# changelog

author: Funda Wang <fundawang@yeah.net> - 5.3.1-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-2751 CVE-2025-3158 CVE-2025-3196
  - SUG:NA
  - DESC:fix CVE-2025-2751 CVE-2025-3158 CVE-2025-3196


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-126.0.0.104
changelog:
  - Bugfix: Fix duplicate RISC-V SBI firmware event name
  - Add lrw core JSON file with metric support
  - Add support for Spacemit K3


author: Li Nan <linan122@huawei.com> - 6.6.0-128.0.0.105
changelog:
  - !19097 scsi: mpi3mr: Clear ioctl blocking flag for an unresponsive controller
  - !19095 scsi: mpi3mr: Set MPI request flags appropriately
  - !19092 scsi: mpi3mr: Replace deprecated strncpy() with assignments
  - !19086 scsi: mpi3mr: Fetch correct device dev handle for status reply descriptor
  - !19636  Some bugfixes for interference
  - !19639 ub: ubase: Fix spell error of month
  - ub: ubase: Fix spell error of month
  - !19637 ub: udma: bugfix related to print location.
  - !19637 ub: udma: bugfix related to print location.
  - !19638 ub:ubus: bugfix port reset in cluster mode
  - !19623 iommu/ummu: Fix the issue of uninitialized resources in logic_ummu_viommu
  - ub:ubus: bugfix port reset in cluster mode
  - ub:ubus: add hotplug capability check
  - ub:ubus: bugfix calltrace of killing qemu when rmmod hisi_ubus
  - ub: udma: bugfix related to print location.
  - iommu/ummu: Remove redundant CONFIG_UB_UBRT_PLAT_DEV and code
  - interference: Add version compatibility check between subsystem and cgroup
  - interference: Fix missing interference.stat file in v1 hierarchy
  - interference: Add fallback to sched_clock when TSC is unavailable
  - interference: Add dependency on CONFIG_SCHED_INFO to avoid build error
  - interference: Resolve arm32 build error by restricting IFS to x86/arm64
  - interference: Avoid null pointer dereference in cgroup_ifs_add_files
  - iommu/ummu-core: Duplicate EID are not allowed
  - iommu/ummu: Move tid_type attr to logic ummu
  - iommu/ummu: Fixing the issue of uninitialized resources in logic_ummu_viommu
  - !19634 crypto: hisilicon - some bugfix
  - !19628 ub:ubfi: Fix UBFI memory leak issue
  - !19616 ub: ubase&unic: Fix some bug finding in running the driver
  - !19553 perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - crypto: hisilicon - lower priority for hisilicon crypto implementations
  - crypto: hisilicon/zip - remove redundant callback validation and invocation in crypto_wait_req
  - crypto: hisilicon/zip - add algorithm check before soft tfm allocation
  - crypto: hisilicon/zip - fix a callback problem
  - crypto: hisilicon/qm - place the interrupt status interface after the PM usage counter
  - crypto: hisilicon/qm - increment PM usage counter when handling the aeq interrupt
  - crypto: hisilicon/sgl - fix inconsistent map/unmap direction issue
  - crypto: hisilicon/hpre - support curve25519 fallback for hardware queue unavailable
  - crypto: hisilicon - mask all error type when uninit
  - net: unic: Fixed the call trace issue triggered internally by the completion event interrupt
  - !19624  xsched: XCU Partition
  - !19621 ubagg: fix mismatched spin unlock.
  - iommu/ummu: Optimize chip generational compatibility feature
  - iommu/ummu: Fix VM multi-instance problem
  - !19620 iommufd: Prevent ALIGN() overflow
  - ubagg: fix mismatched spin unlock.
  - net: unic: Restore tx and rx stats when setting coalesce parameters
  - ub: ubase: obtain rc_max_cnt from MAMI
  - ub: ubase: fix a issue of udma device's eid deleted when stop rx stream and reset concurrently
  - ub: ubase: add opcode to query ub port_bitmap.
  - net: unic: Restore default queue count per tc when tc number changes.
  - ub: ubase: Fix the issue of mismatch between the ubase aeqe structure and the protocol.
  - ub: ubase: add ip_over_urma API for udma.
  - ub: ubase: optimize print format of fw_ver in debugfs.
  - ub: ubase: Fix the issue of deadlock by quantities of log in the ctrlq crq task.
  - ub: ubase: Remove non-cluster mode code.
  - net: unic: Resolve the bandwidth jitter problem
  - ub:ubfi: Fix UBFI memory leak issue
  - ub:ubus: Matt and MMIO judgments are not performed in cluster
  - ub:ubus: Delete ubc cfg0 config during cluster mode
  - ub:hisi-ubus: Fix ue reg/unreg without lock bug
  - xsched: fix infinite loop caused by invalid CFS group vruntime update
  - xsched: prevent race between enqueue_ctx and xsched_task_free
  - xsched: DEBUG log cleanup
  - xsched: fix divide-by-zero caused by u64 overflow in CFS shares weight calculation
  - xsched: prevent NULL deref by refcounting css and tracking offline state
  - xsched: fix hung_task caused by cgroup_file_show and xcg_mutex deadlock
  - xsched: fix concurrent modification NULL pointer dereference in xcu.sched_class
  - xsched: fix NULL pointer risk on attach entry allocation
  - xsched: refactor CFS per-XCU rq init/deinit paths
  - !19608 ub: ub_fwctl: Modify TP/TA/SCC register query process.
  - !18634 [OLK-6.6]Fix CVE-2025-38706
  - iommufd: Prevent ALIGN() overflow
  - !19400  smb: client: fix mid_q_entry memleak leak with per-mid locking
  - iommu/ummu: NO plbi for grant, config permq need dma_wmb
  - iommu/ummu: Fix compilation option configuration about CONFIG_ACPI
  - iommu/ummu: UMMU doesn't send tect sync after delete eid
  - iommu/ummu: Delete unnecessary commands
  - !19601  net/packet: fix a race in packet_set_ring() and packet_notifier()
  - !19598  ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
  - !19597  ipv6: prevent infinite loop in rt6_nlmsg_size()
  - !19354 [OLK-6.6] Fix CVE-2025-37822
  - !19355 [OLK-6.6] Fix CVE-2025-38361
  - !19563 ub: cdma: fix the timing issue during flow-based deregistration.
  - !19585 crypto: hisilicon/trng - Fix the issue where TRNG cannot be used by multiple threads.
  - !19610 perf: Fix lastup for multi-CPU PG
  - !19609 urma: fixed process exiting uburma driver's private memory UAF
  - !19592  Fix incorrect use of cpuhp_remove_multi_state parameter
  - perf: Fix lastup for multi-CPU PG
  - urma: fixed process exiting uburma driver's private memory UAF
  - !19607 Revert "RDMA/hns: Fix mismatch exception rollback"
  - ub: cdma: modify the compatibility field according to the Linux KABI specification
  - ub: cdma: fix the timing issue during flow-based deregistration.
  - ub: cdma: fix kasan cdma jfae uaf
  - ub: cdma: modify log level about en information
  - ub: ub_fwctl: Modify TP/TA/SCC register query process.
  - Revert "RDMA/hns: Fix mismatch exception rollback"
  - !18664 [OLK-6.6] Fix CVE-2025-22039
  - net/packet: fix a race in packet_set_ring() and packet_notifier()
  - ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
  - ipv6: prevent infinite loop in rt6_nlmsg_size()
  - !19558 obmm: sync obmm default params value to sysfs.
  - !19560 obmm: set MAX Numa Distance to 255
  - !19589 ub:ubus: add active_mutex in ub_entity
  - soc cache: Add compilation config for hisi_soc_l3c
  - soc cache: Don't poll before removing all locks
  - soc cache: Drop redundant vm_pgoff
  - soc cache: fix walk page parameter and drop incorrect check
  - soc cache: Check address while walking pages
  - soc_cache: Fix component removal order to avoid race condition
  - soc cache: cleanup: Remove the redundant check of vm_pgoff
  - soc cache: cleanup: Change type of mnt_type
  - soc cache: cleanup: avoid tag addr from interfering range validation
  - soc cache: cleanup: move judgement of soc cache dev into lock protection
