# changelog

author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-83.0.v2307
changelog:
  - netfilter: xt_u32: validate user space input (Wander Lairson Costa) [bug:197488] {CVE-2023-39192}
  - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [bug:197492] {CVE-2023-39193}
  - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma) [bug:197496] {CVE-2023-39194}
  - PCI/P2PDMA: Introduce configfs/sysfs enable attribute helpers (Logan Gunthorpe) [bug:194583]
  - PCI/P2PDMA: Add PCI p2pmem DMA mappings to adjust the bus offset (Logan Gunthorpe) [bug:194583]
  - x86/bugs: Enable STIBP for JMP2RET (Kim Phillips) [task:177187]
  - ipv4: fix null-deref in ipv4_link_failure (Kyle Zeng) [task:177575] {CVE-2023-42754}
  - KYLIN: kylin_merge_check.py: make script compatible (weisujuan) [task:177442]
  - Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync() (Duoming Zhou) [bug:189740] {CVE-2023-4134}
  - cxgb4: fix use after free bugs caused by circular dependency problem (Duoming Zhou) [bug:189736] {CVE-2023-4133}
  - timers: Provide timer_shutdown[_sync]() (Thomas Gleixner) [bug:189740]
  - timers: Add shutdown mechanism to the internal functions (Thomas Gleixner) [bug:189740]
  - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (Thomas Gleixner) [bug:189740]
  - timers: Rename del_timer() to timer_delete() (Thomas Gleixner) [bug:189740]
  - timers: Rename del_timer_sync() to timer_delete_sync() (Thomas Gleixner) [bug:189740]
  - timers: Use del_timer_sync() even on UP (Thomas Gleixner) [bug:189740]
  - timers: Silently ignore timers with a NULL function (Thomas Gleixner) [bug:189740]
  - timers: Update kernel-doc for various functions (Thomas Gleixner) [bug:189740]
  - timers: Replace BUG_ON()s (Thomas Gleixner) [bug:189740]
  - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (Steven Rostedt (Google)) [bug:189740]
  - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (Steven Rostedt (Google)) [bug:189740]
  - Revert "NFS: Don't call generic_error_remove_page() while holding locks" (wolfgang huang) [bug:194658]
  - KYLIN: Add HYGON retbleed= boot parameter (George Guo) [bug:186972]
  - KYLIN: config: generic defconfig adds LJM GPU driver (pengfuyuan) [task:171485, task:159113]
  - KYLIN: 3rd/ljmcore: add 2.2.4.1 ljmcore driver (pengfuyuan) [task:171485, task:159113]
  - KYLIN: Add a kylin patch merge check script (weisujuan) [task:174296]
  - netfilter: nft_exthdr: Search chunks in SCTP packets only (Phil Sutter) [bug:192914]
  - netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian (Stephen Suryaputra) [bug:192914]
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal) [bug:192914] {CVE-2023-4881}
  - netfilter: nft_exthdr: Fix for unsafe packet data read (Phil Sutter) [bug:192914]
  - netfilter: nft_exthdr: Support SCTP chunks (Phil Sutter) [bug:192914]
  - netfilter: nf_tables: add support for matching IPv4 options (Stephen Suryaputra) [bug:192914]
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [task:177236] {CVE-2023-42753}
  - scsi: core: Fix a procfs host directory removal regression (Bart Van Assche) [task:172278]
  - KYLIN: support KGDB in Sunway (liuyunchen) [task:153929]
  - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma) [bug:189726] {CVE-2023-3772}
  - scsi: smartpqi: Fix byte aligned writew for ARM servers (Don Brace) [task:170135]
  - serial: 8250_port: Check IRQ data before use (Andy Shevchenko) [task:176472]
  - KYLIN: 3rd/inspur: update inspur driver to v0.2 (Shixiong Ou) [task:173411]
  - KYLIN: x86/config: rename inspur dc configuration (Shixiong Ou) [task:173411]
  - KYLIN: loongarch/config: rename inspur dc configuration (Shixiong Ou) [task:173411]
  - KYLIN: gmjstcm: delete SMO0768 from TCM1 spi device id (Li ZhiGang) [task:175749]
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima) [bug:196022] {CVE-2023-4622}
  - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet) [bug:196026] {CVE-2023-42752}
  - net/sched: Retire rsvp classifier (Jamal Hadi Salim) [bug:196033] {CVE-2023-42755}
  - virtio_mmio: Restore guest page size on resume (Stephan Gerhold) [task:158942]
