# changelog

author: wangkai <13474090681@163.com> - 1.4.3.36-1
changelog:
  - Update to 1.4.3.36
  - Fix dsidm user/posixgroup get_dn fails with search_ext()
  - Fix unable to add objectclass/attribute without x-origin
  - Fix execute dsconf to open pdb


author: wangkai <13474090681@163.com> - 1.4.3.36-8
changelog:
  - Fix dsidm role subtree-status fails with TypeError
  - Fix name cockpit_present is not defined.
  - Fix typo
  - Fix DirSrv has no attribute userid


author: yaoxin <yao_xin001@hoperun.com> - 2.12.0-1
changelog:
  - Update to 2.12.0
  - Bootloader Images:
      * remove unused plat_try_next_boot_source
  - Architecture:
      *Branch Record Buffer Extension (FEAT_BRBE)
      * allow RME builds with BRBE
  - Arm:
      * avoid stripping kernel trampoline
      * add DRAM memory regions that linux kernel can share
      * add optee specific mem-size attribute
      * add secure uart interrupt in device region
      * enable FEAT_MTE2
      * fix the FF-A optee manifest by adding the boot info node
      * update the memory size allocated to optee at EL1
  - Intel:
      * add cache invalidation during BL31 initialization
      * add in JTAG ID for Linux FCS
      * add in missing ECC register
      * add in watchdog for QSPI driver
      * bridge ack timing issue causing fpga config hung
      * correct macro naming
      * f2sdram bridge quick write thru failed
      * fix bridge enable and disable function
      * fix CCU for cache maintenance
      * flush L1/L2/L3/Sys cache before HPS cold reset
      * implement soc and lwsoc bridge control for burst speed
      * refactor SDMMC driver for Altera products
      * remove redundant BIT_32 macro
      * software workaround for bridge timeout
      * update Agilex5 BL2 init flow and other misc changes
      * update Agilex5 warm reset subroutines
      * update all the platforms hand-off data offset value
      * update CCU configuration for Agilex5 platform
      * update mailbox SDM printout message
      * update memcpy to memcpy_s ([e264b55]
      * update outdated code for Linux direct boot
      * update preloaded_bl33_base for legacy product
      * update sip smc config addr for agilex5
      * update the size with addition 0x8000 0000 base


author: zhanghao <zhanghao383@huawei.com> - 32:9.16.23-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Don't perform arithmetic on NULL pointers
  Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
  Fix a use-after-free bug in dns_zonemgr_releasezone()
  Fix dns_fwdtable_addfwd() error path cleanup bug
  Detach the views in zone_shutdown(), not in zone_free()
  Detach the zone views outside of the zone lock
  delay trust anchor management until zones are loaded
  In hmac_createctx free ctx on isc_hmac_init failure
  Fix dns_kasp_attach / dns_kasp_detach usage
  Fix backport error in 84929d1c
  Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
  Searching catzs->zones requires a read lock
  Fix view's zones reverting bug during reconfiguration


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-21
changelog:
  - Type:CVE
  - CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-23
changelog:
  - Type:CVE
  - CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
  - SUG:NA
  - DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-25
changelog:
  - Type:CVE
  - CVE:CVE-2024-1737
  - SUG:NA
  - DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
         The default value both of max-records-per-type and max-types-per-name is 5000


author: yeqinglong <yeqinglong@kylinsec.com.cn> - 2.37-24
changelog:
  - DESC:Add sw_64 support
  - DESC:Add LoongArch support
  - DESC:Fix LoongArch PLT entry generate bug
  - DESC:Add .equ support for LoongArch and fix some bugs


author: Funda Wang <fundawang@yeah.net> - 2.37-31
changelog:
  - Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying
    symbols without version info.
  - Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes


author: Li Nan <linan122@huawei.com> - 5.10.0-244.0.0.143
changelog:
  - !14314  x86/sgx: Fix deadlock in SGX NUMA node search
  - !14315  media: v4l2-tpg: prevent the risk of a division by zero
  - !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
  - !14289 v2  erofs: add ondemand mode support
  - !14269  iomap: fix zero padding data issue in concurrent append writes
  - !14235  xfs: fix attr inactive issue
  - !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
  - !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
  - !14330  mm/khugepaged: fix ->anon_vma race
  - !14305  RDMA/hns: Some patches are integrated into OLK-5.10
  - !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  - ocfs2: free inode when ocfs2_get_init_inode() fails
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  - mm: avoid unconditional one-tick sleep when swapcache_prepare fails
  - mm/khugepaged: fix ->anon_vma race
  - !13006  Fix CVE-2024-50086
  - !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
  - !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
  - media: v4l2-tpg: prevent the risk of a division by zero
  - x86/sgx: Fix deadlock in SGX NUMA node search
  - printk: Fix the qspinlock deadloop caused by zap_locks()
  - RDMA/hns: Don't query *except on hip10*
  - RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
  - RDMA/hns: Fix bonding failure due to wrong reset_state
  - config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
  - IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
  - !14208 Fix perf coredump and refcnt inccoret
  - cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
  - fscache: modify fscache_hash_cookie() to enhance security
  - cachefiles: prefault in user pages to aovid ABBA deadlock
  - fscache/cachefiles: add a memory barrier for page_write
  - fscache/cachefiles: add a memory barrier for waking and waiting
  - fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
  - wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
  - s390: provide arch_test_bit_acquire() for architecture s390
  - wait_on_bit: add an acquire memory barrier
  - erofs: unify anonymous inodes for blob
  - erofs: remove unused device mapping in meta routine
  - fscache: fix assertion failure in cachefiles_put_object()
  - cachefiles: cyclic allocation of msg_id to avoid reuse
  - fscache: fix op leak due to abort init after parent ready
  - cachefiles: Set object to close if ondemand_id < 0 in copen
  - erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
  - cachefiles: Change the mark inactive sequence in erofs ondemand mode
  - cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
  - cachefiles: Add restrictions to cachefiles_daemon_cull()
  - cachefiles: disallow to complete open requests with uninitialised ondemand_id
  - cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
  - fscache: Add the unhash_cookie mechanism to fscache_drop_object()
  - cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
  - cachefiles: Fix cookie reference count leakage error
  - cachefiles: Restrict monitor calls to read_page
  - cachefiles: flush all requests after setting CACHEFILES_DEAD
  - fscache: set the default value of object_max_active to 256
  - cachefiles: Fix NULL pointer dereference in object->file
  - cachefiles: make on-demand read killable
  - cachefiles: never get a new anon fd if ondemand_id is valid
  - cachefiles: add spin_lock for cachefiles_ondemand_info
  - cachefiles: flush ondemand_object_worker during clean object
  - fscache: limit fscache_object_max_active to avoid blocking
  - cachefiles: flush all requests for the object that is being dropped
  - cachefiles: stop sending new request when dropping object
  - cachefiles: add consistency check for copen/cread
  - cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
  - cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
  - cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
  - cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
  - fscache: Fix trace UAF in fscache_cookie_put()
  - erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
  - cachefiles: use mainline xattr in ondemand mode
  - fscache: rename new_location to new_version
  - erofs: switch to use new location
  - erofs: remove erofs_fscache_netfs
  - cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
  - cachefiles: use key_hash as csum for new location
  - cachefiles: skip volum csum cachefiles_cook_key() for new location
  - cachefiles: skip acc in cachefiles_cook_key() for new location
  - cachefiles: use volume key directly in cachefiles_cook_key() for new location
  - cachefiles: factor out helper to generate csum from cachefiles_cook_key()
  - cachefiles: factor out helper to generate acc from cachefiles_cook_key()
  - fscache: generate new key_hash for new location
  - fscache: add new helper to determine cachefile location
  - fscache: add a waiting mechanism when duplicate cookies are detected
  - erofs: maintain cookies of share domain in self-contained list
  - fscache: fix kernel BUG at __fscache_read_or_alloc_page
  - erofs: fix handling kern_mount() failure
  - erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
  - erofs: check the uniqueness of fsid in shared domain in advance
  - fscache: fix assertion failure in fscache_put_object()
  - fscache: fix reference count leakage during abort init
  - cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
  - erofs: relinquish volume with mutex held
  - erofs: add erofs_ondemand switch
  - erofs: add erofs switch to better control it
  - erofs: fix page unlock advance during readahead
  - openeuler_defconfig: enable erofs ondemand for x86 and arm64
  - anolis: cachefiles: fix potential NULL in error path
  - anolis: cachefiles: add missing lock protection when polling
  - anolis: cachefiles: reset object->private to NULL when it's freed
  - anolis: cachefiles: add restore command to recover inflight ondemand read requests
  - anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
  - anolis: cachefiles: resend an open request if the read request's object is closed
  - anolis: cachefiles: extract ondemand info field from cachefiles_object
  - anolis: cachefiles: introduce object ondemand state
  - anolis: fscache: export fscache_object_wq
  - anolis: cachefiles: optimize on-demand IO path with buffer IO
  - erofs: remove unused EROFS_GET_BLOCKS_RAW flag
  - erofs: fix use-after-free of fsid and domain_id string
  - erofs: protect s_inodes with s_inode_list_lock for fscache
  - erofs: introduce 'domain_id' mount option
  - erofs: Support sharing cookies in the same domain
  - erofs: introduce a pseudo mnt to manage shared cookies
  - erofs: introduce fscache-based domain
  - erofs: code clean up for fscache
  - anolis: erofs: implement fscache-based data readahead
  - anolis: fscache,cachefiles: add fscache_prepare_read() helper
  - anolis: cachefiles: maintain a file descriptor to the backing file
  - erofs: leave compressed inodes unsupported in fscache mode for now
  - anolis: erofs: fix the name of erofs_fscache_super_index_def
  - erofs: use kill_anon_super() to kill super in fscache mode
  - erofs: scan devices from device table
  - erofs: add 'fsid' mount option
  - erofs: implement fscache-based data read for inline layout
  - erofs: implement fscache-based data read for non-inline layout
  - erofs: implement fscache-based metadata read
  - erofs: register fscache context for extra data blobs
  - erofs: register fscache context for primary data blob
  - erofs: add anonymous inode caching metadata for data blobs
  - erofs: add fscache context helper functions
  - erofs: register fscache volume
  - erofs: add fscache mode check helper
  - erofs: make erofs_map_blocks() generally available
  - cachefiles: make on-demand request distribution fairer
  - anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
  - cachefiles: fix error return code in cachefiles_ondemand_copen()
  - anolis: cachefiles: fix volume key setup for cachefiles_open
  - anolis: cachefiles: replace BUG_ON() with WARN_ON()
  - cachefiles: narrow the scope of flushed requests when releasing fd
  - anolis: cachefiles: skip check for n_children in on-demand mode
  - cachefiles: enable on-demand read mode
  - cachefiles: implement on-demand read
  - cachefiles: notify the user daemon when withdrawing cookie
  - cachefiles: unbind cachefiles gracefully in on-demand mode
  - cachefiles: notify the user daemon when looking up cookie
  - erofs: fix misbehavior of unsupported chunk format check
  - erofs: use meta buffers for erofs_read_superblock()
  - erofs: use meta buffers for zmap operations
  - erofs: use meta buffers for xattr operations
  - erofs: use meta buffers for super operations
  - erofs: use meta buffers for inode operations
  - erofs: introduce meta buffer operations
  - erofs: clean up erofs_map_blocks tracepoints
  - erofs: add multiple device support
  - erofs: decouple basic mount options from fs_context
  - erofs: introduce erofs_sb_has_xxx() helpers
  - erofs: fix double free of 'copied'
  - erofs: support reading chunk-based uncompressed files
  - erofs: introduce chunk-based file on-disk format
  - erofs: clean up file headers & footers
  - erofs: don't use erofs_map_blocks() any more
  - [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
  - [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
  - [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
  - [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
  - [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
  - [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
  - [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
  - [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
  - [Backport]scsi: hisi_sas: Add firmware information check
  - [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
  - [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
  - iomap: fix zero padding data issue in concurrent append writes
  - xfs: handle attr node/leaf blocks atomically during inactive
  - xfs: factor out xfs_attr3_leaf_init
  - xfs: factor out xfs_da3_node_entry_remove
  - perf addr_location: Add init/exit/copy functions
  - perf maps: Use a pointer for kmaps
  - ksmbd: fix user-after-free from session log off
  - ksmbd: fix race condition between session lookup and expire


author: Li Nan <linan122@huawei.com> - 5.10.0-245.0.0.144
changelog:
  - !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  - !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  - !14679  drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
  - !14572  PCI: Fix use-after-free of slot->bus on hot remove
  - !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
  - !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  - !14777  tracing: Prevent bad count for tracing_cpumask_write
  - !14496  ovl: Filter invalid inodes with missing lookup function
  - !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  - !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  - !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  - !14606  scsi: qla2xxx: Fix use after free on unload
  - !14579  io_uring: check for overflows in io_pin_pages
  - !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
  - !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
  - !14734  Fix iBMA bug and change version
  - !14713  Fix CVE-2024-56705
  - tracing: Prevent bad count for tracing_cpumask_write
  - !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  - !14601  nvme-pci: fix freeing of the HMB descriptor table
  - !14575  etmem: fix use-after-free of mm in the scan release process
  - !14381  virtiofs: use pages instead of pointer for kernel direct IO
  - !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  - !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
  - !14651  backport mainline bugfix patch
  - media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
  - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  - !14629  net/mlx5: Fix error path in multi-packet WQE transmit
  - !14627  crypto: hisilicon/qm - inject error before stopping queue
  - !14626  drm/amd/display: Check null pointers before using dc->clk_mgr
  - !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
  - !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  - !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
  - BMA: Fix Oops and spin lock deadlock problem, and change the version number.
  - !14700  CVE-2024-53158
  - !14457  cgroup: Fix potential overflow issue when checking max_depth
  - !14620  drm: zynqmp_kms: Unplug DRM device before removal
  - !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
  - media: atomisp: Add check for rgby_data memory allocation failure
  - media: atomisp: remove #ifdef HAS_NO_HMEM
  - !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
  - !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
  - !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  - bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
  - !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
  - !14535  RDMA/mlx5: Move events notifier registration to be after device registration
  - !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
  - !14636  CVE-2024-56604_OLK-5.10
  - !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
  - !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - !14523  The bugfix for LPM trie
  - !14650  memcg: fix soft lockup in the OOM process
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  - !14436  crypto: bcm - add error check in the ahash_hmac_init function
  - genirq/msi: Fix off-by-one error in msi_domain_alloc()
  - memcg: fix soft lockup in the OOM process
  - !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
  - !14467  io_uring/tctx: work around xa_store() allocation error issue
  - !14503  net: phy: dp83869: fix memory corruption when enabling fiber
  - !14515  hfsplus: don't query the device logical block size multiple times
  - !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
  - !14388  CVE-2024-53173
  - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
  - Bluetooth: Consolidate code around sk_alloc into a helper function
  - net/mlx5: Fix error path in multi-packet WQE transmit
  - crypto: hisilicon/qm - inject error before stopping queue
  - drm/amd/display: Check null pointers before using dc->clk_mgr
  - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
  - drm: zynqmp_kms: Unplug DRM device before removal
  - scsi: sg: Fix slab-use-after-free read in sg_release()
  - scsi: qla2xxx: Fix use after free on unload
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  - nvme-pci: fix freeing of the HMB descriptor table
  - blk-cgroup: Fix UAF in blkcg_unpin_online()
  - io_uring: check for overflows in io_pin_pages
  - etmem: fix use-after-free of mm in the scan release process
  - PCI: Fix use-after-free of slot->bus on hot remove
  - f2fs: fix to do sanity check on node blkaddr in truncate_node()
  - !14366  EDAC/bluefield: Fix potential integer overflow
  - media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - RDMA/mlx5: Move events notifier registration to be after device registration
  - sched/deadline: Fix warning in migrate_enable for boosted tasks
  - drm/amdgpu: set the right AMDGPU sg segment limitation
  - !14380  io_uring: check if iowq is killed before queuing
  - !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
  - !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
  - bpf: Handle in-place update for full LPM trie correctly
  - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
  - !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  - hfsplus: don't query the device logical block size multiple times
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
  - !14371 [OLK-5.10] update AMD Zen5 Turin feature
  - net: phy: dp83869: fix memory corruption when enabling fiber
  - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  - ovl: Filter invalid inodes with missing lookup function
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  - jfs: fix array-index-out-of-bounds in jfs_readdir
  - smb: client: fix NULL ptr deref in crypto_aead_setkey()
  - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  - io_uring/tctx: work around xa_store() allocation error issue
  - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - cgroup: Fix potential overflow issue when checking max_depth
  - f2fs: fix race in concurrent f2fs_stop_gc_thread
  - apparmor: test: Fix memory leak for aa_unpack_strdup()
  - !14409  bpf: fix OOB devmap writes when deleting elements
  - !14419  HID: wacom: fix when get product name maybe null pointer
  - sh: intc: Fix use-after-free bug in register_intc_controller()
  - crypto: bcm - add error check in the ahash_hmac_init function
  - !14268  Revert "unicode: Don't special case ignorable code points"
  - !14397  backport some patches from upstream about HCCS low power
  - !14392  arm64: stacktrace: Handle 'lr' in interrupt context
  - !14317  exfat: fix out-of-bounds access of directory entries
  - !14402  gpio: grgpio: Add NULL check in grgpio_probe
  - !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  - !14363  CVE-2024-53217
  - HID: wacom: fix when get product name maybe null pointer
  - !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
  - !14407  NFSD: Prevent a potential integer overflow
  - !14378  ftrace: Fix regression with module command in stack_trace_filter
  - bpf: fix OOB devmap writes when deleting elements
  - !14375  fix CVE-2024-53197
  - NFSD: Prevent a potential integer overflow
  - gpio: grgpio: Add NULL check in grgpio_probe
  - soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
  - soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
  - soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
  - soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
  - soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
  - soc: hisilicon: kunpeng_hccs: Fix a PCC typo
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  - arm64: stacktrace: Handle 'lr' in interrupt context
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open()
  - NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
  - Revert "NFSv4: release seqid when open failed for nfs4.0"
  - Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
  - virtiofs: use pages instead of pointer for kernel direct IO
  - io_uring: check if iowq is killed before queuing
  - ftrace: Fix regression with module command in stack_trace_filter
  - ALSA: usb-audio: Fix a DMA to stack memory bug
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
  - x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
  - x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
  - EDAC/bluefield: Fix potential integer overflow
  - nfsd: restore callback functionality for NFSv4.0
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
  - btrfs: ref-verify: fix use-after-free after invalid ref action
  - jfs: array-index-out-of-bounds fix in dtReadFirst
  - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  - exfat: fix out-of-bounds access of directory entries
  - Revert "unicode: Don't special case ignorable code points"
  - gpiolib: fix memory use-after-free in gpiochip_setup_dev()
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans


author: Li Nan <linan122@huawei.com> - 5.10.0-246.0.0.145
changelog:
  - !14844  merge mainline patch into OLK-5.10
  - !14838 v2  fs: Filter specific inodes to prevent UAF issues
  - fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
  - mm: kfence: fix using kfence_metadata without initialization in show_object()
  - x86/mm: Do not shuffle CPU entry areas without KASLR
  - fs: Filter specific inodes to prevent UAF issues
  - !14599  CVE-2024-56701
  - !14560  CVE-2024-56567
  - !14801  CVE-2024-53237
  - !14793  jfs: fix shift-out-of-bounds in dbSplit
  - !14815  OLK-5.10
  - !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  - !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
  - !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  - !14822  ALSA: 6fire: Release resources at card release
  - !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
  - ALSA: 6fire: Release resources at card release
  - RDMA/hns: Fix missing flush CQE for DWQE
  - RDMA/hns: Fix warning storm caused by invalid input in IO path
  - RDMA/hns: Fix mapping error of zero-hop WQE buffer
  - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
  - !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  - !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  - driver core: Introduce device_find_any_child() helper
  - Bluetooth: fix use-after-free in device_for_each_child()
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  - jfs: fix shift-out-of-bounds in dbSplit
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
  - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
  - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  - ad7780: fix division by zero in ad7780_write_raw()


author: Li Nan <linan122@huawei.com> - 5.10.0-247.0.0.146
changelog:
  - !14414 sdma-dae: add print in exceptional branch
  - !14870  quota: flush quota_release_work upon quota writeback
  - !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
  - !14866  NFS: Fix up nfs_ctx_key_to_expire()
  - !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
  - !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
  - !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  - quota: flush quota_release_work upon quota writeback
  - !14663  xsk: Add generic xdp multi-buffer send support
  - NFS: Fix up nfs_ctx_key_to_expire()
  - !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
  - !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
  - !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
  - !14857  sched: psi: fix bogus pressure spikes from aggregation race
  - sched: psi: fix bogus pressure spikes from aggregation race
  - btrfs: check folio mapping after unlock in relocate_one_folio()
  - drm/i915/hdcp: Add encoder check in hdcp2_get_capability
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
  - net: hsr: avoid potential out-of-bound access in fill_frame_info()
  - xsk: Add generic xdp multi-buffer send support
  - drivers:misc:sdma-dae: add print in exceptional branch


author: Li Nan <linan122@huawei.com> - 5.10.0-248.0.0.147
changelog:
  - !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
  - mm/compaction: fix UBSAN shift-out-of-bounds warning
  - !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
  - !14875  *** jffs2: Prevent rtime decompress memory corruption ***
  - !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
  - !14937 v2  Two CVE fixes for ksmbd
  - !14966  memcg: fix memcg_swapmax_read() not declared warning
  - memcg: fix memcg_swapmax_read() not declared warning
  - RDMA/hns: Check atomic wr length
  - Revert "RDMA/hns: Fix a missing check of atomic wr length"
  - Revert "RDMA/hns: Check atomic wr length"
  - !14943  fix CVE-2024-57892
  - !14954  zram: fix NULL pointer in comp_algorithm_show()
  - !14948 Mainline patch to olk-5.10 v3
  - zram: fix NULL pointer in comp_algorithm_show()
  - !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
  - !14947  mm/slub: Reduce memory consumption in extreme scenarios
  - RDMA/hns: Fix different dgids mapping to the same dip_idx
  - Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
  - RDMA/hns: Fix flush cqe error when racing with destroy qp
  - Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
  - mm/slub: Reduce memory consumption in extreme scenarios
  - !14917  merge CVE patches into OLK-5.10
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
  - ocfs2: correct return value of ocfs2_local_free_info()
  - ksmbd: fix potencial out-of-bounds when buffer offset is invalid
  - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
  - net: wangxun: change netdev uc addr num maxmium
  - net: wangxun: fix resolving ipv6 pakets extension header errors
  - net: wangxun: fix tx csum by soft except tcp udp sctp
  - drm/i915: Fix potential context UAFs
  - arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
  - arm64: probes: Fix uprobes for big-endian kernels
  - arm64:uprobe fix the uprobe SWBP_INSN in big-endian
  - dm cache: fix flushing uninitialized delayed_work on cache_ctr error
  - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
  - kcsan: Turn report_filterlist_lock into a raw_spinlock
  - media: uvcvideo: Require entities to have a non-zero unique ID
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
  - um: net: Do not use drvdata in release
  - xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
  - 9p/xen: fix release of IRQ
  - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
  - fbdev/sh7760fb: Alloc DMA memory from hardware device
  - ionic: Fix netdev notifier unregister on failure
  - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
  - jffs2: Fix rtime decompressor
  - jffs2: Prevent rtime decompress memory corruption


