# changelog

author: maminjie <maminjie1@huawei.com> - 1.3.30-8
changelog:
  - fix some CVEs: CVE-2018-18544 CVE-2019-7397 CVE-2019-11005 CVE-2019-11006
    CVE-2019-11010 CVE-2019-12921 CVE-2020-10938 CVE-2020-12672


author: wangxiao <wangxiao65@huawei.com> - 6.9.10.67-19
changelog:
  - Fix CVE-2020-25676 CVE-2020-27757 CVE-2020-27758 CVE-2020-27771
    CVE-2020-27772 CVE-2020-27774 CVE-2020-27775 CVE-2020-27751


author: lvfei <lvfei@kylinos.cn> -1.16.0-7.p05
changelog:
  - update version disable patch9004
  - fix-unconnect-due-to-no-carrier.patch
  - fix chandao bug 40186 40172 40164


author: lifeifei <lifeifei@kylinos.cn> -1.16.0-7.p09
changelog:
  - Type:Task
  - ID:327510
  - SUG:NA
  - DESC:add patch9010:revert-the-code-to-version-p07
         add patch9011:bugfix-NetworkManager-mangling-static-IPv6-routes.patch:
  	   TaskID:171955:fix mangling static IPv6 routes in nm_ip6_config_merge_setting()


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: zhanghua <zhanghua40@huawei.com> - 2.2.0-18
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DESC:fix CVE-2017-9110 CVE-2017-9111 CVE-2017-9112 CVE-2017-9113
    CVE-2017-9114 CVE-2017-9115 CVE-2017-9116 CVE-2017-12596


author: Tom Callaway <spot@fedoraproject.org> - 3.6.2-4
changelog:
  - fix conditionals so that Fedora builds against system openblas for lapack/blas
    and we only generate the R lapack/blas libs on RHEL 5-6-7 (where system lapack/openblas
    is not reliable). Thanks to Dirk Eddelbuettel for pointing out the error.


author: houhongxun <houhongxun@kylinos.cn> - 0.6.55-2.p01
changelog:
  - Type:update
  - ID:Task#171032
  - SUG:NA
  - DESC:sync kylin modification: fix user display problem in control center or when login
  	add patch: accountsservice-0.6.54-kylin-1000-users-issue.patch(liujilin)


author: openEuler Buildteam <buildteam@openeuler.org> - 0.16-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: change file from /etc/logrotate.d/aide/aide.logrotate to /etc/logrotate.d/aide


author: yixiangzhike <yixiangzhike007@163.com> - 0.16.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport upstream patches to strengthen malloc,calloc,realloc,strdup


author: Li Xiaoyong<lixiaoyong@kylinos.cn> 29.24.7-28.16.p20
changelog:
  - Add Patch17033: Fix displaying "Red Hat Enterprice..." Linux distribution when 
  	excuting custom disk partition, change the display to "Kylin Linux..."


author: Xiao Zai<xiaozai@kylinos.cn> 29.24.7-28.16.p24
changelog:
  - Add Patch17037: anaconda-29.24.7-kylin-fix-translation-in-zh_HK.patch
  - fix the translation function in welcome interface
  - fix the translation in zh_HK by modifying zh_HK.po,it is actually copying from zh_TW.po to zh_HK.po


author: Xiao Zai<xiaozai@kylinos.cn> 29.24.7-28.16.p25
changelog:
  - Add Patch17038: anaconda-29.24.7-kylin-modify-message-values.patch
  - unimportant modification for zh_HK.po


author: Xiao Zai<xiaozai@kylinos.cn> 29.24.7-28.16.p26
changelog:
  - add Patch17039:  anaconda-29.24.7-kylin-do-not-translate-prompt-keys.patch
  - fix Bug#58461
  - Don't translate prompt keys. Translated prompt keys are not supported by the simpleline library, so
  anaconda shouldn't translate them neither. Use constants when possible.


author: Shi Jingying <shijingying@kylinos.cn> 29.24.7-28.16.p27
changelog:
  - add patch: anaconda-29.24.7-kylin-synchronous-u-boot-to-ks-file.patch
  - synchronous u-boot to ks file, add log files


author: Xiao Zai<xiaozai@kylinos.cn> 29.24.7-28.16.p28
changelog:
  - add Patch17041: anaconda-29.24.7-kylin-fix-translation-for-password-require-tips.patch
  - fix Bug#64618, fix the translation for tips of password-require in user spoke interface


author: Yue Yuankun<yueyuankun@kylinos.cn> 29.24.7-28.16.p29
changelog:
  - add Patch17042: anaconda-29.24.7-kylin-add-megaraid-for-mips.patch
  - add "megaraid_sas.msix_disable=1" in grub for mips


author: Xiao Zai<xiaozai@kylinos.cn> 29.24.7-28.16.p30
changelog:
  - add Patch17043: anaconda-29.24.7-kylin-set-defaultfs-to-ext4-for-mips.patch
  - delete the codes which rename file from more_os_name.py to kylin.py from this spec file and move this logic into a patch file
  - set the default fs from xfs to ext4 for mips arch


author: Yue Yuankun<yueyuankun@kylinos.cn> 29.24.7-28.16.p31
changelog:
  - add Patch17044: anaconda-29.24.7-kylin-fixbug2926-restart-failed-service.patch
  - add the codes to restart service which the first start failed, for bug#2926
  - add Patch17045: anaconda-29.24.7-kylin-fixbug69254-for-quitbutton-without-rebooting.patch
  - start initial-setup.service, click the quit button without rebooting, for bug#69254


author: yueyuankun <yueyuankun@kylinos.cn> 29.24.7-28.16.p33
changelog:
  - Type:bugfix
  - ID:[TASK#334079]
  - SUG:NA
  - DESC:fix(bootloader.py): remove grub2-efi in x86_64 legacy BIOS firmware


author: huangwenhua <huangwenhua@kylinos.cn> - 9100h-39.p01
changelog:
  - Type: update
  - ID: [Task#165758]
  - SUG: NA
  - DESC: revise the expression of sensitive words
  	fix regenerate dict.args.in


author: tanyulong <tanyulong@kylinos.cn>-1.17.0-3.p09
changelog:
  - Type:bugfix
  - ID:[BUG#115244]
  - SUG:NA
  - DESC:fix document viewer crashes when clicking to present
  - Add Patches:atril-1.17.0-kylin-fix-bug-115244.patch


author: douyan <douyan@kylinos.cn> - 1.17.0-3.p10
changelog:
  - Type: update
  - ID:   [TASK#187126]
  - SUG:  NA
  - DESC: add atril-1.17.0-kylin-add-zh_HK-translation.patch


author: shixuantong<shixuantong@huawei.com> - 0.3.6-25
changelog:
  - Type:cves
  - ID:CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839
  - SUG:NA
  - DESC:fix CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839


author: wanghao <wanghao2@kylinos.cn> - 3.0-5.se.10
changelog:
  - Type: bugfix
  - ID:[Bug#113316]
  - SUG:NA
  - DESC: 将audit.log文件权限改为600，pidfild文件权限改为644
  -         add patch: audit-3.0-modify-logfile-and-pidfile-permissions.patch


author: sunjin <sunjin@kylinos.cn> - 3.0-5.se.11
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:
  -     解决ausyscall --dump看不到系统符号问题
  -     添加补丁audit-3.0-fix-syscall-error.patch


author: xuyujun <xuyujun@kylinos.cn> - 3.0-5.se.12
changelog:
  - Type:bugfix
  - ID: [Bug#146654]
  - SUG:NA
  - DESC:
  - 		mips服务器audit服务日志显示unknown
  - 		添加补丁 audit-3.0-fix-unkonw-machine-type-error.patch


author: openEuler Buildteam <buildteam@openeuler.org> - 1.12.0-1
changelog:
  - Type:enhancement
  - Id:NA
  - SUG:NA
  - DESC:Reduce the amount of memory needed to evaluate complex path expressions
    against large files,Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556),update gnulib to 91584ed6.


author: huayadong <huayadong@kylinos.cn> - 0.7-21.p01
changelog:
  - Type: CVE
  - ID  : [Task#482351]
  - SUG : NA
  - DESC: fix CVE-2024-52616, add Patch9001: 0001-Properly-randomize-query-id-of-DNS-packets.patch


author: Shi Jingying <shijingying@kylinos.cn> - 5.0-14.se.01.p02
changelog:
  - Type: update
  - ID: [Task#101668]
  - SUG: NA
  - DESC: recover the `history -c` operation of the non root user 
          add patch1002 bash-5.0-recover-non-root-user-to-clear-history.patch


author: wanfeng <wanfeng@kylinos.cn> - 5.0-14.se.01.p03
changelog:
  - Type: update
  - ID: [Task#172337]
  - SUG: NA
  - DESC: modify spec, config /etc/skel/.*, Duplicate files


author: Rolf Fokkens <rolf@rolffokkens.nl> - 1.1-0
changelog:
  - Changed upstream to git://git.kernel.org/pub/scm/linux/kernel/git/colyli/bcache-tools.git
  - Updated to 1.1


author: zhangzikang <zhangzikang@kylinos.cn> - 0.15.0-1.p02
changelog:
  - Type:update
  - ID:TASK#169384
  - SUG:NA
  - DESC: add loongarch support
          0001-kylin-bcc-add-loongarch-support.patch
          0002-kylin-bcc_fix_conv_regs_issue.patch
          0003-kylin-bcc_fix_uprobe_libc_so.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 0.15.0-1.p03
changelog:
  -Type:bugfix
  -ID:Bug#194974
  -SUG:NA
  -DESC:Fix identifier BPF_PSEUDO_FUNC undeclared error
        add BTF_KIND_DATASEC for libbpf.h btf_is_datase when make bcc


author: huangyu <huangyu106@huawei.com> - 32:9.11.21-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: huangyu <huangyu106@huawei.com> - 32:9.11.21-15
changelog:
  - Type:CVE
  - ID:CVE-2022-2906 CVE-2022-2881 CVE-2022-2795 CVE-2022-38178 CVE-2022-38177
  - SUG:NA
  - DESC:fix CVE-2022-2906 CVE-2022-2881 CVE-2022-2795 CVE-2022-38178 CVE-2022-38177


author: huangyu <huangyu106@huawei.com> - 32:9.11.21-14
changelog:
  - Type:CVE
  - ID:CVE-2022-2906 CVE-2022-38177 CVE-2022-38178 CVE-2022-2795 CVE-2022-2881
  - SUG:NA
  - DESC:FIX CVE-2022-2906CVE-2022-38177CVE-2022-38178CVE-2022-2795CVE-2022-2881


author: yuanxin <yuanxin21@huawei.com> - 9.11.21-2
changelog:
  - Type:CVE
  - ID:CVE-2020-8622.patch  CVE-2020-8623.patch  CVE-2020-8624.patch
  - SUG:NA
  - DESC:fix CVE-2020-8622.patch  CVE-2020-8623.patch  CVE-2020-8624.patch


author: hanzhijun <hanzhijun1@huawei.com> - 9.11.21-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix the difference at the macro definition using clock gettime instead of gettimeofda


author: lunankun <lunankun@huawei.com> - 9.11.21-2
changelog:
  - Type:CVE
  - ID:CVE-2020-8622CVE-2020-8623 CVE-2020-8624
  - SUG:NA
  - DESC:fix CVE-2020-8622 CVE-2020-8623 CVE-2020-8624


author: gaihuiying <gaihuiying1@huawei.com> - 9.11.21-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix output unexpected information when install bind-sdb or bind-sdb-chroot


author: zoulin <zoulin13@huawei.com> - 2.34-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:Fix a memory leak in the testcase fuzz_readelf
        Fix use-of-uninitialized-value in print_insn_mwtag
        Fix use-of-ninitialized-value in _bfd_xcoff_slurp_armap


author: zoulin <zoulin13@huawei.com> - 2.34-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:Fix a potential use-of-an-uninitialised-value in the print_insn_ns32k of fuzz_disassemble


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.34-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix static library file conflicts when install both binutils and binutils-devel


author: yangyan <yangyan@kylinos.cn> -2.34-13.p01
changelog:
  - Type:CVE
  - ID:TASK#172088
  - SUG:NA
  - DESC: Fix CVE-2022-47008 CVE-2022-47011 CVE-2022-47696 CVE-2021-46174 CVE-2022-48064


author: yueyuankun <yueyuankun@kylinos.cn> - 2.34-19.p01
changelog:
  - Type:bugfix
  - ID:task#108856
  - SUG:NA
  - DESC:rebuild libbfd.a libiberty.a libopcodes.a with -fPIC for inclusion into shared libraries


author: guochao <guochao@kylinos.cn> - 2.34-19.p02
changelog:
  - Type:CVE
  - ID:CVE-2022-48064 CVE-2022-47011 CVE-2022-47008 CVE-2021-46174 CVE-2022-47696
  - SUG:NA
  - DESC:Fix CVE-2022-48064 CVE-2022-47011 CVE-2022-47008 CVE-2021-46174 CVE-2022-47696


author: pengxu <pengxu@kylinos.cn> - 2.34-33.p03
changelog:
  - Type:cves
  - ID:CVE-2025-7545
  - SUG:NA
  - DESC: Fix CVE-2025-7545: heap-based buffer overflow in objcopy.


author: kouwenqi <kouwenqi@kylinos.cn> - 1.2.0-14.p02
changelog:
  - Type:bugfix
  - ID:[Task#447319]
  - SUG:NA
  - DESC: Backport openEuler-20.03-LTS-SP4  patches:
      -blkparse: Fix up the sector and length of split completions
      -blkparse: Fix a potential coredump issue


author: kouwenqi <kouwenqi@kylinos.cn> - 1.2.0-14.p03
changelog:
  - Type:bugfix
  - ID:[Task#455854]
  - SUG:NA
  - DESC: btt: eliminate redundant separators in btt -p display


author: kouwenqi <kouwenqi@kylinos.cn> - 1.2.0-14.p07
changelog:
  - Type:compile
  - ID:[Task#474425]
  - SUG:NA
  - DESC: fix conflict bewtween blktrace-help and iowatcher-help


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.18.1.el8_2]
changelog:
  - [security] selinux: allow reading labels before policy is loaded (Ondrej Mosnacek) [1861721 1839819]
  - [security] selinux: allow labeling before policy is loaded (Ondrej Mosnacek) [1861722 1777525]
  - [mm] mm/memory_hotplug.c: only respect mem= parameter during boot stage (Baoquan He) [1854207 1838809]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.19.1.el8_2]
changelog:
  - [net] tcp: add sanity tests in tcp_add_backlog() (Guillaume Nault) [1861378 1790843]
  - [net] tcp: implement coalescing on backlog queue (Guillaume Nault) [1861378 1790843]
  - [include] tcp: make tcp_space() aware of socket backlog (Guillaume Nault) [1861378 1790843]
  - [net] tcp: take care of compressed acks in tcp_add_reno_sack() (Guillaume Nault) [1861378 1790843]
  - [include] tcp: hint compiler about sack flows (Guillaume Nault) [1861378 1790843]
  - [net] tcp: drop dst in tcp_add_backlog() (Guillaume Nault) [1861378 1790843]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-22.rc3
changelog:
  - [5e9d848edb99]
  - [0c34479715f6]
  - [84d4b61f9694]
  - [570f098d34ad]
  - [d9415c3d024c]
  - [61396c262e91]
  - [0c887f55ba42]
  - [1ea3bd1923d4]
  - [2498458b0b5b]
  - [5cfec83a1b1c]
  - [bed3ae75f3be]
  - [7474a61d5ab3]
  - [cc1e9b271f98]
  - [093d0fc5d68b]
  - [7063ad54fd3d]
  - [46428a3cf05b]
  - [9c625eb07160]
  - [f333176bc82a]
  - [f0d26ed899e2]
  - [3d4b752e6eb3]
  - [98ef56590b35]
  - [ba08524d1395]
  - [8680ebdcb91b]
  - [88577cbb69ad]
  - [66fa8b4a6d77]
  - [51fae5342ef5]
  - [3d6a8408b74b]
  - [522f30d1b4bc]
  - [f8caa302debf]
  - [6a06e53d694c]
  - [d6c1607941de]
  - [e1a7b7b229ef]
  - [c6943947ba69]
  - [98db7efb289a]
  - [80d48123aa91]
  - [db22945ef03b]
  - [bd9c9081f5dd]
  - [87c44385d7ed]
  - [c43b124ddf8e]
  - [c4c6f692e338]
  - [eb0aac755009]
  - [6fc7ce1dabd7]
  - [87ba3e795e07]
  - [5f7943589b7f]
  - [04373c80b249]
  - [80a827ba5545]
  - [2b8400401b11]
  - [0f1c2e59ef32]
  - [c3691363c3e7]
  - [c1dd0483a08e]
  - [86bdf2ba6d5a]
  - [4820ac95a98e]
  - [84703c80c192]
  - [8d571acc3a18]
  - [e9c4efa1b22e]
  - [9be22c06095b]
  - [3ba575148a67]
  - [234bc2180718]
  - [c67b0710414d]
  - [d986786de2d5]
  - [91df701fa50d]
  - [e68674e8ea54]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-22.pre
changelog:
  - [dde9f84d0c6f]
  - [b543a1a1264d]
  - [f5dd4d95c412]
  - [caf2555a63fd]
  - [03e0968760bc]
  - [4338d5c3f278]
  - [5db3ff0ac834]
  - [923fe02e3f3d]
  - [791c6f7416fc]
  - [f35492f30fe2]
  - [02c2ef394060]
  - [ce0dcf7f2fa7]
  - [6f27d4373603]
  - [841f9929da68]
  - [4484f8311578]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-22.0
changelog:
  - [0734bc7736af]
  - [6727e8670c63]
  - [fa741e85cc71]
  - [70b545c400e1]
  - [98c8978239e6]
  - [46fd8bb9d53d]
  - [a2e3081cc070]
  - [1303ab478f0c]
  - [acae74578fc6]
  - [eaa0e159b1d9]
  - [66023acf78ff]
  - [b678dad91a42]
  - [a8abb079a24e]
  - [d43b33767627]
  - [1c88114d9ecf]
  - [f8597736dca4]
  - [704c017edc67]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-v2101.23.rc2
changelog:
  - [8be15142485f]
  - [5810c4eaed11]
  - [cd2f633d8fcb]
  - [5c15284600b6]
  - [a55487edf375]
  - [0d0779b429ef]
  - [bdbcf9da3315]
  - [4c19b3d8c572]
  - [4db07a03e9ab]
  - [6d7d99906e83]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-v2101.23.0
changelog:
  - [c5e900bb19d0]
  - [9a813c1e106b]
  - [18441b5c5bdb]
  - [c6c0d2c083f1]
  - [5a859cc22cfe]
  - [181281a45860]
  - [031da147ccc2]
  - [737ac272489a]
  - [35888626bdc0]
  - [5fde0a57a076]
  - [0aef697139ab]
  - [aeba010f8f0f]
  - [e83f06fea08a]
  - [31c5f73421d2]
  - [3ace3fe8530a]
  - [07de12e57414]
  - [c67ab2470fa9]
  - [dcadc5735e13]
  - [4e2dce6d17ea]
  - [e0c3145ce749]
  - [52f6c43c17ef]
  - [fdc124e5bad6]
  - [510a61778413]
  - [5ee1bd20b829]
  - [920fabe0d2d9]
  - [e46cc965010d]
  - [af80c9893173]
  - [0fe14cba5188]
  - [4c0d5af02334]
  - [721fa69a5933]
  - [446f7247bd5c]
  - [7fc82a5299a5]
  - [183aea9a1bca]
  - [2335c33efc32]
  - [a50858f99545]
  - [6e9575b846ab]
  - [64b4fe61e54c]
  - [6195638dc862]
  - [6cb63cead3d2]
  - [d7a7376a7aeb]
  - [64c851cb405e]
  - [9d1356264e1b]
  - [52f9787140bc]
  - [f571602e566d]
  - [2c2ed3ca9e7a]
  - [71006da859c1]
  - [80f6c5498a60]
  - [36367919b713]
  - [fe4c1ec362d8]
  - [ca20d12f5cfd]
  - [ba1a5a2a99a0]
  - [22c75092cc0b]
  - [6ae85f75fcc2]
  - [2f70509cf17a]
  - [d25e9c96311f]
  - [bcd1c2215fc9]
  - [f4f72f22efab]
  - [8cd7cc0269cc]
  - [ea675c810c14]
  - [f96168ac7172]
  - [905358e23152]
  - [404eced48435]
  - [9dd811064938]
  - [4bf21b6eded9]
  - [21e0e737c0a8]
  - [615c8f57147c]
  - [aaadaeb13256]
  - [92bf458031c9]
  - [f32e64cc482e]
  - [3b1578e22a3a]
  - [e2282b3b0dc8]
  - [c74aa33bdd2b]
  - [036948a0174d]
  - [afdcac0eb777]
  - [95b2917263fa]
  - [cbe262cd4bc0]
  - [38f72e2712a8]
  - [07a7d7eac23c]
  - [41db63cfa4fe]
  - [065b90c58c7e]
  - [5b78dfbde4c6]
  - [22f11dabae0a]
  - [73c0ddf9ac4d]
  - [f8bb8793ddd7]
  - [4de8f98572fc]
  - [3d543539b3d1]
  - [1736524f62ec]
  - [ae25e2b5a74e]
  - [bc2e6effe374]
  - [7ad7cd45c8b2]
  - [93e002cbd35f]
  - [323a056ea74e]
  - [c32b6758f29b]
  - [3c6216b444ec]
  - [51b8878278f3]
  - [eef84b53387c]
  - [2fbea29546c0]
  - [bb10cdaeb091]
  - [f0528e331fb0]
  - [dbd2faf82ea0]
  - [a1ef619e68a9]
  - [847314d0a45f]
  - [67a4db697e04]
  - [9453a849d260]
  - [895c45fdc22f]
  - [11d94a5cdae4]
  - [b26a7913a05a]
  - [d35bb1695539]
  - [63002dab8e39]
  - [ac5c3bffd419]
  - [08a065719890]
  - [b90652ec2296]
  - [9493d89f62cd]
  - [28d93a1bddcf]
  - [09df9faaa51d]
  - [63fc2969db4c]
  - [60b2f3cc3b04]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-v2101.23.1
changelog:
  - [16682b40483f]
  - [8b006aa00d50]
  - [77bcc68a42ef]
  - [429f6b75c2fb]
  - [da71b70ea16b]
  - [3efd99e2b18b]
  - [2bfd7dc22f40]
  - [392e3834ce51]
  - [d6c2a08a37c0]
  - [2b413ca3dd94]
  - [5f20f35e28ba]
  - [a81dc787d3e0]
  - [9765bb600d2f]
  - [30b92d17011e]
  - [688f92e3950f]
  - [a9d2c788b45b]
  - [8d6eaff70bf5]
  - [e33e027a75b7]
  - [03ec92482e2c]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.31.v2101
changelog:
  - mm: fix a race during THP splitting (Huang Ying) [bug:156904]
  - NETSWIFT: txgbe: update the driver to 1.3.2 (luoqing) [task:92912]
  - NETSWIFT: txgbe: fix compile in linux 3.10 (mengyuanlou) [task:92912]
  - NETSWIFT: txgbe: ADD: add flash unlock when upgrade image (mengyuanlou) [task:92912]
  - NETSWIFT: txgbe: FIX: fix some kr flow (mengyuanlou) [task:92912]
  - NETSWIFT: txgbe: fix bug when 1820 is in 1G sfp speed mode, link partner (linglingzhang) [task:92912]
  - NETSWIFT: txgbe: add support for oem ssid and svid (linglingzhang) [task:92912]
  - NETSWIFT: txgbe: add pcie recover switch (zhengzhenpeng) [task:92912]
  - NETSWIFT: txgbe: fix pcie recover bugs (zhengzhenpeng) [task:92912]
  - NETSWIFT: ngbe: update the driver to 1.2.2 (luoqing) [task:92912]
  - NETSWIFT :ngbe: ADD : add yt 101 mode support (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: FIX : fix compile in ubuntu 21.10 (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: busfix linkspeed setup failed when link is down (zhengzhenpeng) [task:92912]
  - NETSWIFT :ngbe: ADD-add-link-retry-switch-to-configure (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: add support for oem ssid and svid (linglingzhang) [task:92912]
  - NETSWIFT :ngbe: ADD : add yt8531s id support (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: read flash from flash only in phy init (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: ADD : add retry use an err bit (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: CH : use sw configure efuse (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: add pcie recover switch (zhengzhenpeng) [task:92912]
  - NETSWIFT :ngbe: fix pcie recover bugs (zhengzhenpeng) [task:92912]
  - NETSWIFT :ngbe: fix phy set to force 100M autoneg off with partner (zhengzhenpeng) [task:92912]
  - wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (Szymon Heidrich) [bug:157174] {CVE-2023-23559}
  - security/kysec: fix possible memory leak in kysec_hash_sha256() (yangzhao) [task:126288]
  - security/kysec: fix possible NULL pointer in kysec_get_real_task() (yangzhao) [task:126285]
  - security/kysec: fix unnecessary inspection in kysec_hash_sync_label_unknown() (yangzhao) [task:126286]
  - security/kysec: fix possible NULL pointer in auth_func() (yangzhao) [task:126284]
  - security/kysec: fix possible NULL pointer in SM3_final() (yangzhao) [task:126283]
  - security/kysec: fix bug with can't get the command real uid in overlay env (yangzhao) [bug:149033]
  - security/kysec: optimize kysec thread waiting mode by wait_event (yangzhao) [task:110527]
  - security/kysec: fix undefined-behaviour in SM3_CF (zhubing) [bug:124049]
  - security/kysec: use msleep_interruptible() instead of msleep() (yangzhao) [task:131471]
  - kysec: fix potential out-of-bounds access issues of name (Jackie Liu) [task:94933]
  - kysec: Remove unnecessary zeroing (Jackie Liu) [task:94933]
  - kysec: exit the thread when kysec is closed (Jackie Liu) [task:94933]
  - security/kysec: fix panic when 3adm opened and kysec disabled (yangzhao) [bug:124729]
  - security/kysec: remove unused variables in kysec_task_kill() (yangzhao) [task:94083]
  - security/kysec: fix bug with .viminfo is set to readonly label (yangzhao) [bug:120931]
  - security/kysec: allow rsync to inherit trusted lable (huanfuxi) [bug:113477]
  - security/kysec: optimize kysec module code (yangzhao) [task:83026]
  - security/kysec: modify inode security mutex to spinlock (yangzhao) [task:83026]
  - security/kysec: implementation of exectl func in bprm_check hook (yangzhao) [task:83026]
  - security/kysec: allow killed by itself in kysec_task_kill() (yangzhao)
  - security/kysec: remove script checking in kysec_task_kill() (yangzhao) [bug:119471]
  - security/kysec: fix bug with can't notify user when the protected file renamed (yangzhao) [bug:69309]
  - security/kysec: solve the problem of multiple bullet frame authentication for the same program networking (yangzhao) [bug:94015]
  - security/kysec: fix bug with ppro status got error when kysec disabled (yangzhao) [bug:99704]
  - security/kysec: Directory recursive traversal is adjusted to a non-recursive traversal (chengang) [bug:151725]
  - MUCSE: PCI: Add ACS quirk for Mucse N10 series (Yibo Dong) [task:121494]
  - md-raid10: fix KASAN warning (Mikulas Patocka) [task:128226]
  - md/raid10: Remove unnecessary rcu_dereference in raid10_handle_discard (Xiao Ni) [task:128226]
  - md/raid10: improve discard request for far layout (Xiao Ni) [task:128226]
  - md/raid10: improve raid10 discard request (Xiao Ni) [task:128226]
  - md/raid10: pull the code that wait for blocked dev into one function (Xiao Ni) [task:128226]
  - md/raid10: extend r10bio devs to raid disks (Xiao Ni) [task:128226]
  - md: add md_submit_discard_bio() for submitting discard bio (Xiao Ni) [task:128226]
  - net: ieee802154: handle iftypes as u32 (Alexander Aring) [task:131823]
  - netfilter: remove BUG_ON() after skb_header_pointer() (Pablo Neira Ayuso) [bug:153351]
  - skbuff: micro-optimize {,__}skb_header_pointer() (Alexander Lobakin) [bug:153351]
  - skbuff: make __skb_header_pointer()'s data argument const (Alexander Lobakin) [bug:153351]
  - net: bonding: Add support for IPV6 ns/na to balance-alb/balance-tlb mode (Sun Shouxin) [task:131515]
  - net: sched: disallow noqueue for qdisc classes (Frederick Lawler) {CVE-2022-47929}
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (Herbert Xu) {CVE-2023-0394}
  - net: sched: cbq: dont intepret cls results when asked to drop (Jamal Hadi Salim) {CVE-2023-23454}
  - net: sched: atm: dont intepret cls results when asked to drop (Jamal Hadi Salim) {CVE-2023-23455}
  - fs: fix lazytime expiration handling in __writeback_single_inode() (Eric Biggers)
  - writeback: Drop I_DIRTY_TIME_EXPIRE (Jan Kara)
  - NETSWIFT: txgbe: Fix skb list corruption on Power systems (mengyuanlou) [task:50860]
  - xfs: move XFS_AG_BTREE_CMP_FORMAT_STR mappings to libxfs (Darrick J. Wong) [task:82242]
  - xfs: fix symbolic enum printing in ftrace output (Darrick J. Wong) [task:82242]
  - xfs: bulkstat should copy lastip whenever userspace supplies one (Darrick J. Wong) [task:82242]
  - xfs: fix super block buf log item UAF during force shutdown (Guo Xuenan) [task:124686]
  - swiotlb: skip swiotlb_bounce when orig_addr is zero (Liu Shixin) [task:99634, task:155312]
  - Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (Linus Torvalds) [bug:112032] {CVE-2022-0854}
  - swiotlb: fix info leak with DMA_FROM_DEVICE (Halil Pasic) [bug:112032] {CVE-2022-0854}
  - Bluetooth: check for zapped sk before connecting (Archie Pusaka) [task:129604]
  - security/kysec: fix bug with NULL pointer in kysec_free_sb (yangzhao) [task:131145]
  - xfs: don't set bmapi total block req where minleft is (Brian Foster) [bug:128797]
  - xfs: use a struct iomap in xfs_writepage_ctx (Christoph Hellwig) [task:57649]
  - xfs: remove the truncate short cut in xfs_map_blocks (Christoph Hellwig) [task:57649]
  - xfs: make xfs_bmbt_to_iomap more useful (Christoph Hellwig) [task:57649]
  - xfs: simplify xfs_chain_bio (Christoph Hellwig) [task:57649]
  - xfs: also truncate holes covered by COW blocks (Christoph Hellwig) [task:57649]
  - xfs: move xfs_iomap_write_allocate to xfs_aops.c (Christoph Hellwig) [task:57649]
  - xfs: move stat accounting to xfs_bmapi_convert_delalloc (Christoph Hellwig) [task:57649]
  - xfs: remove the io_type field from the writeback context and ioend (Christoph Hellwig) [task:57649]
  - xfs: remove superfluous writeback mapping eof trimming (Brian Foster) [task:57649]
  - xfs: remove XFS_IO_INVALID (Christoph Hellwig) [task:57649]
  - xfs: move transaction handling to xfs_bmapi_convert_delalloc (Christoph Hellwig) [task:57649]
  - xfs: split XFS_BMAPI_DELALLOC handling from xfs_bmapi_write (Christoph Hellwig) [task:57649]
  - xfs: factor out two helpers from xfs_bmapi_write (Christoph Hellwig) [task:57649]
  - xfs: simplify the xfs_bmap_btree_to_extents calling conventions (Christoph Hellwig) [task:57649]
  - nl80211: validate key indexes for cfg80211_registered_device (Anant Thazhemadam) [task:128929]
  - drm/vmwgfx: Validate the box size for the snooped cursor (Zack Rusin) [bug:155757] {CVE-2022-36280}
  - binder: validate alloc->mm in ->mmap() handler (Carlos Llamas) [bug:155767]
  - binder: fix alloc->vma_vm_mm null-ptr dereference (Carlos Llamas) [bug:155767]
  - android: binder: fix lockdep check on clearing vma (Liam Howlett) [bug:155767]
  - binder_alloc: add missing mmap_lock calls when using the VMA (Liam Howlett) [bug:155767]
  - android: binder: stop saving a pointer to the VMA (Liam R. Howlett) [bug:155767] {CVE-2023-20928}
  - mm: add vma_lookup(), update find_vma_intersection() comments (Liam Howlett) [bug:155767]
  - i915_vma: Rename vma_lookup to i915_vma_lookup (Liam Howlett) [bug:155767]
  - drm/nouveau/mmu: add more general vmm free/node handling functions (Ben Skeggs) [bug:155765] {CVE-2023-0030}
  - mm, oom: do not trigger out_of_memory from the #PF (Michal Hocko) [bug:155771] {CVE-2023-0047}
  - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Vasily Averin) [bug:155771]
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang) [bug:153851] {CVE-2022-3424}
  - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock (Jakub Sitnicki) [bug:153856] {CVE-2022-4129}
  - l2tp: Serialize access to sk_user_data with sk_callback_lock (Jakub Sitnicki) [bug:153856] {CVE-2022-4129}
  - net: fix a concurrency bug in l2tp_tunnel_register() (Gong, Sishuai) [bug:153856]
  - nvmet: use IOCB_NOWAIT only if the filesystem supports it (Maurizio Lombardi) [task:82241, task:127939]
  - nvmet: fix building bvec from sg list (Ming Lei) [task:82241, task:127939]
  - nvmet: use IOCB_NOWAIT for file-ns buffered I/O (Chaitanya Kulkarni) [task:82241, task:127939]
  - xen/netback: don't call kfree_skb() with interrupts disabled (Juergen Gross) {CVE-2022-42328, CVE-2022-42329}
  - hv_netvsc: Add check for kvmalloc_array (Jiasheng Jiang) {CVE-2022-3107}
  - drm/amdkfd: Check for null pointer after calling kmemdup (Jiasheng Jiang) {CVE-2022-3108}
  - power: supply: wm8350-power: Add missing free in free_charger_irq (Jiasheng Jiang) {CVE-2022-3111}
  - drm: mali-dp: potential dereference of null pointer (Jiasheng Jiang) {CVE-2022-3115}
  - drm/mali: Convert to using __drm_atomic_helper_crtc_reset() for reset. (Maarten Lankhorst)
  - RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver (Xi Wang) [task:127086]
  - RDMA/hns: Bugfix for slab-out-of-bounds when unloading hip08 driver (Xi Wang) [task:127086]
  - net/packet: rx_owner_map depends on pg_vec (Willem de Bruijn) [task:126791]
  - xfs: properly serialise fallocate against AIO+DIO (Dave Chinner) [task:82242]
  - iomap: Fix negative assignment to unsigned sis->pages in iomap_swapfile_activate (Ritesh Harjani) [task:82242]
  - mm/swap: consider max pages in iomap_swapfile_add_extent (Xu Yu) [task:82242]
  - xen/netback: fix build warning (Juergen Gross) [bug:152391]
  - xen/netback: Ensure protocol headers don't fall in the non-linear area (Ross Lagerwall) [bug:152391] {CVE-2022-3643}
  - config: remove pks and tos configuartion files (huanfuxi) [task:126572]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.32.v2101
changelog:
  - Revert "txgbe: bulk free SKBs during TX completion cleanup cycle" (Zhengyuan Liu)
  - Revert "x86/bugs: Flush IBP in ib_prctl_set()" (Zhengyuan Liu)
  - Revert "net: sched: fix race condition in qdisc_graft()" (Zhengyuan Liu)
  - md/raid10: initialize r10_bio->read_slot before use. (Kevin Vigor) [task:136746]
  - net: sched: fix race condition in qdisc_graft() (Eric Dumazet) [bug:157192] {CVE-2023-0590}
  - x86/bugs: Flush IBP in ib_prctl_set() (Rodrigo Branco) {CVE-2023-0045}
  - txgbe: bulk free SKBs during TX completion cleanup cycle (weirongguang) [task:50860]
  - compile-and-chkabi.sh: fix the calculation of ncpus (Shida Zhang) [task:129759]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.33.v2101
changelog:
  - security/selinux: fix bounded_transition failed problem (mengdehui) [bug:161836]
  - inotify: show inotify mask flags in proc fdinfo (Amir Goldstein) [bug:157782]
  - block: adjust the position of the code section (zhanggenjian) [task:122387]
  - Revert "Revert "txgbe: bulk free SKBs during TX completion cleanup cycle"" (Jiangshan Yi)
  - Revert "Revert "x86/bugs: Flush IBP in ib_prctl_set()"" (Jiangshan Yi)
  - Revert "Revert "net: sched: fix race condition in qdisc_graft()"" (Jiangshan Yi)
  - crypto: ccp - Change a message to reflect status instead of failure (Hook, Gary) [task:136929]
  - x86/cpufreq: add CONFIG_CPU_FREQ_GOV_SCHEDUTIL (tianyu) [bug:161979]
  - sched/rt: pick_next_rt_entity(): check list_entry (Pietro Borrello) [bug:161115] {CVE-2023-1077}
  - sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity() (Dietmar Eggemann) [bug:161115]
  - net/ulp: prevent ULP without clone op from entering the LISTEN status (Paolo Abeni) [bug:161093] {CVE-2023-0461}
  - HID: asus: use spinlock to safely schedule workers (Pietro Borrello) [task:138519, bug:161140] {CVE-2023-1079}
  - HID: asus: use spinlock to protect concurrent accesses (Pietro Borrello) [task:138519, bug:161140]
  - HID: asus: Remove check for same LED brightness on set (Luke D. Jones) [task:138519, bug:161140]
  - net: mpls: fix stale pointer if allocation fails during device rename (Jakub Kicinski) [bug:161097] {CVE-2023-26545}
  - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (Duoming Zhou) [bug:161144] {CVE-2023-1118}
  - tap: tap_open(): correctly initialize socket uid (Pietro Borrello) [bug:161111] {CVE-2023-1076}
  - tun: tun_chr_open(): correctly initialize socket uid (Pietro Borrello) [bug:161111] {CVE-2023-1076}
  - net: add sock_init_data_uid() (Pietro Borrello) [bug:161111]
  - sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner) [bug:161106] {CVE-2023-1074}
  - HID: check empty report_list in hid_validate_values() (Pietro Borrello) [bug:161102] {CVE-2023-1073}
  - nvme-fcloop: refactor to enable target to host LS (James Smart) [task:62595, task:133366]
  - nvme-fc and nvmet-fc: revise LLDD api for LS reception and LS request (James Smart) [task:62595, task:133366]
  - nvmet-fc: add transport discovery change event callback support (James Smart) [task:62595, task:133366]
  - nvmet: add transport discovery change op (James Smart) [task:62595, task:133366]
  - nvmet: protect discovery change log event list iteration (Sagi Grimberg) [task:62595, task:133366]
  - nvmet: enable Discovery Controller AENs (Jay Sternberg) [task:62595, task:133366]
  - nvmet: allow host connect even if no allowed subsystems are exported (Sagi Grimberg) [task:62595, task:133366]
  - nvmet: add defines for discovery change async events (Jay Sternberg) [task:62595, task:133366]
  - nvmet: change aen mask functions to use bit numbers (Jay Sternberg) [task:62595, task:133366]
  - nvmet: provide aen bit functions for multiple controller types (Jay Sternberg) [task:62595, task:133366]
  - nvmet_fc: support target port removal with nvmet layer (James Smart) [task:62595, task:133366]
  - security: solve slab-out-of-bounds problem when registering lsm in modules (yangzhao) [task:136417]
  - OPENEULER: blk-throtl: fix race in io dispatching (Yu Kuai) [task:133418]
  - NETSWIFT: txgbe: set release version 1.3.3 (Juxia He) [task:130764]
  - NETSWIFT: txgbe: UP update compile in linux 5.18.1 (mengyuanlou) [task:130764]
  - NETSWIFT: txgbe: Fix: fix compile error in loongson(mips64) (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: Fix: fix bug that vf promisc not right (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: add lanrst to tx timeout / clean tx irq flow (zhenpengzheng) [task:130764]
  - NETSWIFT: txgbe: MODIFY: vf do not make its own receice-hash rules (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: Fix: fix the bug that ip link set vf status not right (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: FIX: fix the bug that vf receice hash rule not work (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: Remove: remove VF packets count in PF (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: ADD: add the interface to show and set the vf link state (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: 1.Fix ethtool intr_test trigger interrupt failed 2.Fix ethtool diag_test run loopback test failed after disabling sriov (wenduanqiang) [task:130764]
  - NETSWIFT: txgbe: add print aer status to disable pcie master flow (zhenpengzheng) [task:130764]
  - NETSWIFT: txgbe: remove INT_ERR from pcie recover flow (zhenpengzheng) [task:130764]
  - NETSWIFT: txgbe: FIX: ethtool -s 1000M autoneg in 1G sfp and del repeated multicast (linyuexie) [task:130764]
  - NETSWIFT: txgbe: FIX: ethtool -s speed 1000 autoneg on/off (linyuexie) [task:130764]
  - NETSWIFT: txgbe: fix aer status not print out when TXGBE_RECOVER_CHECK set (zhenpengzheng) [task:130764]
  - NETSWIFT: txgbe: FIX: fix echo 1 num_sriovs cause pending (Mengyuan Lou) [task:130764]
  - NETSWIFT: txgbe: Fix: do not clear vxlan port reg when set rx_csum off (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: FIX: make kylin not to close flow dir (Mengyuan Lou) [task:130764]
  - NETSWIFT: txgbe: ADD: add tx_ring check in txgbe_xmit_frame() (Mengyuan Lou) [task:130764]
  - NETSWIFT: txgbe: ADD:add ethtool -S get tx multicast braoadcast count (linyuexie) [task:130764]
  - NETSWIFT: txgbe: ADD: ethtool set autoneg on/off in 1000M speed (linyuexie) [task:130764]
  - NETSWIFT: txgbe: add pcie aer status print and regroup TXGBE_PCIE_RECOVER macro (zhenpengzheng) [task:130764]
  - NETSWIFT: txgbe: FIX: fix the bug that The number of RSS can exceed the number of cpus (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: ADD: ethtool show and set lldp (linyuexie) [task:130764]
  - NETSWIFT: txgbe: add TXGBE_RECOVER_CHECK and TXGBE_DIS_COMP_TIMEOUT (zhenpengzheng) [task:130764]
  - NETSWIFT: txgbe: sync maco from configure to kcompat.h (mengyuanlou) [task:130764]
  - NETSWIFT: txgbe: FIX: get lldp status issue (linyuexie) [task:130764]
  - NETSWIFT: txgbe: ADD: ethtool --show-priv-flags show lldp status (linyuexie) [task:130764]
  - NETSWIFT: txgbe: sync maco from configure to kcompat.h (Mengyuan Lou) [task:130764]
  - NETSWIFT: txgbe: FIX warning:Delete two unused variables (root) [task:130764]
  - NETSWIFT: txgbe: Fix: fix fiber to copper sfp module always link up bug that actually been down (wenduanqiang) [task:130764]
  - NETSWIFT: txgbe: FIX: ethtool -f xxx only support upgrade once (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: FIX：VT mode must be set before sriov enable (mengyuanlou) [task:130764]
  - NETSWIFT: txgbe: FIX: fix open/close notify sleep to long and read wrong buffer (mengyuanlou) [task:130764]
  - NETSWIFT: txgbe: add inspur oem ssid 0x0085/0x0075/0x0084 support for led control (wenduanqiang) [task:130764]
  - NETSWIFT: txgbe: FIX: fix ethtool link mode isn't correct in fiber mode (wenduanqiang) [task:130764]
  - NETSWIFT: txgbe: FIX: fix compile when DISABLE_PACKET_SPLIT open (mengyuanlou) [task:130764]
  - NETSWIFT: txgbe: RM: remove DEBUGFUNC (mengyuanlou) [task:130764]
  - NETSWIFT: txgbe: RM: remove SIMULATION_DEBUG (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: update release note for ngbe-1.2.3 (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: UP update compile in linux 5.18.1 (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: add NGBE_RECOVER_CHECK and NGBE_DIS_COMP_TIMEOUT (zhenpengzheng) [task:130764]
  - NETSWIFT: ngbe: FIX fix ethtool f upgrade image not to check chip ve (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: Fix: compile err about ethtool marco in some OS (wenduanqiang) [task:130764]
  - NETSWIFT: ngbe: FIX: ethtool -f xxx only support upgrade once (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: Fix: ubuntu 16.10 compile error, fiber linkdown advertise mode err (wenduanqiang) [task:130764]
  - NETSWIFT: ngbe: FIX: fix ethtool link mode isn't correct in fiber mode (wenduanqiang) [task:130764]
  - NETSWIFT: ngbe: FIX: probe print_info all ports display "eth0" (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: add pcie aer configuration space print info before pcie recovery (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: FIX: unload/load no wait , lan0 internal phy may hw reset failed (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: modify some code to obey Linux C-coding style (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: add spinlock protection on yt phy ext registers accessing (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: FIX: fix ngbe_gphy_wait_mdio_on return (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: FIX: fix add yt phy sgmii2rgmii mode (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: reset ethtool_get_setting back to previous version (wenduanqiang) [task:130764]
  - NETSWIFT: ngbe: ADD: add yt phy support sgmii2rgmii mode (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: turn off fiber auto sensing and set 1000BX manually to avoid link to 100M occationally in yt8521/8531 fiber mode (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: add support for switching speed mode between autoneg and force 1G in marvell88e1512/yt8521/yt8531 phy sfi mode by using ethtool (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: FIX: fix ethtool link mode isn't correct when using fiber mode (wenduanqiang) [task:130764]
  - NETSWIFT: ngbe: FIX: fix marverll copper change speed has not ints again (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: add support on marvell/yt8521 1000base-x mode autoneg (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: if marvell mix mode, driver will read phy mode from flash instead of register to workaround pxe driver override phy mode problem (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: RM: remove some unuse log (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: RM: remove zte phy code (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: FIX: fix marverll copper change speed has not ints (mengyuanlou) [task:130764]
  - net: xdp: allow generic and driver XDP on one interface (Jakub Kicinski) [bug:156630]
  - xdp: Provide extack messages when prog attachment failed (Maciej Fijalkowski) [bug:156630]
  - blk-mq: remove WARN_ON(!q->elevator) from blk_mq_sched_free_requests (Ming Lei) [task:122387]
  - xfs: remove the XFS_IOC_{ALLOC,FREE}SP* definitions (Darrick J. Wong) [task:128735]
  - xfs: kill the XFS_IOC_{ALLOC,FREE}SP* ioctls (Darrick J. Wong) [task:128735]
  - fs: add generic UNRESVSP and ZERO_RANGE ioctl handlers (Christoph Hellwig) [task:128735]
  - xfs: don't implement XFS_IOC_RESVSP / XFS_IOC_RESVSP64 (Christoph Hellwig) [task:128735]
  - block: free sched's request pool in blk_cleanup_queue (Ming Lei) [task:122387] {CVE-2019-25044}
  - block: move blk_exit_queue into __blk_release_queue (Ming Lei) [task:122387] {CVE-2019-25044}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.34.v2101
changelog:
  - rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer() (Paul E. McKenney)
  - PCI: pciehp: Fix the slot in BLINKINGON_STATE when Presence Detect Changed event occurred (weirongguang) [task:127145]
  - net: sch_generic: fix the missing new qdisc assignment bug (Yunsheng Lin) [task:145134]
  - x86/cpu: Load microcode during restore_processor_state() (Borislav Petkov) [bug:166218]
  - x86/speculation: Restore speculation related MSRs during S3 resume (Pawan Gupta) [bug:166218] {CVE-2023-1637}
  - RDMA/core: Don't infoleak GRH fields (Leon Romanovsky) [bug:166212] {CVE-2021-3923}
  - kvm: initialize all of the kvm_debugregs structure before sending it to userspace (Greg Kroah-Hartman) [bug:166205] {CVE-2023-1513}
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Baisong Zhong) [bug:166188] {CVE-2023-28328}
  - tipc: set con sock in tipc_conn_alloc (Xin Long) [bug:166175] {CVE-2023-1382}
  - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (Zheng Wang) [bug:166225] {CVE-2023-1670}
  - ovl: fix use after free in struct ovl_aio_req (yangerkun) {CVE-2023-1252}
  - seq_buf: Fix overflow in seq_buf_putmem_hex() (Yun Zhou) [bug:166201] {CVE-2023-28772}
  - net/sched: tcindex: update imperfect hash filters respecting rcu (Pedro Tammela) [bug:164964] {CVE-2023-1281}
  - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() (Hangyu Hua) [task:142966] {CVE-2023-28466}
  - PCI: Equalize hotplug memory and io for occupied and empty slots (Jon Derrick) [task:134263]
  - tipc: fix NULL deref in tipc_link_xmit() (Hoang Le) [bug:166183] {CVE-2023-1390}
  - media: dvb-core: Fix UAF due to refcount races at releasing (Takashi Iwai) [bug:164041] {CVE-2022-41218}
  - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry (Zheng Wang) [bug:164044] {CVE-2022-3707}
  - ntfs: fix out-of-bounds read in ntfs_attr_find() (Hawkins Jiawei) [bug:164058] {CVE-2023-26607}
  - ntfs: fix use-after-free in ntfs_ucsncmp() (ChenXiaoSong) [bug:164058]
  - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function (Miaoqian Lin) [bug:164062] {CVE-2023-23000}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.35.v2101
changelog:
  - ext4: fix use-after-free in ext4_xattr_set_entry (Baokun Li) [bug:172373] {CVE-2023-2513}
  - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (Baokun Li) [bug:172373]
  - REDHAT: mm/memcg: Free percpu stats memory of dying memcg's (Waiman Long) [bug:158690, task:139197]
  - xfs: verify buffer contents when we skip log replay (Darrick J. Wong) [bug:170280] {CVE-2023-2124}
  - Revert "blk-mq-sched: Fix blk_mq_sched_free_tags() build warning" (zhanggenjian) [task:151750]
  - security/selinux: use LSM stack API in setsecurity (penghuaihe) [task:151838]
  - netfilter: nf_tables: deactivate anonymous set from preparation phase (Pablo Neira Ayuso) [task:152325] {CVE-2023-32233}
  - osinfo: Converting memory size to GB from KB (Jackie Liu)
  - netrom: Fix use-after-free caused by accept on already connected socket (Hyunwoo Kim) [bug:172362] {CVE-2023-32269}
  - net: qcom/emac: Fix use after free bug in emac_remove due to race condition (Zheng Wang) [bug:172377, bug:172369] {CVE-2023-33203, CVE-2023-2483}
  - sctp: leave the err path free in sctp_stream_init to sctp_stream_free (Xin Long) [bug:170287] {CVE-2023-2177}
  - sctp: fix err handling of stream initialization (Marcelo Ricardo Leitner) [bug:170287]
  - sctp: fix memleak on err handling of stream initialization (Marcelo Ricardo Leitner) [bug:170287]
  - net: sctp: Fix negotiation of the number of data streams. (David Laight) [bug:170287]
  - sctp: convert to genradix (Kent Overstreet) [bug:170287]
  - generic radix trees (Kent Overstreet) [bug:170287]
  - OPENEULER: Revert "ipvlan: Modify the value of ipvlan modes" (Lu Wei) [task:151834]
  - scsi: dpt_i2o: Remove obsolete driver (Arnd Bergmann) [bug:170296] {CVE-2023-2007}
  - modify the changelog in CHANGELOG.md (Jiangshan Yi)
  - bpf: fix build without barrier_nospec (Jackie Liu) [task:151751, task:151749, task:151304]
  - blk-mq-sched: Fix blk_mq_sched_free_tags() build warning (zhanggenjian) [task:122387]
  - rpmbuild: delete meaningless changelog in kernel.spec (Jiangshan Yi) [task:150163]
  - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Gwangun Jung) [bug:170041] {CVE-2023-2248}
  - tun: avoid double free in tun_free_netdev (George Kennedy) [task:147853] {CVE-2022-4744}
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang) [bug:170253] {CVE-2023-1989}
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang) [bug:170231] {CVE-2023-1380}
  - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (Zheng Wang) [bug:170241] {CVE-2023-1855}
  - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition (Zheng Wang) [bug:170245] {CVE-2023-1859}
  - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (Zheng Wang) [bug:170258] {CVE-2023-1990}
  - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (Zheng Wang) [bug:170264] {CVE-2023-30772}
  - bluetooth: Perform careful capability checks in hci_sock_ioctl() (Ruihan Li) [bug:170267] {CVE-2023-2002}
  - uaccess: Add speculation barrier to copy_from_user() (Dave Hansen) [bug:170275] {CVE-2023-0459}
  - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (Wei Chen) [bug:170291] {CVE-2023-2194}
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer) [bug:170300] {CVE-2023-2269}
  - prlimit: do_prlimit needs to have a speculation check (Greg Kroah-Hartman) [bug:170304] {CVE-2023-0458}
  - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (Mike Christie) [bug:170271] {CVE-2023-2162}
  - Makefile: Use .sourceversion to generate SOURCE_VERSION (Jackie Liu)
  - sched/fair: Sanitize vruntime of entity being migrated (Vincent Guittot) [task:147537]
  - sched/fair: sanitize vruntime of entity being placed (Zhang Qiao) [task:147537]
  - kobject: Fix slab-out-of-bounds in fill_kobj_path() (Wang Hai) [task:147538]
  - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Clement Lecigne) [task:147853] {CVE-2023-0266}
  - arm64: Do not forget syscall when starting a new thread. (Francis Laniel) [task:148824]
  - btrfs: fix race between quota disable and quota assign ioctls (Filipe Manana) [task:147853] {CVE-2023-1611}
  - btrfs: qgroup: remove one-time use variables for quota_root checks (Marcos Paulo de Souza) [task:147853]
  - Fix double fget() in vhost_net_set_backend() (Al Viro) [task:147853] {CVE-2023-1838}
  - binder: Address corner cases in deferred copy and fixup (Alessandro Astone) [bug:161123] {CVE-2023-20938}
  - binder: fix pointer cast warning (Arnd Bergmann) [bug:161123] {CVE-2023-20938}
  - binder: defer copies of pre-patched txn data (Todd Kjos) [bug:161123] {CVE-2023-20938}
  - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 (Alessandro Astone) [bug:161123] {CVE-2023-20938}
  - binder: read pre-translated fds from sender buffer (Todd Kjos) [bug:161123] {CVE-2023-20938}
  - binder: avoid potential data leakage when copying txn (Todd Kjos) [bug:161123] {CVE-2023-20938}
  - ANDROID: binder: sync binder driver with android-q-release (Jackie Liu)
  - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Salvatore Bonaccorso) [bug:161148] {CVE-2022-27672}
  - x86/speculation: Identify processors vulnerable to SMT RSB predictions (Tom Lendacky) [bug:161148] {CVE-2022-27672}
  - x86/bugs: Report AMD retbleed vulnerability (Alexandre Chartre) [bug:161148] {CVE-2022-27672}
  - usb: musb: Fix musb_gadget.c rxstate overflow bug (Robin Guo)
  - staging: vt6655: fix potential memory leak (Nam Cao)
  - scsi: ses: Handle enclosure with just a primary component gracefully (Jiri Kosina) [task:147721]
  - scsi: ses: Don't attach if enclosure has no components (James Bottomley) [task:147721]
  - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (Tomas Henzl) [task:147721]
  - scsi: ses: Fix possible desc_ptr out-of-bounds accesses (Tomas Henzl) [task:147721]
  - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (Tomas Henzl) [task:147721]
  - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (Tomas Henzl) [task:147721]
  - Revert "scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process" (Jackie Liu) [task:147721]
  - Revert "scsi: ses: Fix crash caused by kfree an invalid pointer" (Jackie Liu) [task:147721]
  - fs: move S_ISGID stripping into the vfs_*() helpers (Yang Xu) [task:141950]
  - fs: Add missing umask strip in vfs_tmpfile (Yang Xu) [task:141950]
  - fs: add mode_strip_sgid() helper (Yang Xu) [task:141950]
  - net/sched: Retire tcindex classifier (Jamal Hadi Salim) [bug:167507] {CVE-2023-1829}
  - xfs: don't expose internal symlink metadata buffers to the vfs (Darrick J. Wong) [bug:160702]
  - xfs: report corruption only as a regular error (Darrick J. Wong) [bug:160702]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.36.v2101
changelog:
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Thadeu Lima de Souza Cascardo) [bug:182682] {CVE-2023-35001}
  - ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) {CVE-2023-0386}
  - neighbour: delete neigh_lookup_nodev as not used (Leon Romanovsky) [bug:182698]
  - Remove DECnet support from kernel (Leon Romanovsky) [bug:182698] {CVE-2023-3338}
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb (t.feng) [bug:181310] {CVE-2023-3090}
  - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition (Zheng Wang) [bug:179181] {CVE-2023-33288}
  - gfs2: Don't deref jdesc in evict (Bob Peterson) [bug:179231] {CVE-2023-3212}
  - swap: fix do_swap_page() race with swapoff (Miaohe Lin) [task:160285]
  - security/box: add check inode point when check box dir (mengdehui) [bug:179672]
  - config: remove CONFIG_SECURITY_BOX_ENABLED_ALWAYS (mengdehui) [bug:179672]
  - security/box: set BOX_ENABLED_ALWAYS default n (mengdehui) [bug:179672]
  - ixgbe: initialize the LED link active for LED blink support (Li ZhiGang) [task:146678]
  - PCI: pciehp: Cancel bringup sequence if card is not present (Rongguang Wei) [task:127145]
  - Revert pciehp driver patch added before to fix PDC event (weirongguang) [task:127145]
  - arm64/config: CONFIG_ARM_SPE_PMU=m (Jackie Liu)
  - can: j1939: j1939_session_destroy(): fix memory leak of skbs (Fedor Pchelkin) {CVE-2022-3633}
  - media: vivid: dev->bitmap_cap wasn't freed in all cases (Hans Verkuil) {CVE-2023-0615}
  - arm64/config: compile nvme and nvme_core as module (zhanggenjian) [task:136928]
  - rds: rds_rm_zerocopy_callback() use list_first_entry() (Pietro Borrello) [bug:164070] {CVE-2023-1078}
  - selinux: properly handle multiple messages in selinux_netlink_send() (Paul Moore) [task:119087] {CVE-2020-10751}
  - vc_screen: modify vcs_size() handling in vcs_read() (George Kennedy) [bug:182724]
  - vc_screen: don't clobber return value in vcs_read (Thomas Weißschuh) [bug:182724]
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (George Kennedy) [bug:182724] {CVE-2023-3567}
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Takashi Iwai) {CVE-2023-31084}
  - NETSWIFT: txgbe: FIX: fix error when start and stop SRIOV (zhongxiangji) [task:160962]
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus) [bug:179189] {CVE-2023-34256}
  - fs: hfsplus: fix UAF issue in hfsplus_put_super (Dongliang Mu) [bug:179193] {CVE-2023-2985}
  - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (Zixuan Fu) [bug:179197] {CVE-2023-3111}
  - btrfs: check return value of btrfs_commit_transaction in relocation (Josef Bacik) [bug:179197]
  - memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang) [bug:179202] {CVE-2023-3141}
  - fbcon: Check font dimension limits (Samuel Thibault) [bug:179208] {CVE-2023-3161}
  - firewire: fix potential uaf in outbound_phy_packet_callback() (Chengfeng Ye) [bug:179212] {CVE-2023-3159}
  - relayfs: fix out-of-bounds access in relay_file_read (Zhang Zhengming) [bug:179216] {CVE-2023-3268}
  - kernel/relay.c: fix read_pos error when multiple readers (Pengcheng Yang) [bug:179216]
  - media: saa7134: fix use after free bug in saa7134_finidev due to race condition (Zheng Wang) [bug:179219] {CVE-2023-35823}
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang) [bug:179223] {CVE-2023-35824}
  - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (Zheng Wang) [bug:179226] {CVE-2023-35828}
  - drm/msm/dpu: Add check for pstates (Jiasheng Jiang) [bug:179237] {CVE-2023-3220}
  - HID: intel_ish-hid: Add check for ishtp_dma_tx_map (Jiasheng Jiang) [bug:179240] {CVE-2023-3358}
  - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Hangyu Hua) [task:178770] {CVE-2023-35788}
  - RDMA/cma: Do not change route.addr.src_addr.ss_family (Jason Gunthorpe) [bug:170284] {CVE-2023-2176}
  - RDMA/core: Refactor rdma_bind_addr (Patrisious Haddad) [bug:170284] {CVE-2023-2176}
  - RDMA/cma: Do not change route.addr.src_addr outside state checks (Jason Gunthorpe) [bug:170284] {CVE-2023-2176}
  - RDMA/cma: Make the locking for automatic state transition more clear (Jason Gunthorpe) [bug:170284] {CVE-2023-2176}
  - Revert "RDMA/cma: Simplify rdma_resolve_addr() error flow" (Parav Pandit) [bug:170284] {CVE-2023-2176}
  - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests (Jason Gunthorpe) [bug:170284] {CVE-2023-2176}
  - nvme: force set affinity for nvme when config use_interrupt_adaptation (huhai) [task:155820]
  - genirq: Introduce irq_set_affinity_force() to force set interrupt affinity to CPUs (huhai) [task:155820]
  - fs/proc: task_mmu.c: don't read mapcount for migration entry (Yang Shi) [bug:166215] {CVE-2023-1582}
  - Makefile: Ignore debian and rpmbuild directory (Jackie Liu)
  - xfs: fix reflink source file racing with directio writes (Darrick J. Wong) [task:57649]
  - xfs: force writes to delalloc regions to unwritten (Darrick J. Wong) [task:57649]
  - cifs: improve read performance for page size 64KB & cache=strict & vers=2.1+ (Jones Syue) [bug:175721]
  - mips/config: enable support profiling (husong) [bug:136883]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.37.v2101
changelog:
  - ext4: Fix rec_len verify error (Shida Zhang) [task:165596]
  - ext4: fix potential htree corruption when growing large_dir directories (Theodore Ts'o)
  - ext4: fix potential htree index checksum corruption (Theodore Ts'o)