  - soc cache: cleanup: fix memory leakage on error path
  - soc_cache: Fix error code returning from hisi_soc_l3c_do_lock
  - soc_cache: Fix incorrect use of cpuhp_remove_multi_state parameter
  - soc cache: cleanup: replace dynamically allocated param with local variable
  - ub:ubus: add active_mutex in ub_entity
  - !19576  Bugfix for two issues
  - crypto: hisilicon/trng - support tfms sharing the device
  - crypto: hisilicon/trng - use DEFINE_MUTEX() and LIST_HEAD()
  - Revert "crypto: hisilicon/trng - support to obtain random numbers from soft algorithm"
  - Revert "crypto: hisilicon/trng - use DEFINE_MUTEX() for mutex lock"
  - !19557  Fix UAF issue for mfs
  - !19555 ub: bugfix of port, decoder and vfio
  - !19561 obmm: fix granu checking in mmap
  - zcopy: Fix softlockup while attach PUD-SIZE page
  - zcopy: Fix NULL pointer dereference while attach conflict with free
  - ub:unic Adaptation of the port reset interface
  - !19521 uvb: change dir name
  - !19532 net: hns3: add VLAN id validation before using
  - !19271  Squashfs: fix uninit-value in squashfs_get_parent
  - !19269  media: venus: Add a check for packet size after reading from shared memory
  - !19268  eventpoll: Fix semi-unbounded recursion
  - !19267  kernfs: Relax constraint in draining guard
  - !19552  KVM: arm64: Check the untrusted offset in FF-A memory share
  - !19551 add check ack_dono flag for reboot event
  - obmm: sync obmm default params value to module sysfs.
  - obmm: set MAX Numa Distance to 255
  - obmm: fix granu checking in mmap
  - ub:ubus adapt port local ras
  - vfio:ubus vfio-ub support ub entity enable
  - mfs: Fix UAF problem on event object when enable tracepoint
  - ub:ubus: fix bug of msg workqueue null
  - ub:hisi-ubus ub:hisi-ubus: Move the decoder's page table operations to hisi-ubus
  - add check ack_dono flag for reboot event
  - !19517 gmem: fix several issues
  - !19519  arm64/mpam: Reset mbwu_state while creating new monitor group
  - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - perf arm-spe: Backport perf_cpu_map__new_online_cpus()
  - perf arm-spe: Save per CPU information in metadata
  - perf arm-spe: Calculate meta data size
  - perf arm-spe: Define metadata header version 2
  - perf arm-spe: Prepare for adding data source packet implementations for other cores
  - perf arm-spe: Use old behavior when opening old SPE files
  - perf arm-spe: Set sample.addr to target address for instruction sample
  - perf color: Add printf format checking and resolve issues
  - perf arm-spe: Add Cortex CPUs to common data source encoding list
  - perf arm-spe: Add Neoverse-V2 to common data source encoding list
  - perf arm-spe: Remove the unused 'midr' field
  - perf arm-spe: Use metadata to decide the data source feature
  - perf arm-spe: Introduce arm_spe__is_homogeneous()
  - perf arm-spe: Dump metadata with version 2
  - perf arm-spe: Support metadata version 2
  - perf arm-spe: Rename the common data source encoding
  - perf arm-spe: Rename arm_spe__synth_data_source_generic()
  - KVM: arm64: Check the untrusted offset in FF-A memory share
  - !19530  Fix unexpected behavior in resctrl mounting
  - Revert "perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12"
  - !19520 ub: udma: bugfix related to init xa flags.
  - !19205 [OLK-6.6] Fix CVE-2025-39732
  - !19156 [OLK-6.6] Fix CVE-2025-39684
  - !19157 [OLK-6.6] Fix CVE-2025-39675
  - net: hns3: add VLAN id validation before using
  - !19526  mm/numa_remote: fix wild-memory-access in numa_remote_hugetlb_nowatermark
  - fs/resctrl: Prevent mounting with unsupported options
  - fs/resctrl: Fix resctrl mount options display in mount list
  - ub: udma: bugfix related to init xa flags.
  - ub: udma: bugfix for rx close.
  - mm/numa_remote: fix wild-memory-access in numa_remote_hugetlb_nowatermark
  - uvb: change dir name
  - !19507  Fix some memory policy bugfix
  - arm64/mpam: Need to reset MPAM component when umounting resctrl
  - arm64/mpam: Remove the redundant prev_val member variable
  - arm64/mpam: Reset mbwu_state while creating new monitor group
  - !19508 ub: ub_fwctl: Modify the problem of incorret data when querying entry
  - !19513  zcopy: fix two issues
  - zcopy: Fix Bad rss-counter state while non-mapping pages attach
  - zcopy: Fix null pointer dereference while attach transhugepage twice to same addr
  - ub: ub_fwctl: Modify the problem of incorret data when querying entry information
  - !19357 ubios_uvb: add msleep in poll thread
  - ubios_uvb: add check for uvb window buffer size
  - !19494  crypto: hisilicon - add reference counting to queues for tfm kernel reuse
  - !19475  task_work: Fix NMI race condition
  - mempolicy: restrict smart grid scheduling to vma_alloc_folio path
  - mempolicy: fix missing mmap_read_unlock() in error path
  - ubios_uvb: add check for cis message and senderid
  - !19486 [OLK-6.6] fix possible crash caused by null pointer when hct get page.
  - crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable
  - crypto: hisilicon/hpre - support the hpre algorithm fallback
  - crypto: hisilicon/zip - support fallback for zip
  - crypto: hisilicon/qm - optimize device selection priority based on queue ref count and NUMA distance
  - crypto: hisilicon/qm - add reference counting to queues for tfm kernel reuse
  - crypto: hisilicon - consolidate qp creation and start in hisi_qm_alloc_qps_node
  - crypto: hisilicon/qm - centralize the sending locks of each module into qm
  - crypto: hisilicon/qm - enhance the configuration of req_type in queue attributes
  - Revert "crypto: hisilicon/hpre - support the hpre algorithm fallback"
  - crypto: hisilicon/hpre: extend tag field to 64 bits for better performance
  - crypto: hisilicon/sec - move backlog management to qp and store sqe in qp for callback
  - crypto: hisilicon/zip - adjust the way to obtain the req in the callback function
  - ubios_uvb: add msleep in poll thread
  - ccp/hct: fix possible crash caused by null pointer when hct get page.
  - task_work: Fix NMI race condition
  - scsi: mpi3mr: Clear ioctl blocking flag for an unresponsive controller
  - scsi: mpi3mr: Set MPI request flags appropriately
  - scsi: mpi3mr: Replace deprecated strncpy() with assignments
  - scsi: mpi3mr: Fetch correct device dev handle for status reply descriptor
  - smb: client: fix mid_q_entry memleak leak with per-mid locking
  - drm/amd/display: Check dce_hwseq before dereferencing it
  - riscv: uprobes: Add missing fence.i after building the XOL buffer
  - Squashfs: fix uninit-value in squashfs_get_parent
  - media: venus: Add a check for packet size after reading from shared memory
  - eventpoll: Fix semi-unbounded recursion
  - kernfs: Relax constraint in draining guard
  - ksmbd: fix overflow in dacloffset bounds check
  - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()
  - drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
  - comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
  - comedi: Fix initialization of data for instructions that write to subdevice
  - gmem: remove reduntant interfaces and use proper mmap flag
  - gmem: gmem_reserve_vma should use vma_flag_clear to remove flag
  - gmem: remove inpropre BUG_ON in do_peer_shared_anonymous_page
  - gmem: hmemcpy should use dma for phy addr
  - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-128.0.0.106
changelog:
  - RISC-V kernel upgrade to 6.6.0-128.0.0
  - Update Spacemit K3 DTS
  - Fix LTP test on TH1520
  - Enable CONFIG_ACPI_APEI