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-248.0.0.148
changelog:
  - kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel


author: Li Nan <linan122@huawei.com> - 5.10.0-249.0.0.152
changelog:
  - !15061  ALSA: seq: oss: Fix races at processing SysEx messages
  - ALSA: seq: oss: Fix races at processing SysEx messages
  - !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
  - !15059  RDMA/hns: Fix free_mr_qp not assigning qp->device in error flow
  - RDMA/hns: Fix free_mr_qp not assigning qp->device in error flow
  - !15051  iio: light: vcnl4035: fix information leak in triggered buffer
  - !9883 AMD QoS new features BMEC and SMBA
  - iio: light: vcnl4035: fix information leak in triggered buffer
  - !14956  nbd: don't allow reconnect after disconnect
  - !15046  pinmux: Use sequential access to access desc->pinmux data
  - !15015  spi: mpc52xx: Add cancel_work_sync before module remove
  - !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
  - [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
  - pinmux: Use sequential access to access desc->pinmux data
  - !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
  - !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
  - !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
  - !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
  - !15014 v2  nilfs2: prevent use of deleted inode
  - drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
  - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
  - !15010  nvme-rdma: unquiesce admin_q before destroy it
  - spi: mpc52xx: Add cancel_work_sync before module remove
  - nilfs2: prevent use of deleted inode
  - nvme-rdma: unquiesce admin_q before destroy it
  - usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
  - tools headers cpufeatures: Sync with the kernel sources
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - x86/resctrl: Read supported bandwidth sources from CPUID
  - x86/resctrl: Remove redundant variable in mbm_config_write_domain()
  - x86/resctrl: Add per-rmid arch private storage for overflow and chunks
  - x86/resctrl: Group struct rdt_hw_domain cleanup
  - x86/resctrl: Add domain online callback for resctrl work
  - x86/resctrl: Merge mon_capable and mon_enabled
  - x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
  - x86/resctrl: Split struct rdt_domain
  - x86/resctrl: Add interface to write mbm_local_bytes_config
  - x86/resctrl: Add interface to write mbm_total_bytes_config
  - x86/resctrl: Add interface to read mbm_local_bytes_config
  - x86/resctrl: Add interface to read mbm_total_bytes_config
  - x86/resctrl: Support monitor configuration
  - x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
  - x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
  - x86/resctrl: Move MSR defines into msr-index.h
  - x86/resctrl: Include new features in command line options
  - x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
  - x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
  - x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
  - x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
  - x86/resctrl: Split struct rdt_resource
  - x86/resctrl: Fix kernel-doc in internal.h
  - x86/resctrl: Correct MBM total and local values
  - nbd: don't allow reconnect after disconnect
  - s390/cpum_sf: Handle CPU hotplug remove during sampling
  - fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference


author: Li Nan <linan122@huawei.com> - 5.10.0-250.0.0.154
changelog:
  - !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
  - !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
  - !15085  ila: call nf_unregister_net_hooks() sooner
  - !15100  ila: serialize calls to nf_register_net_hooks()
  - !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
  - !15096  net: inet: do not leave a dangling sk pointer in inet_create()
  - !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
  - !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
  - !15086  net: Fix CVE-2024-50125
  - !15117 v3  net: Fix CVE-2024-56658
  - !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
  - !15124 v2  fix CVE-2024-53056 for olk-5.10
  - !15129  comedi: Flush partial mappings in error case
  - !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
  - comedi: Flush partial mappings in error case
  - iomap: avoid avoid truncating 64-bit offset to 32 bits
  - mm: resolve faulty mmap_region() error path behaviour
  - mm: unconditionally close VMAs on error
  - mm: avoid unsafe VMA hook invocation when error arises on mmap hook
  - !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
  - !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
  - net: Fix kabi breakage in struct net
  - net: defer final 'struct net' free in netns dismantle
  - ila: serialize calls to nf_register_net_hooks()
  - sched: sch_cake: add bounds checks to host bulk flow fairness counts
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX
  - net: inet6: do not leave a dangling sk pointer in inet6_create()
  - net: inet: do not leave a dangling sk pointer in inet_create()
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
  - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
  - netfilter: ipset: add missing range check in bitmap_ip_uadt
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout
  - Bluetooth: call sock_hold earlier in sco_conn_del
  - ila: call nf_unregister_net_hooks() sooner
  - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
  - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error


author: Li Nan <linan122@huawei.com> - 5.10.0-251.0.0.155
changelog:
  - !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
  - !15137  net/mlx5: Fix variable not being completed when function returns
  - !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
  - !15134  usb: typec: altmode should keep reference to parent
  - !15198  CVE-2024-57857
  - !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
  - !15199  power: supply: gpio-charger: Fix set charge current limits
  - power: supply: gpio-charger: Fix set charge current limits
  - RDMA/siw: Remove direct link to net_device
  - RDMA/siw: Fabricate a GID on tun and loopback devices
  - RDMA/siw: Use helper function to set sys_image_guid
  - RDMA/siw: Enable siw on tunnel devices
  - iio: pressure: zpa2326: fix information leak in triggered buffer
  - !15186  CVE-2024-57795
  - !15177  iio: imu: kmx61: fix information leak in triggered buffer
  - RDMA/rxe: Remove the direct link to net_device
  - RDMA: Export ib_device_get_netdev()
  - iio: imu: kmx61: fix information leak in triggered buffer
  - !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
  - KVM:arm64:Add a kvm parameter to control guest wfi trapping
  - !15139  apparmor: fix 'Do simple duplicate message elimination'
  - !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
  - !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
  - !15077  kasan: fix incorrect return type of quarantine_put()
  - Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
  - apparmor: fix 'Do simple duplicate message elimination'
  - net/mlx5: Fix variable not being completed when function returns
  - crypto: caam - Fix the pointer passed to caam_qi_shutdown()
  - usb: typec: altmode should keep reference to parent
  - netfilter: x_tables: fix LED ID check in led_tg_check()
  - kasan: fix incorrect return type of quarantine_put()
  - mm: Enhanced copy capabilities for Hygon processor


author: Li Nan <linan122@huawei.com> - 5.10.0-252.0.0.156
changelog:
  - !15293 ras: ACPI: HED: Always initialize before evged
  - !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
  - !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
  - ras: ACPI: HED: Always initialize before evged
  - EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
  - EDAC/skx_common: Differentiate memory error sources
  - EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
  - EDAC, i10nm: make skx_common.o a separate module
  - !15246  UBI/UBIFS mainline patch backport
  - !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
  - ubi: Add a check for ubi_num
  - ubifs: skip dumping tnc tree when zroot is null
  - !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
  - !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
  - EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
  - af_packet: avoid erroring out after sock_init_data() in packet_create()
  - perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU


author: Li Nan <linan122@huawei.com> - 5.10.0-253.0.0.157
changelog:
  - !15447  Some bug fix patches for RDMA/hns to olk-5.10
  - !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
  - RDMA/hns: Fix default congestion control algorithm not set for kernel QP
  - RDMA/hns: Fix udca not unregistered when reset entry allocation failed
  - RDMA/hns: Fix wrong value of max_sge_rd
  - RDMA/hns: Fix missing xa_destroy()
  - RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
  - RDMA/hns: Fix invalid sq params not being blocked
  - RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
  - RDMA/hns: Fix DCA error path in alloc_wqe_buf()
  - mailbox: pcc: Fix the possible race in updation of chan_in_use flag
  - !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
  - !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
  - !15300 net: hns3: some bugfixes for hns3 driver
  - !15300 net: hns3: some bugfixes for hns3 driver
  - !15422  ocfs2: handle a symlink read error correctly
  - !15426 Some bug fix patches for OLK-5.10 hns RoCE
  - !15426 Some bug fix patches for OLK-5.10 hns RoCE
  - !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
  - ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
  - RDMA/hns: Fix ifnullfree static warning
  - RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
  - RDMA/hns: Fix unmatched kmalloc and kvfree
  - RDMA/hns: Fix delay-destruction mechanism not processing kernel db
  - RDMA/hns: Fix delayed destruction of db not taking effect
  - RDMA/hns: Move mtr_node into the mtr struct
  - RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
  - net: hns3: add command queue trace for hns3
  - net: hns3: Revert "net: hns3: add command queue trace for hns3"
  - ocfs2: handle a symlink read error correctly
  - net: hns3: add mac tunnel number query
  - NFC: nci: Add bounds checking in nci_hci_create_pipe()
  - !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
  - !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
  - !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
  - !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
  - !15413  CVE-2025-21756
  - !15413  CVE-2025-21756
  - vsock: Orphan socket after transport release
  - vsock: Keep the binding until socket destruction
  - !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
  - !15295  netfilter: nf_set_pipapo: fix initial map fill
  - !15295  netfilter: nf_set_pipapo: fix initial map fill
  - ipmr: do not call mr_mfc_uses_dev() for unres entries
  - net: hns3: fix oops when unload drivers paralleling
  - !15382  srcu: Tighten cleanup_srcu_struct() GP checks
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
  - !15387  crypto: qat - add param check for DH
  - !15389  orangefs: fix a oob in orangefs_debug_write
  - !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
  - !15241 KVM: arm64: pvsched bugfix and module param
  - orangefs: fix a oob in orangefs_debug_write
  - crypto: qat - add param check for DH
  - !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
  - !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
  - !15217 Add device HID for Hygon GPIO controller
  - !15217 Add device HID for Hygon GPIO controller
  - srcu: Tighten cleanup_srcu_struct() GP checks
  - !15232  smb: client: Fix netns refcount imbalance
  - !15232  smb: client: Fix netns refcount imbalance
  - !15348  Mainline Patch
  - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
  - bpf: Use preempt_count() directly in bpf_send_signal_common()
  - bpf: Send signals asynchronously if !preemptible
  - KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
  - !15307  net: sfc: add missing xdp queue reinitialization
  - !15279 [OLK-5.10]:update patches for sw64 architecture
  - !15279 [OLK-5.10]:update patches for sw64 architecture
  - net: sfc: add missing xdp queue reinitialization
  - netfilter: nf_set_pipapo: fix initial map fill
  - sw64: pci: add new files to help support ACPI-based PCI initialization
  - sw64: acpi: disable INTC initialization via ACPI MADT table
  - sw64: pci: bypass legacy PCI initialization when ACPI enabled
  - sw64: acpi: use early param to control whether ACPI is enabled
  - sw64: acpi: disable all ACPI features by default
  - pci: let pcibios_root_bridge_prepare() access bridge->windows
  - sw64: fix kernel crash caused by unaligned access exception
  - sw64: iommu: adjust iova map space
  - sw64: msi: split the msi file
  - sw64: use generic dma_direct_ops
  - sw64: fix cpu reduction bug in cpuautoplug
  - sw64: use generated macro in vrt_sigreturn.S
  - sw64: do not allow assembler reorder in __copy_user()
  - sw64: expand vmemmap
  - sw64: iommu: fix dma_supported of dma_ops
  - sw64: add support for TIF_NOTIFY_SIGNAL
  - sw64: fix stack trace error
  - sw64: register suspend entry for cpu 0 only
  - sw64: do not discard exit text at link time
  - sw64: fix syscall restart
  - sw64: usb: redefine some macros
  - sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
  - sw64: fix syscall sigreturn and rt_sigreturn
  - sw64: optimize hmcall rdusp() and wrusp()
  - sw64: rewrite syscall invocation in C
  - sw64: expand struct pt_regs
  - sw64: kvm: delete kvm_sw64_ops structure
  - sw64: add imemb at the end of fixup_hmcall()
  - sw64: c3b: get MCLK rate dynamically according to specification
  - sw64: fix default short clock rate
  - sw64: use call and br in kernel entry
  - sw64: modify do_[rt_]sigreturn
  - sw64: modify fixup_exception()
  - sw64: rewrite struct pt_regs
  - sw64: simplify pt_regs related code
  - sw64: fix pt_regs related code
  - sw64: avoid using wrusp()
  - sw64: use sp in pt_regs
  - sw64: kvm: move bind vcpu init code into kvm_core3.c
  - sw64: add arch/sw_64/Kbuild
  - sw64: Kconfig: clean up out-of-date deep sleep options
  - sw64: Kconfig: rename BUILTIN_DTB option
  - sw64: optimize C4 compilation
  - sw64: kprobe: allow kprobe in atomic sequence on C4
  - sw64: lib: optimize lib functions for C4
  - sw64: optimize __fpstate_save on C4
  - sw64: add new match interface for C4
  - sw64: add C4 FPE_INTDIV support
  - sw64: update default FPCR value
  - sw64: defconfig: add junzhang_defconfig for C4 serials
  - sw64: add basic support for C4 ISA
  - sw64: use PAGE_OFFSET as ktext address head
  - sw64: dts: add an empty dts to support SW8A temporarily
  - sw64: kconfig: add SW8A platform support
  - sw64: kvm: rebuild Core3 and Core4 virtualization
  - sw64: kvm: add support for Core4 memory virtualization
  - sw64: kvm: add config guard for C3B implementation
  - sw64: kvm: add C4 vcpu support
  - sw64: iommu: add new iommu v2 support
  - sw64: pci: add C4 PCI_MSI support
  - sw64: pci: add C4 PCI support
  - sw64: irq: add basic C4 irq support
  - sw64: timer: add C4 timer support
  - sw64: unify io operations interface for C3B and C4
  - sw64: add SW8A io addresses
  - sw64: mm: add C4 hugetlb support
  - sw64: mm: add C4 MMU support
  - sw64: topology: add C4 topology info
  - sw64: add C4 CSRs
  - sw64: add C4 barriers support
  - sw64: add C4 xchg operations support
  - sw64: add C4 bit operations support
  - sw64: add C4 atomic operations support
  - sw64: redesign __cpu_to_rcid initialization
  - sw64: topology: modify topology defines
  - sw64: rename some fields of struct vcpucb
  - sw64: mm: use static ZERO_PAGE
  - sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
  - sw64: mm: add more helpers to pgtable.h
  - sw64: mm: fix _PFN_MASK
  - sw64: mm: add _PAGE_CONT helpers
  - sw64: pci: rename PCI_DEVICE_ID_CHIP3
  - sw64: mm: rename _PAGE_PHU and _PAGE_PSE
  - sw64: remove unused file
  - sw64: remove out-of-date LOCK_FIXUP
  - sw64: fix compile error when CONFIG_PM is not set
  - sw64: kconfig: fix config error when PCI_MSI is not set
  - sw64: cpufreq: fix clockevents update method
  - sw64: fix excessive timer interrupts
  - sw64: simplify PMC interfaces
  - sw64: remove sw64_platform_ops
  - sw64: remove chip directory
  - sw64: reorganize pci setup related code
  - sw64: reorganize chip setup code
  - sw64: reorganize msi related code
  - sw64: reorganize basic irq handling code
  - sw64: reorganize pci related quirks
  - sw64: reorganize usb quirks related code
  - sw64: reorganize i2c related code
  - sw64: reorganize timer related code
  - sw64: reorganize cpu frequency related code
  - i2c: designware: add parameter MODEL_SUNWAY
  - sw64: fix compile warnings
  - sw64: cleanup hugetlb code
  - sw64: drop fpga and simulator support
  - sw64: fix indent of inline assembly
  - sw64: fix header include guards
  - sw64: add missing fallthrough
  - sw64: add missing break
  - sw64: Kconfig: remove out-of-date rwsem options
  - sw64: fix frequency in cpufreq_frequency_table
  - sw64: fix incorrect hmcalls in the virtual machine
  - sw64: remove arch overridden RLIM_INFINITY
  - sw64: do not set __ARCH_SI_TRAPNO
  - sw64: remove C3A support
  - sw64: fix s4 sleep bug
  - sw64: reorganize dependency of devmap helpers
  - i2c: sunway: do some cleanup for old i2c driver
  - i2c: designware: add sunway system I2C support
  - sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
  - sw64: modify lock instruction
  - sw64: update openeuler_defconfig
  - sw64: add save_stack_trace_regs()
  - sw64: tools: fix selftests/sigaltstack for sw64
  - sw64: determine external clock according to specification
  - sw64: fix uretprobe implementation
  - sw64: fix some cpu autoplug bugs
  - sw64: kvm: add support for cpu offline and online in guest
  - fbdev: sw64 use __raw I/O memory api
  - sw64: correct the definition of MAX_DMA_ADDRESS
  - sw64: remove S3 flag
  - sw64: rename ptrace macros
  - sw64: fix audit_syscall_exit()
  - sw64: fix some include format
  - sw64: update cpufreq's info when cpu frequency changed
  - sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
  - sw64: selftests/ftrace: add sw64 support for kprobe args tests
  - sw64: hibernation: update ktp to vcpucb after restoring it
  - sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
  - sw64: kvm: fix memory hotplug support for guest
  - sw64: hugetlbfs: add arch_hugetlb_valid_size
  - sw64: kvm: fix some build errors for KVM module
  - sw64: perf: add libbfd-buildid and disassembler-four-args support
  - sw64: fix a compile error for headers_install
  - sw64: fix shared_cpu_map of tcache's cacheinfo
  - sw64: kvm: fix an error with non-8MB aligned guest RAM size
  - sw64: selftests/vm: fix virtual address range mapping test
  - sw64: fix KBUILD_DEFCONFIG
  - sw64: send a fake signal to all blocking tasks
  - sw64: clean up useless cpu_idle wrap
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free
  - smb: client: fix TCP timers deadlock after rmmod
  - x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
  - pinctrl: Add device HID for Hygon GPIO controller
  - block: fix kabi broken due to removing bip_slab
  - block: fix kabi broken
  - block: fix rq-qos breakage from skipping rq_qos_done_bio()
  - block: only mark bio as tracked if it really is tracked
  - block: add a BUILD_BUG_ON() for adding more bio flags than we have space
  - block: use bi_max_vecs to find the bvec pool
  - md/raid10: remove dead code in reshape_request
  - block: mark the bio as cloned in bio_iov_bvec_set
  - block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
  - block: remove the 1 and 4 vec bvec_slabs entries
  - block: streamline bvec_alloc
  - block: factor out a bvec_alloc_gfp helper
  - block: move struct biovec_slab to bio.c
  - block: reuse BIO_INLINE_VECS for integrity bvecs


author: Li Nan <linan122@huawei.com> - 5.10.0-254.0.0.158
changelog:
  - !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
  - !15456  soc: hisilicon: Fix one printing issue and simplify some printing
  - !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
  - soc: hisilicon: Add checks against NULL pointer reference
  - soc: hisilicon: Fix one printing issue and simplify some printing
  - !15391  backport mainline bugfix patch
  - RDMA/hns: Fix mbox timing out by adding retry mechanism
  - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
  - genirq: Make handle_enforce_irqctx() unconditionally available


author: Li Nan <linan122@huawei.com> - 5.10.0-256.0.0.159
changelog:
  - !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
  - !15606  Fix instance dir use-after-free in tracefs
  - !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
  - tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
  - tracing: Avoid use-after-free in tracing_open_file_tr()
  - !15591 【olk 5.10】revert and backport a bugfix
  - net: hns3: add mac tunnel number query
  - Revert "net: hns3: add mac tunnel number query"
  - !15501  module: fix [e_shstrndx
  - !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
  - !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
  - module: fix [e_shstrndx].sh_size=0 OOB access
  - !2893 igc: add default intel igc driver module support
  - bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
  - x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
  - x86/cpu: Add model number for Intel Clearwater Forest processor
  - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
  - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
  - igc:add default intel igc driver support


author: Li Nan <linan122@huawei.com> - 5.10.0-257.0.0.160
changelog:
  - !15643 drivers:misc:sdma-dae: sync code to openEuler
  - drivers:misc:sdma-dae: remove unnecessary return in void function
  - drivers:misc:sdma-dae fix incorrect resource release
  - drivers:misc:sdma-dae remove lock while pausing channels
  - drivers:misc:sdma-dae add mmu_notifier
  - drivers:misc:sdma-dae: add MODULE_VERSION to control version


author: Li Nan <linan122@huawei.com> - 5.10.0-258.0.0.161
changelog:
  - !15699  Push 2 self-developed patches to OLK-5.10
  - !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
  - !15669  arm64: mm: add mc support for __buffer_migrate_page
  - !15630  Fix CVE-2022-49553
  - !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
  - printk: Skip log flush in NMI context when logbuf_lock is held
  - x86: reboot: Initialize the printk locks to avoid deadlock
  - !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
  - !15646  nilfs2: do not force clear folio if buffer is referenced
  - !15676  sched/fair: Optimize the dynamic smt
  - !15330 [OLK-5.10]:update patches for sw64 architecture
  - sched/fair: Optimize the dynamic smt
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
  - arm64: mm: add mc support for __buffer_migrate_page
  - !15595  io_uring: prevent opcode speculation
  - nilfs2: do not force clear folio if buffer is referenced
  - fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
  - fs/ntfs3: validate BOOT sectors_per_clusters
  - fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
  - io_uring: prevent opcode speculation
  - sw64: distribute intx interrupts by hose
  - sw64: kvm: use generic kvm mmu memory caches
  - sw64: fix msi interrupt for guest os
  - sw64: acpi: remove constraint that cid of boot core must be zero
  - sw64: pci: get register base address from firmware
  - sw64: fix compile warning of do_entUna()
  - sw64: fix save_ktp compatibility for C3
  - sw64: fix PTBR save/restore for hibernation
  - sw64: kvm: remove some unused codes
  - sw64: add syscall pfh_ops
  - sw64: fix broken rdfpcr()
  - sw64: force kernel stack to be 16 bytes aligned
  - sw64: match platform device by acpi method
  - sw64: iommu: support acpi init
  - sw64: spi: update spi controller driver
  - sw64: irqchip: fix compatibility with old dts
  - sw64: kvm: fix pmd_trans_cont
  - sw64: add -fno-sw-unalign-byte to cflags for C4
  - sw64: define cpu_relax() as imb()
  - sw64: kvm: fix size of struct kvm_regs for C3B
  - sw64: fix the .endm in hibernate_asm.S
  - sw64: fix compile error of efi.systab
  - sw64: pci: adjust the maximum number of RC per node
  - sw64: get mclk and external clk from firmware
  - sw64: fix compile error of MMSIZE
  - sw64: acpi: disable ACPI for xuelang
  - sw64: ahci: disable parallel bus scan
  - sw64: redesign run mode setup method
  - sw64: rename static key and related simd libraries
  - sw64: fix secondary cpu bring up bug
  - sw64: acpi: fix coding style and typos
  - sw64: irq: fix compilation error
  - sw64: improve the verification logic of DTB
  - sw64: kvm: add the member of the vcpucb structure
  - sw64: kvm: fix the check for THP
  - sw64: kvm: fix page walk error of unmap_apt_range()
  - sw64: apply new boot params from DTB chosen node
  - sw64: receive new boot params from firmware
  - sw64: setup stackframe at kernel entry point
  - sw64: save and restore CSR_WR_FREGS for SIMD libs
  - sw64: rename copy and set lib functions
  - sw64: rename copy and set lib files
  - sw64: choose lib at compile time
  - sw64: perf: add core4 pmu support
  - sw64: redesign struct kvm_regs for C4
  - sw64: store topology and numa info by each cpu itself
  - sw64: kvm: fix live migration bug
  - sw64: kvm: fix APT fault handler
  - sw64: work around suspend for C4
  - sw64: employ trick on regs.pc for specific exception
  - sw64: enable CONFIG_FRAME_POINTER by default for junzhang
  - sw64: fix syscall_fallback() for vdso gettimeofday
  - sw64: dts: add Junzhang
  - sw64: lpc: work around hardware flaws
  - sw64: improve cpu bring up method
  - sw64: introduce new entry framework for C4
  - sw64: irq: update the initial value of nr_irqs
  - sw64: msi: fix sw64_set_affinity function in msi-v2
  - sw64: dynamically switch between lib implementation
  - sw64: kvm: fix unmap_apt_{ptes, pmds}
  - sw64: msi: remove redundant interrupt enables
  - sw64: add unaligned access support for C4 new instructions
  - sw64: fix compilation warning
  - sw64: fix kconfig selections
  - sw64: iommu: adjust iova range
  - sw64: iommu: introduce generic DMA ops to iommu_v2
  - sw64: iommu: fix iommu_v2 compile problems
  - sw64: acpi: fix missed upper bits of rcid for junzhang
  - sw64: pci: remove duplicate pcie operations
  - sw64: irq: remove unnecessary initialization
  - sw64: acpi: enable generic GSI
  - sw64: irqchip: support ACPI-based interrupt controller initialization
  - sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
  - sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
  - sw64: mm: fix PTE bits check
  - sw64: use a new wrap_asid hmcall when asid wraps
  - sw64: rewrite fpcr and swcr conversion
  - sw64: enable hardware denorm by default
  - sw64: add four-socket system support
  - sw64: add a new kernel parameter to override mclk
  - sw64: improve sw64_printk()
  - sw64: msi: fix bugs in multi-msi interrupts allocation and release
  - sw64: pci: change pci transaction ordering rule settings
  - sw64: irqchip: fix virtual PINTC not working properly
  - sw64: dts: improve properties for PINTC
  - sw64: dts: improve properties for LPC-INTC
  - sw64: dts: fix interrupt related properties for GPIO
  - sw64: dts: add chosen node
  - sw64: dts: fix properties for spi controller device node
  - sw64: fix coding style and typos
  - sw64: acpi: fix function acpi_numa_processor_affinity_init()
  - sw64: fix rd_f compatibility issue for C4
  - sw64: export mclk for guest os
  - sw64: refactor device interrupt domain
  - sw64: kvm: fix clock sync of CORE4 live migration
  - sw64: kvm: delete memory hotplug codes for CORE3B
  - sw64: add missing c4 legacy power management code
  - sw64: add missing c4 intc kconfig
  - sw64: fix macro definition compilation error
  - i2c: designware: Do not complete i2c read without RX_FULL interrupt
  - sw64: add macros for mother board config info
  - sw64: kvm: scale up the range of target vcpu parsed by hypervisor
  - sw64: pci: reset dma mask for devices on zx200
  - sw64: kvm: fix return value of vmem_mmap
  - sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
  - sw64: iommu: add default DMA ops for passthrough domains
  - sw64: iommu: recognize potential multiple aliases for devices
  - sw64: iommu: fix group allocation semantics
  - sw64: iommu: rename sunway iommu filenames
  - sw64: iommu: remove unnecessary locking for sunway iommu driver
  - sw64: fix dtb address validity check
  - sw64: iommu: use a generic implementation of DMA ops
  - sw64: pci: fix compile error when CONFIG_ACPI=n
  - sw64: smp: suppress function setup_smp() when ACPI enabled
  - sw64: acpi: parse SW CINTC for SMP initialization
  - sw64: acpi: support MADT entry print for SW CINTC
  - sw64: acpi: add ACPI-style structures for SW CINTC
  - sw64: smp: add new structure to record rcid information
  - sw64: smp: modify function smp_rcb_init() to receive base address
  - sw64: pci: synchronize the OEM table ID of MCFG with BIOS
  - sw64: kvm: add trace kvm function
  - sw64: iommu: fix the bug when vfio_iommu unpin pages
  - sw64: use rvpcr() to setup run mode
  - sw64: kgdb: add single-step debug support
  - sw64: fix lockdep error
  - sw64: perf: do all event checks in sw64_pmu_event_init()
  - sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
  - sw64: pci: export some pci functions
  - sw64: uapi: fix a compile error for headers_install
  - sw64: perf: hide hardware performance events in guest os
  - sw64: fix hugepage support
  - sw64: extern vdso_start and vdso_end as char[]
  - sw64: remove useless current_policy
  - sw64: make sure _PAGE_LEAF is zero for swap pte
  - sw64: get cpufreq_policy with standard interface
  - sw64: mm: fix function numa_clear_node()
  - sw64: acpi: enable upgrade acpi tables via initrd
  - sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
  - sw64: acpi: fix the function for parsing CPU affinity
  - sw64: acpi: use common functions about parsing SRAT and SLIT
  - sw64: acpi: enable CONFIG_ACPI_NUMA
  - sw64: move function setup_smp() before NUMA initialization
  - sw64: acpi: move ACPI initialization before NUMA initialization
  - sw64: pci: adjust the directory structure of PCI-related source files
  - sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
  - sw64: pci: support ACPI-based PCI initialization
  - sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
  - sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
  - sw64: pci: use pci_bus_to_pci_controller to get pci_controller
  - sw64: pci: add quirks for ACPI-based ECAM


author: Li Nan <linan122@huawei.com> - 5.10.0-259.0.0.162
changelog:
  - !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
  - !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
  - !15802  hrtimers: Handle CPU state correctly on hotplug
  - hrtimers: Handle CPU state correctly on hotplug
  - !15679  list: fix a data-race around ep->rdllist
  - !15683  CVE-2025-21726
  - !15682  padata: fix UAF in padata_reorder
  - !15728  *** CVE-2025-21823 ***
  - !15782 sdma-dae: modify ttl_processes reduce logic
  - Revert "arm64: mm: add mc support for __buffer_migrate_page"
  - !15409  CVE-2025-21715
  - sdma-dae: modify ttl_processes reduce logic
  - !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
  - !15766  bpf, sockmap: Fix race between element replace and close()
  - !15765  CVE-2024-56642
  - drm/drm_vma_manager: Add drm_vma_node_allow_once()
  - !15769  gpio: aggregator: protect driver attr handlers against module unload
  - !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  - gpio: aggregator: protect driver attr handlers against module unload
  - bpf, sockmap: Fix race between element replace and close()
  - tipc: fix NULL deref in cleanup_bearer()
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer().
  - uprobes: Reject the shared zeropage in uprobe_write_opcode()
  - x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  - !15365 mm/init: Add quirk for phytium ps23064 SoC
  - !15690  net: rose: fix timer races against user threads
  - !15716  CVE-2022-49513
  - !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - !15449  vrf: use RCU protection in l3mdev_l3_out()
  - batman-adv: Drop unmanaged ELP metric worker
  - batman-adv: Ignore neighbor throughput metrics in error case
  - batman-adv: fix panic during interface removal
  - batman-adv: Drop initialization of flexible ethtool_link_ksettings
  - batman-adv: Add new include for min/max helpers
  - !15701  usb: gadget: f_tcm: Don't free command immediately
  - !15510 v3  CVE-2025-21816
  - !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
  - mm/init: Add quirk for phytium ps23064 SoC
  - cpufreq: governor: Use kobject release() method to free dbs_data
  - cpufreq: Move to_gov_attr_set() to cpufreq.h
  - usb: gadget: f_tcm: Don't free command immediately
  - net: rose: fix timer races against user threads
  - padata: avoid UAF for reorder_work
  - padata: add pd get/put refcnt helper
  - padata: fix UAF in padata_reorder
  - list: fix a data-race around ep->rdllist
  - hrtimer: Fix kabi broken of struct hrtimer_cpu_base
  - hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
  - hrtimer: Report offline hrtimer enqueue
  - PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
  - vrf: use RCU protection in l3mdev_l3_out()
  - net: davicom: fix UAF in dm9000_drv_remove


author: Li Nan <linan122@huawei.com> - 5.10.0-260.0.0.163
changelog:
  - !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  - !15837  CVE-2025-21858
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels().
  - geneve: Fix use-after-free in geneve_find_dev().
  - !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
  - !15717  media: uvcvideo: Fix double free in error path
  - !15759  Fix kmemleak false positive
  - mt76: fix use-after-free by removing a non-RCU wcid pointer
  - !15378  ASoC: atmel: Fix error handling in snd_proto_probe
  - !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - !15816 perf: Configure BRBE correctly on VHE host
  - perf: Configure BRBE correctly on VHE host
  - efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
  - media: uvcvideo: Fix double free in error path
  - fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - ASoC: atmel: Fix error handling in snd_proto_probe


author: Li Nan <linan122@huawei.com> - 5.10.0-261.0.0.164
changelog:
  - !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
  - !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
  - !15791  CVE-2025-21877
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
  - !15894  ftrace: Avoid potential division by zero in function_stat_show()
  - !15892  bnxt: Do not read past the end of test names
  - !15840  block: fix bugs in blk_register_queue()
  - !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
  - !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
  - !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  - !15756  powerpc: Fix save r13 on kprobe/ftrace entry
  - ftrace: Avoid potential division by zero in function_stat_show()
  - bnxt: Do not read past the end of test names
  - iommu/arm-smmu-v3: Fix the extra atc tlb flush
  - soc: hisilicon: Serialize the online and onfline the acpi devices
  - block: fix lock ordering in blk_register_queue() error path
  - block: fix resource leak in elevator registration error path
  - rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  - usbnet: gl620a: fix endpoint checking in genelink_bind()
  - powerpc: Fix save r13 on kprobe/ftrace entry