  - virtio_mmio: Add missing PM calls to freeze/restore (Stephan Gerhold) [task:158942]
  - virtio-pci: Remove wrong address verification in vp_del_vqs() (Murilo Opsfelder Araujo) [task:158942]
  - virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed (chengkaitao) [task:158942]
  - virtio: acknowledge all features before access (Michael S. Tsirkin) [task:158942]
  - virtio: unexport virtio_finalize_features (Michael S. Tsirkin) [task:158942]
  - virtio: write back F_VERSION_1 before validate (Halil Pasic) [task:158942]
  - virtio_pci: Support surprise removal of virtio pci device (Parav Pandit) [task:158942]
  - virtio: Improve vq->broken access to avoid any compiler optimization (Parav Pandit) [task:158942]
  - virtio: Protect vqs list access (Parav Pandit) [task:158942]
  - virtio_ring: Fix two use after free bugs (Dan Carpenter) [task:158942]
  - virtio_ring: Cut and paste bugs in vring_create_virtqueue_packed() (Dan Carpenter) [task:158942]
  - virtio_ring: Avoid loop when vq is broken in virtqueue_poll (Mao Wenan) [task:158942]
  - virtio_balloon: fix up endian-ness for free cmd id (Michael S. Tsirkin) [task:158942]
  - virtio_ring: Fix mem leak with vring_new_virtqueue() (Suman Anna) [task:158942]
  - virtio_balloon: Adjust label in virtballoon_probe (Nathan Chancellor) [task:158942]
  - virtio_balloon: prevent pfn array overflow (Michael S. Tsirkin) [task:158942]
  - virtio_balloon: Fix memory leaks on errors in virtballoon_probe() (David Hildenbrand) [task:158942]
  - virtio-balloon: Fix memory leak when unloading while hinting is in progress (David Hildenbrand) [task:158942]
  - virtio-pci: check name when counting MSI-X vectors (Daniel Verkamp) [task:158942]
  - virtio-balloon: initialize all vq callbacks (Daniel Verkamp) [task:158942]
  - virtio-balloon: fix managed page counts when migrating pages between zones (David Hildenbrand) [task:158942]
  - virtio_balloon: fix shrinker count (Wei Wang) [task:158942]
  - virtio_balloon: fix shrinker scan number of pages (Michael S. Tsirkin) [task:158942]
  - virtio_ring: fix return code on DMA mapping fails (Halil Pasic) [task:158942]
  - virtio_ring: fix stalls for packed rings (Marvin Liu) [task:158942]
  - virtio_ring: fix unmap of indirect descriptors (Matthias Lange) [task:158942]
  - virtio-mmio: add error check for platform_get_irq (Ihor Matushchak) [task:158942]
  - virtio: Fix indentation of VIRTIO_MMIO (Fabrizio Castro) [task:158942]
  - balloon: don't bother with dentry_operations (Al Viro) [task:158942]
  - virtio/virtio_ring: do some comment fixes (Jiang Biao) [task:158942]
  - virtio_ring: Fix potential mem leak in virtqueue_add_indirect_packed (YueHaibing) [task:158942]
  - virtio: Honour 'may_reduce_num' in vring_create_virtqueue (Cornelia Huck) [task:158942]
  - virtio_pci: fix a NULL pointer reference in vp_del_vqs (Longpeng) [task:158942]
  - virtio: hint if callbacks surprisingly might sleep (Cornelia Huck) [task:158942]
  - virtio_balloon: remove the unnecessary 0-initialization (Wei Wang) [task:158942]
  - virtio-balloon: improve update_balloon_size_func (Wei Wang) [task:158942]
  - virtio: drop internal struct from UAPI (Michael S. Tsirkin) [task:158942]
  - virtio: support VIRTIO_F_ORDER_PLATFORM (Tiwei Bie) [task:158942]
  - virtio-balloon: tweak config_changed implementation (Wei Wang) [task:158942]
  - virtio: don't allocate vqs when names[i] = NULL (Wei Wang) [task:158942]
  - virtio_pci: use queue idx instead of array idx to set up the vq (Wei Wang) [task:158942]
  - virtio: remove deprecated VIRTIO_PCI_CONFIG() (Dongli Zhang) [task:158942]
  - virtio_ring: advertize packed ring layout (Tiwei Bie) [task:158942]
  - virtio_ring: leverage event idx in packed ring (Tiwei Bie) [task:158942]
  - virtio_ring: introduce packed ring support (Tiwei Bie) [task:158942]
  - virtio: add packed ring types and macros (Tiwei Bie) [task:158942]
  - virtio_ring: cache whether we will use DMA API (Tiwei Bie) [task:158942]
  - virtio_ring: extract split ring handling from ring creation (Tiwei Bie) [task:158942]
  - virtio_ring: allocate desc state for split ring separately (Tiwei Bie) [task:158942]