author: Li Nan <linan122@huawei.com> - 6.6.0-130.0.0.107
changelog:
  - !19680 LoongArch: Mask all interrupts during kexec/kdump
  - !19682 Loongarch: Enable CONFIG_RANDOMIZE_BASE default
  - !19738  xsched: move xsched types to user-accessible headers
  - !19717 obmm: Race condition fix, mmap rollback fix and export_user flag check.
  - xsched: move xsched types to user-accessible headers
  - obmm: Add FAST flag check for obmm_export_from_user
  - obmm: Rollback mmap_granu when mmap failed
  - !19735 add check ack msg and do sleep
  - add check ack msg and do sleep
  - !18003 [OLK-6.6] PCI: phytium: Add hotplug and hotreset workaround patch for phytium SoCs
  - Loongarch: Enable CONFIG_RANDOMIZE_BASE default
  - LoongArch: Mask all interrupts during kexec/kdump
  - !19714 drm/hisilicon/hibmc: fix PCIe 64-bit bar support
  - obmm: Fix race condition of region release and device release
  - !19688 ub: ubase: CtrlQ retry message uses the same seq
  - !19687 ub: udma: Bugfix related to crq event unregister.
  - !19641 ub:hisi-ubus: fix MUE unreg msg rsp time
  - !19677 ub: libcdma: add eid upi update response
  - drm/hisilicon/hibmc: fix PCIe 64-bit bar support
  - !19709  mm: try skipping pinned page before unmapping in migration
  - mm: try skipping pinned page before unmapping in migration
  - !19657 xsched: simplify logging macros by removing redundant pr_fmt usage
  - !19702  XSched: List Corruption
  - !19617  Handling Kunpeng Chip ARM Spectre-BHB (CVE-2022-23960) Issue
  - xsched/cgroup: move list_del from css_free to css_offline to prevent corruption
  - xsched: protect group member list with xcu_lock to prevent corruption
  - !19696  i40e: remove read access to debugfs files
  - i40e: remove read access to debugfs files
  - ub: udma: Bugfix related to crq event unregister.
  - !19674 obmm: bugfixes of log and race condition
  - !19644 obmm: suppport unaligned PMD mapping
  - ub:ubus: Change create device irq domain debug info
  - !19683  xsched: prevent linked list corruption in RT priority updates
  - ub: ubase: CtrlQ retry message uses the same seq
  - net: unic: Fix the calltrace caused by modifying queue parameters in the MUE scenario
  - xsched: prevent linked list corruption in RT priority updates
  - ub: cdma: add eid upi update response
  - obmm: Remove log pringts of physical address and kernelspace virtual address
  - obmm: Fix race condition between unexport and addr_query_by_pa
  - !19659 ubcore: fix route_list when no full match.
  - !19661 Packet throughput decreases with multiple jetty streams
  - xsched: simplify logging macros by removing redundant pr_fmt usage
  - xsched: Fix compilation by adding xsched_attr to syscalls.h
  - !19562 [OLK-6.6] virtcca: fix incorrect use of the percpu declare
  - ubcore: fix route_list when no full match.
  - obmm: display mmaped region's Pagesize
  - obmm: fix for PMD mapping
  - Packet throughput decreases with multiple jetty streams
  - virtcca: Add missing includes for DECLARE_PER_CPU
  - arm64: Add missing includes for mem_encrypt
  - !19647  fbdev: bitblit: bound-check glyph index in bit_putcs*
  - fbdev: bitblit: bound-check glyph index in bit_putcs*
  - ub:hisi-ubus: fix MUE unreg msg rsp time
  - config: Disable unprivileged BPF syscall by default
  - arm64: Add support for TSV110 Spectre-BHB mitigation
  - PCI: phytium: Add hotplug and hotreset workaround patch for phytium SoCs


author: Li Nan <linan122@huawei.com> - 6.6.0-131.0.0.108
changelog:
  - !19760 ub:ubfi:skipped address of subtable 0 in ubrt
  - !19758 ub: udma: bugfix related to rx close.
  - !19759 ub: ubase: fix ubase activate/deactivate resp timeout
  - ub:ubfi:skipped address of subtable 0 in ubrt
  - ub: ubase: fix ubase activate/deactivate resp timeout
  - ub: udma: bugfix related to rx close.
  - !19752 Repair driver reset work-q uaf
  - !19755 obmm: Register resource for every memdev
  - !19756 ub:ubus delete undefined class code
  - !19754 ub:ubus: Move the decoder's queue operations to hisi-ubus
  - !19757 ub: cdma: add ioctl logs and error codes
  - !19750 ub: udma: Bugfix related to 2M hugepage.
  - !19749 ub: unic & ubase: Fix ethtool configuration error issue and resolve mailbox timeout
  - !19697  iomap: fix dirty range tracking in iomap_folio_mkwrite_iter
  - ub: cdma: add ioctl logs and error codes
  - ub:ubus delete undefined class code
  - obmm: Register resource for every memdev
  - Repair driver reset work-q uaf
  - ub:ubus: fix ub_get_bus_controller getting null
  - ub:ubus: Move the decoder's queue operations to hisi-ubus
  - ub:ubus: hi_msg_sync_wait first pull cq
  - ub: udma: Bugfix related to 2M hugepage.
  - net: unic: Fix ethtool configuration error issue.
  - ub: ubase: Resolve mailbox timeout issue.
  - 删除文件 .本项目已经正式迁移至AtomGit平台/README.md
  - update README.
  - add migrate not
  - iomap: fix dirty range tracking in iomap_folio_mkwrite_iter


author: Li Nan <linan122@huawei.com> - 6.6.0-132.0.0.109
changelog:
  - !19477 iommu: set the default iommu-dma mode as non-strict
  - iommu: set the default iommu-dma mode as non-strict