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-262.0.0.165
changelog:
  - !16057 mailbox: pcc: Always clear the platform ack interrupt first
  - !16076  mpage: fix softlockup in mpage_readahead()
  - !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
  - !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
  - !16127  net: Fix CVE-2025-21763
  - !16125  ndisc: extend RCU protection in ndisc_send_skb()
  - !16129  arp: use RCU protection in arp_xmit()
  - arp: use RCU protection in arp_xmit()
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
  - neighbour: use RCU protection in __neigh_notify()
  - neighbour: delete redundant judgment statements
  - ndisc: extend RCU protection in ndisc_send_skb()
  - !16088  CVE-2024-58094
  - jfs: add check read-only before truncation in jfs_truncate_nolock()
  - mpage: fix softlockup in mpage_readahead()
  - !16063  ndisc: Fix CVE-2025-21764
  - ndisc: use RCU protection in ndisc_alloc_skb()
  - net: add dev_net_rcu() helper
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
  - mailbox: pcc: Always clear the platform ack interrupt first
  - soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
  - !15776 [OLK-5.10] new bugfix from mainline for Turin
  - !15941  block: fix UAF in blk_mq_has_sqsched()
  - !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
  - !15938  md: bypass block throttle for superblock update
  - !15940  md/raid1: fix bitmap update when all write requests fail
  - !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
  - !15990  Backport the perf fix patch
  - perf: Really fix event_function_call() locking
  - perf: Fix event_function_call() locking
  - perf/core: Fix missing wakeup when waiting for context reference
  - perf/core: Fix perf_cgroup_switch()
  - block: Decode all flag names in the debugfs output
  - blk-mq: avoid to touch q->elevator without any protection
  - blk-mq: protect q->elevator by ->sysfs_lock in blk_mq_elv_switch_none
  - block: remove QUEUE_FLAG_DEAD
  - md/raid1: fix bitmap update when all write requests fail
  - md/raid1: fix memory leak in raid1_run() if no active rdev
  - md: bypass block throttle for superblock update
  - nvme-pci: fix multiple races in nvme_setup_io_queues
  - nvme-tcp: fix possible UAF in nvme_tcp_poll
  - nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
  - x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
  - tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
  - x86/CPU/AMD: Do the common init on future Zens too
  - Ethernet: Linkdata: Supports Linkdata ethernet Controllers


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-263.0.0.166
changelog:
  - !16242  fuse: support fastpath
  - !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  - fuse: support fastpath via fast_ipc
  - fuse: add fast path for fuse_range_is_writeback
  - fuse: fix matching of FUSE_DEV_IOC_CLONE command
  - fuse: 32-bit user space ioctl compat for fuse device
  - ipc: add fast_ipc module to enable fast process switching
  - !16036  proc: fix UAF in proc_get_inode()
  - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  - !16164  fix CVE-2023-53093
  - !16184  net/hinic3: Synchronize new NIC features and bug fixes
  - net/hinic3: Synchronize new NIC features and bug fixes
  - tracing/histograms: Allow variables to have some modifiers
  - tracing: Do not let histogram values have some modifiers
  - proc: fix UAF in proc_get_inode()


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-264.0.0.167
changelog:
  - !16356  bugfixes for fuse fastpath and fast_ipc
  - !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
  - ipc: fix error kill signal handle in fast_ipc
  - fuse: add fuse fastpath forget cmd support
  - !16316  bpf: Fix kmemleak warning for percpu hashmap
  - !16343  ext4: fix OOB read when checking dotdot dir
  - !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
  - !16206  ext4: update s_journal_inum if it changes after journal replay
  - !16220  jbd2: remove wrong sb->s_sequence check
  - !15899  Backport mainline patches to avoid crash caused by rsize being 0
  - !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
  - !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
  - !15709 [OLK-5.10]:update patches for sw64 architecture
  - !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
  - ext4: fix OOB read when checking dotdot dir
  - !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
  - !16204  ext4: fix off-by-one error in do_split
  - mfd: ene-kb3930: Fix a potential NULL pointer dereference
  - bpf: Fix WARN() in get_bpf_raw_tp_regs
  - bpf: Fix kmemleak warning for percpu hashmap
  - ocfs2: validate l_tree_depth to avoid out-of-bounds access
  - !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
  - uffd: Fix bug of cannot set mode in userfaultfd_copy
  - !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
  - !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
  - !13916 intel: backport intel_pstate driver update from 6.11
  - kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
  - jbd2: remove wrong sb->s_sequence check
  - ext4: update s_journal_inum if it changes after journal replay
  - ext4: fix off-by-one error in do_split
  - cpufreq: intel_pstate: Support highest performance change interrupt
  - x86/cpufeatures: Add HWP highest perf change feature flag
  - iommu/vt-d: Set No Execute Enable bit in PASID table entry
  - smb: client: Update IO sizes after reconnection
  - smb: client: Store original IO parameters and prevent zero IO sizes
  - smb:client: smb: client: Add reverse mapping from tcon to superblocks
  - sw64: provide arch_test_bit_acquire() for architecture sw64
  - sw64: ftrace: implement ftrace_modify_call
  - sw64: cpu: give preference to CPU information from SMBIOS
  - sw64: irqchip: use sunway as vendor prefix in device tree
  - sw64: irqchip: use pr_fmt instead of prefix string macro
  - sw64: numa: decrease CONFIG_NODES_SHIFT to 3
  - perf jitdump: Add SW64 support
  - sw64: emulator: add shutdown and restart functions
  - sw64: emulator: fix the multi-core boot issue
  - sw64: fix bad address error for vfio
  - sw64: kvm: convert to the gfn-based MMU notifier callbacks
  - sw64: add SO_NETNS_COOKIE definition
  - sw64: locking: Move qrwlock.h include after qspinlock.h
  - sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
  - sw64: fix kprobe function
  - sw64: perf: fix specific performance events can be sampled
  - sw64: bpf: optimize JIT for load imm
  - sw64: bpf: fix BPF_CALL JIT for multi-function programs
  - libbpf: add sw64 support
  - sw64: implementing VDSO with generic code
  - sw64: rename mmap protection_map
  - sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
  - sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
  - sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
  - sw64 bpf: add BPF_NOSPEC jit
  - sw64: rename _PFN_BITS to __PFN_BITS
  - sw64: bpf: optimize some instructions
  - sw64: bpf: fix XADD32 and XADD64
  - sw64: irqchip: fix irq_enable/disable callback for MCU controller
  - sw64: update defconfig
  - sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
  - sw64: cache: fix shared_cpu_map when PPTT is valid
  - sw64: kvm: fix tlb flush implementation of dirty page tracking
  - sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
  - sw64: pci: remove function fix_jm585_reset()
  - sw64: irqchip: remove fallback after kzalloc_node()
  - sw64: irqchip: improve intx implementation
  - sw64: kvm: add KVM_CAP_READONLY_MEM support
  - sw64: pci: fix incorrect pointer of struct pci_controller
  - sw64: fix mmap protection_map
  - sw64: show CPU feature UNA in /proc/cpuinfo
  - sw64: fix the error of cpufreq update
  - sw64: mm: support fdt memory reservation
  - sw64: remove deprecated annotation in irq.h
  - sw64: introduce a fine-grained intx mask/unmask system
  - sw64: move handle_intx() into pci-intx handle
  - sw64: perf: fix system hang problem when using perf callchain sampling
  - sw64: fix compilation issues on match.c
  - sw64: iommu: fix NULL hose check
  - sw64: mm: fix PFN of PMDs for 512M hugepage
  - sw64: kvm: fix an error when unmapping 512M hugepages
  - sw64: modify sys_pfh_ops
  - sw64: pci: fix legacy PCI not initialized for XueLang platform
  - sw64: fix set_huge_pte_at for C4
  - sw64: fix compilation issues
  - sw64: add arch_hugetlb_valid_size for C4
  - sw64: pci: remove legacy io reservation
  - sw64: cache: give preference to cache information from PPTT table
  - sw64: cpu: refactor cpuinfo related code
  - sw64: cache: refactor cacheinfo related code
  - sw64: cpu: move cpu related code to the newly created cpu.c
  - sw64: topology: support initializing topology via DT or ACPI
  - sw64: defconfig: fix SPI related configuration items
  - sw64: irqchip: add version 3 for PINTC
  - sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
  - sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
  - sw64: clk: further fix the clock frequency of SPI and I2C
  - sw64: smp: fix function fdt_setup_smp()
  - Revert "sw64: fdt: map physical node ID to logical node ID"
  - sw64: kvm: adjust interrupt priority for guest
  - sw64: fix judgements about legacy pci support
  - sw64: compatible with suspend implementation
  - sw64: add junzhang_v1/2/3_key
  - sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
  - sw64: fix numa setup when acpi is disabled
  - sw64: fix setup_mem_size()
  - sw64: mm: remove legacy memory detection for JunZhang platform
  - sw64: fix the register bug in do_entUna
  - sw64: iommu: improve iommu initialization
  - sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
  - sw64: select different MUX to read cpu frequency
  - sw64: clk: fix the clock frequency of SPI and I2C
  - sw64: fix a bug in huge_pte_offset()
  - sw64: pci: rename some functions
  - sw64: pci: support PCIe controller driver based on device tree
  - PCI: Allow architecture-specific pci_remap_iospace()
  - sw64: remove sw64_io related functions
  - sw64: platform: add misc platform driver
  - sw64: perf: remove redundant link options
  - sw64: lpc: fix ast2400 driver error for C4
  - sw64: improve lib performance for new archs
  - sw64: remove unnecessary parameter passing
  - sw64: kvm: fix invalid memslot flags checking during dirty logging
  - sw64: kvm: don't retrieve memory slot again in page fault handler
  - sw64: pci: fix the policy of pci resource assignment
  - sw64: kexec: remove code for compatibility with builtin DTB
  - sw64: smp: allow NR_CPUS less than the number detected by firmware
  - sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
  - sw64: fix C4 INTx configuration
  - sw64: pci: fix compile error when CONFIG_PCI_MSI=n
  - sw64: add basic frequency scaling support for JunZhang
  - sw64: add __vdso_getcpu support
  - sw64: pci: fix unable to get node ID when numa_off is set
  - sw64: kexec: fix kernel crashdump bugs
  - sw64: bpf: fix BPF_CALL address
  - sw64: fix irq work
  - sw64: pciehp: get enabled/disabled status of RCs from firmware
  - sw64: reset the CSR:PTBR_USR
  - sw64: dts: support online-capable property for cpu device node
  - sw64: fix a base address of msiaddr register
  - sw64: fix some S3 CSRs problems for C4
  - sw64: bypass sunway pcie hotplug driver in non-physical scenario
  - sw64: seperate IRQ_MSI configs for sub-architectures
  - sw64: handle null MSI irq in guest os
  - sw64: handle null MSI irq
  - sw64: kvm: fix mmio GPA for C4
  - sw64: iommu: fix wrong devfn setup
  - sw64: iommu: fix some iova related checks
  - sw64: defconfig: update defconfig for kata-containers
  - sw64: add HARDLOCKUP_DETECTOR support
  - sw64: add dependency for sunway-ged driver
  - sw64: fix compile error with CONFIG_SUNWAY_GED=m
  - sw64: remove unused sunway_memory_get_meminfo()
  - sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
  - sw64: fix bugs in decreasing frequency
  - sw64: add cpu hotplug support for C4 guest
  - sw64: add NMI support
  - sw64: add CSR_CAUSE into pt_regs
  - sw64: optimize the code in do_entInt()
  - sw64: kvm: support up to 256 vCPUs for C4
  - sw64: fdt: map physical node ID to logical node ID
  - sw64: perf: hide hardware performance events in guest os for c4
  - sw64: kvm: fix inconsistent vcpucb of C4
  - sw64: kvm: implement kvm_arch_set_irq_inatomic()
  - sw64: fix regs.pc on single-step with ptrace
  - sw64: modify some interrupt target core to logic 0 core
  - sw64: fix guest send ipi target
  - sw64: fix sw64_is_fake_mcount() of recordmcount
  - sw64: remove some unused module init/exit/license
  - sw64: kvm: add numa support for memory hotplug
  - sw64: numa: support NUMA initialization based on device tree
  - sw64: smp: support SMP initialization based on device tree
  - sw64: dtb: disable built-in DTB for junzhang
  - sw64: ata: add ata_hrst_delay cmdline option
  - sw64: kvm: fix bug when vcpu disable irq
  - sw64: kconfig: add I2C and SPI defconfig for junzhang
  - sw64: kconfig: set default y for GPIO if ACPI enabled
  - sw64: spi: fix compatibility with dts for xuelang
  - sw64: pci: use readq/writeq to read/write RC and PIU IO registers
  - sw64: msi: modify msi migration strategy
  - sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
  - sw64: pciehp: add pcie hotplug driver support for C4
  - sw64: remove redundant intx code
  - sw64: irq: support interrupt for virtual GPIO
  - sw64: acpi: enable ACPI by default
  - sw64: mm: fix mem=start@size invalid in some cases
  - sw64: use generic page_is_ram()
  - sw64: mm: take memory information from firmware
  - sw64: kvm: acpi: match sunway_ged by acpi method
  - sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
  - sw64: fix typo in gpio-sunway
  - sw64: fix compile warning of handle_pci_msi_interrupt
  - sw64: fix usage of __add_memory() in sunway-ged driver
  - sw64: change FORCE_MAX_ZONEORDER default value
  - sw64: perf: fix event check order
  - sw64: wrap frequency workaround into standalone functions
  - sw64: remove redudant save_ktp
  - sw64: fix compile warning of smp_callin()
  - cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
  - cpufreq: intel_pstate: Simplify spinlock locking
  - cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
  - cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
  - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
  - cpufreq: intel_pstate: Revise global turbo disable check
  - cpufreq: intel_pstate: set stale CPU frequency to minimum
  - cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
  - cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
  - cpufreq: intel_pstate: ITMT support for overclocked system
  - cpufreq: intel_pstate: Fix active mode offline/online EPP handling
  - cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
  - cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
  - cpufreq: intel_pstate: Process HWP Guaranteed change notification
  - cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
  - cpufreq: intel_pstate: Clean up frequency computations
  - cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
  - dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
  - config: Enable the VGA and IGD features of vfio


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-265.0.0.168
changelog:
  - !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
  - !16357 [OLK-5.10]:update patches for sw64 architecture
  - !16258 修复CVE-2022-3238
  - !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
  - !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
  - !16397 CVE-2025-37925
  - !16292 Fix CVE-2025-37773
  - !16318 Fix CVE-2025-37782
  - !16442 v4  io_uring patches backport
  - !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
  - !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
  - intel_idle: add Clearwater Forest SoC support
  - intel_idle: add Granite Rapids Xeon D support
  - io_uring/io-wq: do not use bogus hash value
  - io_uring/sqpoll: fix sqpoll error handling races
  - io_uring: protect register tracing
  - io_uring/sqpoll: close race on waiting for sqring entries
  - io_uring: check for iowq alloc_workqueue failure
  - io_uring: use private workqueue for exit work
  - io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
  - io_uring: kiocb_done() should *not* trust ->ki_pos if ->{read,write}_iter() failed
  - io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
  - io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
  - io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
  - drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
  - !16424  CVE-2024-57876
  - drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
  - drm/dp_mst: Fix resetting msg rx state after topology removal
  - sw64: gpu: replace __sw_64__ with CONFIG_SW64
  - sw64: kprobe on ftrace: fix bug in restoring regs
  - sw64: ioremap: map some IO space with ioremap
  - sw64: ioremap: fix an overflow in pci_remap_cfgspace
  - sw64: ioremap: support generic ioremap for C4
  - sw64: qspinlock: add CNA support for sw64
  - sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
  - sw64: move syscall handling to sys_sw64.c
  - sw64: improve sw64_rrk
  - sw64: fix printing issue when using kprobe on ftrace
  - sw64: add powercap driver
  - sw64: clocksource: fix the issue of clockevents not being notified
  - sw64: fix shared_cpu_map of L3 Cache
  - sw64: iommu: work around iova range check after resv_region
  - sw64: fix some compile issues for cpuautoplug.c
  - sw64: cpufreq: fix for emulator that do not support cpufreq
  - sw64: cpufreq: refactor cpufreq related code
  - sw64: cpufreq: remove some meaningless code
  - sw64: cpufreq: move cpufreq notifier to its user
  - sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
  - sw64: cpufreq: remove debugfs code
  - sw64: msi: fix guest msi interrupt handling
  - sw64: msi: clear the residual vector_irq information of cpu
  - sw64: ftrace: add notrace attribute to memset&memcpy
  - sw64: ftrace: fix bug in restoring regs
  - sw64: fix an error in BPF exception handling
  - sw64: fix cpu_autoplug error
  - sw64: msi: fix irq affinity setting during migration
  - sw64: use CONFIG_HZ_PERIODIC by default
  - sw64: fix specific performance counter error
  - sw64: enable all HW PMUs for max sampling period events
  - sw64: update exclusive counter handling
  - sw64: fix perf event L1I cache write support
  - sw64: kexec: add support for crashkernel=size[KMG]
  - sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
  - sw64: ftrace: save&restore more stack frame in ftrace_caller
  - sw64: fix secondary_cpu_start for CORE3B
  - sw64: fix inslb compiling error
  - sw64: vdso: add support for time namespaces
  - sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
  - sw64: kvm: optimize the compatibility of guest interrupt
  - sw64: kvm: optimize the implementation of guest interrupt
  - sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
  - sw64: ftrace: fix atomicity bugs in ftrace
  - sw64: fix nmi_[enter/exit] error in CORE3B
  - sw64: kvm: modify parameters of the exception functions
  - sw64: reimplement cmpxchg and xchg
  - sw64: enable -fsw-unalign-byte for new subarchs
  - sw64: reduce jump instructions in entUna
  - sw64: simplify GP handling for entUna
  - sw64: iommu: print more info for interrupts
  - sw64: add a 1ms delay before CPU offline
  - sw64: modify the interface for firmware to pass the running mode
  - sw64: change condition of some cflags
  - sw64: put cpu_set_node() in init text
  - sw64: make sw64_(read/write)_csr always inline
  - sw64: compile divide.S for c3b only
  - sw64: topology: discard topology information from PPTT
  - sw64/kvm: fix a bug for starting CORE3 VM
  - sw64: iommu: implement resv_region APIs
  - sw64: rename PT_REGS_SP to PT_REGS_R30
  - sw64: modify parameters of the exception functions
  - sw64: modify CPU autoplug initialization process
  - sw64: pci: fix secondary bus reset issue
  - sw64/vdso: support mremap() for vDSO
  - wifi: ath11k: fix RCU stall while reaping monitor destination ring
  - jfs: reject on-disk inodes of an unsupported type
  - !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
  - sw64: sound: avoid pagefault in pcm driver's memset
  - sw64: flush TLB after modifying ptbr_sys
  - sw64: fix an error when running no main() program
  - !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
  - !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
  - sw64: perf: fix compilation error with undeclared EM_SW_64
  - ftrace: Add cond_resched() to ftrace_graph_set_hash()
  - !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
  - fs/ntfs3: Fix double free on remount
  - Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
  - scsi: hisi_sas: Fixed failure to issue vendor specific commands
  - scsi: libsas: Abort all in-flight requests when device is gone
  - hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
  - virtiofs: add filesystem context source name check


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-266.0.0.169
changelog:
  - !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
  - !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
  - !16535  CVE-2022-49647
  - !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
  - !16533  memcg: always call cond_resched() after fn()
  - !16452  xfs: read only mounts with fsopen mount API are busted
  - cgroup: fix kabi for css_set
  - cgroup: Use separate src/dst nodes when preloading css_sets for migration
  - memcg: always call cond_resched() after fn()
  - !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
  - !16498  padata: do not leak refcount in reorder_work
  - !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
  - !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
  - !16457  fs/jfs: Prevent integer overflow in AG size calculation
  - sched/dynamic_affinity: fix preffered_cpu offline problem
  - irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
  - padata: do not leak refcount in reorder_work
  - drivers:misc:sdma-dae: fix incorrect kmalloc flag
  - fs/jfs: Prevent integer overflow in AG size calculation
  - xfs: read only mounts with fsopen mount API are busted
  - powercap: intel_rapl_tpmi: Ignore minor version change
  - powercap: intel_rapl_tpmi: Fix bogus register reading
  - sched/fair: Fix the bug in dynamic smt when getting physical core load
  - cachefiles: Fix non-taking of sb_writers around set/removexattr
  - irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
  - irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
  - acpi/iort: Add func to get used deviceid bitmap