  - virtio_ring: introduce helper for indirect feature (Tiwei Bie) [task:158942]
  - virtio_ring: introduce debug helpers (Tiwei Bie) [task:158942]
  - virtio_ring: put split ring fields in a sub struct (Tiwei Bie) [task:158942]
  - virtio_ring: put split ring functions together (Tiwei Bie) [task:158942]
  - virtio_ring: add _split suffix for split ring functions (Tiwei Bie) [task:158942]
  - virtio-balloon: VIRTIO_BALLOON_F_PAGE_POISON (Wei Wang) [task:158942]
  - virtio-balloon: VIRTIO_BALLOON_F_FREE_PAGE_HINT (Wei Wang) [task:158942]
  - KYLIN: Revert "virtio-balloon: fix managed page counts when migrating pages between zones" (tanglongjun) [task:158942]
  - KYLIN: Revert "virtio_balloon: prevent pfn array overflow" (tanglongjun) [task:158942]
  - KYLIN: Revert "virtio: Honour 'may_reduce_num' in vring_create_virtqueue" (tanglongjun) [task:158942]
  - KYLIN: Revert "virtio_pci: fix a NULL pointer reference in vp_del_vqs" (tanglongjun) [task:158942]
  - KYLIN: Revert "virtio_ring: fix return code on DMA mapping fails" (tanglongjun) [task:158942]
  - KYLIN: Revert "virtio_ring: Avoid loop when vq is broken in virtqueue_poll" (tanglongjun) [task:158942]
  - KYLIN: Revert "virtio_pci: Support surprise removal of virtio pci device" (tanglongjun) [task:158942]
  - KYLIN: Revert "virtio: Improve vq->broken access to avoid any compiler optimization" (tanglongjun) [task:158942]
  - KYLIN: Revert "virtio: write back F_VERSION_1 before validate" (tanglongjun) [task:158942]
  - KYLIN: Revert "virtio: unexport virtio_finalize_features" (tanglongjun) [task:158942]
  - KYLIN: Revert "virtio: acknowledge all features before access" (tanglongjun) [task:158942]
  - KYLIN: Revert "virtio-pci: Remove wrong address verification in vp_del_vqs()" (tanglongjun) [task:158942]
  - KYLIN: Revert "virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed" (tanglongjun) [task:158942]
  - KYLIN: Revert "virtio_mmio: Add missing PM calls to freeze/restore" (tanglongjun) [task:158942]
  - KYLIN: Revert "virtio_mmio: Restore guest page size on resume" (tanglongjun) [task:158942]
  - sched/debug: Make sd->flags sysctl read-only (Valentin Schneider) [task:151434]
  - dm: fix mempool NULL pointer race when completing IO (Jiazi Li) [task:169357]
  - dm: eliminate need for start_io_acct() forward declaration (Mike Snitzer) [task:169357]
  - dm: use bio_{start,end}_io_acct (Christoph Hellwig) [task:169357]
  - block: add disk/bio-based accounting helpers (Christoph Hellwig) [task:169357]
  - block/diskstats: more accurate approximation of io_ticks for slow disks (Konstantin Khlebnikov) [task:169357]
  - vgacon: Propagate console boot parameters before calling `vc_resize' (Maciej W. Rozycki) [task:169357]
  - mtd: parser: cmdline: Fix parsing of part-names with colons (Sven Eckelmann) [task:169357]
  - Revert "ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE" (Vineet Gupta) [task:169357]
  - ALSA: hda: Clear RIRB status before reading WP (Mohan Kumar) [task:169357]
  - s390/ap: fix status returned by ap_qact() (Halil Pasic) [task:169357]
  - s390/ap: fix status returned by ap_aqic() (Halil Pasic) [task:169357]
  - s390/ap: get rid of register asm (Heiko Carstens) [task:169357]
  - crypto: api - Fix use-after-free and race in crypto_spawn_alg (Herbert Xu) [task:169357]
  - crypto: api - Do not zap spawn->alg (Herbert Xu) [task:169357]
  - acpi/nfit: improve bounds checking for 'func' (Dan Carpenter) [task:169357]
  - acpi/nfit: Add support for Intel DSM 1.8 commands (Dave Jiang) [task:169357]
  - acpi, nfit: Collect shutdown status (Dan Williams) [task:169357]
  - acpi, nfit: Introduce nfit_mem flags (Dan Williams) [task:169357]
  - EDAC/ghes: Do not warn when incrementing refcount on 0 (Robert Richter) [task:169357]
  - EDAC/ghes: Fix locking and memory barrier issues (Robert Richter) [task:169357]
  - EDAC, ghes: Use CPER module handles to locate DIMMs (Fan Wu) [task:169357]
  - KYLIN: loongarch/etmem: enable etmem config as 'M' by default. (JiangXiujie) [task:163333]
  - ext4: fix overflow in ext4_iomap_alloc() (Jan Kara) [task:156171]