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-132.0.0.110
changelog:
  - riscv kernel upgrade to 6.6.0-132.0.0
  - Bugfix: iommu/riscv: Fix inconsistencies with the latest spec revision
  - Bugfix: riscv: acpi: avoid errors caused by probing DT devices when ACPI is used
  - Bugfix: Revert "drivers: Add ACPI support for thead-c900-aclint-sswi"


author: Li Nan <linan122@huawei.com> - 6.6.0-134.0.0.112
changelog:
  - !20054 merge topo_kernel_merge_1_1 into OLK-6.6
  - !19916 merge OLK-6.6_new into OLK-6.6
  - !20030 merge topo_kernel_merge into OLK-6.6
  - urma: ubcore support expose/unexpose dev and eid set commands.
  - urma: support uvs query chip_id.
  - urma: add create, delete agg_dev and get name of agg_dev.
  - urma: adapt to new topo info for ubcore/ubagg.
  - !19992 merge patch-1767753584 into OLK-6.6
  - !19763 merge patch-1766378735 into OLK-6.6
  - Revert "NFS: fix up nfs_release_folio() to try to release the page"
  - !19697 merge refs/pull/19697/head into OLK-6.6
  - !19844 merge patch-1766802317 into OLK-6.6
  - !19712 merge refs/pull/19712/head into OLK-6.6
  - !19653 merge refs/pull/19653/head into OLK-6.6
  - !19650 merge refs/pull/19650/head into OLK-6.6
  - !19809 merge patch-1766626818 into OLK-6.6
  - !19839 merge patch-1766740817 into OLK-6.6
  - !19924 merge patch-1767513707 into OLK-6.6
  - !19925 merge patch-1767513733 into OLK-6.6
  - !18476 merge refs/pull/18476/head into OLK-6.6
  - !19871 merge patch-1766998564 into OLK-6.6
  - !19870 merge patch-1766998524 into OLK-6.6
  - !19868 merge patch-1766998223 into OLK-6.6
  - !19831 merge patch-1766714417 into OLK-6.6
  - !19830 merge patch-1766713816 into OLK-6.6
  - !19829 merge patch-1766713004 into OLK-6.6
  - !19828 merge patch-1766712979 into OLK-6.6
  - !19827 merge patch-1766712955 into OLK-6.6
  - !19826 merge patch-1766712919 into OLK-6.6
  - !19711 merge refs/pull/19711/head into OLK-6.6
  - !19810 merge patch-1766626870 into OLK-6.6
  - !19843 merge patch-1766799391 into OLK-6.6
  - !19909 merge patch-1767491328 into OLK-6.6
  - !19799 merge patch-1766495417 into OLK-6.6
  - !19807 merge patch-1766567019 into OLK-6.6
  - !19895 merge patch-1767085921 into OLK-6.6
  - !19926 merge patch-1767515451 into OLK-6.6
  - !19656 merge refs/pull/19656/head into OLK-6.6
  - !19923 merge patch-1767513671 into OLK-6.6
  - !19928 merge patch-1767515719 into OLK-6.6
  - !19859 merge patch-1766977633 into OLK-6.6
  - !19860 merge patch-1766977668 into OLK-6.6
  - !19884 merge patch-1767076134 into OLK-6.6
  - !19913 merge patch-1767493335 into OLK-6.6
  - !19914 merge patch-1767493378 into OLK-6.6
  - !19915 merge patch-1767493397 into OLK-6.6
  - mfs: Avoid UAF on cache object when anon_file is release
  - mfs: avoid deadlock when the cache layer is modified
  - mfs: remove FAROUND event to avoid context switch during map_pages
  - !19612 merge refs/pull/19612/head into OLK-6.6
  - !19733 merge refs/pull/19733/head into OLK-6.6
  - !19729 merge refs/pull/19729/head into OLK-6.6
  - !19720 merge refs/pull/19720/head into OLK-6.6
  - usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer
  - nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot
  - bpf: Free special fields when update [lru_,]percpu_hash maps
  - !19846 merge patch-1766818825 into OLK-6.6
  - !19904 merge patch-1767162173 into OLK-6.6
  - !19845 merge patch-1766818524 into OLK-6.6
  - !19797 merge patch-1766494034 into OLK-6.6
  - !19796 merge patch-1766494001 into OLK-6.6
  - !19800 merge patch-1766541023 into OLK-6.6
  - !19847 merge patch-1766820323 into OLK-6.6
  - !19875 merge patch-1767010708 into OLK-6.6
  - !19761 merge patch-1766371001 into OLK-6.6
  - !19619 merge refs/pull/19619/head into OLK-6.6
  - !19912 merge patch-1767493281 into OLK-6.6
  - net_sched: prio: fix a race in prio_tune()
  - can: j1939: add missing calls in NETDEV_UNREGISTER notification handler
  - can: j1939: implement NETDEV_UNREGISTER notification handler
  - Bluetooth: hci_core: Disable works on hci_unregister_dev
  - iomap: fix dirty range tracking in iomap_folio_mkwrite_iter
  - mm: mem_reliable: prevent excessive direct reclaim loops
  - mm: mem_reliable: use percise count during limit check
  - mm: mem_reliable: fix task reliable counter during fork
  - !19793 merge patch-1766492701 into OLK-6.6
  - !19823 merge tmp into OLK-6.6
  - !19888 merge ubase into OLK-6.6
  - !19898 merge OLK_6.6_velinux_1 into OLK-6.6
  - !19901 merge OLK-6.6 into OLK-6.6
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
  - obmm: Register resource for every memdev
  - !19822 merge master into OLK-6.6
  - !19811 merge OLK-6.6 into OLK-6.6
  - !19818 merge OLK-6.6 into OLK-6.6
  - !19854 merge OLK-6.6 into OLK-6.6
  - !19886 merge OLK-6.6 into OLK-6.6
  - ub: ubase: fix ubase activate/deactivate resp timeout
  - urma inclusion category: bugfix bugzilla: https://gitee.com/openeuler/release-management/issues/ID3WJX
  - bpf: Fix stackmap overflow check in __bpf_get_stackid()
  - bpf: Refactor stack map trace depth calculation into helper function
  - net: unic: Fix ethtool configuration error issue.
  - ub: ubase: Resolve mailbox timeout issue.
  - scsi: qla2xxx: Clear cmds after chip reset
  - ub: udma: bugfix related to rx close.
  - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
  - !19763 ub: udma: bugfix related to spin lock.
  - futex: Don't leak robust_list pointer on exec race
  - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()
  - ub: udma: bugfix related to spin lock.
  - Bluetooth: hci_event: validate skb length for unknown CC opcode
  - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
  - tracing: Fix memory leaks in create_field_var()
  - ub: udma: Bugfix related to 2M hugepage.
  - ppp: fix race conditions in ppp_fill_forward_path
  - scsi: qla2xxx: Fix improper freeing of purex item
  - coresight: ETR: Fix ETR buffer use-after-free issue
  - arm-spe: Fix typos in the arm_spe_to_htpg()
  - mm/shmem: Fix order passing error in the shmem_alloc_folio()
  - arm64/mpam: Synchronize MPAM Partid to kernel mode
  - !19477 iommu: set the default iommu-dma mode as non-strict
  - ext4: xattr: fix null pointer deref in ext4_raw_inode()
  - jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted
  - fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock
  - ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()
  - ext4: refresh inline data size before write operations
  - hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
  - ub:ubfi:skipped address of subtable 0 in ubrt
  - ub:ubus delete undefined class code
  - !19760 ub:ubfi:skipped address of subtable 0 in ubrt
  - !19758 ub: udma: bugfix related to rx close.
  - !19759 ub: ubase: fix ubase activate/deactivate resp timeout
  - ub:ubfi:skipped address of subtable 0 in ubrt
  - ub: cdma: add ioctl logs and error codes
  - ub: ubase: fix ubase activate/deactivate resp timeout
  - ub:ubus: fix ub_get_bus_controller getting null
  - ub:ubus: Move the decoder's queue operations to hisi-ubus
  - ub:ubus: hi_msg_sync_wait first pull cq
  - ub: udma: bugfix related to rx close.
  - !19752 Repair driver reset work-q uaf
  - perf/x86/intel: Fix KASAN global-out-of-bounds warning
  - mm: migrate: add dma copy offloading for hugetlb
  - !19755 obmm: Register resource for every memdev
  - !19756 ub:ubus delete undefined class code
  - !19754 ub:ubus: Move the decoder's queue operations to hisi-ubus
  - !19757 ub: cdma: add ioctl logs and error codes
  - !19750 ub: udma: Bugfix related to 2M hugepage.
  - !19749 ub: unic & ubase: Fix ethtool configuration error issue and resolve mailbox timeout
  - !19697  iomap: fix dirty range tracking in iomap_folio_mkwrite_iter
  - nvmet-fc: avoid scheduling association deletion twice
  - ub: cdma: add ioctl logs and error codes
  - ub:ubus delete undefined class code
  - obmm: Register resource for every memdev
  - Repair driver reset work-q uaf
  - bpf: Fix invalid prog->stats access when update_effective_progs fails
  - ub:ubus: fix ub_get_bus_controller getting null
  - ub:ubus: Move the decoder's queue operations to hisi-ubus
  - ftrace: Fix softlockup in ftrace_module_enable
  - ub:ubus: hi_msg_sync_wait first pull cq
  - bpf: account for current allocated stack depth in widen_imprecise_scalars()
  - bpf: Add bpf_prog_run_data_pointers()
  - iommu: set the default iommu-dma mode as non-strict
  - ub: udma: Bugfix related to 2M hugepage.
  - net: unic: Fix ethtool configuration error issue.
  - ub: ubase: Resolve mailbox timeout issue.
  - 删除文件 .本项目已经正式迁移至AtomGit平台/README.md
  - update README.
  - timers: Fix NULL function pointer race in timer_shutdown_sync()
  - x86/fpu: Ensure XFD state on signal delivery
  - add migrate not
  - usb: storage: Fix memory leak in USB bulk transport
  - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
  - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
  - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
  - usb: storage: sddr55: Reject out-of-bound new_pba
  - usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget
  - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
  - be2net: pass wrb_params in case of OS2BMC
  - driver/coda: Fix possible NULL pointer dereference error.
  - VirtCCA supports Ascend 310P in CoDA scenarios
  - NFSD: Fix crash in nfsd4_read_release()
  - iommu: set the default iommu-dma mode as non-strict
  - configs: Add bus lock detect config in openeuler_config
  - x86/split_lock: Add support for Zhaoxin
  - x86/split_lock: Simplify reenabling
  - x86/split_lock: Fix the delayed detection logic
  - x86/split_lock: Move Split and Bus lock code to a dedicated file