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.38.v2101
changelog:
  - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela) [bug:185228] {CVE-2023-3611}
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan) [bug:185232] {CVE-2023-3776}
  - net/sched: cls_u32: Fix reference counter leak leading to overflow (Lee Jones) [bug:185223] {CVE-2023-3609}
  - net: sched: remove NET_CLS_IND config option (Jiri Pirko) [bug:185223]
  - irqchip/gic-v3-its: Enable RESEND_WHEN_IN_PROGRESS for LPIs (James Gowans) [bug:184935]
  - genirq: Allow fasteoi handler to resend interrupts on concurrent handling (James Gowans) [bug:184935]
  - genirq: Expand doc for PENDING and REPLAY flags (James Gowans) [bug:184935]
  - genirq/PM: Introduce IRQCHIP_ENABLE_WAKEUP_ON_SUSPEND flag (Maulik Shah) [bug:184935]
  - genirq: Provide interrupt injection mechanism (Thomas Gleixner) [bug:184935]
  - arm64: Fix race condition on PG_dcache_clean in __sync_icache_dcache() (Catalin Marinas) [task:167147]
  - bpf, cpumap: Make sure kthread is running before map update returns (Hou Tao) [task:166213]
  - bpf: cpumap: Fix memory leak in cpu_map_update_elem (Pu Lehui) [task:166213]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.39.v2101
changelog:
  - resolve compiling error for previous rcu patches (lifangxu) [task:174840]
  - x86/cpu: Avoid cpuinfo-induced IPIing of idle CPUs (Paul E. McKenney) [bug:190769]
  - x86/cpu: Avoid cpuinfo-induced IPI pileups (Paul E. McKenney) [bug:190769]
  - x86/cpu: Disable frequency requests via aperfmperf IPI for nohz_full CPUs (Konstantin Khlebnikov) [bug:190769]
  - rcu: Provide rcu_irq_exit_check_preempt() (Thomas Gleixner) [bug:190769]
  - rcu: Provide rcu_irq_exit_preempt() (Thomas Gleixner) [bug:190769]
  - btrfs: don't use global reserve for chunk allocation (Josef Bacik) [task:169240]
  - btrfs: add new flushing states for the delayed refs rsv (Josef Bacik) [task:169240]
  - PCI: Allow VPD access for QLogic ISP2722 (Arun Easi) [bug:187138]
  - netfilter: nft_dynset: disallow object maps (Pablo Neira Ayuso) [bug:192894] {CVE-2023-4563}
  - mips/config: remove CONFIG_HZ_256 and keep default Timer frequency (wangxuewen) [bug:188806]
  - Loongson-3: Fix up loongson memcpy problem (liweihao) [bug:188804]
  - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() (Zixuan Fu) [task:162162] {CVE-2023-4459}
  - ext4: add check to prevent attempting to resize an fs with sparse_super2 (Josh Triplett) [task:171003, bug:190516]
  - vfs: check fd has read access in kernel_read_file_from_fd() (Matthew Wilcox (Oracle)) [bug:188663]
  - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long)
  - btrfs: allow btrfs_truncate_block() to fallback to nocow for data space reservation (Qu Wenruo) [bug:188623]
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim) [bug:189761] {CVE-2023-40283}
  - ext4: add reserved GDT blocks check (Zhang Yi) [bug:190521, task:171003]
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (valis) [bug:192919] {CVE-2023-4921}
  - dm: don't stop request queue after the dm device is suspended (Ming Lei) [task:172151]
  - dm rq: don't queue request to blk-mq during DM suspend (Ming Lei) [task:172151]
  - mm/memconrtol: Revert "REDHAT: mm/memcg: Free percpu stats memory of dying memcg's" (Jiangshan Yi) [bug:191720]
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Budimir Markovic) [bug:192910] {CVE-2023-4623}
  - config/x86: add debug config support for xfstest (Shida Zhang) [bug:189811]
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis) [bug:189757] {CVE-2023-4128}
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis) [bug:189757] {CVE-2023-4128}
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis) [bug:189757] {CVE-2023-4128}
  - x86/tsc: Extend watchdog check exemption to 4-Sockets platform (Feng Tang) [task:188913]
  - x86/tsc: Disable clocksource watchdog for TSC on qualified platorms (Feng Tang) [task:188913]
  - x86/tsc: Add a timer to make sure TSC_adjust is always checked (Feng Tang) [task:188913]
  - x86/hpet: Use another crystalball to evaluate HPET usability (Thomas Gleixner) [task:188913]
  - x86/tsc: Add option to disable tsc clocksource watchdog (Juri Lelli) [task:188913]
  - x86/tsc: Respect tsc command line paraemeter for clocksource_tsc_early (Michael Zhivich)
  - selftests: forwarding: tc_actions: Use ncat instead of nc (Ido Schimmel) [task:166265]
  - act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [task:166265] {CVE-2022-4269}
  - net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [task:166265]
  - net/sched: act_mirred: refactor the handle of xmit (wenxu) [task:166265]
  - net: sched: don't expose action qstats to skb_tc_reinsert() (Vlad Buslov) [task:166265]
  - net: sched: extract qstats update code into functions (Vlad Buslov) [task:166265]
  - net: sched: protect against stack overflow in TC act_mirred (John Hurley) [task:166265]
  - net: sched: refactor reinsert action (John Hurley) [task:166265]
  - sched: fix warning of rq_cputimes (Jackie Liu)
  - x86/config: enable CONFIG_TCM_QLA2XXX=y (liubaolin) [task:173621]
  - net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan) [bug:186702] {CVE-2023-3812}
  - tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS (Yunjian Wang) [task:122626]
  - mm/munlock: delete munlock_vma_pages_all(), allow oomreap (Hugh Dickins) [bug:163612, bug:188493, bug:188513]
  - ext4: fix bug_on ext4_mb_use_inode_pa (Baokun Li) [task:167485, task:162162]
  - backport-tools: add release-stable-kernel tool for SP1/SP2 (Jackie Liu)
  - package: Complete the changelog details of the SP1 kernel package (Jiangshan Yi) [task:165835, bug:186495]
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE (Pablo Neira Ayuso) [bug:186690] {CVE-2023-3117}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.40.v2101
changelog:
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [task:177236] {CVE-2023-42753}
  - x86/KVM: Clean up host's steal time structure (Boris Ostrovsky) [task:68771]
  - x86/KVM: Make sure KVM_VCPU_FLUSH_TLB flag is not missed (Boris Ostrovsky) [task:68771]
  - xfs: check sb_meta_uuid for dabuf buffer recovery (Dave Chinner) [bug:194635]
  - Revert "NFS: Don't call generic_error_remove_page() while holding locks" (wolfgang huang) [bug:194658]
  - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma) [bug:189726] {CVE-2023-3772}
  - squashfs: fix xattr id and id lookup sanity checks (Phillip Lougher) [task:158827, bug:195777]
  - squashfs: add more sanity checks in id lookup (Phillip Lougher) [task:158034, bug:195777]
  - squashfs: add more sanity checks in xattr id lookup (Phillip Lougher) [task:158034, bug:195777]
  - squashfs: fix inode lookup sanity checks (Sean Nyekjaer) [task:158827, bug:195777]
  - squashfs: add more sanity checks in inode lookup (Phillip Lougher) [task:158034, bug:195777]
  - sched/rt: Optimize checking group RT scheduler constraints (Konstantin Khlebnikov) [task:173985]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.41.v2101
changelog:
  - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (xiaolinkui) [bug:195544]
  - Revert "block: move blk_exit_queue into __blk_release_queue" (zhanggenjian) [task:177423]
  - Revert "block: free sched's request pool in blk_cleanup_queue" (zhanggenjian) [task:177423]
  - Revert "blk-mq: remove WARN_ON(!q->elevator) from blk_mq_sched_free_requests" (zhanggenjian) [task:177423]
  - Revert "block: adjust the position of the code section" (zhanggenjian) [task:177423]
  - tpm: add TCM2.0 support in tpm_tis_spi (Li ZhiGang) [task:175234]
  - ipv6: do not leave garbage in rt->fib6_metrics (Eric Dumazet) [task:178045]
  - fs: jfs: fix possible NULL pointer dereference in dbFree() (Zixuan Fu) [bug:189765] {CVE-2023-4385}
  - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() (Zixuan Fu) [bug:189769] {CVE-2023-4387}
  - cec-api: prevent leaking memory through hole in structure (Hans Verkuil) [task:157172, bug:197484] {CVE-2020-36766}
  - xfs: drop submit side trans alloc for append ioends (Brian Foster) [task:168909]
  - xfs: turn io_append_trans into an io_private void pointer (Christoph Hellwig) [task:168909]
  - xfs: refactor the ioend merging code (Christoph Hellwig) [task:168909]
  - xfs: simplify xfs_ioend_can_merge (Christoph Hellwig) [task:168909]
  - xfs: allow merging ioends over append boundaries (Christoph Hellwig) [task:168909]
  - xfs: merge adjacent io completions of the same type (Darrick J. Wong) [task:168909]
  - xfs: remove unused m_data_workqueue (Darrick J. Wong) [task:168909]
  - xfs: implement per-inode writeback completion queues (Darrick J. Wong) [task:168909]
  - netfilter: xt_u32: validate user space input (Wander Lairson Costa) [bug:197488] {CVE-2023-39192}
  - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [bug:197492] {CVE-2023-39193}
  - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma) [bug:197496] {CVE-2023-39194}
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima) [bug:196022] {CVE-2023-4622}
  - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet) [bug:196026] {CVE-2023-42752}
  - net/sched: Retire rsvp classifier (Jamal Hadi Salim) [bug:196033] {CVE-2023-42755}
  - ipv4: fix null-deref in ipv4_link_failure (Kyle Zeng) [task:177575] {CVE-2023-42754}
  - gmjstcm: delete SMO0768 from TCM1 spi device id (Li ZhiGang) [task:175749]
  - netfilter: nft_exthdr: Search chunks in SCTP packets only (Phil Sutter) [bug:192914]
  - netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian (Stephen Suryaputra) [bug:192914]
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal) [bug:192914] {CVE-2023-4881}
  - netfilter: nft_exthdr: Fix for unsafe packet data read (Phil Sutter) [bug:192914]
  - netfilter: nft_exthdr: Support SCTP chunks (Phil Sutter) [bug:192914]
  - netfilter: nf_tables: add support for matching IPv4 options (Stephen Suryaputra) [bug:192914]
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() (Hyunwoo Kim) [task:176709] {CVE-2022-45887}
  - ext4: prevent partial update of the extent blocks (Zhang Yi) [task:167485]
  - ext4: check for inconsistent extents between index and leaf block (Zhang Yi) [task:167485]
  - ext4: check for out-of-order index extents in ext4_valid_extent_entries() (Zhang Yi) [task:167485]
  - ext4: flush s_error_work before journal destroy in ext4_fill_super (yangerkun) [task:167485]
  - ext4: fix e2fsprogs checksum failure for mounted filesystem (Jan Kara) [task:167485]
  - ext4: always panic when errors=panic is specified (Ye Bin) [task:167485]
  - ext4: fix ext4_error_err save negative errno into superblock (Ye Bin) [task:167485]
  - ext4: fix timer use-after-free on failed mount (Jan Kara) [task:167485]
  - ext4: remove set but not used variable 'es' in ext4_jbd2.c (Jason Yan) [task:167485]
  - ext4: remove set but not used variable 'es' (Jason Yan) [task:167485]
  - ext4: don't try to processed freed blocks until mballoc is initialized (Theodore Ts'o) [task:167485]
  - ext4: drop ext4_handle_dirty_super() (Jan Kara) [task:167485]
  - ext4: use sbi instead of EXT4_SB(sb) in ext4_update_super() (Jan Kara) [task:167485]
  - ext4: save error info to sb through journal if available (Jan Kara) [task:167485]
  - ext4: protect superblock modifications with a buffer lock (Jan Kara) [task:167485]
  - ext4: drop sync argument of ext4_commit_super() (Jan Kara) [task:167485]
  - ext4: combine ext4_handle_error() and save_error_info() (Jan Kara) [task:167485]
  - ext4: defer saving error info from atomic context (Jan Kara) [task:167485]
  - ext4: simplify ext4 error translation (Jan Kara) [task:167485]
  - ext4: move functions in super.c (Jan Kara) [task:167485]
  - ext4: make ext4_abort() use __ext4_error() (Jan Kara) [task:167485]
  - ext4: standardize error message in ext4_protect_reserved_inode() (Jan Kara) [task:167485]
  - ext4: save all error info in save_error_info() and drop ext4_set_errno() (Theodore Ts'o) [task:167485]
  - ext4: save the error code which triggered an ext4_error() in the superblock (Theodore Ts'o) [task:167485]
  - ext4: remove redundant sb checksum recomputation (Jan Kara) [task:167485]
  - ext4: add ext3 report error to userspace by netlink (lijinlin) [task:167485]
  - ext4: Fix not report exception message when mount with errors=continue (Ye Bin) [task:167485]
  - ext4: don't remount read-only with errors=continue on reboot (Jan Kara) [task:167485]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.42.v2101
changelog:
  - iommu/dma: Fix MSI reservation allocation (Marc Zyngier) [task:183064]
  - ipv6: Fix use of anycast address with loopback (David Ahern) [task:99622, task:183477]
  - ipv6: Create init helper for fib6_nh (user) [task:99622, task:183477]
  - of: overlay: kmemleak in dup_and_fixup_symbol_prop() (Frank Rowand) [task:183064]
  - kallsyms: fix KYLIN_UNEXPORT_SYMBOLS logic error in kallsyms_on_each_symbol (xuping) [task:121424]
  - ext4: fix check to prevent false positive report of incorrect used inodes (Zhang Yi) [bug:198263, bug:197767]
  - virtio_net: enable napi_tx by default (Willem de Bruijn) [task:180349]
  - net: nfc: Fix use-after-free caused by nfc_llcp_find_local (Lin Ma) [task:179856] {CVE-2023-3863}
  - nfc: llcp: simplify llcp_sock_connect() error paths (Krzysztof Kozlowski) [task:179856]
  - nfc: llcp: nullify llcp_sock->dev on connect() error paths (Krzysztof Kozlowski) [task:179856]
  - nfc: Fix to check for kmemdup failure (Aditya Pakki) [task:179856]
  - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE (Sean Christopherson) [task:182171]
  - KVM: fix overflow of zero page refcount with ksm running (Zhuang Yanying) [task:157172]
  - ravb: Fix use-after-free issue in ravb_tx_timeout_work() (Yoshihiro Shimoda) [task:181443] {CVE-2023-35827}
  - Revert "NFS: Don't interrupt file writeout due to fatal errors" (ChenXiaoSong) [task:198290]
  - char: pcmcia: remove all the drivers (Jiri Slaby) [task:177573] {CVE-2022-44033}
  - nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect (Krzysztof Kozlowski) [task:179318] {CVE-2021-38208}
  - media: mceusb: Use USB_DIR_IN in read request (Hongyu Xie) [task:179257] {CVE-2022-3903}
  - media: mceusb: fix control-message timeouts (Johan Hovold) [bug:150405]
  - iomap: Set all uptodate bits for an Uptodate page (Matthew Wilcox (Oracle)) [bug:197566]
  - iomap: Use kzalloc to allocate iomap_page (Matthew Wilcox (Oracle)) [bug:197566]
  - igb: set max size RX buffer when store bad packet is enabled (Radoslaw Tyl) {CVE-2023-45871}
  - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) {CVE-2023-39189}
  - Revert "USB: core: Don't hold device lock while reading the "descriptors" sysfs file" (Hongyu Xie) [task:179861] {CVE-2023-37453}
  - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Hyunwoo Kim) [task:179858] {CVE-2022-45919}
  - x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD)) [task:179857] {CVE-2023-20593}
  - KVM: nVMX: add missing consistency checks for CR0 and CR4 (Paolo Bonzini) [task:179282] {CVE-2023-30456}
  - remove the lightnvm subsystem (Christoph Hellwig) [task:179254] {CVE-2022-2991}
  - media: dvb-core: Fix use-after-free due on race condition at dvb_net (Hyunwoo Kim) [task:179859] {CVE-2022-45886}
  - ipv4: avoid using shared IP generator for connected sockets (Eric Dumazet) [task:179316, task:160493] {CVE-2020-36516}
  - USB: ene_usb6250: Allocate enough memory for full object (Kees Cook) [task:179903, task:166857] {CVE-2023-45862}
  - kabi_whitelist: remove fuse_xxx related symbol (Zhengyuan Liu) [task:179296, task:98376]
  - fuse: fix pipe buffer lifetime for direct_io (Miklos Szeredi) [task:179296, bug:112028] {CVE-2022-1011}
  - ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng) {CVE-2023-31085}
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO (Lee, Chun-Yi) {CVE-2023-31083}
  - tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith) {CVE-2023-1206}
  - xen/netback: Fix buffer overrun triggered by unusual packet (Ross Lagerwall) {CVE-2023-34319}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.43.v2101
changelog:
  - net: sched: fix NULL pointer dereference in mq_attach (Zhengchao Shao) [task:183053]
  - objtool: Don't fail on missing symbol table (Josh Poimboeuf) [task:185741]
  - ext4: fix leaking sysfs kobject after failed mount (Eric Biggers)
  - x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys (Dheeraj Kumar Srivastava) [task:166857, task:182934]
  - sch_netem: fix issues in netem_change() vs get_dist_table() (Eric Dumazet) [task:182934]
  - sch_netem: acquire qdisc lock in netem_change() (Eric Dumazet) [task:166857, task:182934]
  - netem: fix zero division in tabledist (Aleksandr Nogikh)
  - cgroup: Do not corrupt task iteration when rebinding subsystem (Xiu Jianfeng) [task:166857, task:182934]
  - cgroup: Make rebind_subsystems() disable v2 controllers all at once (Waiman Long)
  - OPENEULER: irqchip: gic-v3: Collection table support muti pages (wangwudi) [task:183007]
  - tty: tty_jobctrl: fix pid memleak in disassociate_ctty() (Yi Yang) [task:182946]
  - perf/core: Fix cgroup event list management (Namhyung Kim) [task:184204]
  - perf/core: Optimize perf_install_in_event() (Peter Zijlstra) [task:184204]
  - perf: Rework perf_event_exit_event() (Peter Zijlstra) [task:184204]
  - EULER: perf: Revert "perf: Paper over the hw.target problems" (Yang Jihong) [task:184204]
  - perf: Fix function pointer case (Peter Zijlstra) [task:184204]
  - perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong) [task:184204]
  - perf/core: Fix the same task check in perf_event_set_output (Kan Liang) [task:184204]
  - perf: Fix possible memleak in pmu_dev_alloc() (Chen Zhongjin) [task:184204]
  - perf/core: Fix address filter parser for multiple filters (Adrian Hunter) [task:184204]
  - perf: Fix list corruption in perf_cgroup_switch() (Song Liu) [task:184204]
  - perf/core: Avoid put_page() when GUP fails (Greg Thelen) [task:184204]
  - events: Reuse value read using READ_ONCE instead of re-reading it (Baptiste Lepers) [task:184204]
  - perf: Fix data race between pin_count increment/decrement (Marco Elver) [task:184204]
  - perf/core: Disable page faults when getting phys address (Jiri Olsa) [task:184204]
  - perf/ioctl: Add check for the sample_period value (Ravi Bangoria) [task:184204]
  - ipv6: Fix use of anycast address with loopback (David Ahern) [task:184541, task:183477]
  - ipv6: Create init helper for fib6_nh (David Ahern) [task:184541, task:183477]
  - net/ipv6: Do not reset nl_net in ip6_route_info_create (David Ahern) [task:184541, task:183477]
  - ipv6: Move setting default metric for routes (David Ahern) [task:184541, task:183477]
  - net: rtmsg_to_fib6_config() - use new style struct initializer instead of memset (Maciej Żenczykowski) [task:184541, task:183477]
  - Revert "ipv6: Create init helper for fib6_nh" (luoqing) [task:183477]
  - Revert "ipv6: Fix use of anycast address with loopback" (luoqing) [task:183477]
  - random: fix data race on crng_node_pool (Eric Biggers) [task:97875]
  - OPENEULER: xhci: fix USB xhci controller issue (Longfang Liu) [task:182993]
  - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (huhai) [task:184636]
  - xen/events: replace evtchn_rwlock with RCU (Juergen Gross) {CVE-2023-34324}
  - xen/events: don't unmask an event channel when an eoi is pending (Juergen Gross) [task:158827]
  - xen/events: don't use chip_data for legacy IRQs (Juergen Gross)
  - XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information. (Thomas Gleixner) [task:157358]
  - scsi: hisi_sas: Fix normally completed I/O analysed as failed (Xingui Yang) [task:182978]
  - drm/atomic-helper: Bump vblank timeout to 100 ms (Linus Walleij) [task:182959]
  - mm: disable kernelcore=mirror when no mirror memory (Ma Wupeng) [task:182939]
  - bpf: modify the limitation of BPF JIT programs from 128M to 1G (xiaolinkui) [bug:187461]
  - bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Lorenz Bauer)
  - arm64/bpf: don't allocate BPF JIT programs in module memory (Ard Biesheuvel)
  - mm, sl[aou]b: guarantee natural alignment for kmalloc(power-of-two) (Vlastimil Babka) [task:182892]
  - lib/stackdepot.c: fix global out-of-bounds in stack_slabs (Alexander Potapenko) [task:155707, task:183063]
  - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled (Zhipeng Xie) [task:104354]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.44.v2101
changelog:
  - net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues(). (Kuniyuki Iwashima) [task:188413]
  - config/mips: support zswap function (mengfanhui) [bug:210119]
  - security/selinux: Add selinux process security attributes (chengang) [task:192443]
  - KVM: arm64: Fix clean dcache when vcpu is 0 (zhanghao1) [task:186056]
  - config/zhaoxin: add features for ZHAOXIN KH40000 (lifangxu) [task:188929]
  - ZHAOXIN: Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform (leoliu-oc) [task:194099]
  - ZHAOXIN: Add support for Zhaoxin USB4 (leoliu-oc) [task:194098]
  - KVM: x86: Fix APIC page invalidation race (Eiichi Tsukata) [task:194096]
  - ZHAOXIN: Add support Zhaoxin GPIO pinctrl (leoliu-oc) [task:194094]
  - ZHAOXIN: crypto: x86/sm2 -add Zhaoxin SM2 algorithm implementation (leoliu-oc) [task:194093]
  - ZHAOXIN: cpufreq: ACPI: add ITMT support when CPPC enabled (leoliu-oc) [task:194092]
  - ZHAOXIN: Update Zhaoxin core temperature monitoring driver (leoliu-oc) [task:194091]
  - ZHAOXIN: Update Zhaoxin GMI SM4 Block Cipher algorithm driver (leoliu-oc) [task:194090]
  - ZHAOXIN: Update Zhaoxin GMI SM3 Secure Hash algorithm driver (leoliu-oc) [task:194090]
  - ZHAOXIN: drm/qxl: remove men_bus_offset set to 0 in qxl_ttm_io_mem_reserve (leoliu-oc) [task:194089]
  - xhci: guard accesses to ep_state in xhci_endpoint_reset() (Jonathan Bell) [task:194088]
  - ZHAOXIN: Log for Driver for Zhaoxin SM3 and SM4 algorithm (leoliu-oc) [task:194087]
  - ZHAOXIN: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm (leoliu-oc) [task:194087]
  - ZHAOXIN: Add support for Zhaoxin GMI SM3 Secure Hash algorithm (leoliu-oc) [task:194087]
  - ZHAOXIN: Fix coherent DMA writes disorder issue for Zhaoxin KH-40000 platform (leoliu-oc) [task:194086]
  - ZHAOXIN: Fix streaming DMA writes disorder issue for Zhaoxin KH-40000 platform (leoliu-oc) [task:194086]
  - sched/topology: fix the issue groups don't span domain->span for NUMA diameter > 2 (Barry Song) [task:194085]
  - ZHAOXIN: Add support for Zhaoxin I2C controller (leoliu-oc) [task:194083]
  - ZHAOXIN: Add MWAIT Cx support for Zhaoxin CPUs (leoliu-oc) [task:194079]
  - USB: Fix xhci event ring dequeue pointer ERDP update issue (Weitao Wang) [task:194078]
  - usb: host: xhci: Support running urb giveback in tasklet context (Suwan Kim) [task:194078]
  - usb: host: xhci: update event ring dequeue pointer on purpose (Peter Chen) [task:194078]
  - ZHAOXIN: Turning off Zhaoxin ahci controller runtime pm from sysfs (leoliu-oc) [task:194076]
  - cpufreq: ACPI: Add Zhaoxin/Centaur turbo boost control interface support (Tony W Wang-oc) [task:194075]
  - ZHAOXIN: HDAC: Update support for Zhaoxin NB HDAC codec (leoliu-oc) [task:194074]
  - ZHAOXIN: HDAC: Update support for Zhaoxin NB HDAC (leoliu-oc) [task:194074]
  - ZHAOXIN: x86/tsc: Make cur->adjusted values in package#1 to be the same (leoliu-oc) [task:194073]
  - ZHAOXIN: x86/perf: Update performance events support for more Zhaoxin CPU (leoliu-oc) [task:194072]
  - ZHAOXIN: ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability (leoliu-oc) [task:194071]
  - ata: libata: disallow dev-initiated LPM transitions to unsupported states (Niklas Cassel) [task:194071]
  - USB: Fix ehci infinite suspend-resume loop issue in zhaoxin (Weitao Wango) [task:194070]
  - xhci: avoid race between disable slot command and host runtime suspend (Mathias Nyman) [task:194069]
  - ZHAOXIN: rtc: Fix set RTC time delay 500ms on some Zhaoxin SOCs (leoliu-oc) [task:194068]
  - x86/perf/Add stepping check for ZXC (silviazhao) [task:194067]
  - ZHAOXIN: crypto: x86/crc32c-intel Exclude low performance CRC32C instruction CPUs (leoliu-oc) [task:194066]
  - ZHAOXIN: x86/cpu: Set low performance CRC32C flag on some Zhaoxin CPUs (LeoLiu-oc) [task:194066]
  - ZHAOXIN: x86/cpufeatures: Add low performance CRC32C instruction CPU feature (leoliu-oc) [task:194066]
  - ZHAOXIN: USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci (leoliu-oc) [task:194065]
  - x86/apic: Mask IOAPIC entries when disabling the local APIC (Tony W Wang-oc) [task:194064]
  - ZHAOXIN: Add support for Zhaoxin Serial ATA IDE. (leoliu-oc) [task:194063]
  - USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value (Weitao Wang) [task:194062]
  - ZHAOXIN: Log for Add support for Zhaoxin HDAC and codec (leoliu-oc) [task:194061]
  - ALSA: hda: Add support of Zhaoxin controller (Tony W Wang-oc) [task:194061]
  - xhci: Add ZHAOXIN xHCI host U1/U2 feature support (Weitao Wang) [task:194060]
  - xhci: Show ZHAOXIN xHCI root hub speed correctly (Weitao Wang) [task:194059]
  - xhci: Fix TRB prefetch issue of ZHAOXIN hosts (Weitao Wang) [task:194058]
  - xhci: Fix resume issue of some ZHAOXIN hosts (Weitao Wang) [task:194057]
  - PCI: Add ACS quirk for Zhaoxin multi-function devices (Raymond Pang) [task:194056]
  - PCI: Add Zhaoxin Vendor ID (Raymond Pang) [task:194056]
  - x86/Kconfig: Drop vendor dependency for X86_UMIP (Tony W Wang-oc) [task:194055]
  - x86/Kconfig: Rename UMIP config parameter (Babu Moger) [task:194055]
  - x86/speculation/swapgs: Exclude Zhaoxin CPUs from SWAPGS vulnerability (Tony W Wang-oc) [task:194054]
  - x86/acpi/cstate: Optimize ARB_DISABLE on Centaur CPUs (Tony W Wang-oc) [task:194053]
  - x86/acpi/cstate: Add Zhaoxin processors support for cache flush policy in C3 (Tony W Wang-oc) [task:194053]
  - x86/power: Optimize C3 entry on Centaur CPUs (David Wang) [task:194053]
  - ACPI, x86: Improve Zhaoxin processors support for NONSTOP TSC (Tony W Wang-oc) [task:194052]
  - ACPI, x86: Add Zhaoxin processors support for NONSTOP TSC (Tony W Wang-oc) [task:194052]
  - ZHAOXIN: Log for Add support for Zhaoxin Processors (leoliu-oc) [task:194051]
  - x86/cpu/centaur: Add Centaur family >=7 CPUs initialization support (Tony W Wang-oc) [task:194051]
  - x86/cpu/centaur: Replace two-condition switch-case with an if statement (Tony W Wang-oc) [task:194051]
  - Input: add bounds checking to input_set_capability() (Jeff LaBundy) [task:162162] {CVE-2022-48619}
  - signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal (Eric W. Biederman)
  - vhost: use kzalloc() instead of kmalloc() followed by memset() (Prathu Baronia) [task:193171] {CVE-2024-0340}
  - iommu/vt-d: Fix agaw for a supported 48 bit guest address width (Saeed Mirzamohammadi) [task:194968]
  - smb: client: fix OOB in smbCalcSize() (Paulo Alcantara) [task:193171] {CVE-2023-6606}
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao) [task:193171] {CVE-2023-6932}
  - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg (Hyunwoo Kim) [task:193171] {CVE-2023-51779}
  - net/rose: Fix Use-After-Free in rose_ioctl (Hyunwoo Kim) [task:193171] {CVE-2023-51782}
  - appletalk: Fix Use-After-Free in atalk_ioctl (Hyunwoo Kim) [task:193171] {CVE-2023-51781}
  - atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim) [task:193171] {CVE-2023-51780}
  - crypto: cryptd - Protect per-CPU resource by disabling BH. (Sebastian Andrzej Siewior) [task:184972]
  - ext4: turning quotas off if mount failed after enable quotas (Baokun Li) [task:184977]
  - OPENEULER: x86/kprobes: Fix the error judgment for debug exceptions (Li Huafei) [task:184976]
  - ipmi_si: fix a memleak in try_smi_init() (Yi Yang) [task:184979]
  - quota: simplify drop_dquot_ref() (Baokun Li) [task:184966]
  - quota: fix dqput() to follow the guarantees dquot_srcu should provide (Baokun Li) [task:184966]
  - quota: add new helper dquot_active() (Baokun Li) [task:184966]
  - quota: rename dquot_active() to inode_quota_active() (Baokun Li) [task:184966]
  - quota: factor out dquot_write_dquot() (Baokun Li) [task:184966]
  - quota: add dqi_dirty_list description to comment of Dquot List Management (Chengguang Xu) [task:184966]
  - quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list (Chengguang Xu) [task:184966]
  - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() (Hangyu Hua) [task:193171] {CVE-2023-7192}
  - sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa() (Dietmar Eggemann) [task:192348]
  - ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan) [task:188430]
  - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation (Linus Torvalds)
  - blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" (Ming Lei)
  - net: add vlan_get_protocol_and_depth() helper (Eric Dumazet) [task:182970]
  - net: tap: check vlan with eth_type_vlan() method (Menglong Dong) [task:182970]
  - ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg) [task:188435]
  - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx (Ilpo Järvinen) [task:188423]
  - loop: loop_set_status_from_info() check before assignment (Zhong Jinghua) [task:182968]
  - loop: Check for overflow while configuring loop (Siddh Raman Pant) [task:162162]
  - nfsd: Remove incorrect check in nfsd4_validate_stateid (Trond Myklebust) [task:184474]
  - nfsd4: kill warnings on testing stateids with mismatched clientids (J. Bruce Fields) [task:184474]
  - jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (Zhihao Cheng) [task:187896]
  - EULER: net: hns: fix wrong head when modify the tx feature when sending packets (Yonglong Liu) [task:182947]
  - net/packet: convert po->auxdata to an atomic flag (Eric Dumazet) [task:188433]
  - net/packet: convert po->origdev to an atomic flag (Eric Dumazet) [task:188434]
  - of: Fix modalias string generation (Miquel Raynal) [task:188428]
  - af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). (Kuniyuki Iwashima) [task:188425]
  - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (Ilpo Järvinen) [task:188424]
  - nvmet: nul-terminate the NQNs passed in the connect command (Christoph Hellwig) [task:189180] {CVE-2023-6121}
  - ipmi: fix SSIF not responding under certain cond. (Zhang Yuchen) [task:188418]
  - ipmi_ssif: Rename idle state and check (Corey Minyard) [task:188419]
  - sctp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima) [task:188412]
  - dccp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima) [task:188412]
  - tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct(). (Kuniyuki Iwashima) [task:188412]
  - udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). (Kuniyuki Iwashima) [task:188412]
  - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. (Kuniyuki Iwashima) [task:188414]
  - dm thin metadata: check fail_io before using data_sm (Li Lingfeng) [task:182982]
  - dm space maps: improve performance with inc/dec on ranges of blocks (Joe Thornber) [task:182982]
  - dm: don't lock fs when the map is NULL during suspend or resume (Li Lingfeng) [task:182983]
  - dm: don't lock fs when the map is NULL in process of resume (Li Lingfeng) [task:182983]
  - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (Jie Wang) [task:182948]
  - drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer (Lu Yao) [task:184449]
  - ext4: forbid commit inconsistent quota data when errors=remount-ro (Ye Bin) [task:183005]
  - quota: fixup *_write_file_info() to return proper error code (Yangtao Li) [task:183005]
  - dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client (Li Lingfeng) [task:183052]
  - dm bufio: do buffer cleanup from a workqueue (Mikulas Patocka) [task:183052]
  - dm bufio: introduce a global cache replacement (Mikulas Patocka) [task:183052]
  - dm bufio: introduce a global queue (Mikulas Patocka) [task:183052]
  - dm bufio: refactor adjust_total_allocated (Mikulas Patocka) [task:183052]
  - dm bufio: call adjust_total_allocated from __link_buffer and __unlink_buffer (Mikulas Patocka) [task:183052]
  - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (Zhihao Cheng) [task:183052]
  - dm thin metadata: add wrappers for managing write locking of metadata (Mike Snitzer) [task:183052]
  - dm: add disk before alloc dax (Li Lingfeng) [task:183060]
  - sched/topology: Make sched_init_numa() use a set for the deduplicating sort (Valentin Schneider) [bug:188813]
  - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Jozsef Kadlecsik) [bug:195544]
  - Revert "netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test" (xiaolinkui) [bug:195544]
  - config: disable unprivileged eBPF by default (chenyuan) [task:178019, task:186859]
  - NFS: make sure open context mode have FMODE_EXEC when file open for exec (ChenXiaoSong) [task:187717] {CVE-2022-24448}
  - NFSv4: fix open failure with O_ACCMODE flag (ChenXiaoSong) [task:187717] {CVE-2022-24448}
  - Revert "NFSv4: Handle the special Linux file open access mode" (ChenXiaoSong) [task:187717] {CVE-2022-24448}
  - ovl: adhere to the vfs_ vs. ovl_do_ conventions for xattrs (Miklos Szeredi) [task:186656] {CVE-2023-32629}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.45.v2101
changelog:
  - perf: Fix perf_event_validate_size() (Peter Zijlstra) [task:199635] {CVE-2023-6931}
  - netfilter: nf_tables: Reject tables of unsupported family (Phil Sutter) [task:196095] {CVE-2023-6040}
  - USB: serial: pl2303: fix line-speed handling on newer chips (Johan Hovold) [bug:211186]
  - USB: serial: pl2303: add support for PL2303HXN (Charles Yeh) [bug:211186]
  - USB: serial: pl2303: fix tranceiver suspend mode (Johan Hovold) [bug:211186]
  - USB: serial: pl2303: fix non-supported xon/xoff (Johan Hovold) [bug:211186]
  - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (Sharath Srinivasan) [task:198453] {CVE-2024-23849}
  - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() (Tuo Li) [task:198457] {CVE-2024-24855}
  - dm: limit the number of targets and parameter size area (Mikulas Patocka) [task:198455] {CVE-2023-52429}
  - dm ioctl: log an error if the ioctl structure is corrupted (Mikulas Patocka) [task:198455]
  - jfs: fix log->bdev_handle null ptr deref in lbmStartIO (Lizhi Xu) [task:196809]
  - scsi: fcoe: pass in fcoe_rport structure instead of fc_rport_priv (Hannes Reinecke) [task:197881]
  - scsi: libfc: Whitespace cleanup in libfc.h (Hannes Reinecke) [task:197881]
  - scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs (Yihang Li) [task:196398]
  - drm/atomic: Fix potential use-after-free in nonblocking commits (Daniel Vetter) [task:196093] {CVE-2023-51043}
  - drm/amdgpu: Fix potential fence use-after-free v2 (shanzhulig) [task:196092] {CVE-2023-51042}
  - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (Krzysztof Kozlowski) [task:196011] {CVE-2023-46343}
  - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (Dan Carpenter) [task:196363] {CVE-2024-0607}
  - block: fix NULL pointer dereference in account statistics with IDE (Logan Gunthorpe) [task:196111]
  - block: account statistics for passthrough requests (Logan Gunthorpe) [task:196111]
  - machine_t: Limit specific architecture judgment functions (Jackie Liu)
  - net: hns3: fix reset delay time to avoid configuration timeout (Jie Wang) [task:182918]
  - stmmac: remove is_ft_mcu_ready when getting mac addr from nvmem (luyun) [task:18023, bug:210342]
  - tty: fix hang on tty device with no_room set (Hui Li) [task:190651]
  - smb: client: fix potential OOB in smb2_dump_detail() (Paulo Alcantara) [task:195442] {CVE-2023-6610}
  - smb: client: fix OOB in receive_encrypted_standard() (Paulo Alcantara) [task:196094] {CVE-2024-0565}
  - media: v4l2-mem2mem: fix epoll() by calling poll_wait first (Hans Verkuil) [task:193171]
  - net/sched: cbs: Fix not adding cbs instance to list (Vinicius Costa Gomes) [task:193171]
  - sctp: fix potential deadlock on &net->sctp.addr_wq_lock (Chengfeng Ye) [task:196364] {CVE-2024-0639}
  - kernel.spec: redefine the base address of the mips kdump kernel (JiangXiujie)
  - rpmbuild: add kdump support for mips platform (JiangXiujie)
  - mips/kdump: Increase high-end reserved memory to 512M or 1G (JiangXiujie) [bug:210121]
  - MIPS: kdump: Increase high-end reserved memory to 256M (Youling Tang) [bug:210121]
  - MIPS: kdump: Fix reserver memory (Youling Tang) [bug:210121]
  - MIPS: relocatable: Provide kaslr_offset() to get the kernel offset (Jinyang He) [bug:210121]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.46.v2101
changelog:
  - ACPI: tables: Simplify PPTT leaf node detection (Jeremy Linton) [task:207620]
  - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (Sean Christopherson) [task:206928] {CVE-2021-47061}
  - KVM: use struct_size() and flex_array_size() helpers in kvm_io_bus_unregister_dev() (Rustam Kovhaev) [task:206928]
  - overflow.h: Add flex_array_size() helper (Gustavo A. R. Silva) [task:162874, task:161899]
  - jfs: fix uaf in jfs_evict_inode (Edward Adam Davis) [task:207381] {CVE-2023-52600}
  - tipc: wait and exit until all work queues are done (Xin Long) [task:207225] {CVE-2021-47163}
  - team: fix null-ptr-deref when team device type is changed (Ziyang Xuan) [task:207278] {CVE-2023-52574}
  - perf/x86/lbr: Filter vsyscall addresses (JP Kobryn) [task:205164] {CVE-2023-52476}
  - UBSAN: array-index-out-of-bounds in dtSplitRoot (Osama Muhammad) [task:207406] {CVE-2023-52603}
  - s390/ptrace: handle setting of fpc register correctly (Heiko Carstens) [task:207408] {CVE-2023-52598}
  - KVM: s390: fix setting of fpc register (Heiko Carstens) [task:207400] {CVE-2023-52597}
  - PCI: switchtec: Fix stdev_release() crash after surprise hot remove (Daniel Stodden) [task:207403] {CVE-2023-52617}
  - switchtec: Add MRPC DMA mode support (Wesley Sheng) [task:207403]
  - can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer() (Oleksij Rempel) [task:205575]
  - ceph: fix deadlock or deadcode of misusing dget() (Xiubo Li) [task:207229] {CVE-2023-52583}
  - IB/ipoib: Fix mcast list locking (Daniel Vacek) [task:207280] {CVE-2023-52587}
  - RDMA/IPoIB: Fix error code return in ipoib_mcast_join (Jack Wang) [task:207280]
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Minsuk Kang) [task:207380] {CVE-2023-52594}
  - jfs: fix array-index-out-of-bounds in diNewExt (Edward Adam Davis) [task:207379] {CVE-2023-52599}
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree (Osama Muhammad) [task:207384] {CVE-2023-52604}
  - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Herbert Xu) [task:207385] {CVE-2023-52615}
  - powerpc/lib: Validate size for vector operations (Naveen N Rao) [task:207386] {CVE-2023-52606}
  - ocfs2: Avoid touching renamed directory if parent does not change (Jan Kara) [task:207378] {CVE-2023-52590}
  - fs: ocfs2: check status values (Artem Chernyshev) [task:207378]
  - pstore/ram: Fix crash when setting number of cpus to an odd number (Weichen Chen) [task:207388] {CVE-2023-52619}
  - SUNRPC: Fix a suspicious RCU usage warning (Anna Schumaker) [task:207390] {CVE-2023-52623}
  - jfs: fix slab-out-of-bounds Read in dtSearch (Manas Ghandat) [task:207383] {CVE-2023-52602}
  - crypto: scomp - fix req->dst buffer overflow (Chengming Zhou) [task:207387] {CVE-2023-52612}
  - crypto: scompress - initialize per-CPU variables on each CPU (Sebastian Andrzej Siewior) [task:207387]
  - crypto: scompress - Use per-CPU struct instead multiple variables (Sebastian Andrzej Siewior) [task:207387]
  - crypto: scompress - return proper error code for allocation failure (Sebastian Andrzej Siewior) [task:207387]
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Pan Bian) [task:207228] {CVE-2023-52566}
  - nvme-loop: fix memory leak in nvme_loop_create_ctrl() (Wu Bo) [task:206937] {CVE-2021-47074}
  - nvme-loop: don't put ctrl on nvme_init_ctrl error (Chaitanya Kulkarni) [task:206937]
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso) [task:206383] {CVE-2024-26642}
  - llc: make llc_ui_sendmsg() more robust against bonding changes (Eric Dumazet) [task:206384] {CVE-2024-26636}
  - cve-cal.sh: distinguish task and bug (Zhengyuan Liu)
  - Fix blk_mq_tags struct lock kabi issue (wolfgang huang) [task:206478]
  - mm: fix race between MADV_FREE reclaim and blkdev direct IO read (Mauricio Faria de Oliveira) [task:162162, task:204700]
  - ring-buffer: Have saved event hold the entire event (Steven Rostedt (Google)) [task:205154]
  - ring-buffer: Do not attempt to read past "commit" (Steven Rostedt (Google)) [task:205154] {CVE-2023-52501}
  - ring-buffer: Have rb_iter_head_event() handle concurrent writer (Steven Rostedt (VMware)) [task:205154]
  - ring-buffer: Add page_stamp to iterator for synchronization (Steven Rostedt (VMware)) [task:205154]
  - ring-buffer: Have ring_buffer_empty() not depend on tracing stopped (Steven Rostedt (VMware)) [task:205154]
  - sched/rt: Fix sysctl_sched_rr_timeslice intial value (Cyril Hrubis) [task:205110]
  - sched/rt: Disallow writing invalid values to sched_rt_period_us (Cyril Hrubis) [task:205110]
  - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset (Cyril Hrubis) [task:205110]
  - net: rds: acquire refcount on TCP sockets (Tetsuo Handa) [task:205876]
  - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (Eric Dumazet) [task:205232] {CVE-2023-52502}
  - nfc: constify several pointers to u8, char and sk_buff (Krzysztof Kozlowski) [task:205232]
  - drm: Don't unref the same fb many times by mistake due to deadlock handling (Ville Syrjälä) [task:205231] {CVE-2023-52486}
  - ipv6: init the accept_queue's spinlocks in inet6_create (Zhengchao Shao) [task:205163]
  - tcp: make sure init the accept_queue's spinlocks once (Zhengchao Shao) [task:205163] {CVE-2024-26614}
  - l2tp: pass correct message length to ip6_append_data (Tom Parkin) [task:205227]
  - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells) [task:205227] {CVE-2023-52527}
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe (Dinghao Liu) [task:205220] {CVE-2023-52510}
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Wen Gu) [task:205222] {CVE-2024-26615}
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida) [task:205218] {CVE-2023-52528}
  - tomoyo: fix UAF write bug in tomoyo_write_control() (Tetsuo Handa) [task:205063] {CVE-2024-26622}
  - net: nfc: llcp: Add lock when modifying device list (Jeremy Cline) [task:205036] {CVE-2023-52524}
  - nfc: nci: assert requested protocol is valid (Jeremy Cline) [task:205032] {CVE-2023-52507}
  - Input: powermate - fix use-after-free in powermate_config_complete (Javier Carrasco) [task:204918] {CVE-2023-52475}
  - llc: Drop support for ETH_P_TR_802_2. (Kuniyuki Iwashima) [task:204916] {CVE-2024-26635}
  - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (Eric Dumazet) [task:204917] {CVE-2024-26633}
  - ax25: Fix ax25 session cleanup problems (Duoming Zhou) [task:203789]
  - mm: slab: fix kmem_cache_create failed when sysfs node not destroyed (Nanyong Sun) [task:203804]
  - nfsd: fix use-after-free due to delegation race (J. Bruce Fields) [task:160493]
  - tty: n_gsm: check error while registering tty devices (Hillf Danton)
  - tty: n_gsm: add helpers to convert mux-num to/from tty-base (Martin Hundebøll)
  - USB: gadget: dummy-hcd: Fix errors in port-reset handling (Alan Stern)
  - bfs: extra sanity checking and static inode bitmap (Tigran Aivazian)
  - USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug (Alan Stern)
  - i2c: cadence: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201795] {CVE-2020-36784}
  - i2c: img-scb: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201797] {CVE-2020-36783}
  - i2c: sprd: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201796] {CVE-2020-36780}
  - PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter (Zhang Qilong) [task:201796] {CVE-2020-36780}
  - llc: call sock_orphan() at release time (Eric Dumazet) [task:203087] {CVE-2024-26625}
  - af_unix: fix lockdep positive in sk_diag_dump_icons() (Eric Dumazet) [task:203085] {CVE-2024-26624}
  - xen-netback: don't produce zero-size SKB frags (Jan Beulich) [task:203084] {CVE-2023-46838}
  - i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201794] {CVE-2020-36782}
  - net: sched: sch_teql: fix null-pointer dereference (Pavel Tikhomirov) [bug:215813]
  - rpmbuild: support srpm when need (Jackie Liu) [task:201386]
  - blk-mq: fix is_flush_rq (Ming Lei) [task:199095]
  - blk-mq: fix kernel panic during iterating over flush request (Ming Lei) [task:199095]
  - block: factor out a new helper from blk_rq_init() (Yu Kuai) [task:199095]
  - blk-mq: don't grab rq's refcount in blk_mq_check_expired() (Ming Lei) [task:199095]
  - blk-mq: clearing flush request reference in tags->rqs[] (Ming Lei) [task:199095]
  - blk-mq: clear stale request in tags->rq[] before freeing one request pool (Ming Lei) [task:199095]
  - blk-mq: grab rq->refcount before calling ->fn in blk_mq_tagset_busy_iter (Ming Lei) [task:199095]
  - loop: loop_set_status_from_info() check before assignment (Zhong Jinghua) [task:192988]
  - loop: Check for overflow while configuring loop (Siddh Raman Pant) [task:192988]
  - loop: Factor out configuring loop from status (Martijn Coenen) [task:192988]
  - Revert "loop: Check for overflow while configuring loop" (zhanggenjian) [task:192988]
  - loop: properly observe rotational flag of underlying device (Holger Hoffstätte) [task:192988]
  - loop: Refactor loop_set_status() size calculation (Martijn Coenen) [task:192988]
  - loop: Factor out setting loop device size (Martijn Coenen) [task:192988]
  - loop: Remove sector_t truncation checks (Martijn Coenen) [task:192988]
  - loop: Call loop_config_discard() only after new config is applied (Martijn Coenen) [task:192988]
  - Revert "loop: loop_set_status_from_info() check before assignment" (zhanggenjian) [task:192988]
  - KVM: arm64: pmu: Reset sample period on overflow handling (Marc Zyngier) [task:197911]
  - KVM: arm/arm64: Remove pmc->bitmask (Andrew Murray) [task:197911]
  - kylin/gmjstcm:Adapting TCM1.0 to x86 (wudandan) [task:195669]
  - netfilter: nf_tables: don't skip expired elements during walk (Florian Westphal) [task:179882] {CVE-2023-4244}
  - netfilter: nft_set_rbtree: Add missing expired checks (Phil Sutter) [task:179882]
  - EDAC/thunderx: Fix possible out-of-bounds string access (Arnd Bergmann) [task:200669] {CVE-2023-52464}
  - blk-mq: fix IO hang from sbitmap wakeup race (Ming Lei)
  - Makefile: add mips and loongarch SRCARCH (Li ZhiGang) [task:199827]
  - f2fs: explicitly null-terminate the xattr list (Eric Biggers) [task:200626] {CVE-2023-52436}
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Zhipeng Lu) [task:200671] {CVE-2023-52469}
  - net: qualcomm: rmnet: fix global oob in rmnet_policy (Lin Ma) [task:200745] {CVE-2024-26597}
  - sched/membarrier: reduce the ability to hammer on sys_membarrier (Linus Torvalds) [task:200749] {CVE-2024-26602}
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Tony Lindgren) [task:200752] {CVE-2024-26600}
  - binder: signal epoll threads of self-work (Carlos Llamas) [task:200750] {CVE-2024-26606}
  - CIFS: Fix retry mid list corruption on reconnects (Pavel Shilovsky) [task:197803]
  - Bluetooth: Fix atomicity violation in {min,max}_key_size_set (Gui-Dong Han) [task:199813] {CVE-2024-24860}
  - Bluetooth: Move {min,max}_key_size debugfs into hci_debugfs_create_le (Marcel Holtmann) [task:199813]
  - Bluetooth: Add support for LE ping feature (Spoorthi Ravishankar Koppad) [task:199813]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.47.v2101
changelog:
  - drm/amdgpu: validate the parameters of bo mapping operations more clearly (xinhui pan) [task:220691] {CVE-2024-26922}
  - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Chia-I Wu) [task:220691]
  - drm/amdgpu: check alignment on CPU page for bo map (Xℹ Ruoyao) [task:220691]
  - drm/amdgpu: Reset IH OVERFLOW_CLEAR bit (Friedrich Vock) [task:220691] {CVE-2024-26915}
  - LOONGSON: rtc-ls2x: fix a ls3a4000 rtc update trouble (zhangtianyang) [task:147526]
  - media: edia: dvbdev: fix a use-after-free (Zhipeng Lu) [task:220692] {CVE-2024-27043}