  - ext4: Fix occasional generic/418 failure (Jan Kara) [task:156171]
  - ext4: do not block RWF_NOWAIT dio write on unallocated space (Jan Kara) [task:156171]
  - ext4: dio take shared inode lock when overwriting preallocated blocks (Zhang Yi) [task:156171]
  - ext4: optimize file overwrites (Ritesh Harjani) [task:156171]
  - ext4: Optimize ext4 DIO overwrites (Jan Kara) [task:156171]
  - ext4: Move to shared i_rwsem even without dioread_nolock mount opt (Ritesh Harjani) [task:156171]
  - ext4: Start with shared i_rwsem in case of DIO instead of exclusive (Ritesh Harjani) [task:156171]
  - ext4: introduce direct I/O write using iomap infrastructure (Matthew Bobrowski) [task:156171]
  - vfs: introduce file_modified() helper (Amir Goldstein) [task:156171]
  - ext4: remove unnecessary error check (Shi Siyuan) [task:156171]
  - ext4: update ext4_sync_file() to not use __generic_file_fsync() (Matthew Bobrowski) [task:156171]
  - ext4: move inode extension check out from ext4_iomap_alloc() (Matthew Bobrowski) [task:156171]
  - ext4: move inode extension/truncate code out from ->iomap_end() callback (Matthew Bobrowski) [task:156171]
  - ext4: introduce direct I/O read using iomap infrastructure (Matthew Bobrowski) [task:156171]
  - ext4: introduce new callback for IOMAP_REPORT (Matthew Bobrowski) [task:156171]
  - ext4: split IOMAP_WRITE branch in ext4_iomap_begin() into helper (Matthew Bobrowski) [task:156171]
  - ext4: move set iomap routines into a separate helper ext4_set_iomap() (Matthew Bobrowski) [task:156171]
  - ext4: update direct I/O read lock pattern for IOCB_NOWAIT (Matthew Bobrowski) [task:156171]
  - ext4: reorder map.m_flags checks within ext4_iomap_begin() (Matthew Bobrowski) [task:156171]
  - iomap: Allow forcing of waiting for running DIO in iomap_dio_rw() (Jan Kara) [task:156171]
  - iomap: move the iomap_dio_rw ->end_io callback into a structure (Christoph Hellwig) [task:156171]
  - iomap: split size and error for iomap_dio_rw ->end_io (Matthew Bobrowski) [task:156171]
  - Revert "Revert "ext4: Allow parallel DIO reads"" (Shida Zhang) [task:156171]
  - Revert "Revert "Revert "ext4: Allow parallel DIO reads""" (Shida Zhang) [task:156171]
  - Revert "ext4: update direct I/O read lock pattern for IOCB_NOWAIT" (Shida Zhang) [task:156171]
  - Revert "ext4: introduce direct I/O read using iomap infrastructure" (Shida Zhang) [task:156171]
  - xfs: check sb_meta_uuid for dabuf buffer recovery (Dave Chinner) [bug:194635]
  - KYLIN: security/selinux: add ngac hook function for selinux version 4.19 (wangshengye) [bug:195749]
  - KYLIN: jjw/mwv207: fix Fix incorrect use of fallthrough (Jackie Liu)
  - KYLIN: scripts: add a script to compare local patch with upstream's (Zhengyuan Liu) [task:130197]
  - bpf: in bpf_skb_adjust_room avoid copy in tx fast path (Willem de Bruijn) [task:160019]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-84.0.v2307
changelog:
  - KYLIN: Revert "USB: core: Don't hold device lock while reading the "descriptors" sysfs file" (Hongyu Xie) [task:179861] {CVE-2023-37453}
  - OPENEULER: scripts: switch explicitly to Python 3 (Yi Li) [task:180198]
  - io_uring: ensure IOPOLL locks around deferred work (Jens Axboe) [task:179887] {CVE-2023-21400}
  - crypto: hisilicon/qm - adjust order of device error configuration (Weili Qian) [task:150626]
  - crypto: hisilicon - enable new error types for QM (Weili Qian) [task:150626]
  - crypto: hisilicon - add new error type for SEC (Weili Qian) [task:150626]
  - crypto: hisilicon/hpre - add two RAS correctable errors processing (Hui Tang) [task:150626]
  - crypto: hisilicon/hpre - delete ECC 1bit error reported threshold (Hui Tang) [task:150626]
  - io_uring: get rid of intermediate IORING_OP_CLOSE stage (Jens Axboe) [task:179891] {CVE-2023-1295}
  - fs: provide locked helper variant of close_fd_get_file() (Jens Axboe) [task:179891]
  - file: Rename __close_fd_get_file close_fd_get_file (Eric W. Biederman) [task:179891]
  - KYLIN: media: mceusb: Use USB_DIR_IN in read request (Hongyu Xie) [task:179257] {CVE-2022-3903}
  - KYLIN: 3snic/sssraid: Add support for 3s580 raid card on x86 (tanze) [task:167388]