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-267.0.0.170
changelog:
  - !16640  IMA: use real_inode to get the i_version
  - !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
  - !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
  - !16197 mm:fix return handling of cow_user_page
  - !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
  - IMA: use real_inode to get the i_version
  - mm:fix return handling of cow_user_page
  - !16584  tracing: Fix oob write in trace_seq_to_buffer()
  - !16625  Backport SMC-D feature
  - net: Fix kabi broken
  - net/smc: enable the smc-lo on the x86 and arm64 platforms
  - net/smc: use the correct ndev to find pnetid by pnetid table
  - s390/ism: add release function for struct device
  - net/smc: fix data error when recvmsg with MSG_PEEK flag
  - net/smc: delete pointless divide by one
  - net/smc: check return value of sock_recvmsg when draining clc data
  - net/smc: check smcd_v2_ext_offset when receiving proposal msg
  - net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
  - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
  - net/smc: protect link down work from execute after lgr freed
  - net/smc: fix LGR and link use-after-free issue
  - net/smc: Fix lookup of netdev by using ib_device_get_netdev()
  - net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
  - net/smc: Fix memory leak when using percpu refs
  - net/smc: Address spelling errors
  - net/smc: Use static_assert() to check struct sizes
  - net/smc: add the max value of fallback reason count
  - net/smc: remove unused input parameters in smcr_new_buf_create
  - net/smc: remove redundant code in smc_connect_check_aclc
  - net/smc: remove the fallback in __smc_connect
  - net/smc: remove unreferenced header in smc_loopback.h file
  - net/smc: avoid overwriting when adjusting sock bufsizes
  - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
  - Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
  - net/smc: fix neighbour and rtable leak in smc_ib_find_route()
  - net/smc: implement DMB-merged operations of loopback-ism
  - net/smc: adapt cursor update when sndbuf and peer DMB are merged
  - net/smc: {at|de}tach sndbuf to peer DMB if supported
  - net/smc: add operations to merge sndbuf with peer DMB
  - net/smc: register loopback-ism into SMC-D device list
  - net/smc: ignore loopback-ism when dumping SMC-D devices
  - net/smc: mark optional smcd_ops and check for support when called
  - net/smc: implement DMB-related operations of loopback-ism
  - net/smc: implement ID-related operations of loopback-ism
  - net/smc: introduce loopback-ism for SMC intra-OS shortcut
  - net/smc: decouple ism_client from SMC-D DMB registration
  - net/smc: Avoid -Wflex-array-member-not-at-end warnings
  - net/smc: make smc_hash_sk/smc_unhash_sk static
  - net: smc: fix spurious error message from __sock_release()
  - net/smc: change the term virtual ISM to Emulated-ISM
  - net/smc: fix incorrect SMC-D link group matching logic
  - net/smc: manage system EID in SMC stack instead of ISM driver
  - net/smc: disable SEID on non-s390 archs where virtual ISM may be used
  - net/smc: support extended GID in SMC-D lgr netlink attribute
  - net/smc: compatible with 128-bits extended GID of virtual ISM device
  - net/smc: define a reserved CHID range for virtual ISM devices
  - net/smc: introduce virtual ISM device support feature
  - net/smc: support SMCv2.x supplemental features negotiation
  - net/smc: unify the structs of accept or confirm message for v1 and v2
  - net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
  - net/smc: rename some 'fce' to 'fce_v2x' for clarity
  - net/smc: fix missing byte order conversion in CLC handshake
  - net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
  - s390/ism: ism driver implies smc protocol
  - net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
  - net/smc: return the right falback reason when prefix checks fail
  - net/smc: fix smc clc failed issue when netdevice not in init_net
  - net/smc: Fix dependency of SMC on ISM
  - net/smc: Extend SMCR v2 linkgroup netlink attribute
  - net/smc: support max links per lgr negotiation in clc handshake
  - net/smc: support max connections per lgr negotiation
  - net/smc: support smc v2.x features validate
  - net/smc: add vendor unique experimental options area in clc handshake
  - net/smc: support smc release version negotiation in clc handshake
  - net/smc: Remove unused function declarations
  - s390/ism: Do not unregister clients with registered DMBs
  - s390/ism: Fix and simplify add()/remove() callback handling
  - s390/ism: Fix locking for forwarding of IRQs and events to clients
  - smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
  - s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
  - net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
  - net/smc: Scan from current RMB list when no position specified
  - net/smc: Reset connection when trying to use SMCRv2 fails.
  - smc: Fix use-after-free in tcp_write_timer_handler().
  - net/smc: Use percpu ref for wr tx reference
  - net/smc: Introduce explicit check for v2 support
  - net/smc: Fix device de-init sequence
  - net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
  - net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
  - net/smc: De-tangle ism and smc device initialization
  - s390/ism: Consolidate SMC-D-related code
  - net/smc: Separate SMC-D and ISM APIs
  - net/smc: Register SMC-D as ISM client
  - net/ism: Add new API for client registration
  - s390/ism: Introduce struct ism_dmb
  - net/smc: Terminate connections prior to device removal
  - net/smc: Fix an error code in smc_lgr_create()
  - net/smc: Support SO_REUSEPORT
  - net/smc: Pass on DMBE bit mask in IRQ handler
  - s390/ism: Cleanups
  - net/smc: Eliminate struct smc_ism_position
  - net/smc: set ini->smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
  - net/smc: Fix af_ops of child socket pointing to released memory
  - net/smc: use memcpy instead of snprintf to avoid out of bounds read
  - net/smc: Fix cleanup when register ULP fails
  - net/smc: return ETIMEDOUT when smc_connect_clc() timeout
  - net/smc: Limit backlog connections
  - net/smc: Remove unused function declaration
  - net/smc: Resolve the race between SMC-R link access and clear
  - net/smc: Resolve the race between link group access and termination
  - net/smc: Reset conn->lgr when link group registration fails
  - net/smc: add comments for smc_link_{usable|sendable}
  - net/smc: remove redundant re-assignment of pointer link
  - net/smc: Introduce TCP ULP support
  - net/smc: Print net namespace in log
  - net/smc: Introduce net namespace support for linkgroup
  - net/smc: Use the bitmap API when applicable
  - net/smc: Clean up local struct sock variables
  - net: make sock_inuse_add() available
  - net: inline sock_prot_inuse_add()
  - net/smc: stop links when their GID is removed
  - net/smc: add netlink support for SMC-Rv2
  - net/smc: extend LLC layer for SMC-Rv2
  - net/smc: add v2 support to the work request layer
  - net/smc: retrieve v2 gid from IB device
  - net/smc: add v2 format of CLC decline message
  - net/smc: add listen processing for SMC-Rv2
  - net/smc: add SMC-Rv2 connection establishment
  - net/smc: prepare for SMC-Rv2 connection
  - net/smc: save stack space and allocate smc_init_info
  - net/smc: add generic netlink support for system EID
  - net/smc: keep static copy of system EID
  - net/smc: add support for user defined EIDs
  - net/smc: no need to flush smcd_dev's event_wq before destroying it
  - net/smc: avoid possible duplicate dmb unregistration
  - net/smc: Remove redundant assignment to rc
  - net: smc: Remove repeated struct declaration
  - net/smc: Use active link of the connection
  - net/smc: use helper smc_conn_abort() in listen processing
  - net: smc: convert tasklets to use new tasklet_setup() API
  - net/smc: improve return codes for SMC-Dv2
  - Revert "anolis: net/smc: Resolve the race between link group access and termination"
  - Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
  - Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
  - Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
  - Revert "net/smc: Add size match for smc_buf_get_slot"
  - Partially revert 'net/smc: Clear memory when release and reuse buffer'
  - !16581  module: ensure that kobject_put() is safe for module type kobjects
  - SELinux: Add check for the user data passed to kcalloc in hashtab_init
  - !16566 [OLK-5.10]:update patches for sw64 architecture
  - !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
  - !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
  - !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
  - !16340 drivers: update Yunsilicon drivers to version 2412GA
  - !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
  - !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
  - PCI: Supplement ACS quirk for more Zhaoxin Root Ports
  - PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
  - !16589  ipc: fix to protect IPCS lookups using RCU
  - !16572  sched: Support NUMA parallel scheduling for multiple processes
  - ipc: fix to protect IPCS lookups using RCU
  - tracing: Fix compilation warning on arm32
  - tracing: Fix oob write in trace_seq_to_buffer()
  - module: ensure that kobject_put() is safe for module type kobjects
  - cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
  - sched: Support NUMA parallel scheduling for multiple processes
  - !16553  net/oenetcls: introduce oenetcls for network optimization
  - !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
  - vp_vdpa: fix the crash in hot unplug with vp_vdpa
  - sw64: sort arch/sw64/Kconfig
  - sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
  - sw64: optimize unaligned access
  - sw64: termios: implement BOTHER, IBSHIFT and termios2
  - sw64: ftrace: No need to save original function's temporary registers
  - sw64: mm: adjust userspace memory layout
  - sw64: cpufreq: fix the frequency returned by cpufreq_driver->get()
  - sw64: remove redundant qspinlock.h from Kbuild
  - net/oenetcls: introduce oenetcls for network optimization
  - media: venus: hfi_parser: refactor hfi packet parsing logic
  - soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
  - platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
  - platform/x86/intel-uncore-freq: Add support for efficiency latency control
  - platform/x86/intel-uncore-freq: Do not present separate package-die domain
  - platform/x86/intel-uncore-freq: Use generic helpers for current frequency
  - platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
  - platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
  - platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
  - platform/x86/intel-uncore-freq: Get rid of magic min_max argument
  - platform/x86/intel-uncore-freq: Get rid of magic values
  - platform/x86/intel-uncore-freq: Re-arrange bit masks
  - iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
  - drivers: update Yunsilicon drivers to version 2412GA


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-268.0.0.171
changelog:
  - !16710 v10  arm64: Support xcall prefetch
  - !16615  pci:vga fix race condition in vga_arb_write
  - !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
  - !16713  usb: cdc-acm: Check control transfer buffer size before access
  - crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
  - usb: cdc-acm: Check control transfer buffer size before access
  - !16664  Fix watchdog false positive problem
  - config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
  - xcall: Add tracepoints for different prefetching stages
  - eventpoll: Add /proc/xcall/cpu_list for performance tuning
  - eventpoll: Add /proc/xcall/prefetch dir for performance tuning
  - eventpoll: Support xcall async prefetch
  - arm64: Introduce xcall prefetch enable interface
  - arm64: Reserve a kabi in task_struct exclusively for xcall
  - arm64: Refactor the xcall proc code
  - arm64: revert kpti bypass
  - arm64: Add debugfs dir for xint
  - arm64: Introduce Xint software solution
  - arm64: Faster SVC exception handler with xcall
  - arm64: Introduce xcall a faster svc exception handling
  - !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
  - !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
  - !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
  - !16693  arm64: uaccess: avoid blocking within critical sections
  - arm64: uaccess: avoid blocking within critical sections
  - !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
  - !16681  CVE-2023-53039
  - drivers:misc:sdma-dae: sdma fix uncorrect sleep time
  - HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc
  - HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
  - devm-helpers: Add resource managed version of work init
  - workqueue: Add resource managed version of delayed work init
  - !15244 Add support for Hygon family 18h model 8h
  - !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
  - !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
  - mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
  - watchdog: fix the SOFTLOCKUP_DETECTOR=n case
  - watchdog: fix watchdog may detect false positive of softlockup
  - crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
  - crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
  - crypto: ccp: Don't check tee support on Hygon platform
  - crypto: ccp: Introduce hygon specific interface to support driver
  - iommu: smmuv3: Not print information of SMMU 0x10 event
  - pci:vga fix race condition in vga_arb_write
  - scsi: target: Fix WRITE_SAME No Data Buffer crash
  - EDAC/amd64: Add support for Hygon family 18h model 8h
  - x86/amd_nb: Add support for Hygon family 18h model 8h


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-269.0.0.172
changelog:
  - !16578  ext4: ignore xattrs past end
  - !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
  - !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
  - !16749  arm64: xcall: Fix GPR touch as the original step
  - !16774  bpf: Fix prog_array_map_poke_run map poke update
  - !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
  - bpf: Fix prog_array_map_poke_run map poke update
  - !16768  RDMA/hns: Get messgae length of ack_req from FW
  - RDMA/hns: Get messgae length of ack_req from FW
  - !16750 v2  add-exec-ebpf-v3
  - !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
  - !16706  OLK-5.10 Bperf
  - !16735 [OLK-5.10]:update patches for sw64 architecture
  - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
  - sched/ebpf: Add helper to set prefer cpumask for the task
  - sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
  - arm64: xcall: Fix GPR touch as the original step
  - sw64: irqchip: update effective affinity for PINTC
  - sw64: irqchip: add support for PINTC on all NUMA nodes
  - sw64: ioremap: fix IO interfaces
  - sw64: cpufreq: optimize the granularity of cpufreq
  - sw64: ftrace: remove temporary registers left in context saving
  - sw64: kvm: fix undefined compile issues for kvm module
  - sw64: pintc: fix guest pintc init
  - sw64: set module region to the 2GB space below vmalloc area
  - Fix type mismatch between struct perf_cpu and integer operations
  - perf test shell stat_bpf_counters: Fix test on Intel
  - perf stat: Fix error check for bpf_program__attach
  - perf stat: Fix error return code in bperf__load()
  - perf build: Properly guard libbpf includes
  - perf stat: Separate bperf from bpf_profiler
  - perf docs: Document bpf event modifier
  - perf stat: Fix handling of unsupported cgroup events when using BPF counters
  - bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
  - perf test: Use sqrtloop workload to test bperf event
  - perf test stat_bpf_counter.sh: Stabilize the test results
  - perf test bpf-counters: Add test for BPF event modifier
  - perf test: Add a shell test for 'perf stat --bpf-counters' new option
  - perf stat: Fix incorrect display of bperf when event count is 0
  - perf stat: Increase perf_attr_map entries
  - perf stat: Support inherit events during fork() for bperf
  - perf stat: Fix BPF program section name
  - perf bpf_skel: Do not use typedef to avoid error on old clang
  - perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
  - perf stat: Enable BPF counter with --for-each-cgroup
  - perf bpf_counter: Move common functions to bpf_counter.h
  - perf tools: Add cgroup_is_v2() helper
  - perf tools: Add read_cgroup_id() function
  - perf stat: Introduce bpf_counter_ops->disable()
  - perf stat: Introduce ':b' modifier
  - perf stat: Introduce config stat.bpf-counter-events
  - perf bpf: check perf_attr_map is compatible with the perf binary
  - perf util: Move bpf_perf definitions to a libperf header
  - perf stat: Measure 't0' and 'ref_time' after enable_counters()
  - perf stat: Introduce 'bperf' to share hardware PMCs with BPF
  - perf stat: Enable counting events for BPF programs
  - perf build: Support build BPF skeletons with perf
  - bpftool: Add Makefile target bootstrap
  - perf tools: Add 'cgroup-switches' software event
  - perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
  - perf core: Factor out __perf_sw_event_sched
  - bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
  - ext4: ignore xattrs past end
  - locking/qspinlock: Micro-optimize pending state waiting for unlock
  - bcache: allow allocator to invalidate bucket in gc
  - bcache: call force_wake_up_gc() if necessary in check_should_bypass()


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-296.0.0.199
changelog:
  - !19740 merge refs/pull/19740/head into OLK-5.10
  - !19764 merge patch-1766387978 into OLK-5.10
  - hisi: l3t: enable l3t with specific cpuid
  - !19705 [OLK-5.10]:update patches for sw64 architecture
  - !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct
  - !19372  padata: Fix pd UAF once and for all
  - !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation
  - !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS
  - net: atlantic: fix fragment overflow handling in RX path
  - !19736  locking/rwsem: Optimize down_read_trylock() under highly contended case
  - locking/rwsem: Optimize down_read_trylock() under highly contended case
  - !19724  mm/mem_reliable: use percise count during limit check
  - mm/mem_reliable: use percise count during limit check
  - !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
  - !19614  NFSD: Fix crash in nfsd4_read_release()
  - !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver
  - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
  - !19673  firewire: net: fix use after free in fwnet_finish_incoming_packet()
  - sw64: set PTBR_SYS before accessing vmalloc area
  - sw64: set execute permission for virtual machine's hmcode text section
  - sw64: fix simd version of copy/clear_page()
  - sw64: fix random mmap base range
  - firewire: net: fix use after free in fwnet_finish_incoming_packet()
  - NFSD: Fix crash in nfsd4_read_release()
  - crypto: ccp: add ccp-mdev functionality to the ccp module.
  - padata: Fix pd UAF once and for all
  - KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access
  - KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer
  - KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests
  - KVM: x86: Pass emulation type to can_emulate_instruction()
  - KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support
  - KVM: SVM: Don't intercept #GP for SEV guests
  - swiotlb: do not zero buffer in set_memory_decrypted()
  - crypto: ccp - Add SEV_INIT rc error logging on init
  - dma-direct: always leak memory that can't be re-encrypted
  - dma-direct: factor out dma_set_{de,en}crypted helpers
  - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
  - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits
  - KVM: SEV-ES: fix another issue with string I/O VMGEXITs
  - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed
  - KVM: SEV-ES: keep INS functions together
  - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in
  - KVM: x86: split the two parts of emulator_pio_in
  - KVM: SEV-ES: clean up kvm_sev_es_ins/outs
  - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out
  - KVM: SEV-ES: rename guest_ins_data to sev_pio_data
  - KVM: SEV-ES: fix length of string I/O
  - x86/sev-es: Do not unroll string I/O for SEV-ES guests
  - x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-297.0.0.200
changelog:
  - !19833 merge patch-1766715015 into OLK-5.10
  - !19911 merge patch-1767492639 into OLK-5.10
  - !19635 merge refs/pull/19635/head into OLK-5.10
  - !19903 merge patch-1767161454 into OLK-5.10
  - !19864 merge patch-1766990471 into OLK-5.10
  - !19865 merge patch-1766990523 into OLK-5.10
  - mm: mem_reliable: prevent excessive direct reclaim loops
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
  - !19899 merge patch-1767098709 into OLK-5.10
  - erofs: validate the extent length for uncompressed pclusters
  - !19885 merge patch-1767076771 into OLK-5.10
  - !19876 merge patch-1767011340 into OLK-5.10
  - scsi: qla2xxx: Clear cmds after chip reset
  - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
  - !19856 merge patch-1766976937 into OLK-5.10
  - !19857 merge patch-1766976979 into OLK-5.10
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
  - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private
  - virtio-net: ensure the received length does not exceed allocated size
  - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
  - tracing: Fix memory leaks in create_field_var()
  - !19760 merge patch-1766370959 into OLK-5.10
  - !19786 merge patch-1766474397 into OLK-5.10
  - !19548 merge refs/pull/19548/head into OLK-5.10
  - ext4: xattr: fix null pointer deref in ext4_raw_inode()
  - !19739 merge refs/pull/19739/head into OLK-5.10
  - !19732 merge refs/pull/19732/head into OLK-5.10
  - !19719 merge refs/pull/19719/head into OLK-5.10
  - bnxt_en: Fix memory corruption when FW resources change during ifdown
  - bnxt_en: Fix possible crash after creating sw mqprio TCs
  - x86/fpu: Ensure XFD state on signal delivery
  - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()
  - usb: storage: Fix memory leak in USB bulk transport
  - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
  - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
  - cpufreq: ACPI: Fix max-frequency computation
  - tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes
  - tools headers: Update tools's copy of x86/asm headers
  - tools headers cpufeatures: Sync with the kernel sources
  - NFSD: free copynotify stateid in nfs4_free_ol_stateid()


