# changelog

author: zhangzikang <zhangzikang@kylinos.cn> - 0.0.5-31.p01
changelog:
  - Type: bugfix
  - ID:[BUG#195263]
  - SUG:NA
  - DESC: Modify product information in the Summary and description


author: maminjie <maminjie1@huawei.com> - 1.3.30-8
changelog:
  - fix some CVEs: CVE-2018-18544 CVE-2019-7397 CVE-2019-11005 CVE-2019-11006
    CVE-2019-11010 CVE-2019-12921 CVE-2020-10938 CVE-2020-12672


author: yaoxin <yaoxin30@huawei.com> 2.4.3-5
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-44228 is fixed, the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> 2.4.3-6
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-45105 is fixed, the version needs to be rebuild.


author: houyingchao <houyingchao@huawei.com> 2.4.3-7
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: wangxiao <wangxiao65@huawei.com> - 6.9.10.67-19
changelog:
  - Fix CVE-2020-25676 CVE-2020-27757 CVE-2020-27758 CVE-2020-27771
    CVE-2020-27772 CVE-2020-27774 CVE-2020-27775 CVE-2020-27751


author: gaihuiying <gaihuiying1@huawei.com> - 1.26.2-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml


author: lifeifei <lifeifei@kylinos.cn> - 1.26.2-4.p01
changelog:
  - Type:bugfix
  - ID:task347207
  - SUG:NA
  - DESC:bond:avoid logging warning to set "ad_actor_system=00:00:00:00:00:00".


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: zhanghua <zhanghua40@huawei.com> - 2.2.0-18
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DESC:fix CVE-2017-9110 CVE-2017-9111 CVE-2017-9112 CVE-2017-9113
    CVE-2017-9114 CVE-2017-9115 CVE-2017-9116 CVE-2017-12596


author: wangyue <wangyue92@huawei.com> - 2.2.0-19
changelog:
  - fix CVE-2021-3474 CVE-2021-3477 CVE-2021-3476 CVE-2021-3475 CVE-2021-20296 CVE-2021-3479 CVE-2021-20296


author: yaoxin <yaoxin30@huawei.com> - 2.2.0-22
changelog:
  - fix CVE-2020-11758 CVE-2020-11759 CVE-2020-11760 CVE-2020-11761 CVE-2020-11762 CVE-2020-11763 CVE-2020-11764 CVE-2020-11765 CVE-2020-15305 CVE-2020-15306


author: Tom Callaway <spot@fedoraproject.org> - 3.6.2-4
changelog:
  - fix conditionals so that Fedora builds against system openblas for lapack/blas
    and we only generate the R lapack/blas libs on RHEL 5-6-7 (where system lapack/openblas
    is not reliable). Thanks to Dirk Eddelbuettel for pointing out the error.


author: houhongxun <houhongxun@kylinos.cn> - 0.6.55-2.p01
changelog:
  - Type:update
  - ID:Task#171032
  - SUG:NA
  - DESC:sync kylin modification: fix user display problem in control center or when login
  	add patch: accountsservice-0.6.54-kylin-1000-users-issue.patch(liujilin)


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-25.20140228gitc2f5d13
changelog:
  - improve python bindings build patch based on upstream PR
  - fix infinite loop for certain regexps (upstream issue #50)
  - switch to python3 (#1634955)


author: openEuler Buildteam <buildteam@openeuler.org> - 0.16-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: change file from /etc/logrotate.d/aide/aide.logrotate to /etc/logrotate.d/aide


author: Yue Yuankun<yueyuankun@kylinos.cn> - 33.19-15.p12
changelog:
  - Add Patch anaconda-33.19-kylin-add-kylinconf-to-set-xfs-filesystem.patch
  - add kylin conf to fix bug #47825


author: Xiao Zai<xiaozai@kylinos.cn> - 33.19-15.p13
changelog:
  - add patch: anaconda-33.19-kylin-remove-lock_root_account-option-and-translate-root_password-label-in-zh_CN.patch
  - fix bugs:48019 and 47877


author: Yue Yuankun<yueyuankun@kylinos.cn> - 33.19-15.p14
changelog:
  - Add Patch anaconda-33.19-kylin-change-crashkernel-value-to-1024M-high.patch
  - change crashkernel from 512M to 1024M,high


author: Li Qian<liqian@kylinos.cn> - 33.19-15.p15
changelog:
  - Add Patch anaconda-33.19-kylin-modify-ft2000-ft2500-install-not-unused-device.patch
  - fix bug 47806


author: Yue Yuankun<yueyuankun@kylinos.cn> - 33.19-15.p16
changelog:
  - Add Patch anaconda-33.19-kylin-modify-default_lang-and-some-po.patch
  - set default_lang from en_US.UTF-8 to zh_CN.UTF-8, remove lang in ks file,fix bug #47925
  - modify some po


author: xuhe <xuhe@kylinos.cn> - 33.19-15.p18
changelog:
  - Add Patch anaconda-33.19-kylin-fix-text-string-cannot-be-recognized.patch
  - addition for p07 version


author: Xiao Zai<xiaozai@kylinos.cn> - 33.19-15.p20
changelog:
  - Add Patch anaconda-33.19-kylin-modify-font-in-default-language-during-installation.patch
  - fix bug #54069, modify fonts in default language during installation,the default language means do not click manually to select


author: Shi Jingying <shijingying@kylinos.cn> - 33.19-15.p22
changelog:
  - skip 33.19-15.p21
  - add patch: anaconda-33.19-kylin-synchronous-u-boot-to-ks-file.patch
  - synchronous u-boot to ks file, add log files


author: Xiao Zai<xiaozai@kylinos.cn> - 33.19-15.p23
changelog:
  - add Patch: anaconda-33.19-kylin-change-locale-to-en-in-text-mode.patch
  - fix Bug#68620: the install failed in text mode
  - only keep the zh_CN.UTF-8 for gui mode, do not set zh_CN.UTF-8 for tui mode


author: Xiao Zai<xiaozai@kylinos.cn> - 33.19-15.p24
changelog:
  - add Patch: anaconda-33.19-kylin-fix-bug86469.patch
  - fix Bug #86469, in PXE installation mode or other autoinstall mode, install the system in qemu, when the words such as shutdown,reboot or poweroff are written in the ks file, the shutdown or restart will be blocked after the system is installed


author: Xiao Zai<xiaozai@kylinos.cn> - 33.19-15.p26
changelog:
  - Type:bugfix
  - ID:105452
  - SUG:NA
  - DESC: fix the translation problems by removing effects from patches: 9049, 9047, 9043. and change the translation method for two ui components in welcome.py
  - AddPatch:anaconda-33.19-kylin-remove-patches-for-translation.patch


author: Xiao Zai<xiaozai@kylinos.cn> - 33.19-15.p27
changelog:
  - Type:bugfix
  - ID:Task#83928
  - SUG:NA
  - DESC: backport the patch "bugfix-Propagate-a-lazy-proxy-of-the-storage-model.patch" to fix the bug that the exists partitions list is error in the second selection for another disk;  fix the bug that the  unknown list is hidden in custom partiton ui;
  - Add Patches: bugfix-Propagate-a-lazy-proxy-of-the-storage-model.patch, anaconda-33.19-kylin-bugfix-hide-unknown-in-custom-partition.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-15.p28
changelog:
  - Type:bugfix
  - ID:Bug#121227
  - SUG:NA
  - DESC:Rsync patch from V10SP3.
         Remove the iso9660 label media from the unknown group,
         and solve the problem that EFI partitions cannot be deleted during U disk installation.


author: huangwenhua <huangwenhua@kylinos.cn> - 9100h-39.p01
changelog:
  - Type: update
  - ID: [Task#165758]
  - SUG: NA
  - DESC: revise the expression of sensitive words
  	fix regenerate dict.args.in


author: tanyulong <tanyulong@kylinos.cn>-1.17.0-3.p09
changelog:
  - Type:bugfix
  - ID:[BUG#115244]
  - SUG:NA
  - DESC:fix document viewer crashes when clicking to present
  - Add Patches:atril-1.17.0-kylin-fix-bug-115244.patch


author: douyan <douyan@kylinos.cn> - 1.17.0-3.p10
changelog:
  - Type: update
  - ID:   [TASK#187126]
  - SUG:  NA
  - DESC: add atril-1.17.0-kylin-add-zh_HK-translation.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0-5.se.10
changelog:
  - Type: bugfix
  - ID:[Bug#113316]
  - SUG:NA
  - DESC: 将audit.log文件权限改为600，pidfild文件权限改为644
  -         add patch: audit-3.0-modify-logfile-and-pidfile-permissions.patch


author: sunjin <sunjin@kylinos.cn> - 3.0-5.se.11
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:
  -     解决ausyscall --dump看不到系统符号问题
  -     添加补丁audit-3.0-fix-syscall-error.patch


author: xuyujun <xuyujun@kylinos.cn> - 3.0-5.se.12
changelog:
  - Type:bugfix
  - ID: [Bug#146654]
  - SUG:NA
  - DESC:
  - 		mips服务器audit服务日志显示unknown
  - 		添加补丁 audit-3.0-fix-unkonw-machine-type-error.patch


author: Caolán McNamara <caolanm@redhat.com> - 1:6.3.5.2-5
changelog:
  - rhbz#1796893 spreadsheetml2ooo.xsl was not well formed xml
  - rhbz#1796893 fix impress print dialog range


author: wanglixing <wanglixing@kylinos.cn> - 0.8-5.p02
changelog:
  - Type:cve
  - ID:CVE-2023-38469,CVE-2023-38471,CVE-2023-38472,CVE-2023-38473,CVE-2023-38470,CVE-2023-1981
  - SUG:NA
  - DECS:add patch9001,patch9002,patch9003,patch9004,patch9005,patch9006,patch9007


author: wangkai <wangkai385@huawei.com> - 0:4.3-23
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 0:4.3-24
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: Shi Jingying <shijingying@kylinos.cn> - 5.0-14.se.01.p02
changelog:
  - Type: update
  - ID: [Task#101668]
  - SUG: NA
  - DESC: recover the `history -c` operation of the non root user 
          add patch1002 bash-5.0-recover-non-root-user-to-clear-history.patch


author: wanfeng <wanfeng@kylinos.cn> - 5.0-14.se.01.p03
changelog:
  - Type: update
  - ID: [Task#172337]
  - SUG: NA
  - DESC: modify spec, config /etc/skel/.*, Duplicate files


author: Rolf Fokkens <rolf@rolffokkens.nl> - 1.1-0
changelog:
  - Changed upstream to git://git.kernel.org/pub/scm/linux/kernel/git/colyli/bcache-tools.git
  - Updated to 1.1


author: zhangzikang <zhangzikang@kylinos.cn> - 0.15.0-1.p02
changelog:
  - Type:update
  - ID:TASK#169384
  - SUG:NA
  - DESC: add loongarch support
          0001-kylin-bcc-add-loongarch-support.patch
          0002-kylin-bcc_fix_conv_regs_issue.patch
          0003-kylin-bcc_fix_uprobe_libc_so.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 0.15.0-1.p03
changelog:
  -Type:bugfix
  -ID:Bug#194974
  -SUG:NA
  -DESC:Fix identifier BPF_PSEUDO_FUNC undeclared error
        add BTF_KIND_DATASEC for libbpf.h btf_is_datase when make bcc