author: Li Nan <linan122@huawei.com> - 6.6.0-135.0.0.113
changelog:
  - !19710 [OLK-6.6] Batch BAR sizing operations
  - !19952  mfs: Add prefetch demo
  - !20138 net:nebula-matrix:add protection of consecutive write regs
  - !20033  ceph: fix crash in process_v2_sparse_read() for encrypted directories
  - !20032  net: atlantic: fix fragment overflow handling in RX path
  - !20031  Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once
  - !20014  xfs: do not propagate ENODATA disk errors into xattr code
  - !20015  Fix CVE-2025-40242
  - !19960  wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
  - !20005  cifs: Fix establishing NetBIOS session for SMB2+ connection
  - !20009  ftrace: Fix BPF fexit with livepatch
  - !19983  regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
  - !19968  EEVDF null pointer
  - !19773  bpf, arm64: Do not audit capability check in do_jit()
  - !19997  mfs: remove FAROUND event for mfsd demo
  - !19942 [virtCCA Live Migration 1]virtcca secure cvm supports live migration
  - !20160 v3  CVE-2025-68304
  - !20141 urma: Fix the bug of exposing devices fails for host network
  - !20148 ubcore: fix route query for container loopback.
  - !20120 urma: fix urma_admin agg del eid failed.
  - !20028 release urma source when the ub device is removed
  - !20017  kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir().
  - !20115  KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
  - !20109 uvb: change cis call default poll timeout
  - urma: fix the bug for container.
  - !20154 merge fix_is_err into OLK-6.6
  - Bluetooth: hci_core: lookup hci_conn on RX path on protocol side
  - Bluetooth: ISO: don't leak skb in ISO_CONT RX
  - Bluetooth: ISO: free rx_skb if not consumed
  - Bluetooth: ISO: Use kref to track lifetime of iso_conn
  - Bluetooth: SCO: fix sco_conn refcounting on sco_conn_ready
  - Bluetooth: SCO: remove the redundant sco_conn_put
  - Bluetooth: SCO: Use kref to track lifetime of sco_conn
  - Bluetooth: hci_core: Fix not checking skb length on hci_scodata_packet
  - urma: fix ubcore_cock NULL pointer check.
  - ubcore: fix route query for container loopback.
  - net:nebula-matrix:add protection of consecutive write regs
  - urma: fix urma_admin agg del eid failed.
  - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
  - !20100 merge OLK-6.6-v6.6.92-backport into OLK-6.6
  - uvb: change cis call default poll timeout
  - dmaengine: idxd: Fix double free in idxd_setup_wqs()
  - dmaengine: idxd: Fix refcount underflow on module unload
  - dmaengine: idxd: Remove improper idxd_free
  - fs/xattr.c: fix simple_xattr_list()
  - firmware: arm_scmi: Account for failed debug initialization
  - drm/amdgpu: fix pm notifier handling
  - LoongArch: Explicitly specify code model in Makefile
  - usb: typec: ucsi: displayport: Fix deadlock
  - mm/page_alloc: fix race condition in unaccepted memory handling
  - dmaengine: idxd: Refactor remove call with idxd_cleanup() helper
  - dmaengine: idxd: fix memory leak in error handling path of idxd_pci_probe
  - dmaengine: idxd: Add missing idxd cleanup to fix memory leak in remove call
  - dmaengine: idxd: Add missing cleanups in cleanup internals
  - dmaengine: idxd: Add missing cleanup for early error out in idxd_setup_internals
  - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_groups
  - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_engines
  - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_wqs
  - dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy
  - net: qede: Initialize qede_ll_ops with designated initializer
  - smb: client: fix memory leak during error handling for POSIX mkdir
  - scsi: sd_zbc: block: Respect bio vector limits for REPORT ZONES buffer
  - phy: renesas: rcar-gen3-usb2: Set timing registers only once
  - phy: renesas: rcar-gen3-usb2: Fix role detection on unbind/bind
  - phy: Fix error handling in tegra_xusb_port_init
  - phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking
  - tracing: samples: Initialize trace_array_printk() with the correct function
  - Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer()
  - Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges
  - hv_netvsc: Remove rmsg_pgcnt
  - hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages
  - ALSA: usb-audio: Add sample rate quirk for Microdia JP001 USB Camera
  - ALSA: usb-audio: Add sample rate quirk for Audioengine D1
  - ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2()
  - drm/amd/display: Avoid flooding unnecessary info messages
  - drm/amd/display: Correct the reply value when AUX write incomplete
  - LoongArch: Fix MAX_REG_OFFSET calculation
  - udf: Make sure i_lenExtents is uptodate on inode eviction
  - NFSv4/pnfs: Reset the layout state after a layoutreturn
  - tsnep: fix timestamping with a stacked DSA driver
  - tsnep: Inline small fragments within TX descriptor
  - octeontx2-af: Fix CGX Receive counters
  - net: ethernet: mtk_eth_soc: fix typo for declaration MT7988 ESW capability
  - octeontx2-pf: macsec: Fix incorrect max transmit size in TX secy
  - qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd()
  - ALSA: sh: SND_AICA should depend on SH_DMA_API
  - nvme-pci: make nvme_pci_npages_prp() __always_inline
  - net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING
  - ALSA: ump: Fix a typo of snd_ump_stream_msg_device_info
  - ALSA: seq: Fix delivery of UMP events to group ports
  - net: mctp: Ensure keys maintain only one ref to corresponding dev
  - tools/net/ynl: ethtool: fix crash when Hardware Clock info is missing
  - tools: ynl: ethtool.py: Output timestamping statistics from tsinfo-get operation
  - Bluetooth: MGMT: Fix MGMT_OP_ADD_DEVICE invalid device flags
  - spi: loopback-test: Do not split 1024-byte hexdumps
  - HID: thrustmaster: fix memory leak in thrustmaster_interrupts()
  - iio: chemical: sps30: use aligned_s64 for timestamp
  - iio: adc: ad7768-1: Fix insufficient alignment of timestamp.
  - Revert "drm/amd: Stop evicting resources on APUs in suspend"
  - drm/amd: Add Suspend/Hibernate notification callback support
  - drm/amdgpu: trigger flr_work if reading pf2vf data failed
  - drm/amdgpu: Fix the runtime resume failure issue
  - drm/amd: Stop evicting resources on APUs in suspend
  - iio: adc: ad7266: Fix potential timestamp alignment issue.
  - firmware: arm_scmi: Fix timeout checks on polling path
  - firmware: arm_scmi: Track basic SCMI communication debug metrics
  - firmware: arm_scmi: Add support for debug metrics at the interface
  - firmware: arm_scmi: Add message dump traces for bad and unexpected replies
  - firmware: arm_scmi: Add helper to trace bad messages
  - tpm: tis: Double the timeout B to 4s
  - cgroup/cpuset: Extend kthread_is_per_cpu() check to all PF_NO_SETAFFINITY tasks
  - platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection
  - platform/x86/amd/pmc: Declare quirk_spurious_8042 for MECHREVO Wujie 14XA (GX4HRXL)
  - binfmt_elf: Move brk for static PIE even if ASLR disabled
  - binfmt_elf: Honor PT_LOAD alignment for static PIE
  - binfmt_elf: Calculate total_size earlier
  - selftests/exec: Build both static and non-static load_address tests
  - binfmt_elf: Leave a gap between .bss and brk
