha setup for layer 0
  - drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset
  - drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
  - drm/amd/pm: Fix an error handling path in vega10_enable_se_edc_force_stall_config()
  - HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
  - drm/etnaviv: Fix page property being used for non writecombine buffers
  - drm/msm/dp: set safe_to_exit_level before printing it
  - x86/topology: Use x86_sched_itmt_flags for PKG domain unconditionally
  - x86/cpu: Enable SD_ASYM_PACKING for PKG domain on AMD
  - sched/topology: Rename 'DIE' domain to 'PKG'
  - afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call
  - select: Fix unbalanced user_access_end()
  - partitions: ldm: remove the initial kernel-doc notation
  - selftests/powerpc: Fix argument order to timer_sub()
  - pstore/blk: trivial typo fixes
  - block: retry call probe after request_module in blk_request_module
  - fs: fix proc_handler for sysctl_nr_open
  - afs: Fix cleanup of immediately failed async calls
  - afs: Fix directory format encoding struct
  - afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY
  - dlm: fix srcu_read_lock() return type to int
  - powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active
  - !15477  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
  - PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
  - !15472  PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()
  - PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()
  - !15473  iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
  - iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
  - !15474  OPP: add index check to assert to avoid buffer overflow in _read_freq()
  - OPP: add index check to assert to avoid buffer overflow in _read_freq()
  - !15475  wifi: wcn36xx: fix channel survey memory allocation size
  - wifi: wcn36xx: fix channel survey memory allocation size
  - !15476  LoongArch: Fix warnings during S3 suspend
  - LoongArch: Fix warnings during S3 suspend
  - !15464 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.72-6.6.75 LTS Patches
  - drm/v3d: Assign job pointer to NULL before signaling the fence
  - Input: xpad - add support for wooting two he (arm)
  - Input: xpad - add support for Nacon Evol-X Xbox One Controller
  - Input: xpad - improve name of 8BitDo controller 2dc8:3106
  - Input: xpad - add QH Electronics VID/PID
  - Input: xpad - add unofficial Xbox 360 wireless receiver clone
  - Input: atkbd - map F23 key to support default copilot shortcut
  - Input: xpad - add support for Nacon Pro Compact
  - ALSA: usb-audio: Add delay quirk for USB Audio Device
  - Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null"
  - scsi: storvsc: Ratelimit warning logs to prevent VM denial of service
  - vfio/platform: check the bounds of read/write syscalls
  - cachestat: fix page cache statistics permission checking
  - Revert "HID: multitouch: Add support for lenovo Y9000P Touchpad"
  - net: sched: fix ets qdisc OOB Indexing
  - smb: client: handle lack of EA support in smb2_query_path_info()
  - libfs: Add simple_offset_rename() API
  - ASoC: samsung: Add missing depends on I2C
  - hwmon: (drivetemp) Set scsi command timeout to 10s
  - irqchip/sunxi-nmi: Add missing SKIP_WAKE flag
  - of/unittest: Add test that of_address_to_resource() fails on non-translatable address
  - drm/amd/display: Use HW lock mgr for PSR1
  - scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request
  - seccomp: Stub for !CONFIG_SECCOMP
  - ASoC: samsung: Add missing selects for MFD_WM8994
  - ASoC: wm8994: Add depends on MFD core
  - x86/xen: fix SLS mitigation in xen_hypercall_iret()
  - nfsd: add list_head nf_gc to struct nfsd_file
  - Revert "drm/amdgpu: rework resume handling for display (v2)"
  - fs: relax assertions on failure to encode file handles
  - ovl: support encoding fid from inode with no alias
  - ovl: pass realinode to ovl_encode_real_fh() instead of realdentry
  - ocfs2: fix deadlock in ocfs2_get_system_file_inode
  - iio: imu: inv_icm42600: fix spi burst write not supported
  - Revert "PCI: Use preserve_config in place of pci_flags"
  - drm/amdgpu: always sync the GFX pipe on ctx switch
  - drm/i915/fb: Relax clear color alignment to 64 bytes
  - hrtimers: Handle CPU state correctly on hotplug
  - irqchip: Plug a OF node reference leak in platform_irqchip_probe()
  - filemap: avoid truncating 64-bit offset to 32 bits
  - nouveau/fence: handle cross device fences properly
  - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
  - vsock: reset socket state when de-assigning the transport
  - vsock/virtio: cancel close work in the destructor
  - vsock/virtio: discard packets if the transport changes
  - net: ethernet: xgbe: re-add aneg to supported features in PHY quirks
  - selftests: mptcp: avoid spurious errors on disconnect
  - mptcp: fix spurious wake-up on under memory pressure
  - mptcp: be sure to send ack when mptcp-level window re-opens
  - i2c: atr: Fix client detach
  - zram: fix potential UAF of zram table
  - ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA
  - x86/asm: Make serialize() always_inline
  - nvmet: propagate npwg topology
  - RDMA/bnxt_re: Fix to export port num to ib_query_qp
  - poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll()
  - ACPI: resource: acpi_dev_irq_override(): Check DMI match last
  - smb: client: fix double free of TCP_Server_Info::hostname
  - i2c: rcar: fix NACK handling when being a target
  - i2c: mux: demux-pinctrl: check initial mux selection, too
  - Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data"
  - hwmon: (tmp513) Fix division of negative numbers
  - soc: ti: pruss: Fix pruss APIs
  - drm/v3d: Ensure job pointer is set to NULL after job completion
  - drm/vmwgfx: Add new keep_resv BO param
  - net/mlx5e: Always start IPsec sequence number from 1
  - net/mlx5e: Rely on reqid in IPsec tunnel mode
  - net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel
  - net/mlx5: Clear port select structure when fail to create
  - net/mlx5: Fix RDMA TX steering prio
  - net: fec: handle page_pool_dev_alloc_pages error
  - net: xilinx: axienet: Fix IRQ coalescing packet count overflow
  - nfp: bpf: prevent integer overflow in nfp_bpf_event_output()
  - pktgen: Avoid out-of-bounds access in get_imix_entries
  - openvswitch: fix lockup on tx to unregistering netdev with carrier
  - bpf: Fix bpf_sk_select_reuseport() memory leak
  - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()
  - Revert "ovl: do not encode lower fh with upper sb_writers held"
  - Revert "ovl: pass realinode to ovl_encode_real_fh() instead of realdentry"
  - Revert "ovl: support encoding fid from inode with no alias"
  - !15608  perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list
  - perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list
  - !15360  USB: hub: Ignore non-compliant devices with too many configs or interfaces
  - USB: hub: Ignore non-compliant devices with too many configs or interfaces
  - !15597  CVE-2025-21853
  - bpf: avoid holding freeze_mutex during mmap operation
  - bpf: unify VM_WRITE vs VM_MAYWRITE use in BPF map mmaping logic
  - !15603  Mainline patch merged into OLK-6.6
  - RDMA/hns: Fix missing xa_destroy()
  - RDMA/hns: Fix wrong value of max_sge_rd
  - RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
  - RDMA/hns: Fix invalid sq params not being blocked
  - RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
  - RDMA/hns: Fix soft lockup during bt pages loop
  - !15430  cpufreq: Fix some boost errors related to CPU online and offline
  - cpufreq: prevent NULL dereference in cpufreq_online()
  - cpufreq: ACPI: Remove set_boost in acpi_cpufreq_cpu_init()
  - cpufreq: CPPC: Fix wrong max_freq in policy initialization
  - cpufreq: Introduce a more generic way to set default per-policy boost flag
  - cpufreq: Fix re-boost issue after hotplugging a CPU
  - !15568 [olk 6.6] some features for hibmcge driver
  - net: hibmcge: Add support for ioctl
  - net: hibmcge: Add support for BMC diagnose feature
  - net: hibmcge: Add support for mac link exception handling feature
  - net: hibmcge: Add support for abnormal irq handling feature
  - net: hibmcge: Add support for checksum offload
  - net: hibmcge: Add support for dump statistics
  - ethtool: Implement ethtool_puts()
  - !15357  blk-cgroup: Fix class @block_class's subsystem refcount leakage
  - blk-cgroup: Fix class @block_class's subsystem refcount leakage
  - !15333 VirtCCA Feature: cvm support UEFI boot
  - Bug fix: Resolve the issue of host hard lockup
  - VirtCCA: The cvm removes the vcpu binding limit.
  - VirtCCA: Improve nfs workqueue bind method
  - VirtCCA: Intercept the situation where devices with both NVM adn CVM passthrough under same PCIe root port
  - VirtCCA: an interface to retrieve the TMI version is added
  - VirtCCA: cvm support UEFI boot
  - !15414 bnxt_en: Fix possible memory leak when hwrm_req_replace fails
  - bnxt_en: Fix possible memory leak when hwrm_req_replace fails
  - !15580  two bugfixs
  - mm/migrate: fix shmem xarray update during migration
  - mm: fix finish_fault() handling for large folios