author: yuanxin <yuanxin21@huawei.com> - 9.11.21-2
changelog:
  - Type:CVE
  - ID:CVE-2020-8622.patch  CVE-2020-8623.patch  CVE-2020-8624.patch
  - SUG:NA
  - DESC:fix CVE-2020-8622.patch  CVE-2020-8623.patch  CVE-2020-8624.patch


author: hanzhijun <hanzhijun1@huawei.com> - 9.11.21-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix the difference at the macro definition using clock gettime instead of gettimeofda


author: jinshuaiyu <jinshuaiyu@kylinos.com> - 9.11.21-10.p02
changelog:
  - Type:CVE
  - ID:CVE-2022-2906 CVE-2022-2881 CVE-2022-2795 CVE-2022-38178 CVE-2022-38177
  - SUG:NA
  - DESC:fix CVE-2022-2906 CVE-2022-2881 CVE-2022-2795 CVE-2022-38178 CVE-2022-38177


author: huangyu <huangyu106@huawei.com> - 32:9.11.21-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: huangyu <huangyu106@huawei.com> - 32:9.11.21-14
changelog:
  - Type:CVE
  - ID:CVE-2022-2906 CVE-2022-38177 CVE-2022-38178 CVE-2022-2795 CVE-2022-2881
  - SUG:NA
  - DESC:FIX CVE-2022-2906CVE-2022-38177CVE-2022-38178CVE-2022-2795CVE-2022-2881


author: panxiaohe <panxiaohe@huawei.com> - 2.34-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix erroneous decoding of LEB128 values
         heap-buffer-overflow on readelf -Ww


author: yueyuankun <yueyuankun@kylinos.cn> - 2.34-19.p01
changelog:
  - Type:bugfix
  - ID:task#108856
  - SUG:NA
  - DESC:rebuild libbfd.a libiberty.a libopcodes.a with -fPIC for inclusion into shared libraries


author: guochao <guochao@kylinos.cn> - 2.34-19.p02
changelog:
  - Type:CVE
  - ID:CVE-2022-48064 CVE-2022-47011 CVE-2022-47008 CVE-2021-46174 CVE-2022-47696
  - SUG:NA
  - DESC:Fix CVE-2022-48064 CVE-2022-47011 CVE-2022-47008 CVE-2021-46174 CVE-2022-47696


author: zoulin <zoulin13@huawei.com> - 2.34-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:Fix a memory leak in the testcase fuzz_readelf
        Fix use-of-uninitialized-value in print_insn_mwtag
        Fix use-of-ninitialized-value in _bfd_xcoff_slurp_armap


author: zoulin <zoulin13@huawei.com> - 2.34-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:Fix a potential use-of-an-uninitialised-value in the print_insn_ns32k of fuzz_disassemble


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.34-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix static library file conflicts when install both binutils and binutils-devel


author: Yin Xiujiang <yinxiujiang@kylinos.cn> - 3.2.2-3.p02
changelog:
  -  add patch blivet-3.2.2-kylin-fix-zh_CN-swap-part-failed.patch
  -  fix lang=zh_CN.UTF-8 part swap failed


author: yueyuankun<yueyuankun@kylinos.cn> - 3.2.2-3.p03
changelog:
  - Type:update
  - ID:bug#118182
  - SUG:test with a ddf disk
  - DESC:Do not crash when a disk populator doesn't return kwargs


author: Xiao Zai<xiaozai@kylinos.cn> - 3.2.2-3.p04
changelog:
  - Type:bugfix
  - ID:task#83928
  - SUG:update together with the backport patch of anaconda  
  - DESC:backport two patches "backport-Convert-LVM-filter-lists-to-sets.patch" and "backport-Remove-action-device-from-LVM-reject-list.patch" to fix bug that the partition pages is incorrect in manual partition ui when multiple disks exist


author: shuihengcheng <shuihengcheng@kylinos.cn> - 3.0.13-3.se.01
changelog:
  - add box-manager-fix-help-not-open-Manual.patch
  - spec BuildRequires add libkylinos-type-devel, nss
  - add box-manager-3.0.6kord-modify-nologin.patch
  - add box-manager-modify-rename-auth-passwd-error.patch


author: caoshuhao <caoshuhao@kylinos.cn> - 3.0.13-3.se.04
changelog:
  - Add patch:box-manager-change-box-icon.patch
    Fix bug 48921: The Start Menu icon of Kylin Box is different from that in the taskbar.


author: haomeici <haomeici@kylinos.cn> - 3.1.5-1.se.02
changelog:
  - add desktop patch
    fix-owner-of-files-after-sharing
    chown-owner-of-normal-files
    fix-some-bugs
    only-allow-create-encrypt-box.patch
    add-mkdir-for-copy_files
    restrict-perm-for-share
    add-notification-for-gui-tools
    fix-some-bugs-2021-01-14
    check_old_password_logic
    ownername-error-tips
    add-chinesization
    adjust_chinesization_function


author: qinzheng <qinzheng@kylinos.cn> - 3.1.5-1.se.04
changelog:
  - Type:bugfix
  - ID:[BUG#146979]
  - SUG:NA
  - DESC:
  -       1.add fix-the-bug-about-verify-password-for-delete-the-box.patch
  -       2.add fix-dangrous-functions-and-coredump-problem.patch
  -       3.add box-utils-delete-len-bigger-than-6.patch
  -       4.add box-utils-fix-boxadm-l-data-error-bug.patch
  -       5.add box-utils-add-compile-options-of-security-program-fix-some-fortify-risk.patch