  - media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Hyunwoo Kim) [task:220692] {CVE-2022-45884}
  - media: dvbdev: fix error logic at dvb_register_device() (Mauro Carvalho Chehab) [task:220692]
  - media: dvbdev: Fix memleak in dvb_register_device (Dinghao Liu) [task:220692]
  - media: media/dvb: Use kmemdup rather than duplicating its implementation (Fuqian Huang) [task:220692]
  - media: dvbdev: remove double-unlock (Mauro Carvalho Chehab) [task:220692]
  - media: dvbdev: fix refcnt bug (Lin Ma) [task:220692]
  - media: dvbdev: adopts refcnt to avoid UAF (Lin Ma) [task:220692]
  - media: dvbdev: Fix memory leak in dvb_media_device_free() (Peilin Ye) [task:220692]
  - media: dvb-core: Fix double free in dvb_register_device() (Keita Suzuki) [task:220692]
  - mm: swap: fix race between free_swap_and_cache() and swapoff() (Ryan Roberts) [task:220694] {CVE-2024-26960}
  - swap: comments get_swap_device() with usage rule (Huang Ying) [task:220694]
  - iavf: free q_vectors before queues in iavf_disable_vf (Nicholas Nunley) [task:212529] {CVE-2021-47201}
  - uio: Fix use-after-free in uio_open (Guanghui Feng) [task:209257] {CVE-2023-52439}
  - net/smc: Fix possible access to freed memory in link clear (Yacan Liu) [task:219443] {CVE-2022-48673}
  - scsi: sd: Fix sd_do_mode_sense() buffer length handling (Damien Le Moal) [task:213954] {CVE-2021-47182}
  - scsi: core: Fix scsi_mode_sense() buffer length handling (Damien Le Moal) [task:213954] {CVE-2021-47182}
  - scsi: core: Reshuffle response handling in scsi_mode_sense() (Hannes Reinecke) [task:213954] {CVE-2021-47182}
  - scsi: core: Fixup calling convention for scsi_mode_sense() (Hannes Reinecke) [task:213954] {CVE-2021-47182}
  - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [task:217548] {CVE-2024-26982}
  - clk: zynq: Prevent null pointer dereference caused by kmalloc failure (Duoming Zhou) [task:217565] {CVE-2024-27037}
  - sysv: don't call sb_bread() with pointers_lock held (Tetsuo Handa) [task:219573]
  - afs: Increase buffer size in afs_update_volume_status() (Daniil Dulov) [task:210635] {CVE-2024-26736}
  - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion (Bart Van Assche) [task:210640]
  - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio (Bart Van Assche) [task:210640] {CVE-2024-26764}
  - Bluetooth: af_bluetooth: Fix deadlock (Luiz Augusto von Dentz) [task:214134] {CVE-2024-26886}
  - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Ziyang Xuan) [task:217550] {CVE-2024-27019}
  - net/mlx5e: Prevent deadlock while disabling aRFS (Carolina Jubran) [task:217553] {CVE-2024-27014}
  - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier (ZhaoLong Wang) [task:219460] {CVE-2023-52449}
  - speakup: Avoid crash on very long word (Samuel Thibault) [task:219451] {CVE-2024-26994}
  - f2fs: fix to avoid dirent corruption (Chao Yu) [task:219461] {CVE-2023-52444}
  - apparmor: avoid crash when parsed profile name is empty (Fedor Pchelkin) [task:219459] {CVE-2023-52443}
  - powerpc/pseries/memhp: Fix access beyond end of drmem array (Nathan Lynch) [task:219457] {CVE-2023-52451}
  - powerpc/pseries/memhotplug: Quieten some DLPAR operations (Laurent Dufour) [task:219457]
  - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (Hyunwoo Kim) [task:219456] {CVE-2024-27395}
  - net: openvswitch: ovs_ct_exit to be done under ovs_lock (Tonghao Zhang) [task:219456]
  - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value (Anastasia Belova) [task:219454] {CVE-2024-27051}
  - net: gtp: Fix Use-After-Free in gtp_dellink (Hyunwoo Kim) [task:219455] {CVE-2024-27396}
  - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays (Gabor Juhos) [task:219452] {CVE-2024-26966}
  - crypto: qat - resolve race condition during AER recovery (Damian Muszynski) [task:219450] {CVE-2024-26974}
  - crypto: qat - fix double free during reset (Svyatoslav Pankratov) [task:219450]
  - txgbe: Fix handling of NAPI budget when multiple queues are enabled per vector (xiaolinkui) [task:217379]
  - ngbe: Fix handling of NAPI budget when multiple queues are enabled per vector (xiaolinkui) [task:217379]
  - printk: disable optimistic spin during panic (Stephen Brennan) [task:217379]
  - printk: Add panic_in_progress helper (Stephen Brennan) [task:217379]
  - s390/zcrypt: fix reference counting on zcrypt card objects (Harald Freudenberger) [task:219444] {CVE-2024-26957}
  - xfs: wake commit waiters on CIL abort before log item abort (Brian Foster) [task:217956]
  - clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays (Gabor Juhos) [task:219446] {CVE-2024-26969}
  - vfio/platform: Create persistent IRQ handlers (Alex Williamson) [task:210628] {CVE-2024-26813}
  - vfio/platform: Disable virqfds on cleanup (Alex Williamson) [task:210628]
  - dm: call the resume method on internal suspend (Mikulas Patocka) [task:214159] {CVE-2024-26880}
  - quota: Fix potential NULL pointer dereference (Wang Jianjian) [task:214158] {CVE-2024-26878}
  - quota: check time limit when back out space/inode change (Chengguang Xu) [task:214158]
  - quota: code cleanup for __dquot_alloc_space() (Chengguang Xu) [task:214158]
  - jfs: fix array-index-out-of-bounds in dbAdjTree (Manas Ghandat) [task:207401] {CVE-2023-52601}
  - x86/xen: Add some null pointer checking to smp.c (Kunwu Chan) [task:214160] {CVE-2024-26908}
  - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Xiu Jianfeng) [task:164562]
  - xen/events: only register debug interrupt for 2-level events (Juergen Gross) [task:164562]
  - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled (Rahul Rameshbabu) [task:214161] {CVE-2023-52644}
  - b43: dma: Fix use true/false for bool type variable (Saurav Girepunje) [task:214161]
  - i40e: Fix VF MAC filter removal (Ivan Vecera) [task:214154]
  - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [task:214154] {CVE-2024-26830}
  - i40e: Add ensurance of MacVlan resources for every trusted VF (Karen Sornek) [task:214154]
  - i40e: Fix MAC address setting for a VF via Host/VM (Slawomir Laba) [task:214154]
  - i40e: Refactoring VF MAC filters counting to make more reliable (Aleksandr Loktionov) [task:62834]
  - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip (Hsin-Yi Wang) [task:214148] {CVE-2024-26874}
  - net: Set true network header for ECN decapsulation (Gilad Naaman) [task:214149]
  - net/bnx2x: Prevent access to a freed page in page_pool (Thinh Tran) [task:214143] {CVE-2024-26859}
  - vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang) [task:205064] {CVE-2022-48627}
  - ext4: avoid online resizing failures due to oversized flex bg (Baokun Li) [task:207394] {CVE-2023-52622}
  - ext4: unify the type of flexbg_size to unsigned int (Baokun Li) [task:207394] {CVE-2023-52622}
  - ext4: remove unnecessary check from alloc_flex_gd() (Baokun Li) [task:207394] {CVE-2023-52622}
  - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Oleg Nesterov) [task:210335] {CVE-2024-26686}
  - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Oleg Nesterov) [task:210335]
  - fs/proc: do_task_stat: use __for_each_thread() (Oleg Nesterov) [task:210335]
  - exit: Use the correct exit_code in /proc/<pid>/stat (Eric W. Biederman) [task:210335]
  - RDMA/rxe: Return CQE error if invalid lkey was supplied (Leon Romanovsky) [task:206932] {CVE-2021-47076}
  - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Lena Wang) [task:214040] {CVE-2024-26851}
  - IB/hfi1: Fix a memleak in init_credit_return (Zhipeng Lu) [task:214039] {CVE-2024-26839}
  - nfc: nci: free rx_data_reassembly skb on NCI device cleanup (Fedor Pchelkin) [task:213955] {CVE-2024-26825}
  - NFC: nci: fix memory leak in nci_allocate_device (Dongliang Mu) [task:158827]
  - hsr: Fix uninit-value access in hsr_get_node() (Shigeru Yoshida) [task:214042] {CVE-2024-26863}
  - net: hsr: fix placement of logical operator in a multi-line statement (Murali Karicheri) [task:214042]
  - amdkfd: use calloc instead of kzalloc to avoid integer overflow (Dave Airlie) [task:214061] {CVE-2024-26817}
  - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Nikita Zhandarovich) [task:214102] {CVE-2024-26901}
  - media: pvrusb2: fix uaf in pvr2_context_set_notify (Edward Adam Davis) [task:214062] {CVE-2024-26875}
  - media: pvrusb2: fix use after free on context disconnection (Ricardo B. Marliere) [task:214062]
  - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Armin Wolf) [task:214136] {CVE-2024-26894}
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Eric Dumazet) [task:214130] {CVE-2024-26852}
  - bpf: Fix hashtab overflow check on 32-bit arches (Toke Høiland-Jørgensen) [task:214132] {CVE-2024-26884}
  - scsi: target: core: Add TMF to tmr_list handling (Dmitry Bogdanov) [task:214137] {CVE-2024-26845}
  - arp: Prevent overflow in arp_req_get(). (Kuniyuki Iwashima) [task:210302] {CVE-2024-26733}
  - drm: bridge/panel: Cleanup connector on bridge detach (Paul Cercueil) [task:206930] {CVE-2021-47063}
  - sched: disabled sysctl_sched_optimize_enabled by default (liwanwu) [task:217846]
  - security/box: fix bug with can't get dir contents (yangzhao) [task:211220]
  - net: Prevent infinite while loop in skb_tx_hash() (Michael Chan) [task:218258]
  - mm/swap: fix race when skipping swapcache (Kairui Song) [task:210472] {CVE-2024-26759}
  - USB: core: Fix deadlock in usb_deauthorize_interface() (Alan Stern) [task:217563] {CVE-2024-26934}
  - usb: roles: fix NULL pointer issue when put module's reference (Xu Yang) [task:210461] {CVE-2024-26747}
  - media: rc: bpf attach/detach requires write permission (Sean Young) [task:214138] {CVE-2023-52642}
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Alan Stern) [task:217585] {CVE-2024-26993}
  - btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve (Filipe Manana) [task:214141] {CVE-2024-26904}
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Alan Stern) [task:217587] {CVE-2024-27059}
  - nilfs2: prevent kernel bug at submit_bh_wbc() (Ryusuke Konishi) [task:217584] {CVE-2024-26955}
  - nilfs2: use a more common logging style (Joe Perches) [task:217584]
  - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays (Gabor Juhos) [task:217583] {CVE-2024-26965}
  - scsi: qla2xxx: Fix command flush on cable pull (Quinn Tran) [task:217582] {CVE-2024-26931}
  - nilfs2: fix failure to detect DAT corruption in btree and direct mappings (Ryusuke Konishi) [task:217589] {CVE-2024-26956}
  - media: go7007: fix a memleak in go7007_load_encoder (Zhipeng Lu) [task:217575] {CVE-2024-27074}
  - media: v4l2-tpg: fix some memleaks in tpg_alloc (Zhipeng Lu) [task:217576] {CVE-2024-27078}
  - SUNRPC: fix some memleaks in gssx_dec_option_array (Zhipeng Lu) [task:217578] {CVE-2024-27388}
  - drm/tegra: dsi: Add missing check for of_find_device_by_node (Chen Ni) [task:217580] {CVE-2023-52650}
  - mm/swapfile.c: __swap_entry_free() always free 1 entry (Wei Yang) [task:217590]
  - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Huang Ying) [task:217590]
  - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Huang Ying) [task:217590]
  - serial: mxs-auart: add spinlock around changing cts state (Emil Kronborg) [task:217594] {CVE-2024-27000}
  - nouveau: fix instmem race condition around ptr stores (Dave Airlie) [task:217591] {CVE-2024-26984}
  - net/rds: fix possible cp null dereference (Mahmoud Adam) [task:217596]
  - net/rds: fix WARNING in rds_conn_connect_if_down (Edward Adam Davis) [task:217596] {CVE-2024-27024}
  - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler (Fei Shao) [task:217571] {CVE-2024-27028}
  - scsi: ufs: core: Improve SCSI abort handling (Bart Van Assche) [task:212521] {CVE-2021-47188}
  - nfp: flower: handle acti_netdevs allocation failure (Duoming Zhou) [task:217573] {CVE-2024-27046}
  - nilfs2: fix OOB in nilfs_set_de_type (Jeongjun Park) [task:217541] {CVE-2024-26981}
  - fat: fix uninitialized field in nostale filehandles (Jan Kara) [task:217540] {CVE-2024-26973}
  - tun: limit printing rate when illegal packet received by tun dev (Lei Chen) [task:217543] {CVE-2024-27013}
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Ziyang Xuan) [task:217564] {CVE-2024-27020}
  - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Pablo Neira Ayuso) [task:217564]
  - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [task:217566] {CVE-2024-26976}
  - drm: nv04: Fix out of bounds access (Mikhail Kobuk) [task:217570] {CVE-2024-27008}
  - vfio/pci: Create persistent INTx handler (Alex Williamson) [task:210644] {CVE-2024-26812}
  - vfio: Introduce interface to flush virqfd inject workqueue (Alex Williamson) [task:210644]
  - media: dvb-frontends: avoid stack overflow warnings with clang (Arnd Bergmann) [task:217558] {CVE-2024-27075}
  - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity (Zhipeng Lu) [task:217549] {CVE-2024-27077}
  - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (Rand Deeb) [task:214041] {CVE-2024-26855}
  - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi) [task:210638] {CVE-2024-26696}
  - binder: check offset alignment in binder_get_object() (Carlos Llamas) [task:216630] {CVE-2024-26926}
  - xen/events: close evtchn after mapping cleanup (Maximilian Heyne) [task:210357] {CVE-2024-26687}
  - wifi: mac80211: fix potential key use-after-free (Johannes Berg) [task:205233] {CVE-2023-52530}
  - xfs: check free AG space when making per-AG reservations (Darrick J. Wong) [task:215506]
  - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (Luís Henriques) [task:216634] {CVE-2022-48631}
  - media: xc4000: Fix atomicity violation in xc4000_get_frequency (Gui-Dong Han) [task:216633] {CVE-2024-24861}
  - RDMA/srpt: Do not register event handler until srpt device is fully setup (William Kucharski) [task:213762] {CVE-2024-26872}
  - btrfs: fix hang during unmount when stopping a space reclaim worker (Filipe Manana) [task:216635] {CVE-2022-48664}
  - Btrfs: fix crash during unmount due to race with delayed inode workers (Filipe Manana) [task:155707]
  - xhci: handle isoc Babble and Buffer Overrun events properly (Michal Pecio) [task:209228] {CVE-2024-26659}
  - xhci: process isoc TD properly when there was a transaction error mid TD. (Mathias Nyman) [task:209228]
  - xhci: Fix incorrect tracking of free space on transfer rings (Mathias Nyman) [task:209228]
  - xhci: store TD status in the td struct instead of passing it along (Mathias Nyman) [task:209228]
  - xhci: remove extra loop in interrupt context (Mathias Nyman) [task:209228]
  - xhci: get isochronous ring directly from endpoint structure (Mathias Nyman) [task:209228]
  - compiler_attributes.h: Add 'fallthrough' pseudo keyword for switch/case use (Joe Perches)
  - drm/amdgpu: restrict bo mapping within gpu address limits (Rajneesh Bhardwaj) [task:216641]
  - clk: Use parent node pointer during registration if necessary (Stephen Boyd) [task:215336]
  - driver core: Let dev_of_node() accept a NULL dev (Stephen Boyd) [task:215336]
  - clk: sunxi-ng: Unregister clocks/resets when unbinding (Samuel Holland) [task:212525, task:215462] {CVE-2021-47205}
  - Revert "clk: sunxi-ng: add support for the Allwinner A100 CCU" (Jiangshan Yi) [task:215462]
  - Revert "clk: sunxi-ng: Add support for the Allwinner H616 CCU" (Jiangshan Yi) [task:215462]
  - Revert "clk: sunxi-ng: Unregister clocks/resets when unbinding" (Jiangshan Yi) [task:215462]
  - clk: Add of_clk_hw_register() API for early clk drivers (Stephen Boyd) [task:212789, task:215462]
  - clk: Prepare for clk registration API that uses DT nodes (Stephen Boyd) [task:212789, task:215462]
  - securirty/kysec: fix dentry info mem leak (mengdehui) [bug:217795]
  - security/kysec: Add mount_lock when traversing mnt list (mengdehui) [bug:217795]
  - security/kysec: Add fault tolerance when sb_sec is NULL (mengdehui) [bug:217795]
  - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (Duoming Zhou) [task:209227, task:214895] {CVE-2024-26654}
  - ALSA: sh: Fix compile warning wrt const (Takashi Iwai) [task:155707, task:214895]
  - ALSA: aica: Fix a long-time build breakage (Takashi Iwai) [task:153627, task:214895]
  - OPENEULER: SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers (zhanglei) [task:205210]
  - scsi: qedf: Add pointer checks in qedf_update_link_speed() (Javed Hasan) [task:206931] {CVE-2021-47077}
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (Chun-Yi Lee) [task:194976] {CVE-2023-6270}
  - thermal: Fix NULL pointer dereferences in of_thermal_ functions (Subbaraman Narayanamurthy) [task:212533] {CVE-2021-47202}
  - tracing/trigger: Fix to return error if failed to alloc snapshot (Masami Hiramatsu (Google)) [task:212517] {CVE-2024-26920}
  - x86, relocs: Ignore relocations in .notes section (Kees Cook) [task:212412] {CVE-2024-26816}
  - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume (Omar Sandoval) [task:209259] {CVE-2024-26644}
  - PM / devfreq: Synchronize devfreq_monitor_[start/stop] (Mukesh Ojha) [task:209249] {CVE-2023-52635}
  - nilfs2: fix potential bug in end_buffer_async_write (Ryusuke Konishi) [task:210283] {CVE-2024-26685}
  - aoe: avoid potential deadlock at set_capacity (Maksim Kiselev) [task:210627] {CVE-2024-26775}
  - clk: sunxi-ng: Unregister clocks/resets when unbinding (Samuel Holland) [task:212525] {CVE-2021-47205}
  - clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock (Icenowy Zheng) [task:155707]
  - clk: sunxi-ng: Add support for the Allwinner H616 CCU (Andre Przywara) [task:212525]
  - clk: sunxi-ng: add support for the Allwinner A100 CCU (Yangtao Li) [task:212525]
  - clk: sunxi: Don't call clk_hw_get_name() on a hw that isn't registered (Stephen Boyd) [task:212525]
  - clk: sunxi-ng: v3s: add Allwinner V3 support (Icenowy Zheng) [task:212525]
  - clk: sunxi-ng: v3s: add the missing PLL_DDR1 (Icenowy Zheng) [task:153627]
  - clk: sunxi-ng: v3s: Use local parent references for CLK_FIXED_FACTOR (Chen-Yu Tsai) [task:212525]
  - clk: sunxi-ng: switch to of_clk_hw_register() for registering clks (Chen-Yu Tsai) [task:212525]
  - clk: sunxi-ng: h6: Preset hdmi-cec clock parent (Jernej Skrabec) [task:212525]
  - clk: sunxi-ng: f1c100s: fix USB PHY gate bit offset (Icenowy Zheng) [task:212525]
  - clk: sunxi-ng: add support for suniv F1C100s SoC (Mesih Kilinc) [task:212525]
  - x86/alternatives: Disable KASAN in apply_alternatives() (Kirill A. Shutemov) [task:205153] {CVE-2023-52504}
  - binder: fix race between mmput() and do_exit() (Carlos Llamas) [task:207402] {CVE-2023-52609}
  - reiserfs: Avoid touching renamed directory if parent does not change (Jan Kara) [task:207282] {CVE-2023-52591}
  - bnxt_en: Fix RX consumer index logic in the error path. (Michael Chan) [task:206925] {CVE-2021-47015}
  - bnxt_en: Reduce unnecessary message log during RX errors. (Michael Chan) [task:206925]
  - md: don't clear MD_RECOVERY_FROZEN for new dm-raid until resume (Yu Kuai) [task:210625]
  - md: Don't ignore suspended array in md_check_recovery() (Yu Kuai) [task:210625] {CVE-2024-26758}
  - vfio/pci: Lock external INTx masking ops (Alex Williamson) [task:210634] {CVE-2024-26810}
  - rt2x00: initialize last_reset (Stanislaw Gruszka) [task:207285]
  - rt2x00: clear IV's on start to fix AP mode regression (Stanislaw Gruszka) [task:207285] {CVE-2023-52595}
  - rt2x00: add restart hw (Stanislaw Gruszka) [task:207285]
  - rt2800: add pre_reset_hw callback (Stanislaw Gruszka) [task:207285]
  - rt2800: initial watchdog implementation (Stanislaw Gruszka) [task:207285]
  - rt2800: add helpers for reading dma done index (Stanislaw Gruszka) [task:207285]
  - rt2x00: allow to specify watchdog interval (Stanislaw Gruszka) [task:207285]
  - rt2x00: use different txstatus timeouts when flushing (Stanislaw Gruszka) [task:207285]
  - rt2x00: do not check for txstatus timeout every time on tasklet (Stanislaw Gruszka) [task:207285]
  - rt2800mmio: use txdone/txstatus routines from lib (Stanislaw Gruszka) [task:207285]
  - rt2800: move usb specific txdone/txstatus routines to rt2800lib (Stanislaw Gruszka) [task:207285]
  - net/smc: remove device from smcd_dev_list after failed device_add() (Julian Wiedmann) [task:207216] {CVE-2021-47143}
  - KVM: Destroy target device if coalesced MMIO unregistration fails (Sean Christopherson) [task:206929] {CVE-2021-47060}
  - KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (Kefeng Wang) [task:206929] {CVE-2021-47060}
  - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed (Sean Christopherson) [task:206929] {CVE-2021-47060}
  - ubi: Check for too small LEB size in VTBL code (Richard Weinberger) [task:212058] {CVE-2024-25739}
  - Bluetooth: Fix TOCTOU in HCI debugfs implementation (Bastien Nocera) [task:212057] {CVE-2024-24859}
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (Yuxuan Hu) [task:212059] {CVE-2024-22099}
  - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (Ziqi Zhao) [task:210651] {CVE-2023-52638}
  - net: rds: use maybe_get_net() when acquiring refcount on TCP sockets (Tetsuo Handa) [task:209413]
  - asix: fix wrong return value in asix_check_host_enable() (Pavel Skripkin) [task:206939]
  - asix: fix uninit-value in asix_mdio_read() (Pavel Skripkin) [task:206939] {CVE-2021-47101}
  - net: asix: fix uninit value bugs (Pavel Skripkin) [task:206939]
  - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command (Michal Grzedzicki) [task:205228] {CVE-2023-52500}
  - tcp: fix race condition when creating child sockets from syncookies (Ricardo Dias) [task:162162]
  - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Kunwu Chan) [task:207382] {CVE-2023-52607}
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Xingyuan Mo) [task:210392] {CVE-2023-7042}
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Baokun Li) [task:210360] {CVE-2024-26773}
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Baokun Li) [task:210642] {CVE-2024-26772}
  - ext4: fix double-free of blocks due to wrong extents moved_len (Baokun Li) [task:210641] {CVE-2024-26704}
  - RDMA/srpt: Support specifying the srpt_service_guid parameter (Bart Van Assche) [task:210645] {CVE-2024-26744}
  - net: ip_tunnel: prevent perpetual headroom growth (Florian Westphal) [task:210646] {CVE-2024-26804}
  - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (Oleksij Rempel) [task:210648] {CVE-2023-52637}
  - can: j1939: j1939_sk_init(): set SOCK_RCU_FREE to call sk_destruct() after RCU is done (Oleksij Rempel) [task:210648]
  - fbdev: savage: Error out if pixclock equals zero (Fullway Wang) [task:210633] {CVE-2024-26778}
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Zach O'Keefe) [task:210632] {CVE-2024-26720}
  - wifi: mac80211: fix race condition on enabling fast-xmit (Felix Fietkau) [task:210626] {CVE-2024-26779}
  - dmaengine: ti: edma: Add some null pointer checks to the edma_probe (Kunwu Chan) [task:210482] {CVE-2024-26771}
  - btrfs: dev-replace: properly validate device names (David Sterba) [task:210624] {CVE-2024-26791}
  - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter (Ryosuke Yasuoka) [task:210464] {CVE-2024-26805}
  - fbdev: sis: Error out if pixclock equals zero (Fullway Wang) [task:210465] {CVE-2024-26777}
  - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [task:210432] {CVE-2024-26743}
  - Bluetooth: Avoid potential use-after-free in hci_error_reset (Ying Hsu) [task:210462] {CVE-2024-26801}
  - ipv6: sr: fix possible use-after-free and null-ptr-deref (Vasiliy Kovalev) [task:210463] {CVE-2024-26735}
  - gtp: fix use-after-free and null-ptr-deref in gtp_newlink() (Alexander Ofitserov) [task:210471] {CVE-2024-26793}
  - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() (Vasiliy Kovalev) [task:210471]
  - ARM: ep93xx: Add terminator to gpiod_lookup_table (Nikita Shubin) [task:210473] {CVE-2024-26751}
  - dm-crypt: don't modify the data when using authenticated encryption (Mikulas Patocka) [task:210478] {CVE-2024-26763}
  - nilfs2: fix data corruption in dsync block recovery for small block sizes (Ryusuke Konishi) [task:210301] {CVE-2024-26697}
  - usb: hub: Guard against accesses to uninitialized BOS descriptors (Ricardo Cañuelo) [task:205167] {CVE-2023-52477}
  - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (Hans de Goede) [task:205219] {CVE-2023-52478}
  - NFS: Fix an Oopsable condition in __nfs_pageio_add_request() (Trond Myklebust) [task:207226] {CVE-2021-47167}
  - ip6_vti: fix slab-use-after-free in decode_session6 (Zhengchao Shao) [task:205581]
  - ip_vti: fix potential slab-use-after-free in decode_session6 (Zhengchao Shao) [task:205581]
  - xfrm: fix slab-use-after-free in decode_session6 (Zhengchao Shao) [task:205581]
  - media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run (Zheng Wang) [task:204919] {CVE-2023-52491}
  - media: platform: Add mechanism to handle jpeg hardware's locking up (Xia Jiang) [task:204919]
  - media: platform: Improve power on and power off flow (Xia Jiang) [task:204919]
  - vfio/pci: Disable auto-enable of exclusive INTx IRQ (Alex Williamson) {CVE-2024-27437}
  - genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() (Barry Song)
  - media: vimc: stream: fix build by missing dev (Jackie Liu) [task:209415]
  - virtio-blk: remove VIRTIO_BLK_F_SCSI support (Christoph Hellwig) [task:209004]
  - net: prevent mss overflow in skb_segment() (Eric Dumazet) [task:209255] {CVE-2023-52435}
  - media: vimc: streamer: if kthread_stop fails, ignore the error (Dafna Hirschfeld) [task:209314]
  - tracing: Ensure visibility when inserting an element into tracing_map (Petr Pavlu) [task:209253] {CVE-2024-26645}
  - efi/arm: Show SMBIOS bank/device location in CPER and GHES error logs (Marcin Benka) [bug:218049]
  - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (Shigeru Yoshida) [task:209216] {CVE-2024-26663}
  - sr9800: Add check for usbnet_get_endpoints (Chen Ni) [task:209210] {CVE-2024-26651}
  - inet: read sk->sk_family once in inet_recv_error() (Eric Dumazet) [task:209235] {CVE-2024-26679}
  - ppp_async: limit MRU to 64K (Eric Dumazet) [task:209233] {CVE-2024-26675}
  - netfilter: nf_tables: disallow timeout for anonymous sets (Pablo Neira Ayuso) [task:207391] {CVE-2023-52620}
  - swapfile: fix soft lockup in scan_swap_map_slots (Chen Wandun) [task:183285]
  - Revert "i40e: The state of phy may not be correct during power-on" (xiaolinkui) [task:210775]
  - net: openvswitch: fix race on port output (Felix Huettner) [task:202729]
  - x86/kvm: Do not try to disable kvmclock if it was not enabled (Kirill A. Shutemov) [task:207214]
  - x86/kvm: Disable kvmclock on all CPUs on shutdown (Vitaly Kuznetsov) [task:207214] {CVE-2021-47110}
  - x86/kvm: Teardown PV features on boot CPU as well (Vitaly Kuznetsov) [task:206940] {CVE-2021-47112}
  - nvmet: set loop queue's segment boundary mask as PAGE_SIZE - 1 (pengcan) [task:174281, task:175051, task:175046, task:210749, bug:195690, bug:195682, bug:195676]
  - Revert "nvmet: fix building bvec from sg list" (pengcan) [task:174281, task:175051, task:175046, task:210749, bug:195690, bug:195682, bug:195676]
  - arm64/config: CONFIG_PHYTIUM_MBOX=m (chizhiling) [bug:221940]
  - OPENEULER: mailbox: add phytium mailbox driver (Chen Ziqiang) [bug:221940]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.48.v2101
changelog:
  - KVM: SVM: Add 5-level page table support for SVM (Wei Huang) [bug:197000]
  - net/mlx5: No command allowed when command interface is not ready (Huy Nguyen) [task:224111]
  - PHYTIUM: KVM: arm64: Move the clean of dcache to the map handler (zhanghao1) [task:218131]
  - stop_machine: Provide RCU quiescent state in multi_cpu_stop() (Paul E. McKenney) [task:221168]
  - nvmet: fix setting ns queue's segment boundary (pengcan) [task:219876]
  - Revert "Revert "nvmet: fix building bvec from sg list"" (pengcan) [task:219876]
  - kabi_whitelist: remove (un)register_ip_vs_scheduler symbol (chenyuan) [task:193083]
  - ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1 (Andrew Sy Kim) [task:193083]
  - ipvs: avoid expiring many connections from timer (Julian Anastasov) [task:193083]
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [task:198456] {CVE-2024-1086}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.49.v2101
changelog:
  - dma: fix kabi broken for introduce dma_max_mapping_size() (leixiang) [task:226458]
  - REDHAT: mm/memcg: Fix mem_cgroup_id_get_online() underflow problem (lihongfu) [task:193929]
  - REDHAT: mm/memcg: Free percpu stats memory of dying memcg's (Waiman Long) [task:193929]
  - mm: list_lru: set shrinker map bit when child nr_items is not zero (Yang Shi) [task:226549]
  - ext4: fix bug for rename with RENAME_WHITEOUT (yangerkun) [task:328134]
  - virtio-blk: fix implicit overflow on virtio_max_dma_size (zhenwei pi) [task:221853] {CVE-2023-52762}
  - virtio-blk: support per-device queue depth (Joseph Qi) [task:221853]
  - virtio-blk: Consider virtio_max_dma_size() for maximum segment size (Joerg Roedel) [task:176679]
  - virtio: Introduce virtio_max_dma_size() (Joerg Roedel) [task:176679]
  - dma: Introduce dma_max_mapping_size() (Joerg Roedel) [task:176679]
  - swiotlb: Add is_swiotlb_active() function (Joerg Roedel) [task:176679]
  - swiotlb: Introduce swiotlb_max_mapping_size() (Joerg Roedel) [task:176679]
  - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() (Valentine Fatiev) [task:223066]
  - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path (Valentine Fatiev) [task:223066] {CVE-2021-47438}
  - net/mlx5: Fix mlx5_core_destroy_cq() error flow (Yishai Hadas) [task:223066]
  - spec: enable kabi check (Zhengyuan Liu) [task:224852]
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (Saurav Kashyap) [task:224219] {CVE-2024-36919}
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Kuniyuki Iwashima) [task:224221] {CVE-2024-36904}
  - tipc: fix UAF in error path (Paolo Abeni) [task:224223] {CVE-2024-36886}
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Eric Dumazet) [task:224225] {CVE-2024-36902}
  - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (Wesley Cheng) [task:224213] {CVE-2024-36894}
  - usb: gadget: f_fs: use io_data->status consistently (John Keeping) [task:224213]
  - pinctrl: core: delete incorrect free in pinctrl_enable() (Dan Carpenter) [task:224212] {CVE-2024-36940}
  - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) [task:221819] {CVE-2021-47386}
  - hwmon: (w83791d) convert to use devm_i2c_new_dummy_device (Wolfram Sang) [task:221819]
  - net: fix out-of-bounds access in ops_init (Thadeu Lima de Souza Cascardo) [task:224208] {CVE-2024-36883}
  - tcp: properly terminate timers for kernel sockets (Eric Dumazet) [task:223109] {CVE-2024-35910}
  - mptcp: add sk_stop_timer_sync helper (Geliang Tang) [task:223109]
  - bonding: stop the device in bond_setup_by_slave() (Eric Dumazet) [task:223073] {CVE-2023-52784}
  - bonding: reset bond's flags when down link is P2P device (Hangbin Liu) [task:223073]
  - wifi: nl80211: don't free NULL coalescing rule (Johannes Berg) [task:224195] {CVE-2024-36941}
  - Julia Lawall reported this null pointer dereference, this should fix it. (Mike Marshall) [task:224194] {CVE-2024-36023}
  - orangefs: Fix sb refcount leak when allocate sb info failed. (Chenyuan Mi) [task:224194]
  - orangefs: set up and use backing_dev_info (Martin Brandenburg) [task:224194]
  - dyndbg: fix old BUG_ON in >control parser (Jim Cromie) [task:223134] {CVE-2024-35947}
  - btrfs: send: handle path ref underflow in header iterate_inode_ref() (David Sterba) [task:223135] {CVE-2024-35935}
  - drm/amd/display: Avoid NULL dereference of timing generator (Wayne Lin) [task:222113] {CVE-2023-52753}
  - ax25: fix use-after-free bugs caused by ax25_ds_del_timer (Duoming Zhou) [task:222117] {CVE-2024-35887}
  - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Harshit Mogalapalli) [task:223052] {CVE-2024-35944}
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (Wenchao Hao) [task:223057] {CVE-2023-52809}
  - pwm: Fix double shift bug (Dan Carpenter) [task:223061] {CVE-2023-52756}
  - mm, slub: fix potential memoryleak in kmem_cache_open() (Miaohe Lin) [task:223062] {CVE-2021-47466}
  - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (Jia-Ju Bai) [task:223064] {CVE-2023-52855}
  - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (Ziyang Xuan) [task:223071] {CVE-2021-47459}
  - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Ping-Ke Shih) [task:223076] {CVE-2023-52832}
  - media: bttv: fix use after free error due to btv->timeout timer (Zheng Wang) [task:223078] {CVE-2023-52847}
  - thermal: core: prevent potential string overflow (Dan Carpenter) [task:223081] {CVE-2023-52868}
  - usb: udc: remove warning when queue disabled ep (yuan linyu) [task:223085] {CVE-2024-35822}
  - Bluetooth: btintel: Fixe build regression (Luiz Augusto von Dentz) [task:223087]
  - Bluetooth: btintel: Fix null ptr deref in btintel_read_version (Edward Adam Davis) [task:223087] {CVE-2024-35933}
  - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Shigeru Yoshida) [task:223088] {CVE-2023-52845}
  - jfs: fix array-index-out-of-bounds in dbFindLeaf (Manas Ghandat) [task:223091] {CVE-2023-52799}
  - dma-debug: prevent an error message from causing runtime problems (Hamza Mahfooz) [task:223100] {CVE-2021-47374}
  - dma-debug: report -EEXIST errors in add_dma_entry (Hamza Mahfooz) [task:223100]
  - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) [task:223098] {CVE-2021-47385}
  - hwmon: (w83792d) convert to use devm_i2c_new_dummy_device (Wolfram Sang) [task:223098]
  - net/mlx5e: fix a double-free in arfs_create_groups (Zhipeng Lu) [task:223101] {CVE-2024-35835}
  - net/mlx5: Use kfree(ft->g) in arfs_create_groups() (Denis Efremov) [task:223101]
  - ubifs: Set page uptodate in the correct place (Matthew Wilcox (Oracle)) [task:223108] {CVE-2024-35821}
  - hid: cp2112: Fix duplicate workqueue initialization (Danny Kaehn) [task:223106] {CVE-2023-52853}
  - HID: cp2112: Use irqchip template (Linus Walleij) [task:223106]
  - soc: fsl: qbman: Always disable interrupts when taking cgr_lock (Sean Anderson) [task:223111] {CVE-2024-35806}
  - raid1: fix use-after-free for original bio in raid1_write_request() (Yu Kuai) [task:223112] {CVE-2024-35979}
  - md/raid1: free the r1bio before waiting for blocked rdev (Xueshi Hu) [task:223112]
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Felix Fietkau) [task:223119] {CVE-2024-35789}
  - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Justin Tee) [task:223120] {CVE-2024-35930}
  - PCI/PM: Drain runtime-idle callbacks before driver removal (Rafael J. Wysocki) [task:223117] {CVE-2024-35809}
  - PCI: Drop pci_device_remove() test of pci_dev->driver (Uwe Kleine-König) [task:223117]
  - net/sched: act_skbmod: prevent kernel-infoleak (Eric Dumazet) [task:223125] {CVE-2024-35893}
  - irqchip/gic-v3-its: Prevent double free on error (Guanrui Huang) [task:222083] {CVE-2024-35847}
  - irqchip/gic-v3-its: Fix potential VPE leak on error (Kaige Fu)
  - ext4: fix corruption during on-line resize (Maximilian Heyne) [task:222107] {CVE-2024-35807}
  - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Kemeng Shi) [task:222107]
  - block: prevent division by zero in blk_rq_stat_sum() (Roman Smirnov) [task:222081] {CVE-2024-35925}
  - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Sindhu Devale) [task:222091] {CVE-2024-36004}
  - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) [task:222075] {CVE-2021-47384}
  - hwmon: (w83793d) convert to use devm_i2c_new_dummy_device (Wolfram Sang) [task:222075]
  - i2c: add newly exported functions to the header, too (Wolfram Sang) [task:222075]
  - i2c: core: add device-managed version of i2c_new_dummy (Heiner Kallweit) [task:222075]
  - i2c: core: improve return value handling of i2c_new_device and i2c_new_dummy (Heiner Kallweit) [task:222075]
  - vt: fix unicode buffer corruption when deleting characters (Nicolas Pitre) [task:222055] {CVE-2024-35823}
  - platform/x86: wmi: Fix opening of char device (Armin Wolf) [task:222045] {CVE-2023-52864}
  - platform/x86: wmi: remove unnecessary initializations (Barnabás Pőcze) [task:222045]
  - ALSA: hda: Fix possible null-ptr-deref when assigning a stream (Cezary Rojewski) [task:222049] {CVE-2023-52806}
  - cifs: Fix use-after-free in rdata->read_into_pages() (ZhaoLong Wang) [task:222065] {CVE-2023-52741}
  - s390/dasd: protect device queue against concurrent access (Jan Höppner) [task:222069] {CVE-2023-52774}
  - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() (Zhipeng Lu) [task:222033] {CVE-2024-35828}
  - tty: vcc: Add check for kstrdup() in vcc_probe() (Yi Yang) [task:222029] {CVE-2023-52789}
  - x86/mm/pat: fix VM_PAT handling in COW mappings (David Hildenbrand) [task:222013] {CVE-2024-35877}
  - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ido Schimmel) [task:219462] {CVE-2024-26586}
  - perf/core: Bail out early if the request AUX area is out of bound (Shuai Xue) [task:222041] {CVE-2023-52835}
  - arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer (Nathan Chancellor) [task:222027] {CVE-2023-52750}
  - arm64: Make CPU_BIG_ENDIAN depend on ld.bfd or ld.lld 13.0.0+ (Nathan Chancellor) [task:222027]
  - arm64: Kconfig: add a choice for endianness (Anders Roxell) [task:222027]
  - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (Dan Carpenter) [task:222005] {CVE-2023-52840}
  - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data (Jiasheng Jiang) [task:222009] {CVE-2023-52865}
  - Bluetooth: Fix memory leak in hci_req_sync_complete() (Dmitry Antipov) [task:222003] {CVE-2024-35978}
  - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() (Dominique Martinet) [task:222001]
  - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (David Sterba) [task:222001] {CVE-2024-35936}
  - erspan: make sure erspan_base_hdr is present in skb->head (Eric Dumazet) [task:221973] {CVE-2024-35888}
  - ip_gre: do not report erspan version on GRE interface (Hangbin Liu) [task:221973]
  - erspan: Check IFLA_GRE_ERSPAN_VER is set. (William Tu) [task:221973]
  - erspan: Add type I version 0 support. (William Tu) [task:221973]
  - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (Ryosuke Yasuoka) [task:221993]
  - nfc: nci: Fix uninit-value in nci_rx_work (Ryosuke Yasuoka) [task:221993]
  - nfc: nci: Fix kcov check in nci_rx_work() (Tetsuo Handa) [task:221993]
  - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet (Ryosuke Yasuoka) [task:221993] {CVE-2024-35915}
  - jfs: fix array-index-out-of-bounds in diAlloc (Manas Ghandat) [task:221969] {CVE-2023-52805}
  - media: tc358743: register v4l2 async device only after successful setup (Alexander Stein) [task:221967] {CVE-2024-35830}
  - md/raid5: fix atomicity violation in raid5_cache_count (Gui-Dong Han) [task:212055] {CVE-2024-23307}
  - dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock (Sergey Senozhatsky) [task:205035] {CVE-2023-52516}
  - dma-debug: make __dma_entry_alloc_check_leak() static (Jason Yan) [task:205035]
  - dma-debug: Make leak-like behaviour apparent (Robin Murphy) [task:205035]
  - dma-debug: Dynamically expand the dma_debug_entry pool (Robin Murphy) [task:205035]
  - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (Johannes Thumshirn) [task:221877] {CVE-2024-35849}
  - fbmon: prevent division by zero in fb_videomode_from_videomode() (Roman Smirnov) [task:221889] {CVE-2024-35922}
  - ipv6: Fix infinite recursion in fib6_dump_done(). (Kuniyuki Iwashima) [task:221895] {CVE-2024-35886}
  - net/mlx5: Properly link new fs rules into the tree (Cosmin Ratiu) [task:221917] {CVE-2024-35960}
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Rajeshwar R Shinde) [task:221919] {CVE-2023-52764}
  - llc: verify mac len before reading mac header (Willem de Bruijn) [task:221933] {CVE-2023-52843}
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [task:221945] {CVE-2024-35969}
  - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (Mario Limonciello) [task:221901] {CVE-2023-52818}
  - drm/radeon: possible buffer overflow (Konstantin Meskhidze) [task:221865] {CVE-2023-52867}
  - fs/jfs: Add validity check for db_maxag and db_agpref (Juntong Deng) [task:221861] {CVE-2023-52804}
  - mm: fix use-after-free bug when mm->mmap is reused after being freed (Suren Baghdasaryan) [task:217008]
  - mm: protect free_pgtables with mmap_lock write lock in exit_mmap (Suren Baghdasaryan) [task:217008]
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Ziyang Xuan) [task:221827] {CVE-2024-35898}
  - fs/jfs: Add check for negative db_l2nbperpage (Juntong Deng) [task:221929] {CVE-2023-52810}
  - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (Siddh Raman Pant) [task:221929]
  - fs: jfs: fix shift-out-of-bounds in dbAllocAG (Dongliang Mu) [task:164562]
  - jfs: fix divide error in dbNextAG (Pavel Skripkin) [task:162162]
  - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (Mario Limonciello) [task:221829] {CVE-2023-52819}
  - Bluetooth: Fix double free in hci_conn_cleanup (ZhengHan Wang) [task:221833] {CVE-2023-52830}
  - batman-adv: Avoid infinite loop trying to resize local TT (Sven Eckelmann) [task:221835] {CVE-2024-35982}
  - ALSA: usx2y: Don't call free_pages_exact() with NULL address (Takashi Iwai) [task:221837] {CVE-2021-47332}
  - ALSA: us122l: Use alloc_pages_exact() (Takashi Iwai) [task:221837]
  - net/sched: fix lockdep splat in qdisc_tree_reduce_backlog() (Eric Dumazet) [task:221845] {CVE-2024-35892}
  - locking/ww_mutex/test: Fix potential workqueue corruption (John Stultz) [task:221843] {CVE-2023-52836}
  - gfs2: ignore negated quota changes (Bob Peterson) [task:221849] {CVE-2023-52759}
  - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Alex Deucher) [task:221851]
  - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Qu Huang) [task:221851] {CVE-2023-52817}
  - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data (Jiasheng Jiang) [task:221847] {CVE-2023-52875}
  - netrom: Fix a data-race around sysctl_netrom_link_fails_count (Jason Xing) [task:220900] {CVE-2024-27420}
  - netrom: Fix a data-race around sysctl_netrom_transport_busy_delay (Jason Xing) [task:220866] {CVE-2024-27424}
  - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Kunwu Chan) [task:220898] {CVE-2023-52675}
  - rpmsg: virtio: Free driver_override when rpmsg_remove() (Xiaolei Wang) [task:220897] {CVE-2023-52670}
  - ACPI: video: check for error while searching for backlight device parent (Nikita Kiryushin) [task:220896] {CVE-2023-52693}
  - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() (Sergey Shtylyov) [task:220894] {CVE-2023-52685}
  - ACPI: LPIT: Avoid u32 multiplication overflow (Nikita Kiryushin) [task:220888] {CVE-2023-52683}
  - calipso: fix memory leak in netlbl_calipso_add_pass() (Gavrilov Ilia) [task:220887] {CVE-2023-52698}
  - netlabel: remove unused parameter in netlbl_netlink_auditinfo() (Zheng Yejian) [task:220887]
  - net: netlabel: Fix kerneldoc warnings (Andrew Lunn) [task:220887]
  - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries (Jason Xing) [task:220882] {CVE-2024-27426}
  - netfilter: nft_limit: reject configurations that cause integer overflow (Florian Westphal) [task:209247] {CVE-2024-26668}
  - netfilter: nft_limit: avoid possible divide error in nft_limit_init (Eric Dumazet)
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found. (Johan Carlsson) [task:220883] {CVE-2024-27436}
  - drm/amd/pm: fix a double-free in si_dpm_init (Zhipeng Lu) [task:220893] {CVE-2023-52691}
  - netrom: Fix a data-race around sysctl_netrom_routing_control (Jason Xing) [task:220890] {CVE-2024-27421}
  - usb: gadget: ncm: Fix handling of zero block length packets (Krishna Kurapati) [task:220889]
  - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs (Krishna Kurapati) [task:220889] {CVE-2024-27405}
  - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (Krishna Kurapati) [task:220889]
  - USB: gadget: f_ncm: Fix NDP16 datagram validation (Bryan O'Donoghue) [task:157172]
  - USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() (Brooke Basile) [task:157172]
  - powerpc/powernv: Add a null pointer check in opal_event_init() (Kunwu Chan) [task:220885] {CVE-2023-52686}
  - netrom: Fix data-races around sysctl_net_busy_read (Jason Xing) [task:220863] {CVE-2024-27419}
  - wifi: nl80211: reject iftype change with mesh ID change (Johannes Berg) [task:220865] {CVE-2024-27410}
  - netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay (Jason Xing) [task:220871] {CVE-2024-27425}
  - netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser (Jason Xing) [task:220876] {CVE-2024-27428}
  - efi/capsule-loader: fix incorrect allocation size (Arnd Bergmann) [task:220877] {CVE-2024-27413}
  - netrom: Fix a data-race around sysctl_netrom_transport_timeout (Jason Xing) [task:220880] {CVE-2024-27427}
  - netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout (Jason Xing) [task:220881] {CVE-2024-27422}
  - netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size (Jason Xing) [task:220881]
  - netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser (Jason Xing) [task:220878] {CVE-2024-27429}
  - netrom: Fix a data-race around sysctl_netrom_default_path_quality (Jason Xing) [task:220874] {CVE-2024-27430}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.50.v2101
changelog:
  - virtio_net: Add XDP frame size in two code paths (Jesper Dangaard Brouer) [bug:252011]
  - xdp: fix kabi broken of xdp_do_redirect (lingfuyi) [bug:252011]
  - xdp: Add frame size to xdp_buff (Jesper Dangaard Brouer) [bug:252011]
  - ext4: fix overflow in ext4_iomap_alloc() (Jan Kara) [task:343103]
  - ext4: Fix occasional generic/418 failure (Jan Kara) [task:343103]
  - ext4: do not block RWF_NOWAIT dio write on unallocated space (Jan Kara) [task:343103]
  - ext4: dio take shared inode lock when overwriting preallocated blocks (Zhang Yi) [task:343103]
  - ext4: optimize file overwrites (Ritesh Harjani) [task:343103]
  - ext4: Optimize ext4 DIO overwrites (Jan Kara) [task:343103]
  - ext4: Move to shared i_rwsem even without dioread_nolock mount opt (Ritesh Harjani) [task:343103]
  - ext4: Start with shared i_rwsem in case of DIO instead of exclusive (Ritesh Harjani) [task:343103]
  - ext4: introduce direct I/O write using iomap infrastructure (Matthew Bobrowski) [task:343103]
  - Revert "Revert "ext4: remove EXT4_STATE_DIOREAD_LOCK flag"" (Zhang Xiaoxu) [task:343103]
  - vfs: introduce file_modified() helper (Amir Goldstein) [task:343103]
  - ext4: remove unnecessary error check (Shi Siyuan) [task:343103]
  - ext4: update ext4_sync_file() to not use __generic_file_fsync() (Matthew Bobrowski) [task:343103]
  - ext4: move inode extension check out from ext4_iomap_alloc() (Matthew Bobrowski) [task:343103]
  - ext4: move inode extension/truncate code out from ->iomap_end() callback (Matthew Bobrowski) [task:343103]
  - ext4: introduce direct I/O read using iomap infrastructure (Matthew Bobrowski) [task:343103]
  - ext4: introduce new callback for IOMAP_REPORT (Matthew Bobrowski) [task:343103]
  - ext4: split IOMAP_WRITE branch in ext4_iomap_begin() into helper (Matthew Bobrowski) [task:343103]
  - ext4: move set iomap routines into a separate helper ext4_set_iomap() (Matthew Bobrowski) [task:343103]
  - ext4: update direct I/O read lock pattern for IOCB_NOWAIT (Matthew Bobrowski) [task:343103]
  - ext4: reorder map.m_flags checks within ext4_iomap_begin() (Matthew Bobrowski) [task:343103]
  - iomap: Allow forcing of waiting for running DIO in iomap_dio_rw() (Jan Kara) [task:343103]
  - iomap: move the iomap_dio_rw ->end_io callback into a structure (Christoph Hellwig) [task:343103]
  - iomap: split size and error for iomap_dio_rw ->end_io (Matthew Bobrowski) [task:343103]
  - Revert "Revert "ext4: Allow parallel DIO reads"" (Shida Zhang) [task:343103]
  - ipvlan: add ipvlan_route_v6_outbound() helper (Eric Dumazet) [task:223092] {CVE-2023-52796}
  - tipc: fix kernel warning when sending SYN message (Tung Nguyen) [task:225562] {CVE-2023-52700}
  - tipc: fix implicit-connect for SYN+ (Xin Long) [task:225562]