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-85.0.0.90
changelog:
  - !15705  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - !15704  perf/core: Add RCU read lock protection to perf_iterate_ctx()
  - perf/core: Add RCU read lock protection to perf_iterate_ctx()
  - !15672  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
  - !15621  misc: fastrpc: Fix copy buffer page size
  - misc: fastrpc: Fix copy buffer page size
  - !15620  s390/ism: add release function for struct device
  - s390/ism: add release function for struct device
  - !15622  Fix UAF in acct(2)
  - acct: block access to kernel internal filesystems
  - acct: perform last write from workqueue
  - !15488  CVE-2025-21816
  - hrtimer: Fix kabi broken of struct hrtimer_cpu_base
  - hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
  - !15706 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.78-6.6.79 LTS Patches
  - kbuild: hdrcheck: fix cross build with clang
  - HID: hid-steam: Fix use-after-free when detaching device
  - Revert "vfio/platform: check the bounds of read/write syscalls"
  - x86/i8253: Disable PIT timer 0 when not in use
  - vsock: Orphan socket after transport release
  - vsock: Keep the binding until socket destruction
  - io_uring/kbuf: reallocate buf lists on upgrade
  - HID: hid-steam: Don't use cancel_delayed_work_sync in IRQ context
  - alpha: replace hardcoded stack offsets with autogenerated ones
  - mm: gup: fix infinite loop within __get_longterm_locked
  - arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented
  - md/md-bitmap: move bitmap_{start, end}write to md upper layer
  - md: add a new callback pers->bitmap_sector()
  - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite()
  - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write()
  - selftests: rtnetlink: update netdevsim ipsec output format
  - netdevsim: print human readable IP address
  - x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0
  - drm/v3d: Stop active perfmon if it is being destroyed
  - drm/rcar-du: dsi: Fix PHY lock bit check
  - drm/tidss: Clear the interrupt status for interrupts being disabled
  - drm/tidss: Fix issue in irq handling causing irq-flood issue
  - ipv6: mcast: add RCU protection to mld_newpack()
  - ipv6: mcast: extend RCU protection in igmp6_send()
  - ndisc: extend RCU protection in ndisc_send_skb()
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
  - arp: use RCU protection in arp_xmit()
  - neighbour: use RCU protection in __neigh_notify()
  - neighbour: delete redundant judgment statements
  - ndisc: use RCU protection in ndisc_alloc_skb()
  - HID: hid-steam: Move hidraw input (un)registering to work
  - HID: hid-steam: Make sure rumble work is canceled on removal
  - HID: hid-steam: Add Deck IMU support
  - HID: hid-steam: Fix cleanup in probe()
  - HID: hid-steam: remove pointless error message
  - HID: hid-steam: Add gamepad-only mode switched to by holding options
  - HID: hid-steam: Update list of identifiers from SDL
  - HID: hid-steam: Clean up locking
  - HID: hid-steam: Disable watchdog instead of using a heartbeat
  - HID: hid-steam: Avoid overwriting smoothing parameter
  - ipv6: icmp: convert to dev_net_rcu()
  - ipv6: use RCU protection in ip6_default_advmss()
  - flow_dissector: use RCU protection to fetch dev_net()
  - ipv4: icmp: convert to dev_net_rcu()
  - ipv4: use RCU protection in __ip_rt_update_pmtu()
  - net: ipv4: Cache pmtu for all packet paths if multipath enabled
  - ipv4: use RCU protection in inet_select_addr()
  - ipv4: use RCU protection in rt_is_expired()
  - ipv4: use RCU protection in ipv4_default_advmss()
  - net: add dev_net_rcu() helper
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
  - ipv4: add RCU protection to ip4_dst_hoplimit()
  - btrfs: fix hole expansion when writing at an offset beyond EOF
  - mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw()
  - igc: Set buffer type for empty frames in igc_init_empty_frame
  - mmc: mtk-sd: Fix register settings for hs400(es) mode
  - arm64: Handle .ARM.attributes section in linker scripts
  - regmap-irq: Add missing kfree()
  - regulator: qcom_smd: Add l2, l5 sub-node to mp5496 regulator
  - partitions: mac: fix handling of bogus partition table
  - gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock
  - gpiolib: acpi: Add a quirk for Acer Nitro ANV14
  - alpha: align stack for page fault and user unaligned trap handlers
  - serial: 8250: Fix fifo underflow on flush
  - efi: Avoid cold plugged memory for placing the kernel
  - kbuild: userprogs: fix bitsize and target detection on clang
  - wifi: ath12k: fix handling of 6 GHz rules
  - alpha: make stack 16-byte aligned (most cases)
  - can: etas_es58x: fix potential NULL pointer dereference on udev->serial
  - can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero
  - can: c_can: fix unbalanced runtime PM disable in error path
  - can: ctucanfd: handle skb allocation failure
  - USB: serial: option: drop MeiG Smart defines
  - USB: serial: option: fix Telit Cinterion FN990A name
  - USB: serial: option: add Telit Cinterion FN990B compositions
  - USB: serial: option: add MeiG Smart SLM828
  - usb: cdc-acm: Fix handling of oversized fragments
  - USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk
  - usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
  - USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone
  - USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist
  - usb: core: fix pipe creation for get_bMaxPacketSize0
  - USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI
  - usb: dwc2: gadget: remove of_node reference upon udc_stop
  - usb: gadget: udc: renesas_usb3: Fix compiler warning
  - usb: roles: set switch registered flag early on
  - usb: dwc3: Fix timeout issue during controller enter/exit from halt state
  - usb: gadget: f_midi: Fixing wMaxPacketSize exceeded issue during MIDI bind retries
  - perf/x86/intel: Ensure LBRs are disabled when a CPU is starting
  - KVM: nSVM: Enter guest mode before initializing nested NPT MMU
  - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
  - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
  - batman-adv: Drop unmanaged ELP metric worker
  - batman-adv: Ignore neighbor throughput metrics in error case
  - batman-adv: fix panic during interface removal
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V
  - ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V
  - selftests: gpio: gpio-sim: Fix missing chip disablements
  - Grab mm lock before grabbing pt lock
  - vfio/pci: Enable iowrite64 and ioread64 for vfio pci
  - rtla/timerlat_top: Abort event processing on second signal
  - rtla/timerlat_hist: Abort event processing on second signal
  - scsi: ufs: bsg: Set bsg_queue to NULL after removal
  - PCI: switchtec: Add Microchip PCI100X device IDs
  - PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P
  - media: uvcvideo: Add Kurokesu C1 PRO camera
  - media: uvcvideo: Add new quirk definition for the Sonix Technology Co. 292a camera
  - media: uvcvideo: Implement dual stream quirk to fix loss of usb packets
  - media: i2c: ds90ub953: Add error handling for i2c reads/writes
  - media: i2c: ds90ub913: Add error handling to ub913_hw_init()
  - media: cxd2841er: fix 64-bit division on gcc-9
  - soc/tegra: fuse: Update Tegra234 nvmem keepout list
  - fbdev: omap: use threaded IRQ for LCD DMA
  - RDMA/efa: Reset device on probe failure
  - tools: fix annoying "mkdir -p ..." logs when building tools in parallel
  - x86/xen: allow larger contiguous memory regions in PV guests
  - xen/swiotlb: relax alignment requirements
  - drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - gpio: bcm-kona: Add missing newline to dev_err format string
  - gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ
  - gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0
  - drm/i915/selftests: avoid using uninitialized context
  - cgroup: Remove steal time from usage_usec
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
  - team: better TEAM_OPTION_TYPE_STRING validation
  - LoongArch: Fix idle VS timer enqueue
  - vxlan: check vxlan_vnigroup_init() return value
  - vrf: use RCU protection in l3mdev_l3_out()
  - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu()
  - ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
  - spi: sn-f-ospi: Fix division by zero
  - HID: multitouch: Add NULL check in mt_input_configured
  - pinctrl: cy8c95x0: Respect IRQ trigger settings from firmware
  - !14287 [OLK-6.6] SCSI: Support Linkdata HBA/RAID Controllers
  - SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
  - !15686 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.76-6.6.78 LTS Patches
  - char: misc: deallocate static minor in error path
  - ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA
  - ALSA: hda/realtek: Fix wrong mic setup for ASUS VivoBook 15
  - ALSA: hda/realtek: Add quirks for ASUS ROG 2023 models
  - ALSA: hda/realtek: Fix microphone regression on ASUS N705UD
  - Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
  - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads
  - Revert "rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads"
  - Revert "rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads"
  - Revert "KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map()"
  - Revert "KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock"
  - Revert "KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults"
  - Revert "KVM: e500: always restore irqs"
  - KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC)
  - KVM: x86: Make x2APIC ID 100% readonly
  - tty: xilinx_uartps: split sysrq handling
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
  - mptcp: prevent excessive coalescing on receive
  - btrfs: avoid monopolizing a core when activating a swap file
  - Revert "btrfs: avoid monopolizing a core when activating a swap file"
  - ocfs2: check dir i_size in ocfs2_find_entry
  - net/ncsi: use dev_set_mac_address() for Get MC MAC Address handling
  - spi: atmel-qspi: Memory barriers after memory-mapped I/O
  - spi: atmel-quadspi: Create `atmel_qspi_ops` to support newer SoC families
  - MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static
  - rtc: zynqmp: Fix optional clock name property
  - pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional() fails
  - rtla/timerlat_top: Stop timerlat tracer on signal
  - rtla/timerlat_hist: Stop timerlat tracer on signal
  - rtla: Add trace_instance_stop
  - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/osnoise: Distinguish missing workload option
  - scripts/gdb: fix aarch64 userspace detection in get_current_task
  - maple_tree: simplify split calculation
  - net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset
  - net/ncsi: wait for the last response to Deselect Package before configuring channel
  - misc: fastrpc: Fix copy buffer page size
  - misc: fastrpc: Fix registered buffer page address
  - misc: fastrpc: Deregister device nodes properly in error scenarios
  - misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors
  - mtd: onenand: Fix uninitialized retlen in do_otp_read()
  - irqchip/apple-aic: Only handle PMC interrupt as FIQ when configured so
  - i3c: master: Fix missing 'ret' assignment in set_speed()
  - NFC: nci: Add bounds checking in nci_hci_create_pipe()
  - mailbox: tegra-hsp: Clear mailbox before using message
  - ocfs2: fix incorrect CPU endianness conversion causing mount failure
  - pnfs/flexfiles: retry getting layout segment for reads
  - selftests: mptcp: connect: -f: no reconnect
  - vfio/platform: check the bounds of read/write syscalls
  - io_uring/rw: commit provided buffer state on async
  - io_uring: fix io_req_prep_async with provided buffers
  - io_uring/net: don't retry connect operation on EPOLLERR
  - io_uring: fix multishots with selected buffers
  - nvmem: imx-ocotp-ele: set word length to 1
  - nvmem: imx-ocotp-ele: fix reading from non zero offset
  - nvmem: imx-ocotp-ele: simplify read beyond device check
  - nvmem: core: improve range check for nvmem_cell_write()
  - nvmem: qcom-spmi-sdam: Set size in struct nvmem_config
  - crypto: qce - unregister previously registered algos in error path
  - crypto: qce - fix goto jump in error path
  - media: uvcvideo: Remove redundant NULL assignment
  - media: uvcvideo: Support partial control reads