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-v2101.23.rc2
changelog:
  - [8be15142485f]
  - [5810c4eaed11]
  - [cd2f633d8fcb]
  - [5c15284600b6]
  - [a55487edf375]
  - [0d0779b429ef]
  - [bdbcf9da3315]
  - [4c19b3d8c572]
  - [4db07a03e9ab]
  - [6d7d99906e83]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-v2101.23.0
changelog:
  - [c5e900bb19d0]
  - [9a813c1e106b]
  - [18441b5c5bdb]
  - [c6c0d2c083f1]
  - [5a859cc22cfe]
  - [181281a45860]
  - [031da147ccc2]
  - [737ac272489a]
  - [35888626bdc0]
  - [5fde0a57a076]
  - [0aef697139ab]
  - [aeba010f8f0f]
  - [e83f06fea08a]
  - [31c5f73421d2]
  - [3ace3fe8530a]
  - [07de12e57414]
  - [c67ab2470fa9]
  - [dcadc5735e13]
  - [4e2dce6d17ea]
  - [e0c3145ce749]
  - [52f6c43c17ef]
  - [fdc124e5bad6]
  - [510a61778413]
  - [5ee1bd20b829]
  - [920fabe0d2d9]
  - [e46cc965010d]
  - [af80c9893173]
  - [0fe14cba5188]
  - [4c0d5af02334]
  - [721fa69a5933]
  - [446f7247bd5c]
  - [7fc82a5299a5]
  - [183aea9a1bca]
  - [2335c33efc32]
  - [a50858f99545]
  - [6e9575b846ab]
  - [64b4fe61e54c]
  - [6195638dc862]
  - [6cb63cead3d2]
  - [d7a7376a7aeb]
  - [64c851cb405e]
  - [9d1356264e1b]
  - [52f9787140bc]
  - [f571602e566d]
  - [2c2ed3ca9e7a]
  - [71006da859c1]
  - [80f6c5498a60]
  - [36367919b713]
  - [fe4c1ec362d8]
  - [ca20d12f5cfd]
  - [ba1a5a2a99a0]
  - [22c75092cc0b]
  - [6ae85f75fcc2]
  - [2f70509cf17a]
  - [d25e9c96311f]
  - [bcd1c2215fc9]
  - [f4f72f22efab]
  - [8cd7cc0269cc]
  - [ea675c810c14]
  - [f96168ac7172]
  - [905358e23152]
  - [404eced48435]
  - [9dd811064938]
  - [4bf21b6eded9]
  - [21e0e737c0a8]
  - [615c8f57147c]
  - [aaadaeb13256]
  - [92bf458031c9]
  - [f32e64cc482e]
  - [3b1578e22a3a]
  - [e2282b3b0dc8]
  - [c74aa33bdd2b]
  - [036948a0174d]
  - [afdcac0eb777]
  - [95b2917263fa]
  - [cbe262cd4bc0]
  - [38f72e2712a8]
  - [07a7d7eac23c]
  - [41db63cfa4fe]
  - [065b90c58c7e]
  - [5b78dfbde4c6]
  - [22f11dabae0a]
  - [73c0ddf9ac4d]
  - [f8bb8793ddd7]
  - [4de8f98572fc]
  - [3d543539b3d1]
  - [1736524f62ec]
  - [ae25e2b5a74e]
  - [bc2e6effe374]
  - [7ad7cd45c8b2]
  - [93e002cbd35f]
  - [323a056ea74e]
  - [c32b6758f29b]
  - [3c6216b444ec]
  - [51b8878278f3]
  - [eef84b53387c]
  - [2fbea29546c0]
  - [bb10cdaeb091]
  - [f0528e331fb0]
  - [dbd2faf82ea0]
  - [a1ef619e68a9]
  - [847314d0a45f]
  - [67a4db697e04]
  - [9453a849d260]
  - [895c45fdc22f]
  - [11d94a5cdae4]
  - [b26a7913a05a]
  - [d35bb1695539]
  - [63002dab8e39]
  - [ac5c3bffd419]
  - [08a065719890]
  - [b90652ec2296]
  - [9493d89f62cd]
  - [28d93a1bddcf]
  - [09df9faaa51d]
  - [63fc2969db4c]
  - [60b2f3cc3b04]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-v2101.23.1
changelog:
  - [16682b40483f]
  - [8b006aa00d50]
  - [77bcc68a42ef]
  - [429f6b75c2fb]
  - [da71b70ea16b]
  - [3efd99e2b18b]
  - [2bfd7dc22f40]
  - [392e3834ce51]
  - [d6c2a08a37c0]
  - [2b413ca3dd94]
  - [5f20f35e28ba]
  - [a81dc787d3e0]
  - [9765bb600d2f]
  - [30b92d17011e]
  - [688f92e3950f]
  - [a9d2c788b45b]
  - [8d6eaff70bf5]
  - [e33e027a75b7]
  - [03ec92482e2c]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-24.rc1.v2101
changelog:
  - [5c0b6415f002]
  - [00f757341dca]
  - [57fc5d441729]
  - [5b8f1efd7912]
  - [1b493c559e6c]
  - [012dde466c81]
  - [f45852e22d6f]
  - [facf8676cae8]
  - [b53eaf7531fb]
  - [e6352f8543c5]
  - [ffeb668295af]
  - [bf84ffcf01e4]
  - [a5e0a84623e0]
  - [24ea9e901579]
  - [b85ef7a73b41]
  - [bc774b061fde]
  - [3b5a0ef2655f]
  - [2458a7b49a8e]
  - [8e95feb068dd]
  - [4c91554b6e64]
  - [f4f4458883f8]
  - [6b66680fb3fc]
  - [befc4a01c75a]
  - [f3f6a56928f2]
  - [6b0f9e3c2835]
  - [797e4d12dd14]
  - [22e262d38bc2]
  - [afac8bb566dc]
  - [eff53d0bdfed]
  - [0d3faeea9ec2]
  - [3197cfcec8f5]
  - [39dd8ccbd8b4]
  - [ad1c7790bf7f]
  - [8e209ce464b3]
  - [fdb71591679a]
  - [5342d8a496c1]
  - [aaadc807e87b]
  - [ad5368cfcdc0]
  - [bfd6abbf17f3]
  - [7ee5539df570]
  - [468841477770]
  - [17f72c9ea902]
  - [08945c3572f0]
  - [fd7de9bbda3b]
  - [e602feadeb0b]
  - [5a693dbe9a5a]
  - [24e911f7fe2e]
  - [3a89f9cf0a5e]
  - [fc0c9fb86b3b]
  - [dc0a155358b8]
  - [2efabce10e34]
  - [a3f00180604d]
  - [1d2bf0f20abb]
  - [03f231db0b64]
  - [079d384e5916]
  - [346fd6bbb41c]
  - [1a9514e09175]
  - [0cf086bff802]
  - [8fbe95a803e4]
  - [6638c8114971]
  - [cb7aa466f3ec]
  - [c34277b32252]
  - [eb2cc46e4d09]
  - [75c8916c8ecb]
  - [310e2fc9b4d8]
  - [578740472202]
  - [e1a3f60d1007]
  - [95462ed22508]
  - [47f2d71dd759]
  - [fd0ae36bb96c]
  - [db17e6f794de]
  - [c765e890c8da]
  - [ad262deb9524]
  - [82ddc2151f69]
  - [e7b77dc0ecc1]
  - [2741d885cf6d]
  - [d1b70007d04f]
  - [56446ee823e4]
  - [692435a9ab3e]
  - [12af5991d0c7]
  - [f15bdb87986a]
  - [2c7e0521cd16]
  - [ff998e9fb589]
  - [b87227dfc956]
  - [c28ab78b38ca]
  - [7090f53352ac]
  - [383f7805461b]
  - [70fd8a9ca57e]
  - [cfec8c2655bb]
  - [5f0193e2e075]
  - [484f78ae1d86]
  - [090b4fb07da9]
  - [604704677147]
  - [de72d3d8f569]
  - [a34816035dba]
  - [5272e0571508]
  - [bf91d9144e5c]
  - [0515036a0d76]
  - [26f8f0fdd839]
  - [9f6d4c639621]
  - [bb5033ff5ce3]
  - [a1f14de5111b]
  - [30e48afe5a8a]
  - [81d11d21bbea]
  - [1314c8aaf521]
  - [628684f7ec11]
  - [0d1e113b94d8]
  - [edec6735985e]
  - [c5e4824a430f]
  - [5335898bc338]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-24.0.v2101
changelog:
  - [5f77d03fbb96]
  - [94cf48e71139]
  - [f4fcaf2cdec3]
  - [4cb4fc4a3f4a]
  - [2fa115f7f61f]
  - [4ddc48cbba66]
  - [fe52dcd4be8e]
  - [ec3885304c89]
  - [631719695490]
  - [d45df0de4379]
  - [70e96748451e]
  - [82ae16643c7c]
  - [31a230e38ec9]
  - [ac797efbb70f]
  - [ff5f406b7da9]
  - [2ae8d363e2ad]
  - [5ca6aa75d5e8]
  - [4aa0ae4295fc]
  - [36eb99363506]
  - [e5f6041a0c7b]
  - [a1ecb3e6f9ba]
  - [05da918da563]
  - [5f570af1870e]
  - [2739ee18a69a]
  - [247659f8aac2]
  - [409401b84aa5]
  - [2c6c35e4518d]
  - [537ef1d3fd7c]
  - [a0fff9e2f578]
  - [1e03da871b4e]
  - [786619bdb3a5]
  - [23fb65565662]
  - [c3ca5488b870]
  - [ca30aa596ef2]
  - [cc75ef99f1cf]
  - [d0594ad15257]
  - [90d7e2de09ac]
  - [b466a81f2011]
  - [38da71f41d1f]
  - [967848822d8b]
  - [8eaecfb24692]
  - [073c46689f35]
  - [650617a23f26]
  - [8b24e554f8ae]
  - [175458ba1d92]
  - [d5d4d2197b93]
  - [dd2808192b57]
  - [6ff2cc8334af]
  - [38b1ce05c5df]
  - [2d6a9a771871]
  - [9d5d4927a633]
  - [8741b8e6c5b4]
  - [0bb842d526d0]
  - [6b55f58a5c06]
  - [691d689e3a85]
  - [87b6e272b5e1]
  - [ebc5ffcb8f42]
  - [92ff72e224b3]
  - [ecffb6637380]
  - [9acc7ad69471]
  - [5fb4468a36c6]
  - [2ae9d30036e3]
  - [430fdb263c89]
  - [660f9e623264]
  - [3988485cbd9f]
  - [082d91afca51]
  - [36b16710ae1b]
  - [218ddccf7336]
  - [2b887c54832d]
  - [f0bf837f806e]
  - [8d39ed82e4af]
  - [36b9b28e5a7d]
  - [cb4de045c1c2]
  - [a80e742c726b]
  - [4ff2884367eb]
  - [f88208031372]
  - [0d3a429b0583]
  - [790c3e37d5ad]
  - [c903bb2ede73]
  - [dc4a5d77fb5e]
  - [ffba87536abc]
  - [7a9903c8b751]
  - [9c44b97a8394]
  - [02c72665477b]
  - [8c75c7398401]
  - [3bf4086861d6]
  - [a3e69dfdde3b]
  - [bd198b786e0a]
  - [e9fea9563aba]
  - [77ed49cf11ae]
  - [5c98a43fd6ed]
  - [ba699d878a67]
  - [ce80d4aff0c4]
  - [cde6ffdc7cb0]
  - [f4808622044e]
  - [27a1041f0d9c]
  - [62f35c75959e]
  - [77cf7d26b7de]
  - [d4598e95ac83]
  - [6c17d8b3ac7d]
  - [6ae1c061de3a]
  - [289f1ce625f9]
  - [76287002dfe1]
  - [a9b1a8cccc53]
  - [792748f2f898]
  - [03ef0ede085c]
  - [ccc413da8811]
  - [41c715cab882]
  - [cb04ee1a935b]
  - [263ff23e21d9]
  - [aa3b24ad948d]
  - [ad1656632581]
  - [5dc6fa47c73c]
  - [2043ae141eb0]
  - [be4c204940dc]
  - [bec4c2855894]
  - [80153a598054]
  - [a99a7726f5a3]
  - [351d39207ecf]
  - [863e7bbad20d]
  - [82db1f834e1c]
  - [aa2050b331bd]
  - [9717cc868c5c]
  - [aac29bb2a7fb]
  - [41b41a62fd66]
  - [f7c0832e9e8f]
  - [390fb7794d72]
  - [73c30ad461e0]
  - [ac915dd8a4d8]
  - [439f122d3bc9]
  - [f2f49f1f5b6c]
  - [51e4529fa45e]
  - [427ea24d2b0d]
  - [862b3206d749]
  - [e2b24e7f359c]
  - [24328c7d7341]
  - [6fd79e190d81]
  - [2a9440d082ac]
  - [9b67f3dee410]
  - [5c17e82d6900]
  - [c5ef1dcb8bb6]
  - [9ee609e085d7]
  - [83b826efbfc8]
  - [f3c1e0cb65b5]
  - [4a9878996b63]
  - [5e61efeac742]
  - [439e71f16bb0]
  - [e66c849ea8dd]
  - [3967324dacc7]
  - [bcb4d7d9cfeb]
  - [d86d3fd6c836]
  - [a3bdbf0401ad]
  - [e4d55a7dcc91]
  - [4e3f53a6de84]
  - [7400fedf6489]
  - [64f803a0c59c]
  - [dbab3fecb8aa]
  - [23ee4eca0f59]
  - [e23d545276a4]
  - [1727be39d3bd]
  - [e1fd86edb8fd]
  - [2b5e4ec7c342]
  - [5d2f3c0defc5]
  - [796b7ad83b5e]
  - [7bfe03ddfc2a]
  - [0c6c310aad32]
  - [6dc66e42ee42]
  - [8e07c440d889]
  - [6587f2af355e]
  - [9b223c6e6ef1]
  - [67fc12fbec22]
  - [4df5ad7a7075]
  - [90b5804ea28c]
  - [dba7f2c9a010]
  - [fed5e6001b18]
  - [dd246d068bdf]
  - [576663926cf8]
  - [2ca80ce55257]
  - [35b4f0889568]
  - [9dc95b73f7f3]
  - [ae2e2d246980]
  - [ac41061f1cc0]
  - [481cc3ee663d]
  - [2f6b7dfa78fe]
  - [40d4d55cbc2c]
  - [aeddd2b63b27]
  - [150acb4278f5]
  - [df4ce2ee4b73]
  - [9eb093a93711]
  - [d1a7b93629e8]
  - [2d8c38d9789a]
  - [d314a5031f7e]
  - [e595907f5ea9]
  - [514d9bfdd1f5]
  - [57078e1de46f]
  - [57663ab6d5f8]
  - [7f2b721355be]
  - [ab0bcacfe891]
  - [d4cdf41d9cf4]
  - [79fc97a04bfe]
  - [34ee64181150]
  - [8ccb7391b3f3]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-25.rc1.v2101
changelog:
  - [9284809f99e1]
  - [4a1c3748f177]
  - [4b1234f0dc37]
  - [7f4caec8e64c]
  - [8a2c2cc65a33]
  - [7df7b2c8fa7c]
  - [8db53746cf42]
  - [8b1707038d60]
  - [2579a39391ac]
  - [c476c8f88ab4]
  - [98a8f1db7dc9]
  - [637c04377bdf]
  - [2a67dcf1b165]
  - [8e03b9f5109b]
  - [8e19ae865e19]
  - [b89049f85ba6]
  - [be6d50cb9ed5]
  - [dfe51e6c12e5]
  - [59679eba44ef]
  - [46e5b265320a]
  - [0a7fb28531ba]
  - [4f571071ec40]
  - [03b35bf7e1a9]