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-298.0.0.201
changelog:
  - !19798 merge OLK-5.10 into OLK-5.10
  - !19972 merge patch-1767691219 into OLK-5.10
  - !19974 merge patch-1767691279 into OLK-5.10
  - !19973 merge patch-1767691254 into OLK-5.10
  - !19713 merge refs/pull/19713/head into OLK-5.10
  - !19832 merge OLK-5.10-ringbuffer into OLK-5.10
  - qed: Don't collect too many protection override GRC elements
  - i40e: fix validation of VF state in get resources
  - i40e: fix input validation logic for action_meta
  - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data()
  - KVM: SVM: Skip SEV cache flush if no ASIDs have been used
  - KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities
  - x86/sev: Make enc_dec_hypercall() accept a size instead of npages
  - mm: x86: Fix kabi breakage of pv_ops
  - KVM: x86: Play nice with protected guests in complete_hypercall_exit()
  - KVM: x86: Assume a 64-bit hypercall for guests with protected state
  - KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids()
  - KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee
  - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa
  - x86/kvm: Add kexec support for SEV Live Migration.
  - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature.
  - EFI: Introduce the new AMD Memory Encryption GUID.
  - mm: x86: Invoke hypercall when page encryption status is changed
  - x86/kvm: Add AMD SEV specific Hypercall3
  - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA
  - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
  - KVM: SVM: fix missing sev_decommission in sev_receive_start
  - KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails
  - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall
  - KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command
  - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command
  - KVM: SVM: Add support for KVM_SEV_RECEIVE_START command
  - KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command
  - KVM: SVM: Add KVM_SEV_SEND_FINISH command
  - KVM: SVM: Add KVM_SEND_UPDATE_DATA command
  - KVM: SVM: Add KVM_SEV SEND_START command
  - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-299.0.0.202
changelog:
  - !19047 [OLK-5.10] Fix CVE-2025-39839
  - !18614 [OLK-5.10] Fix CVE-2025-39737
  - !18654 [OLK-5.10] Fix CVE-2025-38705
  - !18782 【OLK-5.10】fix CVE-2025-38712
  - !18612 [OLK-5.10] Fix CVE-2025-38713
  - !18635 [OLK-5.10] Fix CVE-2025-38714
  - !18862 [OLK-5.10] Fix CVE-2025-38697
  - !20058  CVE-2025-38111
  - !20131  wifi: cfg80211: fix use-after-free in cmp_bss()
  - !20306  mm/kmemleak: move up cond_resched() call in page scanning loop
  - !20309 hwmon: constify pointers to hwmon_channel_info
  - hwmon: fix kabi of struct hwmon_channel_info
  - !20338  mlxsw: spectrum_router: Fix neighbour use-after-free
  - !20337  mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
  - hwmon: constify pointers to hwmon_channel_info
  - mlxsw: spectrum_router: Fix neighbour use-after-free
  - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
  - !20316  um: virtio_uml: Fix use-after-free after put_device in probe
  - !20114  KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
  - !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc
  - um: virtio_uml: Fix use-after-free after put_device in probe
  - !20300  software node: Correct a OOB check in software_node_get_reference_args()
  - !20299  jfs: add sanity check for agwidth in dbMount
  - !20278  iavf: fix off-by-one issues in iavf_config_rss_reg()
  - !20277  e1000: fix OOB in e1000_tbi_should_accept()
  - !20285  hwmon: (ibmpex) fix use-after-free in high/low store
  - mm/kmemleak: move up cond_resched() call in page scanning loop
  - !19953 【OLK-5.10】 power_meter patchs from 6.6
  - software node: Correct a OOB check in software_node_get_reference_args()
  - jfs: add sanity check for agwidth in dbMount
  - hwmon: (ibmpex) fix use-after-free in high/low store
  - !20269  drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
  - !20271  KVM: x86: use array_index_nospec with indices that come from guest
  - !19788  ima: Handle error code returned by ima_filter_rule_match()
  - iavf: fix off-by-one issues in iavf_config_rss_reg()
  - e1000: fix OOB in e1000_tbi_should_accept()
  - !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver
  - !20203  drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
  - !20202  scsi: qla2xxx: Fix premature hw access after PCI error
  - !19728  scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
  - !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09
  - KVM: x86: use array_index_nospec with indices that come from guest
  - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
  - !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue
  - RDMA/hns: Support config and query the CNP DSCP for HIP09
  - !20221 Revert "RDMA/hns: Fix mismatch exception rollback"
  - !20195  ACPI: APEI: Handle repeated SEA error interrupts storm
  - !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes
  - Revert "RDMA/hns: Fix mismatch exception rollback"
  - RDMA/hns: Support drain SQ and RQ
  - RDMA/hns: Return actual error code instead of fixed EINVAL
  - RDMA/hns: Notify ULP of remaining soft-WCs during reset
  - RDMA/hns: Fix WQ_MEM_RECLAIM warning
  - RDMA/hns: Fix RoCEv1 failure due to DSCP
  - !20161  cifs: fix session state check in reconnect to avoid use-after-free issue
  - !20050  smb: client: Fix use-after-free in cifs_fill_dirent
  - !19834 v2  md/raid0, raid10: Don't set discard sectors for request queue
  - !19816  scsi: sg: Do not sleep in atomic context
  - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
  - scsi: qla2xxx: Fix premature hw access after PCI error
  - ACPI: APEI: Handle repeated SEA error interrupts storm
  - !20150  tracing: Do not register unsupported perf events
  - !20163  tracing: Fix enabling of tracing on file release
  - !19938 net: hns3: add VLAN id validation before using
  - !19836 [OLK-5.10] Fixes for SEV-ES Guest Support
  - !20044 【openEuler-22.03-LTS-SP4】Memory copy error
  - !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2
  - !20025 [OLK-5.10]Support SMT control on arm64.
  - !19922  NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL
  - !19985  regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
  - !19996  net: netpoll: fix incorrect refcount handling causing incorrect cleanup
  - !19908 drivers:misc:sdma-dae: add NULL judgement of global variables
  - !20026  fs/buffer: fix use-after-free when call bh_read() helper
  - !19962  i40e: add max boundary check for VF filters
  - !20103  kmemleak: Fix kmemleak false warnings
  - !20169  HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
  - !20052  CVE-2024-21823
  - !18962  erofs: Fix erofs_bmap error
  - !20016  kernfs: Fix UAF issue
  - !19694  ARM: fix hash_name() issue
  - !20048  VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
  - !20065  Fix CVE-2022-50737
  - !20066  smb: client: fix race with concurrent opens in rename(2)
  - !20151 v2  Fix CVE-2025-40016
  - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register
  - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates
  - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems
  - ACPI: IPMI: Add helper to wait for when SMI is selected
  - hwmon: (acpi_power_meter) Fix the fake power alarm reporting
  - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices().
  - hwmon: (acpi_power_meter) Fix update the power trip points on failure
  - hwmon: (acpi_power_meter) Fix uninitialized variables
  - !20047  crypto: af_alg - Set merge to zero early in af_alg_sendmsg
  - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method
  - hwmon: (acpi_power_meter) replace open-coded kmemdup_nul
  - hwmon: (acpi_power_meter) Fix style issues
  - hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device()
  - hwmon: acpi_power_meter: Get rid of ACPICA message printing
  - ACPI: utils: Introduce acpi_evaluation_failure_warn()
  - ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE
  - hwmon: (acpi_power_meter) clean up freeing code
  - x86/sev: merge continuous pages into a large range when notifying range enc status changes
  - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
  - tracing: Fix enabling of tracing on file release
  - cifs: fix session state check in reconnect to avoid use-after-free issue
  - media: uvcvideo: Use heuristic to find stream entity
  - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
  - media: uvcvideo: Allow extra entities
  - tracing: Do not register unsupported perf events
  - wifi: cfg80211: fix use-after-free in cmp_bss()
  - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
  - arm64: kdump: fix kmemleak unknown object warning when crash base is set
  - arm64: kdump: fix kmemleak unknown object warning
  - x86/sev: Use "SEV: " prefix for messages from sev.c
  - x86/sev: Propagate #GP if getting linear instruction address failed
  - smb: client: fix race with concurrent opens in rename(2)
  - fs/ntfs3: Add null pointer checks
  - fs/ntfs3: Validate buffer length while parsing index
  - fs/ntfs3: Validate index root when initialize NTFS security
  - net/mdiobus: Fix potential out-of-bounds read/write access
  - net: mdio: C22 is now optional, EOPNOTSUPP if not provided
  - dmaengine: idxd: Fix ->poll() return value
  - dmaengine: idxd: Fix allowing write() from different address spaces
  - dmaengine: idxd: Fix passing freed memory in idxd_cdev_open()
  - dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling
  - dmaengine: idxd: add per DSA wq workqueue for processing cr faults
  - dmaengine: idxd: add a write() method for applications to submit work
  - dmaengine: idxd: add a new security check to deal with a hardware erratum
  - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
  - smb: client: Fix use-after-free in cifs_fill_dirent
  - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
  - crypto: af_alg - Set merge to zero early in af_alg_sendmsg
  - tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench'
  - x86: don't use REP_GOOD or ERMS for small memory clearing
  - x86: don't use REP_GOOD or ERMS for small memory copies
  - fs/buffer: fix use-after-free when call bh_read() helper
  - powerpc/kexec: Enable SMT before waking offline CPUs
  - cpu/SMT: Enable SMT only if a core is online
  - cpu/SMT: Create topology_smt_thread_allowed()
  - powerpc/topology: Check if a core is online
  - config: enable CONFIG_HOTPLUG_SMT for arm64
  - arm64: Kconfig: Enable HOTPLUG_SMT
  - arm64: topology: Support SMT control on ACPI based system
  - arch_topology: Support SMT control for OF based system
  - cpu/SMT: Provide a default topology_is_primary_thread()
  - powerpc: Add HOTPLUG_SMT support
  - Revert "arm64: Kconfig: Enable HOTPLUG_SMT"
  - kernfs: Fix kabi broken in struct kernfs_root
  - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir().
  - kernfs: fix potential NULL dereference in __kernfs_remove
  - kernfs: fix NULL dereferencing in kernfs_remove
  - kernfs: remove redundant kernfs_rwsem declaration.
  - kernfs: prevent early freeing of root node
  - kernfs: switch global kernfs_rwsem lock to per-fs lock
  - KVM: SVM: Make sure GHCB is mapped before updating
  - KVM: SVM: check CR4 changes against vcpu->arch
  - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests
  - x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]()
  - x86/sev: Fix error message in runtime #VC handler
  - net: netpoll: fix incorrect refcount handling causing incorrect cleanup
  - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
  - i40e: add max boundary check for VF filters
  - net: hns3: add VLAN id validation before using
  - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled
  - ACPI: thermal: Move to dedicated function sysfs extra attr creation
  - ACPI: thermal: Use thermal_zone_device()
  - thermal: core: Encapsulate tz->device field
  - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL
  - drivers:misc:sdma-dae: add NULL judgement of global variables
  - md/raid0, raid10: Don't set discard sectors for request queue
  - scsi: sg: Do not sleep in atomic context
  - ima: Handle error code returned by ima_filter_rule_match()
  - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
  - ARM: fix hash_name() fault
  - ARM: allow __do_kernel_fault() to report execution of memory faults
  - configs: enable CONFIG_MICROCODE_ZHAOXIN
  - x86/microcode: Add Zhaoxin cpu microcode update driver
  - drm/amd/pm: fix null pointer access
  - batman-adv: fix OOB read/write in network-coding decode
  - PCI: Fix PCIe unplug Enumeration Long Blocking Issue
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - erofs: Fix erofs_bmap error
  - jfs: upper bound check of tree index in dbAllocAG
  - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
  - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
  - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-300.0.0.203
changelog:
  - !20464  rcu: Protect ->defer_qs_iw_pending from data race
  - !20318 net: hns3: check pf tc cfg when setting vf tc
  - !20522  CVE-2022-50616
  - !20423  use SYS_CNTVCTSS_EL0 for gettimeofday
  - regulator: core: Fix resolve supply lookup issue
  - regulator: core: Use different devices for resource allocation and DT lookup
  - !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO.
  - !19965  nvme-fc: use lock accessing port_state and rport state
  - !20226  leapraid: supports LeapRaid controller
  - !20436  fix CVE-2026-22998
  - rcu: Protect ->defer_qs_iw_pending from data race
  - !20449  scsi/hiraid: Support New Raid feature
  - !20252  ntfs: set dummy blocksize to read boot_block when mounting
  - !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc
  - !20335  Fix CVE-2025-37947
  - mm: Add PAGE_ALIGN_DOWN macro
  - soc cache: fix walk page parameter and drop incorrect check
  - soc cache: Fix incorrect error path of ioctl
  - soc cache: Fix incorrect size validation
  - soc cache: Enforce maintain type check
  - soc cache: Modify default config to compile HiSilicon SoC cache driver
  - !19858 [OLK-5.10] perf support for HiSilicon HIP12
  - !20331 Fix CVE-2025-39835
  - !20439 Fix CVE-2025-39945
  - !20251 Fix CVE-2025-38480
  - !20184 Fix CVE-2025-37770
  - !20185 Fix CVE-2022-49829
  - !20183 Fix CVE-2025-23138
  - !20240 Fix CVE-2025-21981
  - !20409  net: xfrm: Fix CVE-2025-40215
  - !20408  net: xfrm: Fix CVE-2025-39797
  - !20407  netfilter: allow exp not to be removed in nf_ct_find_expectation
  - !20406  bpf, sockmap: Avoid using sk_socket after free when sending
  - !20405  can: bcm: add locking for bcm_op runtime updates
  - !20404  RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
  - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent
  - scsi/hiraid: Support New Raid feature
  - !19950 【OLK-5.10】 Drivers GPU Patches from 6.6
  - !20422  driver core: fix potential null-ptr-deref in device_add()
  - cnic: Fix use-after-free bugs in cnic_delete_task
  - !20421  arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
  - !20420  usb: early: xhci-dbc: Fix a potential out-of-bound memory access
  - !20418  drivers: base: Free devm resources when unregistering a device
  - !20417  driver core: fix resource leak in device_add()
  - !20416  Fix CVE-2022-49309
  - !20415  kernel/resource: fix kfree() of bootmem memory again
  - !20414  drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
  - !20413  of: check previous kernel's ima-kexec-buffer against memory bounds
  - !20412  HID: core: Harden s32ton() against conversion to 0 bits
  - !20411  iommu/amd: Avoid stack buffer overflow from kernel cmdline
  - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
  - nvmet-tcp: remove boilerplate code
  - !20390  drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
  - vdso: do cntvct workaround in the VDSO
  - arm64: vdso: remove two .altinstructions related symbols
  - arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday
  - arm64: alternative: patch alternatives in the vDSO
  - arm64: module: move find_section to header
  - driver core: fix potential null-ptr-deref in device_add()
  - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
  - usb: early: xhci-dbc: Fix a potential out-of-bound memory access
  - drivers: base: Free devm resources when unregistering a device
  - driver core: fix resource leak in device_add()
  - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler()
  - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback()
  - !20383  usb: cdns3: fix random warning message when driver load
  - kernel/resource: fix kfree() of bootmem memory again
  - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
  - of: check previous kernel's ima-kexec-buffer against memory bounds
  - HID: core: Harden s32ton() against conversion to 0 bits
  - !19959 【OLK-5.10】Support NMI Watchdog
  - iommu/amd: Avoid stack buffer overflow from kernel cmdline
  - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
  - xfrm: delete x->tunnel as we delete x
  - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
  - xfrm: Duplicate SPI Handling
  - netfilter: allow exp not to be removed in nf_ct_find_expectation
  - bpf, sockmap: Avoid using sk_socket after free when sending
  - can: bcm: add locking for bcm_op runtime updates
  - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
  - x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation.
  - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
  - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh
  - watchdog/perf: Provide function for adjusting the event period
  - config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64
  - irqchip/gic-v3: Fix one race condition due to NMI withdraw
  - watchdog: Fix call trace when failed to initialize sdei
  - watchdog: Support watchdog_sdei coexist with existing watchdogs
  - init: only move down lockup_detector_init() when sdei_watchdog is enabled
  - arm64: enable perf events based hard lockup detector
  - arm64: add hw_nmi_get_sample_period for preparation of lockup detector
  - usb: cdns3: fix random warning message when driver load
  - !20051  smb3: fix for slab out of bounds on mount to ksmbd
  - comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
  - watch_queue: fix pipe accounting mismatch
  - drm/amd/pm/powerplay: Prevent division by zero
  - !20357  ext4: fix e4b bitmap inconsistency reports
  - ice: fix memory leak in aRFS after reset
  - drm/hisilicon/hibmc: hibmc-drm bugfix for DP
  - !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6
  - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on
  - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
  - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
  - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
  - drm/hisilicon/hibmc: Add vga connector detect functions
  - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
  - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
  - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
  - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
  - drm/hisilicon/hibmc: Add dp serdes cfg in dp process
  - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
  - drm/hisilicon/hibmc: Restructuring the header dp_reg.h
  - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
  - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
  - drm/ast: Implement polling for VGA and SIL164 connectors
  - drm/sysfs: Register "ddc" symlink later
  - drm/hisilicon/hibmc: add dp module in hibmc
  - drm/hisilicon/hibmc: refactored struct hibmc_drm_private
  - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver
  - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers
  - drm/hisilicon/hibmc: add dp aux in hibmc drivers
  - gic: increase the arch_timer priority to avoid hardlockup
  - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803
  - drm/scheduler: fix fence ref counting
  - !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology
  - ext4: fix e4b bitmap inconsistency reports
  - !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction
  - !20256 Fix CVE-2025-39828
  - !20339  wifi: prevent A-MSDU attacks in mesh networks
  - wifi: prevent A-MSDU attacks in mesh networks
  - ksmbd: fix stream write failure
  - ksmbd: prevent out-of-bounds stream writes by validating *pos
  - xfs: do not propagate ENODATA disk errors into xattr code
  - net: hns3: check pf tc cfg when setting vf tc
  - net: hns3: support tc limit speed
  - net: hns3: the multi-tcs VF can be configured only when the interface is down
  - irqchip/gic-v3-its: Remove DevID Pool's restriction
  - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
  - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *'
  - perf: Update .gitignore file
  - perf stat: Enable iostat mode for x86 platforms
  - perf stat: Helper functions for PCIe root ports list in iostat mode
  - perf: Fix tt_core mismatch over PG CPU
  - perf iostat: Use system-wide mode if the target cpu_list is unspecified
  - perf arm_spe: Correct memory level for remote access
  - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU
  - Documentation: hisi-pmu: Fix of minor format error
  - drivers/perf: hisi: Add support for L3C PMU v3
  - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs
  - arm64: topology: Setup amu fie when cpu hotplugging
  - topology: Set capacity_freq_ref in all cases
  - arm64/amu: Use capacity_ref_freq() to set AMU ratio
  - cpufreq/cppc: Set the frequency used for computing the capacity
  - cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
  - energy_model: Use a fixed reference frequency
  - cpufreq/schedutil: Use a fixed reference frequency
  - cpufreq: Use the fixed and coherent frequency for scaling capacity
  - sched/topology: Add a new arch_scale_freq_ref() method
  - arch_topology: Introduce thermal pressure update function
  - riscv: export cpu/freq invariant to scheduler
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power()
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost()
  - cpufreq: Allow drivers to advertise boost enabled
  - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret'
  - openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE
  - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE
  - cpufreq: CPPC: Fix unused-function warning
  - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
  - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
  - cpufreq: Initialize cpufreq-based invariance before subsys
  - cpufreq: ACPI: Mark boost policy as enabled when setting boost
  - cpufreq: ACPI: Only set boost MSRs on supported CPUs
  - cpufreq: ACPI: Defer setting boost MSRs
  - cpufreq: acpi: Remove acpi_cpufreq_cpu_ready()
  - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw()
  - Documentation: power: Add description about new callback for EM registration
  - arch_topology: Avoid use-after-free for scale_freq_data
  - cpufreq: Exit governor when failed to start old governor
  - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq()
  - cpufreq: Initialize cpufreq-based frequency-invariance later
  - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost
  - cpufreq: Remove duplicate check in __cpufreq_offline()
  - cpufreq: Don't unregister cpufreq cooling on CPU hotplug
  - cpufreq: Remove the ->stop_cpu() driver callback
  - cpufreq: intel_pstate: Combine ->stop_cpu() and ->offline()
  - cpufreq: powernv: Migrate to ->exit() callback instead of ->stop_cpu()
  - docs/zh_CN: add cpu-freq cpu-drivers.rst translation
  - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs
  - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em()
  - cpufreq: CPPC: Do not return a value from populate_efficiency_class()
  - cpufreq: CPPC: Remove cpu_data_list
  - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate()
  - cpufreq: CPPC: Register EM based on efficiency class information
  - PM: EM: Change the order of arguments in the .active_power() callback
  - cpufreq: Add callback to register with energy model
  - PM: EM: Add .get_cost() callback
  - cpufreq: CPPC: Add per_cpu efficiency_class
  - cpufreq: remove useless INIT_LIST_HEAD()
  - ACPI: CPPC: Disable FIE if registers in PCC regions
  - ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset
  - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate()
  - cpufreq: cppc: Fix invalid return value in .get() callback
  - cppc_cpufreq: Fix possible null pointer dereference
  - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn()
  - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus
  - cpufreq: CPPC: Add support for frequency invariance
  - arch_topology: Export arch_freq_scale and helpers
  - cpufreq: CPPC: Pass structure instance by reference
  - cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init
  - cpufreq: CPPC: Migrate to ->exit() callback instead of ->stop_cpu()
  - cppc_cpufreq: replace per-cpu data array with a list
  - cppc_cpufreq: expose information on frequency domains
  - cppc_cpufreq: clarify support for coordination types
  - arch_topology: Allow multiple entities to provide sched_freq_tick() callback
  - sched/topology,schedutil: Wrap sched domains rebuild
  - arch_topology: Rename freq_scale as arch_freq_scale
  - arm64: topology: Drop the useless update to per-cpu cycles
  - arm64: topology: Make AMUs work with modular cpufreq drivers
  - arm64: topology: Reorder init_amu_fie() a bit
  - arm64: topology: Avoid the have_policy check
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
  - cpufreq: prevent NULL dereference in cpufreq_online()
  - cpufreq: CPPC: Fix wrong max_freq in policy initialization
  - cppc_cpufreq: simplify use of performance capabilities
  - cpufreq: Introduce a more generic way to set default per-policy boost flag
  - cpufreq: Fix re-boost issue after hotplugging a CPU
  - cpufreq: Support per-policy performance boost
  - ntfs: set dummy blocksize to read boot_block when mounting
  - leapraid: supports LeapRaid controller
  - perf mem: Count L2 HITM for c2c statistic
  - perf mem: Add statistics for peer snooping
  - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel
  - perf arm-spe: augment the data source type with neoverse_spe list
  - tools arm64: Import cputype.h
  - arm64: cputype: Add cputype definition for HIP12
  - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu
  - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface
  - drivers/perf: hisi: Add cacheable option for L3C PMU
  - perf: Remove unstable events for uncore L3C PMU
  - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu
  - perf iostat: hisi: Fix port range retrival
  - drivers/perf: hisi: Add support for L3C PMU v3
  - drivers/perf: hisi: Refactor the event configuration of L3C PMU
  - drivers/perf: hisi: Extend the field of tt_core
  - drivers/perf: hisi: Extract the event filter check of L3C PMU
  - drivers/perf: hisi: Simplify the probe process of each L3C PMU version
  - drivers/perf: hisi: Export hisi_uncore_pmu_isr()
  - drivers/perf: hisi: Relax the event ID check in the framework
  - drivers/perf: hisi: Add support for HiSilicon MN PMU driver
  - drivers/perf: hisi: Add support for HiSilicon NoC PMU
  - drivers/perf: hisi: Support PMUs with no interrupt
  - drivers/perf: hisi: Relax the event number check of v2 PMUs
  - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver
  - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information
  - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - drivers/perf: hisi: Simplify the probe process for each DDRC version
  - drivers/perf: hisi: Delete redundant blank line of DDRC PMU
  - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver
  - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs
  - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier
  - drivers/perf: convert sysfs snprintf family to sysfs_emit
  - perf: hisi: Constify static struct attribute_group
  - perf/hisi: Constify static attribute_group structs
  - drivers/perf: hisi: Add a common function to retrieve topology from firmware
  - drivers/perf: hisi: Extract topology information to a separate structure
  - drivers/perf: hisi: Refactor the detection of associated CPUs
  - drivers/perf: hisi: Migrate to one online CPU if no associated one online
  - drivers/perf: hisi: Don't update the associated_cpus on CPU offline
  - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs
  - perf stat: Enable iostat mode for HiSilicon PCIe PMU
  - perf stat: Add struct perf_stat_aggr to perf_stat_evsel
  - perf stat: Display iostat headers correctly
  - perf stat: Don't display metric header for non-leader uncore events
  - perf stat: Basic support for iostat in perf
  - perf arm-spe: Refactor arm-spe to support operation packet type
  - perf arm-spe: Use SPE data source for neoverse cores
  - perf arm-spe: Don't set data source if it's not a memory operation
  - perf tools: Sync addition of PERF_MEM_SNOOPX_PEER
  - tools: arm64: Import sysreg.h
  - smb3: fix for slab out of bounds on mount to ksmbd
  - watchdog/perf: adapt the watchdog_perf interface for async model
  - watchdog/perf: add a weak function for an arch to detect if perf can use NMIs
  - irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed
  - irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked
  - irqchip/gic-v3: Implement FEAT_GICv3_NMI support
  - arm64/nmi: Add Kconfig for NMI
  - arm64/nmi: Add handling of superpriority interrupts as NMIs
  - arm64/irq: Document handling of FEAT_NMI in irqflags.h
  - arm64/entry: Don't call preempt_schedule_irq() with NMIs masked
  - arm64/nmi: Manage masking for superpriority interrupts along with DAIF
  - nvme-fc: use lock accessing port_state and rport state
  - KVM: arm64: Hide FEAT_NMI from guests
  - arm64/cpufeature: Detect PE support for FEAT_NMI
  - arm64/hyp-stub: Enable access to ALLINT
  - arm64/asm: Introduce assembly macros for managing ALLINT
  - arm64/sysreg: Add definitions for immediate versions of MSR ALLINT
  - arm64/booting: Document boot requirements for FEAT_NMI
  - irqchip/gic-v3: Fix priority mask handling
  - irqchip/gic-v3: Refactor ISB + EOIR at ack time
  - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802
  - soc cache: Add framework driver for HiSilicon SoC cache


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-301.0.0.204
changelog:
  - !20333 phytium-tpcm-sig-8-hadler-reg-s5000c
  - !20767  Revert hibmc patches to fix null-ptr-deref
  - Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6"
  - Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert"
  - !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT
  - cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT
  - !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert
  - drm/hisilicon: Using the to_hibmc_drm_private to convert
  - drm/hisilicon: Code refactoring for hibmc_drm_drv
  - !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 & SM4 algorithm
  - !20666  CVE-2023-53712
  - !20673 Fix CVE-2025-39957
  - !20686  Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
  - !20687  i40e: Fix potential invalid access when MAC list is empty
  - !20692  ipv6: sr: Fix MAC comparison to be constant-time
  - !20699  sctp: linearize cloned gso packets in sctp_rcv
  - !20688  tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
  - !20698  libceph: fix potential use-after-free in have_mon_and_osd_map()
  - !20697  tipc: Fix use-after-free in tipc_mon_reinit_self().
  - sctp: linearize cloned gso packets in sctp_rcv
  - libceph: fix potential use-after-free in have_mon_and_osd_map()
  - tipc: Fix use-after-free in tipc_mon_reinit_self().
  - ipv6: sr: Fix MAC comparison to be constant-time
  - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
  - i40e: Fix potential invalid access when MAC list is empty
  - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
  - !20119 Add 950 KVM feature support
  - !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration
  - !20638  ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
  - !20637  net/sched: sch_qfq: do not free existing class in qfq_change_class()
  - !20636 v2  macvlan: fix possible UAF in macvlan_forward_source()
  - wifi: mac80211: increase scan_ies_len for S1G
  - !20566  crypto: lzo - Fix compression buffer overrun
  - KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer
  - KVM: arm64: ipiv: Fix compilation warning
  - KVM: arm64: check if IPIV is enabled in BIOS
  - kvm: hisi: print error for IPIV
  - KVM: arm64: using kvm_vgic_global_state for ipiv
  - kvm: hisi: Don't allow to change mpidr in IPIv
  - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv
  - KVM: arm64: fix live migration bug of IPIv
  - irqchip/gic: Add HiSilicon PV SGI support
  - KVM: arm64: Implement PV_SGI related calls
  - KVM: arm64: Document PV-sgi interface
  - KVM: arm64: Introduce ipiv enable ioctl
  - arm64/config: add config to control whether enable IPIV feature
  - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration
  - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12
  - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE
  - kvm: hisi_virt: Register ipiv exception interrupt
  - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule
  - kvm: arm64: avoid sending multi-SGIs in IPIV
  - kvm: hisi_virt: Allocate VM table and save vpeid in it
  - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2
  - KVM: arm64: fix memory leak in TLBI
  - KVM: arm64: Add new HiSi CPU type to support DVMBM
  - kvm: hisi_virt: Update TLBI broadcast feature for hip12
  - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE
  - ARM: 9317/1: kexec: Make smp stop calls asynchronous
  - !20654  scsi: qla4xxx: Prevent a potential error pointer dereference
  - !20653  bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
  - !20655  mm/slub: avoid accessing metadata when pointer is invalid in object_err()
  - !20656  firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
  - !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors
  - x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors
  - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
  - mm/slub: avoid accessing metadata when pointer is invalid in object_err()
  - scsi: qla4xxx: Prevent a potential error pointer dereference
  - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
  - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
  - net/sched: sch_qfq: do not free existing class in qfq_change_class()
  - macvlan: fix possible UAF in macvlan_forward_source()
  - !20597  team: fix check for port enabled in team_queue_override_port_prio_changed()
  - !20593  CVE-2025-39744 fixup
  - !20465  SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
  - !20178 v3  Fix CVE-2024-53179
  - team: fix check for port enabled in team_queue_override_port_prio_changed()
  - rcu: Fix racy re-initialization of irq_work causing hangs
  - rcu: Fix rcu_read_unlock() deadloop due to IRQ work
  - rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs
  - !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts
  - !20428  wifi: mt76: do not run mt76u_status_worker if the device is not running
  - !20427  RDMA/bnxt_re: Prevent handling any completions after qp destroy
  - !20466  pptp: ensure minimal skb length in pptp_xmit()
  - !20426  net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
  - !20574  RDMA/cm: Fix leaking the multicast GID table reference
  - !20573  media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
  - !20565 Fix CVE-2023-53521
  - !20521 Fix CVE-2026-23038
  - RDMA/cm: Fix leaking the multicast GID table reference
  - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
  - crypto: lzo - Fix compression buffer overrun
  - !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y
  - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
  - eth: bnxt: move and rename reset helpers
  - x86: Resolve FPU state corruption between atomic and non-atomic contexts
  - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
  - bnxt_en: Fix potential data corruption with HW GRO/LRO
  - pptp: ensure minimal skb length in pptp_xmit()
  - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
  - wifi: mt76: do not run mt76u_status_worker if the device is not running
  - RDMA/bnxt_re: Prevent handling any completions after qp destroy
  - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
  - phytium: add tpcm sgi handler for s5000c
  - smb: client: fix use-after-free of signing key
  - cifs: missed ref-counting smb session in find
  - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
  - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
  - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH
  - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode
  - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode
  - crypto: ccp: Add support to switch to CSV RING_BUFFER mode
  - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode
  - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode
  - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues
  - openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI
  - crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm
  - crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-302.0.0.205
changelog:
  - !20737  pNFS: Fix a deadlock when returning a delegation during open()
  - !20725  tracing: Add recursion protection in kernel stack trace recording
  - !20746 Fix CVE-2026-22990
  - !20671  arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
  - !20669  irqchip/gic-v3-its: Avoid truncating memory addresses
  - libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
  - pNFS: Fix a deadlock when returning a delegation during open()
  - tracing: Add recursion protection in kernel stack trace recording
  - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
  - irqchip/gic-v3-its: Avoid truncating memory addresses


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-303.0.0.206
changelog:
  - !20899 Fix CVE-2026-23216
  - !20885  nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
  - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
  - !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file
  - !20839  bpf, cpumap: Make sure kthread is running before map update returns
  - bpf, cpumap: Make sure kthread is running before map update returns
  - !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1
  - !20818  dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
  - !20801  ACPI/IORT: Add PMCG platform information for 162001900
  - !20814  migrate: correct lock ordering for hugetlb file folios
  - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
  - !20800  fix CVE-2026-23054
  - migrate: correct lock ordering for hugetlb file folios
  - ACPI/IORT: Add PMCG platform information for 162001900
  - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata
  - net: hv_netvsc: reject RSS hash key programming without RX indirection table
  - hv_netvsc: Allocate rx indirection table size dynamically
  - RDMA/hns: Remove the accidentally added hns_roce_trace.h file
  - irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-304.0.0.207
changelog:
  - !21136  sched/rt: Skip currently executing CPU in rto_next_cpu()
  - !21131  procfs: fix missing RCU protection when reading real_parent in do_task_stat()
  - !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver
  - !21093  kexec: derive purgatory entry from symbol
  - !21140  ksmbd: fix use-after-free in kerberos authentication
  - !21132  SUNRPC: Ensure the transport backchannel association
  - ksmbd: fix use-after-free in kerberos authentication
  - sched/rt: Skip currently executing CPU in rto_next_cpu()
  - SUNRPC: Ensure the transport backchannel association
  - procfs: fix missing RCU protection when reading real_parent in do_task_stat()
  - !21112  CVE-2024-57979
  - !21111  ALSA: aloop: Fix racy access at PCM trigger
  - pps: Fix kabi in pps_device
  - pps: Fix a use-after-free
  - ALSA: aloop: Fix racy access at PCM trigger
  - kexec: derive purgatory entry from symbol
  - ipmi: Add HiSilicon IPMI Page Soft Offline driver
  - !21072 v2  arm64/mpam: enable MPAM feature and
  - !20883  RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests
  - !21021  CVE-2026-23209
  - arm64/mpam: fix the bitmap written during mpam device reset
  - arm64/mpam: only allow L3 cache MPAM device created
  - arm64/mpam: fix inadvertently updating after repeatedly updating
  - arm64/mpam: set default feedback of last_cmd_status interface as null string
  - !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured
  - !19837 KVM: Drop tlbs_dirty
  - !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers
  - !21014  bpf selftest cross compile fixes
  - macvlan: observe an RCU grace period in macvlan_common_newlink() error path
  - macvlan: fix error recovery in macvlan_common_newlink()
  - !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
  - selftests/bpf: Pass target triple to get_sys_includes macro
  - selftests/bpf: Enable cross-building
  - net: hns3: hns3 driver should be initialized when VF multi tcs is configured
  - net: hns3: modify code of judging if SMMU DMA is enabled
  - !20976  support apei_page_offline_policy
  - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page()
  - nvmet-tcp: don't map pages which can't come from HIGHMEM
  - nvmet-tcp: fix regression in data_digest calculation
  - nvmet-tcp: fix memory leak when performing a controller reset
  - !20971 Fix CVE-2026-23074
  - apei/ghes: Add sysctl interface to control soft-offline page isolation
  - Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages"
  - !20887  HiSock Enhancement
  - net/sched: Enforce that teql can only be used as root qdisc
  - drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers
  - !20891  dcache: Limit the minimal number of bucket to two
  - !20956  CVE-2025-39967
  - fbcon: Fix OOB access in font allocation
  - fbcon: fix integer overflow in fbcon_do_set_font
  - overflow: Allow mixed type arguments
  - nvmet-tcp: add an helper to free the cmd buffers
  - dcache: Limit the minimal number of bucket to two
  - bpf: Deprecate hisock unused helpers and orig ingress logic
  - bpf: Add local connect support for hisock
  - bpf: Add ipv4-mapped ipv6 addr support for hisock
  - bpf: Add target comm parse to hisock_cmd
  - bpf: Add multi port parse to hisock_cmd
  - bpf: Only deploy hisock in server
  - bpf: Apply BPF_HISOCK_INGRESS to hisock ingress
  - bpf: Add bpf_handle_ingress/egress_ptype helper function
  - bpf: Add bpf_set_ingress/egress_dev helper function
  - bpf: Add bpf_get_skb_ethhdr helper function
  - bpf: Add bpf_set_ingress_dst helper function
  - bpf: Add BPF_HISOCK_INGRESS attach type
  - net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h
  - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests
  - KVM: Drop tlbs_dirty