  - net: annotate data-race in neigh_output() (Eric Dumazet) [task:205566]
  - neighbor: Add skip_cache argument to neigh_output (David Ahern) [task:205566]
  - fanotify: Avoid softlockups when reading many events (Jan Kara) [task:340889]
  - xfs: fix inode allocation block res calculation precedence (Brian Foster) [task:334329]
  - nilfs2: fix potential kernel bug due to lack of writeback flag waiting (Ryusuke Konishi) [task:332240] {CVE-2024-37078}
  - OPENEULER: tcp/dccp: Add another way to allocate local ports in connect() (xiaolinkui) [task:336487]
  - net/tls: Fix flipped sign in tls_err_abort() calls (Daniel Jordan) [task:223103] {CVE-2021-47496}
  - tls: Fix socket mem accounting error under async encryption (Vakul Garg) [task:82911]
  - net/tls: Add support for async decryption of tls records (Vakul Garg) [task:82911]
  - net/tls: Add support for async encryption of records for performance (Vakul Garg) [task:82911]
  - block: recalculate segment count for multi-segment discards correctly (David Jeffery) [task:327413]
  - OPENEULER: iomap: add support to track dirty state of sub pages (Shida Zhang) [task:192649]
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Kuniyuki Iwashima) [task:328482] {CVE-2024-36933}
  - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Dong Chenchen) [task:166857]
  - net/mlx5e: Fix page reclaim for dead peer hairpin (Dima Chumak) [task:225574] {CVE-2021-47246}
  - ipvlan: properly track tx_errors (Eric Dumazet) [task:223092]
  - net: add DEV_STATS_READ() helper (Eric Dumazet) [task:223092]
  - macsec: use DEV_STATS_INC() (Eric Dumazet) [task:223092]
  - macsec: Fix traffic counters/statistics (Clayton Yager) [task:223092]
  - macsec: avoid use-after-free in macsec_handle_frame() (Eric Dumazet) [task:158034]
  - net: fix kabi broken in struct net_device_stats (taowei) [task:204908]
  - net: add atomic_long_t to net_device_stats fields (Eric Dumazet) [task:204908]
  - jdb2: Don't refuse invalidation of already invalidated buffers (Jan Kara) [task:226534]
  - netfilter: conntrack: serialize hash resizes and cleanups (Eric Dumazet) [task:226456] {CVE-2021-47408}
  - ipv6: prevent NULL dereference in ip6_output() (Eric Dumazet) [task:226456]
  - ipv6: annotate data-races around cnf.disable_ipv6 (Eric Dumazet) [task:226456]
  - net: fix __dst_negative_advice() race (Eric Dumazet) [task:328468] {CVE-2024-36971}
  - net: annotate data-races around sk->sk_dst_pending_confirm (Eric Dumazet) [task:328468]
  - ext4: fix underflow in ext4_max_bitmap_size() (Zhang Yi) [bug:233580]
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Yue Haibing) [task:330556] {CVE-2024-33621}
  - usb: cdc-wdm: close race between read and workqueue (Oliver Neukum) [task:327804] {CVE-2024-35812}
  - wifi: iwlwifi: read txq->read_ptr under lock (Johannes Berg) [task:224209] {CVE-2024-36922}
  - tcp: fix page frag corruption on page fault (Paolo Abeni) [task:225588] {CVE-2021-47544}
  - s390/ap: Fix crash in AP internal function modify_bitmap() (Harald Freudenberger) [task:332252] {CVE-2024-38661}
  - media: lgdt3306a: Add a check against null-pointer-def (Zheyu Ma) [task:332251] {CVE-2022-48772}
  - media: dvb-frontends: Use kmemdup instead of duplicating its function (zhong jiang) [task:332251]
  - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Baokun Li) [task:332253] {CVE-2024-39276}
  - Input: cyapa - add missing input core locking to suspend/resume functions (Marek Szyprowski) [task:332207] {CVE-2023-52884}
  - net/9p: fix uninit-value in p9_client_rpc() (Nikita Zhandarovich) [task:332238] {CVE-2024-39301}
  - of: module: add buffer overflow check in of_modalias() (Sergey Shtylyov) [task:330476] {CVE-2024-38541}
  - mlxsw: core_thermal: Fix fan speed in maximum cooling state (Ido Schimmel) [task:223114]
  - mlxsw: thermal: Fix out-of-bounds memory accesses (Ido Schimmel) [task:223114] {CVE-2021-47441}
  - mlxsw: core: Extend cooling device with cooling levels (Vadim Pasternak) [task:223114]
  - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [task:223105] {CVE-2021-47307}
  - usb-storage: alauda: Check whether the media is initialized (Shichao Lai) [task:330542] {CVE-2024-38619}
  - drm/mediatek: Add 0 size check to mtk_drm_gem_obj (Justin Green) [task:330472] {CVE-2024-38549}
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Jiri Pirko) [task:330562] {CVE-2024-37353}
  - ipv6: sr: fix invalid unregister error path (Hangbin Liu) [task:330500] {CVE-2024-38612}
  - wifi: carl9170: add a proper sanity check for endpoints (Nikita Zhandarovich) [task:330490] {CVE-2024-38567}
  - usb: xhci-plat: fix crash when suspend if remote wake enable (Frank Li) [task:330356] {CVE-2022-48761}
  - usb: host: xhci-plat: add .suspend_quirk for struct xhci_plat_priv (Peter Chen) [task:330356]
  - of: module: prevent NULL pointer dereference in vsnprintf() (Sergey Shtylyov) [task:327802] {CVE-2024-35878}
  - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (Dongli Zhang) [task:330555] {CVE-2024-31076}
  - inet_diag: fix kernel-infoleak for UDP sockets (Eric Dumazet) [task:330553] {CVE-2021-47597}
  - inet_diag: use jiffies_delta_to_msecs() (Eric Dumazet) [task:330553]
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Eric Dumazet) [task:330559] {CVE-2024-36286}
  - media: stk1160: fix bounds checking in stk1160_copy_video() (Dan Carpenter) [task:330567] {CVE-2024-38621}
  - serial: max3100: Update uart_driver_registered on driver removal (Andy Shevchenko) [task:330568] {CVE-2024-38633}
  - greybus: lights: check return of get_channel_from_mode (Rui Miguel Silva) [task:330569] {CVE-2024-38637}
  - nilfs2: fix potential hang in nilfs_detach_log_writer() (Ryusuke Konishi) [task:330571] {CVE-2024-38582}
  - nilfs2: fix unexpected freezing of nilfs_segctor_sync() (Ryusuke Konishi) [task:330571]
  - watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger (Duoming Zhou) [task:330572] {CVE-2024-38630}
  - serial: max3100: Lock port->lock when calling uart_handle_cts_change() (Andy Shevchenko) [task:330573] {CVE-2024-38634}
  - dma-buf/sw-sync: don't enable IRQ from sync_print_obj() (Tetsuo Handa) [task:330574] {CVE-2024-38780}
  - stm class: Fix a double free in stm_register_device() (Dan Carpenter) [task:330576] {CVE-2024-38627}
  - enic: Validate length of nl attributes in enic_set_vf_port (Roded Zats) [task:330578] {CVE-2024-38659}
  - scsi: qedf: Ensure the copied buf is NUL terminated (Bui Quang Minh) [task:330528] {CVE-2024-38559}
  - speakup: Fix sizeof() vs ARRAY_SIZE() bug (Dan Carpenter) [task:330524] {CVE-2024-38587}
  - crypto: bcm - Fix pointer arithmetic (Aleksandr Mishin) [task:330302] {CVE-2024-38579}
  - jffs2: prevent xattr node from overflowing the eraseblock (Ilya Denisyev) [task:330534] {CVE-2024-38599}
  - ALSA: timer: Set lower bound of start tick time (Takashi Iwai) [task:330536] {CVE-2024-38618}
  - wifi: ar5523: enable proper endpoint verification (Nikita Zhandarovich) [task:330532] {CVE-2024-38565}
  - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Breno Leitao) [task:330510] {CVE-2024-38596}
  - drm/amd/display: Fix potential index out of bounds in color transformation function (Srinivasan Shanmugam) [task:330516] {CVE-2024-38552}
  - virtio-net: Add validation for used length (Xie Yongji) [task:221959] {CVE-2021-47352}
  - PM / devfreq: Fix buffer overflow in trans_stat_show (Christian Marangi) [task:207389] {CVE-2023-52614}
  - btrfs: don't drop extent_map for free space inode on write error (Josef Bacik) [task:210433] {CVE-2024-26726}
  - fs/9p: fix uninitialized values during inode evict (Eric Van Hensbergen) [task:224205] {CVE-2024-36923}
  - x86/signal: Detect and prevent an alternate signal stack overflow (Chang S. Bae) [task:223059] {CVE-2021-47326}
  - net/smc: fix compile error in smc_vlan_by_tcpsk function (weirongguang) [task:329030]
  - drm_lease.c: copy user-array safely (Philipp Stanner) [task:223074] {CVE-2023-52820}
  - drm/panel: fix a possible null pointer dereference (Ma Ke) [task:222109] {CVE-2023-52821}
  - drm/amdgpu: fix gart.bo pin_count leak (Leslie Shi) [task:222035] {CVE-2021-47431}
  - lib/generic-radix-tree.c: Don't overflow in peek() (Kent Overstreet) [task:221979] {CVE-2021-47432}
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Thadeu Lima de Souza Cascardo) [task:225616] {CVE-2023-52880}
  - phonet/pep: fix racy skb_queue_empty() use (Rémi Denis-Courmont) [task:220864] {CVE-2024-27402}
  - i2c: smbus: fix NULL function pointer dereference (Wolfram Sang) [task:223077] {CVE-2024-35984}
  - i2c: core: remove level of indentation in i2c_transfer (Wolfram Sang) [task:223077]
  - i2c: core: remove outdated DEBUG output (Wolfram Sang) [task:223077]
  - usb: gadget: f_fs: change ep->status safe in ffs_epfile_io() (Linyu Yuan) [task:225394]
  - drm/sched: Avoid data corruptions (Andrey Grodzovsky) [task:223136] {CVE-2021-47354}
  - cpu/hotplug: Don't offline the last non-isolated CPU (Ran Xiaokai) [task:223118] {CVE-2023-52831}
  - cpu/hotplug: Prevent self deadlock on CPU hot-unplug (Thomas Gleixner) [task:223118] {CVE-2023-52831}
  - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Borislav Petkov (AMD)) [task:223094] {CVE-2024-35876}
  - iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() (Zhang Shurong) [task:223123] {CVE-2023-52802}
  - staging: rtl8712: fix use-after-free in rtl8712_dl_fw (Pavel Skripkin) [task:222111] {CVE-2021-47479}
  - phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet) [task:328460] {CVE-2024-36946}
  - net: sched: sch: Bounds check priority (Kees Cook) [task:222057] {CVE-2023-52734}
  - htb: use anonymous union for simplicity (Cong Wang) [task:222057]
  - media: imon: fix access to invalid resource for the second interface (Takashi Iwai) [task:222087] {CVE-2023-52754}
  - block: fix overflow in blk_ioctl_discard() (Li Nan) [task:328466] {CVE-2024-36917}
  - bna: ensure the copied buf is NUL terminated (Bui Quang Minh) [task:328454] {CVE-2024-36934}
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman) [task:328462] {CVE-2024-36950}
  - fs/9p: only translate RWX permissions for plain 9P2000 (Joakim Sindholt) [task:328470] {CVE-2024-36964}
  - drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin) [task:328443] {CVE-2024-36960}
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Eric Dumazet) [task:224189] {CVE-2024-36905}
  - tcp: remove redundant check on tskb (Colin Ian King) [task:224189]
  - .gitignore: Add compilation database file (Toru Komatsu)
  - of: unittest: Fix compile in the non-dynamic case (Christian A. Ehrhardt) [task:220891]
  - of: unittest: Fix of_count_phandle_with_args() expected value message (Geert Uytterhoeven) [task:220891]
  - of: Fix double free in of_parse_phandle_with_args_map (Christian A. Ehrhardt) [task:220891] {CVE-2023-52679}
  - of: unittest: fix EXPECT text for gpio hog errors (Frank Rowand) [task:220891]
  - of: gpio unittest kfree() wrong object (Frank Rowand) [task:220891]
  - of: unittest: make gpio overlay test dependent on CONFIG_OF_GPIO (Frank Rowand) [task:220891]
  - of: unittest: add overlay gpio test to catch gpio hog problem (Frank Rowand) [task:220891]
  - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (Eric Dumazet) [task:223050] {CVE-2024-35976}
  - net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() (Karsten Graul) [task:225614] {CVE-2021-47559}
  - powerpc/mm: Fix lockup on kernel exec fault (Christophe Leroy) [task:222047] {CVE-2021-47350}
  - soc: qcom: llcc: Handle a second device without data corruption (Uwe Kleine-König) [task:222019] {CVE-2023-52871}
  - i2c: dev: copy userspace array safely (Philipp Stanner) [task:223063] {CVE-2023-52758}
  - string.h: add array-wrappers for (v)memdup_user() (Philipp Stanner) [task:223063] {CVE-2023-52758}
  - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Nam Cao) [task:221811] {CVE-2024-35997}
  - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (felix) [task:221821] {CVE-2023-52803}
  - f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances (Chao Yu) [task:221841] {CVE-2021-47335}
  - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Hans Verkuil) [task:227331] {CVE-2024-23848}
  - erofs: fix pcluster use-after-free on UP platforms (Gao Xiang) [task:217577] {CVE-2022-48674}
  - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error (Norihiko Hama) [task:217593] {CVE-2024-26996}
  - netfilter: complete validation of user input (Eric Dumazet) [task:221923]
  - netfilter: validate user input for expected length (Eric Dumazet) [task:221923] {CVE-2024-35896}
  - net: atlantic: eliminate double free in error handling logic (Igor Russkikh) [task:220884] {CVE-2023-52664}
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Fedor Pchelkin) [task:217545] {CVE-2024-26961}
  - NTB: fix possible name leak in ntb_register_device() (Yang Yingliang) [task:217598] {CVE-2023-52652}
  - soc: fsl: qbman: Use raw spinlock for cgr_lock (Sean Anderson) [task:223104] {CVE-2024-35819}
  - soc: fsl: qbman: Add helper for sanity checking cgr ops (Sean Anderson) [task:223104]
  - soc: fsl: qbman: Add CGR update function (Sean Anderson) [task:223104]
  - KVM: x86: Handle SRCU initialization failure during page track init (Haimin Zhang) [task:221891] {CVE-2021-47407}
  - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Oliver Upton) [task:224206] {CVE-2024-36953}
  - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Marc Zyngier) [task:224206]
  - ipv4: Fix uninit-value access in __ip_make_skb() (Shigeru Yoshida) [task:224214] {CVE-2024-36927}
  - can: j1939: fix Use-after-Free, hold skb ref while in use (Oleksij Rempel) [task:225604] {CVE-2021-47232}
  - can: j1939: transport: add j1939_session_skb_find_by_offset() function (Oleksij Rempel) [task:225604]
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Duoming Zhou) [task:225600] {CVE-2024-27398}
  - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc (Norbert Zulinski) [task:225576] {CVE-2021-47501}
  - i40e: Fix sparse error: uninitialized symbol 'ring' (Arkadiusz Kubalewski) [task:225576]
  - i40e: introduce new dump desc XDP command (Ciara Loftus) [task:225576]
  - tcp: do not accept ACK of bytes we never sent (Eric Dumazet) [task:225596] {CVE-2023-52881}
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Duoming Zhou) [task:225580] {CVE-2024-27399}
  - clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (Jernej Skrabec) [task:225550] {CVE-2023-52882}
  - drm/arm/malidp: fix a possible null pointer dereference (Huai-Yuan Liu) [task:225554] {CVE-2024-36014}
  - ppdev: Add an error check in register_device (Huai-Yuan Liu) [task:225556] {CVE-2024-36015}
  - ppdev: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET) [task:225556]
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Roded Zats) [task:225558] {CVE-2024-36017}
  - firewire: nosy: ensure user_length is taken into account when fetching packet contents (Thanassis Avgerinos) [task:225560] {CVE-2024-27401}
  - mmc: mmc_spi: fix error handling in mmc_spi_probe() (Yang Yingliang) [task:225564] {CVE-2023-52708}
  - mmc: mmc_spi: Indentation fixes (Andy Shevchenko) [task:225564]
  - mmc: spi: Convert to use GPIO descriptors (Linus Walleij) [task:225564]
  - phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init() (Tiezhu Yang) [task:225568] {CVE-2021-47234}
  - drm/client: Fully protect modes[] with dev->mode_config.mutex (Ville Syrjälä) [task:221977] {CVE-2024-35950}
  - s390/dasd: fix double module refcount decrement (Miroslav Franc) [task:217574] {CVE-2024-27054}
  - mm/filemap: avoid buffered read/write race to read inconsistent data (Baokun Li) [task:225198]
  - drm/virtio: fix memory leak of vbuf (liweishi) [task:205462]
  - blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling (zhengbin) [task:225157]
  - nfs: Handle error of rpc_proc_register() in nfs_net_init(). (Kuniyuki Iwashima) [task:224227] {CVE-2024-36939}
  - overflow: Include header file with SIZE_MAX declaration (Leon Romanovsky) [task:158034]
  - linux/kernel.h: split *_MAX and *_MIN macros into <linux/limits.h> (Masahiro Yamada) [task:87159]
  - linux/kernel.h: use 'short' to define USHRT_MAX, SHRT_MAX, SHRT_MIN (Masahiro Yamada) [task:87159]
  - atl1c: fix tx timeout after link flap on Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: Work around the DMA RX overflow issue (Sieng-Piaw Liew) [task:222007] {CVE-2023-52834}
  - atl1c: add 4 RX/TX queue support for Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: detect NIC type early (Gatis Peisenieks) [task:222007]
  - atl1c: show correct link speed on Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: remove redundant assignment to variable tpd_req (Colin Ian King) [task:222007]
  - net/atheros: Clean atheros code from driver version (Leon Romanovsky) [task:222007]
  - atl1c: improve performance by avoiding unnecessary pcie writes on xmit (Gatis Peisenieks) [task:222007]
  - net: core: add __netdev_sent_queue as variant of __netdev_tx_sent_queue (Heiner Kallweit) [task:222007]
  - net: bql: add __netdev_tx_sent_queue() (Eric Dumazet) [task:68842]
  - atl1c: prepare for multiple rx queues (Gatis Peisenieks) [task:222007]
  - atl1c: move tx napi into tpd_ring (Gatis Peisenieks) [task:222007]
  - atl1c: move tx cleanup processing out of interrupt (Gatis Peisenieks) [task:222007]
  - atl1c: switch to napi_gro_receive (Sieng Piaw Liew) [task:222007]
  - atl1c: use napi_alloc_skb (Sieng Piaw Liew) [task:222007]
  - PCI: Add ACS quirk for Wangxun NICs (Mengyuan Lou) [task:335407]
  - PCI: Unify ACS quirk desired vs provided checking (Bjorn Helgaas) [task:335407]
  - PCI: Add ACS quirk for iProc PAXB (Abhinav Ratna) [task:335407]
  - PCI: Make ACS quirk implementations more uniform (Bjorn Helgaas) [task:335407]
  - OPENEULER: svm: Delete unused ioctl command (Jiangshan Yi) [task:180214] {CVE-2021-33639}
  - bpf: pull before calling skb_postpull_rcsum() (Jakub Kicinski) [task:329163]
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Kuniyuki Iwashima) [task:216629]
  - ARM: 9170/1: fix panic when kasan and kprobe are enabled (sparkhuang) [task:330279] {CVE-2021-47618}
  - cifs: fix underflow in parse_server_interfaces() (Dan Carpenter) [task:214157] {CVE-2024-26828}
  - af_unix: Fix garbage collector racing against connect() (Michal Luczaj) [task:216629] {CVE-2024-26923}
  - af_unix: Do not use atomic ops for unix_sk(sk)->inflight. (Kuniyuki Iwashima) [task:216629]
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Daniel Starke) [task:224203] {CVE-2024-36016}
  - um: Add winch to winch_handlers before registering winch IRQ (Roberto Sassu) {CVE-2024-39292}
  - af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (Eric Dumazet)
  - sched/fair: Fix wrong cpu selecting from isolated domain (Bing Huang) [bug:225308]
  - selinux: avoid dereference of garbage after mount failure (Christian Göttsche) [task:221817] {CVE-2024-35904}
  - selinux: mark some global variables __ro_after_init (Ondrej Mosnacek) [task:221817]
  - selinux: make selinuxfs_mount static (Ondrej Mosnacek) [task:221817]
  - vfs: vfs_clone_file_prep_inodes should return EINVAL for a clone from beyond EOF (Darrick J. Wong) [task:204423, task:327911]
  - inet: inet_defrag: prevent sk release while still in use (Florian Westphal) [task:213813] {CVE-2024-26921}
  - inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [task:213813]
  - skb_expand_head() adjust skb->truesize incorrectly (Vasily Averin) [task:213813]
  - skbuff: introduce skb_expand_head() (Vasily Averin) [task:213813]
  - sched/fair: Fix enqueue_task_fair() warning some more (Phil Auld) [task:116750]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.51.v2101
changelog:
  - crypto: aead,cipher - zeroize key buffer after use (Hailey Mothershead) [task:346415] {CVE-2024-42229}
  - crypto: ecdh - explicitly zeroize private_key (Joachim Vandersmissen) [task:345795] {CVE-2024-42098}
  - gpio: fix compile error (zhouyuhang) [task:347327]
  - nvme: avoid double free special payload (Chunguang Xu) [task:347137] {CVE-2024-41073}
  - ASoC: topology: Fix references to freed memory (Amadeusz Sławiński) [task:346623] {CVE-2024-41069}
  - ila: block BH in ila_output() (Eric Dumazet) [task:346669] {CVE-2024-41081}
  - serial: imx: Introduce timeout when waiting on transmitter empty (Esben Haabendal) [task:345715] {CVE-2024-40967}
  - fou: remove warn in gue_gro_receive on unsupported protocol (Willem de Bruijn) [task:352275] {CVE-2024-44940}
  - media: venus: fix use after free in vdec_close (Dikshita Agarwal) [task:352227] {CVE-2024-42313}
  - dev/parport: fix the array out-of-bounds risk (tuhaowen) [task:352211] {CVE-2024-42301}
  - driver core: Fix uevent_show() vs driver detach race (Dan Williams) [task:345303]
  - drivers: core: synchronize really_probe() and dev_uevent() (Dirk Behme) [task:345303] {CVE-2024-39501}
  - ipvs: properly dereference pe in ip_vs_add_service (Chen Hanxiao) [task:352245] {CVE-2024-42322}
  - nilfs2: fix kernel bug on rename operation of broken directory (Ryusuke Konishi) [task:347001] {CVE-2024-41034}
  - ceph: prevent use-after-free in encode_cap_msg() (Rishabh Dave) [task:210332] {CVE-2024-26689}
  - kvm: s390: Reject memory region operations for ucontrol VMs (Christoph Schlameuss) [task:352663] {CVE-2024-43819}
  - md/dm-raid: don't call md_reap_sync_thread() directly (Yu Kuai) [task:221813] {CVE-2024-35808}
  - md: fix kabi broken in struct mddev (zhouyuhang) [task:183151]
  - OPENEULER: md: use interruptible apis in idle/frozen_sync_thread (Yu Kuai) [task:183151]
  - md: wake up 'resync_wait' at last in md_reap_sync_thread() (Yu Kuai) [task:183151]
  - md: refactor idle/frozen_sync_thread() to fix deadlock (Yu Kuai) [task:183151]
  - md: add a mutex to synchronize idle and frozen in action_store() (Yu Kuai) [task:183151]
  - md: refactor action_store() for 'idle' and 'frozen' (Yu Kuai) [task:183151]
  - md-cluster/raid10: call update_size in md_reap_sync_thread (Guoqing Jiang) [task:128226]
  - closures: Change BUG_ON() to WARN_ON() (Kent Overstreet) [task:345719] {CVE-2024-42252}
  - drm/nouveau: prime: fix refcount underflow (Danilo Krummrich) [task:351447] {CVE-2024-43867}
  - Bluetooth: Fix usage of __hci_cmd_sync_status (Luiz Augusto von Dentz) [task:346425]
  - Bluetooth: L2CAP: Fix deadlock (Luiz Augusto von Dentz) [task:346425]
  - Bluetooth: hci_sync: Fix Opcode prints in bt_dev_dbg/err (Marcel Ziswiler) [task:346425]
  - Bluetooth: Fix race condition in hci_cmd_sync_clear (Min Li) [task:346425]
  - Bluetooth: hci_sync: Fix not processing all entries on cmd_sync_work (Luiz Augusto von Dentz) [task:346425]
  - Bluetooth: Add helper for serialized HCI command execution (Marcel Holtmann) [task:346425]
  - Bluetooth: Add support hdev to allocate private data (Tedd Ho-Jeong An) [task:346425]
  - bluetooth/l2cap: sync sock recv cb and release (Edward Adam Davis) [task:346425] {CVE-2024-41062}
  - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Marc Kleine-Budde) [task:223130] {CVE-2023-52878}
  - btrfs: fix use-after-free after failure to create a snapshot (Filipe Manana) [task:330299] {CVE-2022-48733}
  - media: mediatek: vcodec: Handle invalid decoder vsi (Irui Wang) [task:352191] {CVE-2024-43831}
  - tracing: Fix overflow in get_free_elt() (Tze-nan Wu) [task:352671] {CVE-2024-43890}
  - fpga: region: add owner module and take its refcount (Marco Pagani) [task:330557] {CVE-2024-35247}
  - f2fs: fix to don't dirty inode for readonly filesystem (Chao Yu) [task:352639] {CVE-2024-42297}
  - ext4: check dot and dotdot of dx_root before making dir indexed (Baokun Li) [task:352649] {CVE-2024-42305}
  - s390/pkey: Wipe copies of protected- and secure-keys (Holger Dengler) [task:346923] {CVE-2024-42155}
  - scsi: qla2xxx: Fix for possible memory corruption (Shreyas Deodhar) [task:352643] {CVE-2024-42288}
  - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (Alexey Kodanev) [task:352637] {CVE-2024-43839}
  - gpio: davinci: Validate the obtained number of IRQs (Aleksandr Mishin) [task:345785] {CVE-2024-42092}
  - Revert "drm/vc4: hdmi: Unregister codec device on unbind" (李豪杰) [task:344615, task:351057]
  - ext4: make sure the first directory block is not a hole (Baokun Li) [task:352077] {CVE-2024-42304}
  - ext4: fix file system corrupted when rmdir non empty directory with IO error (Ye Bin)
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Shigeru Yoshida) [task:352297] {CVE-2024-42284}
  - leds: trigger: Unregister sysfs attributes before calling deactivate() (Hans de Goede) [task:352209] {CVE-2024-43830}
  - dma: fix call order in dmam_free_coherent (Lance Richardson) [task:352215] {CVE-2024-43856}
  - drm/amd/display: Check for NULL pointer (Sung Joon Kim) [task:352265] {CVE-2024-42308}
  - drm/amd/display: Set flip pending for pipe split (Wesley Chalmers) [task:352265]
  - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (Ma Ke) [task:352277] {CVE-2024-42310}
  - serial: core: check uartclk for zero to avoid divide by zero (George Kennedy) [task:352289] {CVE-2024-43893}
  - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (Ma Ke) [task:352293] {CVE-2024-42309}
  - mISDN: Fix a use after free in hfcmulti_tx() (Dan Carpenter) [task:352165] {CVE-2024-42280}
  - md/raid5: avoid BUG_ON() while continue reshape after reassembling (Yu Kuai) [task:352173] {CVE-2024-43914}
  - Bluetooth: MGMT: Add error handling to pair_device() (Griffin Kroah-Hartman) [task:352185] {CVE-2024-43884}
  - net/iucv: fix use after free in iucv_sock_close() (Alexandra Winter) [task:352285] {CVE-2024-42271}
  - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (Niklas Neronin) [task:346971] {CVE-2024-42226}
  - remoteproc: imx_rproc: Skip over memory region when node value is NULL (Aleksandr Mishin) [task:352177] {CVE-2024-43860}
  - remoteproc: imx_rproc: Fix ignoring mapping vdev regions (Dong Aisheng) [task:352177]
  - remoteproc: imx_rproc: ignore mapping vdev regions (Peng Fan) [task:352177]
  - scsi: qla2xxx: During vport delete send async logout explicitly (Manish Rangankar) [task:352283] {CVE-2024-42289}
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (Chao Yu) [task:352271] {CVE-2024-42311}
  - jfs: fix null ptr deref in dtInsertEntry (Edward Adam Davis) [task:352249] {CVE-2024-44939}
  - filelock: Fix fcntl/close race recovery compat path (Jann Horn) [task:347167] {CVE-2024-41020}
  - file: Factor files_lookup_fd_locked out of fcheck_files (Eric W. Biederman) [task:347167]
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Bart Van Assche) [task:352669] {CVE-2024-42285}
  - nilfs2: handle inconsistent state in nilfs_btnode_create_block() (Ryusuke Konishi) [task:352291] {CVE-2024-42295}
  - net: ax25: Fix a compilation error (xiaolinkui) [task:351959]
  - kobject_uevent: Fix OOB access within zap_modalias_env() (Zijun Hu) [task:352127] {CVE-2024-42292}
  - jfs: Fix shift-out-of-bounds in dbDiscardAG (Pei Li) [task:352157] {CVE-2024-44938}
  - fs/jfs: fix potential integer overflow on shift of a int (Colin Ian King) [task:158034]
  - ALSA: hda: Do not unset preset when cleaning up codec (Cezary Rojewski) [task:222115] {CVE-2023-52736}
  - leds: mlxreg: Use devm_mutex_init() for mutex initialization (George Stark) [task:345699] {CVE-2024-42129}
  - locking/mutex: Introduce devm_mutex_init() (George Stark) [task:345699] {CVE-2024-42129}
  - exec: Fix ToCToU between perm check and set-uid/gid usage (Kees Cook) [task:351435] {CVE-2024-43882}
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Baochen Qiang) [task:351227] {CVE-2024-43879}
  - net: dsa: mv88e6xxx: fix use-after-free in mv88e6xxx_mdios_unregister (Vladimir Oltean) [task:346697]
  - net: dsa: mv88e6xxx: don't use devres for mdiobus (Vladimir Oltean) [task:346697] {CVE-2022-48818}
  - net: ipv6: ensure we call ipv6_mc_down() at most once (j.nixdorf@avm.de) [task:351441] {CVE-2022-48910}
  - ipv6/addrconf: use a boolean to choose between UNREGISTER/DOWN (Florent Fourcot) [task:351441]
  - ipv6/addrconf: call addrconf_ifdown with consistent values (Florent Fourcot) [task:351441]
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (Breno Leitao) [task:346411] {CVE-2024-40953}
  - net: usb: qmi_wwan: fix memory leak for not ip packets (Daniele Palmas) [task:351501] {CVE-2024-43861}
  - drm/amd/display: Check pipe offset before setting vblank (Alex Hung) [task:345701] {CVE-2024-42120}
  - devres: Fix memory leakage caused by driver API devm_free_percpu() (Zijun Hu) [task:351331] {CVE-2024-43871}
  - driver core: Cast to (void *) with __force for __percpu pointer (Andy Shevchenko) [task:351331]
  - usb: vhci-hcd: Do not drop references before new references are gained (Oliver Neukum) [task:351507] {CVE-2024-43883}
  - drm/radeon: check bo_va->bo is non-NULL before using it (Pierre-Eric Pelloux-Prayer) [task:346959] {CVE-2024-41060}
  - greybus: Fix use-after-free bug in gb_interface_release due to race condition. (Sicong Huang) [task:347127] {CVE-2024-39495}
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (Miri Korenblit) [task:346187] {CVE-2024-40929}
  - ocfs2: fix unexpected zeroing of virtual disk (Chi Zhiling) [task:335993]
  - net/sched: initialize noop_qdisc owner (Johannes Berg) [task:217588]
  - net/sched: fix kabi change in struct Qdisc (Zhengchao Shao) [task:217588] {CVE-2024-27010, CVE-2024-27010}
  - net/sched: Fix mirred deadlock on device recursion (Eric Dumazet) [task:217588] {CVE-2024-27010}
  - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (Breno Leitao) [task:344437] {CVE-2024-40901}
  - scsi: mpt3sas: Gracefully handle online firmware update (Suganath Prabu) [task:344437] {CVE-2024-40901}
  - scsi: mpt3sas: Add ioc_<level> logging macros (Joe Perches) [task:344437] {CVE-2024-40901}
  - f2fs: Add inline to f2fs_build_fault_attr() stub (Nathan Chancellor) [task:346823] {CVE-2024-42160}
  - f2fs: check validation of fault attrs in f2fs_build_fault_attr() (Chao Yu) [task:346823] {CVE-2024-42160}
  - MIPS: Octeron: remove source file executable bit (Dominique Martinet) [task:347107]
  - MIPS: Octeon: Add PCIe link status check (Songyang Li) [task:347107] {CVE-2024-40968}
  - nvme-fabrics: use reserved tag for reg read/write command (Chunguang Xu) [task:345283] {CVE-2024-41082}
  - gianfar: ethtool: Fix refcount leak in gfar_get_ts_info (Miaoqian Lin) [task:347101] {CVE-2022-48856}
  - net: inetdevice: provide replacement iterators for in_ifaddr walk (Florian Westphal) [task:352595]
  - security/selinux: Fixed crash caused by selinux (mengdehui) [bug:258979]
  - security/kysec: Fix crash when kysec from enable to disable (mengdehui@kylinos.cn) [bug:168035]
  - Revert "loop: Remove sector_t truncation checks" (Ben Hutchings)
  - net: hns3: fix kernel crash problem in concurrent scenario (Yonglong Liu) [task:351743] {CVE-2024-39507}
  - netpoll: Fix race condition in netpoll_owner_active (Breno Leitao) [task:351743]
  - net: make sure napi_list is safe for RCU traversal (Jakub Kicinski) [task:351743]
  - mmc: sdhci: Add sd host v4 mode (Chunyan Zhang) [task:350435]
  - mmc: sdhci: Add version V4 definition (Chunyan Zhang) [task:350435]
  - mmc: sdhci: Let a vendor driver supply and update ADMA descriptor size (Veerabhadrarao Badiganti) [task:350435]
  - mmc: sdhci: Add ADMA2 64-bit addressing support for V4 mode (Chunyan Zhang) [task:350435]
  - mmc: sdhci: add adma_table_cnt member to struct sdhci_host (Jisheng Zhang) [task:350435]
  - KVM: x86/mmu: make apf token non-zero to fix bug (Liang Zhang) [task:351445] {CVE-2022-48943}
  - irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses (Barry Song) [task:336421]
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Jesse Zhang) [task:346955] {CVE-2024-42228}
  - scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (John Garry) [task:346675] {CVE-2022-48792}
  - can: j1939: prevent deadlock by moving j1939_sk_errqueue() (Oleksij Rempel) [task:341503]
  - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new (Oleksij Rempel) [task:341503] {CVE-2023-52887}
  - can: j1939: extend UAPI to notify about RX status (Oleksij Rempel) [task:341503]
  - can: j1939: rename J1939_ERRQUEUE_* to J1939_ERRQUEUE_TX_* (Oleksij Rempel) [task:341503]
  - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger) [task:345299] {CVE-2024-39494}
  - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (Ferry Meng) [task:345115] {CVE-2024-41016}
  - ocfs2: add bounds checking to ocfs2_xattr_find_entry() (Ferry Meng) [task:345115] {CVE-2024-41016}
  - smb: client: fix potential UAF in cifs_stats_proc_write() (Paulo Alcantara) [task:221999] {CVE-2024-35868}
  - smb: client: fix potential UAF in smb2_is_valid_oplock_break() (Paulo Alcantara) [task:221987] {CVE-2024-35865}
  - smb: client: fix potential UAF in is_valid_oplock_break() (Paulo Alcantara) [task:327836] {CVE-2024-35863}
  - scsi: pm8001: Fix use-after-free for aborted TMF sas_task (John Garry) [task:346413] {CVE-2022-48791}
  - scsi: pm80xx: Fix TMF task completion race condition (Igor Pylypiv) [task:346413] {CVE-2022-48791}
  - mmc: davinci: Don't strip remove function when driver is builtin (Uwe Kleine-König) [task:347147] {CVE-2024-39484}
  - mmc: davinci_mmc: Convert to platform remove callback returning void (Yangtao Li) [task:347147]
  - jffs2: Fix potential illegal address access in jffs2_free_inode (Wang Yong) [task:347055] {CVE-2024-42115}
  - media: dvb-frontends: tda10048: Fix integer overflow (Ricardo Ribalda) [task:347059] {CVE-2024-42223}
  - ext4: do not create EA inode under buffer lock (Jan Kara) [task:347085] {CVE-2024-40972}
  - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Jan Kara) [task:347085]
  - ext4: check the return value of ext4_xattr_inode_dec_ref() (Li Zhong) [task:347085]
  - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Ritesh Harjani) [task:166857]
  - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (Hagar Hemdan) [task:347093] {CVE-2024-42090}
  - usb: usbtmc: Fix bug in pipe direction for control transfers (Alan Stern) [task:347095] {CVE-2022-48834}
  - usb: usbtmc: Fix memory leak in usbtmc_ioctl_request (Guido Kiener) [task:347095]
  - usb: usbtmc: Add ioctl for generic requests on control (Guido Kiener) [task:347095]
  - xfs: add bounds checking to xlog_recover_process_data (lei lu) [task:347089] {CVE-2024-41014}
  - kdb: Fix buffer overflow during tab-complete (Daniel Thompson) [task:347091] {CVE-2024-39480}
  - scsi: qedf: Fix refcount issue when LOGO is received during TMF (Saurav Kashyap) [task:347117] {CVE-2022-48823}
  - scsi: qedf: Modify flush routine to handle all I/Os and TMF (Shyam Sundar) [task:347117]
  - ocfs2: add bounds checking to ocfs2_check_dir_entry() (lei lu) [task:347123] {CVE-2024-41015}
  - nilfs2: fix inode number range checks (Ryusuke Konishi) [task:347125] {CVE-2024-42105}
  - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (Nikita Zhandarovich) [task:347131] {CVE-2024-41097}
  - ipv6: prevent possible NULL deref in fib6_nh_init() (Eric Dumazet) [task:347135] {CVE-2024-40961}
  - IB/core: Implement a limit on UMAD receive List (Michael Guralnik) [task:346963] {CVE-2024-42145}
  - mm: avoid overflows in dirty throttling logic (Jan Kara) [task:346909] {CVE-2024-42131}
  - libceph: fix race between delayed_work() and ceph_monc_stop() (Ilya Dryomov) [task:346915] {CVE-2024-42232}
  - bnx2x: Fix multiple UBSAN array-index-out-of-bounds (Ghadi Elie Rahme) [task:344619] {CVE-2024-42148}
  - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (Aleksandr Mishin) [task:345121] {CVE-2024-39506}
  - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep (Laurent Pinchart) [task:344571] {CVE-2024-42087}
  - jfs: xattr: fix buffer overflow for invalid xattr (Greg Kroah-Hartman) [task:344449] {CVE-2024-40902}
  - orangefs: fix out-of-bounds fsid access (Mike Marshall) [task:345297] {CVE-2024-42143}
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (Jiangfeng Xiao) [task:345307] {CVE-2024-39488}
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (Dmitry Antipov) [task:345309] {CVE-2024-41072}
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (Eric Dumazet) [task:345313] {CVE-2024-40959}
  - ipv6: sr: fix memleak in seg6_hmac_init_algo (Hangbin Liu) [task:345315] {CVE-2024-39489}
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (Remi Pommarel) [task:345317] {CVE-2024-40912}
  - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() (Lee Jones) [task:345415] {CVE-2024-42236}
  - hfsplus: fix uninit-value in copy_name (Edward Adam Davis) [task:345669] {CVE-2024-41059}
  - iio: chemical: bme680: Fix overflows in compensate() functions (Vasileios Amoiridis) [task:345679] {CVE-2024-42086}
  - HID: core: remove unnecessary WARN_ON() in implement() (Nikita Zhandarovich) [task:345675] {CVE-2024-39509}
  - drm/amdgpu: fix UBSAN warning in kv_dpm.c (Alex Deucher) [task:345695] {CVE-2024-40987}
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (Sam Sun) [task:345697] {CVE-2024-39487}
  - tcp_metrics: validate source addr length (Jakub Kicinski) [task:345703] {CVE-2024-42154}
  - net: can: j1939: Initialize unused data in j1939_send_one() (Shigeru Yoshida) [task:345711] {CVE-2024-42076}
  - net/iucv: Avoid explicit cpumask var allocation on stack (Dawei Li) [task:345717] {CVE-2024-42094}
  - jfs: don't walk off the end of ealist (lei lu) [task:345721] {CVE-2024-41017}
  - gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (Ian Ray) [task:345787] {CVE-2024-42253}
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (Ma Ke) [task:346897] {CVE-2024-41095}
  - nilfs2: add missing check for inode numbers on directory entries (Ryusuke Konishi) [task:345765] {CVE-2024-42104}
  - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (Ma Ke) [task:345779] {CVE-2024-42101}
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (Raju Rangoju) [task:345789] {CVE-2024-40984}
  - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [task:345799] {CVE-2024-42124}
  - scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (Saurav Kashyap) [task:345799]
  - drm/radeon: fix UBSAN warning in kv_dpm.c (Alex Deucher) [task:345729] {CVE-2024-40988}
  - inet_diag: Initialize pad field in struct inet_diag_req_v2 (Shigeru Yoshida) [task:345321] {CVE-2024-42106}
  - ax25: Fix refcount imbalance on inbound connections (Lars Kellogg-Stedman) [task:346363] {CVE-2024-40910}
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Herbert Xu) [task:346361] {CVE-2024-39493}
  - ASoC: fsl-asoc-card: set priv->pdev before using it (Elinor Montmasson) [task:346375] {CVE-2024-42089}
  - ata: libata-core: Fix null pointer dereference on error (Niklas Cassel) [task:346377] {CVE-2024-41098}
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (Alan Stern) [task:346373] {CVE-2024-40904}
  - ocfs2: fix races between hole punching and AIO+DIO (Su Yue) [task:345287] {CVE-2024-40943}
  - s390/pkey: Wipe sensitive data on failure (Holger Dengler) [task:346395] {CVE-2024-42157}
  - ipv6: prevent possible NULL dereference in rt6_probe() (Eric Dumazet) [task:346387] {CVE-2024-40960}
  - drm/exynos/vidi: fix memory leak in .get_modes() (Jani Nikula) [task:346391] {CVE-2024-40932}
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (Emmanuel Grumbach) [task:346417] {CVE-2024-40941}
  - ata: libata-core: Fix double free on error (Niklas Cassel) [task:346673] {CVE-2024-41087}
  - net: ethernet: lantiq_etop: fix double free in detach (Aleksander Jan Bajkowski) [task:346393] {CVE-2024-41046}
  - net: lantiq_etop: add blank line after declaration (Aleksander Jan Bajkowski) [task:346393]
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (Ma Ke) [task:346905] {CVE-2024-41089}
  - i2c: lpi2c: Avoid calling clk_get_rate during transfer (Alexander Stein) [task:346895] {CVE-2024-40965}
  - i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work (Carlos Song) [task:346895]
  - i2c: imx-lpi2c: use bulk clk API (Peng Fan) [task:346895]
  - tipc: fix kernel panic when enabling bearer (Tung Nguyen) [task:346901] {CVE-2022-48865}
  - tipc: fix NULL pointer dereference in tipc_disc_rcv() (Tuong Lien) [task:346901]
  - tipc: add reference counter to bearer (Tuong Lien) [task:346901]
  - batman-adv: bypass empty buckets in batadv_purge_orig_ref() (Eric Dumazet) [task:346925] {CVE-2024-40981}
  - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr (Piotr Wojtaszczyk) [task:346937] {CVE-2024-42153}
  - fbdev: savage: Handle err return when savagefb_check_var failed (Cai Xinchen) [task:346943] {CVE-2024-39475}
  - drm/vc4: Fix deadlock on DSI device attach error (Padmanabha Srinivasaiah) [task:346939] {CVE-2022-48826}
  - drm/vc4: dsi: Only register our component once a DSI device is attached (Maxime Ripard) [task:346939]
  - drm/amd/display: Skip finding free audio for unknown engine_id (Alex Hung) [task:346961] {CVE-2024-42119}
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Jan Kara) [task:346949] {CVE-2024-42102}
  - net: dsa: mv88e6xxx: Correct check for empty list (Simon Horman) [task:346967] {CVE-2024-42224}
  - ocfs2: fix DIO failure due to insufficient transaction credits (Jan Kara) [task:346985] {CVE-2024-42077}
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Sagi Grimberg) [task:346989] {CVE-2024-42152}
  - nvmet: update AEN list and array at one place (Daniel Wagner) [task:346989]
  - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects (Nicolas Escande) [task:346993] {CVE-2024-40942}
  - ftruncate: pass a signed offset (Arnd Bergmann) [task:346997] {CVE-2024-42084}
  - vmci: prevent speculation leaks by sanitizing event in event_deliver() (Hagar Gamal Halim Hemdan) [task:347011] {CVE-2024-39499}
  - ppp: reject claimed-as-LCP but actually malformed packets (Dmitry Antipov) [task:347013] {CVE-2024-41044}
  - ppp: ensure minimum packet size in ppp_write() (Eric Dumazet) [task:160493]
  - s390/sclp: Fix sclp_init() cleanup on failure (Heiko Carstens) [task:347023] {CVE-2024-41068}
  - scsi: qedi: Fix crash while reading debugfs attribute (Manish Rangankar) [task:347025] {CVE-2024-40978}
  - mISDN: Fix memory leak in dsp_pipeline_build() (Alexey Khoroshilov) [task:347035] {CVE-2022-48863}
  - mISDN: Remove obsolete PIPELINE_DEBUG debugging information (Zhen Lei) [task:347035]
  - ALSA: emux: improve patch ioctl data validation (Oswald Buddenhagen) [task:347041] {CVE-2024-42097}
  - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors (Ryusuke Konishi) [task:347027] {CVE-2024-39469}
  - nilfs2: return the mapped address from nilfs_get_page() (Matthew Wilcox (Oracle)) [task:347027]
  - nilfs2: Remove check for PageError (Matthew Wilcox (Oracle)) [task:347027]
  - ftrace: Fix possible use-after-free issue in ftrace_location() (Zheng Yejian) [task:330288] {CVE-2024-38588}
  - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (Zheng Yejian) [task:330288]
  - sysctl: add proc interface to set page cache limit (Chen Wandun)
  - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (Alan Stern) [task:345741] {CVE-2024-41035}
  - USB: core: add endpoint-blacklist quirk (Johan Hovold) [task:345741] {CVE-2024-41035}
  - usb: core: config: using bit mask instead of individual bits (Pavel Hofman) [task:345741] {CVE-2024-41035}
  - usb: core: config: fix validation of wMaxPacketValue entries (Pavel Hofman) [task:345741] {CVE-2024-41035}
  - USB: Fix: Don't skip endpoint descriptors with maxpacket=0 (Alan Stern) [task:345741] {CVE-2024-41035}
  - drm/vc4: hdmi: Unregister codec device on unbind (Maxime Ripard) [task:344615] {CVE-2022-48852}
  - tcp: Fix listen() regression in 4.19.270 (Kuniyuki Iwashima) [task:166857, bug:253275]
  - net: fix kabi broken in struct dst_ops (taowei) [task:200581]
  - ipv6: remove max_size check inline with ipv4 (Jon Maxwell) [task:200581] {CVE-2023-52340}
  - net/dst: use a smaller percpu_counter batch for dst entries accounting (Eric Dumazet) [task:200581] {CVE-2023-52340}
  - net: add a route cache full diagnostic message (Peter Oskolkov) [task:200581] {CVE-2023-52340}
  - net: fix kabi broken in struct netns_ipv6 (taowei) [task:200581]
  - ipv6: make ip6_rt_gc_expire an atomic_t (Eric Dumazet) [task:200581] {CVE-2023-52340}
  - net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov) [task:330544] {CVE-2024-38538}
  - net_sched: walk through all child classes in tc_bind_tclass() (Cong Wang) [task:218825]
  - netfilter: tproxy: bail out if IP has been disabled on the device (Florian Westphal) [task:330558] {CVE-2024-36270}
  - netfilter: use in_dev_for_each_ifa_rcu (Florian Westphal) [task:330558]
  - ACPI: CPPC: Fix access width used for PCC registers (Vanshidhar Konda) [task:223069]
  - ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro (Jarred White) [task:223069]
  - ACPI: CPPC: Use access_width over bit_width for system memory accesses (Jarred White) [task:223069] {CVE-2024-35995}
  - ACPI: CPPC: Drop redundant local variable from cpc_read() (Rafael J. Wysocki) [task:223069]
  - ACPI: CPPC: fix some coding style issues (Xiaofei Tan) [task:223069]
  - ACPI: CPPC: Fix up I/O port access in cpc_read() (Rafael J. Wysocki) [task:223069]
  - ACPI: CPPC: Implement support for SystemIO registers (Steven Noonan) [task:223069]
  - ACPI: CPPC: initialise vaddr pointers to NULL (Ionela Voinescu) [task:223069]
  - net: relax socket state check at accept time. (Paolo Abeni) [task:341253] {CVE-2024-36484}
  - jfs: Fix array-index-out-of-bounds in diFree (Jeongjun Park)
  - nfsd: Fix races between nfsd4_cb_release() and nfsd4_shutdown_callback() (Trond Myklebust) [task:334950]
  - nfsd: minor 4.1 callback cleanup (Trond Myklebust) [task:334950]
  - Bluetooth: Fix slab-out-of-bounds Read in hci_le_ext_adv_report_evt (luoxuanqiang) [task:218812]
  - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Ding Hui) [task:337725] {CVE-2023-52885}
  - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [task:222101] {CVE-2023-52752}
  - crypto: af_alg - get rid of alg_memory_allocated (Eric Dumazet) [task:341427] {CVE-2022-48781}
  - epoll: be better about file lifetimes (Linus Torvalds) [task:330566] {CVE-2024-38580}
  - i2c: acpi: Unbind mux adapters before delete (Hamish Martin) [task:332220] {CVE-2024-39362}
  - i2c: add fwnode APIs (Russell King (Oracle)) [task:332220]
  - btrfs: fix race between quota rescan and disable leading to NULL pointer deref (Filipe Manana) [task:330358] {CVE-2022-48734}
  - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (Nikolay Borisov) [task:330358] {CVE-2022-48734}
  - btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan (Filipe Manana) [task:158034]
  - btrfs: fix lockdep splat when reading qgroup config on mount (Filipe Manana) [task:158034]
  - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup (Sidong Yang) [task:330358] {CVE-2022-48734}
  - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" (Finn Thain) [task:330496] {CVE-2024-38607}
  - ALSA: Fix deadlocks with kctl removals at disconnection (Takashi Iwai) [task:330474] {CVE-2024-38600}
  - btrfs: fix deadlock between quota disable and qgroup rescan worker (Shin'ichiro Kawasaki) [task:330358] {CVE-2022-48734}
  - btrfs: fix lockdep splat when enabling and disabling qgroups (Filipe Manana) [task:330358] {CVE-2022-48734}
  - btrfs: move ulist allocation out of transaction in quota enable (David Sterba) [task:330358] {CVE-2022-48734}
  - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Niklas Neronin) [task:223058] {CVE-2023-52781}
  - media: i2c: et8ek8: Don't strip remove function when driver is builtin (Uwe Kleine-König) [task:330538] {CVE-2024-38611}
  - ax25: Fix reference count leak issue of net_device (Duoming Zhou) [task:330518] {CVE-2024-38554}
  - perf report: Fix memory leaks around perf_tip() (Ian Rogers) [task:225610] {CVE-2021-47543}
  - net: fec: remove .ndo_poll_controller to avoid deadlocks (Wei Fang) [task:330300]
  - wifi: cfg80211: check A-MSDU format more carefully (Johannes Berg) [task:223115] {CVE-2024-35937}
  - vfio/pci: fix potential memory leak in vfio_intx_enable() (Ye Bin) [task:330570] {CVE-2024-38632}