  - [addf1a9e3d1c]
  - [331f8892f291]
  - [a4d31ee37698]
  - [b699cb76851c]
  - [206b86703438]
  - [e2e8877a43ed]
  - [7a7da98cd192]
  - [093d9ab10c28]
  - [f2281aff7813]
  - [a662a1730f3c]
  - [c78e0a47f161]
  - [4eb4bbe9619a]
  - [e5ffcd58cb6f]
  - [67dce0502b9a]
  - [5f125f30ff6f]
  - [d1d745e256c7]
  - [266dc50301e0]
  - [88c5c3f249d9]
  - [deac5de435a6]
  - [061fbf3957f8]
  - [9ca7898acd25]
  - [7fb23d217942]
  - [9e83f5c4077c]
  - [f33070ecaa6d]
  - [f55653f98a54]
  - [80b3630a8501]
  - [878db583ef72]
  - [8baeb94ff457]
  - [dcec3dae7dff]
  - [22745af64a63]
  - [40fcc7f12038]
  - [b7b72ed8b5a1]
  - [7aab73e1237e]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-25.rc2.v2101
changelog:
  - [a49a30aaa7b4]
  - [760b59108a6b]
  - [a6afdde1478b]
  - [cbb9f24f5436]
  - [ce61f7e2c734]
  - [4332ada16776]
  - [d3fbae316b81]
  - [502f796ae229]
  - [a19cf2ee4f94]
  - [68e0e596f447]
  - [dd6bce67ba6b]
  - [2b1bf35fcdb7]
  - [eaaadda26dad]
  - [0c4d87e5369a]
  - [da40a1570af4]
  - [54c93bb0e996]
  - [70a3cee2e5dc]
  - [e6d2443e330a]
  - [af113850d3b4]
  - [8eab112cb12b]
  - [df26e38e8423]
  - [a7fddc838bc0]
  - [71324659053b]
  - [06c2bf4c9ddf]
  - [9fb388e0a9e1]
  - [938be711a7d0]
  - [2f291b4533d1]
  - [cd2abca55bd9]
  - [e44d5ce6bed5]
  - [12f0238af8f3]
  - [414a3b73d094]
  - [2cae9df036f6]
  - [effb778ab8c3]
  - [d70aa8e21f51]
  - [8e8956694ab6]
  - [ecde2e4a0bfa]
  - [17dd551f02bd]
  - [1f76e2bf965e]
  - [3497a79a9df6]
  - [0022d8e7efb3]
  - [38a1a2b85b49]
  - [7e47a6e3c07d]
  - [d352a600b799]
  - [3beea367ba95]
  - [b2a20811fa8a]
  - [35bd02343313]
  - [76248bdd2ef2]
  - [a010d60b4fb0]
  - [c29da1903a5c]
  - [1706e3241eb0]
  - [fd00da9b903b]
  - [6c391ba3462f]
  - [f045e41dbb57]
  - [58f25ccb3632]
  - [4bbc0050ad9f]
  - [88ff1d851871]
  - [6a9677a6595a]
  - [4c310d3b68be]
  - [4bec59ca1d2d]
  - [59eed697be08]
  - [a5e19a3b4fdc]
  - [629938689791]
  - [42d2dffe71b9]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-25.rc3.v2101
changelog:
  - [a999068139f9]
  - [34540ca86477]
  - [2fb3b6ca1c45]
  - [f71d16e4d695]
  - [e2d106461f40]
  - [1c26f24b3120]
  - [381e7c688a3e]
  - [b9b99ecc33b7]
  - [95ff277c6a65]
  - [e0a675756eb8]
  - [cfd50f78761f]
  - [139bf1fb91bb]
  - [51abe6e73090]
  - [ecc60658d7ba]
  - [af2e7d47995b]
  - [7870daa89245]
  - [8f0c45e55daa]
  - [9fc0d0e62bc1]
  - [2fbe1517774c]
  - [4fe439dfb2a8]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-25.0.v2101
changelog:
  - [9375eeb2b3f9]
  - [93c6925312d0]
  - [963fe3cd4d84]
  - [e6b096143144]
  - [4ddca733a150]
  - [6ff1ec7834cf]
  - [ca20ce5b9266]
  - [70a2cf1fe0ef]
  - [949a47402f33]
  - [a0591086dadb]
  - [a328ce45b80b]
  - [a653acb35ae4]
  - [161e2f6115cb]
  - [d8adabadebe0]
  - [692cebb2b698]
  - [99e54adc200d]
  - [04ef10317d51]
  - [cefddb3b2124]
  - [87e8fe929201]
  - [634eb0beecc9]
  - [7f1233a8acb5]
  - [b6b6a1a79685]
  - [1fac872a739d]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.22.v2101
changelog:
  - capabilities: fix potential memleak on error path from vfs_getxattr_alloc() (Gaosheng Cui) [task:122575]
  - security: commoncap: fix -Wstringop-overread warning (Arnd Bergmann) [task:122575]
  - cap: fix conversions on getxattr (Miklos Szeredi)
  - mm/page_alloc: fix race condition between build_all_zonelists and page allocation (Mel Gorman) [task:122575]
  - netfilter: br_netfilter: Drop dst references before setting. (Harsh Modi) [task:122575]
  - net: ping6: Fix memleak in ipv6_renew_options(). (Kuniyuki Iwashima) [task:122575]
  - xfrm: fix refcount leak in __xfrm_policy_check() (Xin Xiong) [task:122575]
  - net: tipc: fix possible refcount leak in tipc_sk_create() (Hangyu Hua) [task:122575]
  - net: openvswitch: fix misuse of the cached connection on tuple changes (Ilya Maximets) [task:122575]
  - kernfs: Separate kernfs_pr_cont_buf and rename_lock. (Hao Luo) [task:122575]
  - ipv4: drop dst in multicast routing path (Lokesh Dhoundiyal) [task:122575]
  - net/sched: cls_u32: fix possible leak in u32_init_knode() (Eric Dumazet) [task:122575]
  - sctp: fix kernel-infoleak for SCTP sockets (Eric Dumazet) [task:122575]
  - net: sched: limit TC_ACT_REPEAT loops (Eric Dumazet) [task:122575]
  - Bluetooth: Fix debugfs entry leak in hci_register_dev() (Wei Yongjun) [task:122575]
  - net: Fix memory leak in ieee802154_raw_deliver (Takeshi Misawa) [task:122575]
  - USB: usbtmc: Fix RCU stall warning (Qiang.zhang) [task:122575]
  - cfg80211: Fix possible memory leak in function cfg80211_bss_update (Nguyen Dinh Phi) [task:122575]
  - net: rds: fix memory leak in rds_recvmsg (Pavel Skripkin) [task:122575]
  - cfg80211: scan: drop entry from hidden_list on overflow (Johannes Berg) [task:122575]
  - net: qrtr: Fix memory leak in qrtr_tun_open (Takeshi Misawa) [task:122575]
  - USB: serial: mos7720: improve OOM-handling in read_mos_reg() (Tom Rix) [task:122575]
  - mac80211: free sta in sta_info_insert_finish() on errors (Johannes Berg) [task:122575]
  - mac80211: mesh: Free pending skb when destroying a mpath (Remi Pommarel) [task:122575]
  - mac80211: mesh: Free ie data when leaving mesh (Remi Pommarel) [task:122575]
  - atm: fix a memory leak of vcc->user_back (Cong Wang) [task:122575]
  - ipv6: addrconf_f6i_alloc - fix non-null pointer check to !IS_ERR() (Maciej Żenczykowski) [task:122575]
  - net-ipv6: fix excessive RTF_ADDRCONF flag on ::1/128 local route (and others) (Maciej Żenczykowski) [task:99622]
  - ipv6: Change addrconf_f6i_alloc to use ip6_route_info_create (David Ahern) [task:99622]
  - net: Add extack argument to ip_fib_metrics_init (David Ahern) [task:99622]
  - net: Move free of fib_metrics to helper (David Ahern) [task:99622]
  - net: common metrics init helper for FIB entries (David Ahern) [task:99622]
  - mm/page_alloc: fix managed_pages of zone is incorrect and out of bounds (Guo Hui) [task:122273]
  - netforward: net: fix some compile warnings (lingfuyi) [task:107783]
  - RDMA/hns: Add FRMR support for hip08 (lingfuyi) [task:113333]
  - RDMA: Fully setup the device name in ib_register_device (lingfuyi) [task:113333]
  - IB/{core,uverbs}: Move ib_umem_xxx functions from ib_core to ib_uverbs (xiaolinkui) [task:113333]
  - openeuler:RDMA/hns: Allocate one more recv SGE for HIP08 (wanglin) [task:113333]
  - openeuler:RDMA/hns: add eq and cq time cfg compatibility support. (wanglin) [task:113333]
  - openeuler:RDMA/hns: fix timer, gid_type, scc cfg (wanglin) [task:113333]
  - openeuler:RDMA/hns: fix eth extended SGE err (Yang Shunfeng) [task:113333]
  - openeuler:RDMA/hns: Disable UD on HIP08 (Weihang Li) [task:113333]
  - openeuler:RDMA/hns: Modify the code based on the review comments (Hu Chunzhi) [task:113333]
  - openeuler:RDMA/hns: optimize mtr management and fix mtr addressing bug (Tao Jihua) [task:113333]
  - openeuler:RDMA/hns: fix bug of accessing null pointer (Tao Jihua) [task:113333]
  - openeuler:RDMA/hns: Compilation Configuration update (Gao Xun) [task:113333]
  - openeuler:RDMA/hns:security review update (Gao Xun) [task:113333]
  - openeuler:RDMA/hns: some robust optimize in rdfx (Zhao Weibo) [task:113333]
  - openeuler:RDMA/hns: fix the bug of out-of-bonds-read in post send (Zhao Weibo) [task:113333]
  - openeuler:RDMA/hns: Add roce dfx of arm_cnt (Zhao Weibo) [task:113333]
  - openeuler:RDMA/hns: avoid potential overflow of (Zhao Weibo) [task:113333]
  - openeuler:RDMA/hns: handle device err after device state to UNIT (Zhao Weibo) [task:113333]
  - openeuler:RDMA/hns:remove useless header in cmd (Zhao Weibo) [task:113333]
  - Revert "IB/{core,uverbs}: Move ib_umem_xxx functions from ib_core to ib_uverbs" (lingfuyi) [task:113333]
  - Revert "Roce: hns: backporting the hns-roce driver from upstream" (lingfuyi) [task:113333]
  - Revert "RDMA: Fully setup the device name in ib_register_device" (lingfuyi) [task:113333]
  - Revert "RDMA/hns: Support local invalidate for hip08 in kernel space" (lingfuyi) [task:113333]
  - Revert "RDMA/hns: Add vlan enable bit for hip08" (lingfuyi) [task:113333]
  - Revert "RDMA/hns: Bugfix for atomic operation" (lingfuyi) [task:113333]
  - Revert "RDMA/hns: Add FRMR support for hip08" (lingfuyi) [task:113333]
  - NFS: Improve warning message when locks are lost. (NeilBrown) [task:117825]
  - cfg80211: remove WARN_ON() in cfg80211_sme_connect (Du Cheng)
  - mac80211_hwsim: drop pending frames on stop (Johannes Berg) [task:122382]
  - mac80211_hwsim: Replace hrtimer tasklet with softirq hrtimer (Thomas Gleixner) [task:122382]
  - mac80211: always wind down STA state (Johannes Berg) [task:122383]
  - wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() (Dokyung Song) {CVE-2022-3628}
  - txgbe: Make use of cpumask_local_spread to improve RSS locality (xiaolinkui) [task:121187]
  - Revert "txgbe: network card performance (xiaolinkui) [task:121187]
  - scsi: iscsi: Fix unbound endpoint error handling (Mike Christie) [task:84035]
  - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart (Mike Christie) [task:84035]
  - scsi: iscsi: Fix endpoint reuse regression (Mike Christie) [task:84035]
  - scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Mike Christie) [task:84035]
  - scsi: iscsi: Move iscsi_ep_disconnect() (Mike Christie) [task:84035]
  - scsi: iscsi: Drop temp workq_name (Mike Christie) [task:84035]
  - scsi: iscsi: Use the session workqueue for recovery (Mike Christie) [task:84035]
  - scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding (Mike Christie) [task:84035]
  - scsi: iscsi: Remove iscsi_scan_finished() (Mike Christie) [task:84035]
  - scsi: iscsi: Speed up session unblocking and removal (Mike Christie) [task:84035]
  - scsi: iscsi: Fix recovery and unblocking race (Mike Christie) [task:84035]