  - KYLIN: 3snic/sssraid: Add support for 3s580 raid card on arm64 (tanze) [task:167388]
  - KYLIN: 3snic/sssraid: Fix some formatting issues (tanze) [task:167388]
  - 3SNIC: sssraid: Provide driver support for 3S580 raid card (tanze) [task:167388]
  - OPENEULER: svm: Delete unused ioctl command (huhai) [task:180214] {CVE-2021-33639}
  - ZHAOXIN: Log for Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform (leoliu-oc) [task:177896]
  - ZHAOXIN: Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform (leoliu-oc) [task:177896]
  - ZHAOXIN: Log for KVM: x86: Introduce support for Zhaoxin ZXPAUSE instruction (leoliu-oc) [task:177896]
  - ZHAOXIN: KVM: x86: Introduce support for Zhaoxin ZXPAUSE instruction (leoliu-oc) [task:177896]
  - ZHAOXIN: Log for x86/delay: add support for Zhaoxin ZXPAUSE instruction (leoliu-oc) [task:177896]
  - ZHAOXIN: x86/delay: add support for Zhaoxin ZXPAUSE instruction (leoliu-oc) [task:177896]
  - ZHAOXIN: Log for Add support Zhaoxin GPIO pinctrl (leoliu-oc) [task:177896]
  - ZHAOXIN: Add support Zhaoxin GPIO pinctrl (leoliu-oc) [task:177896]
  - ZHAOXIN: Log for Update PMU uncore dump bug patch (leoliu-oc) [task:177896]
  - ZHAOXIN: Update PMU uncore dump bug patch (leoliu-oc) [task:177896]
  - ZHAOXIN: Log for Driver for Zhaoxin GMI SM2 Secure Hash algorithm (leoliu-oc) [task:177896]
  - ZHAOXIN: Add support for Zhaoxin GMI SM2 Secure Hash algorithm (leoliu-oc) [task:177896]
  - ZHAOXIN: Log for cpufreq: ACPI: add ITMT support when CPPC enabled (leoliu-oc) [task:177896]
  - ZHAOXIN: cpufreq: ACPI: add ITMT support when CPPC enabled (leoliu-oc) [task:177896]
  - ZHAOXIN: Update Zhaoxin core temperature monitoring driver (leoliu-oc) [task:177896]
  - ZHAOXIN: Log for Update HDAC support for Zhaoxin KX-7000 (leoliu-oc) [task:177896]
  - ZHAOXIN: Update HDAC support for Zhaoxin KX-7000 (leoliu-oc) [task:177896]
  - ZHAOXIN: Log for Update PMU support for Zhaoxin KX-7000 (leoliu-oc) [task:177896]
  - ZHAOXIN: Update PMU support for Zhaoxin KX-7000 (leoliu-oc) [task:177896]
  - ZHAOXIN: Log for Fix Zhaoxin PMU uncore kdump fail bug (leoliu-oc) [task:177896]
  - ZHAOXIN: Fix Zhaoxin PMU uncore kdump fail bug (leoliu-oc) [task:177896]
  - tweewide: Fix most Shebang lines (Finn Behrens)
  - iomap: Set all uptodate bits for an Uptodate page (Matthew Wilcox (Oracle)) [bug:197566]
  - iomap: Use kzalloc to allocate iomap_page (Matthew Wilcox (Oracle)) [bug:197566]
  - remove the lightnvm subsystem (Christoph Hellwig) [task:179254] {CVE-2022-2991}
  - x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Borislav Petkov (AMD)) [task:179889, bug:189752] {CVE-2023-20588}
  - x86/CPU/AMD: Do not leak quotient data after a division by 0 (Borislav Petkov (AMD)) [task:179889, bug:189752] {CVE-2023-20588}
  - KYLIN: NVMe/pci: fix pci_irq_vector WARN_ON (pengyu) [bug:197798]
  - nvme: default to 0 poll queues (Jens Axboe) [bug:197798]
  - KVM: nVMX: add missing consistency checks for CR0 and CR4 (Paolo Bonzini) [task:179282] {CVE-2023-30456}
  - KYLIN: security/kysec: fix possible memory leak in kysec_hash_sha256() (yangzhao) [task:126288]
  - KYLIN: security/kysec: fix the problem that the manufacturer program takes too long to open (wangkanglong) [bug:139540]
  - KYLIN: security/kysec: start menu freezes after opening Loongson browser (wangkanglong) [bug:102574]
  - KYLIN: security/kysec: add timeout for auth wait_event (yangzhao) [bug:169733, bug:170147]
  - bpf, sockmap: fix deadlocks in the sockhash and sockmap (Xin Liu) {CVE-2023-0160}
  - perf: Disallow mis-matched inherited group reads (Peter Zijlstra) {CVE-2023-5717}
  - nvmet-tcp: Fix a possible UAF in queue intialization setup (Sagi Grimberg) {CVE-2023-5178}
  - nvmet-tcp: move send/recv error handling in the send/recv methods instead of call-sites (Sagi Grimberg)
  - igb: set max size RX buffer when store bad packet is enabled (Radoslaw Tyl) {CVE-2023-45871}
  - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) {CVE-2023-39189}
  - bpf: Fix NULL event->prog pointer access in bpf_overflow_handler (Yonghong Song) [task:178877]
  - ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng) {CVE-2023-31085}
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO (Lee, Chun-Yi) {CVE-2023-31083}
  - tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith) {CVE-2023-1206}
  - xen/netback: Fix buffer overrun triggered by unusual packet (Ross Lagerwall) {CVE-2023-34319}
  - KYLIN: debug/config: cleanup and enable NVME_AUTH (Jackie Liu)
  - bpf: Fix ringbuf helper function compatibility (Daniel Borkmann) {CVE-2021-34866}
  - cgroup: Fix sock_cgroup_data on big-endian. (Cong Wang) {CVE-2020-14356}
  - KYLIN: Revert "cgroup: fix KABI broken by "cgroup: fix cgroup_sk_alloc() for sk_clone_lock()"" (Jackie Liu)
  - bpf: Don't use tnum_range on array range checking for poke descriptors (Daniel Borkmann) {CVE-2022-2905}
  - bpf: Fix incorrect verifier pruning due to missing register precision taints (Daniel Borkmann) {CVE-2023-2163}
  - bpf: Fix signed_{sub,add32}_overflows type handling (Daniel Borkmann) {CVE-2021-20268}
  - bpf, ringbuf: Deny reserve of buffers larger than ringbuf (Thadeu Lima de Souza Cascardo) {CVE-2021-3489}
  - xfs: drop submit side trans alloc for append ioends (Brian Foster) [task:168909]
  - xfs: turn io_append_trans into an io_private void pointer (Christoph Hellwig) [task:168909]
  - xfs: refactor the ioend merging code (Christoph Hellwig) [task:168909]
  - xfs: simplify xfs_ioend_can_merge (Christoph Hellwig) [task:168909]
  - xfs: allow merging ioends over append boundaries (Christoph Hellwig) [task:168909]
  - xfs: merge adjacent io completions of the same type (Darrick J. Wong) [task:168909]
  - xfs: remove unused m_data_workqueue (Darrick J. Wong) [task:168909]
  - xfs: implement per-inode writeback completion queues (Darrick J. Wong) [task:168909]
  - block: fix splitting segments on boundary masks (Ming Lei) [task:174281, task:175051, task:175046, bug:195690, bug:195682, bug:195676]
  - IB/isert: Fix unaligned immediate-data handling (Sagi Grimberg) [task:174281, task:175051, task:175046, bug:195690, bug:195682, bug:195676]
  - block: fix segment calculation for passthrough IO (Ming Lei) [task:174281, task:175051, task:175046, bug:195690, bug:195682, bug:195676]
  - block: optimize blk_bio_segment_split for single-page bvec (Ming Lei) [task:174281, task:175051, task:175046, bug:195690, bug:195682, bug:195676]
  - block: fix updating bio's front segment size (Ming Lei) [task:174281, task:175051, task:175046, bug:195690, bug:195682, bug:195676]
  - block: avoid to READ fields of null bio (Ming Lei) [task:174281, task:175051, task:175046, bug:195690, bug:195682, bug:195676]
  - block: use bio_for_each_bvec() to map sg (Ming Lei) [task:174281, task:175051, task:175046, bug:195690, bug:195682, bug:195676]
  - block: use bio_for_each_bvec() to compute multi-page bvec count (Ming Lei) [task:174281, task:175051, task:175046, bug:195690, bug:195682, bug:195676]
  - block: introduce bio_for_each_bvec() and rq_for_each_bvec() (Ming Lei) [task:174281, task:175051, task:175046, bug:195690, bug:195682, bug:195676]
  - block: introduce multi-page bvec helpers (Ming Lei) [task:174281, task:175051, task:175046, bug:195690, bug:195682, bug:195676]
  - blk-throttle: fix that io throttle can only work for single bio (Yu Kuai) [bug:190624]
  - block: don't try to throttle split bio if iops limit isn't set (Ming Lei) [bug:190624]
  - block: throttle split bio in case of iops limit (Ming Lei) [bug:190624]
  - block: don't check bio in blk_throtl_dispatch_work_fn (Ming Lei) [bug:190624]
  - blk-throttle: Avoid checking bps/iops limitation if bps or iops is unlimited (Baolin Wang) [bug:190624]
  - blk-throttle: Avoid calculating bps/iops limitation repeatedly (Baolin Wang) [bug:190624]
  - KYLIN: crypto/ceu: add phytium ceu crypto module (zhubing) [task:176956]
  - KYLIN: security/kysec: use spin_lock_irq() instead of spin_lock() (huanfuxi) [bug:164413]
  - KYLIN: security/kysec: fix bug with deadlock when writing aufs files (yangzhao) [task:136839]
  - KYLIN: security/kysec: fix kmemleak of netctl (wangkanglong) [bug:190255]