  - media: uvcvideo: Fix event flags in uvc_ctrl_send_events
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - media: i2c: ds90ub960: Fix logging SP & EQ status only for UB9702
  - media: i2c: ds90ub960: Fix UB9702 VC map
  - media: i2c: ds90ub960: Fix use of non-existing registers on UB9702
  - media: i2c: ds90ub9x3: Fix extra fwnode_handle_put()
  - media: ccs: Fix cleanup order in ccs_probe()
  - media: ccs: Fix CCS static data parsing for large block sizes
  - media: ov5640: fix get_light_freq on auto
  - media: imx296: Add standby delay during probe
  - media: mc: fix endpoint iteration
  - media: mmp: Bring back registration of the device
  - soc: qcom: smem_state: fix missing of_node_put in error path
  - soc: mediatek: mtk-devapc: Fix leaking IO map on error paths
  - iio: light: as73211: fix channel handling in only-color triggered buffer
  - media: ccs: Clean up parsed CCS static data on parse failure
  - kfence: skip __GFP_THISNODE allocations on NUMA systems
  - rv: Reset per-task monitors also for idle tasks
  - tpm: Change to kvalloc() in eventlog/acpi.c
  - ACPI: PRM: Remove unnecessary strict handler address checks
  - xfs: Add error handling for xfs_reflink_cancel_cow_range
  - xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end
  - pwm: microchip-core: fix incorrect comparison with max period
  - arm64: tegra: Disable Tegra234 sce-fabric node
  - arm64: tegra: Fix typo in Tegra234 dce-fabric compatible
  - crypto: qce - fix priority to be less than ARMv8 CE
  - arm64: dts: qcom: sm8550: correct MDSS interconnects
  - arm64: dts: qcom: sm8550: Fix MPSS memory length
  - arm64: dts: qcom: sm8550: Fix CDSP memory length
  - arm64: dts: qcom: sm8450: Fix MPSS memory length
  - arm64: dts: qcom: sm8450: Fix CDSP memory length
  - arm64: dts: qcom: sm8350: Fix MPSS memory length
  - arm64: dts: qcom: sm8350: Fix CDSP memory base and length
  - arm64: dts: qcom: sm8350: Fix ADSP memory base and length
  - arm64: dts: qcom: sm6375: Fix MPSS memory base and length
  - arm64: dts: qcom: sm6375: Fix CDSP memory base and length
  - arm64: dts: qcom: sm6375: Fix ADSP memory length
  - arm64: dts: qcom: sm6350: Fix uart1 interconnect path
  - arm64: dts: qcom: sm6350: Fix MPSS memory length
  - arm64: dts: qcom: sm6350: Fix ADSP memory length
  - arm64: dts: qcom: sm6115: Fix ADSP memory base and length
  - arm64: dts: qcom: sm6115: Fix CDSP memory length
  - arm64: dts: qcom: sm6115: Fix MPSS memory length
  - ARM: dts: ti/omap: gta04: fix pm issues caused by spi module
  - ARM: dts: dra7: Add bus_dma_limit for l4 cfg bus
  - ubi: Add a check for ubi_num
  - x86/boot: Use '-std=gnu11' to fix build with GCC 15
  - rust: init: use explicit ABI to clean warning in future compilers
  - kbuild: Move -Wenum-enum-conversion to W=2
  - scsi: storvsc: Set correct data length for sending SCSI command without payload
  - scsi: ufs: qcom: Fix crypto key eviction
  - scsi: qla2xxx: Move FCE Trace buffer allocation to user control
  - scsi: st: Don't set pos_unknown just after device recognition
  - nvme-pci: Add TUXEDO IBP Gen9 to Samsung sleep quirk
  - nvme-pci: Add TUXEDO InfinityFlex to Samsung sleep quirk
  - PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf()
  - PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1
  - arm64: tegra: Fix Tegra234 PCIe interrupt-map
  - ALSA: hda: Fix headset detection failure due to unstable sort
  - ALSA: hda/realtek: Enable headset mic on Positivo C6400
  - Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
  - block: don't revert iter for -EIOCBQUEUED
  - mips/math-emu: fix emulation of the prefx instruction
  - dm-crypt: track tag_offset in convert_context
  - dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit()
  - powerpc/pseries/eeh: Fix get PE state translation
  - LoongArch: Extend the maximum number of watchpoints
  - MIPS: Loongson64: remove ROM Size unit in boardinfo
  - serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use
  - serial: sh-sci: Drop __initdata macro for port_cfg
  - soc: qcom: socinfo: Avoid out of bounds read of serial number
  - ASoC: acp: Support microphone from Lenovo Go S
  - usbnet: ipheth: document scope of NCM implementation
  - usbnet: ipheth: fix DPE OoB read
  - usbnet: ipheth: break up NCM header size computation
  - usbnet: ipheth: refactor NCM datagram loop
  - usbnet: ipheth: check that DPE points past NCM header
  - usbnet: ipheth: use static NDP16 location in URB
  - usb: gadget: f_tcm: Don't prepare BOT write request twice
  - usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint
  - usb: gadget: f_tcm: Decrement command ref count on cleanup
  - usb: gadget: f_tcm: Translate error to sense
  - wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916
  - wifi: rtw88: sdio: Fix disconnection after beacon loss
  - wifi: mt76: mt7921u: Add VID/PID for TP-Link TXE50UH
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
  - wifi: rtlwifi: rtl8821ae: Fix media status report
  - HID: hid-sensor-hub: don't use stale platform-data on remove
  - of: reserved-memory: Fix using wrong number of cells to get property 'alignment'
  - of: Fix of_find_node_opts_by_path() handling of alias+path+options
  - of: Correct child specifier used as input of the 2nd nexus node
  - scsi: ufs: core: Fix the HIGH/LOW_TEMP Bit Definitions
  - perf bench: Fix undefined behavior in cmpworker()
  - efi: libstub: Use '-std=gnu11' to fix build with GCC 15
  - clk: mediatek: mt2701-mm: add missing dummy clk
  - clk: mediatek: mt2701-img: add missing dummy clk
  - clk: mediatek: mt2701-bdp: add missing dummy clk
  - clk: mediatek: mt2701-aud: fix conversion to mtk_clk_simple_probe
  - clk: mediatek: mt2701-vdec: fix conversion to mtk_clk_simple_probe
  - clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate
  - clk: qcom: gcc-mdm9607: Fix cmd_rcgr offset for blsp1_uart6 rcg
  - clk: qcom: gcc-sm6350: Add missing parent_map for two clocks
  - clk: qcom: gcc-sm8550: Do not turn off PCIe GDSCs during gdsc_disable()
  - clk: qcom: clk-alpha-pll: fix alpha mode configuration
  - media: i2c: ds90ub960: Fix UB9702 refclk register access
  - clk: sunxi-ng: a100: enable MMC clock reparenting
  - Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
  - drm/i915: Drop 64bpp YUV formats from ICL+ SDR planes
  - drm/komeda: Add check for komeda_get_layer_fourcc_list()
  - drm/i915: Fix page cleanup on DMA remap failure
  - drm/i915/guc: Debug print LRC state entries only if the context is pinned
  - Revert "drm/amd/display: Use HW lock mgr for PSR1"
  - drm/amdkfd: only flush the validate MES contex
  - drm/amd/pm: Mark MM activity as unsupported
  - ksmbd: fix integer overflows on 32 bit systems
  - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
  - arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma
  - drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event()
  - KVM: arm64: timer: Always evaluate the need for a soft timer
  - fs/proc: do_task_stat: Fix ESP not readable during coredump
  - m68k: vga: Fix I/O defines
  - s390/futex: Fix FUTEX_OP_ANDN implementation
  - smb: client: change lease epoch type from unsigned int to __u16
  - smb: client: fix order of arguments of tracepoints
  - drm/modeset: Handle tiled displays in pan_display_atomic.
  - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx
  - leds: lp8860: Write full EEPROM, not only half of it
  - cpufreq: s3c64xx: Fix compilation warning
  - rxrpc: Fix call state set to not include the SERVER_SECURING state
  - net: sched: Fix truncation of offloaded action statistics
  - tun: revert fix group permission check
  - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
  - ACPI: property: Fix return value for nval == 0 in acpi_data_prop_read()
  - x86/xen: add FRAME_END to xen_hypercall_hvm()
  - x86/xen: fix xen_hypercall_hvm() to not clobber %rbx
  - net: rose: lock the socket in rose_bind()
  - net: atlantic: fix warning during hot unplug
  - gpio: pca953x: Improve interrupt support
  - rxrpc: Fix the rxrpc_connection attend queue handling
  - udp: gso: do not drop small packets when PMTU reduces
  - tg3: Disable tg3 PCIe AER on system reboot
  - vmxnet3: Fix tx queue race condition with XDP
  - ice: Add check for devm_kzalloc()
  - net: bcmgenet: Correct overlaying of PHY and MAC Wake-on-LAN
  - nvme-fc: use ctrl state getter
  - ice: put Rx buffers after being done with current frame
  - gpu: drm_dp_cec: fix broken CEC adapter properties check
  - firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry
  - net/ncsi: fix locking in Get MAC Address handling
  - net/ncsi: Add NC-SI 1.2 Get MC MAC Address command
  - KVM: e500: always restore irqs
  - KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults
  - KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock
  - KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map()
  - platform/x86: acer-wmi: Ignore AC events
  - Input: allocate keycode for phone linking
  - ASoC: amd: Add ACPI dependency to fix build error
  - ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback
  - platform/x86: int3472: Check for adev == NULL
  - iommu/arm-smmu-v3: Clean up more on probe failure
  - iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible
  - x86/kexec: Allocate PGD for x86_64 transition page tables separately
  - selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack()
  - tipc: re-order conditions in tipc_crypto_key_rcv()
  - mmc: sdhci-msm: Correctly set the load for the regulator
  - net: wwan: iosm: Fix hibernation by re-binding the driver around it
  - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync
  - APEI: GHES: Have GHES honor the panic= setting
  - i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz
  - wifi: iwlwifi: avoid memory leak
  - net/mlx5: use do_aux_work for PHC overflow checks
  - HID: Wacom: Add PCI Wacom device support
  - clk: qcom: Make GCC_8150 depend on QCOM_GDSC
  - mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id
  - tomoyo: don't emit warning in tomoyo_write_control()
  - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()
  - mmc: core: Respect quirk_max_rate for non-UHS SDIO card
  - tun: fix group permission check
  - wifi: rtw89: add crystal_cap check to avoid setting as overflow value
  - safesetid: check size of policy writes
  - drm/bridge: it6505: fix HDCP CTS KSV list wait timer
  - drm/bridge: it6505: fix HDCP CTS compare V matching
  - drm/bridge: it6505: fix HDCP encryption when R0 ready
  - drm/bridge: it6505: fix HDCP Bstatus check
  - drm/bridge: it6505: Change definition MAX_HDCP_DOWN_STREAM_COUNT
  - drm/amd/display: Fix Mode Cutoff in DSC Passthrough to DP2.1 Monitor
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
  - drm/virtio: New fence for every plane update
  - x86/amd_nb: Restrict init function to AMD-based systems
  - lockdep: Fix upper limit for LOCKDEP_*_BITS configs
  - sched: Don't try to catch up excess steal time.
  - btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling
  - btrfs: fix data race when accessing the inode's disk_i_size at btrfs_drop_extents()
  - s390/stackleak: Use exrl instead of ex in __stackleak_poison()
  - arm64/mm: Ensure adequate HUGE_MAX_HSTATE
  - btrfs: fix use-after-free when attempting to join an aborted transaction
  - btrfs: fix assertion failure when splitting ordered extent after transaction abort
  - Revert "hostfs: convert hostfs to use the new mount API"
  - Revert "hostfs: fix string handling in __dentry_name()"
  - Revert "hostfs: Add const qualifier to host_root in hostfs_fill_super()"
  - Revert "hostfs: fix the host directory parse when mounting."
  - !15645  nilfs2: do not force clear folio if buffer is referenced
  - nilfs2: do not force clear folio if buffer is referenced
  - !15660 v2  add support DVMBM in HIP12
  - KVM: arm64: Add new HiSi CPU type to support DVMBM
  - kvm: hisi_virt: Update TLBI broadcast feature for hip12
  - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE
  - !15593  io_uring: prevent opcode speculation
  - io_uring: prevent opcode speculation
  - !15644  ata: libata-sff: Ensure that we cannot write outside the allocated buffer
  - ata: libata-sff: Ensure that we cannot write outside the allocated buffer
  - !15581  smb: client: Add check for next_buffer in receive_encrypted_standard()
  - smb: client: Add check for next_buffer in receive_encrypted_standard()