  - ax25: Fix reference count leak issues of ax25_dev (Duoming Zhou) [task:330575] {CVE-2024-38602}
  - ax25: merge repeat codes in ax25_dev_device_down() (Lu Wei) [task:330575] {CVE-2024-38602}
  - eth: sungem: remove .ndo_poll_controller to avoid deadlocks (Jakub Kicinski) [task:330488] {CVE-2024-38597}
  - ptp: fix code indentation issues (Carlos Llamas) [task:222085]
  - ptp: Fix possible memory leak in ptp_clock_register() (Yang Yingliang) [task:222085] {CVE-2021-47455}
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (Kuniyuki Iwashima) [task:330565] {CVE-2024-37356}
  - params: lift param_set_uint_minmax to common code (Sagi Grimberg) [task:330565]
  - ubifs: Fix races between xattr_{set|get} and listxattr operations (Zhihao Cheng) [task:223056] {CVE-2021-47351}
  - ring-buffer: Fix a race between readers and resize checks (Petr Pavlu) [task:330286] {CVE-2024-38601}
  - scsi: bfa: Ensure the copied buf is NUL terminated (Bui Quang Minh) [task:330280] {CVE-2024-38560}
  - drm: vc4: Fix possible null pointer dereference (Aleksandr Mishin) [task:330526] {CVE-2024-38546}
  - mmc: sdhci-msm: pervent access to suspended controller (Mantas Pucka) [task:224217] {CVE-2024-36029}
  - mmc: sdhci-msm: add Inline Crypto Engine support (Eric Biggers) [task:224217]
  - mmc: sdhci-msm: Mark sdhci_msm_cqe_disable static (Stephen Boyd) [task:224217]
  - mmc: sdhci-msm: Add CQHCI support for sdhci-msm (Ritesh Harjani) [task:224217]
  - mmc: sdhci-msm: Use OPP API to set clk/perf state (Rajendra Nayak) [task:224217]
  - mmc: sdhci-msm: Re-initialize DLL if MCLK is gated dynamically (Veerabhadrarao Badiganti) [task:224217]
  - xfs: cap longest free extent to maximum allocatable (Dave Chinner) [task:328072]
  - nilfs2: fix use-after-free of timer for log writer thread (Ryusuke Konishi) [task:330506] {CVE-2024-38583}
  - KVM: LAPIC: Also cancel preemption timer during SET_LAPIC (Wanpeng Li) [task:330470] {CVE-2022-48765}
  - KVM: LAPIC: Write 0 to TMICT should also cancel vmx-preemption timer (Wanpeng Li) [task:330470]
  - KVM: LAPIC: Advancing the timer expiration on guest initiated write (Wanpeng Li) [task:330470]
  - KVM: LAPIC: Also cancel preemption timer when disarm LAPIC timer (Wanpeng Li) [task:330470]
  - ecryptfs: Fix buffer size for tag 66 packet (Brian Kubisiak) [task:330504] {CVE-2024-38578}
  - netrom: fix possible dead-lock in nr_rt_ioctl() (Eric Dumazet) [task:330492] {CVE-2024-38589}
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (Ilya Maximets) [task:330359] {CVE-2024-38558}
  - m68k: Fix spinlock race in kernel thread creation (Michael Schmitz) [task:330486] {CVE-2024-38613}
  - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc (Chengfeng Ye) [task:216643] {CVE-2021-47211}
  - rpmbuild: add --without-kabi-check parameter support (Jiangshan Yi) [task:345291]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.52.v2101
changelog:
  - crash_core, vmcoreinfo: append 'SECTION_SIZE_BITS' to vmcoreinfo (Pingfan Liu) [bug:281263]
  - crash_core, vmcoreinfo: Append 'MAX_PHYSMEM_BITS' to vmcoreinfo (Bhupesh Sharma) [bug:281263]
  - kdump: Document kernel data exported in the vmcoreinfo note (Lianbo Jiang) [bug:281263]
  - xfs: make sure sb_fdblocks is non-negative (Wengang Wang) [task:354053]
  - kernfs: fix potential NULL dereference in __kernfs_remove (Yushan Zhou) [task:352489]
  - kernfs: fix NULL dereferencing in kernfs_remove (Minchan Kim) [task:352489]
  - kernfs: remove redundant kernfs_rwsem declaration. (Imran Khan) [task:352489]
  - kernfs: prevent early freeing of root node (Minchan Kim) [task:352489]
  - kernfs: switch global kernfs_rwsem lock to per-fs lock (Minchan Kim) [task:352489]
  - kernfs: don't create a negative dentry if inactive node exists (Ian Kent) [task:210868]
  - kernfs: also call kernfs_set_rev() for positive dentry (Hou Tao) [task:210868]
  - kernfs: dont call d_splice_alias() under kernfs node lock (Ian Kent) [task:210868]
  - kernfs: use i_lock to protect concurrent inode updates (Ian Kent) [task:210868]
  - kernfs: switch kernfs to use an rwsem (Ian Kent) [task:210868]
  - kernfs: use VFS negative dentry caching (Ian Kent) [task:210868]
  - kernfs: add a revision to identify directory node changes (Ian Kent) [task:210868]
  - fix some dtb compile warnings (zhouyuhang) [task:328882, task:329382]
  - ALSA: line6: Fix racy access to midibuf (Takashi Iwai) [task:364721]
  - tcp_bpf: fix return value of tcp_bpf_sendmsg() (Cong Wang) [task:364047] {CVE-2024-46783}
  - drm/amd/display: Check BIOS images before it is used (Alex Hung) [task:368525] {CVE-2024-46809}
  - drm/amdgpu: Replace one-elements array with flex-array members (Paulo Miguel Almeida) [task:368525]
  - btrfs: clean up our handling of refs == 0 in snapshot delete (Josef Bacik) [task:368305] {CVE-2024-46840}
  - ELF: fix kernel.randomize_va_space double read (Alexey Dobriyan) [task:368307] {CVE-2024-46826}
  - kbuild: Drop -Wdeclaration-after-statement (Jiangshan Yi)
  - drm/amd/display: Check gpio_id before used as array index (Alex Hung) [task:368129] {CVE-2024-46818}
  - drm/amd/display: Check hpd_gpio for NULL before accessing it (Harry Wentland) [task:368129]
  - drm/amd/display: add gpio lock/unlock (Chiawen Huang) [task:368129]
  - drm/amd/display: fix sporadic multiple aux transaction failure (Yogesh Mohan Marimuthu) [task:368129]
  - drm/amd/display: add query HPD interface. (Chiawen Huang) [task:368129]
  - net: dpaa: Pad packets to ETH_ZLEN (Sean Anderson) [task:368157] {CVE-2024-46854}
  - drm/vmwgfx: Fix a deadlock in dma buf fence polling (Zack Rusin) [task:351069] {CVE-2024-43863}
  - drm/vmwgfx/vmwgfx_fence: Add, remove and demote various documentation params/headers (Lee Jones) [task:351069] {CVE-2024-43863}
  - driver: iio: add missing checks on iio_info's callback access (Julien Stephan) [task:363791] {CVE-2024-46715}
  - sched/smt: Fix unbalance sched_smt_present dec/inc (Yang Yingliang) [task:357951] {CVE-2024-44958}
  - xfs: don't account extra agfl blocks as available (Brian Foster) [task:354053]
  - ASoC: topology: Fix route memory corruption (Amadeusz Sławiński) [task:346623] {CVE-2024-41069}
  - gtp: fix a potential NULL pointer dereference (Cong Wang) [task:363647] {CVE-2024-46677}
  - arm64/sparsemem: reduce SECTION_SIZE_BITS (Sudarshan Rajagopalan) [bug:219958]
  - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number (Ma Jun) [task:364199] {CVE-2024-46724}
  - drm/amd/pm: fix the Out-of-bounds read warning (Jesse Zhang) [task:363753] {CVE-2024-46731}
  - memcg_write_event_control(): fix a user-triggerable oops (Al Viro) [task:363965] {CVE-2024-45021}
  - pktgen: use cpus_read_lock() in pg_net_init() (Eric Dumazet) [task:363783] {CVE-2024-46681}
  - pktgen: fix misuse of BUG_ON() in pktgen_thread_worker() (Di Zhu) [task:158034]
  - drm/amd/display: Add null checker before passing variables (Alex Hung) [task:352183] {CVE-2024-43902}
  - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Dragos Tatulea) [task:363773] {CVE-2024-44970}
  - ila: call nf_unregister_net_hooks() sooner (Eric Dumazet) [task:364193] {CVE-2024-46782}
  - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (David Fernandez Gonzalez) [task:364051] {CVE-2024-46738}
  - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes (Guenter Roeck) [task:364043] {CVE-2024-46756}
  - scsi: aacraid: Fix double-free on probe failure (Ben Hutchings) [task:363975] {CVE-2024-46673}
  - dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor (Olivier Dautricourt) [task:363973] {CVE-2024-46716}
  - dmaengine: altera-msgdma: Correctly handle descriptor callbacks (Lars-Peter Clausen) [task:363973]
  - hwmon: (lm95234) Fix underflows seen when writing limit attributes (Guenter Roeck) [task:363963] {CVE-2024-46758}
  - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (Camila Alvarez) [task:364071] {CVE-2024-46747}
  - Squashfs: sanity check symbolic link size (Phillip Lougher) [task:364131] {CVE-2024-46744}
  - mmc: mmc_test: Fix NULL dereference on allocation failure (Dan Carpenter) [task:364203] {CVE-2024-45028}
  - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes (Guenter Roeck) [task:364195] {CVE-2024-46757}
  - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (Sascha Hauer) [task:363957] {CVE-2024-46755}
  - apparmor: fix possible NULL pointer dereference (Leesoo Ahn) [task:364181] {CVE-2024-46721}
  - ACPI: extlog: fix NULL pointer dereference check (Prarit Bhargava) [task:364161] {CVE-2023-52605}
  - usb: dwc3: core: Prevent USB core invalid event buffer address access (Selvarasu Ganesan) [task:364045] {CVE-2024-46675}
  - usb: dwc3: core: Skip setting event buffers for host only controllers (Krishna Kurapati) [task:364045]
  - hwmon: (adc128d818) Fix underflows seen when writing limit attributes (Guenter Roeck) [task:363803] {CVE-2024-46759}
  - udf: Avoid excessive partition lengths (Jan Kara) [task:363799] {CVE-2024-46777}
  - udf: Define EFSCORRUPTED error code (Jan Kara) [task:166857]
  - drm/amdgpu: fix ucode out-of-bounds read warning (Tim Huang) [task:364077] {CVE-2024-46723}
  - bpf: Remove tst_run from lwt_seg6local_prog_ops. (Sebastian Andrzej Siewior) [task:364073] {CVE-2024-46754}
  - PCI: Add missing bridge lock to pci_bus_lock() (Dan Williams) [task:364081] {CVE-2024-46750}
  - usb: dwc3: st: fix probed platform device ref count on probe error path (Krzysztof Kozlowski) [task:364169] {CVE-2024-46674}
  - sch/netem: fix use after free in netem_dequeue (Stephen Hemminger) [task:364105] {CVE-2024-46800}
  - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (Krishna Kumar) [task:364063] {CVE-2024-46761}
  - nfc: pn533: Add poll mod list filling check (Aleksandr Mishin) [task:364099] {CVE-2024-46676}
  - nfc: pn533: Add autopoll capability (Lars Poeschel) [task:364099]
  - nfc: pn533: Add dev_up/dev_down hooks to phy_ops (Lars Poeschel) [task:364099]
  - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). (Kuniyuki Iwashima) [task:364095]
  - can: bcm: Remove proc entry when dev is unregistered. (Kuniyuki Iwashima) [task:364095] {CVE-2024-46771}
  - of/irq: Prevent device address out-of-bounds read in interrupt map walk (Stefan Wiehler) [task:364093] {CVE-2024-46743}
  - binder: fix UAF caused by offsets overwrite (Carlos Llamas) [task:364173] {CVE-2024-46740}
  - nilfs2: protect references to superblock parameters exposed in sysfs (Ryusuke Konishi) [task:364057] {CVE-2024-46780}
  - nilfs2: replace snprintf in show functions with sysfs_emit (Qing Wang) [task:364057]
  - btrfs: qgroup: fix quota root leak after quota disable failure (Filipe Manana) [task:347151] {CVE-2024-41078}
  - Revert "btrfs: qgroup: fix quota root leak after quota disable failure" (wangdicheng) [task:347151]
  - pinctrl: single: fix potential NULL dereference in pcs_get_function() (Ma Ke) [task:363769] {CVE-2024-46685}
  - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind (Saurabh Sengar) [task:363759] {CVE-2024-46739}
  - drm/amdgpu: fix mc_data out-of-bounds read warning (Tim Huang) [task:363795] {CVE-2024-46722}
  - netem: fix return value if duplicate enqueue fails (Stephen Hemminger) [task:364103] {CVE-2024-45016}
  - net: netem: fix use after free and double free with packet corruption (Jakub Kicinski) [task:364103]
  - Input: uinput - reject requests with unreasonable number of slots (Dmitry Torokhov) [task:364055] {CVE-2024-46745}
  - net: dsa: mv88e6xxx: Fix out-of-bound access (Joseph Huang) [task:358101] {CVE-2024-44988}
  - btrfs: qgroup: fix quota root leak after quota disable failure (Filipe Manana) [task:347151] {CVE-2024-41078}
  - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() (Chao Yu) [task:347103] {CVE-2024-39467}
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show() (Chen Ridong) [task:352627] {CVE-2024-43853}
  - netfilter: ctnetlink: use helper function to calculate expect ID (Pablo Neira Ayuso) [task:357933] {CVE-2024-44944}
  - net: hns3: fix a deadlock problem when config TC during resetting (Jie Wang) [task:358107] {CVE-2024-44995}
  - ssb: Fix potential NULL pointer dereference in ssb_device_uevent() (Rand Deeb) [task:347161] {CVE-2024-40982}
  - fuse: Initialize beyond-EOF page contents before setting uptodate (Jann Horn) [task:358119] {CVE-2024-44947}
  - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (Andi Shyti) [task:351225] {CVE-2024-42259}
  - Input: MT - limit max slots (Tetsuo Handa) [task:357851] {CVE-2024-45008}
  - kcm: Serialise kcm_sendmsg() for the same socket. (Kuniyuki Iwashima) [task:358105] {CVE-2024-44946}
  - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (Dmitry Baryshkov) [task:357971] {CVE-2024-44982}
  - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (Mathias Nyman) [task:357961] {CVE-2024-45006}
  - s390/sclp: Prevent release of buffer in I/O (Peter Oberparleiter) [task:357955] {CVE-2024-44969}
  - x86/mm: Fix pti_clone_pgtable() alignment assumption (Peter Zijlstra) [task:357895] {CVE-2024-44965}
  - ipv6: prevent UAF in ip6_send_skb() (Eric Dumazet) [task:357925] {CVE-2024-44987}
  - atm: idt77252: prevent use after free in dequeue_rx() (Dan Carpenter) [task:357805] {CVE-2024-44998}
  - wifi: mac80211: sdata can be NULL during AMPDU start (Alexander Wetzel) [task:351523] {CVE-2022-48875}
  - x86/mtrr: Check if fixed MTRRs exist before saving them (Andi Kleen) [task:357771] {CVE-2024-44948}
  - usb: gadget: core: Check for unset descriptor (Chris Wulff) [task:357799] {CVE-2024-44960}
  - media: dvb-usb-v2: af9035: fix missing unlock (Hans Verkuil) [task:357803]
  - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (Zhang Shurong) [task:357803] {CVE-2023-52915}
  - ibmvnic: Add tx check to prevent skb leak (Nick Child) [task:345709] {CVE-2024-41066}
  - ext4: remove the special buffer dirty handling in do_journal_get_write_access (Shida Zhang) [task:345663]
  - ext4: fix a potential assertion failure due to improperly dirtied buffer (Shida Zhang) [task:345663]
  - ext4: hoist ext4_block_write_begin and replace the __block_write_begin (Shida Zhang) [task:345663]
  - ext4: persist the new uptodate buffers in ext4_journalled_zero_new_buffers (Shida Zhang) [task:345663]
  - drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update (Srinivasan Shanmugam) [task:352661] {CVE-2024-43903}
  - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules (Ma Jun) [task:352181] {CVE-2024-43907}
  - x86: stop playing stack games in profile_pc() (Linus Torvalds) [task:347039] {CVE-2024-42096}
  - NFSD: Fix ia_size underflow (Chuck Lever) [task:347049] {CVE-2022-48828}
  - f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC (Chao Yu) [task:352651] {CVE-2024-44942}
  - null_blk: fix validation of block size (Andreas Hindborg) [task:347007] {CVE-2024-41077}
  - block: Add a helper to validate the block size (Xie Yongji)
  - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (Dave Jiang) [task:346975] {CVE-2024-42110}
  - USB: serial: mos7840: fix crash on resume (Dmitry Smirnov) [task:347175] {CVE-2024-42244}
  - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Kenton Groombridge) [task:346919] {CVE-2024-41071}
  - s390/pkey: Wipe copies of clear-key structures on failure (Holger Dengler) [task:345319] {CVE-2024-42156}
  - ipv6: sr: fix missing sk_buff release in seg6_input_core (Andrea Mayer) [task:347171] {CVE-2024-39490}
  - filelock: Remove locks reliably when fcntl/close race is detected (Jann Horn) [task:346931] {CVE-2024-41012}
  - btrfs: get rid of warning on transaction commit when using flushoncommit (Filipe Manana) [task:351471] {CVE-2022-48920}
  - f2fs: fix return value of f2fs_convert_inline_inode() (Chao Yu) [task:352015] {CVE-2024-42296}
  - f2fs: fix to consider multiple device for readonly check (Chao Yu) [task:352015]
  - perf/x86/intel: Limit the period on Haswell (Kan Liang) {CVE-2024-46848}
  - dma-direct: Leak pages on dma_set_decrypted() failure (Rick Edgecombe) [task:222011] {CVE-2024-35939}
  - OPENEULER: NFS: remove unused check for negative dentry (Benjamin Coddington) [task:361903]
  - OPENEULER: NFSv3: use nfs_add_or_obtain() to create and reference inodes (Benjamin Coddington) [task:361903]
  - OPENEULER: NFS: Refactor nfs_instantiate() for dentry referencing callers (Benjamin Coddington) [task:361903]
  - KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 (Marc Zyngier) [task:363883] {CVE-2024-46707}
  - KVM: arm64: Save/restore sp_el0 as part of __guest_enter (Marc Zyngier) [task:351171]
  - arm64: kvm: stop treating register x18 as caller save (Ard Biesheuvel) [task:351171]
  - netlink: fix kabi broken (gonglinkai) [task:360011]
  - drm/msm: another fix for the headless Adreno GPU (Dmitry Baryshkov) [task:351463] {CVE-2023-52911}
  - drm/msm: Make .remove and .shutdown HW shutdown consistent (Javier Martinez Canillas) [task:351463]
  - drm/msm: Fix wrong size calculation (Xianting Tian) [task:160493]
  - drm/msm: fix shutdown hook in case GPU components failed to bind (Dmitry Baryshkov) [task:158827]
  - drm/msm: Call msm_init_vram before binding the gpu (Craig Tatlor) [task:158034]
  - drm/msm: add shutdown support for display platform_driver (Krishna Manikandan) [task:157172]
  - drm/msm: fix leaks if initialization fails (Pavel Machek) [task:157172]
  - drm/msm: Set dma maximum segment size for mdss (Sean Paul) [task:155707]
  - PHYTIUM: drm/phytium: Add driver version information (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Add PWM backlight control for pe220x eDP (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Change the drm driver name for pe220x (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Add dc patch for BMC (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Modify driver to adapt to ARM and X86_64 compiles (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Mask the hdcp timer irq (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Mask the AUX reply error interrupt (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Adjust log printing level (WangHao) [task:346055]
  - PHYTIUM: drm/phytium: Replace default EFI fb0 with DC FB (WangHao) [task:346055]
  - PHYTIUM: drm/phytium: Fixed dp codec id (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Get edid audio capability (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Bugfix Xorg startup for ps23xx when using pe2201 bmc card (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Cursor hot support negative numbers (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Enable gamma features (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Add capability of tile mode (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Limit the TU to a maximum of 63 (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Sync patches from 4.19.y-dev oss branch (Wang Yinfeng) [task:346055]
  - mm/vmscan: Fix hard LOCKUP in function isolate_lru_pages (liuye) [task:334682]
  - tracing: Fix race issue between cpu buffer write and swap (Zheng Yejian)
  - netlink: convert nlk->flags to atomic flags (Eric Dumazet) [task:345975]
  - netlink: Use copy_to_user() for optval in netlink_getsockopt(). (Kuniyuki Iwashima) [task:345975]
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy) [task:119087] {CVE-2022-3564}
  - spi: fix kabi breakage in struct spi_controller (lifangxu) [task:221921]
  - spi: Fix deadlock when adding SPI controllers on SPI buses (Mark Brown) [task:221921] {CVE-2021-47469}
  - sched/core: Further clarify sched_class::set_next_task() (Peter Zijlstra) [task:101857]
  - sched: Fix pick_next_task() vs 'change' pattern race (Peter Zijlstra) [task:101857]
  - sched: Rework pick_next_task() slow-path (Peter Zijlstra) [task:101857]
  - sched: Allow put_prev_task() to drop rq->lock (Peter Zijlstra) [task:101857]
  - sched/fair: Expose newidle_balance() (Peter Zijlstra) [task:101857]
  - sched: Add task_struct pointer to sched_class::set_curr_task (Peter Zijlstra) [task:101857]
  - sched: Rework CPU hotplug task selection (Peter Zijlstra) [task:101857]
  - sched/{rt,deadline}: Fix set_next_task vs pick_next_task (Peter Zijlstra) [task:101857]
  - sched/core: Introduce set_next_task() helper for better code readability (Muchun Song) [task:101857]
  - fpga: region: fix compilation error for commit 7dd30f1e070 (limiao) [task:354605]
  - ASoC: hdmi-codec: Add an op to set callback function for plug event (Cheng-Yi Chiang) [task:110384]
  - PHYTIUM: drm/phytium: save vram by dma (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: skip less than 640x480 mode (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: adjust e2000 phy parameters (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: disable pixel clock before dc reset (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: support for linux-5.10.0 (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: Remove reset before close pixel clock (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: Read EDID when getting mode (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: Add E2000 Display Engine support (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: update phytium x100 dc driver before support e2000 (oushixiong) [task:110384]
  - arm64/spinlock: fix a -Wunused-function warning (Qian Cai) [task:351849]
  - locking/osq: Use optimized spinning loop for arm64 (Waiman Long) [task:351849]
  - kylin/gmjstcm: fix compilation warning (Li Jun) [task:352591]
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Daniel Borkmann) [task:347029] {CVE-2024-42246}
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (Tetsuo Handa) [task:347077] {CVE-2024-41063}
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (David Ruth) [task:344573] {CVE-2024-40995}
  - fix some compilation warnings (Jiangshan Yi) [task:356221]
  - overflow: Add __must_check attribute to check_*() helpers (Kees Cook) [task:356221]
  - net/mlx5: Add a blank line after declarations (Wenpeng Liang) [task:356221]
  - crypto: ccp - Remove forward declaration (Nathan Chancellor) [task:356221]
  - kprobes: Fix compiler warning for !CONFIG_KPROBES_ON_FTRACE (Muchun Song) [task:356221]
  - ibmvnic: don't release napi in __ibmvnic_open() (Sukadev Bhattiprolu) [task:346945] {CVE-2022-48811}
  - ibmvnic: avoid calling napi_disable() twice (Lijun Pan) [task:158827]
  - powerpc/vnic: Extend "failover pending" window (Sukadev Bhattiprolu) [task:346945]
  - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Eric Dumazet) [task:347083] {CVE-2024-42114}
  - netlink: extend policy range validation (Johannes Berg) [task:347083]
  - xdp: Remove WARN() from __xdp_reg_mem_model() (Daniil Dulov) [task:345323] {CVE-2024-42082}
  - scsi: qla2xxx: validate nvme_local_port correctly (Nilesh Javali) [task:354889] {CVE-2024-42286}
  - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Pablo Neira Ayuso) [task:346667] {CVE-2024-42070}
  - drop_monitor: replace spin_lock by raw_spin_lock (Wander Lairson Costa) [task:345791] {CVE-2024-40980}
  - bpf: Fix a segment issue when downgrading gso_size (Fred Li) [task:352237] {CVE-2024-42281}
  - bpf: add bpf_skb_adjust_room flag BPF_F_ADJ_ROOM_FIXED_GSO (Willem de Bruijn) [task:352237]
  - bpf: add bpf_skb_adjust_room mode BPF_ADJ_ROOM_MAC (Willem de Bruijn) [task:352237]
  - CDC-NCM: avoid overflow in sanity checking (Oliver Neukum) [task:351493] {CVE-2022-48938}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.53.v2101
changelog:
  - Revert "x86/bugs: Add AMD retbleed= boot parameter" (Enze Li) [bug:247197]
  - Revert "x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value" (Enze Li) [bug:247197]
  - Revert "x86/entry: Add kernel IBRS implementation" (Enze Li) [bug:247197]
  - Revert "x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS" (Enze Li) [bug:247197]
  - Revert "x86/bugs: Report Intel retbleed vulnerability" (Enze Li) [bug:247197]
  - Revert "Add HYGON retbleed= boot parameter" (Enze Li) [bug:247197]
  - Revert "x86/bugs: Add Cannon lake to RETBleed affected CPU list" (Enze Li) [bug:247197]
  - HYGON: fix incorrect display of CPU topology structure (wangxuewen) [task:395227]
  - HYGON: perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 6h (Pu Wen) [task:357093]
  - HYGON: ALSA: hda: Fix single byte write failure issue for Hygon (Pu Wen) [task:357093]
  - HYGON: ALSA: hda: Add Hygon HD-Audio support (Pu Wen) [task:357093]
  - HYGON: EDAC/amd64: Adjust UMC channel for Hygon family 18h model 6h (Pu Wen) [task:357093]
  - HYGON: x86/amd_nb: Get DF ID from F5 device for Hygon family 18h model 6h (Pu Wen) [task:357093]
  - HYGON: EDAC/amd64: Fix intlv_num_chan for Hygon family 18h model 4h (Pu Wen) [task:357093]
  - HYGON: EDAC/amd64: Revert hi_addr_offset for Hygon family 18h model 4h (Pu Wen) [task:357093]
  - x86/microcode/AMD: Clean up per-family patch size checks (Borislav Petkov) [task:357093]
  - HYGON: i2c-piix4: Remove the IMC detecting for Hygon SMBus (Pu Wen) [task:357093]
  - HYGON: hwmon: (k10temp) Add support for Hygon family 18h model 4h~6h (Pu Wen) [task:357093]
  - HYGON: EDAC/mce_amd: Use struct cpuinfo_x86.logical_die_id for AMD NodeId (Pu Wen) [task:357093]
  - HYGON: EDAC/amd64: Determine DDR type for Hygon family 18h model 4h~6h (Pu Wen) [task:357093]
  - HYGON: EDAC/amd64: Add support for Hygon family 18h model 5h and 6h (Pu Wen) [task:357093]
  - HYGON: EDAC/amd64: Add support for Hygon family 18h model 4h (Pu Wen) [task:357093]
  - HYGON: EDAC/amd64: Get UMC channel from the strict 6th nibble (Pu Wen) [task:357093]
  - HYGON: mce/amd: Optimize bank_map implementation to support >= 32 MCE banks (Pu Wen) [task:357093]
  - HYGON: iommu/hygon: Add support for Hygon family 18h model 4h IOAPIC (Pu Wen) [task:357093]
  - HYGON: x86/amd_nb: Add support for Hygon family 18h model 5h and 6h (George Guo) [task:357093]
  - HYGON: x86/amd_nb: Add northbridge support for Hygon family 18h model 4h (Pu Wen) [task:357093]
  - x86/amd_nb: Add Family 19h PCI IDs (Yazen Ghannam) [task:357093]
  - x86/amd_nb: Add PCI device IDs for family 17h, model 70h (Marcel Bocu) [task:357093]
  - x86/amd_nb: Add PCI device IDs for family 17h, model 30h (Woods, Brian) [task:357093]
  - hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs (Woods, Brian) [task:357093]
  - HYGON: x86/microcode: Add microcode loading support for Hygon processors (Pu Wen) [task:357093]
  - HYGON: x86/cpu/hygon: Add Hygon model 5h and 6h processors (Pu Wen) [task:357093]
  - HYGON: x86/cpu/hygon: Modify the CPU topology deriving method for Hygon (Pu Wen) [task:357093]
  - EDAC: Add RDDR5 and LRDDR5 memory types (Yazen Ghannam) [task:357093]
  - EDAC: Add DDR5 new memory type (Qiuxu Zhuo) [task:357093]
  - x86/topology: Set cpu_die_id only if DIE_TYPE found (Yazen Ghannam) [task:357093]
  - EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId (Yazen Ghannam) [task:357093]
  - x86/CPU/AMD: Remove amd_get_nb_id() (Yazen Ghannam) [task:357093]
  - x86/CPU/AMD: Save AMD NodeId as cpu_die_id (Yazen Ghannam) [task:357093]
  - x86/mce: Increase maximum number of banks to 64 (Akshay Gupta) [task:357093]
  - x86/umip: Make the UMIP activated message generic (Lendacky, Thomas) [task:357093]
  - x86/umip: Print UMIP line only once (Borislav Petkov) [task:357093]
  - EDAC/amd64: Add family ops for Family 19h Models 00h-0Fh (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Save max number of controllers to family type (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Gather hardware information early (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Make struct amd64_family_type global (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Set grain per DIMM (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Support asymmetric dual-rank DIMMs (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Cache secondary Chip Select registers (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Add PCI device IDs for family 17h, model 70h (Isaac Vaughn) [task:363779]
  - EDAC/amd64: Find Chip Select memory size using Address Mask (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Adjust printed chip select sizes when interleaved (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Recognize x16 symbol size (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Set maximum channel layer size depending on family (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Support more than two Unified Memory Controllers (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Add Family 17h Model 30h PCI IDs (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Initialize DIMM info for systems with more than two channels (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Support more than two controllers for chip selects handling (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Use a macro for iterating over Unified Memory Controllers (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Drop some family checks for newer systems (Yazen Ghannam) [task:363779]
  - kabi: fix cpuinfo_x86 kabi broken (Jackie Liu) [task:363191]
  - Intel: powercap/intel_rapl: add support for ICX-D (Zhang Rui) [task:363191]
  - Intel: powercap/intel_rapl: add support for ICX (Zhang Rui) [task:363191]
  - Intel: powercap/intel_rapl: add support for IceLake desktop (Zhang Rui) [task:363191]
  - Intel: intel_rapl: Fix module autoloading issue (Zhang Rui) [task:363191]
  - Intel: intel_rapl: support two power limits for every RAPL domain (Zhang Rui) [task:363191]
  - Intel: intel_rapl: support 64 bit register (Zhang Rui) [task:363191]
  - intel_rapl: abstract RAPL common code (Zhang Rui) [task:363191]
  - Intel: intel_rapl: cleanup hardcoded MSR access (Zhang Rui) [task:363191]
  - Intel: intel_rapl: cleanup some functions (Zhang Rui) [task:363191]
  - Intel: intel_rapl: abstract register access operations (Zhang Rui) [task:363191]
  - Intel: intel_rapl: abstract register address (Zhang Rui) [task:363191]
  - Intel: intel_rapl: introduce struct rapl_if_private (Zhang Rui) [task:363191]
  - Intel: intel_rapl: introduce intel_rapl.h (Zhang Rui) [task:363191]
  - Intel: intel_rapl: remove hardcoded register index (Zhang Rui) [task:363191]
  - Intel: intel_rapl: use reg instead of msr (Zhang Rui) [task:363191]
  - Intel: powercap/intel_rapl: Update RAPL domain name and debug messages (Zhang Rui) [task:363191]
  - Intel: powercap/intel_rapl: Support multi-die/package (Zhang Rui) [task:363191]
  - Intel: powercap/intel_rapl: Simplify rapl_find_package() (Zhang Rui) [task:363191]
  - Intel: x86/topology: Define topology_logical_die_id() (Len Brown) [task:363191]
  - Intel: x86/topology: Define topology_die_id() (Len Brown) [task:363191]
  - Intel: cpu/topology: Export die_id (Len Brown) [task:363191]
  - Intel: x86/topology: Create topology_max_die_per_package() (Len Brown) [task:363191]
  - Intel: x86/topology: Add CPUID.1F multi-die/package support (Len Brown) [task:363191]
  - Intel: topology: Simplify cputopology.txt formatting and wording (Len Brown) [task:363191]
  - perf/amd/uncore: Replace manual sampling check with CAP_NO_INTERRUPT flag (Kim Phillips) [task:362631]
  - perf/amd/uncore: Fix sysfs type mismatch (Nathan Chancellor) [task:362631]
  - perf/amd/uncore: Allow F19h user coreid, threadmask, and sliceid specification (Kim Phillips) [task:362631]
  - perf/amd/uncore: Allow F17h user threadmask and slicemask specification (Kim Phillips) [task:362631]
  - perf/amd/uncore: Prepare to scale for more attributes that vary per family (Kim Phillips) [task:362631]
  - perf/amd/uncore: Set all slices and threads to restore perf stat -a behaviour (Kim Phillips) [task:362631]
  - perf/amd/uncore: Add support for Family 19h L3 PMU (Kim Phillips) [task:362631]
  - perf/amd/uncore: Make L3 thread mask code more readable (Kim Phillips) [task:362631]
  - perf/amd/uncore: Prepare L3 thread mask code for Family 19h (Kim Phillips) [task:362631]
  - arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (Jonathan Cameron) [task:368125]
  - arm64: acpi: Move get_cpu_for_acpi_id() to a header (chentao) [task:368125]
  - openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [task:370837] {CVE-2021-46955}
  - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Lv Yunlong) [task:370853] {CVE-2021-47013}
  - RDMA/rxe: Clear all QP fields if creation failed (Leon Romanovsky) [task:370867] {CVE-2021-47078}
  - inet: fully convert sk->sk_rx_dst to RCU rules (Eric Dumazet) [task:370873] {CVE-2021-47103}
  - net: caif: fix memory leak in cfusbl_device_notify (Pavel Skripkin) [task:370875] {CVE-2021-47121}
  - net: dsa: mt7530: fix VLAN traffic leaks (DENG Qingfang) [task:370889] {CVE-2021-47160}
  - ethernet:enic: Fix a use after free bug in enic_hard_start_xmit (Lv Yunlong) [task:370851] {CVE-2021-46998}
  - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses (Eric Dumazet) [task:370241] {CVE-2021-4203}
  - net/ncsi: Disable the ncsi work before freeing the associated structure (Eddie James) [task:376379] {CVE-2024-49945}
  - net/ncsi: Fix netlink registration (Joel Stanley) [task:376379]
  - tcp: check skb is non-NULL in tcp_rto_delta_us() (Josh Hunt) [task:375609] {CVE-2024-47684}
  - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Zhu Yanjun) [task:375617] {CVE-2024-47696}
  - RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled (Chengchang Tang) [task:376269] {CVE-2024-47735}
  - scsi: core: don't preallocate small SGL in case of NO_SG_CHAIN (Ming Lei) [task:227191, task:385765]
  - scsi: lib/sg_pool.c: clear 'first_chunk' in case of no preallocation (Ming Lei) [task:227191, task:385765]
  - scsi: s390: zfcp_fc: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: zfcp: move SG table helper from aux to fc and make them static (Steffen Maier) [task:227191, task:385765]
  - scsi: mvumi: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: mvumi: switch to generic DMA API (Christoph Hellwig) [task:227191, task:385765]
  - scsi: NCR5380: use sg helper to iterate over scatterlist (Finn Thain) [task:227191, task:385765]
  - scsi: wd33c93: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: ppa: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: pcmcia: nsp_cs: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: imm: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: aha152x: use sg helper to iterate over scatterlist (Finn Thain) [task:227191, task:385765]
  - scsi: staging: unisys: visorhba: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: usb: image: microtek: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: pmcraid: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: ipr: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: advansys: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: vmw_pvscsi: Use true, false for adapter->use_msg (Jason Yan) [task:227191, task:385765]
  - scsi: vmw_pvscsi: Silence dma mapping errors (Thomas Hellstrom) [task:227191, task:385765]
  - scsi: vmw_pvscsi: Fix swiotlb operation (Thomas Hellstrom) [task:227191, task:385765]
  - scsi: vmw_pscsi: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: vmw_pscsi: switch to generic DMA API (Christoph Hellwig) [task:227191, task:385765]
  - scsi: lpfc: use sg helper to iterate over scatterlist (Ming Lei) [task:62595, task:227191, task:385765]
  - scsi: core: avoid preallocating big SGL for data (Ming Lei) [task:208527, task:385765]
  - scsi: core: avoid preallocating big SGL for protection information (Ming Lei) [task:208527, task:385765]
  - scsi: lib/sg_pool.c: improve APIs for allocating sg pool (Ming Lei) [task:208527, task:385765]
  - cifs: Return correct error code from smb2_get_enc_key (Paul Aurich) [task:370839] {CVE-2021-46960}
  - Input: appletouch - initialize work before device registration (Pavel Skripkin) [task:160493, task:370827] {CVE-2021-46932}
  - i2c: validate user data in compat ioctl (Pavel Skripkin) [task:160493, task:370823] {CVE-2021-46934}
  - HID: usbhid: fix info leak in hid_submit_ctrl (Anirudh Rayabharam) [task:158827, task:370811] {CVE-2021-46906}
  - binder: fix async_free_space accounting for empty parcels (Todd Kjos) [task:160493, task:370819] {CVE-2021-46935}
  - ext4: fix timer use-after-free on failed mount (Xiaxi Shen) [task:376211] {CVE-2024-49960}
  - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. (Vincent Pelletier) [task:160493]
  - NFC: st21nfca: Fix memory leak in device probe and remove (Wei Yongjun) [task:160493]
  - locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Ali Saidi)
  - fsl/fman: Fix refcount handling of fman-related devices (Aleksandr Mishin) [task:387475] {CVE-2024-50166}
  - net: fman: Clean up error handling (Sean Anderson) [task:387475]
  - net: fman: Map the base address once (Sean Anderson) [task:387475]
  - net: fman: Unregister ethernet device on removal (Sean Anderson) [task:164562]
  - fsl/fman: use resource_size (Julia Lawall) [task:387475]
  - net: fman: Configure fixed link in memac_initialization (Sean Anderson) [task:387475]
  - fsl/fman: Check for null pointer after calling devm_ioremap (Jiasheng Jiang) [task:160493]
  - net: fman: Move struct dev to mac_device (Sean Anderson) [task:387475]
  - filemap: Fix bounds checking in filemap_read() (Trond Myklebust) [task:390893] {CVE-2024-50272}
  - Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync() (Duoming Zhou) [bug:189740] {CVE-2023-4134}
  - x86/CPU/AMD: Do not leak quotient data after a division by 0 (Borislav Petkov (AMD)) [task:179889, bug:189752] {CVE-2023-20588}
  - x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD)) [bug:185043] {CVE-2023-20593}
  - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Dave Hansen) [bug:189744]
  - x86/speculation: Add force option to GDS mitigation (Daniel Sneddon) [bug:189744]
  - x86/speculation: Add Kconfig option for GDS (Daniel Sneddon) [bug:189744]
  - x86/speculation: Add cpu_show_gds() prototype (Arnd Bergmann) [bug:189744]
  - x86: Move gds_ucode_mitigated() declaration to header (Arnd Bergmann) [bug:189744]
  - KVM: Add GDS_NO support to KVM (Daniel Sneddon) [bug:189744] {CVE-2022-40982}
  - x86/speculation: Add Gather Data Sampling mitigation (Daniel Sneddon) [bug:189744] {CVE-2022-40982}
  - x86/cpu/amd: Move the errata checking functionality up (Borislav Petkov (AMD)) [bug:185043] {CVE-2023-20593}
  - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Pawan Gupta) [task:164574]
  - x86/common: Stamp out the stepping madness (Peter Zijlstra) [task:164574]
  - x86/cpu/amd: Make erratum #1054 a legacy erratum (Kim Phillips) [task:157172]
  - x86/cpu/amd: Enable the fixed Instructions Retired counter IRPERF (Kim Phillips) [task:155809]
  - x86/cpu: Fix migration safety with X86_BUG_NULL_SEL (Jane Malalane)
  - Revert "x86/cpu/amd: Add a Zenbleed fix" (Yan Wang) [bug:185043]
  - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi) [task:371789]
  - nilfs2: fix missing cleanup on rollforward recovery error (Ryusuke Konishi) [task:363971] {CVE-2024-46781}
  - xfs: Reduce unnecessary searches when searching for the best extents (Chi Zhiling) [task:377527]
  - fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni) [task:396801] {CVE-2024-53101}
  - ocfs2: uncache inode which has failed entering the group (Dmitry Antipov) [task:396817] {CVE-2024-53112}
  - f2fs: Require FMODE_WRITE for atomic write ioctls (Jann Horn) [task:376135] {CVE-2024-47740}
  - mm: split critical region in remap_file_pages() and invoke LSMs in between (Kirill A. Shutemov) [task:376325]
  - mm: call the security_mmap_file() LSM hook in remap_file_pages() (Shu Han) [task:376325] {CVE-2024-47745}
  - mm/mmap.c: don't unlock VMAs in remap_file_pages() (Liam Howlett) [task:376325]
  - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (Al Viro) [task:363785] {CVE-2024-45025}
  - s390/cio: rename bitmap_size() -> idset_bitmap_size() (Alexander Lobakin) [task:363785]
  - bitmap: introduce generic optimized bitmap_size() (Alexander Lobakin) [task:363785]
  - tools: move alignment-related macros to new <linux/align.h> (Alexander Lobakin) [task:363785]
  - tools headers UAPI: Sync linux/const.h with the kernel headers (Arnaldo Carvalho de Melo) [task:363785]
  - tools headers: Grab copy of linux/const.h, needed by linux/bits.h (Arnaldo Carvalho de Melo) [task:363785]
  - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (Hans de Goede) [task:387555] {CVE-2024-50134}
  - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (Pedro Tammela) [task:392639] {CVE-2024-53057}
  - uprobes: fix kernel info leak via "[uprobes]" vma (Oleg Nesterov) [task:375973] {CVE-2024-49975}
  - ext4: update orig_path in ext4_find_extent() (Baokun Li) [task:376209] {CVE-2024-49881}
  - ext4: fix slab-use-after-free in ext4_split_extent_at() (Baokun Li) [task:376087] {CVE-2024-49884}
  - ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path (Theodore Ts'o) [task:376087]
  - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() (Dmitry Antipov) [task:380475] {CVE-2024-47713}
  - i40e: fix race condition by adding filter's intermediate sync state (Aleksandr Loktionov) [task:390579] {CVE-2024-53088}
  - i40e: fix i40e_count_filters() to count only active/new filters (Aleksandr Loktionov) [task:390579]
  - uprobe: avoid out-of-bounds memory access of fetching args (Qiao Ma) [task:380099] {CVE-2024-50067}
  - security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong) [task:390885] {CVE-2024-50301}
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu) [task:391029] {CVE-2024-53066}
  - usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu) [task:390745] {CVE-2024-50269}
  - media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab) [task:391027] {CVE-2024-53061}
  - sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long) [task:390741] {CVE-2024-50299}
  - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (Zicheng Qu) [task:387919] {CVE-2024-50233}
  - staging: iio: ad9832: use clock framework for clock reference (Marcelo Schmitt) [task:387919]
  - staging: iio: ad9832: organize includes (Marcelo Schmitt) [task:387919]
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (Felix Fietkau) [task:390869] {CVE-2024-50237}
  - userfaultfd: fix checks for huge PMDs (Jann Horn) [task:363981] {CVE-2024-46787}
  - media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab) [task:390895] {CVE-2024-53063}
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Baokun Li) [task:344489] {CVE-2024-40998}
  - HID: core: zero-initialize the report buffer (Jiri Kosina) [task:392647] {CVE-2024-50302}
  - media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab) [task:392635] {CVE-2024-50290}
  - media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab) [task:392643] {CVE-2024-50287}
  - dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai) [task:390571] {CVE-2024-50278}
  - dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai) [task:390571]
  - net/sched: accept TCA_STAB only for root qdisc (Eric Dumazet) [task:375649] {CVE-2024-50039}
  - net: sched: refactor grafting Qdiscs with a parent (Jakub Kicinski) [task:375649]
  - nilfs2: propagate directory read errors from nilfs_find_entry() (Ryusuke Konishi) [task:387959] {CVE-2024-50202}
  - btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana) [task:390749] {CVE-2024-50273}
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner) [task:390611] {CVE-2024-50265}
  - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (Edward Adam Davis) [task:390609] {CVE-2024-50218}
  - USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter) [task:390585] {CVE-2024-50267}
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Hyunwoo Kim) [task:390583] {CVE-2024-50264}
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai) [task:390581] {CVE-2024-50279}
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Sean Christopherson) [task:387973] {CVE-2024-50115}
  - usb: typec: altmode should keep reference to parent (Thadeu Lima de Souza Cascardo) [task:387987] {CVE-2024-50150}
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout (Luiz Augusto von Dentz) [task:387967] {CVE-2024-50125}
  - Bluetooth: call sock_hold earlier in sco_conn_del (Desmond Cheong Zhi Xi) [task:387967]
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [task:387575] {CVE-2024-50142}
  - parport: Proper fix for array out-of-bounds access (Takashi Iwai) [task:380221] {CVE-2024-50074}
  - nilfs2: fix kernel bug due to missing clearing of checked flag (Ryusuke Konishi) [task:387405] {CVE-2024-50230}
  - ixgbevf: Fix resource leak in ixgbevf_init_module() (Shang XiaoJing) [task:376297] {CVE-2022-49028}
  - sched/pelt: Fix attach_entity_load_avg() corner case (kuyo chang) [task:375977]
  - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Rutland) [task:387961] {CVE-2024-50099}
  - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (Wang Hai) [task:387913] {CVE-2024-50168}
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister (Ye Bin) [task:387981] {CVE-2024-50148}
  - RDMA/mad: Improve handling of timed out WRs of mad agent (Saravanan Vajravel) [task:387985] {CVE-2024-50095}
  - IB/mad: Issue complete whenever decrements agent refcount (Shay Drory) [task:387985]
  - netfilter: Drop fragmented ndisc packets assembled in netfilter (Georg Kohmann) [bug:277233]
  - be2net: fix potential memory leak in be_xmit() (Wang Hai) [task:387921] {CVE-2024-50167}
  - ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [task:387779] {CVE-2024-50179}
  - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (Pablo Neira Ayuso) [task:387917] {CVE-2024-50251}
  - nilfs2: fix kernel bug due to missing clearing of buffer delay flag (Ryusuke Konishi) [task:387481] {CVE-2024-50116}
  - drm/vc4: Stop the active perfmon before being destroyed (Maíra Canal) [task:387413] {CVE-2024-50187}
  - rtmutex: Drop rt_mutex::wait_lock before scheduling (Roland Xu) [task:368141] {CVE-2024-46829}
  - x86/ioapic: Handle allocation failures gracefully (Thomas Gleixner) [task:380139] {CVE-2024-49927}
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Omar Sandoval) [task:380143] {CVE-2024-50082}
  - list: add "list_del_init_careful()" to go with "list_empty_careful()" (Linus Torvalds) [task:380143]
  - gpiolib: fix memory leak in gpiochip_setup_dev() (Zeng Heng) [task:376237] {CVE-2022-48975}
  - gpiolib: check the 'ngpios' property in core gpiolib code (Bartosz Golaszewski) [task:376237]
  - gpiolib: free device name on error path to fix kmemleak (Quanyang Wang) [task:376237]
  - gpio: gpiolib: Normalize return code variable name (Linus Walleij) [task:376237]
  - tcp: avoid too many retransmit packets (Eric Dumazet) [task:347169] {CVE-2024-41007}
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Eric Dumazet) [task:347169]
  - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Menglong Dong) [task:347169]
  - tcp: refactor tcp_retransmit_timer() (Eric Dumazet) [task:347169]
  - net/sched: act_mirred: don't override retval if we already lost the skb (Jakub Kicinski) [task:210475] {CVE-2024-26739}
  - bonding: update port speed when getting bond speed (Hangbin Liu) [task:382011]
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect (Luiz Augusto von Dentz) [task:375621] {CVE-2024-49950}
  - nfsd: map the EBADMSG to nfserr_io to avoid warning (Li Lingfeng) [task:376263] {CVE-2024-49875}
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Steve Wahl) [task:376133] {CVE-2024-50017}
  - drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs (Konrad Dybcio) [task:380141] {CVE-2024-49901}
  - dm snapshot: fix lockup in dm_exception_table_exit (Mikulas Patocka) [task:221943] {CVE-2024-35805}
  - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (Ard Biesheuvel) [task:376275] {CVE-2024-49858}
  - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (Qu Wenruo) [task:376151] {CVE-2024-49868}
  - fsnotify: clear PARENT_WATCHED flags lazily (Amir Goldstein) [task:376261] {CVE-2024-47660}
  - jfs: Fix sanity check in dbMount (Dave Kleikamp) [task:376131]
  - jfs: fix out-of-bounds in dbNextAG() and diAlloc() (Jeongjun Park) [task:376131] {CVE-2024-47723}