  - KYLIN:  fix compile error caused by timer.c in Sunway (liuyunchen) [task:178212, task:178378]
  - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (xiaolinkui) [bug:195544]
  - KYLIN: 3rd/inspur: rename inspur dc configuration (Shixiong Ou) [task:173411]
  - i40e: prevent crash on probe if hw registers have invalid values (Michal Schmidt)
  - ice: reset first in crash dump kernels (Jesse Brandeburg)
  - MUCSE: rnpgbe: Add Mucse rnpgbe PCIe driver support (Yibo Dong) [task:177532]
  - KYLIN: tpm: add TCM2.0 support in tpm_tis_spi (Li ZhiGang) [task:175234]
  - KYLIN: rpmbuild: enable cpupower on loongarch64 (Yongzhen Zhang) [bug:197155]
  - kernel/profile.c: use cpumask_available to check for NULL cpumask (Nathan Chancellor)


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-85.0.v2307
changelog:
  - PHYTIUM: PMU: phytium: Add support for PCIe PMU of Phytium ps2364. (Hu Xianghua) [task:180699]
  - PHYTIUM: PMU: phytium: Add support for ddr PMU of Phytium ps2364. (Hu Xianghua) [task:180699]
  - Revert "PHYTIUM: PMU: phytium: Add Phytium PS2364 DDR C2C PCIE PMU support" (Zheng Tan) [task:180699]
  - KYLIN: kylin_merge_check.py: Supports the ZHAOXIN patch file directory structure (weisujuan) [task:174296]
  - media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Hyunwoo Kim) [task:181433] {CVE-2022-45884}
  - media: dvbdev: fix error logic at dvb_register_device() (Mauro Carvalho Chehab) [task:181433]
  - media: dvbdev: Fix memleak in dvb_register_device (Dinghao Liu) [task:181433]
  - media: media/dvb: Use kmemdup rather than duplicating its implementation (Fuqian Huang) [task:181433]
  - media: dvbdev: remove double-unlock (Mauro Carvalho Chehab) [task:181433]
  - KYLIN: net: support net affinity settings for 5000C (xiaolinkui) [task:179979]
  - ravb: Fix use-after-free issue in ravb_tx_timeout_work() (Yoshihiro Shimoda) [task:181443] {CVE-2023-35827}
  - arm64/bpf: Remove 128MB limit for BPF JIT programs (Russell King) [bug:187461]
  - arm64: extable: add `type` and `data` fields (Mark Rutland) [bug:187461]
  - arm64: extable: use `ex` for `exception_table_entry` (Mark Rutland) [bug:187461]
  - arm64: extable: make fixup_exception() return bool (Mark Rutland) [bug:187461]
  - arm64: extable: consolidate definitions (Mark Rutland) [bug:187461]
  - io_uring: always grab file table for deferred statx (Jens Axboe) [task:179249] {CVE-2022-20568}
  - io_uring: disable polling pollfree files (Pavel Begunkov) [task:179288] {CVE-2022-3176}
  - char: pcmcia: remove all the drivers (Jiri Slaby) [task:177573] {CVE-2022-44033}
  - OPENEULER: ACPI/APEI: Add SEI notification type support for ARMv8 (Dongjiu Geng) [task:180700]
  - KYLIN: Revert "nvme: default to 0 poll queues" (wolfgang huang) [bug:197798]
  - KYLIN: Revert "block: introduce multi-page bvec helpers" (pengcan) [task:174281]
  - KYLIN: Revert "block: introduce bio_for_each_bvec() and rq_for_each_bvec()" (pengcan) [task:174281]
  - KYLIN: Revert "block: use bio_for_each_bvec() to compute multi-page bvec count" (pengcan) [task:174281]
  - KYLIN: Revert "block: use bio_for_each_bvec() to map sg" (pengcan) [task:174281]
  - KYLIN: Revert "block: avoid to READ fields of null bio" (pengcan) [task:174281]
  - KYLIN: Revert "block: fix updating bio's front segment size" (pengcan) [task:174281]
  - KYLIN: Revert "block: optimize blk_bio_segment_split for single-page bvec" (pengcan) [task:174281]
  - KYLIN: Revert "block: fix segment calculation for passthrough IO" (pengcan) [task:174281]
  - KYLIN: Revert "IB/isert: Fix unaligned immediate-data handling" (pengcan) [task:174281]
  - KYLIN: Revert "block: fix splitting segments on boundary masks" (pengcan) [task:174281]
  - KYLIN: add btf support for loongarch (George Guo) [task:166877]
  - net: nfc: Fix use-after-free caused by nfc_llcp_find_local (Lin Ma) [task:179856] {CVE-2023-3863}
  - nfc: llcp: simplify llcp_sock_connect() error paths (Krzysztof Kozlowski) [task:179856]
  - nfc: llcp: nullify llcp_sock->dev on connect() error paths (Krzysztof Kozlowski) [task:179856]
  - nfc: Fix to check for kmemdup failure (Aditya Pakki) [task:179856]