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-85.0.0.91
changelog:
  - RISC-V kernel upgrade to 6.6.0-85.0.0
  - Add spacemit k1 support, include pinctrl, gpio, clk, reset, uart, dts-bindings and dts
  - KVM AIA: Enable HW_ACCL
  - RISC-V: Remove unnecessary include from compat.h


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-86.0.0.92
changelog:
  - !15783 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.80-6.6.81 LTS Patches
  - firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success
  - scsi: ufs: core: Cancel RTC work during ufshcd_remove()
  - scsi: ufs: core: Start the RTC update work later
  - scsi: ufs: core: Fix another deadlock during RTC update
  - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive
  - scsi: ufs: core: Fix deadlock during RTC update
  - x86/microcode/intel: Remove unnecessary cache writeback and invalidation
  - arm64: dts: rockchip: Disable DMA for uart5 on px30-ringneck
  - intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly
  - gve: set xdp redirect target only when it is available
  - amdgpu/pm/legacy: fix suspend/resume issues
  - riscv: signal: fix signal frame size
  - riscv/futex: sign extend compare value in atomic cmpxchg
  - rseq/selftests: Fix riscv rseq_offset_deref_addv inline asm
  - sched/core: Prevent rescheduling when interrupts are disabled
  - rcuref: Plug slowpath race in rcuref_put()
  - vmlinux.lds: Ensure that const vars with relocations are mapped R/O
  - mptcp: reset when MPTCP opts are dropped after join
  - mptcp: always handle address removal under msk socket lock
  - phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk
  - phy: tegra: xusb: reset VBUS & ID OVERRIDE
  - net: enetc: fix the off-by-one issue in enetc_map_tx_tso_buffs()
  - net: enetc: correct the xdp_tx statistics
  - net: enetc: update UDP checksum when updating originTimestamp field
  - net: enetc: keep track of correct Tx BD count in enetc_map_tx_tso_buffs()
  - net: enetc: fix the off-by-one issue in enetc_map_tx_buffs()
  - usbnet: gl620a: fix endpoint checking in genelink_bind()
  - i2c: npcm: disable interrupt enable bit before devm_request_irq
  - drm/amd/display: Fix HPD after gpu reset
  - drm/amd/display: Disable PSR-SU on eDP panels
  - perf/core: Fix low freq setting via IOC_PERIOD
  - perf/x86: Fix low freqency setting issue
  - ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2
  - riscv: KVM: Fix SBI TIME error generation
  - riscv: KVM: Fix SBI IPI error generation
  - riscv: KVM: Fix hart suspend status check
  - RISCV: KVM: Introduce mp_state_lock to avoid lock inversion
  - phy: rockchip: naneng-combphy: compatible reset with old DT
  - x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems
  - io_uring/net: save msg_control for compat
  - net: ti: icss-iep: Reject perout generation request
  - net: ti: icss-iep: Remove spinlock-based synchronization
  - include: net: add static inline dst_dev_overhead() to dst.h
  - net/mlx5: IRQ, Fix null string in debug print
  - net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination.
  - net: Clear old fragment checksum value in napi_reuse_skb
  - ice: Fix deinitializing VF in error path
  - ice: add E830 HW VF mailbox message limit support
  - ice: Add E830 device IDs, MAC type and registers
  - firmware: cs_dsp: Remove async regmap writes
  - ipvs: Always clear ipvs_property flag in skb_scrub_packet()
  - ASoC: es8328: fix route from DAC to output
  - net: set the minimum for net_hotdata.netdev_budget_usecs
  - net: loopback: Avoid sending IP packets without an Ethernet header
  - afs: Fix the server_list to unuse a displaced server rather than putting it
  - afs: Make it possible to find the volumes that are using a server
  - rxrpc: rxperf: Fix missing decoding of terminal magic cookie
  - Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response
  - ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports
  - sunrpc: suppress warnings for unused procfs functions
  - RDMA/mlx5: Fix bind QP error cleanup flow
  - scsi: core: Clear driver private data when retrying request
  - SUNRPC: Handle -ETIMEDOUT return from tlshd
  - SUNRPC: Prevent looping due to rpc_signal_task() races
  - SUNRPC: convert RPC_TASK_* constants to enum
  - scsi: ufs: core: Fix ufshcd_is_ufs_dev_busy() and ufshcd_eh_timed_out()
  - scsi: ufs: core: Prepare to introduce a new clock_gating lock
  - scsi: ufs: core: Introduce ufshcd_has_pending_tasks()
  - scsi: ufs: core: Add UFS RTC support
  - scsi: ufs: core: Add ufshcd_is_ufs_dev_busy()
  - RDMA/mana_ib: Allocate PAGE aligned doorbell index
  - IB/mlx5: Set and get correct qp_num for a DCT QP
  - !15650 PCI/DPC: Ignore Surprise Down error on hot removal
  - PCI/DPC: Ignore Surprise Down error on hot removal
  - !15813  fix CVE-2025-21883
  - ice: Fix deinitializing VF in error path
  - ice: add E830 HW VF mailbox message limit support
  - ice: Add E830 device IDs, MAC type and registers
  - !15800  proc: fix UAF in proc_get_inode()
  - proc: fix UAF in proc_get_inode()
  - !15799  ksmbd: fix incorrect validation for num_aces field of smb_acl
  - ksmbd: fix incorrect validation for num_aces field of smb_acl
  - !15798  ksmbd: fix out-of-bounds in parse_sec_desc()
  - ksmbd: fix out-of-bounds in parse_sec_desc()
  - !15749  CVE-2025-21963 && CVE-2025-21964
  - cifs: Fix integer overflow while processing acdirmax mount option
  - cifs: Fix integer overflow while processing acregmax mount option
  - !15680  scsi: ufs: core: Fix use-after free in init error and remove paths
  - scsi: ufs: core: Fix use-after free in init error and remove paths
  - !15681  kernel: be more careful about dup_mmap() failures and uprobe registering
  - kernel: be more careful about dup_mmap() failures and uprobe registering
  - !15772  tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
  - tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
  - !15789  slimbus: messaging: Free transaction ID in delayed interrupt scenario
  - slimbus: messaging: Free transaction ID in delayed interrupt scenario
  - !15788  wifi: cfg80211: regulatory: improve invalid hints checking
  - wifi: cfg80211: regulatory: improve invalid hints checking
  - !15787  i2c: npcm: disable interrupt enable bit before devm_request_irq
  - i2c: npcm: disable interrupt enable bit before devm_request_irq
  - !15786  ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
  - ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
  - ASoC: SOF: topology: Parse DAI type token for dspless mode
  - ASoC: SOF: topology: dynamically allocate and store DAI widget->private
  - !15807  RDMA/mlx5: Fix a WARN during dereg_mr for DM type
  - RDMA/mlx5: Fix a WARN during dereg_mr for DM type
  - !15338  partitions: mac: fix handling of bogus partition table
  - partitions: mac: fix handling of bogus partition table
  - !15771  bpf: Add tracepoints with null-able arguments
  - bpf: Add tracepoints with null-able arguments
  - !15775 v2  CVE-2024-57857
  - RDMA/siw: Remove direct link to net_device
  - RDMA: Export ib_device_get_netdev()
  - !15790  fix CVE-2025-21976
  - fbdev: hyperv_fb: Allow graceful removal of framebuffer
  - fbdev: hyperv_fb: Simplify hvfb_putmem
  - fbdev: Introduce devm_register_framebuffer()
  - !15785 v2  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  - !15757  Fix kmemleak false positive
  - efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
  - !15396  fix CVE-2024-57999
  - powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW
  - !15762  scsi: ufs: core: bsg: Fix crash when arpmb command fails
  - scsi: ufs: core: bsg: Fix crash when arpmb command fails
  - !15410  CVE-2025-21715
  - net: davicom: fix UAF in dm9000_drv_remove
  - !15408  CVE-2025-21744
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
  - !15729 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.79-6.6.80 LTS Patches
  - mtd: rawnand: cadence: fix unchecked dereference
  - ibmvnic: Inspect header requirements before using scrq direct
  - ibmvnic: Perform tx CSO during send scrq direct
  - x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit
  - nilfs2: handle errors that nilfs_prepare_chunk() may return