  - net/xen-netback: prevent UAF in xenvif_flush_hash() (Jeongjun Park) [task:380461] {CVE-2024-49936}
  - net: xen-netback: hash.c: Use built-in RCU list checking (Madhuparna Bhowmik) [task:380461]
  - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (Jinjie Ruan) [task:380455] {CVE-2023-52917}
  - fou: fix initialization of grc (Muhammad Usama Anjum) [task:363977]
  - fou: Fix null-ptr-deref in GRO. (Kuniyuki Iwashima) [task:363977] {CVE-2024-46763}
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers (Eric Dumazet) [task:363977]
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers (Eric Dumazet) [task:363977]
  - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr (Mike Marciniszyn) [task:225598] {CVE-2021-47523}
  - vfs: Don't evict inode under the inode lru traversing context (Zhihao Cheng) [task:358113] {CVE-2024-45003}
  - ACPI: sysfs: validate return type of _STR method (Thomas Weißschuh) [task:380101] {CVE-2024-49860}
  - drm/amdgpu/pm: Fix the null pointer dereference for smu7 (Ma Jun) [task:352623] {CVE-2024-43909}
  - drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (Hersen Wu) [task:368523] {CVE-2024-46816}
  - ext4: no need to continue when the number of entries is 1 (Edward Adam Davis) [task:380197] {CVE-2024-49967}
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (Gustavo A. R. Silva) [task:380459] {CVE-2024-50008}
  - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (Toke Høiland-Jørgensen) [task:379923] {CVE-2024-49938}
  - net: add more sanity checks to qdisc_pkt_len_init() (Eric Dumazet) [task:380237] {CVE-2024-49948}
  - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (Eric Dumazet) [task:376177] {CVE-2024-47707}
  - drm/msm/dpu: remove LOCK/CLEAR support in RM (Jeykumar Sankaran) [task:379871]
  - drm/msm/dpu: clean up destination scaler residue (Jeykumar Sankaran) [task:379871]
  - SUNRPC: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [bug:263777]
  - btrfs: don't balance btree inode pages from buffered write path (Nikolay Borisov) [task:375983]
  - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing) [task:378953]
  - netfilter: br_netfilter: fix panic with metadata_dst skb (Andy Roulin) [task:376437] {CVE-2024-50045}
  - drm/amd/pm: ensure the fw_info is not null before using it (Tim Huang) [task:376229] {CVE-2024-49890}
  - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (Lizhi Xu) [task:375655] {CVE-2024-49877}
  - tipc: guard against string buffer overrun (Simon Horman) [task:376129] {CVE-2024-49995}
  - ALSA: asihpi: Fix potential OOB array access (Takashi Iwai) [task:376313] {CVE-2024-50007}
  - media: pci: cx23885: check cx23885_vdev_init() return (Hans Verkuil) [task:376301] {CVE-2023-52918}
  - btrfs: replace BUG_ON() with error handling at update_ref_for_cow() (Filipe Manana) [task:363775] {CVE-2024-46752}
  - ACPI: PAD: fix crash in exit_round_robin() (Seiji Nishikawa) [task:376159] {CVE-2024-49935}
  - ACPI: acpi_pad: add a missed blank line after declarations (Xiaofei Tan) [task:376159]
  - drm: omapdrm: Add missing check for alloc_ordered_workqueue (Ma Ke) [task:376335] {CVE-2024-49879}
  - Bluetooth: hci_core: Fix leaking sent_cmd skb (Luiz Augusto von Dentz) [task:344623] {CVE-2022-48844}
  - RDMA/cxgb4: Added NULL check for lookup_atid (Mikhail Lobanov) [task:376283] {CVE-2024-47749}
  - rtc: cmos: Fix wake alarm breakage (Rafael J. Wysocki) [task:375407]
  - rtc: cmos: Fix event handler registration ordering issue (Rafael J. Wysocki) [task:375407] {CVE-2022-48953}
  - block, bfq: fix possible UAF for bfqq->bic with merge chain (Yu Kuai) [task:375629] {CVE-2024-47706}
  - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (Xin Long) [task:375633] {CVE-2024-49944}
  - MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed (Jiaxun Yang) [task:368269] {CVE-2024-46832}
  - ext4: fix i_data_sem unlock order in ext4_ind_migrate() (Artem Sadovnikov) [task:375967] {CVE-2024-50006}
  - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() (Ryusuke Konishi) [task:375969] {CVE-2024-47699}
  - netfilter: nf_tables: prevent nf_skb_duplicated corruption (Eric Dumazet) [task:376057] {CVE-2024-49952}
  - ppp: fix ppp_async_encode() illegal access (Eric Dumazet) [task:375965] {CVE-2024-50035}
  - ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (Kaixin Wang) [task:375963] {CVE-2024-50059}
  - nfsd: call cache_put if xdr_reserve_space returns NULL (Guoqing Jiang) [task:376185] {CVE-2024-47737}
  - ocfs2: remove unreasonable unlock in ocfs2_read_blocks (Lizhi Xu) [task:376163] {CVE-2024-49965}
  - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error (Junlin Li) [task:375615] {CVE-2024-47697}
  - mailbox: bcm2835: Fix timeout during suspend mode (Stefan Wahren) [task:376341] {CVE-2024-49963}
  - nilfs2: fix potential oob read in nilfs_btree_check_delete() (Ryusuke Konishi) [task:376183] {CVE-2024-47757}
  - ext4: aovid use-after-free in ext4_ext_insert_extent() (Baokun Li) [task:376347] {CVE-2024-49883}
  - ocfs2: cancel dqi_sync_work before freeing oinfo (Joseph Qi) [task:376203] {CVE-2024-49966}
  - drm/amd/display: added NULL check at start of dc_validate_stream (winstang) [task:375221] {CVE-2024-46802}
  - ocfs2: reserve space for inline xattr before attaching reflink tree (Gautham Ananthakrishna) [task:376165] {CVE-2024-49958}
  - btrfs: wait for fixup workers before stopping cleaner kthread during umount (Filipe Manana) [task:376329] {CVE-2024-49867}
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Eric Dumazet) [task:376333] {CVE-2024-47685}
  - ACPI: battery: Fix possible crash when unregistering a battery hook (Armin Wolf) [task:376339] {CVE-2024-49955}
  - ACPI: battery: Simplify battery hook locking (Armin Wolf) [task:376339]
  - net: ethernet: nixge: fix NULL dereference (Yuri Karpov) [task:376191] {CVE-2022-49019}
  - net: nixge: Address compiler warnings when building for i386 (Moritz Fischer) [task:376191]
  - net: nixge: Add support for 64-bit platforms (Moritz Fischer) [task:376191]
  - ext4: fix double brelse() the buffer of the extents path (Baokun Li) [task:376207] {CVE-2024-49882}
  - vfs: fix race between evice_inodes() and find_inode()&iput() (Julian Sun) [task:376219] {CVE-2024-47679}
  - jfs: check if leafidx greater than num leaves per dmap tree (Edward Adam Davis) [task:376377] {CVE-2024-49902}
  - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error (Junlin Li) [task:376239] {CVE-2024-47698}
  - net: Fix an unsafe loop on the list (Anastasia Kovaleva) [task:376085] {CVE-2024-50024}
  - xen: use correct end address of kernel for conflict checking (Juergen Gross) [task:376245] {CVE-2024-47722}
  - media: venus: fix use after free bug in venus_remove due to race condition (Zheng Wang) [task:376401] {CVE-2024-49981}
  - ext4: avoid OOB when system.data xattr changes underneath the filesystem (Thadeu Lima de Souza Cascardo) [task:376249] {CVE-2024-47701}
  - ext4: return error on ext4_find_inline_entry (Thadeu Lima de Souza Cascardo) [task:376249]
  - jfs: Fix uninit-value access of new_ea in ea_buffer (Zhao Mengmeng) [task:376257] {CVE-2024-49900}
  - drm/amd/display: Check stream before comparing them (Alex Hung) [task:376409] {CVE-2024-49896}
  - sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop (Xin Long) [task:376417]
  - sctp: fix memory leak in sctp_stream_outq_migrate() (Zhengchao Shao) [task:376417] {CVE-2022-49013}
  - fbdev: pxafb: Fix possible use after free in pxafb_task() (Kaixin Wang) [task:376117] {CVE-2024-49924}
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation (Srinivasan Shanmugam) [task:376113] {CVE-2024-49894}
  - ocfs2: fix null-ptr-deref when journal load failed. (Julian Sun) [task:376303] {CVE-2024-49957}
  - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (Luiz Augusto von Dentz) [task:376309] {CVE-2024-50044}
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (Baokun Li) [task:376143] {CVE-2024-49959}
  - jfs: Fix uaf in dbFreeBits (Edward Adam Davis) [task:376153] {CVE-2024-49903}
  - e100: Fix possible use after free in e100_xmit_prepare (Wang Hai) [task:376281] {CVE-2022-49026}
  - e100: switch from 'pci_' to 'dma_' API (Christophe JAILLET) [task:376281]
  - aoe: fix the potential use-after-free problem in more places (Chun-Yi Lee) [task:376351] {CVE-2024-49982}
  - usb: hub: avoid warm port reset during USB3 disconnect (Mathias Nyman) [bug:251189]
  - net: ethernet: lantiq_etop: fix memory disclosure (Aleksander Jan Bajkowski) [task:376181] {CVE-2024-49997}
  - tracing: Free buffers when a used dynamic event is removed (Steven Rostedt (Google)) [task:375645] {CVE-2022-49006}
  - tracing: initialize variable in create_dyn_event() (Frank Rowand) [task:375645]
  - tracing: Add unified dynamic event framework (Masami Hiramatsu) [task:375645]
  - drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable() (Abhinav Kumar) [task:363787] {CVE-2024-45015}
  - drm/msm/dpu: remove RM dependency on connector state (Jeykumar Sankaran) [task:363787]
  - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (Pei Xiao) [task:376385] {CVE-2024-49962}
  - fix the kabi error of del_timer and del_timer_sync (Yan Wang) [bug:189740]
  - list: Add hlist_unhashed_lockless() (Eric Dumazet)
  - cxgb4: fix use after free bugs caused by circular dependency problem (Duoming Zhou) [bug:189736] {CVE-2023-4133}
  - timers: Provide timer_shutdown[_sync]() (Thomas Gleixner) [bug:189740]
  - timers: Add shutdown mechanism to the internal functions (Thomas Gleixner) [bug:189740]
  - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (Thomas Gleixner) [bug:189740]
  - timers: Rename del_timer() to timer_delete() (Thomas Gleixner) [bug:189740]
  - timers: Rename del_timer_sync() to timer_delete_sync() (Thomas Gleixner) [bug:189740]
  - timers: Use del_timer_sync() even on UP (Thomas Gleixner) [bug:189740]
  - timers: Silently ignore timers with a NULL function (Thomas Gleixner) [bug:189740]
  - timers: Update kernel-doc for various functions (Thomas Gleixner) [bug:189740]
  - timers: Replace BUG_ON()s (Thomas Gleixner) [bug:189740]
  - timer: Use hlist_unhashed_lockless() in timer_pending() (Eric Dumazet)
  - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (Steven Rostedt (Google)) [bug:189740]
  - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (Steven Rostedt (Google)) [bug:189740]
  - net: hso: fix null-ptr-deref during tty device unregistration (Anirudh Rayabharam) [task:158827]
  - usb: hso: check for return value in hso_serial_common_create() (Rustam Kovhaev) [task:157172]
  - net: fix use-after-free in tw_timer_handler (Muchun Song)
  - i2c: Fix a potential use after free (Xu Wang) [task:162162]
  - mm: vmscan: use a new flag to indicate shrinker is registered (Yang Shi)
  - mm: shrinker: make shrinker not depend on memcg kmem (Yang Shi)
  - mm: vmscan: protect shrinker idr replace with CONFIG_MEMCG (Yang Shi)
  - ext4: inline jbd2_journal_[un]register_shrinker() (Theodore Ts'o)
  - jbd2: export jbd2_journal_[un]register_shrinker() (Zhang Yi)
  - KVM: Add infrastructure and macro to mark VM as bugged (Sean Christopherson) [bug:128559]
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Kuniyuki Iwashima) [task:387777] {CVE-2024-50154}
  - tcp: relookup sock for RST+ACK packets handled by obsolete req sock (Alexander Ovechkin)
  - inet_connection_sock: remove unused parameter of reqsk_queue_unlink func (Zhiqiang Liu)
  - scsi: smartpqi: add no_write_same for logical volumes (Dave Carroll) [task:388235]
  - KVM: Fix compile error (Zhang Hao) [task:370239] {CVE-2022-2153}
  - netfilter: nftables: avoid overflows in nft_hash_buckets() (Eric Dumazet) [task:370849] {CVE-2021-46992}
  - Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() (Sungwoo Kim) [task:223107] {CVE-2024-36013}
  - Bluetooth: Remove BT_HS (Luiz Augusto von Dentz) [task:223107]
  - Bluetooth: remove redundant assignment to variable icid (Colin Ian King) [task:223107]
  - Bluetooth: Remove unused declaration amp_read_loc_info() (Yue Haibing) [task:353905]
  - Bluetooth: a2mp: Use struct_size() helper (Gustavo A. R. Silva) [task:353905]
  - inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [task:364261]
  - Revert "inet: frags: re-introduce skb coalescing for local delivery" (taowei) [task:364261]
  - 6lowpan: use rbtree for IP frag queue (Peter Oskolkov) [task:364261]
  - net: Add and use skb_mark_not_on_list(). (David S. Miller)
  - serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Finn Thain) [task:217562] {CVE-2024-26999}
  - tty: serial: remove set but not used variable 'error' (YueHaibing) [task:217562]
  - crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (Tong Zhang) [task:158827] {CVE-2021-47056}
  - soc: qcom: cmd-db: Map shared memory as WC, not WB (Volodymyr Babchuk) [task:364171] {CVE-2024-46689}
  - net: caif: fix memory leak in caif_device_notify (Pavel Skripkin) [task:370887] {CVE-2021-47122}
  - net: caif: add proper error handling (Pavel Skripkin) [task:370887]
  - net: caif: added cfserl_release function (Pavel Skripkin) [task:370887]
  - net: fix pmtu check in nopmtudisc mode (Florian Westphal) [task:372755]
  - ring-buffer: Fix race while reader and writer are on the same page (Zheng Yejian) [task:387361]
  - ring-buffer: Fix race between reset page and reading page (Steven Rostedt (Google)) [task:387361]
  - i40e: Add bounds check for ch[] array (Piotr Kwapulinski) [task:367865] {CVE-2019-0149}
  - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Hans de Goede) [task:370865] {CVE-2021-47073}
  - bpf: Fix a sdiv overflow issue (Yonghong Song) [task:376399] {CVE-2024-49888}
  - bpf: Rename fixup_bpf_calls and add some comments (Brendan Jackman) [task:376399]
  - net: hns3: put off calling register_netdev() until client initialize complete (Jian Shen) [task:370881] {CVE-2021-47139}
  - Add HYGON retbleed= boot parameter (George Guo) [bug:247197]
  - x86/bugs: Report Intel retbleed vulnerability (Peter Zijlstra) [bug:247197]
  - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS (Pawan Gupta) [bug:247197]
  - x86/entry: Add kernel IBRS implementation (Peter Zijlstra) [bug:247197]
  - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value (Peter Zijlstra) [bug:247197]
  - x86/bugs: Add AMD retbleed= boot parameter (Alexandre Chartre) [bug:247197]
  - security/box: fix bug with kvmalloc free (zhubing) [task:370661]
  - irqchip/gic-v3: Do not enable irqs when handling spurious interrups (He Ying) [task:370841] {CVE-2021-46961}
  - md/raid1: properly indicate failure when ending a failed write request (Paul Clements) [task:370831] {CVE-2021-46950}
  - userfaultfd: release page in error path to avoid BUG_ON (Axel Rasmussen) [task:370847] {CVE-2021-46988}
  - hfsplus: prevent corruption in shrinking truncate (Jouni Roivas) [task:370845, task:158827] {CVE-2021-46989}
  - ACPI: custom_method: fix potential use-after-free issue (Mark Langsdorf) [task:370843, task:153627] {CVE-2021-46966}
  - pid: take a reference when initializing `cad_pid` (Mark Rutland) [task:370883] {CVE-2021-47118}
  - btrfs: do not BUG_ON in link_to_fixup_dir (Josef Bacik) [task:370885, task:158827] {CVE-2021-47145}
  - nvme: ensure subsystem reset is single threaded (Keith Busch) [task:367867, bug:153851] {CVE-2022-3169}
  - nvme: Wait for reset state when required (Keith Busch) [task:367867, bug:150386]
  - nvme: Prevent resets during paused controller state (Keith Busch) [task:85444, task:367867]
  - nvme-pci: Sync queues on reset (Keith Busch) [task:367867, bug:150386]
  - kabi: fix the kabi issue caused by the addition of 'reset_in_progress' in struct usb_device (shitao) [task:370243]
  - USB: core: Prevent nested device-reset calls (Alan Stern) [task:370243] {CVE-2022-4662}
  - ocfs2: fix a deadlock when commit trans (Joseph Qi) [task:221975]
  - ocfs2: fix race between searching chunks and release journal_head from buffer_head (Gautham Ananthakrishna) [task:221975] {CVE-2021-47493}
  - jbd2: Make state lock a spinlock (Thomas Gleixner) [task:221975]
  - jbd2: remove __journal_try_to_free_buffer() (Zhang Yi) [task:221975]
  - jbd2: fix a race when checking checkpoint buffer busy (Zhang Yi) [task:221975]
  - jbd2: remove journal_clean_one_cp_list() (Zhang Yi) [task:221975]
  - jbd2: remove t_checkpoint_io_list (Zhang Yi) [task:221975]
  - jbd2: recheck chechpointing non-dirty buffer (Zhang Yi) [task:221975]
  - jbd2: remove the out label in __jbd2_journal_remove_checkpoint() (Zhang Yi) [task:221975]
  - jbd2: simplify journal_clean_one_cp_list() (Zhang Yi) [task:221975]
  - jbd2: remove redundant buffer io error checks (Zhang Yi) [task:221975]
  - jbd2,ext4: add a shrinker to release checkpointed buffers (Zhang Yi) [task:221975]
  - jbd2: protect jh by grab a ref in jbd2_journal_forget (yangerkun) [task:221975]
  - jbd2: Drop unnecessary branch from jbd2_journal_forget() (Jan Kara) [task:221975]
  - jbd2: Don't call __bforget() unnecessarily (Jan Kara) [task:221975]
  - jbd2: Remove jbd_trylock_bh_state() (Thomas Gleixner) [task:221975]
  - jbd2: Simplify journal_unmap_buffer() (Thomas Gleixner) [task:221975]
  - jbd2: export jbd2_journal_[grab|put]_journal_head (Joseph Qi) [task:221975]
  - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (Ye Bin) [task:370803] {CVE-2021-33631}
  - ext4: factor out write end code of inline file (Zhang Yi) [task:370803]
  - ext4: check and update i_disksize properly (Zhang Yi) [task:370803]
  - ext4: correct the error path of ext4_write_inline_data_end() (Zhang Yi) [task:370803]
  - crypto: qcom-rng - ensure buffer for generate is completely filled (Brian Masney) [task:370835]
  - ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure (Marc Zyngier) [task:370833] {CVE-2021-46953}
  - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() (Vitaly Kuznetsov) [task:370239] {CVE-2022-2153}
  - vsock/virtio: free queued packets when closing socket (Stefano Garzarella) [task:169356] {CVE-2021-47024}
  - ext4: Fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed (Ye Bin) [task:355213] {CVE-2021-47117}
  - Revert "ext4: Fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed" (Ye Bin)
  - ext4: Fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed (Ye Bin)
  - ext4: fix memory leak in ext4_fill_super (Pavel Skripkin) [task:370877] {CVE-2021-47119}
  - ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts'o) [task:370801] {CVE-2024-0775}
  - dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails (Benjamin Block)
  - phonet/pep: refuse to enable an unbound pipe (Rémi Denis-Courmont) [task:160493, task:370871] {CVE-2021-47086}
  - ocfs2: fix data corruption by fallocate (Junxiao Bi) [task:158827, task:370879] {CVE-2021-47114}
  - config: enable CONFIG_BUG_ON_DATA_CORRUPTION (tanze) [task:354881]
  - sysctl: always initialize i_uid/i_gid (Thomas Weißschuh) [task:352223] {CVE-2024-42312}
  - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Scott Mayhew) [task:363951] {CVE-2024-46695}
  - btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() (Filipe Manana) [task:364083] {CVE-2024-46751}
  - btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info() (Filipe Manana) [task:364083]
  - btrfs: remove superfluous metadata check at btrfs_lookup_extent_info() (Filipe Manana) [task:364083]
  - ACPI: video: Change how we determine if brightness key-presses are handled (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses (Hans de Goede) [task:368343] {CVE-2024-46859}
  - platform/x86: panasonic-laptop: Use acpi_video_get_backlight_type() (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: filter out duplicate volume up/down/mute keypresses (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: don't report duplicate brightness key-presses (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: revert "Resolve hotkey double trigger bug" (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: sort includes alphabetically (Hans de Goede) [task:368343]
  - treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 392 (Thomas Gleixner) [task:368343]
  - platform/x86: panasonic-laptop: de-obfuscate button codes (Stefan Seyfried) [task:368343]
  - platform/x86: panasonic-laptop: Replace snprintf in show functions with sysfs_emit (Qing Wang) [task:368343]
  - platform/x86: panasonic-laptop: remove redundant assignment of variable result (Colin Ian King) [task:368343]
  - platform/x86: panasonic-laptop: Add sysfs attributes for firmware brightness registers (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Add support for battery charging threshold (eco mode) (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Resolve hotkey double trigger bug (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Add write support to mute (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Fix sticky key init bug (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Fix naming of platform files for consistency with other modules (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Split MODULE_AUTHOR() by one author per macro call (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Replace ACPI prints with pr_*() macros (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Add support for optical driver power in Y and W series (Kenneth Chan) [task:368343]
  - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) (Kishon Vijay Abraham I) [task:372905] {CVE-2024-47667}
  - nfs: fix UAF in direct writes (Josef Bacik) [task:217568] {CVE-2024-26958}
  - staging: iio: frequency: ad9834: Validate frequency parameter value (Aleksandr Mishin) [task:372895] {CVE-2024-47663}
  - staging: iio: frequency: ad9833: Load clock using clock framework (Beniamin Bia) [task:372895]
  - staging: iio: frequency: ad9833: Get frequency value statically (Beniamin Bia) [task:372895]
  - nilfs2: fix state management in error path of log writing function (Ryusuke Konishi) [task:372903] {CVE-2024-47669}
  - wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead (Emmanuel Grumbach) [task:372897] {CVE-2024-47672}
  - scsi: pm80xx: Set phy->enable_completion only when we wait for it (Igor Pylypiv) [task:372775] {CVE-2024-47666}
  - scsi: pm80xx: Add fatal error checks (Changyuan Lyu) [task:372775]
  - scsi: pm80xx: Fix for phy enable/disable functionality (Deepak Ukey) [task:372775]
  - smack: tcp: ipv4, fix incorrect labeling (Casey Schaufler) [task:372671] {CVE-2024-47659}
  - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Kent Overstreet) [task:372519] {CVE-2024-47668}
  - drm/msm/dpu: fix compile error (Lu Yao) [task:379873]
  - ice: Add netif_device_attach/detach into PF reset flow (Dawid Osuchowski) [task:363961] {CVE-2024-46770}
  - security/kysec: permit task killed by parent (penghuaihe) [bug:272883]
  - memcg: protect concurrent access to mem_cgroup_idr (Shakeel Butt) [task:352017] {CVE-2024-43892}
  - netfilter: nft_socket: fix sk refcount leaks (Florian Westphal) [task:368153] {CVE-2024-46855}
  - ASoC: meson: axg-card: fix 'use-after-free' (Arseniy Krasnov) [task:368151] {CVE-2024-46849}
  - ethtool: check device is present when getting link settings (Jamie Bainbridge) [task:364141] {CVE-2024-46679}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.54.v2101
changelog:
  - Revert "ipv6: Add icmp_echo_ignore_multicast support for ICMPv6" (luoxuanqiang) [task:428056]
  - Revert "ipv6: Add icmp_echo_ignore_anycast for ICMPv6" (luoxuanqiang) [task:428056]
  - Revert "ipv6: Add rate limit mask for ICMPv6 messages" (luoxuanqiang) [task:428056]
  - Revert "icmp: Fix data-races around sysctl." (luoxuanqiang) [task:428056]
  - Revert "icmp: change the order of rate limits" (luoxuanqiang) [task:428056]
  - bpf: fix OOB devmap writes when deleting elements (Maciej Fijalkowski) [task:410065]
  - xsk: fix OOB map writes when deleting elements (Maciej Fijalkowski) [task:410065] {CVE-2024-56614}
  - HYGON: KVM: force pat to write-back (张浩) [task:419887]
  - xhci: make sure TRB is fully written before giving it to the controller (Mathias Nyman) [task:158034]
  - stop_machine: Avoid potential race behaviour (Mark Rutland) [task:419741]
  - ila: serialize calls to nf_register_net_hooks() (Eric Dumazet) [task:425032, task:431211] {CVE-2024-57900}
  - ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2) (Mathieu Desnoyers)
  - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (Filipe Manana) [task:429500] {CVE-2024-57896}
  - REDHAT: rpmspec: amend removal of depmod created files to include modules.builtin.alias.bin (Jiangshan Yi) [task:413827]
  - rpmbuild: avoid providing duplicate dtb directory (Jiangshan Yi) [task:413827]
  - net: af_can: do not leave a dangling sk pointer in can_create() (Ignat Korchagin) [task:429514] {CVE-2024-56603}
  - wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (Issam Hamdi) [task:429536] {CVE-2024-57899}
  - wifi: mac80211: fix mesh id corruption on 32 bit systems (Felix Fietkau) [task:429536]
  - net: inet6: do not leave a dangling sk pointer in inet6_create() (Ignat Korchagin) [task:429511] {CVE-2024-56600}
  - sched/deadline: Fix warning in migrate_enable for boosted tasks (Wander Lairson Costa) [task:410385] {CVE-2024-56583}
  - selinux: ignore unknown extended permissions (Thiébaud Weksteen) [task:427277] {CVE-2024-57931}
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Liu Jian) [task:412151] {CVE-2024-56688}
  - dm thin: make get_first_thin use rcu-safe list first function (Krister Johansen) [task:427323] {CVE-2025-21664}
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (Suraj Sonawane) [task:410053] {CVE-2024-56662}
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (Andy Shevchenko) [task:412161] {CVE-2024-56723}
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (Andy Shevchenko) [task:412167] {CVE-2024-56724}
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (Andy Shevchenko) [task:412167]
  - net: Fix icmp host relookup triggering ip_rt_bug (Dong Chenchen) [task:410447] {CVE-2024-56647}
  - drivers/gmjstcm: import CVE-2011-1160 CVE-2011-1162 fixes to tcm.c (Li ZhiGang) [task:406609] {CVE-2024-24891}
  - drivers/gmjstcm: fix a dev_err() call in spi tcm device probe (Li ZhiGang) [task:406609]
  - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Sidraya Jayagond) [task:410367] {CVE-2024-53210}
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (Ryusuke Konishi) [task:410479] {CVE-2024-56619}
  - ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [task:410395] {CVE-2024-56532}
  - hfsplus: don't query the device logical block size multiple times (Thadeu Lima de Souza Cascardo) [task:410029] {CVE-2024-56548}
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (Dan Carpenter) [task:408543] {CVE-2024-53158}
  - NFSD: Prevent a potential integer overflow (Chuck Lever) [task:408541] {CVE-2024-53146}
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter() (Dmitry Antipov) [task:408545] {CVE-2024-53155}
  - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (Luo Qiu) [task:408531] {CVE-2024-53157}
  - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (Furong Xu) [task:391021] {CVE-2024-53058}
  - kylin_extend: fix kernel NULL pointer dereference (huanfuxi) [task:391387]
  - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (Al Viro) [task:406597] {CVE-2024-42265}
  - drm/amdgpu: change vm->task_info handling (Shashank Sharma) [task:347157] {CVE-2024-41008}
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jeongjun Park) [task:408553] {CVE-2024-53156}
  - wifi: iwlegacy: Clear stale interrupts before resuming device (Ville Syrjälä) [task:387911] {CVE-2024-50234}
  - net: do not delay dst_entries_add() in dst_release() (Eric Dumazet) [task:380195] {CVE-2024-50036}
  - f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread() (Chao Yu) [task:376109] {CVE-2024-47691}
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens) [task:403255] {CVE-2024-53104}
  - btrfs: fix the length of reserved qgroup to free (Haisu Wang) [task:364175]
  - btrfs: fix qgroup reserve leaks in cow_file_range (Boris Burkov) [task:364175] {CVE-2024-46733}
  - fsl/fman: Save device references taken in mac_probe() (Aleksandr Mishin) [task:387475]
  - net: fman: Use physical address for userspace interfaces (Sean Anderson) [task:387475]
  - net: dpaa: Use mac_dev variable in dpaa_netdev_init (Sean Anderson) [task:387475]
  - net: fman: memac: Uninitialized variable on error path (Dan Carpenter) [task:387475]
  - net: fman: Get PCS node in per-mac init (Sean Anderson) [task:387475]
  - dpaa_eth: Use random MAC address when none is given (Madalin Bucur) [task:387475]
  - net: mdio: fix unbalanced fwnode reference count in mdio_device_release() (Zeng Heng) [task:376343] {CVE-2022-48961}
  - net: mdio: use device_set_node() to setup both fwnode and of (Ioana Ciornei) [task:376343]
  - driver core: add a helper to setup both the of_node and fwnode of a device (Ioana Ciornei) [task:376343]
  - media: av7110: fix a spectre vulnerability (Mauro Carvalho Chehab) [task:390755] {CVE-2024-50289}
  - firmware_loader: Block path traversal (Jann Horn) [task:375665] {CVE-2024-47742}
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (Hyunwoo Kim) [task:396803] {CVE-2024-53103}
  - net: fix data-races around sk->sk_forward_alloc (Wang Liang) [task:396799] {CVE-2024-53124}
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Ryusuke Konishi) [task:398629] {CVE-2024-53130}
  - netlink: terminate outstanding dump on socket close (Jakub Kicinski) [task:398631] {CVE-2024-53140}
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Ryusuke Konishi) [task:398633] {CVE-2024-53131}
  - netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park) [task:398615] {CVE-2024-53141}
  - NETSWIFT: txgbevf: FIX: fix issue in kylin4.19-kernel test (Linyue Xie) [task:226013]
  - NETSWIFT: txgbevf: set version 1.3.2 (Linyue Xie) [task:226013]
  - NETSWIFT: txgbevf: FIX:fix compile error in some redhat os (Linyue Xie) [task:226013]
  - NETSWIFT: txgbevf: FIX: fix compile error on some os (Linyue Xie) [task:226013]
  - NETSWIFT: txgbevf: fix: fix slt test error log (Linyue Xie) [task:226013]
  - NETSWIFT: txgbevf: FIX: fix bug that try to free already-free irq (Linyue Xie) [task:226013]
  - NETSWIFT: txgbevf: FIX: fix bug that slt test failed (Linyue Xie) [task:226013]
  - NETSWIFT: txgbevf: Modify compile mode (Linyue Xie) [task:226013]
  - NETSWIFT: txgbevf: FIX: fix bug that vf pcie device not is remove when after rmmod pf driver (Linyue Xie) [task:226013]
  - NETSWIFT: txgbevf: set version 1.3.2rc0 (Linyue Xie) [task:226013]
  - NETSWIFT: txgbevf: FIX: fix bug that txgbevf 802.1ad vlan ping fail (Linyue Xie) [task:226013]
  - NETSWIFT: txgbevf: FIX: fix VF UDP RSS cannot off (Linyue Xie) [task:226013]
  - NETSWIFT: txgbevf: Revert "FIX: fix VF RSS rules not working" (Linyue Xie) [task:226013]
  - NETSWIFT: txgbevf: Revert commit b283dc9be78e (Linyue Xie) [task:226013]
  - NETSWIFT: txgbevf: FIX: fix VF RSS rules not working (Linyue Xie) [task:226013]
  - NETSWIFT: txgbevf: ADD: add new file Module.supported (Linyue Xie) [task:226013]
  - NETSWIFT: txgbevf: FIX: fix TXGBE_VXSTATUS_SPEED not right (Linyue Xie) [task:226013]
  - NETSWIFT: txgbevf: FIX: fix qinq issue in centos: (Linyue Xie) [task:226013]
  - NETSWIFT: txgbevf: fix: fix vf only supports a maximum of 2 queues (Linyue Xie) [task:226013]
  - NETSWIFT: txgbevf: Synchronous wangxun txgbevf driver source code (luoqing) [task:226013]
  - NETSWIFT: txgbevf: set version to 1.3.1 (Juxia He) [task:226013]
  - NETSWIFT: txgbevf: FIX: fix compile warning on linx 6.0.60.4 and linxos 6.0.60 (zhongxiangji) [task:226013]
  - NETSWIFT: txgbevf: FIX: fix compile warning on ubuntu 22.10 and 23.04 (zhongxiangji) [task:226013]
  - NETSWIFT: txgbevf: fix: fix change not mtu work on some os like centos7.7 (zhongxiangji) [task:226013]
  - NETSWIFT: txgbevf: FIX: fix bug tx/rx count error when down/up while count exceed 0x100000000 (zhongxiangji) [task:226013]
  - NETSWIFT: txgbevf: Update version to 1.3.1rc0 for test (Juxia He) [task:226013]
  - NETSWIFT: txgbevf: FIX: fix rx/tx count error when down/up (zhongxiangji) [task:226013]
  - NETSWIFT: txgbevf: ADD: add the interfacce to show fw version on vf (zhongxiangji) [task:226013]
  - NETSWIFT: txgbevf: FIX: FIX bug that set vlan failed but not return error (zhongxiangji) [task:226013]
  - NETSWIFT: txgbevf: FIX: fix vf cannot revice packets after pcie reset (zhongxiangji) [task:226013]
  - NETSWIFT: txgbevf: FIX: FIX DRV_VERSION not right (zhongxiangji) [task:226013]
  - NETSWIFT: txgbevf: Modify: modify compile command (zhongxiangji) [task:226013]
  - devlink: allow driver to update progress of flash update (Jiri Pirko) [task:162874, task:161899]
  - devlink: prepare to support region operations (Jacob Keller) [task:162874, task:161899]
  - NETSWIFT: txgbevf: set release version 1.3.0 (linyuexie) [task:130764]
  - NETSWIFT: txgbevf: UP update compile in linux 5.18.1 (zhongxiangji) [task:130764]
  - NETSWIFT: txgbevf: Fix: fix the bug that ethtool -t error in sw_64 (zhongxiangji) [task:130764]
  - NETSWIFT: txgbevf: Fix: fix the bug that self test error (zhongxiangji) [task:130764]
  - NETSWIFT: txgbevf: ADD: add mbx lock for get link state (zhongxiangji) [task:130764]
  - NETSWIFT: txgbevf: Fix: fix bug that last_mprc not right(2) (zhongxiangji) [task:130764]
  - NETSWIFT: txgbevf: Modify: Modify print info (zhongxiangji) [task:130764]
  - NETSWIFT: txgbevf: Remove: remove some print for debug (zhongxiangji) [task:130764]
  - NETSWIFT: txgbevf: Fix: fix bug that last_mprc not right (zhongxiangji) [task:130764]
  - NETSWIFT: txgbevf: Modify: Modify print level (zhongxiangji) [task:130764]
  - NETSWIFT: txgbevf: MODIFY: Not support get and set vf revice hash rules (zhongxiangji) [task:130764]
  - NETSWIFT: txgbevf: Add: add lock for updata package count status (zhongxiangji) [task:130764]
  - NETSWIFT: txgbevf: Fix: fix the bug that count clear after down up (zhongxiangji) [task:130764]
  - NETSWIFT: txgbevf: Fix: fix compile warning that mixed declarations and code (zhongxiangji) [task:130764]
  - NETSWIFT: txgbevf: Fix: fix the bug that ip link set vf status not right (zhongxiangji) [task:130764]
  - NETSWIFT: txgbevf: FIX: fix the bug that ethtool -N not work as expected (zhongxiangji) [task:130764]
  - NETSWIFT: txgbevf: Fix: fix the bug that ethtool -S tx and rx count not right (zhongxiangji) [task:130764]
  - NETSWIFT: txgbevf: Fix: fix warning print when sriov nums more than 7 (zhongxiangji) [task:130764]
  - NETSWIFT: txgbevf: FIX: fix a bug because outside (linyuexie) [task:130764]
  - NETSWIFT: txgbevf: FIX: not support XDP_BUFF_RXQ (mengyuanlou) [task:130764]
  - net: pass net_device argument to the eth_get_headlen (Stanislav Fomichev)
  - txgbevf: resolve API redefinition conflicts (zhulei) [task:75108]
  - txgbevf: add WangXun virtual function net driver (luoqing) [task:75108]
  - NETSWIFT: txgbe: FIX: fix issue in kernel test (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: fix: add msglvl for kr debug messages (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: FIX: fix bug on vxlan-gpe tunnel packet hw offload (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: fix: ocp ncsi link is down when driver probe (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: feat: add support to desc check (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: txgbe: sp: fix 10kr autoneg to cx4/5 (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: fix: vxlan/geneve ipv6 add/delete port bug (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: feat: force dac cable to kr mode (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: feat: reset flow (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: fix: ipv6 offload (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: update version to 1.3.6.2 (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: fix: tx csum by soft except tcp udp sctp (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: feat: send autoneg setting to firmware (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: set version 1.3.6 in main file (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: FIX:fix loud xsk in some kernel may error (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: fix: fix bug that send packet failed in certain conditions (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: FIX:fix xsk tx may cause kernel crash (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: Fix: allow to add nedev_uc_addr over 64 (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: FIX: fix bug that slt test failed (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: FIX: fix 802.1ad rx_csum_offload_errors not increase (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: set version 1.3.6rc1 (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: FIX: vlvf value not right (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: feat: sync adaptive rx/rx usecs/tx-frames-irq setting to txgbe (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: FIX: fix the ethtool -t loopback test fails when the multi-speed sfp links to 1000M and veto on (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: fix: delete error code (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: fix: function 1 ethtool -i show firmware err (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: fix: fix some bugs about vf 802.1ad vlan (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: fix: change firmware-version format (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: fix: ethtool support to set multi rss when sriov is enabled (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: review: fix backplane fw ethtool show error (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: fix: fix some problem in code review (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: FIX: Fix handling of NAPI budget when multiple queues are enabled per vector (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: FIX: add support for set vf mac with zero_ether_addr (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: FIX: fix get lldp flag wrong when probe (Linyue Xie) [task:226013]
  - NETSWIFT: txgbe: FIX: loopback test may fail when veto on and the rate is set to 1000M and link down (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: set version to 1.3.6rc0 (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: sync new kr tarinning flow (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: fix : remove vf mtu restriction (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix bug that try to handled null pointer (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: feat: Added the function of vf trust (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix to create fdir rule index 0 (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: fix: marvell phy nic which not support ocp link speed wrong (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: feat: set flow control xon to default off (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix ether type filter configuration in VT mode (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: add get lldp status by mbx (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: correct ether type in ethtool -n (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix PF RSS when multi_rss is enabled (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix fdir filter action queue info (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix to get info of ether type filter (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: ADD: support to add ether type filter by ethtool (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Revert "MODIFY: vf do not make its own receice-hash" (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: feat: support wol on fun 1 (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: fix: remove duplicate pings vf and set vf after ping (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: fix: ethtool set rss indir table (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: fix: ethtool can't take effect for hash key (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Revert "Fix:skip lan_rst after retriggering interrupt" (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Revert "Fix: skip lan reset condition is imperfect" (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: fix: patch-3 vf only supports a maximum of 2 queues JIRA: http://projsw.trustnetic.com/browse/SAP-263 (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX:fix compile error when define DISABLE_PACKET_SPLIT (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: fix: fix bug that close rx-vlan-offload not work and rx-vlan-stag-filter can not close (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: ADD: update vpd when use ethtool -f to upgrade (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: fix: patch-v2 vf only supports a maximum of 2 queues (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: fix: ethtool show max_combined wrong when enable sriov (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: fix: fix vf only supports a maximum of 2 queues (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: fix: set mac_sgmii to autoneg off failed (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: fix: fix bug that vf mtu can be larger than pf mtu (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix error print when remove geneve or vxlan (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: ADD: add firmware quirks for WHGX (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: fix: replacing 1G sfp module to dual-speed sfp module, link speed is 1G (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: update kr trainning flow 4 (luoqing) [task:226013]
  - NETSWIFT: txgbe: update release note to 1.3.5.1 (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: feat: add led blink support for oem (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: fix: fix commit 57d2aa3 (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: set version to 1.3.5 (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: ADD: add support tunnel prot set on kernel over 5.9 (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix compile error because not define txgbe_xdp_locking_key (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Fix: SWESMBI Software EEPROM semaphore not granted. (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix in some kernel version, when xdp_redirect tx drop may free page error (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: The xdpring count is now maintained at the cpu core count or maximum xdpring(2) (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: The xdpring count is now maintained at the cpu core count or maximum xdpring (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Fix: ethool -s ethx autoneg on cannot link to 10G (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix when load or unload xdp program, may calltrace. and fix lro may can't set after set lro when xdp load (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix bug that ifconfig down but not disable laser (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: Can't change lro when xdp load and change lro to which before xdp load when unload xdp (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: when load xdp ,turn off lro(2) (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: when load xdp ,turn off lro (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: add free page in head split mode (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: update kr trainning flow (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix when load xdp_pass may oom (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Fix: 64k pagesize memory leak (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Update kr trainning flow 3 (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix bug that disable sriov not clear Etype filter (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: ethtool -S not support return EINVAL (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix compile error when define DISABLE_PACKET_SPLIT_2 (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Fix: firmware version read from flash instead of shadow ram (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Fix not to set prbs_en in en_cl72_krtr (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Fix: 1000Base-T sfp module and cable link update error (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix bug that insmod with param max_vfs (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix compile warning on sles 11.3 and 11.4 (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: fix ethtool set coalesce adaptive (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Fix: skip lan reset condition is imperfect (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Revert "Fix: skip lan reset condition is imperfect" (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Fix: skip lan reset condition is imperfect (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix when load xdp_redirect program (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix ethtool -t loopback test failed (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix compile error when define DISABLE PACKET_SPLIT (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Fix: i2c fails trying to read DAC (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Tidy up codes for sonarcloud scanner (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: update kr trainning flow 3 (luoqing) [task:226013]
  - NETSWIFT: txgbe: Update version to 1.3.5rc1 (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix call trace when PAGE_SIZE<8k (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Limit change mtu range when xdp loaded (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: ADD: check cpu arch or pcie upstream before bus reset (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: ADD: add macro define in configure (luoqing) [task:226013]
  - NETSWIFT: txgbe: FIX: fix bug that mailbox error (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix compile error (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: ADD: add support 802.1ad vlan (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Fix: not do pcie reset when sriov enable (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix compile error (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: remove default fec set (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: software timestamp skbs as late as possible (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix compile error about xdp (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: delete unused declaration (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Fix: strtoul compile error (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Fix: skip lan_rst after retriggering interrupt (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: Limit rss queues when the xdp program loads copper sfp (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix 1G speed autoneg on/off functions (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: set version 1.3.5rc0 for test (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: Limit rss queues (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Add: Tidy up i2c_read 1G copper sfp flow (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Fix: insmod driver and nsci link is down when using copper sfp (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix compile error xdp_rxq_info_reg (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: delete useless debug message (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix compile err when kernel version less than 4.20 (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: ADD: add the interfacce to show fw version on vf (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: FIX: fix can't ethtool -t call null point (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: ADD: add support xdp (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Fix: fix bug (luoqing) [task:226013]