  - scsi: iscsi: Fix set_param() handling (Mike Christie) [task:84035]
  - scsi: iscsi: Flush block work before unblock (Mike Christie) [task:84035]
  - scsi: iscsi: Fix in-kernel conn failure handling (Mike Christie) [task:84035]
  - scsi: iscsi: Rel ref after iscsi_lookup_endpoint() (Mike Christie) [task:84035]
  - scsi: iscsi: Force immediate failure during shutdown (Mike Christie) [task:84035]
  - scsi: iscsi: Stop queueing during ep_disconnect (Mike Christie) [task:84035]
  - scsi: iscsi: Fix iSCSI cls conn state (Mike Christie) [task:84035]
  - scsi: iscsi: Fix race condition between login and sync thread (Gulam Mohamed) [task:84035]
  - scsi: iscsi: Optimize work queue flush use (Mike Christie) [task:84035]
  - scsi: iscsi: Change iSCSI workqueue max_active back to 1 (Bob Liu) [task:84035]
  - scsi: iscsi: Fix deadlock on recovery path during GFP_IO reclaim (Gabriel Krisman Bertazi) [task:84035]
  - scsi: iscsi: Register sysfs for iscsi workqueue (Bob Liu) [task:84035]
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi) [task:84035]
  - scsi: iscsi: Perform connection failure entirely in kernel space (Bharath Ravi) [task:84035]
  - arm64: topology: Stop using MPIDR for topology information (Valentin Schneider) [task:149011]
  - sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa() (Dietmar Eggemann)
  - sched/topology: Make sched_init_numa() use a set for the deduplicating sort (Valentin Schneider)
  - sched/topology: fix the issue groups don't span domain->span for NUMA diameter > 2 (Barry Song)
  - sched/topology: Warn when NUMA diameter > 2 (Valentin Schneider)
  - cve-cal.sh: fix the match expression (Zhengyuan Liu)
  - NFS: Fix initialisation of nfs_client cl_flags field (Trond Myklebust) [task:122235]
  - NFS: Don't call generic_error_remove_page() while holding locks (Trond Myklebust) [bug:141933]
  - scsi/megaraid: Fixed SGL buffer allocation failure (Zheng tan) [task:121622]
  - scsi: megaraid: make two symbols static in megaraid_mbox.c (Jason Yan)
  - scsi: megaraid_sas: switch to generic DMA API (Christoph Hellwig) [task:121622]
  - scsi: megaraid_mbox: switch to generic DMA API (Christoph Hellwig) [task:121622]
  - scsi: megaraid_mbox: remove set but not used variables (YueHaibing) [task:121622]
  - scsi: megaraid_mbox: remove bogus use of pci_dma_sync_sg_* APIs (Christoph Hellwig) [task:121622]
  - mm/memcg: optimize memory.numa_stat like memory.stat (Shakeel Butt) [task:121187]
  - mm/memcontrol: fix wrong vmstats for dying memcg (jiangfeng) [task:25019]
  - mm: memcontrol: fix percpu vmstats and vmevents flush (Shakeel Butt)
  - mm: memcontrol: fix NULL-ptr deref in percpu stats flush (Shakeel Butt)
  - mm: memcg: get number of pages on the LRU list in memcgroup base on lru_zone_size (Honglei Wang)
  - mm: Fix kabi compatibility for memcontrol (Jackie Liu)
  - mm: memcontrol: add struct mem_cgroup_extension (Liu Shixin)
  - mm, memcg: partially revert "mm/memcontrol.c: keep local VM counters in sync with the hierarchical ones" (Roman Gushchin)
  - mm/memcontrol.c: keep local VM counters in sync with the hierarchical ones (Yafang Shao)
  - mm: memcontrol: don't batch updates of local VM stats and events (Johannes Weiner)
  - mm/memcontrol: fix wrong statistics in memory.stat (Yafang Shao)
  - mm: memcontrol: flush percpu vmevents before releasing memcg (Roman Gushchin)
  - mm: memcontrol: flush percpu vmstats before releasing memcg (Roman Gushchin)
  - mm: memcontrol: fix NUMA round-robin reclaim at intermediate level (Johannes Weiner)
  - mm: memcontrol: fix recursive statistics correctness & scalabilty (Johannes Weiner)
  - mm: memcontrol: make cgroup stats and events query API explicitly local (Johannes Weiner)
  - mm: memcontrol: quarantine the mem_cgroup_[node_]nr_lru_pages() API (Johannes Weiner)
  - mm: memcontrol: push down mem_cgroup_nr_lru_pages() (Johannes Weiner)
  - mm: memcontrol: push down mem_cgroup_node_nr_lru_pages() (Johannes Weiner)
  - mm: workingset: don't drop refault information prematurely (Johannes Weiner)
  - mm: memcontrol: replace node summing with memcg_page_state() (Johannes Weiner)
  - mm: memcontrol: replace zone summing with lruvec_page_state() (Johannes Weiner)
  - mm: memcontrol: track LRU counts in the vmstats array (Johannes Weiner)
  - mm, memcg: rename ambiguously named memory.stat counters and functions (Chris Down)
  - Bluetooth: L2CAP: Fix attempting to access uninitialized memory (Luiz Augusto von Dentz) {CVE-2022-42895, CVE-2022-42895}
  - OPENEULER: scsi: hisi_sas: Modify v3 HW ATA completion process when SATA disk is in error status (huhai) [task:119968]
  - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (Zhengchao Shao) [bug:146356] {CVE-2022-3640}
  - Bluetooth: L2CAP: Fix build errors in some archs (Luiz Augusto von Dentz) [bug:146356]
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression (Luiz Augusto von Dentz) [bug:146356]
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put (Luiz Augusto von Dentz) [bug:146356]
  - ice: create scheduler aggregator node config and move VSIs (Kiran Patil) [task:119923] {CVE-2020-24504}
  - ice: added sibling head to parse nodes (Victor Raj) [task:119923]
  - tcp: Fix data races around icsk->icsk_af_ops. (Kuniyuki Iwashima) [task:119920] {CVE-2022-3566}
  - ipv6: Fix data races around sk->sk_prot. (Kuniyuki Iwashima) [task:119920] {CVE-2022-3567}
  - ipv6: annotate some data-races around sk->sk_prot (Eric Dumazet) [task:119920]
  - ipv6: provide and use ipv6 specific version for {recv, send}msg (Paolo Abeni) [task:119920]
  - inet: factor out inet_send_prepare() (Paolo Abeni) [task:119920]
  - x86/kvm/vmx: Make noinstr clean (Peter Zijlstra) [task:119923] {CVE-2022-23816, CVE-2022-29900, CVE-2022-29901}
  - vmlinux.lds.h: Create section for protection against instrumentation (Nicolas Boichat) [task:119923]
  - fbdev: smscufx: Fix use-after-free in ufx_ops_open() (Hyunwoo Kim) [task:119086] {CVE-2022-41849}
  - efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock() (Zhang Jianhua) [task:121117]
  - af_unix: fix garbage collect vs MSG_PEEK (Miklos Szeredi) {CVE-2021-0920}
  - net: split out functions related to registering inflight socket files (Jens Axboe)
  - net: mvpp2: fix mvpp2 debugfs leak (Russell King (Oracle)) [bug:146382] {CVE-2022-3535}
  - mvpp2: no need to check return value of debugfs_create functions (Greg Kroah-Hartman) [bug:146382]
  - usb: mon: make mmapped memory read only (Tadeusz Struk) [bug:146411] {CVE-2022-43750}
  - mISDN: fix use-after-free bugs in l1oip timer handlers (Duoming Zhou) [bug:146399] {CVE-2022-3565}
  - nfp: fix use-after-free in area_cache_get() (Jialiang Wang) [bug:146391] {CVE-2022-3545}
  - bnx2x: fix potential memory leak in bnx2x_tpa_stop() (Jianglei Nie) [bug:146387] {CVE-2022-3542}
  - tcp/udp: Fix memory leak in ipv6_renew_options(). (Kuniyuki Iwashima) [bug:146379] {CVE-2022-3524}
  - kcm: avoid potential race in kcm_tx_work (Eric Dumazet) [bug:146367] {CVE-2022-3521}
  - nilfs2: fix use-after-free bug of struct nilfs_root (Ryusuke Konishi) [bug:146364] {CVE-2022-3649}
  - nilfs2: fix leak of nilfs_root in case of writer thread creation failure (Ryusuke Konishi) [bug:146360] {CVE-2022-3646}
  - atm: idt77252: fix use-after-free bugs caused by tst_timer (Duoming Zhou) [bug:146352] {CVE-2022-3635}
  - vsock: Fix memory leak in vsock_connect() (Peilin Ye) [bug:146346] {CVE-2022-3629}
  - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() (Ryusuke Konishi) [bug:146338] {CVE-2022-3621}
  - r8152: Rate limit overflow messages (Andrew Gaul) [bug:146333] {CVE-2022-3594}
  - netforward: net: add ps1600 network card driver support (lingfuyi) [task:107783]
  - x86/arm64: CONFIG_EFI_TEST=m (Jackie Liu) [task:117739]
  - usb: gadget: rndis: prevent integer overflow in rndis_set_response() (Dan Carpenter) [bug:144310] {CVE-2022-20423}
  - arm64: fix oops in concurrently setting insn_emulation sysctls (haibinzhang (张海斌)) [bug:144304] {CVE-2022-20422}
  - mm: kmemleak: take a full lowmem check in kmemleak_*_phys() (Patrick Wang)
  - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC (Takashi Iwai) [bug:143226] {CVE-2022-3303}
  - ALSA: oss: Fix assignment in if condition (Takashi Iwai) [bug:143226]
  - netdevice: fix kabi broken (Jiangshan Yi) [task:118709]
  - netdevice: fix the KABI issue (Zhengyuan Liu) [task:118709]
  - x64/configs: enable FCOE (Zhengyuan Liu) [task:118709]
  - scripts/find-patch.sh: add a script to find the backport info (Zhengyuan Liu) [task:139819]
  - media: em28xx: initialize refcount before kref_get (Dongliang Mu) [bug:143222] {CVE-2022-3239}
  - scsi: stex: Properly zero out the passthrough command structure (Linus Torvalds) [bug:143218] {CVE-2022-40768}
  - netfilter: nf_conntrack_irc: Fix forged IP logic (David Leadbeater) [bug:143208] {CVE-2022-2663}
  - i40e: Fix kernel crash during module removal (Ivan Vecera)
  - i40e: Fix use-after-free in i40e_client_subtask() (Yunjian Wang)
  - sch_sfb: Also store skb len before calling child enqueue (Toke Høiland-Jørgensen)
  - char: pcmcia: synclink_cs: Fix use-after-free in mgslpc_ops (Hyunwoo Kim) [task:115018] {CVE-2022-41848}
  - HID: roccat: Fix use-after-free in roccat_read() (Hyunwoo Kim) [task:115018] {CVE-2022-41850}
  - Bluetooth: refactor malicious adv data check (Brian Gix) [task:114879]
  - Bluetooth: stop proccessing malicious adv data (Pavel Skripkin) [task:97308]
  - sch_sfb: Don't assume the skb is still around after enqueueing to child (Toke Høiland-Jørgensen)
  - scsi: mpt3sas: Fix use-after-free warning (Sreekanth Reddy)