  - nilfs2: eliminate staggered calls to kunmap in nilfs_rename
  - nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link
  - arm64: dts: rockchip: change eth phy mode to rgmii-id for orangepi r1 plus lts
  - md: Fix md_seq_ops() regressions
  - ftrace: Do not add duplicate entries in subops manager ops
  - ftrace: Correct preemption accounting for function tracing.
  - EDAC/qcom: Correct interrupt enable register configuration
  - mtd: rawnand: cadence: fix incorrect device in dma_unmap_single
  - mtd: rawnand: cadence: use dma_map_resource for sdma address
  - mtd: rawnand: cadence: fix error code in cadence_nand_init()
  - mm,madvise,hugetlb: check for 0-length range after end address adjustment
  - ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close
  - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED
  - ALSA: hda: Add error check for snd_ctl_rename_id() in snd_hda_create_dig_out_ctls()
  - ASoC: fsl_micfil: Enable default case in micfil_set_quality()
  - ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()
  - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
  - lib/iov_iter: fix import_iovec_ubuf iovec management
  - soc: loongson: loongson2_guts: Add check for devm_kstrdup()
  - drop_monitor: fix incorrect initialization order
  - tee: optee: Fix supplicant wait loop
  - drm/i915/dp: Fix error handling during 128b/132b link training
  - drm/i915: Make sure all planes in use by the joiner have their crtc included
  - drm/msm/dpu: Disable dither in phys encoder cleanup
  - arm64: dts: mediatek: mt8183: Disable DSI display output by default
  - drm/nouveau/pmu: Fix gp10b firmware guard
  - bpf: skip non exist keys in generic_map_lookup_batch
  - nvme/ioctl: add missing space in err message
  - drm/msm: Avoid rounding up to one jiffy
  - nouveau/svm: fix missing folio unlock + put after make_device_exclusive_range()
  - power: supply: da9150-fg: fix potential overflow
  - bpf: Fix deadlock when freeing cgroup storage
  - bpf: Disable non stream socket for strparser
  - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()
  - drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()
  - drm/msm/gem: Demote userspace errors to DRM_UT_DRIVER
  - drm/tidss: Fix race condition while handling interrupt registers
  - drm/tidss: Add simple K2G manual reset
  - net: axienet: Set mac_managed_pm
  - arp: switch to dev_getbyhwaddr() in arp_req_set_public()
  - net: Add non-RCU dev_getbyhwaddr() helper
  - flow_dissector: Fix port range key handling in BPF conversion
  - flow_dissector: Fix handling of mixed port and port-range keys
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels().
  - tcp: adjust rcvq_space after updating scaling ratio
  - vsock/bpf: Warn on socket without transport
  - sockmap, vsock: For connectible sockets allow only connected
  - ibmvnic: Don't reference skb after sending to VIOS
  - ibmvnic: Add stat for tx direct vs tx batched
  - ibmvnic: Introduce send sub-crq direct
  - ibmvnic: Return error code on TX scrq flush fail
  - ALSA: seq: Drop UMP events when no UMP-conversion is set
  - net/sched: cls_api: fix error handling causing NULL dereference
  - ALSA: hda/cirrus: Correct the full scale volume set logic
  - geneve: Fix use-after-free in geneve_find_dev().
  - powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC
  - ALSA: hda/realtek: Fixup ALC225 depop procedure
  - powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline
  - powerpc/64s/mm: Move __real_pte stubs into hash-4k.h
  - ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB]
  - USB: gadget: f_midi: f_midi_complete to call queue_work
  - usb: gadget: core: flush gadget workqueue after device removal
  - USB: gadget: core: create sysfs link between udc and gadget
  - nvmem: imx-ocotp-ele: fix MAC address byte order
  - nvmem: Move and rename ->fixup_cell_info()
  - nvmem: Simplify the ->add_cells() hook
  - nvmem: Create a header for internal sharing
  - media: uvcvideo: Remove dangling pointers
  - media: uvcvideo: Only save async fh if success
  - media: uvcvideo: Refactor iterators
  - soc: mediatek: mtk-devapc: Fix leaking IO map on driver remove
  - soc/mediatek: mtk-devapc: Convert to platform remove callback returning void
  - arm64: dts: qcom: sm8550: Fix ADSP memory base and length
  - arm64: dts: qcom: sm8550: add missing qcom,non-secure-domain property
  - arm64: dts: qcom: sm8550: Add dma-coherent property
  - arm64: dts: qcom: sm8450: Fix ADSP memory base and length
  - arm64: dts: qcom: sm8450: add missing qcom,non-secure-domain property
  - scsi: core: Do not retry I/Os during depopulation
  - scsi: core: Handle depopulation and restoration in progress
  - firmware: qcom: scm: Fix missing read barrier in qcom_scm_is_available()
  - ASoC: renesas: rz-ssi: Add a check for negative sample_space
  - Input: synaptics - fix crash when enabling pass-through port
  - Input: serio - define serio_pause_rx guard to pause and resume serio ports
  - Bluetooth: qca: Fix poor RF performance for WCN6855
  - Bluetooth: qca: Update firmware-name to support board specific nvm
  - Bluetooth: qca: Support downloading board id specific NVM for WCN7850
  - cpufreq: fix using cpufreq-dt as module
  - cpufreq: dt-platdev: add missing MODULE_DESCRIPTION() macro
  - memcg: fix soft lockup in the OOM process
  - mm: update mark_victim tracepoints fields
  - md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime
  - md/md-bitmap: add 'sync_size' into struct md_bitmap_stats
  - md/md-cluster: fix spares warnings for __le64
  - md/md-bitmap: replace md_bitmap_status() with a new helper md_bitmap_get_stats()
  - !15743  uprobes: Reject the shared zeropage in uprobe_write_opcode()
  - uprobes: Reject the shared zeropage in uprobe_write_opcode()
  - !15768  gpio: aggregator: protect driver attr handlers against module unload
  - gpio: aggregator: protect driver attr handlers against module unload
  - !15755  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  - x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  - !15739  ftrace: Avoid potential division by zero in function_stat_show()
  - ftrace: Avoid potential division by zero in function_stat_show()
  - !15748  tracing: Fix bad hist from corrupting named_triggers list
  - tracing: Fix bad hist from corrupting named_triggers list
  - !15750  perf/core: Fix pmus_lock vs. pmus_srcu ordering
  - perf/core: Fix pmus_lock vs. pmus_srcu ordering
  - !15697  fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - !15613  CVE-2024-57952
  - libfs: Fix duplicate directory entry in offset_dir_lookup
  - libfs: Use d_children list to iterate simple_offset directories
  - libfs: Replace simple_offset end-of-directory detection
  - Revert "libfs: fix infinite directory reads for offset dir"
  - Revert "libfs: Add simple_offset_empty()"
  - libfs: Return ENOSPC when the directory offset range is exhausted
  - !15724  CVE-2024-52560
  - fs/ntfs3: Unify inode corruption marking with _ntfs_bad_inode()
  - fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()
  - !15277  drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - !15641  block: don't revert iter for -EIOCBQUEUED
  - block: don't revert iter for -EIOCBQUEUED
  - !15515  media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - !15731  Some mainline patches merged into drivers/hwmon
  - hwmon: (acpi_power_meter) Fix the fake power alarm reporting
  - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices().
  - hwmon: (acpi_power_meter) Fix update the power trip points on failure
  - hwmon: (acpi_power_meter) Fix uninitialized variables
  - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method
  - !15711  Some bug fix patches for RDMA/hns to olk-6.6
  - RDMA/hns: Fix remove debugfs after device has been unregistered
  - RDMA/hns: Reorder uctx deallocation
  - RDMA/hns: Fix a meaningless loop in free_buffer_pages_proc()
  - RDMA/hns: Fix DCA error path in alloc_wqe_buf()
  - RDMA/hns: Fix mismatched kzalloc vs kvfree
  - RDMA/hns: Fix delay-destruction mechanism not processing kernel db
  - RDMA/hns: Fix delayed destruction of db not taking effect
  - RDMA/hns: Move mtr_node into the mtr struct
  - RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct


author: Li Nan <linan122@huawei.com> - 6.6.0-87.0.0.93
changelog:
  - !15987 v12  Add support for IPIv
  - kabi: Use KABI_EXTEND to perform kabi repair for IPIV
  - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12
  - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE
  - kvm: hisi_virt: Register ipiv exception interrupt
  - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule
  - kvm: arm64: avoid sending multi-SGIs in IPIV
  - kvm: hisi_virt: Allocate VM table and save vpeid in it
  - !15980  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  - !15979  thermal: int340x: Add NULL check for adev
  - !15921 Support SMT control on arm64.
  - !15975  perf/x86: Fix open counting event error
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  - thermal: int340x: Add NULL check for adev
  - !15968 v3  Backport mainline patches to avoid crash caused by rsize being 0
  - !15960  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - !15974  RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
  - !15952  ksmbd: validate zero num_subauth before sub_auth is accessed
  - !15950  drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
  - perf/x86: Fix open counting event error
  - RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
  - smb: client: Update IO sizes after reconnection
  - smb: client: Store original IO parameters and prevent zero IO sizes
  - smb:client: smb: client: Add reverse mapping from tcon to superblocks
  - Revert "cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0"
  - !15958 cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
  - !15916  LoongArch: Increase ARCH_DMA_MINALIGN up to 16
  - !15961  drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
  - !15945 crypto: hisilicon - some bugfix
  - drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - !15929  arm_mpam: Add SMMU support for MPAM
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
  - !15793  CVE-2025-21892
  - !15795  CVE-2025-21941
  - ksmbd: validate zero num_subauth before sub_auth is accessed
  - drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
  - !15871 v2  CVE-2024-57795
  - !15906 [OLK-6.6] drm/hisilicon/hibmc: some bugfixes for hibmc-drm driver
  - !15834 uacce: fix for the numa distance calculation
  - crypto: hisilicon/qm - disable error report before flr
  - hisi_acc_vfio_pci: obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - fix the pf2vf timeout when global reset
  - crypto: hisilicon/qm - modify interrupt processing resource application
  - crypto: hisilicon/qm - mask axi error before memory init
  - crypto: hisilicon/qm - invalidate queues in use
  - crypto: hisilicon/sec2 - fix memory use-after-free issue
  - crypto: hisilicon/sec2 - fix for gcm spec check
  - crypto: hisilicon/hpre - fix dma unmap sequence
  - !15936  ASoC: imx-card: Add NULL check in imx_card_probe()
  - !15922 mm: shmem: fix potential data corruption during shmem swapin
  - !15924 mm/vmscan: drop checking if _deferred_list is empty before using TTU_SYNC
  - !15913  block: fix resource leak in blk_register_queue() error path
  - ASoC: imx-card: Add NULL check in imx_card_probe()
  - !15923 RDMA/hns :Add some mainline patches to OLK-6.6
  - iommu: Fix kabi broken of struct iommu_ops
  - fs/resctrl: Move iommu_groups back when their associated RDT group is deleted
  - fs/resctrl: Fix the iommu_group parsing process
  - iommu/arm-smmu-v3: Check pointer valid before dereferencing it
  - arm_mpam: Select CONFIG_RESCTRL_IOMMU on the ARM64 by default
  - ACPI/MPAM: Parse the rest of the ACPI table
  - fs/resctrl: Add support for assigning iommu_groups to resctrl groups
  - arm_mpam: resctrl: Add iommu helpers to get/set the partid and pmg
  - kobject: Add kset_get_next_obj() to allow a kset to be walked
  - iommu: Add helper to retrieve iommu kset
  - iommu: Add helpers to retrieve iommu_groups by id or kobject
  - iommu: Add helpers to get and set the QoS state
  - iommu/arm-smmu-v3: Add mpam helpers to query and set state
  - iommu/arm-smmu-v3: Issue a batch of commands to the same cmdq
  - iommu/arm-smmu-v3: Register SMMU capabilities with MPAM
  - mm: shmem: fix potential data corruption during shmem swapin
  - mm/vmscan: drop checking if _deferred_list is empty before using TTU_SYNC
  - RDMA/hns: Fix wrong maximum DMA segment size
  - Revert "RDMA/hns: fix iommu_map_sg() failed when MR bigger than 4G"
  - RDMA/hns: initialize db in update_srq_db()
  - RDMA/hns: Remove unused parameters
  - config: enable CONFIG_HOTPLUG_SMT for arm64
  - arm64: Kconfig: Enable HOTPLUG_SMT
  - arm64: topology: Support SMT control on ACPI based system
  - arch_topology: Support SMT control for OF based system
  - cpu/SMT: Provide a default topology_is_primary_thread()
  - Revert "arm64: Kconfig: Enable HOTPLUG_SMT"
  - !15904 v2  PCI: AER: fix deadlock in do_recovery
  - !15910 v2  soc cache: Add support for HiSilicon L3 cache
  - LoongArch: Increase ARCH_DMA_MINALIGN up to 16
  - block: fix resource leak in blk_register_queue() error path
  - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
  - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
  - !15909  coresight: tmc: Don't change the buffer size if it's in use
  - soc cache: Modify default config to compile HiSilicon SoC cache driver
  - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent
  - soc cache: Add framework driver for HiSilicon SoC cache
  - coresight: tmc: Don't change the buffer size if it's in use
  - PCI: AER: fix deadlock in do_recovery
  - !15863 Some mainline patches merged into olk-6.6: drivers/hwmon
  - !15812  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  - !15821  LoongArch: Set hugetlb mmap base address aligned with pmd size
  - !15882  Updates for HiSilicon L3C PMU driver
  - !15886  Add HPD, getting EDID, colorbar features in DP function
  - !15851 migration: adapt to new migration configuration
  - drm/hisilicon/hibmc: Add vga connector detect functions
  - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
  - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
  - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
  - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
  - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
  - drm/hisilicon/hibmc: Add dp serdes cfg in dp process
  - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
  - drm/hisilicon/hibmc: Restructuring the header dp_reg.h
  - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
  - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
  - drm/ast: Implement polling for VGA and SIL164 connectors
  - drm/sysfs: Register "ddc" symlink later
  - !15612 Some trivial cleanups for shmem
  - drivers/perf: hisi: Add support for L3C PMU v3
  - drivers/perf: hisi: Refactor the event configuration of L3C PMU
  - drivers/perf: hisi: Extend the field of tt_core
  - drivers/perf: hisi: Extract the event filter check of L3C PMU
  - drivers/perf: hisi: Simplify the probe process of each L3C PMU version
  - drivers/perf: hisi: Export hisi_uncore_pmu_isr()
  - drivers/perf: hisi: Relax the event ID check in the framework
  - !15872 【olk 6.6】backport some bugfixes for hibmcge driver
  - !15852  Fix CVE-2025-22013
  - !15845  regulator: check that dummy regulator has been probed before using it
  - !15854  perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - !15838  General updates of HiSilicon PMU drivers
  - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register
  - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates
  - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems
  - ACPI: IPMI: Add helper to wait for when SMI is selected
  - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests
  - RDMA/rxe: Remove the direct link to net_device
  - net: hibmcge: fix multiple phy_stop() issue
  - net: hibmcge: fix not restore rx pause mac addr after reset issue
  - net: hibmcge: fix the incorrect np_link fail state issue.
  - net: hibmcge: fix wrong mtu log issue
  - net: hibmcge: fix the share of irq statistics among different network ports issue
  - net: hibmcge: fix incorrect multicast filtering issue
  - net: hibmcge: fix incorrect pause frame statistics issue
  - migration: adapt to new migration configuration
  - migration: qm updates BAR configuration
  - migration: update BAR space size
  - hisi_acc_vfio_pci: update function return values
  - hisi_acc_vfio_pci: bugfix live migration function without VF device driver
  - hisi_acc_vfio_pci: bugfix the problem of uninstalling driver
  - hisi_acc_vfio_pci: bugfix cache write-back issue
  - hisi_acc_vfio_pci: add eq and aeq interruption restore
  - hisi_acc_vfio_pci: fix XQE dma address error
  - !15839  ext4: Some zeroing fixes
  - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - arm64/fpsimd: Remove unused declaration fpsimd_kvm_prepare()
  - KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
  - !15321  printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
  - regulator: check that dummy regulator has been probed before using it
  - !15826  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
  - !15754 v3  Support the FEAT_HDBSS introduced in Armv9.5
  - jbd2: fix off-by-one while erasing journal
  - iomap: do not interrupt IOMAP_ZERO
  - ext4: fix potential memory exposure issues during truncate in iomap mode.
  - ext4: do not always order data when partial zeroing out a block
  - mm: zero range of eof folio exposed by inode size extension
  - mm: convert pagecache_isize_extended to use a folio
  - ext4: goto right label 'out_mmap_sem' in ext4_setattr()
  - drivers/perf: hisi: Add support for HiSilicon MN PMU driver
  - drivers/perf: hisi: Add support for HiSilicon NoC PMU
  - drivers/perf: hisi: Support PMUs with no interrupt
  - drivers/perf: hisi: Relax the event number check of v2 PMUs
  - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver
  - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information
  - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - drivers/perf: hisi: Simplify the probe process for each DDRC version
  - drivers/perf: hisi: Delete redundant blank line of DDRC PMU
  - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver
  - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs
  - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier
  - drivers/perf: hisi: Add a common function to retrieve topology from firmware
  - drivers/perf: hisi: Extract topology information to a separate structure
  - drivers/perf: hisi: Refactor the detection of associated CPUs
  - drivers/perf: hisi: Migrate to one online CPU if no associated one online
  - drivers/perf: hisi: Don't update the associated_cpus on CPU offline
  - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs
  - !15827  perf stat: Enable iostat mode for HiSilicon PCIe PMU
  - !15072 hisilicon: ACC Live Migration DFX Replacement Mainline Solution
  - x86: openeuler_defconfig add CONFIG_VFIO_DEBUGFS=y
  - arm64: openeuler_defconfig add CONFIG_VFIO_DEBUGFS=y
  - perf stat: Enable iostat mode for HiSilicon PCIe PMU
  - vfio: fix kabi breakage due to struct vfio_device and enum vfio_device_mig_state
  - Documentation: add debugfs description for vfio
  - Documentation: add debugfs description for hisi migration
  - MAINTAINERS: Add vfio debugfs interface doc link
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
  - MAINTAINERS: add Baolin as shmem reviewer
  - mm: shmem: factor out the within_size logic into a new helper
  - mm: shmem: change the return value of shmem_find_swap_entries()
  - mm: shmem: remove duplicate error validation
  - mm: shmem: remove 'fadvise()' comments
  - mm: shmem: drop the unused macro
  - docs: tmpfs: drop 'fadvise()' from the documentation
  - !15611 Minimize xa_node allocation during xarry split
  - docs: tmpfs: update the large folios policy for tmpfs and shmem
  - mm: shmem: add a kernel command line to change the default huge policy for tmpfs
  - hisi_acc_vfio_pci: register debugfs for hisilicon migration driver
  - hisi_acc_vfio_pci: create subfunction for data reading
  - hisi_acc_vfio_pci: extract public functions for container_of
  - hisi_acc_vfio_pci: Remove the deferred_reset logic
  - vfio/migration: Add debugfs to live migration driver
  - Revert "vfio/migration: added map length page alignment"
  - Revert "vfio/migration: bugfix some driver code"
  - Revert "vfio/migration: add eq and aeq interruption restore"
  - Revert "vfio/migration: bugfix cache write-back issue"
  - Revert "vfio/migration: remove unused local variable"
  - Revert "hisi-acc-vfio-pci:add DFX for acc migration driver"
  - Revert "hisi_acc_vfio_pci: add exception error handling"
  - Revert "migration: fix reference counting exception issue"
  - Revert "migration: modify dfx error type without VM driver"
  - !15636 Kunpeng Accelerator Enables New Features
  - LoongArch: Set hugetlb mmap base address aligned with pmd size
  - crypto: hisilicon/sec2 - fix for sec spec check
  - crypto: hisilicon/sec2 - fix for aead authsize alignment
  - crypto: hisilicon/sec2 - fix for aead auth key length
  - crypto: hisilicon/hpre - adapt ECDH for high-performance cores
  - crypto: hisilicon/qm - support new function communication
  - Revert "crypto: hisilicon/qm - fix the pf2vf timeout when global reset"
  - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time"
  - crypto: hisilicon/sec2 - fix for aead invalid authsize
  - crypto: hisilicon/sec2 - fix for aead icv error
  - Revert "crypto: hisilicon/sec2: fix memory use-after-free issue"
  - Revert "crypto: hisilicon/sec2 - fix for aead icv error"
  - Revert "crypto: hisilicon/sec2 - fix for aead invalid authsize"
  - crypto: hisilicon/zip - support new error report
  - Revert "crypto: hisilicon/qm - check device status before sending mailbox"
  - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time"
  - Revert "crypto: hisilicon/qm - disable error report before flr"
  - crypto: hisilicon/zip - add data aggregation feature
  - rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params
  - RDMA/mlx5: Fix the recovery flow of the UMR QP
  - arm64/kabi: use KABI_EXTEND to skip KABI check
  - arm64/config: add config to control whether enable HDBSS feature
  - arm64/kvm: support to handle the HDBSSF event
  - arm64/kvm: using ioctl to enable/disable the HDBSS feature
  - arm64/kvm: support set the DBM attr during memory abort
  - arm64/sysreg: add HDBSS related register information
  - uacce: fix for the numa distance calculation
  - uacce: fixes the mutex repeatedly locking error
  - mm/shmem: use xas_try_split() in shmem_split_large_entry()
  - mm/filemap: use xas_try_split() in __filemap_add_folio()
  - xarray: add xas_try_split() to split a multi-index entry
  - mm: shmem: add large folio support for tmpfs
  - mm: shmem: change shmem_huge_global_enabled() to return huge order bitmap
  - mm: factor out the order calculation into a new helper
  - Xarray: distinguish large entries correctly in xas_split_alloc()
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: jianmin <jianmin@iscas.ac.cn> - 1.34.1-5
changelog:
  - Type:cve
  - CVE:CVE-2024-3727 CVE-2024-24791
  - SUG:NA
  - DESC: fix CVE-2024-3727 and Rebuild to fix CVE-2024-24791