  - selftests/exec: load_address: conform test to TAP format output
  - binfmt_elf: elf_bss no longer used by load_elf_binary()
  - binfmt_elf: Support segments with 0 filesz and misaligned starts
  - fs/xattr.c: fix simple_xattr_list to always include security.* xattrs
  - !20080 merge OLK-6.6 into OLK-6.6
  - ubcore: fix netdev size limit error.
  - !19254 merge refs/pull/19254/head into OLK-6.6
  - drivers/ub/sentry: release urma source when the ub device is removed
  - ceph: fix crash in process_v2_sparse_read() for encrypted directories
  - net: atlantic: fix fragment overflow handling in RX path
  - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once
  - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir().
  - gfs2: Fix unlikely race in gdlm_put_lock
  - gfs2: Add proper lockspace locking
  - xfs: do not propagate ENODATA disk errors into xattr code
  - ftrace: Fix BPF fexit with livepatch
  - cifs: Fix establishing NetBIOS session for SMB2+ connection
  - mfs: remove FAROUND event for mfsd demo
  - [virtCCA Live Migration 1]virtcca secure cvm supports live migration
  - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
  - sched: Fix kabi breakage of struct cfs_rq for zero_vruntime
  - sched/eevdf: Fix min_vruntime vs avg_vruntime
  - sched/core: Add comment explaining force-idle vruntime snapshots
  - sched/fair: Forfeit vruntime on yield
  - Revert "sched/fair: Only increment deadline once on yield"
  - sched: Fix kabi breakage of struct cfs_rq for min_vruntime_copy
  - sched/eevdf: Remove min_vruntime_copy
  - sched: Fix kabi breakage of struct sched_entity for on_rq and rel_deadline
  - sched/fair: Avoid re-setting virtual deadline on 'migrations'
  - sched/balancing: Change comment formatting to not overlap Git conflict marker lines
  - wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
  - mfs: Add prefetch demo
  - bpf, arm64: Do not audit capability check in do_jit()
  - PCI: Batch BAR sizing operations
  - bpf: Do not audit capability check in do_jit()
  - usb: usbtmc: Fix read_stb function and get_stb ioctl
  - staging: axis-fifo: fix TX handling on copy_from_user() failure
  - staging: axis-fifo: flush RX FIFO on read errors
  - staging: axis-fifo: fix maximum TX packet length check
  - ksmbd: fix stream write failure
  - netfilter: ipset: Remove unused htable_bits in macro ahash_region
  - Documentation: x86/bugs/its: Add ITS documentation
  - x86/speculation: Remove the extra #ifdef around CALL_NOSPEC
  - x86/speculation: Add a conditional CS prefix to CALL_NOSPEC
  - x86/speculation: Simplify and make CALL_NOSPEC consistent
  - x86/bhi: Do not set BHI_DIS_S in 32-bit mode
  - x86/bpf: Add IBHF call at end of classic BPF
  - x86/bpf: Call branch history clearing sequence on exit
  - io_uring: ensure deferred completions are posted for multishot
  - io_uring: always arm linked timeouts prior to issue
  - do_umount(): add missing barrier before refcount checks in sync case
  - drm/panel: simple: Update timings for AUO G101EVN010
  - MIPS: Fix MAX_REG_OFFSET
  - iio: adc: dln2: Use aligned_s64 for timestamp
  - iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64
  - types: Complement the aligned types with signed 64-bit one
  - iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer.
  - iio: accel: adxl367: fix setting odr for activity time update
  - usb: usbtmc: Fix erroneous generic_read ioctl return
  - usb: usbtmc: Fix erroneous wait_srq ioctl return
  - usb: usbtmc: Fix erroneous get_stb ioctl error returns
  - USB: usbtmc: use interruptible sleep in usbtmc_read
  - usb: typec: ucsi: displayport: Fix NULL pointer access
  - usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition
  - usb: host: tegra: Prevent host controller crash when OTG port is used
  - usb: gadget: Use get_status callback to set remote wakeup capability
  - usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN
  - usb: gadget: f_ecm: Add get_status callback
  - usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version
  - usb: cdnsp: Fix issue with resuming from L1
  - ocfs2: stop quota recovery before disabling quotas
  - ocfs2: implement handshaking with ocfs2 recovery thread
  - ocfs2: switch osb->disable_recovery to enum
  - clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable()
  - xenbus: Use kref to track req lifetime
  - xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it
  - smb: client: Avoid race in open_cached_dir with lease breaks
  - usb: uhci-platform: Make the clock really optional
  - drm/amdgpu/hdp6: use memcfg register to post the write for HDP flush
  - drm/amdgpu/hdp5: use memcfg register to post the write for HDP flush
  - drm/amdgpu/hdp5.2: use memcfg register to post the write for HDP flush
  - drm/amdgpu/hdp4: use memcfg register to post the write for HDP flush
  - drm/amd/display: Copy AUX read reply data whenever length > 0
  - drm/amd/display: Fix wrong handling for AUX_DEFER case
  - drm/amd/display: Remove incorrect checking in dmub aux handler
  - drm/amd/display: Fix the checking condition in dmub aux handling
  - iio: adis16201: Correct inclinometer channel resolution
  - iio: adc: rockchip: Fix clock initialization sequence
  - iio: adc: ad7606: fix serial register access
  - drm/amd/display: Shift DMUB AUX reply command if necessary
  - staging: axis-fifo: Correct handling of tx_fifo_depth for size validation
  - staging: axis-fifo: Remove hardware resets for user errors
  - staging: iio: adc: ad7816: Correct conditional logic for store mode
  - Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5
  - Input: synaptics - enable SMBus for HP Elitebook 850 G1
  - Input: synaptics - enable InterTouch on Dell Precision M3800
  - Input: synaptics - enable InterTouch on Dynabook Portege X30L-G
  - Input: synaptics - enable InterTouch on Dynabook Portege X30-D
  - Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller
  - Input: xpad - fix Share button on Xbox One controllers
  - Input: mtk-pmic-keys - fix possible null pointer dereference
  - Input: cyttsp5 - fix power control issue on wakeup
  - Input: cyttsp5 - ensure minimum reset pulse width
  - net: dsa: b53: fix learning on VLAN unaware bridges
  - net: dsa: b53: always rejoin default untagged VLAN on bridge leave
  - net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave
  - net: dsa: b53: fix flushing old pvid VLAN on pvid change
  - net: dsa: b53: fix clearing PVID of a port
  - net: dsa: b53: allow leaky reserved multicast
  - netfilter: ipset: fix region locking in hash types
  - can: gw: fix RCU/BH usage in cgw_create_job()
  - can: mcp251xfd: fix TDC setting for low data bit rates
  - net: ethernet: mtk_eth_soc: reset all TX queues on DMA free
  - netdevice: add netdev_tx_reset_subqueue() shorthand
  - sch_htb: make htb_deactivate() idempotent
  - ksmbd: prevent out-of-bounds stream writes by validating *pos
  - can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls
  - wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation
  - can: mcan: m_can_class_unregister(): fix order of unregistration calls
  - arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2
  - dm: add missing unlock on in dm_keyslot_evict()