  - NETSWIFT: txgbe: Upgrade kr trainning flow (luoqing) [task:226013]
  - NETSWIFT: txgbe: Fix: number of descriptor must be multiple of 128 (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Delete: delete phy hardware reset in reset_hw for led oem (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Add: display aer error type (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: Add: firmware use i2c to access sfp module (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: fit txgbe_is_lldp return flow (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: fix: kcompat.h not define some (duanqiangwen) [task:226013]
  - NETSWIFT: txgbe: fix some warning by gcc (luoqing) [task:215796]
  - NETSWIFT: txgbe: set version to 1.3.4 (Juxia He) [task:165473]
  - NETSWIFT: txgbe: FIX: fix compile warning Unused variables and label (zhongxiangji) [task:165473]
  - NETSWIFT: txgbe: ADD:add protect for vr rst (duanqiangwen) [task:165473]
  - NETSWIFT: txgbe: Fix:code review correction (duanqiangwen) [task:165473]
  - NETSWIFT: txgbe: Fix:fix the lldp flag getting stuck when the flash cannot be accessed (linyuexie) [task:165473]
  - NETSWIFT: txgbe: txgbe: Canonical flash read-write interface (linyuexie) [task:165473]
  - NETSWIFT: txgbe: Fix: fixed ECC ERR reset cause pending bit not clear EF (zhenpengzheng) [task:165473]
  - NETSWIFT: txgbe: FIX:fix changing speed 10G to 1G can't link up when veto bit is set. (duanqiangwen) [task:165473]
  - NETSWIFT: txgbe: Specify the 'if' and 'else if' condition (linyuexie) [task:165473]
  - NETSWIFT: txgbe: FIX: Adjust the macro definition area and remove unnecessary 'returns' (linyuexie) [task:165473]
  - NETSWIFT: txgbe: FIX: delete the condition or block which is repeat or unuse (luoqing) [task:165473]
  - NETSWIFT: txgbe: FIX: fix Dereference of null pointer (linyuexie) [task:165473]
  - NETSWIFT: txgbe: FIX:fix implicit conversion from enumeration type (linyuexie) [task:165473]
  - NETSWIFT: txgbe: FIX: fix the variables should be initialized before use (linyuexie) [task:165473]
  - NETSWIFT: txgbe: FIX:fix 'break' will never be executed (linyuexie) [task:165473]
  - NETSWIFT: txgbe: Add: add support for Qi An Xin 10G fiber to copper sfp module (duanqiangwen) [task:165473]
  - NETSWIFT: txgbe: set version 1.3.4rc0 (Juxia He) [task:165473]
  - NETSWIFT: txgbe: Fix: fix the bug that can not restore the default mac (zhongxiangji) [task:165473]
  - NETSWIFT: txgbe: FIX:fix ethtool -t test fail when veto set (linyuexie) [task:165473]
  - NETSWIFT: txgbe: workaround gpio int lost in lldp-on condition (wenduanqiang) [task:165473]
  - NETSWIFT: txgbe: Fix lldp can't work when driver load or port down (duanqiangwen) [task:165473]
  - NETSWIFT: txgbe: FIX: fix txgbe_ioctl read/write mdio incorrectly causing kernel panic when using internal phy (linyuexie) [task:165473]
  - NETSWIFT: txgbe: Remove: Remove VETO print (zhongxiangji) [task:165473]
  - NETSWIFT: txgbe: fix set speed to 100M assign wrong speed to autoneg_advertised (wenduanqiang) [task:165473]
  - NETSWIFT: txgbe: FIX:fix ethtool can't change speed to 1000 again (Mengyuan Lou) [task:165473]
  - NETSWIFT: txgbe: FIX:fix ethtool can't change speed (linyuexie) [task:165473]
  - NETSWIFT: txgbe: fix ethtool_get_link_ksetting get single speed sfp advertised mode not reported (wenduanqiang) [task:165473]
  - NETSWIFT: txgbe: ADD: add print info when ifconfig set mac (zhongxiangji) [task:165473]
  - NETSWIFT: txgbe: Fix Inspur OCP Card can't link up after 1000 times module remove & probe or reboot system (wenduanqiang) [task:165473]
  - NETSWIFT: txgbe: FIX: delete mng reset in reset_hw (linyuexie) [task:165473]
  - NETSWIFT: txgbe: fix ethtool duplex is half when link is down (wenduanqiang) [task:165473]
  - NETSWIFT: txgbe: Fix Inspur OCP Card can't link up due to firmware and driver access phy at the same time (wenduanqiang) [task:165473]
  - NETSWIFT: ngbevf: fix issue in kylin4.19-kernel test (Linyue Xie) [task:226013]
  - NETSWIFT: ngbevf: Synchronous wangxun ngbevf driver source code (luoqing) [task:226013]
  - NETSWIFT: ngbevf: set version 1.2.1.1 (zhongxiangji) [task:226013]
  - NETSWIFT: ngbevf: FIX: fix set vf mtu err (zhongxiangji) [task:226013]
  - NETSWIFT: ngbevf: FIX: fix handle kernel NULL pointer when add vxlan (zhongxiangji) [task:226013]
  - NETSWIFT: ngbevf: add release time and modify version to 1.2.2 (Juxia He) [task:226013]
  - NETSWIFT: ngbevf: fix: fix bug that error dmesg when add double vlan (zhongxiangji) [task:226013]
  - NETSWIFT: ngbevf: FIX: fix bug that vf can't ifconfig up (zhongxiangji) [task:226013]
  - NETSWIFT: ngbevf: FIX: fix compile error (zhongxiangji) [task:226013]
  - NETSWIFT: ngbevf: Revert "fix : fix bug that vf get ack timeout when pf ifconfig down up" (zhongxiangji) [task:226013]
  - NETSWIFT: ngbevf: set version 1.2.2rc0 for test (Juxia He) [task:226013]
  - NETSWIFT: ngbevf: FIX: fix mailbox error when ifconfig pf down/up (zhongxiangji) [task:226013]
  - NETSWIFT: ngbevf: fix: fix bug that vf can not link when phy is not internal (zhongxiangji) [task:226013]
  - NETSWIFT: ngbevf: Fix: fix the bug that ip link set vf state not work (zhongxiangji) [task:226013]
  - NETSWIFT: ngbevf: FIX: fix bug that try to free already-free irq (zhongxiangji) [task:226013]
  - NETSWIFT: ngbevf: ADD: add new file Module.supported (zhongxiangji) [task:226013]
  - NETSWIFT: ngbevf: fix : fix bug that vf get ack timeout when pf ifconfig down up (zhongxiangji) [task:226013]
  - NETSWIFT: ngbevf: fix: fix bug that pf ping vf but vf not reset (zhongxiangji) [task:226013]
  - NETSWIFT: ngbevf: FIX: fix bug that txvlan and rxvlan cannot close (zhongxiangji) [task:226013]
  - NETSWIFT: ngbevf: feat: add the interface to show fw version on vf (luoqing) [task:226013]
  - NETSWIFT: ngbevf: FIX: fix bug that 10M link speed error (zhongxiangji) [task:226013]
  - NETSWIFT: ngbevf: fix: fix change not mtu work on some os like centos7.7 (zhongxiangji) [task:226013]
  - NETSWIFT: ngbevf: update release note to 1.2.1 (Juxia He) [task:165473]
  - NETSWIFT: ngbevf: FIX: FIX bug if link down/up will always trigger interrupt (zhongxiangji) [task:165473]
  - NETSWIFT: ngbevf: FIX: fix vf cannot revice packets after pcie reset (zhongxiangji) [task:165473]
  - NETSWIFT: ngbevf: FIX: fix bug that vf not link down when pf link down (zhongxiangji) [task:165473]
  - devlink: add timeout information to status_notify (Shannon Nelson) [task:162874, task:161899]
  - devlink: convert flash_update to use params structure (Jacob Keller) [task:162874, task:161899]
  - devlink: allow driver to update progress of flash update (Jiri Pirko) [task:162874, task:161899]
  - devlink: prepare to support region operations (Jacob Keller) [task:162874, task:161899]
  - NETSWIFT: ngbevf: set release version 1.2.0 (luoqing) [task:157307]
  - NETSWIFT: ngbevf: Modify print level (zhongxiangji) [task:157307]
  - NETSWIFT: ngbevf: FIX:fix bug that vf promisc not work (zhongxiangji) [task:157307]
  - NETSWIFT: ngbevf: FIX : make sure when vf load pf can not remove sriov (mengyuanlou) [task:157307]
  - txgbe: Fix the ethernet xmit error in wangxun (weirongguang)
  - net: pass net_device argument to the eth_get_headlen (Stanislav Fomichev)
  - net: adapt the new network interface to the network card (Jackie Liu)
  - flow_offload: add flow_rule and flow_match structures and use them (Alaa Hleihel)
  - ptp: add PTP_SYS_OFFSET_EXTENDED ioctl (Miroslav Lichvar)
  - 3rd: Third party device driver needs PCI support (Jackie Liu) [task:44101]
  - ngbe: limits ngbe/txgbe/ngbvf as module (Jackie Liu) [task:44101]
  - ngbevf: fix the error in build ngbevf for package (weirongguang)
  - ngbevf: add ngbevf driver in kylin kernel source tree (luoqing)
  - NETSWIFT: ngbe: FIX:fix tunnel packets unreachable when enable sriov (linyuexie) [task:226013]
  - NETSWIFT: ngbe: FIX: Fixed resolving ipv6 packet header errors (linyuexie) [task:226013]
  - NETSWIFT: ngbe: Optimize reset flow when driver is tx hang or timeout (Linyue Xie) [task:226013]
  - NETSWIFT: ngbe: update version to 1.2.6.3 (linyuexie) [task:226013]
  - NETSWIFT: ngbe: fix: tx csum by soft except tcp udp sctp (linyuexie) [task:226013]
  - NETSWIFT: ngbe: update version to 1.2.6.2 (linyuexie) [task:226013]
  - NETSWIFT: ngbe: add HAVE_NETDEV_XMIT_MORE for kylin os (Linyue Xie) [task:226013]
  - NETSWIFT: ngbe: update release notes and version to 1.2.6.1 (linyuexie) [task:226013]
  - NETSWIFT: ngbe: Fix: Hardware block max request size to 128 (linyuexie) [task:226013]
  - NETSWIFT: ngbe: Fix: allow to add nedev_uc_addr over 16 (linyuexie) [task:226013]
  - NETSWIFT: ngbe: Synchronous wangxun ngbe driver source code (luoqing) [task:226013]
  - NETSWIFT: ngbe: update release note and version 1.2.6 (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: Revert "FIX: When do ethtool -C, if not change any coalesce parameters supported, will return -EINVAL" (duanqiangwen) [task:226013]
  - NETSWIFT: ngbe: set version to 1.2.6rc2 (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: FIX: Add a delay between pings for slt test (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: FIX: Add a delay between pings (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: fix: yt8531s-ca can't generate interrupt in combo mode (duanqiangwen) [task:226013]
  - NETSWIFT: ngbe: feat: add support for notifying firmware phy link (duanqiangwen) [task:226013]
  - NETSWIFT: ngbe: fix: remove vf mtu restriction (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: FIX: fix slt test failed (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: FIX: fix fail to obtain mbx lock when slt test (zhongxiangji) [task:226013]
  - NETSWIFT: ngbe: modify version to 1.2.6rc1 for test (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: FIX: fix mailbox error when ifconfig pf down (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: FIX: fix compile error (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: FIX: add get lldp status by mbx (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: fix: fix bug that vf mtu can not be larger than pf mtu (zhongxiangji) [task:226013]
  - NETSWIFT: ngbe: fix: code review (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: FIX: fix compile error (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: fix: default to set gpio_0 input direction (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: FIX: fix compile error (zhongxiangji) [task:226013]
  - NETSWIFT: ngbe: FIX: fix compile error in kylinos (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: feat: add the interface to set the vf link state (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: modify version to 1.2.6rc0 (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: FIX: add mtu change limit and rx buffer 3k for xdp (linyuexie) [task:226013]
  - NETSWIFT: ngbe: feat: check cpu arch or pcie upstream type to determine whether to do recovery (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: fix: ethtool can't set hash key (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: fix: add print when port down and change lldp (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: Revert "FIX:allow set lldp when nic down" (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: FIX: fix bug that try to handled null pointer (zhongxiangji) [task:226013]
  - NETSWIFT: ngbe: feat: add support that set vf vlan type 802.1ad (zhongxiangji) [task:226013]
  - NETSWIFT: ngbe: FIX: compile warming because unused value (linyuexie) [task:226013]
  - NETSWIFT: ngbe: FIX: allow set lldp when nic down (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: fix: fix bugs set tx frame irq to 65536 exceed u16 max value (zhenpengzheng) [task:226013]
  - NETSWIFT: ngbe: revert: revert tx timeout retrigger irq flow (duanqiangwen) [task:226013]
  - NETSWIFT: ngbe: fix: fix bug that rx multicast count not right (zhongxiangji) [task:226013]
  - NETSWIFT: ngbe: fix: fix bug that failed to receive vlan packets when promisc enable (zhongxiangji) [task:226013]
  - NETSWIFT: ngbe: fix: fix bug that vf can not link when phy is not internal (zhongxiangji) [task:226013]
  - NETSWIFT: ngbe: feat: Added the function of vf trust (zhongxiangji) [task:226013]
  - NETSWIFT: ngbe: add dynamic itr configurable; (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: fix: yt8531sh-ca phy can't powerdown in mode 2 (duanqiangwen) [task:226013]
  - NETSWIFT: ngbe: feat: add param for yt phy unidirectional mode (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: fix: fix bug that vlan filter change but not work (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: fix: fix bug that some feature that can not change (zhongxiangji) [task:226013]
  - NETSWIFT: ngbe: fix: fix bug that cant set ip vlan when mac vlan is set (zhongxiangji) [task:226013]
  - NETSWIFT: ngbe: fix: fix bug that vf mtu can be larger than pf mtu (zhongxiangji) [task:226013]
  - NETSWIFT: ngbe: fix: rtl8211fs and jl2201 some bugs. (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: feat: add the interface to show fw version on vf (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: fix: fix ethtool -S may out of range (linyuexie) [task:226013]
  - NETSWIFT: ngbe: feat/fix: commit message example (duanqiangwen) [task:226013]
  - NETSWIFT: ngbe: fix: yt8531h check phy id failed (duanqiangwen) [task:226013]
  - NETSWIFT: ngbe: ADD: Synchronize xdp changes off txgbe (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: Fix: fix commit 7a14ec5 (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: ADD: add support for XZP211FS phy (duanqiangwen) [task:226013]
  - NETSWIFT: ngbe: ADD: add support for new phy JL2201-N048C and rtl8211f (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: ADD: add support for yt phy unidirectional mode (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: FIX: fix bug that mailbox error (zhongxiangji) [task:226013]
  - NETSWIFT: ngbe: Fix: Inspur ncsi nic cannot wake on lan. (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: Revert "Fix:wol can't work in inspur ncsi nic" (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: Fix: wol can't work in inspur ncsi nic (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: FIX: may calltrace when run loop test because pagecnt_bias err (linyuexie) [task:226013]
  - NETSWIFT: ngbe: FIX: fix compile error when define DISABLE_PACKET_SPLIT (linyuexie) [task:226013]
  - NETSWIFT: ngbe: FIX: fix xdp page processing flow (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: ADD: add support for showing AER error type (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: ADD: add support for inspur ncsi card (duanqiangwen) [task:226013]
  - NETSWIFT: ngbe: FIX: When do ethtool -C, if not change any coalesce parameters supported, will return -EINVAL (linyuexie) [task:226013]
  - NETSWIFT: ngbe: FIX: fix may calltrace due to page_ref count error,and fix calltrace when unload xdp (linyuexie) [task:226013]
  - NETSWIFT: ngbe: software timestamp skbs as late as possible (Mengyuan Lou) [task:226013]
  - NETSWIFT: ngbe: FIX: fix when load xdp_redirect program (linyuexie) [task:226013]
  - NETSWIFT: ngbe: FIX: fix may call trace when xdp redirect load because no XDP_PACKET_HEADROOM (linyuexie) [task:226013]
  - NETSWIFT: ngbe: FIX: fix the statistics of queues 4 to 7 are lost after xdp program is loaded (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: update unresolved issues to release notes and set version (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: ADD: update vpd when use ethtool -f to upgrade (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: set version 1.2.5.2 (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: fix: ifconfig down will not powerdown external phy (wenduanqiang) [task:226013]
  - NETSWIFT: ngbe: Fix: fix call trace caused by xdp (lingfuyi) [task:174284]
  - ngbe: fix build for KYLIN V10(SP4+) (Jackie Liu) [task:169582]
  - NETSWIFT: ngbe: update release note to 1.2.5 (Juxia He) [task:165473]
  - NETSWIFT: ngbe: FIX:fix tx_bytes states error when load and unload xdp program (linyuexie) [task:165473]
  - NETSWIFT: ngbe: Fix: fix compile warming because out 1kb frame size (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX:fix compile warming (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX: fix when xdp program loads, ethtool -S rx_csum_offload_errors count error(2) (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX: not do pcie reset whet sriov enable (zhongxiangji) [task:165473]
  - NETSWIFT: ngbe: FIX: fix when xdp program loads, ethtool -S rx_csum_offload_errors count error (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX:Limit rss queues when the xdp program loads(2) (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX:Limit rss queues when the xdp program loads. (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX: fix page ref_count error and can't free_page because XDP_REDIR and XDP_TX action reduce ref_count (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX:fix compile issue (linyuexie) [task:165473]
  - NETSWIFT: ngbe: set version 1.2.5rc1 for test (Juxia He) [task:165473]
  - NETSWIFT: ngbe: FIX: fix EMERALDSW-254 (zhongxiangji) [task:165473]
  - NETSWIFT: ngbe: Fix:num of descriptor must be multiple of 128 (duanqiangwen) [task:165473]
  - NETSWIFT: ngbe: FIX: fix OOM(out of memory) issue because not free page rightly when rx (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX:fix can't ethtool -G due to need xdp_rxq_info_unreg before xdp_rxq_info_reg (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX:fix can't ethtool -t due to call null point test_rx_ring->q_vector (linyuexie) [task:165473]
  - NETSWIFT: ngbe: encapsulate the lan_rst as a function (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX:fix can't link when up port because the phy set does not correspond to the lan rst (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX:fix when the number of RSS is set to 7, the mounted xdp program may hung (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX:fix when the number of RSS is set to less than the number of cpus, the mounted xdp program may hung (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX:fix possible errors in XDP_TX act (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX:checks whether the xdp program has been loaded in xdp_setup (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX:fix when load xdp program , the ring stats are cleared (linyuexie) [task:165473]
  - NETSWIFT: ngbe: don't allow to modify priv flags when adapter down (linyuexie) [task:165473]
  - NETSWIFT: ngbe: ADD: support xdp (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX:fix can't up port when veto off (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX: fix port0 EEPROM checksum invalid (zhongxiangji) [task:165473]
  - NETSWIFT: ngbe: set version to 1.2.5rc0 (Juxia He) [task:165473]
  - NETSWIFT: ngbe: Fix: change yt BMCR from 0x8240 to 0x8140 in 1G autoneg off condition (duanqiangwen) [task:165473]
  - NETSWIFT: ngbe: Fix:ethtool show advertised abnormal in autoneg off condition (duanqiangwen) [task:165473]
  - NETSWIFT: ngbe: FIX : fix bug that call NULL pointer (zhongxiangji) [task:165473]
  - NETSWIFT: ngbe: FIX : fix bug that call NULL pointer (zhongxiangji) [task:165473]
  - NETSWIFT: ngbe: Enhanced the lldp setting process. (linyuexie) [task:165473]
  - NETSWIFT: ngbe: Change gphy setup flow (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: Tidy up link retry flow (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: ngbe revert phy id check flow (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: Fix some bugs for 1.2.5 rc code review (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: FIX:code review correction 1.delete get lldp flags (linyuexie) [task:165473]
  - NETSWIFT: ngbe: Move mdio clause22 set out (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: Change NGBE_100M_RETRY flow (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: Change flow for gphy open close (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: Tidy up the use of gphy read write (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: FIX: fix bug that vf not link down when pf link down (zhongxiangji) [task:165473]
  - NETSWIFT: ngbe: Tidy up flow in ngbe_reset_hw (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: ngbe: Add marco NGBE_POLL_LINK_STATUS in kcompat.h (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: Add marco NGBE_RECOVER_CHECK define in kcompat.h (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: Default open dis completion timeout (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: Use function Pointers instead of TCALL (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: Remove: remove marco SIMULATION_DEBUG (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: Fix: ngbe use int to replace s32 (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: Remove: remove previous definition func in ngbe_hw.c (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: Remove: remove useless code (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: ngbe: Use nsci_enabled replace check subsytem id (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: ngbe: Tidy up logic for ngbe_sw_init. (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: ngbe: Internal phy add dis fall 100m bit (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: Fix:fix the lldp flag getting stuck when the flash cannot be accessed (linyuexie) [task:165473]
  - NETSWIFT: ngbe: ngbe: Canonical flash read-write interface (mengyuanlou) [task:165473]
  - NETSWIFT: ngbe: Fix: fix some bug like ECC ERR (zhenpengzheng) [task:165473]
  - NETSWIFT: ngbe: Fix: fixed ECC ERR reset caused pending bit not clear (zhenpengzheng) [task:165473]
  - NETSWIFT: ngbe: FIX: change 'return 0' location (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX: fix the variables should be initialized before use (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX: delete the condition block which is repeat (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX: fix Dereference of null pointer (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX:fix implicit conversion from enumeration type (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX: fix 'break' will never be executed (linyuexie) [task:165473]
  - NETSWIFT: ngbe: set version to 1.2.4 (Juxia He) [task:165473]
  - NETSWIFT: ngbe: fix when reloading driver speed is the default in lldp-on condition (duanqiangwen) [task:165473]
  - NETSWIFT: ngbe: FIX: fix compile error on ubuntu14.04 (zhongxiangji) [task:165473]
  - NETSWIFT: ngbe: Fix: fix the bug that can not restore the default mac (zhongxiangji) [task:165473]
  - NETSWIFT: ngbe: ngbe: Fix gphy reset return err code (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: ngbe: Fix gphy change speed in wrong flow when port not open (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: fix compile error below 4.18 kernel version due to ef85dd8fb9e5f0 (wenduanqiang) [task:165473]
  - NETSWIFT: ngbe: FIX: fix compile error on KylinV10_x86_testv3 (zhongxiangji) [task:165473]
  - NETSWIFT: ngbe: ngbe: Close yt auto sensing (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: Fix: fix autoneg off port advertised mode not reported (wenduanqiang) [task:165473]
  - NETSWIFT: ngbe: ADD:add ethtool -S get tx multicast broadcast count and delete unnecessary file (linyuexie) [task:165473]
  - NETSWIFT: ngbe: Fix: fix autoneg on not enable all capabilities again (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: Update version to 1.2.4rc1 (Juxia He) [task:165473]
  - NETSWIFT: ngbe: FIX:fix cannot receive lldp packets when opposite port down again (linyuexie) [task:165473]
  - NETSWIFT: ngbe: DEL: del print ngbe_run_loopback_test message (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX: Fix cannot receive lldp packets when opposite port down (linyuexie) [task:165473]
  - NETSWIFT: ngbe: FIX : fix autoneg on not enable all capabilities (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: set version 1.2.4rc0 (Juxia He) [task:165473]
  - NETSWIFT: ngbe: Remove: Remove VETO print (zhongxiangji) [task:165473]
  - NETSWIFT: ngbe: Modity: modity del_mac_filter (zhongxiangji) [task:165473]
  - NETSWIFT: ngbe: FIX: fix bug that mac address reuse not work (zhongxiangji) [task:165473]
  - NETSWIFT: ngbe: Fix: fix bug that vf promisc not right (zhongxiangji) [task:165473]
  - NETSWIFT: ngbe: ADD: add ethtool show and set lldp on/off (linyuexie) [task:165473]
  - NETSWIFT: ngbe: add lanrst to tx timeout / clean tx irq flow (zhenpengzheng) [task:165473]
  - NETSWIFT: ngbe: Fix rx_missed_errors count error (wenduanqiang) [task:165473]
  - NETSWIFT: ngbe: add PCI print when pending bit not clear (zhenpengzheng) [task:165473]
  - NETSWIFT: ngbe: add print to tdm desc fatal (zhenpengzheng) [task:165473]
  - NETSWIFT: ngbe: remove INT_ERR from pcie recover flow (zhenpengzheng) [task:165473]
  - NETSWIFT: ngbe: fix aer status not print out when NGBE_RECOVER_CHECK set (zhenpengzheng) [task:165473]
  - NETSWIFT: ngbe: ADD: yt 001 mode Supports auto-negotiation switchover (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: RM remove unused led lvl macro (Mengyuan Lou) [task:165473]
  - NETSWIFT: ngbe: regroup NGBE_FLAG2_PCIE_NEED_RECOVER macro (zhenpengzheng) [task:165473]
  - NETSWIFT: ngbe: regroup pcie aer status print (zhenpengzheng) [task:165473]
  - NETSWIFT: ngbe: FIX: fix the bug that The number of RSS can exceed the number of cpus (zhongxiangji) [task:165473]
  - NETSWIFT: ngbe: ADD: add yt phy ncsi support (mengyuanlou) [task:165473]
  - NETSWIFT: ngbe: FIX warning:Delete two unused variablesls (mengyuanlou) [task:165473]
  - NETSWIFT: ngbe: Fix: fix free already-free IRQ error when enable sriov with 7 vfs (zhongxiangji) [task:165473]
  - NETSWIFT: ngbe: fixed iperf send and recv failure under double vlan configure (zhenpengzheng) [task:165473]
  - NETSWIFT: ngbe: FIX: rollback yt_phy config in rgmii2fiber mode (wenduanqiang) [task:165473]
  - NETSWIFT: ngbe: Fix:add spinlock protection on yt phy all registers accessing (wenduanqiang) [task:165473]
  - devlink: prepare to support region operations (Jacob Keller) [task:162874, task:161899]
  - net: Add extack argument to ndo_fdb_add() (Petr Machata) [task:162874, task:161899]
  - net: ndo_bridge_setlink: Add extack (Petr Machata) [task:162874, task:161899]
  - OPENEULER: iommu: dev_bypass: cleanup dev bypass code (Hanjun Guo) [task:422487]
  - net/mlx5e: Fix netif state handling (Shay Drory) [task:330508] {CVE-2024-38608}
  - icmp: change the order of rate limits (Eric Dumazet) [task:376375] {CVE-2024-47678}
  - icmp: Fix data-races around sysctl. (Kuniyuki Iwashima) [task:162162]
  - ipv6: Add rate limit mask for ICMPv6 messages (Stephen Suryaputra) [task:152171]
  - ipv6: Add icmp_echo_ignore_anycast for ICMPv6 (Stephen Suryaputra) [task:152171]
  - ipv6: Add icmp_echo_ignore_multicast support for ICMPv6 (Stephen Suryaputra) [task:152171]
  - drm/vc4: fix compile error (Lu Yao) [task:402971, task:417959]
  - drm/vc4: fix compile error (Lu Yao) [task:397559, task:417959]
  - iommu/arm-smmu:Fix compile error to support phytium ft2000plus and S2500 (tanze) [task:421195]
  - i40e: Fix freeing of uninitialized misc IRQ vector (Sylwester Dziedziuch) [task:416193]
  - scsi: hisi_sas: Allocate DFX memory during dump trigger (Yihang Li) [task:337521]
  - scsi: hisi_sas: Delete some unused callbacks (Luo Jiaxing) [task:337521]
  - scsi: hisi_sas: Directly call register snapshot instead of using workqueue (Yihang Li) [task:337521]
  - spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected (Devyn Liu) [task:337521] {CVE-2024-26776}
  - OPENEULER: config: arm64: Enable dubugfs config of hisi sas (YunYi Yang) [task:337521]
  - scsi: hisi_sas_v3_hw: Remove extra function calls for runtime pm (Vaibhav Gupta) [task:337521]
  - scsi: hisi_sas_v3_hw: Don't use PCI helper functions (Vaibhav Gupta) [task:337521]
  - OPENEULER: scsi: hisi_sas: Check usage count only when the runtime PM status is RPM_SUSPENDING (Yihang Li) [task:337521]
  - scsi: hisi_sas: Work around build failure in suspend function (Arnd Bergmann) [task:337521]
  - OPENEULER: scsi: hisi_sas: Block requests before take debugfs snapshot (Yihang Li) [task:337521]
  - OPENEULER: scsi: hisi_sas: Add slave_destroy interface for v3 hw (Qi Liu) [task:337521]
  - scsi: hisi_sas: Configure initial value of some registers according to HBA model (Yihang Li) [task:337521]
  - scsi: hisi_sas: Increase debugfs_dump_index after dump is completed (Luo Jiaxing) [task:337521]
  - scsi: hisi_sas: Ensure all enabled PHYs up during controller reset (Yihang Li) [task:337521]
  - scsi: hisi_sas: Exit suspend state when usage count is greater than 0 (Yihang Li) [task:337521]
  - scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (Yihang Li) [task:337521]
  - scsi: hisi_sas: Use abort task set to reset SAS disks when discovered (Xingui Yang) [task:337521]
  - scsi: hisi_sas: Undo RPM resume for failed notify phy event for v3 HW (Xiang Chen) [task:337521]
  - scsi: hisi_sas: Fix rescan after deleting a disk (John Garry) [task:337521]
  - scsi: hisi_sas: Modify v3 HW SSP underflow error processing (Xingui Yang) [task:337521]
  - scsi: hisi_sas: Fix phyup timeout on FPGA (Qi Liu) [task:337521]
  - scsi: hisi_sas: Prevent parallel controller reset and control phy command (Qi Liu) [task:337521]
  - scsi: hisi_sas: Limit users changing debugfs BIST count value (Xiang Chen) [task:337521]
  - scsi: hisi_sas: Use autosuspend for the host controller (Xiang Chen) [task:337521]
  - scsi: hisi_sas: Keep controller active between ISR of phyup and the event being processed (Xiang Chen) [task:337521]
  - scsi: hisi_sas: Add more logs for runtime suspend/resume (Xiang Chen) [task:337521]
  - scsi: hisi_sas: Wait for phyup in hisi_sas_control_phy() (Xiang Chen) [task:337521]
  - scsi: hisi_sas: Initialise devices in .slave_alloc callback (Xiang Chen) [task:337521]
  - scsi: libsas: Add LUN number check in .slave_alloc callback (Yufen Yu) [task:337521]
  - scsi: hisi_sas: Speed up error handling when internal abort timeout occurs (Luo Jiaxing) [task:337521]
  - scsi: hisi_sas: Reset controller for internal abort timeout (Luo Jiaxing) [task:337521]
  - scsi: hisi_sas: Include HZ in timer macros (Luo Jiaxing) [task:337521]
  - scsi: hisi_sas: Run I_T nexus resets in parallel for clear nexus reset (Luo Jiaxing) [task:337521]
  - scsi: hisi_sas: Put a limit of link reset retries (Luo Jiaxing) [task:337521]
  - scsi: hisi_sas: Print SATA device SAS address for soft reset failure (Luo Jiaxing) [task:337521]
  - scsi: hisi_sas: Warn in v3 hw channel interrupt handler when status reg cleared (Luo Jiaxing) [task:337521]
  - scsi: hisi_sas: Directly snapshot registers when executing a reset (Jianqin Xie) [task:337521]
  - scsi: hisi_sas: Call sas_unregister_ha() to roll back if .hw_init() fails (Xiang Chen) [task:337521]
  - scsi: hisi_sas: Print SAS address for v3 hw erroneous completion print (Luo Jiaxing) [task:337521]
  - scsi: hisi_sas: Add trace FIFO debugfs support (Luo Jiaxing) [task:337521]
  - scsi: hisi_sas: Enable debugfs support by default (Luo Jiaxing) [task:337521]
  - scsi: hisi_sas: Remove deferred probe check in hisi_sas_v2_probe() (John Garry) [task:337521]
  - scsi: hisi_sas: Remove preemptible() (Ahmed S. Darwish) [task:337521]
  - scsi: hisi_sas: Move debugfs code to v3 hw driver (Luo Jiaxing) [task:337521]
  - scsi: hisi_sas: Reduce some indirection in v3 hw driver (John Garry) [task:337521]
  - scsi: hisi_sas: Fix up probe error handling for v3 hw (Xiang Chen) [task:337521]
  - scsi: hisi_sas: Recover PHY state according to the status before reset (Xiang Chen) [task:337521]
  - scsi: hisi_sas: Add device link between SCSI devices and hisi_hba (Xiang Chen) [task:337521]
  - scsi: hisi_sas: Add check for methods _PS0 and _PR0 (Xiang Chen) [task:337521]
  - scsi: hisi_sas: Add controller runtime PM support for v3 hw (Xiang Chen) [task:337521]
  - scsi: hisi_sas: Switch to new framework to support suspend and resume (Xiang Chen) [task:337521]
  - scsi: hisi_sas: Code style cleanup (Luo Jiaxing) [task:337521]
  - scsi: hisi_sas: Add missing newlines (Xiang Chen) [task:337521]
  - scsi: hisi_sas: Add BIST support for fixed code pattern (Luo Jiaxing) [task:337521]
  - scsi: hisi_sas: Add BIST support for phy FFE (Luo Jiaxing) [task:337521]
  - scsi: hisi_sas: Make phy index variable name consistent (Luo Jiaxing) [task:337521]
  - scsi: hisi_sas: Do not modify upper fields of PROG_PHY_LINK_RATE reg (Luo Jiaxing) [task:337521]
  - scsi: hisi_sas: Modify macro name for OOB phy linkrate (Luo Jiaxing) [task:337521]
  - scsi: hisi_sas: Remove one kerneldoc comment (John Garry) [task:337521]
  - cpufreq: CPPC: add SW BOOST support (Xiongfeng Wang) [task:337521]
  - cpufreq: change '.set_boost' to act on one policy (Xiongfeng Wang) [task:337521]
  - config: arm64: Build HiSilicon SPI/SFC driver as module (Yicong Yang) [task:337521]
  - spi: hisi-sfc-v3xx: drop unnecessary ACPI_PTR and related ifendif protection (Yicong Yang) [task:337521]
  - spi: hisi-sfc-v3xx: fix potential irq race condition (Yicong Yang) [task:337521]
  - spi: hisi-sfc-v3xx: add address mode check (Yicong Yang) [task:337521]
  - spi: hisi-sfc-v3xx: extend version checking compatibility (Yicong Yang) [task:337521]
  - spi: hisi-sfc-v3xx: add support for IRQ mode (Yicong Yang) [task:337521]
  - spi: hisi-sfc-v3xx: factor out the bit definition of interrupt register (Yicong Yang) [task:337521]
  - spi: hisi-sfc-v3xx: factor out bus config and transfer functions (Yicong Yang) [task:337521]
  - spi: hisi-sfc-v3xx: factor out IO modes configuration (Yicong Yang) [task:337521]
  - driver core: platform: return -ENXIO for missing GpioInt (Brian Norris) [task:337521]
  - driver: platform: Support parsing GpioInt 0 in platform_get_irq() (Enrico Granata) [task:337521]
  - spi: spi-mem: Fix build error without CONFIG_SPI_MEM (YueHaibing) [task:337521]
  - spi: spi-mem: Add SPI_MEM_NO_DATA to the spi_mem_data_dir enum (Boris Brezillon) [task:337521]
  - sh: Replace CONFIG_MTD_M25P80 with CONFIG_MTD_SPI_NOR in sh7757lcr_defconfig (Bin Meng) [task:337521]
  - powerpc: Drop CONFIG_MTD_M25P80 in 85xx-hw.config (Bin Meng) [task:337521]
  - m68k: Drop CONFIG_MTD_M25P80 in stmark2_defconfig (Bin Meng) [task:337521]
  - ARM: shmobile: defconfig: Refresh config CONFIG_MTD_M25P80 for v5.4-rc1 (Geert Uytterhoeven) [task:337521]
  - mtd: spi-nor: core: Fix an issue of releasing resources during read/write (Xiang Chen) [task:337521]
  - mtd: spi-nor: fix kernel-doc for spi_nor::spimem (Sergei Shtylyov) [task:337521]
  - mtd: spi-nor: Pointer parameter for CR in spi_nor_read_cr() (Tudor Ambarus) [task:337521]
  - mtd: spi-nor: Pointer parameter for FSR in spi_nor_read_fsr() (Tudor Ambarus) [task:337521]
  - mtd: spi-nor: Pointer parameter for SR in spi_nor_read_sr() (Tudor Ambarus) [task:337521]
  - mtd: spi-nor: Stop compare with negative in Reg Ops methods (Tudor Ambarus) [task:337521]
  - mtd: spi-nor: Prepend spi_nor_ to all Reg Ops methods (Tudor Ambarus) [task:337521]
  - mtd: spi-nor: Fix direction of the write_sr() transfer (Tudor Ambarus) [task:337521]
  - mtd: spi-nor: Move m25p80 code in spi-nor.c (Boris Brezillon) [task:337521]
  - mtd: spi-nor: always use bounce buffer for register read/writes (Vignesh Raghavendra) [task:337521]
  - mtd: spi-nor: Add support for mx25u12835f (Alexander Sverdlin) [task:337521]
  - spi: add support for octal mode I/O data transfer (Yogesh Narayan Gaur) [task:337521]
  - OPENEULER: ACPI/MPAM: Adapt to Arm's MPAM ACPI table version 2 (Yu Liao) [task:337521]
  - OPENEULER: arm64/mpam: add device tree support for mpam initialization (Xingang Wang) [task:337521]
  - arm64/mpam: Split header files into suitable location (Wang ShaoBo) [task:337521]
  - arm64/mpam: resctrl: Export resource's properties to info directory (Wang ShaoBo) [task:337521]
  - arm64/mpam: resctrl: Remove unnecessary CONFIG_ARM64 (Wang ShaoBo) [task:337521]
  - arm64/mpam: Add wait queue for monitor alloc and free (Wang ShaoBo) [task:337521]
  - arm64/mpam: Add resctrl_ctrl_feature structure to manage ctrl features (Wang ShaoBo) [task:337521]
  - arm64/mpam: Remap reqpartid,pmg to rmid and intpartid to closid (Wang ShaoBo) [task:337521]
  - arm64/mpam: Separate internal and downstream priority event (Wang ShaoBo) [task:337521]
  - arm64/mpam: Integrate monitor data for Memory Bandwidth if cdp enabled (Wang ShaoBo) [task:337521]
  - arm64/mpam: Add hook-events id for ctrl features (Wang ShaoBo) [task:337521]
  - arm64/mpam: Restore extend ctrls' max width for checking schemata input (Wang ShaoBo) [task:337521]
  - arm64/mpam: Re-plan intpartid narrowing process (Wang ShaoBo) [task:337521]
  - arm64/mpam: Squash default priority from mpam device to class (Wang ShaoBo) [task:337521]
  - arm64/mpam: resctrl: collect child mon group's monitor data (Wang ShaoBo) [task:337521]
  - arm64/mpam: Enabling registering and logging error interrupts (James Morse) [task:337521]
  - arm64/mpam: Store intpri and dspri for mpam device reset (Wang ShaoBo) [task:337521]
  - arm64/mpam: resctrl: Support priority and hardlimit(Memory bandwidth) configuration (Wang ShaoBo) [task:337521]
  - arm64/mpam: Using software-defined id for rdtgroup instead of 32-bit integer (Wang ShaoBo) [task:337521]
  - arm64/mpam: resctrl: Remove ctrlmon sysfile (Wang ShaoBo) [task:337521]
  - arm64/mpam: resctrl: Use resctrl_group_init_alloc() to init schema list (Wang ShaoBo) [task:337521]
  - arm64/mpam: Clean up header files and rearrange declarations (Wang ShaoBo) [task:337521]
  - arm64/mpam: resctrl: Update closid alloc and free process with bitmap (Wang ShaoBo) [task:337521]
  - arm64/mpam: resctrl: Support cdp on monitoring data (Wang ShaoBo) [task:337521]
  - arm64/mpam: resctrl: Move ctrlmon sysfile write/read function to mpam_ctrlmon.c (Wang ShaoBo) [task:337521]
  - arm64/mpam: resctrl: Update resources reset process (Wang ShaoBo) [task:337521]
  - arm64/mpam: resctrl: Supplement cdpl2,cdpl3 for mount options (Wang ShaoBo) [task:337521]
  - arm64/mpam: resctrl: Write and read schemata by schema_list (Wang ShaoBo) [task:337521]
  - arm64/mpam: resctrl: Add helpers for init and destroy schemata list (Wang ShaoBo) [task:337521]
  - arm64/mpam: resctrl: Rebuild configuration and monitoring pipeline (Wang ShaoBo) [task:337521]
  - arm64/mpam: Implement intpartid narrowing process (Wang ShaoBo) [task:337521]
  - arm64/mpam: Support cdp in mpam_sched_in() (Wang ShaoBo) [task:337521]
  - arm64/mpam: Support cdp on allocating monitors (Wang ShaoBo) [task:337521]
  - arm64/mpam: Probe partid,pmg and feature capabilities' ranges from classes (Wang ShaoBo) [task:337521]
  - arm64/mpam: Migrate old MSCs' discovery process to new branch (Wang ShaoBo) [task:337521]
  - arm64/mpam: resctrl: Handle cpuhp and resctrl_dom allocation (Wang ShaoBo) [task:337521]
  - arm64/mpam: resctrl: Re-synchronise resctrl's view of online CPUs (James Morse) [task:337521]
  - arm64/mpam: Add helper for getting MSCs' configuration (Wang ShaoBo) [task:337521]
  - arm64/mpam: Init resctrl resources' info from resctrl_res selected (Wang ShaoBo) [task:337521]
  - arm64/mpam: Implement helpers for handling configuration and monitoring (Wang ShaoBo) [task:337521]
  - arm64/mpam: Pick MPAM resources and events for resctrl_res exported (Wang ShaoBo) [task:337521]
  - arm64/mpam: Add helper for getting mpam sysprops (Wang ShaoBo) [task:337521]
  - arm64/mpam: Allocate mpam component configuration arrays (Wang ShaoBo) [task:337521]
  - arm64/mpam: Summarize feature support during mpam_enable() (James Morse) [task:337521]
  - arm64/mpam: Probe the features resctrl supports (James Morse) [task:337521]
  - arm64/mpam: Reset controls when CPUs come online (James Morse) [task:337521]
  - arm64/mpam: Supplement MPAM MSC register layout definitions (James Morse) [task:337521]
  - arm64/mpam: Probe supported partid/pmg ranges from devices (James Morse) [task:337521]
  - arm64/mpam: resctrl: Append schemata CDP definitions (Wang ShaoBo) [task:337521]
  - arm64/mpam: Add mpam driver discovery phase and kbuild boiler plate (James Morse) [task:337521]
  - arm64/mpam: Preparing for MPAM refactoring (Wang ShaoBo) [task:337521]
  - drivers: base: cacheinfo: Add helper to search cacheinfo by of_node (James Morse) [task:337521]
  - cacheinfo: Provide a helper to find a cacheinfo leaf (James Morse) [task:337521]
  - OPENEULER: ACPI / PPTT: Find PPTT processor node by cache id (Yu Liao) [task:337521]
  - ACPICA: ACPI 6.4: PPTT: add new version of subtable type 1 (Erik Kaneda) [task:337521]
  - ACPICA: Add support for Arm's MPAM ACPI table version 2 (Hesham Almatary) [task:337521]
  - libbpf, hashmap: Fix undefined behavior in hash_bits (Ian Rogers) [task:337521]
  - libbpf: Fix libbpf hashmap on (I)LP32 architectures (Jakub Bogusz) [task:337521]
  - libbpf: Define __WORDSIZE if not available (Arnaldo Carvalho de Melo) [task:337521]
  - libbpf, hashmap: Remove unused #include (Ian Rogers) [task:337521]
  - libbpf: fix missing __WORDSIZE definition (Andrii Nakryiko) [task:337521]
  - libbpf: add resizable non-thread safe internal hashmap (Andrii Nakryiko) [task:337521]
  - OPENEULER: Fix the header file location error and adjust the function and structure version. (Wangming Shao) [task:337521]
  - spi: hisi-kunpeng: Fix the debugfs directory name incorrect (oujiefeng) [task:337521]
  - spi: hisi-kunpeng: Add debugfs support (Jay Fang) [task:337521]
  - spi: hisi-kunpeng: Fix Woverflow warning on conversion (Jay Fang) [task:337521]
  - spi: Add HiSilicon SPI Controller Driver for Kunpeng SoCs (Jay Fang) [task:337521]
  - Documentation: devres: add missing SPI helper (Yang Yingliang) [task:337521]
  - spi: Fix use-after-free with devm_spi_alloc_* (William A. Kennington III) [task:337521]
  - spi: Introduce device-managed SPI controller allocation (Lukas Wunner) [task:337521]
  - OPENEULER: crypto: hisilicon - fix different versions of devices driver compatibility issue (lauyarn) [task:337521]
  - OPENEULER: crypto: hisilicon-memory management optimization (Yu'an Wang) [task:337521]
  - OPENEULER: crypto/hisilicon/qm: optimize the maximum number of VF and delete invalid addr (Yu'an Wang) [task:337521]
  - OPENEULER: crypto/hisilicon/qm: reinforce reset failure scene (Yu'an Wang) [task:337521]
  - OPENEULER: crypto/hisilicon/sec: Overall optimization of sec code (Yu'an Wang) [task:337521]
  - OPENEULER: crypto/hisilicon/qm: Move all the same logic functions of hisilicon crypto to qm (Yu'an Wang) [task:337521]
  - OPENEULER: crypto/hisilicon/hpre: add likely and unlikey in result judgement (Yu'an Wang) [task:337521]
  - OPENEULER: crypto/hisilicon/sec: change sec_control reg config (Yu'an Wang) [task:337521]
  - OPENEULER: drivers/crypto/hisilicon/sec2: add initial configuration in sec_engine_init (Yu'an Wang) [task:337521]
  - OPENEULER: crypto/hisilicon/qm: fix the way judge whether q stop in user space (Yu'an Wang) [task:337521]
  - OPENEULER: crypto/hisilicon/qm: fixup compilation dependency (Yu'an Wang) [task:337521]
  - OPENEULER: crypto/hisilicon/qm: remove invalid addr print (Yu'an Wang) [task:337521]
  - OPENEULER: drivers/crypto/hisilicon: Remove uacce mode 1 logic below hisilicon (Yu'an Wang) [task:337521]
  - OPENEULER: crypto/hisilicon/rde: optimize debug regs clear logic (Yu'an Wang) [task:337521]
  - scsi: hisi_sas: use devm_platform_ioremap_resource() to simplify code (YueHaibing) [task:337521]
  - crypto/hisilicon: Resolved random compilation failure of kernelCI platform test (pengcan) [task:337521]
  - Intel: perf/core: Add function to test for event exclusion flags (Andrew Murray) [task:337521]
  - Intel: perf/core: Add PERF_PMU_CAP_NO_EXCLUDE for exclusion incapable PMUs (Andrew Murray) [task:337521]
  - OPENEULER: arm64: Add MIDR encoding for PHYTIUM CPUs (Guo Hui) [task:337521]
  - arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Julien Grall) [task:337521]
  - arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Dave Martin) [task:337521]
  - arm64: Expose SVE2 features for userspace (Dave Martin) [task:337521]
  - arm64: HWCAP: add support for AT_HWCAP2 (Andrew Murray) [task:337521]
  - crypto: arm64/ghash - register PMULL variants as separate algos (Ard Biesheuvel) [task:337521]
  - PCI: Add pci_dev_id() helper (Heiner Kallweit) [task:337521]
  - drivers: provide devm_platform_ioremap_resource() (Bartosz Golaszewski) [task:337521]
  - For drivers that do not support context exclusion let's advertise the PERF_PMU_CAP_NO_EXCLUDE capability. This ensures that perf will prevent us from handling events where any exclusion flags are set. Let's also remove the now unnecessary check for exclusion flags. (Andrew Murray) [task:337521]
  - genirq: Export affinity setter for modules (Thomas Gleixner) [task:337521]
  - OPENEULER: iommu/arm-smmu-v3: Integrate the function for obtain the device domain type in bypass mode (YunYi Yang) [task:337521]
  - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (Yicong Yang) [task:337521]
  - iommu: Add def_domain_type() callback in iommu_ops (Sai Praneeth Prakhya) [task:337521]
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (Ido Schimmel) [task:390739] {CVE-2024-50304}
  - rcu: Add support for consolidated-RCU reader checking (Joel Fernandes (Google)) [task:390739]
  - rcu: Remove redundant debug_locks check in rcu_read_lock_sched_held() (Joel Fernandes (Google)) [task:390739]
  - serial: protect uart_port_dtr_rts() in uart_shutdown() too (Jiri Slaby (SUSE)) [task:376267] {CVE-2024-50058}
  - Revert "serial: core: Fix initializing and restoring termios speed" (tianyaxiong) [task:418041]
  - Revert "serial: protect uart_port_dtr_rts() in uart_shutdown() too" (tianyaxiong) [task:418041]
  - PCI: Support BAR sizes up to 8TB (Dongdong Liu) [task:337521]
  - OPENEULER: iommu: smmuv2: Using the SMMU_BYPASS_DEV to bypass SMMU for some SoCs (Hanjun Guo) [task:337521]
  - virtio-mmio: don't break lifecycle of vm_dev (Wolfram Sang) [task:379857]
  - virtio-mmio: Use to_virtio_mmio_device() to simply code (Tang Bin) [task:379857]
  - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach (Zheng Wang) [task:223093, task:370805] {CVE-2024-35811, CVE-2023-47233}
  - net: fix crash when config small gso_max_size/gso_ipv4_max_size (Wang Liang) [task:387479] {CVE-2024-50258}
  - net: Only allow init netns to set default tcp cong to a restricted algo (Jonathon Reinhart) [task:370855] {CVE-2021-47010}
  - fix the redeclaration of ‘i’ in drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.c (Yan Wang) [task:403963]
  - Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (Luiz Augusto von Dentz) [task:396699] {CVE-2024-8805, CVE-2024-8805}
  - soundwire: stream: fix memory leak in stream config error path (Rander Wang) [task:158827, task:370857] {CVE-2021-47020}
  - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (Yi Yang) [task:400455] {CVE-2023-6546}
  - tty: n_gsm: fix restart handling via CLD command (Daniel Starke) [task:400455]
  - bus: qcom: Put child node before return (Pan Bian) [task:158827, task:370863] {CVE-2021-47054}
  - net/tls: tls_is_tx_ready() checked list_entry (Pietro Borrello) [task:370245] {CVE-2023-1075}
  - net/tls: Fixed race condition in async encryption (Vakul Garg) [task:82911, task:370245]
  - serial: protect uart_port_dtr_rts() in uart_shutdown() too (Jiri Slaby (SUSE)) [task:376267] {CVE-2024-50058}