author: dongyuzhen <dongyuzhen@h-partners.com> - 23.4.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(net): klibc ipconfig PROTO compatibility
         fix(openstack): Fix bond mac_address


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:chore: set recursive=False for ensure_dir if parent path is "/"
         test(openstack): Test bond mac address
         fix: Ensure properties for bonded interfaces are properly translated


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:net/sysconfig: do not remove all existing settings of /etc/sysconfig/network
         fix: typing for rsyslog, ubuntu_pro, power_state_change


author: huyubiao <huyubiao@huawei.com> - 9.4-9
changelog:
  - fix alias sm3sum not working on bash
    delete redundant backport-chmod-fix-exit-status-when-ignoring-symlinks.patch


author: huyubiao <huyubiao@huawei.com> - 9.4-10
changelog:
  - sync patches from community
  - add backport-pinky-fix-string-size-calculation.patch
        backport-cksum-consistently-validate-length-attributes.patch
        backport-timeout-fix-race-where-we-might-kill-arbitrary-proce.patch
        backport-timeout-fix-narrow-race-in-failing-to-kill-processes.patch
        backport-maint-basenc-consistently-check-buffer-bounds-when-e.patch
        backport-putenv-Don-t-crash-upon-out-of-memory.patch
        backport-head-off_t-not-uintmax_t-for-file-offset.patch
        backport-shuf-avoid-integer-overflow-on-huge-inputs.patch
        backport-shuf-fix-randomness-bug.patch


author: hugel <gengqihu2@h-partners.com> - 9.4-12
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: shenzhongwei <shenzhongwei@kylinos.cn> - 8.0.4-10
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: lijian <lijian2@kylinos.cn> - 1.8.7-1
changelog:
  - update to 1.8.7
  - crun: new command "crun features".
  - linux: support io_priority from the OCI specs.
  - cgroup: allow setting swap to 0.
  - cgroup, systemd: set the memory limit on the system scope.


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cfgable: free {proxy_}cipher13_list on exit


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: xingwei <xingwei14@h-partners.com> - 8.4.0-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:altsvc: avoid integer overflow in expire calculation
         urlapi: fix redirect to a new fragment or query (only)
         tool_getparam: clear sensitive arguments better


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-4
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:delete report url added by other upstream patch to keep pace with DHCP


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: renmingshuai <renmingshuai@huawei.com> - 2.89-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.90-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         cache: Fix potential NULL deref in arcane situations.
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         allow binding mac with ip6


author: huangdengdui <huangdengui@huawei.com> - 23.11-17
changelog:
  Sync some patchs from upstreaming for hns3 pmd and modifications
   are as follow:
   - dma/hisilicon: remove support for HIP09 platform
   - net/hns3: disable SCTP verification tag for RSS hash input
   - net/hns3: fix variable overflow
   - net/hns3: fix double free for Rx/Tx queue
   - net/hns3: fix read Rx timestamp handle
   - net/hns3: fix offload flag of IEEE 1588
   In addition, the following patch synchronizes the latest version
   - ethdev: fix strict aliasing lead to link cannot be up


author: yinbin <yinbin8@huawei.com> - 23.11-18
changelog:
  - change dpdk-* in dpdk-tools  from dynamic build to static build
  - add -s flag to remove symbols of dpdk-* in dpdk-tools


author: huangdengdui <huangdengui@huawei.com> - 23.11-19
changelog:
  Support more VLAN fields matching for hns3 and sync a bugfix
   - net/hns3: add Rx DMA address align check
   - net/hns3: support more VLAN fields matching


author: huangdengdui <huangdengui@huawei.com> - 23.11-24
changelog:
  Sync some patchs from upstreaming, includind some bugfixes, hns3 pmd
   flow rule priority feature, hns3 pmd outer VLAN flow match feature,
   and support dump reigser names and filter.
   This patch set is modified as follows:
   - net/hns3: fix cannot fully use hardware flow director table
   - net/hns3: fix error code for repeatedly create counter
   - net/hns3: support flow rule priority
   - common/nfp: use new kvargs process API
   - net/tap: use new kvargs process API
   - net/sfc: use new kvargs process API
   - kvargs: rework process API
   - net/hns3: fix variable type
   - net/hns3: fix pointer offset
   - net/hns3: fix error log
   - net/hns3: support filtering registers by module names
   - net/hns3: support reporting names of registers
   - net/hns3: refactor register dump
   - net/hns3: remove separators between register module
   - net/hns3: fix dump counter of registers
   - net/hns3: remove some basic address dump
   - telemetry: register command with private argument
   - ethdev: fix race on ports in telemetry endpoints
   - ethdev: add telemetry command for registers
   - ethdev: add report of register names and filter
   - net/hns3: support outer VLAN flow match
   - net/hns3: register VLAN flow match mode parameter
   - net/hns3: support general tunnel flow match
   - net/hns3: restrict tunnel flow rule to one header
   - net/hns3: remove ROH devices
   - net/hns3: dump queue head and tail pointer info
   - dmadev: fix potential null pointer access
   - net/hns3: verify reset type from firmware
   - ethdev: verify queue ID in Tx done cleanup


author: queyanwen<queyanwen@huawei.com> - 1.0.1-2
changelog:
  - Optimize the accuracy of non-steady-state data prediction and training.
  - The anbient temperature check is added befor the collection is started. If the temperature is
  - greater than 28°C, the collection will not be started.


author: queyanwen<queyanwen@huawei.com> - 1.0.1-3
changelog:
  - The current condition for determining whether the system enters the stable state is that
  - the difference between the maximum temperature and the minimum temperature within 60s is less than 0.2 degrees.
  - This judgment is too strict and needs to be changed to 2 degrees.
  - In addition, the average fuzzy processing in five windows is used to prevent data jitter.
  - When the entire system can obtain the CPU power consumption data, the obtained CPU power consumption
  - is directly used during training, instead of obtaining the CPU power consumption by inferring.


author: heppen<hepeng68@huawei.com> - 1.1.0-3
changelog:
  - Bug fix: Ctrl Auth request on main thread, but release on socket thread.
  - Bug fix: Modify policy file but do not take effect.
  - Bug fix: IsNumStr returns false when the input string is a negative number.
  - Add instructions to the config file.


author: jinye<jinye10@huawei.com> - 1.1.0-4
changelog:
  - Bug fix: Default policy can't restore after stop eagle service
  - Bug fix: Some spell bugs
  - Bug fix: Modify watt_sched_enable don't take effect
  - Bug fix: Set watt_sched_enable as zero SetWattFirstDomain return error
  - Reconstruct eagle init and load part


author: Xiaotian Wu <wuxiaotian@loongson.cn> - 202308-17
changelog:
  - Update LoongArch virtual machine
  - 0080-Platform-Loongson-Remove-minimium-memory-size-limita.patch
  - 0081-Platform-Loongson-Modify-loongarch-uefi-firmware-siz.patch
  - 0082-fixup-fdt-parse-error.patch


author: fuanan <fuanan3@h-partners.com> - 0.189-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Remove unnecessary patch because this patch is contained in elfutils-0.189.tar


author: lifeifei <lifeifei@kylinos.cn> - 0.190-3
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add noreplace to /usr/lib/sysctl.d/10-default-yama-scope.conf


author: wangqiang <wangqiang1@kylinos.cn> - 0.190-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: Fix handling of corefiles with non-contiguous .so segments


author: shixuantong <shixuantong1@huawei.com> - 0.190-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:move /usr/lib64/libdebuginfod.so from debuginfod-client-devel to debuginfod-client


author: lvxiangcong <lvxiangcong@kylinos.cn> - 3.4.14-16
changelog:
  - Type:CVES
  - ID:CVE-2024-24791 CVE-2023-45288 CVE-2024-24783 CVE-2024-24785 CVE-2023-45290
       CVE-2023-39326
  - SUG:NA
  - DESC:Batch fix cves through rebuild


author: wangkai <13474090681@163.com> - 128.4.0-1
changelog:
  - Update to 128.4.0
  - Fix CVE-2024-10458 CVE-2024-10459 CVE-2024-10460 CVE-2024-10461 CVE-2024-10462
    CVE-2024-10463 CVE-2024-10464 CVE-2024-10465 CVE-2024-10466 CVE-2024-10467


author: wangkai <13474090681@163.com> - 128.5.0-1
changelog:
  - Update to 128.5.0
  - Fix CVE-2024-11691 CVE-2024-11692 CVE-2024-11694 CVE-2024-11695 CVE-2024-11696
    CVE-2024-11697 CVE-2024-11699


author: wangkai <13474090681@163.com> - 128.6.0-1
changelog:
  - Update to 128.6.0
  - Fix CVE-2025-0237 CVE-2025-0238 CVE-2025-0239 CVE-2025-0240 CVE-2025-0241
    CVE-2025-0242 CVE-2025-0243


author: wangkai <13474090681@163.com> - 128.7.0-1
changelog:
  - Update to 128.7.0
  - Fix CVE-2025-1009 CVE-2025-1010 CVE-2025-1011 CVE-2025-1012 CVE-2025-1013
    CVE-2025-1014 CVE-2025-1016 CVE-2025-1017


author: wangkai <13474090681@163.com> - 128.8.0-1
changelog:
  - Update to 128.8.0
  - Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
    CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938


author: wangkai <13474090681@163.com> - 128.10.0-1
changelog:
  - Update to 128.10.0
  - Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093


author: wangkai <13474090681@163.com> - 128.11.0-1
changelog:
  - Update to 128.11.0
  - Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
  - Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269


author: wangkai <13474090681@163.com> - 128.3.0-1
changelog:
  - Update to 128.3.0
  - Fix CVE-2024-9392 CVE-2024-9393 CVE-2024-9394 CVE-2024-9396
    CVE-2024-9397 CVE-2024-9398 CVE-2024-9399 CVE-2024-9400 CVE-2024-9401
    CVE-2024-9402


author: yinbin <yinbin8@huawei.com> - 1.0.2-77
changelog:
  - openGauss: support kernel connnect
  - xdp: support stack bind numa
  - CFG: fix xdp iface check error
  - fix build error in 2003SP4
  - cfg: show dpdk args after dpdk_adjust_args
  - fix free null pointer when no matching device is found
  - update test/unitest/ltran/ltran_param_test.c.
  - Fix the wrong spelling description in the notes and logs
  - LWIP: adjust position of shutdown in callback of connect
  - fix socket of control thread is overwirtten due to another primary process start