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: yyjeqhc <jialin.oerv@isrc.iscas.ac.cn> - 1.0.1-6
changelog:
  - Add select local image to build.
  - Add support for setting target architecture during local builds.


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-50
changelog:
  - update to llvm-for-oe-17.0.6-2509.0.2
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2509.0.2


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-54
changelog:
  - update to llvm-for-oe-17.0.6-2512.0.1
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2512.0.1


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-56
changelog:
  - update to llvm-for-oe-17.0.6-2512.0.2
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2512.0.2


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-57
changelog:
  - update to llvm-for-oe-17.0.6-2512.0.3
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2512.0.3


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-58
changelog:
  - update to llvm-for-oe-17.0.6-2603.0.1
  - release-note https://gitcode.com/openeuler/llvm-project/releases/llvm-for-oE-17.0.6-2603.0.1


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix freeing of resources in disconnect
         openssl: fix crash on missing cert password


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix readdir issues
         h3: fix query of concurrent streams
         noproxy: fix the IPV6 network mask pattern match
         krb5_gssapi: fix memory leak on error path
         openldap: fix memory-leak in error path
         conn: fix hostname move on connection reuse 
         pop3: fix CAPA response termination detection
         libssh: properly free sftp_attributes
         openssl: fix a potential memory leak of params.cert


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:urlapi: avoid null deref if setting blank host to url
         urlapi: skip appending NULL pointer query


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-26
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224


author: yanglu <yanglu72@h-partners.com> - 2:6.6-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ethtool:hibmcge:fix wrong register address in pretty print of ethtool -d command


author: andy <liuyang01@kylinos.cn> - 2:6.6-6
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Fix SFF-8472 transceiver module identification
          ethtool: Add default branch to sff8636_show_all_ioctl switch
          qsfp: Better handling of Page 03h netlink read failure
          module-eeprom: treat zero arguments like any other arguments for hex dump
          qsf: Better handling of Page A2h netlink read failure


author: Fengyan Mu <mufengyan@huawei.com> - 2:6.6-7
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Add support the printer for the registers of unic driver
          through the command -d


author: yanglu <yanglu72@h-partners.com> - 2:6.6-8
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add NULL check before jsonw_string_field() in print_string()
         netlink:add NULL check for get_string() in features.c


author: wangkai <13474090681@163.com> - 140.3.1-1
changelog:
  - Update to 140.3.1
  - Fix CVE-2025-10527 CVE-2025-10528 CVE-2025-10529 CVE-2025-10532 CVE-2025-10533
    CVE-2025-10536 CVE-2025-10537 CVE-2025-9182 CVE-2025-9183 CVE-2025-9184
    CVE-2025-8036 CVE-2025-8037 CVE-2025-8038 CVE-2025-8039 CVE-2025-8040


author: Funda Wang <fundawang@yeah.net> - 140.4.0-1
changelog:
  - update to 140.4.0
  - fix CVE-2025-11708, CVE-2025-11709, CVE-2025-11710, CVE-2025-11711,
    CVE-2025-11712, CVE-2025-11713, CVE-2025-11714, CVE-2025-11715


author: Funda Wang <fundawang@yeah.net> - 140.5.0-1
changelog:
  - update to 140.5.0
    * fix CVE-2025-13012, CVE-2025-13013, CVE-2025-13014, CVE-2025-13015,
      CVE-2025-13016, CVE-2025-13017, CVE-2025-13018, CVE-2025-13019,
      CVE-2025-13020


author: Funda Wang <fundawang@yeah.net> - 140.7.0-1
changelog:
  - update to 140.7.0
    * fix CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880,
      CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884,
      CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890,
      CVE-2026-0891


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-86
changelog:
  - memalign: reinstate alignment overflow check (CVE-2026-0861)
  - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: Funda Wang <fundawang@yeah.net> - 1.14.5-2
changelog:
  - add patches from azure linux for fixing CVE-2025-2153, CVE-2025-2310,
    CVE-2025-2914, CVE-2025-2926, CVE-2025-6816, CVE-2025-2925,
    CVE-2025-2924, CVE-2025-44905, CVE-2025-6269, CVE-2025-6750,
    CVE-2025-6857, CVE-2025-7067, CVE-2025-7068, CVE-2025-6858,
    CVE-2025-2923, CVE-2025-2913, CVE-2025-6516, CVE-2025-6818,
    CVE-2025-6817, CVE-2025-6856, CVE-2025-7069


author: zhangyaqi <zhagnyaqi@kylinos.cn> - 2.4.58-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:allocate a heap buffer if the configured size is greater than the stack-allocated buffer.