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-305.0.0.208
changelog:
  - !21262  arm64/mpam: Extending MPAM features and bugfix
  - arm64/mpam: Allow MBMIN to be set to 0
  - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit
  - arm64/mpam: Add quirk to shrink MATA PMG range
  - !21211  scsi: hisi_sas: Change the debugfs parameters dump count default value
  - scsi: hisi_sas: Change the debugfs parameters dump count default value
  - !21163  gic: Add hip09 support for HISILICON_ERRATUM_165010801
  - gic: Add hip09 support for HISILICON_ERRATUM_165010801


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-306.0.0.209
changelog:
  - !21336  arm64/mpam: Add nrdy latency to mbw_rdmon.
  - arm64/mpam: Add nrdy latency to mbw_rdmon.
  - !21243  fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
  - !20753 [OLK-5.10] Fix the issue that vm can't access to host with virtio-net
  - !21301 [OLK-5.10]:update patches for sw64 architecture
  - !21274  l2tp: fix double dst_release() on sk_dst_cache race
  - !21215 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-6.6.y
  - sw64: fix the compilation error when CONFIG_DEBUG_VIRTUAL is enabled
  - sw64: add support for batched TLB flushing during unmap
  - sw64: fix the parameter passing logic of memblock_mark_nomap
  - sw64: add HUGE_VMAP support for c4
  - sw64: adjust the value of CONFIG_RELOCATION_TABLE_SIZE
  - sw64: define get_cycles macro
  - sw64: cpuidle: refine C6 state stability
  - sw64: fix mmap_base exceeding Java assertion address
  - sw64: add memb before/after atomic
  - sw64: add EDAC support with dynamic node and MC detection
  - sw64: fix: getcpu passed a null pointer error
  - sw64: add barriers and tlb flush for set_atc
  - sw64: adapt kernel page table for kdump
  - sw64: adapt kernel page table for memory hotplug
  - sw64: adjust the marking and definitions of some kernel mapping functions
  - sw64: adapt kernel page table for S4
  - sw64: iommu: refactor iommu v2 initialization
  - sw64: fix an inappropriate lock in __set_memory
  - sw64: cache: fix shared_cpu_map when PPTT is invalid
  - sw64: add alternative runtime patching
  - sw64: pci: fix IO_BASE if numa_off
  - sw64: use ioremap to map spaces for cpufreq and S3
  - sw64: add definitions for kernel-required CPU capabilities
  - sw64: pci: add sunway pci controller for Command Completed errata
  - sw64: kvm: add qemu-gdb watchpoint support
  - sw64: kvm: fix srcu lock leak in pv steal time
  - !21277  mm: make sure freeram is smaller than totalram
  - mm: make sure freeram is smaller than totalram
  - l2tp: fix double dst_release() on sk_dst_cache race
  - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
  - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()
  - vhost: move smp_rmb() into vhost_get_avail_idx()
  - vhost: correct misleading printing information


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-307.0.0.210
changelog:
  - !21428  RDMA/umad: Reject negative data_len in ib_umad_write
  - !21420 v3  CVE-2026-23352
  - !21383  fat: avoid parent link count underflow in rmdir
  - !21435 Fix CVE-2026-23388
  - !21392  ext4: fix memory leak in ext4_ext_shift_extents()
  - !21385  ext4: fix dirtyclusters double decrement on fs shutdown
  - !21384  ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O
  - Squashfs: check metadata block offset is within range
  - RDMA/umad: Reject negative data_len in ib_umad_write
  - !21404  fix queue start/stop imbalance under race
  - x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size
  - x86/efi: defer freeing of boot services memory
  - dm: fix queue start/stop imbalance under remove/resume races
  - dm: fix queue start/stop imbalance under suspend/load/resume races
  - ext4: fix memory leak in ext4_ext_shift_extents()
  - ext4: fix dirtyclusters double decrement on fs shutdown
  - ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O
  - fat: avoid parent link count underflow in rmdir
  - !21376 spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization
  - spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization
  - Revert "Fixed the wrong debugfs node name in hisi_spi debugfs initialization"
  - !21321  nfs: return EISDIR on nfs3_proc_create if d_alias is a dir
  - nfs: return EISDIR on nfs3_proc_create if d_alias is a dir


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-308.0.0.211
changelog:
  - !21578  apparmor: fix unprivileged local user can do privileged policy management
  - !21574  ksmbd: Compare MACs in constant time
  - apparmor: fix unprivileged local user can do privileged policy management
  - !21498  ALSA: usb-audio: Use correct version for UAC3 header validation
  - ksmbd: Compare MACs in constant time
  - !21232 [Hygon][5.10][Feature] spi: dw: Add device HID for Hygon SPI controller
  - !21518  KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE
  - !21489  cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_sample()
  - !21455  time/jiffies: Mark jiffies_64_to_clock_t() notrace
  - !21172 [OLK-5.10] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu
  - !21189 [Hygon][5.10][Feature] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h
  - !21201 [Hygon][5.10][Feature] hwmon/k10temp: Add support for Hygon family 18h model 18h
  - !21233 [Hygon][5.10][Feature]mmc: sdhci-pci: Add support for Hygon SD controller
  - !21202 [Hygon][5.10][Feature] iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC
  - !21203 [Hygon][5.10][Feature] ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio
  - !21204 [Hygon][5.10][Feature] EDAC/amd64: Add support for Hygon family 18h model 18h
  - !21186 [Hygon][5.10][Feature] x86/amd_nb: Add Hygon family 18h model 18h PCI IDs
  - !21234 [Hygon][5.10][Feature] mmc: sdhci-acpi: Add device HID for Hygon eMMC controller
  - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE
  - spi: dw: Add device HID for Hygon SPI controller
  - !21501 v2  net: usb: pegasus: validate USB endpoints
  - !21467  mm/huge_memory: fix folio isn't locked in softleaf_to_folio()
  - net: usb: pegasus: validate USB endpoints
  - EDAC/amd64: Add support for Hygon family 18h model 18h
  - ALSA: usb-audio: Use correct version for UAC3 header validation
  - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_sample()
  - !21460  xfs: fix internal error from AGFL exhaustion
  - anolis: mmc: sdhci-acpi: Add device HID for Hygon eMMC controller
  - mmc: sdhci-pci: Add support for Hygon SD controller
  - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio
  - mm/huge_memory: fix folio isn't locked in softleaf_to_folio()
  - hwmon/k10temp: Add support for Hygon family 18h model 18h
  - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC
  - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h
  - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs
  - xfs: fix internal error from AGFL exhaustion
  - time/jiffies: Mark jiffies_64_to_clock_t() notrace
  - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT
  - crypto: ccp: SM2 ccp encryption support Hygon model 10h
  - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm
  - crypto: ccp: Optimize sm4-gcm algorithm for hygon ccp.
  - crypto: ccp: sm4-xts crypto support data not aligned to 16 bytes
  - crypto: ccp: Support SM4-XTS for hygon ccp
  - crypto: ccp: Support SM4-GCM for hygon ccp


author: lingsheng <lingsheng1@h-partners.com> - 3.5.2-9
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: wangkai <13474090681@163.com> - 1.76.0-1
changelog:
  - Update to 1.76.0 because firefox update 128ESR version
  - Fix CVE-2022-21658 CVE-2022-46176 CVE-2023-38497
  - Obsoletes rust-analysis


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.2.0-314
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.2.0-318
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:disable Transparent HugePage for shim process if SHIM_DISABLE_THP is set


author: fuanan <fuanan3@h-partners.com> - 9.0-11
changelog:
  - sync patches from community
  - add backport-who-fix-only-theoretical-overflow.patch
        backport-tac-handle-short-reads-on-input.patch
        backport-setenv-Don-t-crash-if-malloc-returns-NULL.patch
        backport-who-don-t-crash-if-clock-gyrates.patch
        backport-doc-od-strings-clarify-operation.patch
        backport-wc-port-to-kernels-that-disable-XSAVE-YMM.patch


author: jiangchuangang <jiangchuangang@huawei.com> - 9.0-12
changelog:
  - skip testcase for overlay filesystem because of no inotify_add_watch
    add test-skip-overlay-filesystem-because-of-no-inotify_add_watch.patch


author: huyubiao <huyubiao@huawei.com> - 9.0-16
changelog:
  - sync patches from community
  - add backport-pinky-fix-string-size-calculation.patch
        backport-cksum-consistently-validate-length-attributes.patch
        backport-timeout-fix-race-where-we-might-kill-arbitrary-proce.patch
        backport-timeout-fix-narrow-race-in-failing-to-kill-processes.patch
        backport-maint-basenc-consistently-check-buffer-bounds-when-e.patch
        backport-coreutils-df-direct.patch
        backport-df-fix-memory-leak.patch
        backport-ls-avoid-triggering-automounts.patch
        backport-pr-don-t-use-uninitialized-var.patch
        backport-stat-only-automount-with-cached-never.patch
        backport-touch-fix-aliasing-bug.patch
        backport-putenv-Don-t-crash-upon-out-of-memory.patch
        backport-head-off_t-not-uintmax_t-for-file-offset.patch
        backport-shuf-avoid-integer-overflow-on-huge-inputs.patch
        backport-shuf-fix-randomness-bug.patch


author: huyubiao <huyubiao@huawei.com> - 9.0-18
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: chenhaixiang <chenhaixiang3@huawei.com> - 8.0.2-2
changelog:
  - arm64: Fix again segfault in arm64_is_kernel_exception_frame()
    when corrupt stack pointer address is given


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: xingwei <xingwei14@h-partners.com> - 7.79.1-38
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:altsvc: avoid integer overflow in expire calculation
         test391: verify --path-as-is with redirect
         urlapi: fix redirect to a new fragment or query (only)
         tool_getparam: clear sensitive arguments better


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix freeing of resources in disconnect
         openssl: fix crash on missing cert password


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-4
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:delete report url added by other upstream patch to keep pace with DHCP


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: renmingshuai <renmingshuai@huawei.com> - 2.86-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.86-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         adapt bugfix allow binding mac with ipv6


author: chenyi <chenyi211@huawei.com> - 21.11-78
changelog:
  Sync some patches from upstream about bugfix, modifies are as follow:
  - bus/pci: fix UIO resource mapping in secondary process


author: yexiao<yexiao7@huawei.com> - 202011-14
changelog:
  - fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727


author: yexiao<yexiao7@huawei.com> - 202011-16
changelog:
  - fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-7
changelog:
  - Type:CVE
  - CVE:CVE-2022-24675 CVE-2022-28327 CVE-2022-24921 CVE-2021-44717 CVE-2021-33195
  - SUG:NA
  - DESC: Batch fix cve through rebuild and sync release


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-11
changelog:
  - Type:CVE
  - CVE:CVE-2023-32082 CVE-2021-28235
  - SUG:NA
  - DESC: backport fix CVE-2023-32082 and CVE-2021-28235


author: wangkai <13474090681@163.com> - 128.7.0-1
changelog:
  - Update to 128.7.0
  - Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
    CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
    CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
    CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
    CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
    CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
    CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
    CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
    CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
    CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
    CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
    CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
    CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
    CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
    CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
    CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
    CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
    CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
    CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
    CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
    CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
    CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
    CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
    CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
    CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
    CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
    CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
    CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
    CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
    CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
    CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012


author: wangkai <13474090681@163.com> - 128.8.0-1
changelog:
  - Update to 128.8.0
  - Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
    CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938


author: wangkai <13474090681@163.com> - 128.10.0-1
changelog:
  - Update to 128.10.0
  - Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093


author: wangkai <13474090681@163.com> - 128.11.0-1
changelog:
  - Update to 128.11.0
  - Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
  - Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269


author: wangkai <13474090681@163.com> - 102.14.0-1
changelog:
  - Update to 102.14.0
  - Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056


author: lvfei <lvfei@kylinos.cn> - 102.15.0-1
changelog:
  - Update to 102.15.0
  - Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584


author: yinbin <yinbin8@huawei.com> - 1.0.2-77
changelog:
  - openGauss: support kernel connnect
  - xdp: support stack bind numa
  - CFG: fix xdp iface check error
  - fix build error in 2003SP4
  - cfg: show dpdk args after dpdk_adjust_args
  - fix free null pointer when no matching device is found
  - update test/unitest/ltran/ltran_param_test.c.
  - Fix the wrong spelling description in the notes and logs
  - LWIP: adjust position of shutdown in callback of connect
  - fix socket of control thread is overwirtten due to another primary process start


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: Funda Wang <fundawang@yeah.net> - 9.55.0-18
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.55.0-19
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: fuanan <fuanan3@h-partners.com> - 2.33.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch


author: fuanan <fuanan3@h-partners.com> - 2.33.0-10
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.33.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.33.0-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.33.0-14
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: shixuantong <shixuantong1@huawei.com> - 2.34-157
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:enable shared library use huge page for aarch64 architecture
         revert "elf/ld.so: use special mmap for hugepage to get symbols"
         hugepageedit: static-link build
         elf: the hugepage feature of dynamic library keep compatible with llvm lld
         elf: add some debug info for dynamic library hugepage feature


author: chengyechun <chengyechun1@huawei.com> - 2.34-160
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:resolv: Track single-request fallback via _res._flags
         resolv: Allow short error responses to match any query


author: shixuantong <shixuantong1@huawei.com> - 2.34-162
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:elf: avoid jumping over a needed declaration
         elf: Move __rtld_malloc_init_stubs call into _dl_start_final


author: shixuantong <shixuantong1@huawei.com> - 2.34-163
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:elf: Handle static PIE with non-zero load address
         elf: Introduce _dl_relocate_object_no_relro
         elf: Switch to main malloc after final ld.so self-relocation


author: wangshuo <wangshuo@kylinos.cn> - 1.17.3-31
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-44
changelog:
  - Type:CVE
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-46
changelog:
  - Type:CVE
  - CVE:CVE-2021-46848
  - SUG:NA
  - DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-47
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix log printing in tpcm_kunpeng moddule
         osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
         osdep: Introduce include/grub/osdep/major.h and use it
         disk/mdraid1x_linux: Prevent infinite recursion
         disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-49
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:commands/legacycfg: Avoid closing file twice
         disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end


author: sunhai <sunhai10@huawei.com> - 1:2.06-51
changelog:
  - Type:CVE
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
  24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
  25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
  -0678,CVE-2025-1125
  - SUG:NA
  - DESC:fix the vulnerabilities announced on February 18th, 2025


author: Funda Wang <fundawang@yeah.net> - 1.18.4-8
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: xinghe <xinghe2@h-partners.com> - 2.6.6-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:connection: Clear flags when a conn is removed
         connection: Preserve flags when a conn is removed
         stream: do not try to free a failed stream-conn
         http_ana/txn: don't re-initialize txn and req var
         mworker: prevent incorrect values in uptime
         protocol: fix minor memory leak in protocol_bind_all()
         stream: Perform errors handling in right order in stream_new()


author: xinghe <xinghe2@h-partners.com> - 2.6.6-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:backport to fix potential coredump:
         errors: handle malloc failure in usermsgs_put
         ssl_sock: add check for ha_meth
         thread: add a check for pthread_creat


author: xinghe <xinghe2@h-partners.com> - 2.6.6-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:server: add missing free for server->rdr_pfx
         server: do not leak default-server in defaults


author: xinghe <xinghe2@h-partners.com> - 2.6.6-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: xinghe <xinghe2@h-partners.com> - 2.6.6-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         fix timehopping in freq_ctr_total


author: xinghe <xinghe2@h-partners.com> - 2.6.6-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yanglu <yanglu72@h-partners.com> - 2.6.6-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:queues:Do not use pendconn_grab_from_px
         queues:Make sure we call process_srv_queue when leaving
         queue:Make process_srv_queue return the number of streams


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-17
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:Fix double encoding of the uri-path of the request
         Do not match the extention against possible query string
         Do not double encode slashes
         Check before forwarding that a nocanon path has not been rewriteen


author: panchenbo <panchenbo@kylinsec.com.cn> - 2.4.51-18
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:add sw_64 support,optimize sw build patch,add loongarch64 support


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-21
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-22
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: xingwei <xingwei14@h-partners.com> - 2.4.51-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: gaoxingwang <gaoxingwang1@huawei.com> - 10.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ipnetns: fix fd leak with 'ip netns set'
         iproute2: optimize code and fix some mem-leak risk
         iproute_lwtunnel: fix array boundary check
         iproute_lwtunnel: fix possible use of NULL when malloc()
         m_action: fix warning of overwrite of const string
         netem: fix NULL deref on allocation failure
         nstat: fix potential NULL deref
         rdma/utils: fix some analyzer warnings
         rt_names: check for malloc() failure
         tc/prio: handle possible truncated kernel response
         tc_exec: don't dereference NULL on calloc failure
         tc_util fix unitialized warning
         iptunnel: detect protocol mismatch on tunnel change
         ipmaddr: fix dereference of NULL on malloc() failure


author: mufengyan <mufengyan@hisilicon.com> - 1:5.15.0-15
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:This patch adds ARPHRD_UB for iproute2 and support name
         parse for it and deletes the display of vf address
         information in the pf


author: liubo <liubo335@huawei.com> - 1:5.15.0-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
         tc: ct: Fix invalid pointer dereference
         tc_util: Change datatype for maj to avoid overflow issue
         tc_util: Fix no error return when large parent id used
         xfrm: prepare state offload logic to set mode


author: liubo <liubo335@huawei.com> - 1:5.15.0-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:f_flower: Treat port 0 as valid
         ip: error out if iplink does not consume all options
         iplink_bridge: fix incorrect root id dump
         ss: change aafilter port from int to long (inode support)
         ss: Fix socket type check in packet_show_line()
         ss: print unix socket "ports" as unsigned int (inode)
         Add utility to convert an unsigned int to string
         Add get_long utility and adapt get_integer accordingly
         utils: fix get_integer() logic


author: liweigang <liweiganga@uniontech.com> - 1:5.15.0-19
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: lnstat: Fix deref of null in print_json() function
          iproute2: prevent memory leak
          libnetlink: validate nlmsg header length first
          tc: remove tcindex classifier
          ip: fix memory leak in 'ip maddr show'
          ila: fix potential snprintf buffer overflow
          bridge: fix potential snprintf overflow
          mnl_utils: sanitize incoming netlink payload size in callbacks


author: caokeming <caokeming@huawei.com> - 1:5.15.0-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ctrl: Fix fd leak in ctrl_list()
         ctrl: Fix fd leak in ctrl_listen()
         devlink: use snprintf instead of sprintf


author: xinghe <xinghe2@h-partners.com> - 1:5.15.0-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432.b06-1
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add Backport-8057910-G1-BOT-verification-should-not-pass.patch
  - add Backport-8069330-and-adapt-G1GC-related-optimization.patch
  - add SA-redact-support-password.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.432.b06-2
changelog:
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8253072-XERCES-version-is-displayed-incorrect.patch
  - add 8159461-8288556-getComponentType.patch
  - add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
  - add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.452.b09-0
changelog:
  - update to 8u452
  - modified add-missing-test-case.patch
  - modified GCC-12-reports-some-compiler-warnings.patch


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: Benshuai5D <benshuai5d@huawei> - 1:17.0.14.7-0
changelog:
  - update to 17.0.14
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8280872-Reorder-code-cache-segments-to-improv.patch
  - modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify add-version-txt.patch
  - modify jdk17-Add-KAE-provider.patch


author: Benshuai5D <zhangyunbo7@huawei.com> - 1:21.0.6.7-0
changelog:
  - update to jdk21.0.6-ga
  - delete Backport-JDK-8207908-JMXStatusTest.java-fails-assert.patch
  - delete Backport-JDK-8320682-[AArch64]-C1-compilation-fails-.patch
  - delete Backport-JDK-8331391-Enhance-the-keytool-code-by-inv.patch
  - delete Backport-JDK-8332866-Crash-in-ImageIO-JPEG-decoding-.patch
  - delete Backport-of-8337067-Test-runtime-classFileParserBug-.patch
  - delete Backport-of-JDK-8316895-SeenThread-print_action_que.patch
  - delete Backport-of-JDK-8328723-IP-Address-error-when-client.patch
  - modify Backport-JDK-8329174-update-CodeBuffer-layout-in-com.patch
  - modify Backport-JDK-8340623-Remove-outdated-PROCESSOR_ARCHI.patch


author: wulongyao <wulongyao1@huawei.com> - 1:21.0.6.7-2
changelog:
  - add huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add huawei-Add-KAE-Provider.patch
  - add huawei-Add-KAE-zip-feature.patch
  - add huawei-Fix-arm32-build-failed-undefined-reference.patch
  - add huawei-Add-Fast-Serialzer.patch
  - add huawei-Add-Hashmap-frontCache-opt.patch
  - add huawei-1-add-port-jbolt-feature.patch
  - add huawei-heap-dump-redact-support.patch
  - add huawei-Adapt-to-clang-build-toolchain.patch
  - add huawei-Add-KAE-SM2.patch


author: Dingli Zhang <dingli@iscas.ac.cn> - 1:21.0.6.7-3
changelog:
  - add RVA23 profile and disable auto-enable Vector on buggy kernels for riscv64
  - add Backport-JDK-8315338-RISC-V-Change-flags-for-stable-.patch
  - add Backport-JDK-8329083-RISC-V-Update-profiles-supporte.patch
  - add Backport-JDK-8343555-RISC-V-make-some-verified-on-ha.patch
  - add Backport-JDK-8348554-Enhance-Linux-kernel-version-ch.patch
  - add Backport-JDK-8348384-RISC-V-Disable-auto-enable-Vect.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:21.0.7.6-0
changelog:
  - update to jdk21.0.7-ga
  - delete Backport-JDK-8328553-Get-rid-of-JApplet-in-test-jdk-.patch
  - delete Backport-JDK-8336012-Fix-usages-of-jtreg-reserved-pr.patch
  - delete huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
  - modify huawei-Adapt-to-clang-build-toolchain.patch
  - add huawei-fix-build-fail-realpath.patch
  - modify huawei-heap-dump-redact-support.patch


author: Dingli Zhang <dingli@iscas.ac.cn> - 1:21.0.7.6-4
changelog:
  - add Backport-JDK-8352673-RISC-V-Vector-can-t-be-turned-o.patch
  - add Backport-JDK-8355878-RISC-V-jdk-incubator-vector-Dou.patch


author: sunhai <sunhai10@huawei.com> - 0.16-4
changelog:
  - backport patch to Fix build with clang-15+
  - backport patch to Fix json_tokener_parse_ex: handle out of memory errors


author: sunhai <sunhai10@huawei.com> - 0.16-5
changelog:
  - Handle yet another out of memory condition
  - Fix issue 854 Set error json_tokener_error_memory in
  - Issue 857 fix a few places where json_tokener should
  - Handle NULL gracefully in json_tokener_free
  - Issue 881 don t allow json_tokener_new_ex with a dep