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: yaoxin <yao_xin001@hoperun.com> - 0.4.50-1
changelog:
  - Update to 0.4.50:
  - Core:
    * Better Gobject Introspection annotation coverage.
    * Improved error handling for gegl chain processing.
    * Added accessors for pad meta-data, to be able to show names and descriptions in UIs.
    * GeglColor: more lax parameters for g_arapm_values_cmp
    * exr-save: store 16bpc files as half, fixing gimp#10778
    * ff-load, ff-save: fix build with FFmpeg 7
    * dither: do processing in linear when all levels==2


author: zhangxianting <zhangxianting@uniontech.com> - 9.56.1-6
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: fuanan <fuanan3@h-partners.com> - 2.39.1-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.39.1-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.43.0-4
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: Xinwei Hu <shinwell_hu@openeuler.sh> - 3.6.0-1
changelog:
  - Upgrade to 3.6.0
    - Support multi-stage authentication with Git credential helpers and relative worktree paths
    - New object transfer batch size configuration option
    - More POSIX-compliant hook scripts


author: Funda Wang <fundawang@yeah.net> - 3.6.1-1
changelog:
  - Upgrade to 3.6.1
    - fix CVE-2024-53263: Git LFS permits retrieval of credentials via crafted HTTP URLs


author: zhangzikang <zhangzikang@kylinos.cn> - 2.78.3-3
changelog:
  - backport patch:
      backport-gdbusmessage-Clean-the-cached-arg0-when-setting-the-message-body.patch
      backport-gsocketclient-Fix-a-use-after-free-in-g_socket_client_connected_callback.patch
      backport-gcontextspecificgroup-Wait-until-stop_func-is-done.patch
      backport-gresources-fix-memory-leak-from-libelf.patch


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-45
changelog:
  - nptl: initialize cpu_id_start prior to rseq registration
  - nptl: initialize rseq area prior to registration


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-52
changelog:
  - stdlib: Test using setenv with updated environ [BZ #32588]
  - Fix underallocation of abort_msg_s struct (CVE-2025-0395)
  - elf: Support recursive use of dynamic TLS in interposed malloc
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - x86/string: Fixup alignment of main loop in str{n}cmp-evex [BZ #32212]
  - x86: Improve large memset perf with non-temporal stores [RHEL-29312]
  - x86_64: Fix missing wcsncat function definition without multiarch (x86-64-v4)
  - sysdeps/x86/Makefile: Split and sort tests
  - x86: Only align destination to 1x VEC_SIZE in memset 4x loop
  - elf: Fix slow tls access after dlopen [BZ #19924]
  - x86: Check the lower byte of EAX of CPUID leaf 2 [BZ #30643]
  - x86_64: Add log1p with FMA
  - x86_64: Add expm1 with FMA
  - x86_64: Add log2 with FMA
  - x86_64: Sort fpu/multiarch/Makefile


author: xiajimei <xiejiamei@hygon.cn> - 2.38-56
changelog:
  - x86: Enable non-temporal memset for Hygon processors
  - x86: Add `Avoid_STOSB` tunable to allow NT memset without ERMS
  - x86: Use `Avoid_Non_Temporal_Memset` to control non-temporal path
  - x86: Disable non-temporal memset on Skylake Server
  - x86: Fix value for `x86_memset_non_temporal_threshold` when it is undesirable
  - x86: Enable non-temporal memset tunable for AMD
  - x86: Add seperate non-temporal tunable for memset
  - x86: Fix Zen3/Zen4 ERMS selection (BZ 30994)
  - x86: Add cache information support for Hygon processors
  - x86: Add new architecture type for Hygon processors


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-57
changelog:
  - math: Improve layout of exp/exp10 data
  - AArch64: Use prefer_sve_ifuncs for SVE memset
  - AArch64: Add SVE memset
  - math: Improve layout of expf data
  - AArch64: Remove zva_128 from memset
  - AArch64: Optimize memset
  - AArch64: Improve generic strlen
  - assert: Add test for CVE-2025-0395


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-58
changelog:
  - x86_64: Fix typo in ifunc-impl-list.c.
  - elf: Test case for bug 32976 (CVE-2025-4802)
  - support: Add support_record_failure_barrier
  - support: Use const char * argument in support_capture_subprogram_self_sgid
  - elf: Ignore LD_LIBRARY_PATH and debug env var for setuid for static


author: xuraoqing <xuraoqing@huawei.com> - 3.8.2-1
changelog:
  - update to 3.8.2
  - some API and ABI modifications, see NEWS for details
  - New option --attime to specify current time
  - libgnutls: Add a mechanism to control whether to enforce extended master secret (RFC 7627)
  - libgnutls: Add additional PBKDF limit checks in FIPS mode as defined in SP 800-132
  - libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to %GNUTLS_NO_DEFAULT_EXTENSIONS.
  - libgnutls: Add support for RFC 9258 external PSK importer.
  - libgnutls: ClientHello extensions are randomized by default,
               To make fingerprinting harder, TLS extensions in ClientHello messages are shuffled.
  - gnutls-cli: New option --starttls-name.
  - libgnutls: transparent KTLS support is extended to FreeBSD kernel.
  - libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452).
  - libgnutls: Add API functions to perform ECDH and DH key agreement.
  - libgnutls: Fix timing side-channel inside RSA-PSK key exchange(CVE-2023-5981).


author: wangshuo <wangshuo@kylinos.cn> - 1.21.4-25
changelog:
  - Type:CVE
  - CVE:CVE-2024-34158
  - SUG:NA
  - DESC:fix CVE-2024-34158
  -      optimize the names of the first two patch files


author: wangshuo <wangshuo@kylinos.cn> - 1.21.4-29
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:crypto/tls: fix Config.Time in tests using expired certificates


author: Vanient <xiadanni1@huawei.com> - 1.21.4-30
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: allow update of system stack bounds on callback from C thread


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:10_linux: fix missing "ro" in kernel boot parameters
         Disable LTO


author: hanliyang <hanliyang@hygon.cn> - 1:2.12-26
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:use confidential computing provisioned secrets for disk decryption


author: yueyuankun <yueyuankun@kylinos.cn> - 1:2.12-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:acpi: Fix out of bounds access in grub_acpi_xsdt_find_table()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:commands/efi/tpm: Re-enable measurements on confidential computing platforms


author: Funda Wang <fundawang@yeah.net> - 1:2.12-32
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:disable fortify level based on new settings of openEuler-rpm-config


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-33
changelog:
  - Type:CVE
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
  24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
  25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
  -0678,CVE-2025-1125
  - SUG:NA
  - DESC:fix the vulnerabilities announced on February 18th, 2025


author: Funda Wang <fundawang@yeah.net> - 1:2.12-40
changelog:
  - requirement
  - CVE:NA
  - SUG:NA
  - DESC: Disable the .package_note awfulness
  - DESC: drop duplicate list of locale files


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.20.3-3
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47599,CVE-2024-47613,CVE-2024-47775
    CVE-2024-47776,CVE-2024-47777,CVE-2024-47778,CVE-2024-47774
    CVE-2024-47540,CVE-2024-47602,CVE-2024-47601,CVE-2024-47603
    CVE-2024-47834,CVE-2024-47537,CVE-2024-47597,CVE-2024-47543
    CVE-2024-47596,CVE-2024-47539,CVE-2024-47546,CVE-2024-47598


author: xinghe <xinghe2@h-partners.com> - 2.6.6-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:backport to fix potential coredump:
         errors: handle malloc failure in usermsgs_put
         ssl_sock: add check for ha_meth
         thread: add a check for pthread_creat


author: xinghe <xinghe2@h-partners.com> - 2.9.5-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: xinghe <xinghe2@h-partners.com> - 2.9.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yanglu <yanglu72@h-partners.com> - 2.9.5-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:queues:Do not use pendconn_grab_from_px
         queues:Make sure we call process_srv_queue when leaving
         queue:Make process_srv_queue return the number of streams


author: chengyechun <chengyechun1@huawei.com> - 2.4.55-5
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802, CVE-2023-43622
  - SUG:NA
  - DESC:fix CVE-2023-31122 and CVE-2023-45802 and CVE-2023-43622


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.58-2
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: zhangyaqi <zhagnyaqi@kylinos.cn> - 2.4.58-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:allocate a heap buffer if the configured size is greater than the stack-allocated buffer.


author: chengyechun <chengyechun1@huawei.com> - 2.4.58-6
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: xingwei <xingwei14@h-partners.com> - 2.4.58-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 50.0-10
changelog:
  - Type: requirement
  - ID: NA
  - SUG: NA
  - DESC: Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: Funda Wang <fundawang@yeah.net> - 50.0-14
changelog:
  - adopt to new cmake macro
  - migrated to SPDX license
  - drop useless setup macro, cause it duplicates with autosetup
  - drop useless ldconfig_scriptlets, it has been done through glibc's
    filetriggers since openeuler 1.0


author: Xinghai Cen <cenxinghai@h-partners.com> - 50.0-17
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Fix coredump during QP destruction when send_cq == recv_cq


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:6.1.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix testsuite build failure and delete libcap-devel dependency


author: xinghe <xinghe2@h-partners.com> - 1:6.6.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc
         remove redundant patches


author: yanglu <yanglu72@h-partners.com> - 1.8.9-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ebtables translate Print flush command after parsing is finished
         fix crash when opts isn't reallocated
         Fix handling of non-existent chains
         nft: Special casing for among match in compare_matches
         extensions: libipt_icmp: Fix confusion between 255/255 and any
         Revert libiptc: fix wrong maptype of base chain counters on restore
         extensions: Fix checking of conntrack --ctproto 0
         libxtables: xtoptions: Fix for non-CIDR-compatible hostmasks
         libxtables: xtoptions: Prevent XTOPT_PUT with XTTYPE_HOSTMASK
         libiptc: Fix for another segfault due to chain index NULL pointer