author: chengyechun <chengyechun1@huawei.com> - 2.4.58-6
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: xingwei <xingwei14@h-partners.com> - 2.4.58-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: yanglu <yanglu72@h-partners.com> - 2.4.58-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: tangce <tangce1@h-partners.com> - 2.4.58-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: liweigang <liweiganga@uniontech.com> - 1.8.9-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libxtables: Fix memleak of matches' udata
          xshared: Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: xinghe <xinghe2@h-partners.com> - 2:1.6.40-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: ZixinLi <lizixin10@h-partners.com> - 9.10.0-23
changelog:
  - Fix CVE-2025-12748 CVE-2025-13193
  - conf: Add virDomainDefIDsParseString
  - bhyve: Check ACLs before parsing the whole domain XML
  - libxl: Check ACLs before parsing the whole domain XML
  - lxc: Check ACLs before parsing the whole domain XML
  - vz: Check ACLs before parsing the whole domain XML
  - ch: Check ACLs before parsing the whole domain XML
  - qemu: Check ACLs before parsing the whole domain XML
  - qemu: snapshot: Set umask for 'qemu-img' when creating external inactive snapshots


author: PengruiZhang <zhangpengrui@huawei.com> - 9.10.0-26
changelog:
  - vdpa: Add the count of vdpa devices when calculating Max locked memory
  - virDomainDeviceIsUSB: Handle all USB devices and simplify the code
  - add TengyunS5000C cpu info to cpu map
  - qemu:Implement the RAS feature for aarch64


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163)


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 8.0.43-1
changelog:
  - Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
    CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
    CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
    CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
    CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
    CVE-2025-50104,CVE-2025-53023)


author: wangkai <13474090681@163.com> - 8.0.44-1
changelog:
  - Update to 8.0.44 for fix CVEs (CVE-2025-53069,CVE-2025-53062,CVE-2025-53054,
    CVE-2025-53053,CVE-2025-53045,CVE-2025-53044,CVE-2025-53042,CVE-2025-53040)


author: yaoxin <1024769339@qq.com> - 8.0.45-1
changelog:
  - Update to 8.0.45 for fix CVEs (CVE-2026-21936,CVE-2026-21937,
    CVE-2026-21941,CVE-2026-21948,CVE-2026-21964,CVE-2026-21968)


author: gaihuiying <eaglegai@163.com> - 1:5.9.3-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Customized the anti-attacki/reset-last_engineTime function for IdeaUI
         change the permissions of passtest


author: xingwei <xingwei14@h-partners.com> - 1:5.9.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Migration patch from upstream, add compatibility to parse
  Linux 6.7 Ip header while keep support for previous versions.


author: yaoxin <yao_xin001@hoperun.com> - 1:20.12.1-1
changelog:
  - Update to 20.12.1:
    * CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session()
      leads to HTTP/2 server crash- (High)
    * CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
    * llhttp version 9.2.1
    * undici version 5.28.4


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:20.12.1-2
changelog:
  - fix building w/ clang: only apply '-fno-ipa-icf' for gcc && disable LTO for clang + ld.bfd
  - improve the handling of trilling whitespaces in C/CXXFLAGS


author: Ge Wang <wang__ge@126.com> - 1:20.12.1-3
changelog:
  - CVE-2023-45853 - Reject overflows of zip header fields in minizip
  - CVE-2024-5274 - Using FunctionParsingScope for parsing class static
  - CVE-2024-5535 - Fix SSL_select_next_proto
  - CVE-2024-7971 - Spill all loop inputs before entering loop


author: wangkai <13474090681@163.com> - 1:20.18.2-1
changelog:
  - Update to 20.18.2
  - Fix CVE-2025-23083 CVE-2025-23085 CVE-2025-23084 CVE-2024-36137
    CVE-2024-22018 CVE-2024-22020


author: wangkai <13474090681@163.com> - 1:20.18.2-5
changelog:
  - Fix CVE-2025-55130, CVE-2025-55131, CVE-2025-55132,
    CVE-2025-59465, CVE-2025-59466, CVE-2026-21637


author: xu_ping <707078654@qq.com> - 3.24.0-1
changelog:
  - Upgrade version to 3.24.0
    * Add support for FIPS-session mode
    * Updates to harden against RSA timing attacks
    * Add option to show the master key verification patterns of secure keys
    * Add support for exporting a key or certificate as URI-PEM file
    * Performance improvements for attribute retrieval
    * Add support for SHA-2 mechanisms
    * Experimental support for IBM Dilithium via OpenSSL OQS provider
    * Support live guest relocation for protected key (PKEY) operations
    * Add support for CKA_ALWAYS_AUTHENTICATE
    * Add support for CKD_*_SP800 KDFs for ECDH
    * Add support for SHA based key derivation mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms
    * Add support for building Opencryptoki on the IBM AIX platform
    * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64)
    * Add support for protecting tokens with a token specific user group
    * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE
    * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later


author: zhang_wenyu <zhang_wenyu@hoperun.com> - 3.25.0-1
changelog:
  - Upgrade version to 3.25.0
    * Add support for PKCS#11 v3.0 SHAKE key derivation
    * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP
    * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms
    * Add support for CCA AES CIPHER secure key types
    * Add support for the CKM_ECDH1_DERIVE mechanism
    * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms
    * Add support for the CKM_RSA_AES_KEY_WRAP mechanism
    * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism
    * Add a tool for import and exporting PKCS#11 keys to a KMIP server
    * Add support for opaque secure key blob import via C_CreateObject
    * Add support for key wrapping with AES-GCM
    * Add support for newer CCA versions on s390x and non-s390x platforms
    * Add support for CKM_AES_GCM (single-part operations only)


author: yaoxin <yao_xin001@hoperun.com> - 6.4.1-1
changelog:
  - Update to 6.4.1
    * Parsing of the ``Transfer-Encoding`` header is now stricter.
    * Handling of whitespace in headers now matches the RFC more closely.
    * ``tornado.curl_httpclient`` now prohibits carriage return and linefeed headers in HTTP headers
    (matching the behavior of ``simple_httpclient``).


author: chengyechun <chengyechun1@huawei.com> - 1.26.18-2
changelog:
  - Type:CVE
  - CVE:CVE-2024-37891
  - SUG:NA
  - DESC:fix CVE-2024-37891 Strip Proxy-Authorizatioin header on redirects


author: openEuler <contact@openeuler.org> - 0.10.2-2
changelog:
  - Add internationalization support (currently supports English and Simplified Chinese)
  - Fix issue where settings page may reopen multiple times


author: openEuler <contact@openeuler.org> - 0.10.2-4
changelog:
  - Fix timeout when executing complex MCP tasks
  - Feature: Add login through browser (requires proper desktop environment)


author: openEuler <contact@openeuler.org> - 0.10.2-6
changelog:
  - installer: Add support for package name and alternative package name formats
  - cli: Fix TUI keyboard interaction issue in some environments


author: openEuler <contact@openeuler.org> - 2.0.0-3
changelog:
  - feat: Add Witty Assistant welcome screen & LOGO
  - refactor: Improve Markdown rendering performance in TUI


author: openEuler <contact@openeuler.org> - 2.0.1-1
changelog:
  - feat: Set defautl chat model during installation
  - feat: Add shell completion installation command
  - fix: Markdown rendering issue in TUI
  - chore: Remove deprecated scripts in installer