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-309.0.0.212
changelog:
  - !20937 [OLK-5.10] Fix CVE-2025-39788
  - !20902 [OLK-5.10] Fix CVE-2023-53194
  - !20866 [OLK-5.10] Fix CVE-2025-39738
  - !20675 [OLK-5.10] Fix CVE-2025-40205
  - !20599 [OLK-5.10] fix CVE-2025-38476
  - !20611 【OLK-5.10】fix CVE-2025-39794
  - !20838 [OLK-5.10] fix CVE-2022-50518
  - !21749  fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error
  - fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error
  - !21724 RDMA/hns: Support setting GSI QP SL
  - !21590  x86/uprobes: Fix XOL allocation failure for 32-bit tasks
  - !21595  pstore/ram: fix buffer overflow in persistent_ram_save_old()
  - !21708  nfsd: provide locking for v4_end_grace
  - !21469 [Hygon][5.10][Feature]EDAC/amd64: Adjust the maximum number of memory controllers
  - !20238 Fix CVE-2025-68724
  - !21728  media: dvb-core: fix wrong reinitialization of ringbuffer on reopen
  - !21716  apparmor: validate DFA start states are in bounds in unpack_pdb
  - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
  - media: dvb-core: fix wrong reinitialization of ringbuffer on reopen
  - apparmor: validate DFA start states are in bounds in unpack_pdb
  - nfsd: provide locking for v4_end_grace
  - !21700 RDMA/hns: Fix the panic caused by a large number of print
  - RDMA/hns: Support setting GSI QP SL
  - RDMA/hns: Fix missing CQE when UD QP use different SL
  - RDMA/hns: Fix hung task when drain qp failed.
  - RDMA/hns: Fix the panic caused by a large number of print
  - RDMA/hns: Delete unused bit_size param
  - !21601 Fix CVE-2026-31408
  - !21597 Fix CVE-2026-31393
  - !21673  apparmor: fix race between freeing data and fs accessing it
  - !21603  ice: Fix memory leak in ice_set_ringparam()
  - !21381  bonding: fix use-after-free due to enslave fail after slave array update
  - !21335 Fix CVE-2025-68813
  - apparmor: fix race between freeing data and fs accessing it
  - !21660  apparmor: fix race on rawdata dereference
  - !21647  CVE-2025-39955
  - !21642 Fix CVE-2026-23407
  - !21653  PM: runtime: Fix a race condition related to device removal
  - !21640 Fix CVE-2026-23406
  - !20550 [OLK-5.10] Fix CVE-2022-50300
  - !21620  Xen privcmd driver: restrict to target domain at boot when not in dom0 to fix secure boot issue
  - apparmor: fix race on rawdata dereference
  - !21497  bus: fsl-mc: fix use-after-free in driver_override_show()
  - !21631 Fix CVE-2026-23408
  - PM: runtime: Fix a race condition related to device removal
  - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold
  - !21614  apparmor: replace recursive profile removal with iterative approach
  - !21495  *** fix CVE-2026-23208 ***
  - !21615  apparmor: fix: limit the number of levels of policy namespaces
  - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().
  - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
  - apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
  - apparmor: fix side-effect bug in match_char() macro usage
  - apparmor: Fix double free of ns_name in aa_replace_profiles()
  - xen/privcmd: add boot control for restricted usage in domU
  - xen/privcmd: unregister xenstore notifier on module exit
  - xen/privcmd: restrict usage in unprivileged domU
  - apparmor: fix: limit the number of levels of policy namespaces
  - apparmor: replace recursive profile removal with iterative approach
  - ice: Fix memory leak in ice_set_ringparam()
  - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access
  - pstore/ram: fix buffer overflow in persistent_ram_save_old()
  - x86/uprobes: Fix XOL allocation failure for 32-bit tasks
  - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h
  - bus: fsl-mc: fix use-after-free in driver_override_show()
  - ALSA: usb-audio: Use the right limit for PCM OOB check
  - ALSA: usb-audio: Prevent excessive number of frames
  - bonding: fix use-after-free due to enslave fail after slave array update
  - ipvs: fix ipv4 null-ptr-deref in route error path
  - scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
  - parisc: Fix locking in pdc_iodc_print() firmware call
  - fs/ntfs3: Add length check in indx_get_root
  - btrfs: do not allow relocation of partially dropped subvolumes
  - btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
  - ARM: tegra: Use I/O memcpy to write to IRAM
  - rpl: Fix use-after-free in rpl_do_srh_inline().
  - btrfs: fix extent map use-after-free when handling missing device in read_one_chunk


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-310.0.0.213
changelog:
  - !21832  smb: client: fix krb5 mount with username option
  - !21838  ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
  - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
  - smb: client: fix krb5 mount with username option
  - !21801 Fix CVE-2026-23450
  - !21800 Fix CVE-2025-71078
  - !21505 crypto: hisilicon/qm - support querying the hardware fault status through VFs
  - !21811 RDMA/hns: Fix warning in poll cq direct mode
  - !21758  nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
  - RDMA/hns: Fix warning in poll cq direct mode
  - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
  - powerpc/64s/slb: Fix SLB multihit issue during SLB preload
  - !21766  Fix CVE-2026-23271
  - perf: Fix Wdeclaration-after-statement
  - perf: Fix __perf_event_overflow() vs perf_remove_from_context() race
  - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
  - crypto: hisilicon/qm - support querying the hardware fault status through VFs
  - crypto: hisilicon/qm - add concurrency protection for variable err_threshold


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-311.0.0.214
changelog:
  - !22036 drivers:misc:sdma-dae: Write the CQ head pointer correctly.
  - drivers:misc:sdma-dae: Write the CQ head pointer correctly.
  - !21966  netfilter: nf_tables: unconditionally bump set->nelems before insertion
  - !21965  net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
  - !21968  netfilter: xt_CT: drop pending enqueued packets on template removal
  - !21967  netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
  - !21964  netfilter: Fix CVE-2026-23351
  - !21963 v2  bonding: limit BOND_MODE_8023AD to Ethernet devices
  - !21983 Fix CVE-2026-23383
  - bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing
  - netfilter: xt_CT: drop pending enqueued packets on template removal
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
  - netfilter: nf_tables: unconditionally bump set->nelems before insertion
  - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
  - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase
  - netfilter: nf_tables: de-constify set commit ops function argument
  - bonding: limit BOND_MODE_8023AD to Ethernet devices
  - !21936 drivers:misc:sdma-dae: Remove interference print.
  - drivers:misc:sdma-dae: Remove interference print.
  - !21901 [Hygon][5.10][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path
  - !21896 driver/misc/sdma-dae:Resolve conflicts between NCOB and SDMA
  - drivers:misc:sdma-dae: Checking the address alignment
  - !21897 Fix CVE-2026-31473
  - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare
  - x86/copy_user_avx2: add sfence before vzeroupper in fixup path
  - !21877 net: hns3: Clear the static alarm about 'implicit type conversion'
  - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex
  - net: hns3: Clear the static alarm about 'implicit type conversion'
  - net: hns3: Clear the static alarm about 'no previous prototype'
  - net: hns3: Clear the static alarm about discarding the 'const' qualifier
  - net: hns3: set the freed pointer to NULL
  - net: hns3: fix wrong location of HCLGE_FD_AD_QID_H_B


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-312.0.0.215
changelog:
  - !22139  Fix CVE-2026-31431
  - crypto: algif_aead - Fix minimum RX size check for decryption
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
  - crypto: authencesn - Fix src offset when decrypting in-place
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
  - crypto: authenc - use memcpy_sglist() instead of null skcipher
  - crypto: algif_aead - snapshot IV for async AEAD requests
  - crypto: algif_aead - Revert to operating out-of-place
  - crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  - crypto: scatterwalk - Backport memcpy_sglist()
  - crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
  - !22064 CVE-2026-31504
  - !22058 CVE-2026-31515
  - !22007 Fix CVE-2026-31677
  - crypto: af_alg - limit RX SG extraction by receive buffer budget
  - net: fix fanout UAF in packet_release() via NETDEV_UP race
  - !21871 [Hygon][5.10][Feature] pwm: dwc: Add support for Hygon pwm controller
  - !21982 Backport the patch that fix whitespace in sev_cmd_buffer_len() from upstream.
  - af_key: validate families in pfkey_send_migrate()
  - crypto: ccp - Fix whitespace in sev_cmd_buffer_len()
  - pwm: dwc: Add support for Hygon pwm controller
  - openeuler_defconfig: Add CONFIG_PWM_DWC
  - pwm: Add DesignWare PWM Controller Driver


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-313.0.0.216
changelog:
  - !22057 Fix CVE-2026-31590
  - !21943 Fix CVE-2026-31450
  - !21988  Fix CVE-2026-31449
  - !21118 [OLK-5.10] Fix CVE-2025-68340
  - !22045  ALSA: ctxfi: Limit PTP to a single page
  - !22100  KVM: x86: Use scratch field in MMIO fragment to hold small write values
  - !21944  media: dvb-net: fix OOB access in ULE extension header tables
  - !22099 Fix CVE-2026-31678
  - !22070 CVE-2026-31673
  - !22068 CVE-2026-31674
  - !22067 CVE-2026-31680
  - !22065 CVE-2026-31682
  - !22073 CVE-2026-31570
  - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION
  - KVM: x86: Use scratch field in MMIO fragment to hold small write values
  - openvswitch: defer tunnel netdev_put to RCU release
  - can: gw: fix OOB heap access in cgw_csum_crc8_rel()
  - af_unix: read UNIX_DIAG_VFS data under unix_state_lock
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
  - net: ipv6: flowlabel: defer exclusive option free until RCU teardown
  - bridge: br_nd_send: linearize skb before parsing ND options
  - ALSA: ctxfi: Limit PTP to a single page
  - ext4: validate p_idx bounds in ext4_ext_correct_indexes
  - ext4: prevent partial update of the extents path
  - ext4: refactor ext4_ext_rm_idx() to index 'path'
  - media: dvb-net: fix OOB access in ULE extension header tables
  - ext4: publish jinode after initialization
  - team: Move team device type change at the end of team_port_add


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-314.0.0.217
changelog:
  - !22409  CVE
  - !22408  *** fix CVE-2026-31527 ***
  - !22423  ALSA: ctxfi: Check the error for index mapping
  - ALSA: ctxfi: Check the error for index mapping
  - !22405  dmaengine: idxd: Fix not releasing workqueue on .release()
  - !22389  Fix CVE-2025-38680
  - !22373  fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
  - HID: core: Mitigate potential OOB by removing bogus memset()
  - HID: core: Add printk_ratelimited variants to hid_warn() etc
  - HID: multitouch: Check to ensure report responses match the request
  - Bluetooth: MGMT: validate LTK enc_size on load
  - driver/core: Fix kabi broken of platform_device/device/bus_type
  - driver core: platform: use generic driver_override infrastructure
  - hwmon: axi-fan: don't use driver_override as IRQ name
  - driver core: generalize driver_override in struct device
  - !22299  ALSA: fireworks: bound device-supplied status before string array lookup
  - dmaengine: idxd: Fix not releasing workqueue on .release()
  - !22354  Bluetooth: SMP: derive legacy responder STK authentication from MITM state
  - !22337  HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure
  - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
  - !22273  EFI/CPER: don't dump the entire memory region
  - !22366  Input: uinput - fix circular locking dependency with ff-core
  - !22344  rxrpc: proc: size address buffers for %pISpc output
  - !22357  dmaengine: idxd: Fix memory leak when a wq is reset
  - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
  - !22328  ALSA: caiaq: fix stack out-of-bounds read in init_card
  - !22279 Fix CVE-2026-31699
  - !22277  crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
  - Input: uinput - fix circular locking dependency with ff-core
  - dmaengine: idxd: Fix memory leak when a wq is reset
  - Bluetooth: SMP: derive legacy responder STK authentication from MITM state
  - rxrpc: proc: size address buffers for %pISpc output
  - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure
  - !22297 Fix CVE-2026-23317
  - !20491  scsi: leapraid: add RAID disk hide/show events and fix misc issues
  - ALSA: caiaq: fix stack out-of-bounds read in init_card
  - !22303  module: Fix kernel panic when a symbol st_shndx is out of bounds
  - !22318  drm/ioc32: stop speculation on the drm_compat_ioctl path
  - !22231 Revert "[cpufreq]Fix re-boost issue after hotplugging a CPU"
  - !22230  cpufreq: conservative: Reset requested_freq on limits change
  - drm/ioc32: stop speculation on the drm_compat_ioctl path
  - !22293 Fix CVE-2026-43407
  - module: Fix kernel panic when a symbol st_shndx is out of bounds
  - ALSA: fireworks: bound device-supplied status before string array lookup
  - drm/vmwgfx: Return the correct value in vmw_translate_ptr functions
  - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
  - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed
  - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
  - !22225  bpf: Fix regsafe() for pointers to packet
  - !22263 CVE-2026-31419
  - !22237 Fix CVE-2026-31697
  - EFI/CPER: don't dump the entire memory region
  - !21864 Backport the patch that add support for SEV attestation command
  - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros
  - net: bonding: fix use-after-free in bond_xmit_broadcast()
  - bonding: do not set usable_slaves for broadcast mode
  - net: bonding: update the slave array for broadcast mode
  - !22132 Ethernet: Linkdata: Supports Linkdata ethernet Controllers
  - !22253 [OLK-5.10] Fix CVE-2026-43284
  - Ethernet: Linkdata: Supports Linkdata ethernet Controllers
  - xfrm: esp: avoid in-place decrypt on shared skb frags
  - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
  - Revert "[cpufreq]Fix re-boost issue after hotplugging a CPU"
  - cpufreq: conservative: Reset requested_freq on limits change
  - bpf: Fix regsafe() for pointers to packet
  - !22214  futex: Clear stale exiting pointer in futex_lock_pi() retry path
  - !22205  pstore: ram_core: fix incorrect success return when vmap() fails
  - !22207  perf/x86/intel/uncore: Skip discovery table for offline dies
  - !22211  usb: cdns3: gadget: fix state inconsistency on gadget init failure
  - !22216  x86/CPU: Fix FPDSS on Zen1
  - !22186 Fix CVE-2026-31679
  - x86/CPU: Fix FPDSS on Zen1
  - futex: Clear stale exiting pointer in futex_lock_pi() retry path
  - usb: cdns3: gadget: fix state inconsistency on gadget init failure
  - !22174 Fix CVE-2026-31592
  - !22094  NFSD: Defer sub-object cleanup in export put callbacks
  - !22102  NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd
  - !21933  ksmbd: do not expire session on binding failure
  - !21927  nvme-pci: ensure we're polling a polled queue
  - !21925  ext4: avoid infinite loops caused by residual data
  - !22169  xen/privcmd: fix double free via VMA splitting
  - !22168  Buffer overflow in drivers/xen/sys-hypervisor.c
  - !22163  spi: spi-dw-dma: fix print error log when wait finish transaction
  - perf/x86/intel/uncore: Skip discovery table for offline dies
  - pstore: ram_core: fix incorrect success return when vmap() fails
  - openvswitch: validate MPLS set/set_masked payload length
  - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock
  - xen/privcmd: fix double free via VMA splitting
  - Buffer overflow in drivers/xen/sys-hypervisor.c
  - spi: spi-dw-dma: fix print error log when wait finish transaction
  - KVM/SVM: add support for SEV attestation command
  - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd
  - NFSD: Defer sub-object cleanup in export put callbacks
  - ksmbd: do not expire session on binding failure
  - nvme-pci: ensure we're polling a polled queue
  - ext4: avoid infinite loops caused by residual data
  - scsi: leapraid: add RAID disk hide/show events and fix misc issues


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-315.0.0.218
changelog:
  - !22654 Fix CVE-2026-23395
  - !22674  *** Fix CVE-2026-43428 ***
  - USB: core: Limit the length of unkillable synchronous timeouts
  - USB: usbcore: Introduce usb_bulk_msg_killable()
  - !22476 Fix CVE-2026-43427
  - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
  - !22533  usb: xhci: Prevent interrupt storm on host controller error (HCE)
  - !22553 net/oenetcls: free sk entry hash on ntuple cleanup
  - !22565 Fix CVE-2026-43212
  - !22562 Fix CVE-2026-43261
  - !22532 net/oenetcls: RPS enhancements and bug fixes
  - !22183 Fix CVE-2026-31755
  - !22569  Fix CVE-2026-31477
  - ksmbd: fix memory leaks and NULL deref in smb2_lock()
  - ksmbd: use F_SETLK when unlocking a file
  - !22528  ksmbd: validate EaNameLength in smb2_get_ea()
  - !22526  ksmbd: require 3 sub-authorities before reading sub_auth[2
  - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE
  - !22552  CVE-2026-46333
  - arm64: Add support for TSV110 Spectre-BHB mitigation
  - net/oenetcls: free sk entry hash on ntuple cleanup
  - ptrace: Fix kabi breakage in struct task_struct
  - ptrace: slightly saner 'get_dumpable()' logic
  - usb: xhci: Prevent interrupt storm on host controller error (HCE)
  - net/oenetcls: fix mode-0 init rollback for ntuple resources
  - net/oenetcls: fix RPS CPU index scaling bias
  - !22488  ksmbd: require minimum ACE size in smb_check_perm_dacl()
  - !22499  ksmbd: use check_add_overflow() to prevent u16 DACL size overflow
  - !22477  smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path
  - ksmbd: validate EaNameLength in smb2_get_ea()
  - ksmbd: require 3 sub-authorities before reading sub_auth[2]
  - ksmbd: use check_add_overflow() to prevent u16 DACL size overflow
  - !22358 linkdata: fix compile error
  - ksmbd: require minimum ACE size in smb_check_perm_dacl()
  - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path
  - usb: class: cdc-wdm: fix reordering issue in read code path
  - !22403  x86: fix duplicate ret variable in copy_user_generic
  - Linkdata: fix build failure due to missing IPsec configs in defconfig
  - net/oenetcls: Limit rxqs against combined_channels
  - net/oenetcls: Add rps policy switch for phy NIC
  - net/oenetcls: Make OENETCLS default as module
  - net/oenetcls: Support ipv6 for ntuple mode
  - net/oenetcls: Supports rxq multiplexing
  - net/oenetcls: Add local flow NUMA-aware rps
  - net/oenetcls: Fix possible hash collision issue
  - !22410  Bluetooth: hci_event: move wake reason storage into validated event handlers
  - !22191 Fix CVE-2026-31447
  - Bluetooth: hci_event: move wake reason storage into validated event handlers
  - x86: fix duplicate ret variable in copy_user_generic
  - ext4: reject mount if bigalloc with s_first_data_block != 0
  - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-316.0.0.219
changelog:
  - !22869  tracing/probe: reject non-closed empty immediate strings
  - !22863  tracing: branch: Fix inverted check on stat tracer registration
  - !22609  Fix CVE-2026-31729
  - !22130 [Hygon][5.10][Feature] KVM: x86: Add support for CPUID leaf 0x8C860000
  - !21989 Support Hygon CSV2 VM Live Migration
  - !22771 Fix CVE-2026-43037
  - !22769 Fix CVE-2026-43038
  - !22767 Fix CVE-2026-43040
  - !22856  crypto: pcrypt - Fix handling of MAY_BACKLOG requests
  - tracing/probe: reject non-closed empty immediate strings
  - tracing: branch: Fix inverted check on stat tracer registration
  - crypto: pcrypt - Fix handling of MAY_BACKLOG requests
  - !22814 ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue
  - !22466 net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5
  - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5
  - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue
  - !22770  tracepoints: get correct superblock from dentry in event btrfs_sync_file()
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
  - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()
  - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file()
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
  - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak
  - !22684  mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()
  - !22726  Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ
  - !22647 [OLK-5.10] Fix CVE-2026-31668
  - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ
  - mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()
  - seg6: separate dst_cache for input and output paths in seg6 lwtunnel
  - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels
  - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue
  - net: ipv6: rpl_iptunnel: simplify the return expression of rpl_do_srh()
  - include: net: add static inline dst_dev_overhead() to dst.h
  - net: use indirect call helpers for dst_output
  - net: use indirect call helpers for dst_input
  - net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
  - net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input()
  - ipv6: sr: block BH in seg6_output_core() and seg6_input_core()
  - usb: typec: ucsi: skip connector validation before init
  - usb: typec: ucsi: validate connector number in ucsi_notify_common()
  - KVM: SVM: Unmap ghcb pages if they're still mapped when destroy a CSV2 guest
  - KVM: SVM: Export MSR_AMD64_SEV_ES_GHCB to userspace for CSV2 guest
  - KVM: x86: Restore control registers in __set_sregs() to support CSV2 guest live migration
  - KVM: SVM: Keep track EFER even though the VM is CSV2 guest
  - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_VMSA command
  - KVM: SVM: Add KVM_SEV_SEND_UPDATE_VMSA command
  - KVM: x86: Add support for CPUID leaf 0x8C860000


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-317.0.0.220
changelog:
  - !23420  fbcon: Fix the issue of uninitialized charcount in the remaining consoles
  - !23423 soc: hisilicon: kunpeng_hccs: Remove unused input parameter
  - soc: hisilicon: kunpeng_hccs: Remove unused input parameter
  - soc: hisilicon: kunpeng_hccs: Fix discard 'const' qualifier
  - fbcon: Fix the issue of uninitialized charcount in the remaining consoles
  - !23389  CVE-2026-46181
  - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
  - refcount: provide ops for cases when object's memory can be reused
  - !23311  sched/cputime: Fix time overflow in cputime_adjust()
  - !23122 Fix CVE-2026-45856
  - !23327 Fix CVE-2026-43466
  - !23329 Fix CVE-2026-46033
  - crypto: authencesn - reject short ahash digests during instance creation
  - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery
  - sched/cputime: Fix time overflow in cputime_adjust()
  - !23253  CVE-2026-31759
  - !23268 Fix CVE-2026-46151
  - !23270 Fix CVE-2026-46167
  - !23275 Fix CVE-2026-46187
  - !23245 Fix CVE-2026-46214
  - !23202  ceph: only d_add() negative dentries when they are unhashed
  - wifi: rsi: fix kthread lifetime race between self-exit and external-stop
  - !23173  thermal: core: Fix thermal zone governor cleanup issues
  - usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl
  - usb: usblp: fix heap leak in IEEE 1284 device ID via short response
  - usb: ulpi: fix memory leak on ulpi_register() error paths
  - usb: ulpi: fix double free in ulpi_register_interface() error path
  - vsock/virtio: fix accept queue count leak on transport mismatch
  - !23189  Fix CVE-2026-45984
  - ceph: only d_add() negative dentries when they are unhashed
  - gfs2: Fix use-after-free in iomap inline data write path
  - gfs2: Add metapath_dibh helper
  - gfs2: Move the inode glock locking to gfs2_file_buffered_write
  - gfs2: Add wrapper for iomap_file_buffered_write
  - gfs2: Replace gfs2_lblk_to_dblk with gfs2_get_extent
  - gfs2: Turn gfs2_extent_map into gfs2_{get,alloc}_extent
  - gfs2: Add new gfs2_iomap_get helper
  - !22991 Fix CVE-2026-43194
  - !23124  cgroup/cpuset.c: Comment out early when prefer_cpus cpumask equals
  - thermal: core: Fix thermal zone governor cleanup issues
  - !23016  CVE-2026-45968
  - cgroup/cpuset.c: Comment out early when prefer_cpus cpumask equals
  - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send
  - !23069  tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
  - !23035  CVE-2026-43328
  - !23029  Bluetooth: SMP: force responder MITM requirements before building the pairing response
  - !23063  s390/cio: Fix device lifecycle handling in css_alloc_subchannel()
  - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
  - !22881 Fix CVE-2026-43503
  - !22871 Fix CVE-2026-46300
  - s390/cio: Fix device lifecycle handling in css_alloc_subchannel()
  - !22782  apei: use blocking notifier for page offline policy chain
  - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path
  - cpufreq: governor: Free dbs_data directly when gov->init() fails
  - Bluetooth: SMP: force responder MITM requirements before building the pairing response
  - sched: idle: Make skipping governor callbacks more consistent
  - cpuidle: Skip governor when only one idle state is available
  - !22900  scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT
  - !22845  net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
  - !22956 net/oenetcls: remove HISI_L0 dependency and L0 allocator usage
  - !22701 net/oenetcls: validate module params and reject zero table sizes
  - !22939 oenetcls: fix worker-context locking, async add/del race, and runtime policy toggles
  - !22650 Backport the patch that rename sev-es.{ch} to sev.{ch} from upstream
  - net: consume xmit errors of GSO frames
  - !22943  drm: Account property blob allocations to memcg
  - !22888  lib/crypto: chacha: Zeroize permuted_state before it leaves scope
  - net/oenetcls: remove HISI_L0 dependency and L0 allocator usage
  - drm: Account property blob allocations to memcg
  - net/oenetcls: make rps policy module params read-only
  - net/oenetcls: fix async delete race with pending rule add
  - net/oenetcls: move listen-time tuple resolution to worker context
  - scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT
  - lib/crypto: chacha: Zeroize permuted_state before it leaves scope
  - net: skbuff: preserve shared-frag marker during coalescing
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers
  - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
  - net/oenetcls: validate module params and reject zero table sizes
  - apei: use blocking notifier for page offline policy chain
  - x86/sev-es: Rename sev-es.{ch} to sev.{ch}