  - LoongArch: LSVZ: Fix huge page check issue (liubaolin) [task:180502]
  - Loongarch: Fix 'extioi' logic error (liubaolin) [task:180502]
  - LoongArch: Adjust {copy, clear}_user exception handler behavior (liubaolin) [task:180502]
  - LoongArch: ACPICA: Events: remove the global lock initialization (liubaolin) [task:180502]
  - LoongArch: Fix macro write_fcsr (liubaolin) [task:180502]
  - LoongArch: Fix return value underflow in exception path (liubaolin) [task:180502]
  - LoongArch: Tweak the BADV and CPUCFG.PRID lines in show_regs() (liubaolin) [task:180502]
  - LoongArch: Humanize the ECFG line when showing registers (liubaolin) [task:180502]
  - LoongArch: Humanize the EUEN line when showing registers (liubaolin) [task:180502]
  - LoongArch: Humanize the PRMD line when showing registers (liubaolin) [task:180502]
  - LoongArch: Humanize the CRMD line when showing registers (liubaolin) [task:180502]
  - LoongArch: Fix format of CSR lines during show_regs() (liubaolin) [task:180502]
  - LoongArch: Print symbol info for $ra and CSR.ERA only for kernel-mode contexts (liubaolin) [task:180502]
  - LoongArch: Print GPRs with ABI names when showing registers (liubaolin) [task:180502]
  - LoongArch: Relay BCE exceptions to userland as SIGSEGV with si_code=SEGV_BNDERR (liubaolin) [task:180502]
  - loongarch/kvm: Fixed extioi hardware emulation bugs (liubaolin) [task:180502]
  - KYLIN: Revert "NFS: Don't interrupt file writeout due to fatal errors" (ChenXiaoSong) [task:198290]
  - xen/events: replace evtchn_rwlock with RCU (Juergen Gross) {CVE-2023-34324}
  - xen/events: don't use chip_data for legacy IRQs (Juergen Gross)
  - UBUNTU: SAUCE: bpf: prevent helper argument PTR_TO_ALLOC_MEM to have offset other than 0 (Thadeu Lima de Souza Cascardo) [task:179324] {CVE-2021-4204}


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.0-3
changelog:
  - Fix for "sched: Change task_struct::state"
  - Fix for "sched: move CPU field back into thread_info if THREAD_INFO_IN_TASK=y"
  - Fix live debugging with lockdown=integrity
  - Fix 'waitq' command for Linux 4.13 and later kernels
  - Fix for "kmem -s|-S" option on Linux 5.7 and later kernels


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.1-3
changelog:
  - Fix segmentation fault caused by crash extension modules
  - Support the overflow stack exception handling on aarch64


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.1-4
changelog:
  - Fix segfault on aarch64 for "bt -a|-c" command
  - Fix HZ calculation on Linux 5.14 and later
  - Fix for "timer -r" option to display all the per-CPU clocks


author: cuiyudong <cuiyudong@kylinos.cn> - 2.0.23-12.p02
changelog:
  - Type:bugfix
  - ID:194811
  - SUG:NA
  - DESC: modify  dracut-kdump.sh in dump_ssh() add delay to solve sshd failed


author: hann <hannannan@kylinos.cn> - 2.0.23-12.ks8.01
changelog:
  - Type:bugfix
  - ID:205653
  - SUG:NA
  - DESC:rebranding from v10-sp4 for kernel-4.19
         ExcludeArch i686


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-10
changelog:
  - weak-modules: group modules on add-kernel
  - weak-modules: do not make groups if there are no extra modules
    Resolves: rhbz#1649211


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-16
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1778889


author: - Andy Walsh <awalsh@redhat.com> - 6.2.7.17-86
changelog:
  - Fixed bug which could result in empty flushes being issued to the storage
    below vdo while suspended.
  - Resolves: rhbz#2013056
  - Fixed syntax mismatch which prevented lvm from being able to configure a
    512MB UDS index.
  - Resolves: rhbz#2073203
  - Fixed a race handling timeouts of dedupe index queries.
  - Resolves: rhbz#2092075


author: - Andy Walsh <awalsh@redhat.com> - 6.2.8.1-87
changelog:
  - Fixed a bug which could produce a deadlock after multiple saves and resumes
    of a vdo.
  - Resolves: rhbz#2109047


author: - Susan LeGendre-McGhee <slegendr@redhat.com> - 6.2.8.7-88
changelog:
  - Fixed bug in read-only rebuild when the logical size of the volume is an
    exact multiple of 821 4K blocks.
  - Resolves: rhbz#2166131