  - serial: core: Fix initializing and restoring termios speed (Pali Rohár) [task:376267]
  - Update kernel version to 4.19.90-23.53.v2101 (Super User)
  - Revert "x86/bugs: Add AMD retbleed= boot parameter" (Enze Li) [bug:247197]
  - Revert "x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value" (Enze Li) [bug:247197]
  - Revert "x86/entry: Add kernel IBRS implementation" (Enze Li) [bug:247197]
  - Revert "x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS" (Enze Li) [bug:247197]
  - Revert "x86/bugs: Report Intel retbleed vulnerability" (Enze Li) [bug:247197]
  - Revert "Add HYGON retbleed= boot parameter" (Enze Li) [bug:247197]
  - Revert "x86/bugs: Add Cannon lake to RETBleed affected CPU list" (Enze Li) [bug:247197]
  - HYGON: fix incorrect display of CPU topology structure (wangxuewen) [task:395227]
  - HYGON: perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 6h (Pu Wen) [task:357093]
  - HYGON: ALSA: hda: Fix single byte write failure issue for Hygon (Pu Wen) [task:357093]
  - HYGON: ALSA: hda: Add Hygon HD-Audio support (Pu Wen) [task:357093]
  - HYGON: EDAC/amd64: Adjust UMC channel for Hygon family 18h model 6h (Pu Wen) [task:357093]
  - HYGON: x86/amd_nb: Get DF ID from F5 device for Hygon family 18h model 6h (Pu Wen) [task:357093]
  - HYGON: EDAC/amd64: Fix intlv_num_chan for Hygon family 18h model 4h (Pu Wen) [task:357093]
  - HYGON: EDAC/amd64: Revert hi_addr_offset for Hygon family 18h model 4h (Pu Wen) [task:357093]
  - x86/microcode/AMD: Clean up per-family patch size checks (Borislav Petkov) [task:357093]
  - HYGON: i2c-piix4: Remove the IMC detecting for Hygon SMBus (Pu Wen) [task:357093]
  - HYGON: hwmon: (k10temp) Add support for Hygon family 18h model 4h~6h (Pu Wen) [task:357093]
  - HYGON: EDAC/mce_amd: Use struct cpuinfo_x86.logical_die_id for AMD NodeId (Pu Wen) [task:357093]
  - HYGON: EDAC/amd64: Determine DDR type for Hygon family 18h model 4h~6h (Pu Wen) [task:357093]
  - HYGON: EDAC/amd64: Add support for Hygon family 18h model 5h and 6h (Pu Wen) [task:357093]
  - HYGON: EDAC/amd64: Add support for Hygon family 18h model 4h (Pu Wen) [task:357093]
  - HYGON: EDAC/amd64: Get UMC channel from the strict 6th nibble (Pu Wen) [task:357093]
  - HYGON: mce/amd: Optimize bank_map implementation to support >= 32 MCE banks (Pu Wen) [task:357093]
  - HYGON: iommu/hygon: Add support for Hygon family 18h model 4h IOAPIC (Pu Wen) [task:357093]
  - HYGON: x86/amd_nb: Add support for Hygon family 18h model 5h and 6h (George Guo) [task:357093]
  - HYGON: x86/amd_nb: Add northbridge support for Hygon family 18h model 4h (Pu Wen) [task:357093]
  - x86/amd_nb: Add Family 19h PCI IDs (Yazen Ghannam) [task:357093]
  - x86/amd_nb: Add PCI device IDs for family 17h, model 70h (Marcel Bocu) [task:357093]
  - x86/amd_nb: Add PCI device IDs for family 17h, model 30h (Woods, Brian) [task:357093]
  - hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs (Woods, Brian) [task:357093]
  - HYGON: x86/microcode: Add microcode loading support for Hygon processors (Pu Wen) [task:357093]
  - HYGON: x86/cpu/hygon: Add Hygon model 5h and 6h processors (Pu Wen) [task:357093]
  - HYGON: x86/cpu/hygon: Modify the CPU topology deriving method for Hygon (Pu Wen) [task:357093]
  - EDAC: Add RDDR5 and LRDDR5 memory types (Yazen Ghannam) [task:357093]
  - EDAC: Add DDR5 new memory type (Qiuxu Zhuo) [task:357093]
  - x86/topology: Set cpu_die_id only if DIE_TYPE found (Yazen Ghannam) [task:357093]
  - EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId (Yazen Ghannam) [task:357093]
  - x86/CPU/AMD: Remove amd_get_nb_id() (Yazen Ghannam) [task:357093]
  - x86/CPU/AMD: Save AMD NodeId as cpu_die_id (Yazen Ghannam) [task:357093]
  - x86/mce: Increase maximum number of banks to 64 (Akshay Gupta) [task:357093]
  - x86/umip: Make the UMIP activated message generic (Lendacky, Thomas) [task:357093]
  - x86/umip: Print UMIP line only once (Borislav Petkov) [task:357093]
  - EDAC/amd64: Add family ops for Family 19h Models 00h-0Fh (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Save max number of controllers to family type (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Gather hardware information early (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Make struct amd64_family_type global (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Set grain per DIMM (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Support asymmetric dual-rank DIMMs (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Cache secondary Chip Select registers (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Add PCI device IDs for family 17h, model 70h (Isaac Vaughn) [task:363779]
  - EDAC/amd64: Find Chip Select memory size using Address Mask (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Adjust printed chip select sizes when interleaved (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Recognize x16 symbol size (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Set maximum channel layer size depending on family (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Support more than two Unified Memory Controllers (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Add Family 17h Model 30h PCI IDs (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Initialize DIMM info for systems with more than two channels (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Support more than two controllers for chip selects handling (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Use a macro for iterating over Unified Memory Controllers (Yazen Ghannam) [task:363779]
  - EDAC/amd64: Drop some family checks for newer systems (Yazen Ghannam) [task:363779]
  - kabi: fix cpuinfo_x86 kabi broken (Jackie Liu) [task:363191]
  - Intel: powercap/intel_rapl: add support for ICX-D (Zhang Rui) [task:363191]
  - Intel: powercap/intel_rapl: add support for ICX (Zhang Rui) [task:363191]
  - Intel: powercap/intel_rapl: add support for IceLake desktop (Zhang Rui) [task:363191]
  - Intel: intel_rapl: Fix module autoloading issue (Zhang Rui) [task:363191]
  - Intel: intel_rapl: support two power limits for every RAPL domain (Zhang Rui) [task:363191]
  - Intel: intel_rapl: support 64 bit register (Zhang Rui) [task:363191]
  - intel_rapl: abstract RAPL common code (Zhang Rui) [task:363191]
  - Intel: intel_rapl: cleanup hardcoded MSR access (Zhang Rui) [task:363191]
  - Intel: intel_rapl: cleanup some functions (Zhang Rui) [task:363191]
  - Intel: intel_rapl: abstract register access operations (Zhang Rui) [task:363191]
  - Intel: intel_rapl: abstract register address (Zhang Rui) [task:363191]
  - Intel: intel_rapl: introduce struct rapl_if_private (Zhang Rui) [task:363191]
  - Intel: intel_rapl: introduce intel_rapl.h (Zhang Rui) [task:363191]
  - Intel: intel_rapl: remove hardcoded register index (Zhang Rui) [task:363191]
  - Intel: intel_rapl: use reg instead of msr (Zhang Rui) [task:363191]
  - Intel: powercap/intel_rapl: Update RAPL domain name and debug messages (Zhang Rui) [task:363191]
  - Intel: powercap/intel_rapl: Support multi-die/package (Zhang Rui) [task:363191]
  - Intel: powercap/intel_rapl: Simplify rapl_find_package() (Zhang Rui) [task:363191]
  - Intel: x86/topology: Define topology_logical_die_id() (Len Brown) [task:363191]
  - Intel: x86/topology: Define topology_die_id() (Len Brown) [task:363191]
  - Intel: cpu/topology: Export die_id (Len Brown) [task:363191]
  - Intel: x86/topology: Create topology_max_die_per_package() (Len Brown) [task:363191]
  - Intel: x86/topology: Add CPUID.1F multi-die/package support (Len Brown) [task:363191]
  - Intel: topology: Simplify cputopology.txt formatting and wording (Len Brown) [task:363191]
  - perf/amd/uncore: Replace manual sampling check with CAP_NO_INTERRUPT flag (Kim Phillips) [task:362631]
  - perf/amd/uncore: Fix sysfs type mismatch (Nathan Chancellor) [task:362631]
  - perf/amd/uncore: Allow F19h user coreid, threadmask, and sliceid specification (Kim Phillips) [task:362631]
  - perf/amd/uncore: Allow F17h user threadmask and slicemask specification (Kim Phillips) [task:362631]
  - perf/amd/uncore: Prepare to scale for more attributes that vary per family (Kim Phillips) [task:362631]
  - perf/amd/uncore: Set all slices and threads to restore perf stat -a behaviour (Kim Phillips) [task:362631]
  - perf/amd/uncore: Add support for Family 19h L3 PMU (Kim Phillips) [task:362631]
  - perf/amd/uncore: Make L3 thread mask code more readable (Kim Phillips) [task:362631]
  - perf/amd/uncore: Prepare L3 thread mask code for Family 19h (Kim Phillips) [task:362631]
  - arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (Jonathan Cameron) [task:368125]
  - arm64: acpi: Move get_cpu_for_acpi_id() to a header (chentao) [task:368125]
  - openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [task:370837] {CVE-2021-46955}
  - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Lv Yunlong) [task:370853] {CVE-2021-47013}
  - RDMA/rxe: Clear all QP fields if creation failed (Leon Romanovsky) [task:370867] {CVE-2021-47078}
  - inet: fully convert sk->sk_rx_dst to RCU rules (Eric Dumazet) [task:370873] {CVE-2021-47103}
  - net: caif: fix memory leak in cfusbl_device_notify (Pavel Skripkin) [task:370875] {CVE-2021-47121}
  - net: dsa: mt7530: fix VLAN traffic leaks (DENG Qingfang) [task:370889] {CVE-2021-47160}
  - ethernet:enic: Fix a use after free bug in enic_hard_start_xmit (Lv Yunlong) [task:370851] {CVE-2021-46998}
  - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses (Eric Dumazet) [task:370241] {CVE-2021-4203}
  - net/ncsi: Disable the ncsi work before freeing the associated structure (Eddie James) [task:376379] {CVE-2024-49945}
  - net/ncsi: Fix netlink registration (Joel Stanley) [task:376379]
  - tcp: check skb is non-NULL in tcp_rto_delta_us() (Josh Hunt) [task:375609] {CVE-2024-47684}
  - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Zhu Yanjun) [task:375617] {CVE-2024-47696}
  - RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled (Chengchang Tang) [task:376269] {CVE-2024-47735}
  - scsi: core: don't preallocate small SGL in case of NO_SG_CHAIN (Ming Lei) [task:227191, task:385765]
  - scsi: lib/sg_pool.c: clear 'first_chunk' in case of no preallocation (Ming Lei) [task:227191, task:385765]
  - scsi: s390: zfcp_fc: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: zfcp: move SG table helper from aux to fc and make them static (Steffen Maier) [task:227191, task:385765]
  - scsi: mvumi: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: mvumi: switch to generic DMA API (Christoph Hellwig) [task:227191, task:385765]
  - scsi: NCR5380: use sg helper to iterate over scatterlist (Finn Thain) [task:227191, task:385765]
  - scsi: wd33c93: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: ppa: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: pcmcia: nsp_cs: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: imm: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: aha152x: use sg helper to iterate over scatterlist (Finn Thain) [task:227191, task:385765]
  - scsi: staging: unisys: visorhba: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: usb: image: microtek: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: pmcraid: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: ipr: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: advansys: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: vmw_pvscsi: Use true, false for adapter->use_msg (Jason Yan) [task:227191, task:385765]
  - scsi: vmw_pvscsi: Silence dma mapping errors (Thomas Hellstrom) [task:227191, task:385765]
  - scsi: vmw_pvscsi: Fix swiotlb operation (Thomas Hellstrom) [task:227191, task:385765]
  - scsi: vmw_pscsi: use sg helper to iterate over scatterlist (Ming Lei) [task:227191, task:385765]
  - scsi: vmw_pscsi: switch to generic DMA API (Christoph Hellwig) [task:227191, task:385765]
  - scsi: lpfc: use sg helper to iterate over scatterlist (Ming Lei) [task:62595, task:227191, task:385765]
  - scsi: core: avoid preallocating big SGL for data (Ming Lei) [task:208527, task:385765]
  - scsi: core: avoid preallocating big SGL for protection information (Ming Lei) [task:208527, task:385765]
  - scsi: lib/sg_pool.c: improve APIs for allocating sg pool (Ming Lei) [task:208527, task:385765]
  - cifs: Return correct error code from smb2_get_enc_key (Paul Aurich) [task:370839] {CVE-2021-46960}
  - Input: appletouch - initialize work before device registration (Pavel Skripkin) [task:160493, task:370827] {CVE-2021-46932}
  - i2c: validate user data in compat ioctl (Pavel Skripkin) [task:160493, task:370823] {CVE-2021-46934}
  - HID: usbhid: fix info leak in hid_submit_ctrl (Anirudh Rayabharam) [task:158827, task:370811] {CVE-2021-46906}
  - binder: fix async_free_space accounting for empty parcels (Todd Kjos) [task:160493, task:370819] {CVE-2021-46935}
  - ext4: fix timer use-after-free on failed mount (Xiaxi Shen) [task:376211] {CVE-2024-49960}
  - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. (Vincent Pelletier) [task:160493]
  - NFC: st21nfca: Fix memory leak in device probe and remove (Wei Yongjun) [task:160493]
  - locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Ali Saidi)
  - fsl/fman: Fix refcount handling of fman-related devices (Aleksandr Mishin) [task:387475] {CVE-2024-50166}
  - net: fman: Clean up error handling (Sean Anderson) [task:387475]
  - net: fman: Map the base address once (Sean Anderson) [task:387475]
  - net: fman: Unregister ethernet device on removal (Sean Anderson) [task:164562]
  - fsl/fman: use resource_size (Julia Lawall) [task:387475]
  - net: fman: Configure fixed link in memac_initialization (Sean Anderson) [task:387475]
  - fsl/fman: Check for null pointer after calling devm_ioremap (Jiasheng Jiang) [task:160493]
  - net: fman: Move struct dev to mac_device (Sean Anderson) [task:387475]
  - filemap: Fix bounds checking in filemap_read() (Trond Myklebust) [task:390893] {CVE-2024-50272}
  - Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync() (Duoming Zhou) [bug:189740] {CVE-2023-4134}
  - x86/CPU/AMD: Do not leak quotient data after a division by 0 (Borislav Petkov (AMD)) [task:179889, bug:189752] {CVE-2023-20588}
  - x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD)) [bug:185043] {CVE-2023-20593}
  - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Dave Hansen) [bug:189744]
  - x86/speculation: Add force option to GDS mitigation (Daniel Sneddon) [bug:189744]
  - x86/speculation: Add Kconfig option for GDS (Daniel Sneddon) [bug:189744]
  - x86/speculation: Add cpu_show_gds() prototype (Arnd Bergmann) [bug:189744]
  - x86: Move gds_ucode_mitigated() declaration to header (Arnd Bergmann) [bug:189744]
  - KVM: Add GDS_NO support to KVM (Daniel Sneddon) [bug:189744] {CVE-2022-40982}
  - x86/speculation: Add Gather Data Sampling mitigation (Daniel Sneddon) [bug:189744] {CVE-2022-40982}
  - x86/cpu/amd: Move the errata checking functionality up (Borislav Petkov (AMD)) [bug:185043] {CVE-2023-20593}
  - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Pawan Gupta) [task:164574]
  - x86/common: Stamp out the stepping madness (Peter Zijlstra) [task:164574]
  - x86/cpu/amd: Make erratum #1054 a legacy erratum (Kim Phillips) [task:157172]
  - x86/cpu/amd: Enable the fixed Instructions Retired counter IRPERF (Kim Phillips) [task:155809]
  - x86/cpu: Fix migration safety with X86_BUG_NULL_SEL (Jane Malalane)
  - Revert "x86/cpu/amd: Add a Zenbleed fix" (Yan Wang) [bug:185043]
  - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi) [task:371789]
  - nilfs2: fix missing cleanup on rollforward recovery error (Ryusuke Konishi) [task:363971] {CVE-2024-46781}
  - xfs: Reduce unnecessary searches when searching for the best extents (Chi Zhiling) [task:377527]
  - fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni) [task:396801] {CVE-2024-53101}
  - ocfs2: uncache inode which has failed entering the group (Dmitry Antipov) [task:396817] {CVE-2024-53112}
  - f2fs: Require FMODE_WRITE for atomic write ioctls (Jann Horn) [task:376135] {CVE-2024-47740}
  - mm: split critical region in remap_file_pages() and invoke LSMs in between (Kirill A. Shutemov) [task:376325]
  - mm: call the security_mmap_file() LSM hook in remap_file_pages() (Shu Han) [task:376325] {CVE-2024-47745}
  - mm/mmap.c: don't unlock VMAs in remap_file_pages() (Liam Howlett) [task:376325]
  - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (Al Viro) [task:363785] {CVE-2024-45025}
  - s390/cio: rename bitmap_size() -> idset_bitmap_size() (Alexander Lobakin) [task:363785]
  - bitmap: introduce generic optimized bitmap_size() (Alexander Lobakin) [task:363785]
  - tools: move alignment-related macros to new <linux/align.h> (Alexander Lobakin) [task:363785]
  - tools headers UAPI: Sync linux/const.h with the kernel headers (Arnaldo Carvalho de Melo) [task:363785]
  - tools headers: Grab copy of linux/const.h, needed by linux/bits.h (Arnaldo Carvalho de Melo) [task:363785]
  - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (Hans de Goede) [task:387555] {CVE-2024-50134}
  - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (Pedro Tammela) [task:392639] {CVE-2024-53057}
  - uprobes: fix kernel info leak via "[uprobes]" vma (Oleg Nesterov) [task:375973] {CVE-2024-49975}
  - ext4: update orig_path in ext4_find_extent() (Baokun Li) [task:376209] {CVE-2024-49881}
  - ext4: fix slab-use-after-free in ext4_split_extent_at() (Baokun Li) [task:376087] {CVE-2024-49884}
  - ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path (Theodore Ts'o) [task:376087]
  - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() (Dmitry Antipov) [task:380475] {CVE-2024-47713}
  - i40e: fix race condition by adding filter's intermediate sync state (Aleksandr Loktionov) [task:390579] {CVE-2024-53088}
  - i40e: fix i40e_count_filters() to count only active/new filters (Aleksandr Loktionov) [task:390579]
  - uprobe: avoid out-of-bounds memory access of fetching args (Qiao Ma) [task:380099] {CVE-2024-50067}
  - security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong) [task:390885] {CVE-2024-50301}
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu) [task:391029] {CVE-2024-53066}
  - usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu) [task:390745] {CVE-2024-50269}
  - media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab) [task:391027] {CVE-2024-53061}
  - sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long) [task:390741] {CVE-2024-50299}
  - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (Zicheng Qu) [task:387919] {CVE-2024-50233}
  - staging: iio: ad9832: use clock framework for clock reference (Marcelo Schmitt) [task:387919]
  - staging: iio: ad9832: organize includes (Marcelo Schmitt) [task:387919]
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (Felix Fietkau) [task:390869] {CVE-2024-50237}
  - userfaultfd: fix checks for huge PMDs (Jann Horn) [task:363981] {CVE-2024-46787}
  - media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab) [task:390895] {CVE-2024-53063}
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Baokun Li) [task:344489] {CVE-2024-40998}
  - HID: core: zero-initialize the report buffer (Jiri Kosina) [task:392647] {CVE-2024-50302}
  - media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab) [task:392635] {CVE-2024-50290}
  - media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab) [task:392643] {CVE-2024-50287}
  - dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai) [task:390571] {CVE-2024-50278}
  - dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai) [task:390571]
  - net/sched: accept TCA_STAB only for root qdisc (Eric Dumazet) [task:375649] {CVE-2024-50039}
  - net: sched: refactor grafting Qdiscs with a parent (Jakub Kicinski) [task:375649]
  - nilfs2: propagate directory read errors from nilfs_find_entry() (Ryusuke Konishi) [task:387959] {CVE-2024-50202}
  - btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana) [task:390749] {CVE-2024-50273}
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner) [task:390611] {CVE-2024-50265}
  - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (Edward Adam Davis) [task:390609] {CVE-2024-50218}
  - USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter) [task:390585] {CVE-2024-50267}
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Hyunwoo Kim) [task:390583] {CVE-2024-50264}
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai) [task:390581] {CVE-2024-50279}
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Sean Christopherson) [task:387973] {CVE-2024-50115}
  - usb: typec: altmode should keep reference to parent (Thadeu Lima de Souza Cascardo) [task:387987] {CVE-2024-50150}
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout (Luiz Augusto von Dentz) [task:387967] {CVE-2024-50125}
  - Bluetooth: call sock_hold earlier in sco_conn_del (Desmond Cheong Zhi Xi) [task:387967]
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [task:387575] {CVE-2024-50142}
  - parport: Proper fix for array out-of-bounds access (Takashi Iwai) [task:380221] {CVE-2024-50074}
  - nilfs2: fix kernel bug due to missing clearing of checked flag (Ryusuke Konishi) [task:387405] {CVE-2024-50230}
  - ixgbevf: Fix resource leak in ixgbevf_init_module() (Shang XiaoJing) [task:376297] {CVE-2022-49028}
  - sched/pelt: Fix attach_entity_load_avg() corner case (kuyo chang) [task:375977]
  - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Rutland) [task:387961] {CVE-2024-50099}
  - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (Wang Hai) [task:387913] {CVE-2024-50168}
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister (Ye Bin) [task:387981] {CVE-2024-50148}
  - RDMA/mad: Improve handling of timed out WRs of mad agent (Saravanan Vajravel) [task:387985] {CVE-2024-50095}
  - IB/mad: Issue complete whenever decrements agent refcount (Shay Drory) [task:387985]
  - netfilter: Drop fragmented ndisc packets assembled in netfilter (Georg Kohmann) [bug:277233]
  - be2net: fix potential memory leak in be_xmit() (Wang Hai) [task:387921] {CVE-2024-50167}
  - ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [task:387779] {CVE-2024-50179}
  - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (Pablo Neira Ayuso) [task:387917] {CVE-2024-50251}
  - nilfs2: fix kernel bug due to missing clearing of buffer delay flag (Ryusuke Konishi) [task:387481] {CVE-2024-50116}
  - drm/vc4: Stop the active perfmon before being destroyed (Maíra Canal) [task:387413] {CVE-2024-50187}
  - rtmutex: Drop rt_mutex::wait_lock before scheduling (Roland Xu) [task:368141] {CVE-2024-46829}
  - x86/ioapic: Handle allocation failures gracefully (Thomas Gleixner) [task:380139] {CVE-2024-49927}
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Omar Sandoval) [task:380143] {CVE-2024-50082}
  - list: add "list_del_init_careful()" to go with "list_empty_careful()" (Linus Torvalds) [task:380143]
  - gpiolib: fix memory leak in gpiochip_setup_dev() (Zeng Heng) [task:376237] {CVE-2022-48975}
  - gpiolib: check the 'ngpios' property in core gpiolib code (Bartosz Golaszewski) [task:376237]
  - gpiolib: free device name on error path to fix kmemleak (Quanyang Wang) [task:376237]
  - gpio: gpiolib: Normalize return code variable name (Linus Walleij) [task:376237]
  - tcp: avoid too many retransmit packets (Eric Dumazet) [task:347169] {CVE-2024-41007}
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Eric Dumazet) [task:347169]
  - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Menglong Dong) [task:347169]
  - tcp: refactor tcp_retransmit_timer() (Eric Dumazet) [task:347169]
  - net/sched: act_mirred: don't override retval if we already lost the skb (Jakub Kicinski) [task:210475] {CVE-2024-26739}
  - bonding: update port speed when getting bond speed (Hangbin Liu) [task:382011]
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect (Luiz Augusto von Dentz) [task:375621] {CVE-2024-49950}
  - nfsd: map the EBADMSG to nfserr_io to avoid warning (Li Lingfeng) [task:376263] {CVE-2024-49875}
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Steve Wahl) [task:376133] {CVE-2024-50017}
  - drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs (Konrad Dybcio) [task:380141] {CVE-2024-49901}
  - dm snapshot: fix lockup in dm_exception_table_exit (Mikulas Patocka) [task:221943] {CVE-2024-35805}
  - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (Ard Biesheuvel) [task:376275] {CVE-2024-49858}
  - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (Qu Wenruo) [task:376151] {CVE-2024-49868}
  - fsnotify: clear PARENT_WATCHED flags lazily (Amir Goldstein) [task:376261] {CVE-2024-47660}
  - jfs: Fix sanity check in dbMount (Dave Kleikamp) [task:376131]
  - jfs: fix out-of-bounds in dbNextAG() and diAlloc() (Jeongjun Park) [task:376131] {CVE-2024-47723}
  - net/xen-netback: prevent UAF in xenvif_flush_hash() (Jeongjun Park) [task:380461] {CVE-2024-49936}
  - net: xen-netback: hash.c: Use built-in RCU list checking (Madhuparna Bhowmik) [task:380461]
  - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (Jinjie Ruan) [task:380455] {CVE-2023-52917}
  - fou: fix initialization of grc (Muhammad Usama Anjum) [task:363977]
  - fou: Fix null-ptr-deref in GRO. (Kuniyuki Iwashima) [task:363977] {CVE-2024-46763}
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers (Eric Dumazet) [task:363977]
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers (Eric Dumazet) [task:363977]
  - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr (Mike Marciniszyn) [task:225598] {CVE-2021-47523}
  - vfs: Don't evict inode under the inode lru traversing context (Zhihao Cheng) [task:358113] {CVE-2024-45003}
  - ACPI: sysfs: validate return type of _STR method (Thomas Weißschuh) [task:380101] {CVE-2024-49860}
  - drm/amdgpu/pm: Fix the null pointer dereference for smu7 (Ma Jun) [task:352623] {CVE-2024-43909}
  - drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (Hersen Wu) [task:368523] {CVE-2024-46816}
  - ext4: no need to continue when the number of entries is 1 (Edward Adam Davis) [task:380197] {CVE-2024-49967}
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (Gustavo A. R. Silva) [task:380459] {CVE-2024-50008}
  - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (Toke Høiland-Jørgensen) [task:379923] {CVE-2024-49938}
  - net: add more sanity checks to qdisc_pkt_len_init() (Eric Dumazet) [task:380237] {CVE-2024-49948}
  - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (Eric Dumazet) [task:376177] {CVE-2024-47707}
  - drm/msm/dpu: remove LOCK/CLEAR support in RM (Jeykumar Sankaran) [task:379871]
  - drm/msm/dpu: clean up destination scaler residue (Jeykumar Sankaran) [task:379871]
  - SUNRPC: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [bug:263777]
  - btrfs: don't balance btree inode pages from buffered write path (Nikolay Borisov) [task:375983]
  - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing) [task:378953]
  - netfilter: br_netfilter: fix panic with metadata_dst skb (Andy Roulin) [task:376437] {CVE-2024-50045}
  - drm/amd/pm: ensure the fw_info is not null before using it (Tim Huang) [task:376229] {CVE-2024-49890}
  - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (Lizhi Xu) [task:375655] {CVE-2024-49877}
  - tipc: guard against string buffer overrun (Simon Horman) [task:376129] {CVE-2024-49995}
  - ALSA: asihpi: Fix potential OOB array access (Takashi Iwai) [task:376313] {CVE-2024-50007}
  - media: pci: cx23885: check cx23885_vdev_init() return (Hans Verkuil) [task:376301] {CVE-2023-52918}
  - btrfs: replace BUG_ON() with error handling at update_ref_for_cow() (Filipe Manana) [task:363775] {CVE-2024-46752}
  - ACPI: PAD: fix crash in exit_round_robin() (Seiji Nishikawa) [task:376159] {CVE-2024-49935}
  - ACPI: acpi_pad: add a missed blank line after declarations (Xiaofei Tan) [task:376159]
  - drm: omapdrm: Add missing check for alloc_ordered_workqueue (Ma Ke) [task:376335] {CVE-2024-49879}
  - Bluetooth: hci_core: Fix leaking sent_cmd skb (Luiz Augusto von Dentz) [task:344623] {CVE-2022-48844}
  - RDMA/cxgb4: Added NULL check for lookup_atid (Mikhail Lobanov) [task:376283] {CVE-2024-47749}
  - rtc: cmos: Fix wake alarm breakage (Rafael J. Wysocki) [task:375407]
  - rtc: cmos: Fix event handler registration ordering issue (Rafael J. Wysocki) [task:375407] {CVE-2022-48953}
  - block, bfq: fix possible UAF for bfqq->bic with merge chain (Yu Kuai) [task:375629] {CVE-2024-47706}
  - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (Xin Long) [task:375633] {CVE-2024-49944}
  - MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed (Jiaxun Yang) [task:368269] {CVE-2024-46832}
  - ext4: fix i_data_sem unlock order in ext4_ind_migrate() (Artem Sadovnikov) [task:375967] {CVE-2024-50006}
  - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() (Ryusuke Konishi) [task:375969] {CVE-2024-47699}
  - netfilter: nf_tables: prevent nf_skb_duplicated corruption (Eric Dumazet) [task:376057] {CVE-2024-49952}
  - ppp: fix ppp_async_encode() illegal access (Eric Dumazet) [task:375965] {CVE-2024-50035}
  - ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (Kaixin Wang) [task:375963] {CVE-2024-50059}
  - nfsd: call cache_put if xdr_reserve_space returns NULL (Guoqing Jiang) [task:376185] {CVE-2024-47737}
  - ocfs2: remove unreasonable unlock in ocfs2_read_blocks (Lizhi Xu) [task:376163] {CVE-2024-49965}
  - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error (Junlin Li) [task:375615] {CVE-2024-47697}
  - mailbox: bcm2835: Fix timeout during suspend mode (Stefan Wahren) [task:376341] {CVE-2024-49963}
  - nilfs2: fix potential oob read in nilfs_btree_check_delete() (Ryusuke Konishi) [task:376183] {CVE-2024-47757}
  - ext4: aovid use-after-free in ext4_ext_insert_extent() (Baokun Li) [task:376347] {CVE-2024-49883}
  - ocfs2: cancel dqi_sync_work before freeing oinfo (Joseph Qi) [task:376203] {CVE-2024-49966}
  - drm/amd/display: added NULL check at start of dc_validate_stream (winstang) [task:375221] {CVE-2024-46802}
  - ocfs2: reserve space for inline xattr before attaching reflink tree (Gautham Ananthakrishna) [task:376165] {CVE-2024-49958}
  - btrfs: wait for fixup workers before stopping cleaner kthread during umount (Filipe Manana) [task:376329] {CVE-2024-49867}
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Eric Dumazet) [task:376333] {CVE-2024-47685}
  - ACPI: battery: Fix possible crash when unregistering a battery hook (Armin Wolf) [task:376339] {CVE-2024-49955}
  - ACPI: battery: Simplify battery hook locking (Armin Wolf) [task:376339]
  - net: ethernet: nixge: fix NULL dereference (Yuri Karpov) [task:376191] {CVE-2022-49019}
  - net: nixge: Address compiler warnings when building for i386 (Moritz Fischer) [task:376191]
  - net: nixge: Add support for 64-bit platforms (Moritz Fischer) [task:376191]
  - ext4: fix double brelse() the buffer of the extents path (Baokun Li) [task:376207] {CVE-2024-49882}
  - vfs: fix race between evice_inodes() and find_inode()&iput() (Julian Sun) [task:376219] {CVE-2024-47679}
  - jfs: check if leafidx greater than num leaves per dmap tree (Edward Adam Davis) [task:376377] {CVE-2024-49902}
  - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error (Junlin Li) [task:376239] {CVE-2024-47698}
  - net: Fix an unsafe loop on the list (Anastasia Kovaleva) [task:376085] {CVE-2024-50024}
  - xen: use correct end address of kernel for conflict checking (Juergen Gross) [task:376245] {CVE-2024-47722}
  - media: venus: fix use after free bug in venus_remove due to race condition (Zheng Wang) [task:376401] {CVE-2024-49981}
  - ext4: avoid OOB when system.data xattr changes underneath the filesystem (Thadeu Lima de Souza Cascardo) [task:376249] {CVE-2024-47701}
  - ext4: return error on ext4_find_inline_entry (Thadeu Lima de Souza Cascardo) [task:376249]
  - jfs: Fix uninit-value access of new_ea in ea_buffer (Zhao Mengmeng) [task:376257] {CVE-2024-49900}
  - drm/amd/display: Check stream before comparing them (Alex Hung) [task:376409] {CVE-2024-49896}
  - sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop (Xin Long) [task:376417]
  - sctp: fix memory leak in sctp_stream_outq_migrate() (Zhengchao Shao) [task:376417] {CVE-2022-49013}
  - fbdev: pxafb: Fix possible use after free in pxafb_task() (Kaixin Wang) [task:376117] {CVE-2024-49924}
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation (Srinivasan Shanmugam) [task:376113] {CVE-2024-49894}
  - ocfs2: fix null-ptr-deref when journal load failed. (Julian Sun) [task:376303] {CVE-2024-49957}
  - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (Luiz Augusto von Dentz) [task:376309] {CVE-2024-50044}
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (Baokun Li) [task:376143] {CVE-2024-49959}
  - jfs: Fix uaf in dbFreeBits (Edward Adam Davis) [task:376153] {CVE-2024-49903}
  - e100: Fix possible use after free in e100_xmit_prepare (Wang Hai) [task:376281] {CVE-2022-49026}
  - e100: switch from 'pci_' to 'dma_' API (Christophe JAILLET) [task:376281]
  - aoe: fix the potential use-after-free problem in more places (Chun-Yi Lee) [task:376351] {CVE-2024-49982}
  - usb: hub: avoid warm port reset during USB3 disconnect (Mathias Nyman) [bug:251189]
  - net: ethernet: lantiq_etop: fix memory disclosure (Aleksander Jan Bajkowski) [task:376181] {CVE-2024-49997}
  - tracing: Free buffers when a used dynamic event is removed (Steven Rostedt (Google)) [task:375645] {CVE-2022-49006}
  - tracing: initialize variable in create_dyn_event() (Frank Rowand) [task:375645]
  - tracing: Add unified dynamic event framework (Masami Hiramatsu) [task:375645]
  - drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable() (Abhinav Kumar) [task:363787] {CVE-2024-45015}
  - drm/msm/dpu: remove RM dependency on connector state (Jeykumar Sankaran) [task:363787]
  - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (Pei Xiao) [task:376385] {CVE-2024-49962}
  - fix the kabi error of del_timer and del_timer_sync (Yan Wang) [bug:189740]
  - list: Add hlist_unhashed_lockless() (Eric Dumazet)
  - cxgb4: fix use after free bugs caused by circular dependency problem (Duoming Zhou) [bug:189736] {CVE-2023-4133}
  - timers: Provide timer_shutdown[_sync]() (Thomas Gleixner) [bug:189740]
  - timers: Add shutdown mechanism to the internal functions (Thomas Gleixner) [bug:189740]
  - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (Thomas Gleixner) [bug:189740]
  - timers: Rename del_timer() to timer_delete() (Thomas Gleixner) [bug:189740]
  - timers: Rename del_timer_sync() to timer_delete_sync() (Thomas Gleixner) [bug:189740]
  - timers: Use del_timer_sync() even on UP (Thomas Gleixner) [bug:189740]
  - timers: Silently ignore timers with a NULL function (Thomas Gleixner) [bug:189740]
  - timers: Update kernel-doc for various functions (Thomas Gleixner) [bug:189740]
  - timers: Replace BUG_ON()s (Thomas Gleixner) [bug:189740]
  - timer: Use hlist_unhashed_lockless() in timer_pending() (Eric Dumazet)
  - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (Steven Rostedt (Google)) [bug:189740]
  - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (Steven Rostedt (Google)) [bug:189740]
  - net: hso: fix null-ptr-deref during tty device unregistration (Anirudh Rayabharam) [task:158827]
  - usb: hso: check for return value in hso_serial_common_create() (Rustam Kovhaev) [task:157172]
  - net: fix use-after-free in tw_timer_handler (Muchun Song)
  - i2c: Fix a potential use after free (Xu Wang) [task:162162]
  - mm: vmscan: use a new flag to indicate shrinker is registered (Yang Shi)
  - mm: shrinker: make shrinker not depend on memcg kmem (Yang Shi)
  - mm: vmscan: protect shrinker idr replace with CONFIG_MEMCG (Yang Shi)
  - ext4: inline jbd2_journal_[un]register_shrinker() (Theodore Ts'o)
  - jbd2: export jbd2_journal_[un]register_shrinker() (Zhang Yi)
  - KVM: Add infrastructure and macro to mark VM as bugged (Sean Christopherson) [bug:128559]
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Kuniyuki Iwashima) [task:387777] {CVE-2024-50154}
  - tcp: relookup sock for RST+ACK packets handled by obsolete req sock (Alexander Ovechkin)
  - inet_connection_sock: remove unused parameter of reqsk_queue_unlink func (Zhiqiang Liu)
  - scsi: smartpqi: add no_write_same for logical volumes (Dave Carroll) [task:388235]
  - KVM: Fix compile error (Zhang Hao) [task:370239] {CVE-2022-2153}
  - netfilter: nftables: avoid overflows in nft_hash_buckets() (Eric Dumazet) [task:370849] {CVE-2021-46992}
  - Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() (Sungwoo Kim) [task:223107] {CVE-2024-36013}
  - Bluetooth: Remove BT_HS (Luiz Augusto von Dentz) [task:223107]
  - Bluetooth: remove redundant assignment to variable icid (Colin Ian King) [task:223107]
  - Bluetooth: Remove unused declaration amp_read_loc_info() (Yue Haibing) [task:353905]
  - Bluetooth: a2mp: Use struct_size() helper (Gustavo A. R. Silva) [task:353905]
  - inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [task:364261]
  - Revert "inet: frags: re-introduce skb coalescing for local delivery" (taowei) [task:364261]
  - 6lowpan: use rbtree for IP frag queue (Peter Oskolkov) [task:364261]
  - net: Add and use skb_mark_not_on_list(). (David S. Miller)
  - serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Finn Thain) [task:217562] {CVE-2024-26999}
  - tty: serial: remove set but not used variable 'error' (YueHaibing) [task:217562]
  - crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (Tong Zhang) [task:158827] {CVE-2021-47056}
  - soc: qcom: cmd-db: Map shared memory as WC, not WB (Volodymyr Babchuk) [task:364171] {CVE-2024-46689}
  - net: caif: fix memory leak in caif_device_notify (Pavel Skripkin) [task:370887] {CVE-2021-47122}
  - net: caif: add proper error handling (Pavel Skripkin) [task:370887]
  - net: caif: added cfserl_release function (Pavel Skripkin) [task:370887]
  - net: fix pmtu check in nopmtudisc mode (Florian Westphal) [task:372755]
  - ring-buffer: Fix race while reader and writer are on the same page (Zheng Yejian) [task:387361]
  - ring-buffer: Fix race between reset page and reading page (Steven Rostedt (Google)) [task:387361]
  - i40e: Add bounds check for ch[] array (Piotr Kwapulinski) [task:367865] {CVE-2019-0149}
  - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Hans de Goede) [task:370865] {CVE-2021-47073}
  - bpf: Fix a sdiv overflow issue (Yonghong Song) [task:376399] {CVE-2024-49888}
  - bpf: Rename fixup_bpf_calls and add some comments (Brendan Jackman) [task:376399]
  - net: hns3: put off calling register_netdev() until client initialize complete (Jian Shen) [task:370881] {CVE-2021-47139}
  - Add HYGON retbleed= boot parameter (George Guo) [bug:247197]
  - x86/bugs: Report Intel retbleed vulnerability (Peter Zijlstra) [bug:247197]
  - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS (Pawan Gupta) [bug:247197]
  - x86/entry: Add kernel IBRS implementation (Peter Zijlstra) [bug:247197]
  - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value (Peter Zijlstra) [bug:247197]
  - x86/bugs: Add AMD retbleed= boot parameter (Alexandre Chartre) [bug:247197]
  - security/box: fix bug with kvmalloc free (zhubing) [task:370661]
  - irqchip/gic-v3: Do not enable irqs when handling spurious interrups (He Ying) [task:370841] {CVE-2021-46961}
  - md/raid1: properly indicate failure when ending a failed write request (Paul Clements) [task:370831] {CVE-2021-46950}
  - userfaultfd: release page in error path to avoid BUG_ON (Axel Rasmussen) [task:370847] {CVE-2021-46988}
  - hfsplus: prevent corruption in shrinking truncate (Jouni Roivas) [task:370845, task:158827] {CVE-2021-46989}
  - ACPI: custom_method: fix potential use-after-free issue (Mark Langsdorf) [task:370843, task:153627] {CVE-2021-46966}
  - pid: take a reference when initializing `cad_pid` (Mark Rutland) [task:370883] {CVE-2021-47118}
  - btrfs: do not BUG_ON in link_to_fixup_dir (Josef Bacik) [task:370885, task:158827] {CVE-2021-47145}
  - nvme: ensure subsystem reset is single threaded (Keith Busch) [task:367867, bug:153851] {CVE-2022-3169}
  - nvme: Wait for reset state when required (Keith Busch) [task:367867, bug:150386]
  - nvme: Prevent resets during paused controller state (Keith Busch) [task:85444, task:367867]
  - nvme-pci: Sync queues on reset (Keith Busch) [task:367867, bug:150386]
  - kabi: fix the kabi issue caused by the addition of 'reset_in_progress' in struct usb_device (shitao) [task:370243]
  - USB: core: Prevent nested device-reset calls (Alan Stern) [task:370243] {CVE-2022-4662}
  - ocfs2: fix a deadlock when commit trans (Joseph Qi) [task:221975]
  - ocfs2: fix race between searching chunks and release journal_head from buffer_head (Gautham Ananthakrishna) [task:221975] {CVE-2021-47493}
  - jbd2: Make state lock a spinlock (Thomas Gleixner) [task:221975]
  - jbd2: remove __journal_try_to_free_buffer() (Zhang Yi) [task:221975]
  - jbd2: fix a race when checking checkpoint buffer busy (Zhang Yi) [task:221975]
  - jbd2: remove journal_clean_one_cp_list() (Zhang Yi) [task:221975]
  - jbd2: remove t_checkpoint_io_list (Zhang Yi) [task:221975]
  - jbd2: recheck chechpointing non-dirty buffer (Zhang Yi) [task:221975]
  - jbd2: remove the out label in __jbd2_journal_remove_checkpoint() (Zhang Yi) [task:221975]
  - jbd2: simplify journal_clean_one_cp_list() (Zhang Yi) [task:221975]
  - jbd2: remove redundant buffer io error checks (Zhang Yi) [task:221975]
  - jbd2,ext4: add a shrinker to release checkpointed buffers (Zhang Yi) [task:221975]
  - jbd2: protect jh by grab a ref in jbd2_journal_forget (yangerkun) [task:221975]
  - jbd2: Drop unnecessary branch from jbd2_journal_forget() (Jan Kara) [task:221975]
  - jbd2: Don't call __bforget() unnecessarily (Jan Kara) [task:221975]
  - jbd2: Remove jbd_trylock_bh_state() (Thomas Gleixner) [task:221975]
  - jbd2: Simplify journal_unmap_buffer() (Thomas Gleixner) [task:221975]
  - jbd2: export jbd2_journal_[grab|put]_journal_head (Joseph Qi) [task:221975]
  - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (Ye Bin) [task:370803] {CVE-2021-33631}
  - ext4: factor out write end code of inline file (Zhang Yi) [task:370803]
  - ext4: check and update i_disksize properly (Zhang Yi) [task:370803]
  - ext4: correct the error path of ext4_write_inline_data_end() (Zhang Yi) [task:370803]
  - crypto: qcom-rng - ensure buffer for generate is completely filled (Brian Masney) [task:370835]
  - ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure (Marc Zyngier) [task:370833] {CVE-2021-46953}
  - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() (Vitaly Kuznetsov) [task:370239] {CVE-2022-2153}
  - vsock/virtio: free queued packets when closing socket (Stefano Garzarella) [task:169356] {CVE-2021-47024}
  - ext4: Fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed (Ye Bin) [task:355213] {CVE-2021-47117}
  - Revert "ext4: Fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed" (Ye Bin)
  - ext4: Fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed (Ye Bin)
  - ext4: fix memory leak in ext4_fill_super (Pavel Skripkin) [task:370877] {CVE-2021-47119}
  - ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts'o) [task:370801] {CVE-2024-0775}
  - dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails (Benjamin Block)
  - phonet/pep: refuse to enable an unbound pipe (Rémi Denis-Courmont) [task:160493, task:370871] {CVE-2021-47086}
  - ocfs2: fix data corruption by fallocate (Junxiao Bi) [task:158827, task:370879] {CVE-2021-47114}
  - config: enable CONFIG_BUG_ON_DATA_CORRUPTION (tanze) [task:354881]
  - sysctl: always initialize i_uid/i_gid (Thomas Weißschuh) [task:352223] {CVE-2024-42312}
  - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Scott Mayhew) [task:363951] {CVE-2024-46695}
  - btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() (Filipe Manana) [task:364083] {CVE-2024-46751}
  - btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info() (Filipe Manana) [task:364083]
  - btrfs: remove superfluous metadata check at btrfs_lookup_extent_info() (Filipe Manana) [task:364083]
  - ACPI: video: Change how we determine if brightness key-presses are handled (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses (Hans de Goede) [task:368343] {CVE-2024-46859}
  - platform/x86: panasonic-laptop: Use acpi_video_get_backlight_type() (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: filter out duplicate volume up/down/mute keypresses (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: don't report duplicate brightness key-presses (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: revert "Resolve hotkey double trigger bug" (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: sort includes alphabetically (Hans de Goede) [task:368343]
  - treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 392 (Thomas Gleixner) [task:368343]
  - platform/x86: panasonic-laptop: de-obfuscate button codes (Stefan Seyfried) [task:368343]
  - platform/x86: panasonic-laptop: Replace snprintf in show functions with sysfs_emit (Qing Wang) [task:368343]
  - platform/x86: panasonic-laptop: remove redundant assignment of variable result (Colin Ian King) [task:368343]
  - platform/x86: panasonic-laptop: Add sysfs attributes for firmware brightness registers (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Add support for battery charging threshold (eco mode) (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Resolve hotkey double trigger bug (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Add write support to mute (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Fix sticky key init bug (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Fix naming of platform files for consistency with other modules (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Split MODULE_AUTHOR() by one author per macro call (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Replace ACPI prints with pr_*() macros (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Add support for optical driver power in Y and W series (Kenneth Chan) [task:368343]
  - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) (Kishon Vijay Abraham I) [task:372905] {CVE-2024-47667}
  - nfs: fix UAF in direct writes (Josef Bacik) [task:217568] {CVE-2024-26958}
  - staging: iio: frequency: ad9834: Validate frequency parameter value (Aleksandr Mishin) [task:372895] {CVE-2024-47663}
  - staging: iio: frequency: ad9833: Load clock using clock framework (Beniamin Bia) [task:372895]
  - staging: iio: frequency: ad9833: Get frequency value statically (Beniamin Bia) [task:372895]
  - nilfs2: fix state management in error path of log writing function (Ryusuke Konishi) [task:372903] {CVE-2024-47669}
  - wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead (Emmanuel Grumbach) [task:372897] {CVE-2024-47672}
  - scsi: pm80xx: Set phy->enable_completion only when we wait for it (Igor Pylypiv) [task:372775] {CVE-2024-47666}
  - scsi: pm80xx: Add fatal error checks (Changyuan Lyu) [task:372775]
  - scsi: pm80xx: Fix for phy enable/disable functionality (Deepak Ukey) [task:372775]
  - smack: tcp: ipv4, fix incorrect labeling (Casey Schaufler) [task:372671] {CVE-2024-47659}
  - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Kent Overstreet) [task:372519] {CVE-2024-47668}
  - drm/msm/dpu: fix compile error (Lu Yao) [task:379873]
  - ice: Add netif_device_attach/detach into PF reset flow (Dawid Osuchowski) [task:363961] {CVE-2024-46770}
  - security/kysec: permit task killed by parent (penghuaihe) [bug:272883]
  - memcg: protect concurrent access to mem_cgroup_idr (Shakeel Butt) [task:352017] {CVE-2024-43892}
  - netfilter: nft_socket: fix sk refcount leaks (Florian Westphal) [task:368153] {CVE-2024-46855}
  - ASoC: meson: axg-card: fix 'use-after-free' (Arseniy Krasnov) [task:368151] {CVE-2024-46849}
  - ethtool: check device is present when getting link settings (Jamie Bainbridge) [task:364141] {CVE-2024-46679}