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-318.0.0.221
changelog:
  - !23811  netfilter: x_tables: ensure names are nul-terminated
  - !23803  netfilter: nf_conntrack_helper: pass helper to expect cleanup
  - !23805  mm/ksm: fix incorrect KSM counter handling in mm_struct during fork
  - !23079 Fix CVE-2026-43141
  - !23077 Fix CVE-2026-43149
  - !22764 [OLK-5.10]  Fix CVE-2026-43196
  - !22760 [OLK-5.10] Fix CVE-2026-43202
  - !22742 [OLK-5.10] Fix CVE-2026-43209
  - !23129 [OLK-5.10] Fix CVE-2026-43226
  - !22820 [OLK-5.10] Fix CVE-2026-31687
  - !22905 [OLK-5.10] Fix CVE-2026-31686
  - !22924 Fix CVE-2026-31683
  - !22983 [OLK-5.10] Fix CVE-2026-31660
  - !22996 [OLK-5.10] Fix CVE-2026-31657
  - !23478 [OLK-5.10] Fix CVE-2026-31649
  - !22909 Fix CVE-2026-31629
  - !22722 [OLK-5.10] Fix CVE-2026-31622
  - !22717 [OLK-5.10] Fix  CVE-2026-31618
  - !22711 [OLK-5.10] Fix CVE-2026-31617
  - !22689 [OLK-5.10] Fix  CVE-2026-31616
  - !22686 [OLK-5.10] Fix CVE-2026-31615
  - !22671 [OLK-5.10] Fix CVE-2026-31607
  - !22621 [OLK-5.10] Fix  CVE-2026-31605
  - !23119 [OLK-5.10] Fix CVE-2026-31464
  - netfilter: x_tables: ensure names are nul-terminated
  - !23555 [OLK-5.10] KVM: arm64: Skip device pfn in kvm_set_spte_gfn()
  - mm/ksm: fix incorrect KSM counter handling in mm_struct during fork
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup
  - !23709  iommu/vt-d: Flush cache for PASID table before using it
  - !23752  iommu/amd: move wait_on_sem() out of spinlock
  - !23756  ALSA: ctxfi: Add fallback to default RSR for S/PDIF
  - !19068 [OLK-5.10] ACPI: processor: idle: Set timer broadcast state on C3 for KH-50000
  - !23761 Fix CVE-2026-46243
  - !23629  drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
  - !23746  irqchip/gic-v3: Fix ALLINT masking logic by decoupling from GIC NMI support
  - smb: client: reject userspace cifs.spnego descriptions
  - ALSA: ctxfi: Add fallback to default RSR for S/PDIF
  - iommu/amd: move wait_on_sem() out of spinlock
  - !23304  netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
  - !23308  netfilter: x_tables: guard option walkers against 1-byte tail reads
  - !22965 Fix CVE-2026-43453
  - !22929 Fix CVE-2026-43139
  - !22953 Fix CVE-2026-43190
  - !22949 Fix CVE-2026-43233
  - !23661  xfrm: Fix CVE-2026-43091 RCU policy netns exit
  - !23635  xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
  - !23561  ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
  - !23557  xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path
  - !22995  netfilter: ctnetlink: ensure safe access to master conntrack
  - !23166  xfrm: always flush state and policy upon NETDEV_UNREGISTER event
  - !23736  iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode
  - !23628  RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
  - !23704  CVE-2026-46065
  - !23034 Backport the patch that Move GHCB unmapping to fix RCU warning from upstream
  - !23662  ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
  - !23476  xfs: fix delay extent reserve issue
  - !23731  iommu/vt-d: Clear Present bit before tearing down context entry
  - !23730  iommu/vt-d: Clear Present bit before tearing down PASID entry
  - irqchip/gic-v3: Fix ALLINT masking logic by decoupling from GIC NMI support
  - !23740 drivers:misc:sdma-dae:Remove redundant print during mm exit and resume.
  - drivers:misc:sdma-dae:Remove redundant print during mm exit and resume.
  - !23702  spi: spidev: fix lock inversion between spi_lock and buf_lock
  - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode
  - !23705 drivers:misc:sdma-dae: Revert incorrect kernel code optimization.
  - !23734  netfilter: flowtable: strictly check for maximum number of actions
  - !23733 net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()
  - !23711 Fix CVE-2026-43198
  - !23723 net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo
  - !23718 ipv6: prevent possible UaF in addrconf_permanent_addr()
  - netfilter: flowtable: strictly check for maximum number of actions
  - !23707  spi: fix resource leaks on device setup failure
  - !23708  Revert "hwmon: (ibmpex) fix use-after-free in high/low store"
  - !23305  ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()
  - !23710  sound: ua101: fix division by zero at probe
  - net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()
  - iommu/vt-d: Clear Present bit before tearing down context entry
  - iommu/vt-d: Clear Present bit before tearing down PASID entry
  - net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo
  - ipv6: prevent possible UaF in addrconf_permanent_addr()
  - tcp: restore kABI for syn_recv_sock() backport
  - sound: ua101: fix division by zero at probe
  - iommu/vt-d: Flush cache for PASID table before using it
  - Revert "hwmon: (ibmpex) fix use-after-free in high/low store"
  - spi: fix resource leaks on device setup failure
  - drivers:misc:sdma-dae:Revert optimize kernel code
  - drivers:misc:sdma-dae:Revert add channel depth info in debugfs
  - drivers:misc:sdma-dae:Revert Write the CQ head pointer correctly.
  - fbdev: defio: fix KABI breakage in struct fb_deferred_io and struct fb_info
  - fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info
  - fbdev: Refactor implementation of page_mkwrite
  - spi: spidev: fix lock inversion between spi_lock and buf_lock
  - !23679  MIPS: Work around LLVM bug when gp is used as global register variable
  - !23534  dm-thin: fix metadata refcount underflow
  - !23251 Fix CVE-2026-45991
  - !23344 Fix CVE-2026-45983
  - !23532  fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot
  - !23264 Fix CVE-2026-46102
  - !23682  RDMA/rxe: Fix double free in rxe_srq_from_init
  - !23266 Fix CVE-2026-46101
  - !23674  KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT
  - !23387 Fix CVE-2026-46189
  - RDMA/rxe: Fix double free in rxe_srq_from_init
  - !23018 Fix CVE-2026-46023
  - MIPS: Work around LLVM bug when gp is used as global register variable
  - KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT
  - !23562 Fix CVE-2026-45840
  - !23437  dlm: validate length in dlm_search_rsb_tree
  - ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
  - !22890  scsi: leapraid: update driver to v2.0.1.2
  - !23489  KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2
  - xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit
  - xfrm: Wait for RCU readers during policy netns exit
  - !23239 Fix CVE-2026-45843
  - !23355 Fix CVE-2026-43093
  - tcp: fix potential race in tcp_v6_syn_recv_sock()
  - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
  - !22749 [OLK-5.10] Fix CVE-2026-23372
  - !22923 [OLK-5.10] Fix CVE-2026-23361
  - !22729 [OLK-5.10] Fix CVE-2026-23339
  - !22805 [OLK-5.10] Fix CVE-2026-23330
  - !22707 [OLK-5.10] Fix CVE-2026-23298
  - !22705 [OLK-5.10] Fix CVE-2026-23291
  - !22699 [OLK-5.10] Fix CVE-2026-23289
  - !22692 [OLK-5.10] Fix CVE-2026-23281
  - !22677 [OLK-5.10] Fix CVE-2026-23266
  - !22673 [OLK-5.10] Fix CVE-2026-23262
  - !22642 [OLK-5.10] Fix CVE-2026-23242
  - !22636 [OLK-5.10] Fix CVE-2026-23238
  - !22604 [OLK-5.10] Fix CVE-2026-23235
  - !22595 [OLK-5.10] Fix CVE-2026-23234
  - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
  - !22399 [OLK-5.10] Fix CVE-2026-23182
  - !22484 [OLK-5.10] Fix CVE-2026-23176
  - !22850 [OLK-5.10] Fix CVE-2026-23098
  - !22743 [OLK-5.10] Fix CVE-2026-23073
  - !22515 [OLK-5.10] Fix CVE-2025-71188
  - !22505 [OLK-5.10] Fix CVE-2025-71185
  - !22797 [OLK-5.10] Fix CVE-2025-71184
  - !22282 [OLK-5.10] Fix CVE-2025-71088
  - !22274 [OLK-5.10] Fix CVE-2025-68755
  - !22222 [OLK-5.10] Fix CVE-2026-31698
  - !22190 [OLK-5.10] Fix CVE-2025-39952
  - !20712 [OLK-5.10] Fix CVE-2025-39759
  - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
  - !23483  CVEs
  - openvswitch: cap upcall PID array size and pre-size vport replies
  - ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
  - xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path
  - !23426 Fix HWPSIRT-2026-70484
  - !23223 Fix CVE-2026-45870
  - !23221 Fix CVE-2026-45964
  - !23171 Fix CVE-2026-43383
  - slip: bound decode() reads against the compressed packet length
  - KVM: arm64: Skip device pfn in kvm_set_spte_gfn()
  - dm-thin: fix metadata refcount underflow
  - fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot
  - !23003 Fix CVE-2026-43499
  - xfrm: esp: restore combined single-frag length gate
  - KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2
  - RDMA/rxe: Reject unknown opcodes before ICRC processing
  - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv
  - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
  - net: stmmac: fix integer underflow in chain mode
  - xfs: fix possible bugon in xfs_trans_unreserve_and_mod_sb()
  - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
  - dlm: validate length in dlm_search_rsb_tree
  - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
  - gpio: omap: do not register driver in probe()
  - nfsd: never defer requests during idmap lookup
  - xsk: tighten UMEM headroom validation to account for tailroom and min frame
  - netfilter: x_tables: guard option walkers against 1-byte tail reads
  - ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()
  - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
  - netfilter: reject zero shift in nft_bitwise
  - nfc: nci: complete pending data exchange on device close
  - net: strparser: fix skb_head leak in strp_abort_strp()
  - udf: fix partition descriptor append bookkeeping
  - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths
  - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path
  - net/tcp-md5: Fix MAC comparison to be constant-time
  - xfrm: always flush state and policy upon NETDEV_UNREGISTER event
  - netrom: fix double-free in nr_route_frame()
  - net/rds: No shortcut out of RDS_CONN_ERROR
  - scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()
  - KVM: SVM: Move GHCB unmapping to fix RCU warning
  - fbdev: rivafb: fix divide error in nv3_arb()
  - ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut
  - net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean()
  - dm mirror: fix integer overflow in create_dirty_log()
  - rtmutex: Use waiter::task instead of current in remove_waiter()
  - batman-adv: hold claim backbone gateways by reference
  - netfilter: ctnetlink: ensure safe access to master conntrack
  - batman-adv: prepare for const netdev->dev_addr
  - nfc: pn533: allocate rx skb before consuming bytes
  - NFC: pn533: bound the UART receive buffer
  - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()
  - netfilter: xt_tcpmss: check remaining length before reading optlen
  - netfilter: nf_conntrack_h323: fix OOB read in decode_choice()
  - xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
  - batman-adv: avoid OGM aggregation when skb tailroom is insufficient
  - PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry
  - nfc: llcp: add missing return after LLCP_CLOSED checks
  - mm/kasan: fix double free for kasan pXds
  - scsi: leapraid: update driver to v2.0.1.2
  - btrfs: fix NULL dereference on root when tracing inode eviction
  - soc: ti: pruss: Fix double free in pruss_clk_mux_setup()
  - fbdev: vt8500lcdfb: fix missing dma_free_coherent()
  - nfc: rawsock: cancel tx_work before socket teardown
  - wifi: rsi: Fix memory corruption due to not set vif driver data size
  - nfc: nci: free skb on nci_transceive early error paths
  - minix: Add required sanity checking to minix_check_superblock()
  - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler
  - fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
  - usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()
  - can: ucan: Fix infinite loop from zero-length messages
  - nfc: pn533: properly drop the usb interface reference on disconnect
  - IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()
  - wifi: libertas: fix use-after-free in lbs_free_adapter()
  - usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()
  - usb: gadget: renesas_usb3: validate endpoint index in standard request handlers
  - usbip: validate number_of_packets in usbip_pack_ret_submit()
  - gve: Fix stats report corruption on queue count change
  - RDMA/siw: Fix potential NULL pointer dereference in header processing
  - romfs: check sb_set_blocksize() return value
  - f2fs: fix out-of-bounds access in sysfs attribute read/write
  - f2fs: fix to avoid UAF in f2fs_write_end_io()
  - fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
  - dmaengine: lpc18xx-dmamux: fix device leak on route allocation
  - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
  - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
  - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines
  - spi: tegra: Fix a memory leak in tegra_slink_probe()
  - spi: tegra: Fix missing IRQ check in tegra_slink_probe()
  - mptcp: fallback earlier on simult connection
  - staging: most: remove broken i2c driver
  - iio: accel: bmc150: Fix irq assumption regression
  - wifi: wilc1000: avoid buffer overflow in WID string configuration
  - btrfs: qgroup: fix race between quota disable and quota rescan ioctl
  - ACPI: processor: idle: Set timer broadcast state on C3 for KH-50000


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-Fix-ul_path_read_buffer.patch
         backport-fsck.minix-fix-possible-overrun.patch
         backport-wall-fix-possible-memory-leak.patch
         backport-wall-make-sure-unsigned-variable-not-underflow.patch


author: liyuzhe <liyuzhe@cqsoftware.com.cn> - 2.37.2-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-login-su-pam_end-compliance.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-38
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-lsmem-make-lsmem-to-check-for-the-nodes-more-robust.patch
         backport-cfdisk-fix-possible-integer-overflow-coverity-scan.patch
         backport-more-make-sure-we-have-data-on-stderr.patch
         backport-libblkid-apfs-validate-checksums.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add] backport-sys-utils-setpriv-fix-potential-memory-leak.patch
         backport-sys-utils-save_adjtime-fix-memory-leak.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-40
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add] backport-libblkid-ext-add-checksum-support.patch
         backport-libblkid-fix-spurious-ext-superblock-checksum-mismat.patch
         backport-libblkid-fix-potential-memory-leaks.patch
         backport-sys-utils-fix-add-NULL-check-for-mnt_fs_get_target-r.patch
         backport-sulogin-fix-POSIX-locale-use.patch
         backport-setpriv.c-fix-memory-leak-in-parse_groups-function.patch
         backport-whereis-avoid-accessing-uninitialized-memory.patch
         backport-dmesg-fix-notime-use.patch


author: zhangting <dev03303@linx-info.com> - 2.37.2-42
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix an issue that mkfs.bfs fix memory leak
  	mkfs.bfs-fix-memory-leaks-and-weak-code.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert community patches
         [del] backport-libblkid-ext-add-checksum-support.patch
         backport-libblkid-fix-spurious-ext-superblock-checksum-mismat.patch


author: yanglongkang <yanglongkang@h-partners.com> - 2.61-7
changelog:
  - backport upstream patches:
    getcpcaps: fix program name in help message
    Stop using _pam_overwrite() in pam_cap.c


author: ZhengZhenyu <zhengzhenyu@openeuler.sh> - 13.12-1
changelog:
  - aupgrade libpq to 13.12,fix CVE-2023-2455, CVE-2023-2454, CVE-2023-39417, CVE-2023-39418, CVE-2020-21469


author: xinghe <xinghe2@h-partners.com> - 2.74.2-5
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zhangpan <zhangpan103@h-partners.com> - 2.74.2-6
changelog:
  - Type:cves
  - ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: zhangpan <zhangpan103@h-partners.com> - 2.74.2-7
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: zhangpan <zhangpan103@h-partners.com> - 2.74.2-10
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: Funda Wang <fundawang@yeah.net> - 2.9.14-15
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: hankangkang <hankangkang5@huawei.com> - 2.2.0-62
changelog:
  - When the GAZELLE_TCP_REUSE_IPPORT is on, min_cnts_lpcb is NULL
  - Turn on the LWIP_SO-LINGER switch


author: xiejing <xiejing@kylinos.cn> - 1:10.5.25-1
changelog:
  - Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
  - Fix version description in systemd service file


author: yaoxin <1024769339@qq.com> - 2.4.16.6-1
changelog:
  - Update to 2.4.16.6:
    * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting
    * info: fix requests to the info hook with extend_session=false
    * cookie: OIDCCookieSameSite default behaviour Lax
    * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
    * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory
      cannot be found on the system upon initaliizing cache mutexes and the file cache
    * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards
      compatibility with <=2.4.15.7 and to support private/test deployments
    * code: address warnings from static code analysis tool CodeChecker


author: wangkai <13474090681@163.com> - 8.0.37-1
changelog:
  - Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
    CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
    CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
    CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
    CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
    CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
    CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
    CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
    CVE-2024-21057,CVE-2023-6129)


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163)


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: zhanghao <zhanghao383@huawei.com> - 1:1.0.0-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:evaluate allow implicit ether vlan dep
  evaluate datatype memleak after binop transfer
  evaluate bogus datatype assertion in binary operation evaluation
  netlink delinearize do not transfer binary operation to non anonymous sets
  payload do not kill dependency for proto unknown
  monitor missing cache and set handle initialization
  netlink linearize fix timeout with map updates


author: zhanghao <zhanghao383@huawei.com> - 1:1.0.0-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix potential array out of bounds access
  evaluate: fix shift exponent underflow in concatenation evaluation
  netlink: Fix for potential NULL-pointer deref
  mnl: dump_nf_hooks() leaks memory in error path


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: error out if basetypes are different
         evaluate: guard against NULL basetype
         evaluate: handle invalid mapping expressions gracefully
         evaluate: reject attempt to update a set
         evaluate: release mpz type in expr_evaluate_list() error path
         expression: missing line in describe command with invalid expression

  Thu Apr 18 2024 lingsheng <lingsheng1@h-partners.com> - 1:1.0.0-10
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: fix tcpopt_find_template to use length after mask adjustment
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6
         netlink: reset temporary set element stmt list after list splice


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:parser: split tcp option rules
         cache: prepare nft_cache_evaluate() to return error
         ct timeout: fix 'list object x' vs. 'list objects in table' confusion
         ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-14
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Add virtual cases
  - Resolve IB startup IB_Read_BW service failure issue
  - Delete redundant references
  - Resolve incorrect type in vgpu result data
  - Resolve the issue of getting the kernel source rpm


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
  - Add fio test cases:read,write,randread,randwrite
  - Solve the nvme line break issue in the command line interface
  - Fix compilation errors in the make command
  - Add Vulkan testcase for nvida GPU
  - Resolve the issue of oech server startup failure on version 24.03


author: xiaochn <xiaochuannan@inspur.com> - 1.1.5-3
changelog:
  - Resolve the issue of different kernel source download locations in kabi test case
  - Resolve the issue that kabiwhitelist still passes when the ko and rpm file does not exist
  - Add the way for manually adding kabiwhitelist file
  - For custom vendors, refer to the method of obtaining openEuler os information
  - Supports custom vendor


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-0
changelog:
  - Add new test suite srpm and intel
  - Add virtual branch of test suite
  - Add support for Kylin and UOS
  - Bugfix


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: renmingshuai<renmingshuai@huawei.com> - 8.8p1-25
changelog:
  - Type:CVE
  - CVE:CVE-2023-48795,CVE-2023-51385
  - SUG:NA
  - DESC:fix CVE-2023-48795 and CVE-2023-51385


author: wangkai <13474090681@163.com> - 5.3.7-6
changelog:
  - Fix CVE-2024-45769,CVE-2024-45770
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)
  - Fix invalid memory access in pmfind utility (BZ 2135314)


author: Xiaoqian Lv <xiaoqian@nj.iscas.ac.cn> - 4.5-5
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: backport upstream 4.5-0.20 patches to support riscv64


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: wangkai <13474090681@163.com> - 1:0.78-13
changelog:
  - Fix CVE-2012-6687
  - Introduced environment variable-controlled polling timeouts 
    for the close and connection-keeping functions in the os_unix.c file.


author: Funda Wang <fundawang@yeah.net> - 8.0.30-7
changelog:
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233


author: duyiwei <duyiwei@kylinos.cn> - 1:3.4.4-4
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC: Optimize spec files and fix CVE in batches through rebuild


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-6
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: xiongyi <xiongyi@uniontech.com> - 0.90.0-7
changelog:
  - fix CVE-2020-36023
  - fix infinite looping in cvtGlyph with broken files
  - patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013


author: dillon chen <dillon.chen@gmail.com> - 13.3-8
changelog:
  - Fix build error for loongarch64
  - Fix issue: confilct between libpq-devel and postgresql-devel
  - guess init spec from redhat
  - change redhat spec:rm private package and add files to server-devel
  - so add delete lines to Fix issue
  - Next: write oe libpq and postgresql spec by myself


author: heppen <hepeng68@huawei.com> - 1.1.0-3
changelog:
  - Bug fix: fix build warning.
  - Bug fix: export PWR_SYS_GetRtPowerInfo.
  - Bug fix: data collection task intercept invalid task type.


author: heppen <hepeng68@huawei.com> - 1.1.0-4
changelog:
  - Bug fix: memcpy null pointer, array out of bounds, struct align.
  - Bug fix: get watt state will failed at the first time.
  - Bug fix: use process name to query pid but return all pids.
  - Bug fix: mismatch fopen/pclose and popen/fclose, useless if statement.


author: heppen <hepeng68@huawei.com> - 1.1.0-5
changelog:
  - Bug fix: SIGPIPE cause powerapi server exit.
  - Bug fix: pstree command is too slow to get all pid.
  - Bug fix: set smart grid state failed.
  - Bug fix: get watt attr and task list is not correct.


author: Zihao Xue <xuezihao@huawei.com> - 1.1.0-6
changelog:
  - Bug fix: heap buffer overflow caused by sending incomplete strings.
  - Bug fix: too long strings into QueryProcs causes services broke down.


author: gaihuiying <eaglegai@163.com> - 2.4.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf


author: chengzeruizhi <chengzeruizhi@huawei.com> - 3.14.0-7
changelog:
  - Type:enhancement
  - ID:NA                  
  - SUG:NA                                                             
  - DESC: add compile option for coverage


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-35
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-36
changelog:
  - Type:CVE
  - CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
  - SUG:NA
  - DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
      - rename all CVE patch name
      - CVE-2024-6232: Remove backtracking when parsing tarfile headers
      - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
      - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
      - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
      - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup
      - CVE-2024-4032: Fix "private" (non-global) IP address ranges


author: wangshuo <wangshuo@kylinos.cn> - 3.9.9-37
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch, fix the bug introduced by the fix for CVE-2007-4559
  -      gh-107845: Fix symlink handling for tarfile.data_filter


author: Funda Wang <fundawang@yeah.net> - 3.9.9-38
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
    - Quote template strings in venv activation scripts


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-40
changelog:
  - Type:CVE
  - CVE:CVE-2024-11168
  - SUG:NA
  - DESC:fix CVE-2024-11168
         - Adds checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format


author: gaihuiying <eaglegai@163.com> - 1.13.2-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: caixiaomeng <caixiaomeng2@huawei.com> - 0.6.7-19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add-dynamic-switch-of-ras-events-support-and-disable-block-rq-complete


author: Bing Xia <xiabing12@h-partners.com> - 0.6.7-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix for vendor errors are not recorded in the SQLite database if 
         some cpus are offline at the system start


author: yangjunshuo <yangjunshuo@huawei.com> - 0.6.7-21
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cpu isolate errors when some cpus are offline
    before the service started


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: wangyueliang <wangyueliang@kylinos.cn> - 2022.16-4
changelog:
  - merge feature from branch openEuler-22.03-LTS-SP1：
  - DESC: add loongarch64 and sw_64 support
  - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn>


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.16-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix failure when recompiling noarch rpm and remove the require to rpm-build


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.16-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert: remove the require to rpm-build.For consistency with other community-released dependencies


author: yixiangzhike <yixiangzhike007@163.com> - 2.16-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:avoid truncate trailer space and do not escape backslash when read filename


author: yixiangzhike <yixiangzhike007@163.com> - 2.16-14
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert "avoid truncate trailer space and do not escape backslash when read filename"


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-4
changelog:
  - Type:CVES
  - ID:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126
  - SUG:NA
  - DESC:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-5
changelog:
  - Type:CVES
  - ID:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572
  - SUG:NA
  - DESC:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572


author: wangjiang <wangjiang37@h-partners.com> - 35.5-17
changelog:
  - backport patch Allow virt_domain read device sysctls
                   Allow icecast rename its log files


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: zhangyao <zhangyao108@huawei.com> - 249-92
changelog:
  - wait-online: fix handling of unmanaged state
  - add backport-wait-online-make-manager_link_is_online-return-0-whe.patch


author: zhangyao <zhangyao108@huawei.com> - 249-95
changelog:
  - add backport-cgroup-util-introduce-cg_is_threaded.patch
        backport-core-execute-warn-when-threaded-mode-is-detected.patch


author: zhangyao <zhangyao108@huawei.com> - 249-96
changelog:
  - backport upstream patch to solve systemd-shutdown hang all the time caused by fsync blocked by absence of DM mapping table


author: zhangyao <zhangyao108@huawei.com> - 249-97
changelog:
  - add backport-logind-give-better-error-messages-when-failing-to-at.patch
        backport-sd-journal-refuse-entry-objects-with-an-empty-boot-I.patch
        backport-fs-util-readlinkat-supports-an-empty-string.patch
        backport-exec-invoke-correct-dont_close-size.patch
        backport-core-Fix-file-descriptor-leak.patch
        backport-core-fix-NULL-pointer-dereference-during-deserializa.patch
        backport-core-service-fix-accept-socket-deserialization.patch
        backport-resolved-correct-parsing-of-OPT-extended-RCODEs.patch
        backport-coredump-correctly-take-tmpfs-size-into-account-for-.patch
        backport-sysusers-handle-NSS-errors-gracefully.patch
        backport-shared-log-error-when-execve-fail.patch


author: wangyuhang <wangyuhang27@huawei.com> - 249-98
changelog:
  - add backport-run-split-out-creation-of-unit-creation-messages.patch
        backport-run-pass-the-pty-slave-fd-to-transient-service.patch
        backport-run-do-not-pass-the-pty-slave-fd-to-transient-servic.patch
        backport-sd-event-do-not-assert-on-invalid-signal.patch
        backport-sd-event-change-error-code-EINVAL-EIO.patch
        backport-basic-log-do-not-treat-all-negative-errnos-as-synthe.patch
        backport-sd-ipv4acd-fix-assertion-triggered-when-an-ARP-recei.patch
        backport-main-reopen-dev-console-for-user-service-manager.patch
        backport-log-add-common-helper-log_set_target_and_open.patch
        backport-resolved-log-error-messages-for-openssl-gnutls-conte.patch
        backport-journalctl-erase-verify-key-before-free.patch
        backport-core-service-use-log_unit_-where-appropriate.patch
        backport-manager-log-unit-pid-of-sender-when-Reload-is-called.patch
        backport-Manager-also-log-caller-of-daemon-reexec.patch
        backport-manager-improve-message-about-Reload-Reexec-requests.patch
        backport-core-fix-null-in-output.patch
        backport-core-Bump-log-level-of-reexecute-request-to-notice.patch
        backport-core-Log-in-more-scenarios-about-which-process-initi.patch


author: chenyaqiang <chengyaqiang@huawei.com> - 1:9.0.96-1
changelog:
  - Update to 9.0.96
  - Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
    CVE-2024-23672 CVE-2024-24549 CVE-2024-34750


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: Liu Chao <liuchao173@huawei.com> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)


author: langfei<langfei@huawei.com> - 2022a-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.


author: liuchao <liuchao173@huawei.com> - 2022a-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Vostok switches to +05; Sync Casey data from timeanddata.com; Kazakhstan unifies on UTC+5


author: langfei <langfei@huawei.com> - 2022a-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees.


author: yueyuankun <yueyuankun@kylinos.cn> - 1:3.16.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:arm64: Handle sp, lr, fp as DwReg in CfiExpr
         sync arm64-Handle-sp-lr-fp-as-DwReg-in-CfiExpr.patch


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-22
changelog:
  - Type:CVE
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
  - SUG:NA
  - DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237


author: yanglu <yanglu72@h-partners.com> -1.20.11-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix regression caused by the fix for CVE-2024-0229 
         fix use after free related to CVE-2024-21886


author: shuaijiakun <shuaijiakun1288@phytium.com.cn> -1.20.11-32
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:fix display error for ps23xx when using ast and pe2201 bmc card.


author: Funda Wang <fundawang@yeah.net> - 1.20.11-35
changelog:
  - fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
    CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
    CVE-2025-26600, CVE-2025-26601