  - binder: fix UAF of ref->proc caused by race condition (Carlos Llamas)
  - qrtr: orphan socket in qrtr_release() (Cong Wang)
  - gup: document and work around "COW can break either way" issue (Linus Torvalds) [task:114489] {CVE-2020-29374}
  - mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() (Jann Horn) [bug:139840] {CVE-2022-39188}
  - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls (Chen-Yu Tsai) [task:112440] {CVE-2022-20369}
  - ipv6: sr: fix out-of-bounds read when setting HMAC data. (David Lebrun)
  - nvmet: fix a use-after-free (Bart Van Assche)
  - backport-tools: add --force option for force check (Jackie Liu)
  - tools: sync tools with kylinos-next (Jackie Liu)
  - backport: provide backport tools (Jackie Liu)
  - x86/speculation: fix backport unprivileged_ebpf_enabled() (Jackie Liu) [task:74843, task:113424]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.23.v2101
changelog:
  - usb: gadget: open usb gadget function for uac (songxiebing) [bug:152440]
  - xfs: fix super block buf log item UAF during force shutdown (Guo Xuenan) [task:124686]
  - xfs: properly serialise fallocate against AIO+DIO (Dave Chinner) [task:82242]
  - iomap: Fix negative assignment to unsigned sis->pages in iomap_swapfile_activate (Ritesh Harjani) [task:82242]
  - mm/swap: consider max pages in iomap_swapfile_add_extent (Xu Yu) [task:82242]
  - usb: audio: add CONFIG_SND_USB_AUDIO=m (songxiebing) [bug:152440]
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang) [bug:153851] {CVE-2022-3424}
  - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock (Jakub Sitnicki) [bug:153856] {CVE-2022-4129}
  - l2tp: Serialize access to sk_user_data with sk_callback_lock (Jakub Sitnicki) [bug:153856] {CVE-2022-4129}
  - net: fix a concurrency bug in l2tp_tunnel_register() (Gong, Sishuai) [bug:153856]
  - nvmet: use IOCB_NOWAIT only if the filesystem supports it (Maurizio Lombardi) [task:82241, task:127939]
  - nvmet: fix building bvec from sg list (Ming Lei) [task:82241, task:127939]
  - nvmet: use IOCB_NOWAIT for file-ns buffered I/O (Chaitanya Kulkarni) [task:82241, task:127939]
  - xen/netback: don't call kfree_skb() with interrupts disabled (Juergen Gross) {CVE-2022-42328, CVE-2022-42329}
  - hv_netvsc: Add check for kvmalloc_array (Jiasheng Jiang) {CVE-2022-3107}
  - drm/amdkfd: Check for null pointer after calling kmemdup (Jiasheng Jiang) {CVE-2022-3108}
  - power: supply: wm8350-power: Add missing free in free_charger_irq (Jiasheng Jiang) {CVE-2022-3111}
  - drm: mali-dp: potential dereference of null pointer (Jiasheng Jiang) {CVE-2022-3115}
  - drm/mali: Convert to using __drm_atomic_helper_crtc_reset() for reset. (Maarten Lankhorst)
  - xen/netback: fix build warning (Juergen Gross) [bug:152391]
  - xen/netback: Ensure protocol headers don't fall in the non-linear area (Ross Lagerwall) [bug:152391] {CVE-2022-3643}
  - BMA: Fix kernel NULL pointer dereference error (Jackie Liu) [bug:151984]
  - Bluetooth: L2CAP: Fix u8 overflow (Sungwoo Kim) [bug:151696] {CVE-2022-45934}
  - mac80211: fix possible memory leak in ieee80211_assign_beacon (Lorenzo Bianconi)
  - xfs: reduce kvmalloc overhead for CIL shadow buffers (Dave Chinner) [task:82242]
  - Bluetooth: sco: Fix crash when using BT_SNDMTU/BT_RCVMTU option (Wei Yongjun) [task:122387] {CVE-2020-35499}
  - Bluetooth: sco: new getsockopt options BT_SNDMTU/BT_RCVMTU (Joseph Hwang) [task:122387] {CVE-2020-35499}
  - sched: Add constraints to pipeline wakeup optimization (zhaodongyang) [bug:64928]
  - sched/fair: Optimize the context1 and spawn test cases of unixbench (zhaodongyang) [bug:151054]
  - cfg80211: regulatory: reject invalid hints (Johannes Berg)
  - Bluetooth: Remove spurious error message (Szymon Janc)
  - Bluetooth: log advertisement packet length if it gets corrected (Daniels Umanovskis)
  - mac80211: fix a memory leak where sta_info is not freed (Ahmed Zaki) [task:124373]
  - Bluetooth: L2CAP: Fix using wrong mode (Luiz Augusto von Dentz) [bug:148320]
  - Bluetooth: L2CAP: Fix a condition in l2cap_sock_recvmsg() (Dan Carpenter) [bug:148320]
  - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Luiz Augusto von Dentz) [bug:148320] {CVE-2022-42896, CVE-2022-42896}
  - Bluetooth: L2CAP: Add module option to enable ECRED mode (Luiz Augusto von Dentz) [bug:148320]
  - Bluetooth: L2CAP: Add initial code for Enhanced Credit Based Mode (Luiz Augusto von Dentz) [bug:148320]
  - Bluetooth: L2CAP: Add definitions for Enhanced Credit Based Mode (Luiz Augusto von Dentz) [bug:148320]
  - Bluetooth: Fix not initializing L2CAP tx_credits (Luiz Augusto von Dentz) [bug:148320]
  - Bluetooth: Errata Service Release 8, Erratum 3253 (Mallikarjun Phulari) [bug:148320]
  - Bluetooth: Use separate L2CAP LE credit based connection result values (Mallikarjun Phulari) [bug:148320]
  - Bluetooth: L2CAP: Derive rx credits from MTU and MPS (Luiz Augusto von Dentz) [bug:148320]
  - Bluetooth: L2CAP: Derive MPS from connection MTU (Luiz Augusto von Dentz) [bug:148320]
  - staging: rtl8712: fix use after free bugs (Dan Carpenter) [bug:150410] {CVE-2022-4095}
  - drivers: net: slip: fix NPD bug in sl_tx_timeout() (Duoming Zhou) [bug:150414] {CVE-2022-41858}
  - net: ieee802154: nl-mac: fix check on panid (Alexander Aring)
  - usbnet: Fix memory leak in usbnet_disconnect() (Peilin Ye) [task:122644]
  - usbnet: fix memory leak in error case (Oliver Neukum) [task:122644]
  - usbnet: fix memory allocation in helpers (Oliver Neukum) [task:122644]
  - usbnet: Fix linkwatch use-after-free on disconnect (Lukas Wunner) [task:122644]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.24.v2101
changelog:
  - MUCSE: PCI: Add ACS quirk for Mucse N10 series (Yibo Dong) [task:121494]
  - security/kysec: fix possible memory leak in kysec_hash_sha256() (yangzhao) [task:126288]
  - security/kysec: fix possible NULL pointer in kysec_get_real_task() (yangzhao) [task:126285]
  - security/kysec: fix unnecessary inspection in kysec_hash_sync_label_unknown() (yangzhao) [task:126286]
  - security/kysec: fix possible NULL pointer in auth_func() (yangzhao) [task:126284]
  - security/kysec: fix possible NULL pointer in SM3_final() (yangzhao) [task:126283]
  - security/kysec: fix bug with can't get the command real uid in overlay env (yangzhao) [bug:149033]
  - security/kysec: optimize kysec thread waiting mode by wait_event (yangzhao) [task:110527]
  - security/kysec: fix undefined-behaviour in SM3_CF (zhubing) [bug:124049]
  - security/kysec: use msleep_interruptible() instead of msleep() (yangzhao) [task:131471]
  - kysec: fix potential out-of-bounds access issues of name (Jackie Liu) [task:94933]
  - kysec: Remove unnecessary zeroing (Jackie Liu) [task:94933]
  - kysec: exit the thread when kysec is closed (Jackie Liu) [task:94933]
  - security/kysec: fix panic when 3adm opened and kysec disabled (yangzhao) [bug:124729]
  - security/kysec: remove unused variables in kysec_task_kill() (yangzhao) [task:94083]
  - security/kysec: fix bug with .viminfo is set to readonly label (yangzhao) [bug:120931]
  - security/kysec: allow rsync to inherit trusted lable (huanfuxi) [bug:113477]
  - security/kysec: optimize kysec module code (yangzhao) [task:83026]
  - security/kysec: modify inode security mutex to spinlock (yangzhao) [task:83026]
  - security/kysec: implementation of exectl func in bprm_check hook (yangzhao) [task:83026]
  - security/kysec: allow killed by itself in kysec_task_kill() (yangzhao)
  - security/kysec: remove script checking in kysec_task_kill() (yangzhao) [bug:119471]
  - security/kysec: fix bug with can't notify user when the protected file renamed (yangzhao) [bug:69309]
  - security/kysec: solve the problem of multiple bullet frame authentication for the same program networking (yangzhao) [bug:94015]
  - security/kysec: fix bug with ppro status got error when kysec disabled (yangzhao) [bug:99704]
  - net: ieee802154: handle iftypes as u32 (Alexander Aring) [task:131823]
  - netfilter: remove BUG_ON() after skb_header_pointer() (Pablo Neira Ayuso) [bug:153351]
  - skbuff: micro-optimize {,__}skb_header_pointer() (Alexander Lobakin) [bug:153351]
  - skbuff: make __skb_header_pointer()'s data argument const (Alexander Lobakin) [bug:153351]
  - security/kysec:Directory recursive traversal is adjusted to a non-recursive traversal (chengang) [bug:151725]
  - security/kysec: fix bug with file protection xattr disappears (hezhenang) [bug:73541]
  - security/kysec: ignore return value when set verified label (huanfuxi) [bug:61930]
  - security/kysec: fix bug with kysec_auth cannot be permitted as an exception (yangzhao)
  - security/kysec: fix file label is not changed when move it (huanfuxi) [bug:71559]
  - security/kysec: add mtime in inode security struct (yangzhao) [bug:64933]
  - security/kysec: fix bug with kernel panic when changing netctl status (hezhenang) [bug:69495, bug:70266]
  - security/kysec: reduce lock holding time during the operation of each hlist (yangzhao)
  - fix the bug with can't auth when netctl status is changed to warning (hezhenang) [bug:67013]
  - security/kysec: checking kysec status before calling func in non-security dir (hezhenang)
  - security/kysec: fix the bug with can't auth when the process auth mode changed to warning (yangzhao) [bug:68322]
  - security/kysec: fix bug of can not kill task when not protected (huanfuxi) [bug:68086]
  - security/kysec: fix bug with slab out of bounds in kysec_parse_script_argv() (hezhenang) [task:61358]
  - security/kysec: convert some kernel print info into debug info (yangzhao) [bug:65525]
  - security/kysec: add 'p' and 'k' as the privileged process (yangzhao) [task:42710]
  - security/kysec: fix bug with internal filesystem can't support xattr like reiserfs (hezhenang) [bug:91424]
  - security/kysec: fix bug with shell script can not protect by ppro (yangzhao) [bug:49405]
  - security/box: fix bug with .data can be renamed (yangzhao) [bug:49398]
  - security/kysec: fix bug with maybe NULL point after getting env (yangzhao)
  - security/kysec: ues realpath for process protect (huanfuxi)
  - security/kysec: fix bug with ppro can't protect shell script (yangzhao) [bug:49405]
  - security/kysec: add hash value into process monitor list (yangzhao) [bug:58197]
  - security/kysec: fix bug when kill process protect (huanfuxi) [bug:56706]
  - security/apparmor: support selinux and apparmor (yushanshan) [task:52933]
  - security/kysec: netctl auto add whlist (yushanshan) [task:66172]
  - security/kysec: don't perform security checks when measuring files (hezhenang)
  - security/kysec: fix compilation errors when just diable SECURITY_KYSEC_AUTHENTICATION (yangzhao) [task:54915]
  - security/kysec: fix panic with NULL pointer in kysec_task_read_env() (yangzhao)
  - security/kysec: fix compilation warning (yangzhao)
  - security/kysec: fix bug with special label process can't rename dir (yangzhao)
  - security/kysec: let 'p' process not synchronize labels to userspace (yangzhao) [bug:68271]
  - security/kysec: fix deadlock on fuse filesystem (Tianyue Ren)
  - security/kysec: change process label when the file label is 'k' or 't' (yangzhao)
  - security/kysec: add netctl status checking before ip filtering (yangzhao)
  - security/kysec: fix bug with local network application can not connect itself (yangzhao) [bug:64500, bug:64829]
  - security/kysec: fix bug of run script with source (huanfuxi) [bug:49403]
  - security/kysec: extended kernel hash table size (yangzhao) [bug:58671]
  - security/kysec: fix bug that not fput in kysec_creator_check (huanfuxi)
  - security/kysec: add parent process info checking for parent label (yangzhao) [bug:48888]
  - security/kysec: sync netctl data by user program (huanfuxi) [bug:29682]
  - security/kysec: fix bug with netctl can't control shell script (yangzhao) [bug:49404]
  - security/kysec: improve the performance under the condition of kysec enabled (yangzhao)
  - security/kysec: checking parent info for netctl (yangzhao) [bug:56969]
  - security/kysec: add script label to identify the script interpreter (yangzhao)
  - security/kysec: change the module insmod protection mode to exectl (mengdehui@kylinos.cn) [bug:57133]
  - wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (Szymon Heidrich) [bug:157174] {CVE-2023-23559}
  - net: bonding: Add support for IPV6 ns/na to balance-alb/balance-tlb mode (Sun Shouxin) [task:131515]
  - security/kysec: add hash value into netctl process info (yangzhao) [bug:50854]
  - arm64/bpf: Remove 128MB limit for BPF JIT programs (Russell King)
  - bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Lorenz Bauer)
  - arm64/bpf: don't allocate BPF JIT programs in module memory (Ard Biesheuvel)
  - bpf: increase complexity limit and maximum program size (Alexei Starovoitov) [bug:147573]
  - mm: fix a race during THP splitting (Huang Ying) [bug:156904]
  - net: sched: disallow noqueue for qdisc classes (Frederick Lawler) {CVE-2022-47929}
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (Herbert Xu) {CVE-2023-0394}
  - net: sched: cbq: dont intepret cls results when asked to drop (Jamal Hadi Salim) {CVE-2023-23454}
  - net: sched: atm: dont intepret cls results when asked to drop (Jamal Hadi Salim) {CVE-2023-23455}
  - security/kysec: fix bug with NULL pointer in kysec_free_sb (yangzhao) [task:131145]
  - security/kysec: filtering trusted filesystem when marking file dirty (yangzhao) [bug:54350]
  - security/kysec: keep the readonly label unchanged (yangzhao) [bug:51092]
  - fs: fix lazytime expiration handling in __writeback_single_inode() (Eric Biggers)
  - writeback: Drop I_DIRTY_TIME_EXPIRE (Jan Kara)
  - NETSWIFT: txgbe: Fix skb list corruption on Power systems (mengyuanlou) [task:50860]
  - drivers/char/tpm: add tpm2-hash-sm3 interface (yushanshan) [task:66172, task:130579]
  - drivers/char/tpm: add tpm_ax99100 driver (hezhenang) [task:64837, task:130975]
  - xfs: bulkstat should copy lastip whenever userspace supplies one (Darrick J. Wong) [task:82242]
  - xfs: move XFS_AG_BTREE_CMP_FORMAT_STR mappings to libxfs (Darrick J. Wong) [task:82242]
  - xfs: fix symbolic enum printing in ftrace output (Darrick J. Wong) [task:82242]
  - drm/vmwgfx: Validate the box size for the snooped cursor (Zack Rusin) [bug:155757] {CVE-2022-36280}
  - binder: validate alloc->mm in ->mmap() handler (Carlos Llamas) [bug:155767]
  - binder: fix alloc->vma_vm_mm null-ptr dereference (Carlos Llamas) [bug:155767]
  - android: binder: fix lockdep check on clearing vma (Liam Howlett) [bug:155767]
  - binder_alloc: add missing mmap_lock calls when using the VMA (Liam Howlett) [bug:155767]
  - android: binder: stop saving a pointer to the VMA (Liam R. Howlett) [bug:155767] {CVE-2023-20928}
  - mm: add vma_lookup(), update find_vma_intersection() comments (Liam Howlett) [bug:155767]
  - i915_vma: Rename vma_lookup to i915_vma_lookup (Liam Howlett) [bug:155767]
  - drm/nouveau/mmu: add more general vmm free/node handling functions (Ben Skeggs) [bug:155765] {CVE-2023-0030}
  - mm, oom: do not trigger out_of_memory from the #PF (Michal Hocko) [bug:155771] {CVE-2023-0047}
  - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Vasily Averin) [bug:155771]
  - Bluetooth: check for zapped sk before connecting (Archie Pusaka) [task:129604]
  - xfs: use a struct iomap in xfs_writepage_ctx (Christoph Hellwig) [task:57649]
  - xfs: remove the truncate short cut in xfs_map_blocks (Christoph Hellwig) [task:57649]
  - xfs: make xfs_bmbt_to_iomap more useful (Christoph Hellwig) [task:57649]
  - xfs: simplify xfs_chain_bio (Christoph Hellwig) [task:57649]
  - xfs: also truncate holes covered by COW blocks (Christoph Hellwig) [task:57649]
  - xfs: move xfs_iomap_write_allocate to xfs_aops.c (Christoph Hellwig) [task:57649]
  - xfs: move stat accounting to xfs_bmapi_convert_delalloc (Christoph Hellwig) [task:57649]
  - xfs: remove the io_type field from the writeback context and ioend (Christoph Hellwig) [task:57649]
  - xfs: remove superfluous writeback mapping eof trimming (Brian Foster) [task:57649]
  - xfs: remove XFS_IO_INVALID (Christoph Hellwig) [task:57649]
  - xfs: move transaction handling to xfs_bmapi_convert_delalloc (Christoph Hellwig) [task:57649]
  - nl80211: validate key indexes for cfg80211_registered_device (Anant Thazhemadam) [task:128929]
  - block: better deal with the delayed not supported case in blk_cloned_rq_check_limits (Ritika Srivastava) [task:125138]
  - block: Return blk_status_t instead of errno codes (Ritika Srivastava) [task:125138]
  - swiotlb: skip swiotlb_bounce when orig_addr is zero (Liu Shixin) [task:99634, task:155312]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.25.v2101
changelog:
  - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() (Hangyu Hua) [task:142966] {CVE-2023-28466}
  - PCI: Equalize hotplug memory and io for occupied and empty slots (Jon Derrick) [task:134263]
  - media: dvb-core: Fix UAF due to refcount races at releasing (Takashi Iwai) [bug:164041] {CVE-2022-41218}
  - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry (Zheng Wang) [bug:164044] {CVE-2022-3707}
  - ntfs: fix out-of-bounds read in ntfs_attr_find() (Hawkins Jiawei) [bug:164058] {CVE-2023-26607}
  - ntfs: fix use-after-free in ntfs_ucsncmp() (ChenXiaoSong) [bug:164058]
  - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function (Miaoqian Lin) [bug:164062] {CVE-2023-23000}
  - x86/cpufreq: add CONFIG_CPU_FREQ_GOV_SCHEDUTIL (tianyu) [bug:161979]
  - security/selinux: fix bounded_transition failed problem (mengdehui) [bug:161836]
  - inotify: show inotify mask flags in proc fdinfo (Amir Goldstein) [bug:157782]
  - sched/rt: pick_next_rt_entity(): check list_entry (Pietro Borrello) [bug:161115] {CVE-2023-1077}
  - sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity() (Dietmar Eggemann) [bug:161115]
  - net/ulp: prevent ULP without clone op from entering the LISTEN status (Paolo Abeni) [bug:161093] {CVE-2023-0461}
  - HID: asus: use spinlock to safely schedule workers (Pietro Borrello) [task:138519, bug:161140] {CVE-2023-1079}
  - HID: asus: use spinlock to protect concurrent accesses (Pietro Borrello) [task:138519, bug:161140]
  - HID: asus: Remove check for same LED brightness on set (Luke D. Jones) [task:138519, bug:161140]
  - net: mpls: fix stale pointer if allocation fails during device rename (Jakub Kicinski) [bug:161097] {CVE-2023-26545}
  - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (Duoming Zhou) [bug:161144] {CVE-2023-1118}
  - tap: tap_open(): correctly initialize socket uid (Pietro Borrello) [bug:161111] {CVE-2023-1076}
  - tun: tun_chr_open(): correctly initialize socket uid (Pietro Borrello) [bug:161111] {CVE-2023-1076}
  - net: add sock_init_data_uid() (Pietro Borrello) [bug:161111] {CVE-2023-1076}
  - sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner) [bug:161106] {CVE-2023-1074}
  - HID: check empty report_list in hid_validate_values() (Pietro Borrello) [bug:161102] {CVE-2023-1073}
  - security: solve slab-out-of-bounds problem when registering lsm in modules (yangzhao) [task:136417]
  - md/raid10: initialize r10_bio->read_slot before use. (Kevin Vigor) [task:136746]
  - arm64/config: compile nvme and nvme_core as module (zhanggenjian) [task:136928]
  - block: adjust the position of the code section (zhanggenjian) [task:122387]
  - crypto: ccp - Change a message to reflect status instead of failure (Hook, Gary) [task:136929]
  - OPENEULER: blk-throtl: fix race in io dispatching (Yu Kuai) [task:133418]
  - NETSWIFT: txgbe: set release version 1.3.3 (Juxia He) [task:130764]
  - NETSWIFT: txgbe: UP update compile in linux 5.18.1 (mengyuanlou) [task:130764]
  - NETSWIFT: txgbe: Fix: fix compile error in loongson(mips64) (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: Fix: fix bug that vf promisc not right (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: add lanrst to tx timeout / clean tx irq flow (zhenpengzheng) [task:130764]
  - NETSWIFT: txgbe: MODIFY: vf do not make its own receice-hash rules (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: Fix: fix the bug that ip link set vf status not right (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: FIX: fix the bug that vf receice hash rule not work (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: Remove: remove VF packets count in PF (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: ADD: add the interface to show and set the vf link state (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: 1.Fix ethtool intr_test trigger interrupt failed 2.Fix ethtool diag_test run loopback test failed after disabling sriov (wenduanqiang) [task:130764]
  - NETSWIFT: txgbe: add print aer status to disable pcie master flow (zhenpengzheng) [task:130764]
  - NETSWIFT: txgbe: remove INT_ERR from pcie recover flow (zhenpengzheng) [task:130764]
  - NETSWIFT: txgbe: FIX: ethtool -s 1000M autoneg in 1G sfp and del repeated multicast (linyuexie) [task:130764]
  - NETSWIFT: txgbe: FIX: ethtool -s speed 1000 autoneg on/off (linyuexie) [task:130764]
  - NETSWIFT: txgbe: fix aer status not print out when TXGBE_RECOVER_CHECK set (zhenpengzheng) [task:130764]
  - NETSWIFT: txgbe: FIX: fix echo 1 num_sriovs cause pending (Mengyuan Lou) [task:130764]
  - NETSWIFT: txgbe: Fix: do not clear vxlan port reg when set rx_csum off (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: FIX: make kylin not to close flow dir (Mengyuan Lou) [task:130764]
  - NETSWIFT: txgbe: ADD: add tx_ring check in txgbe_xmit_frame() (Mengyuan Lou) [task:130764]
  - NETSWIFT: txgbe: ADD:add ethtool -S get tx multicast braoadcast count (linyuexie) [task:130764]
  - NETSWIFT: txgbe: ADD: ethtool set autoneg on/off in 1000M speed (linyuexie) [task:130764]
  - NETSWIFT: txgbe: add pcie aer status print and regroup TXGBE_PCIE_RECOVER macro (zhenpengzheng) [task:130764]
  - NETSWIFT: txgbe: FIX: fix the bug that The number of RSS can exceed the number of cpus (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: ADD: ethtool show and set lldp (linyuexie) [task:130764]
  - NETSWIFT: txgbe: add TXGBE_RECOVER_CHECK and TXGBE_DIS_COMP_TIMEOUT (zhenpengzheng) [task:130764]
  - NETSWIFT: txgbe: sync maco from configure to kcompat.h (mengyuanlou) [task:130764]
  - NETSWIFT: txgbe: FIX: get lldp status issue (linyuexie) [task:130764]
  - NETSWIFT: txgbe: ADD: ethtool --show-priv-flags show lldp status (linyuexie) [task:130764]
  - NETSWIFT: txgbe: sync maco from configure to kcompat.h (Mengyuan Lou) [task:130764]
  - NETSWIFT: txgbe: FIX warning:Delete two unused variables (root) [task:130764]
  - NETSWIFT: txgbe: Fix: fix fiber to copper sfp module always link up bug that actually been down (wenduanqiang) [task:130764]
  - NETSWIFT: txgbe: FIX: ethtool -f xxx only support upgrade once (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: FIX：VT mode must be set before sriov enable (mengyuanlou) [task:130764]
  - NETSWIFT: txgbe: FIX: fix open/close notify sleep to long and read wrong buffer (mengyuanlou) [task:130764]
  - NETSWIFT: txgbe: add inspur oem ssid 0x0085/0x0075/0x0084 support for led control (wenduanqiang) [task:130764]
  - NETSWIFT: txgbe: FIX: fix ethtool link mode isn't correct in fiber mode (wenduanqiang) [task:130764]
  - NETSWIFT: txgbe: FIX: fix compile when DISABLE_PACKET_SPLIT open (mengyuanlou) [task:130764]
  - NETSWIFT: txgbe: RM: remove DEBUGFUNC (mengyuanlou) [task:130764]
  - NETSWIFT: txgbe: RM: remove SIMULATION_DEBUG (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: update release note for ngbe-1.2.3 (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: UP update compile in linux 5.18.1 (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: add NGBE_RECOVER_CHECK and NGBE_DIS_COMP_TIMEOUT (zhenpengzheng) [task:130764]
  - NETSWIFT: ngbe: FIX fix ethtool f upgrade image not to check chip ve (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: Fix: compile err about ethtool marco in some OS (wenduanqiang) [task:130764]
  - NETSWIFT: ngbe: FIX: ethtool -f xxx only support upgrade once (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: Fix: ubuntu 16.10 compile error, fiber linkdown advertise mode err (wenduanqiang) [task:130764]
  - NETSWIFT: ngbe: FIX: fix ethtool link mode isn't correct in fiber mode (wenduanqiang) [task:130764]
  - NETSWIFT: ngbe: FIX: probe print_info all ports display "eth0" (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: add pcie aer configuration space print info before pcie recovery (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: FIX: unload/load no wait , lan0 internal phy may hw reset failed (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: modify some code to obey Linux C-coding style (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: add spinlock protection on yt phy ext registers accessing (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: FIX: fix ngbe_gphy_wait_mdio_on return (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: FIX: fix add yt phy sgmii2rgmii mode (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: reset ethtool_get_setting back to previous version (wenduanqiang) [task:130764]
  - NETSWIFT: ngbe: ADD: add yt phy support sgmii2rgmii mode (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: turn off fiber auto sensing and set 1000BX manually to avoid link to 100M occationally in yt8521/8531 fiber mode (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: add support for switching speed mode between autoneg and force 1G in marvell88e1512/yt8521/yt8531 phy sfi mode by using ethtool (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: FIX: fix ethtool link mode isn't correct when using fiber mode (wenduanqiang) [task:130764]
  - NETSWIFT: ngbe: FIX: fix marverll copper change speed has not ints again (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: add support on marvell/yt8521 1000base-x mode autoneg (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: if marvell mix mode, driver will read phy mode from flash instead of register to workaround pxe driver override phy mode problem (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: RM: remove some unuse log (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: RM: remove zte phy code (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: FIX: fix marverll copper change speed has not ints (mengyuanlou) [task:130764]
  - net: xdp: allow generic and driver XDP on one interface (Jakub Kicinski) [bug:156630]
  - xdp: Provide extack messages when prog attachment failed (Maciej Fijalkowski) [bug:156630]
  - blk-mq: remove WARN_ON(!q->elevator) from blk_mq_sched_free_requests (Ming Lei) [task:122387]
  - block: free sched's request pool in blk_cleanup_queue (Ming Lei) [task:122387] {CVE-2019-25044}
  - block: move blk_exit_queue into __blk_release_queue (Ming Lei) [task:122387] {CVE-2019-25044}
  - xfs: remove the XFS_IOC_{ALLOC,FREE}SP* definitions (Darrick J. Wong) [task:128735]
  - xfs: kill the XFS_IOC_{ALLOC,FREE}SP* ioctls (Darrick J. Wong) [task:128735]
  - fs: add generic UNRESVSP and ZERO_RANGE ioctl handlers (Christoph Hellwig) [task:128735]
  - xfs: don't implement XFS_IOC_RESVSP / XFS_IOC_RESVSP64 (Christoph Hellwig) [task:128735]
  - net: sched: fix race condition in qdisc_graft() (Eric Dumazet) [bug:157192] {CVE-2023-0590}
  - x86/bugs: Flush IBP in ib_prctl_set() (Rodrigo Branco) {CVE-2023-0045}
  - txgbe: bulk free SKBs during TX completion cleanup cycle (weirongguang) [task:50860]
  - compile-and-chkabi.sh: fix the calculation of ncpus (Shida Zhang) [task:129759]
  - NETSWIFT: txgbe: update the driver to 1.3.2 (luoqing) [task:92912]
  - NETSWIFT: txgbe: FIX: fix compile in linux 3.10 (mengyuanlou) [task:92912]
  - NETSWIFT: txgbe: ADD: add flash unlock when upgrade image (mengyuanlou) [task:92912]
  - NETSWIFT: txgbe: FIX: fix some kr flow (mengyuanlou) [task:92912]
  - NETSWIFT: txgbe: fix bug when 1820 is in 1G sfp speed mode, link partner (linglingzhang) [task:92912]
  - NETSWIFT: txgbe: add support for oem ssid and svid (linglingzhang) [task:92912]
  - NETSWIFT: txgbe: add pcie recover switch (zhengzhenpeng) [task:92912]
  - NETSWIFT: txgbe: fix pcie recover bugs (zhengzhenpeng) [task:92912]
  - NETSWIFT: ngbe: update the driver to 1.2.2 (luoqing) [task:92912]
  - NETSWIFT: ngbe: ADD: add yt 101 mode support (mengyuanlou) [task:92912]
  - NETSWIFT: ngbe: FIX: fix compile in ubuntu 21.10 (mengyuanlou) [task:92912]
  - NETSWIFT: ngbe: busfix linkspeed setup failed when link is down (zhengzhenpeng) [task:92912]
  - NETSWIFT: ngbe: ADD-add-link-retry-switch-to-configure (mengyuanlou) [task:92912]
  - NETSWIFT: ngbe: add support for oem ssid and svid (linglingzhang) [task:92912]
  - NETSWIFT: ngbe: ADD: add yt8531s id support (mengyuanlou) [task:92912]
  - NETSWIFT: ngbe: read flash from flash only in phy init (mengyuanlou) [task:92912]
  - NETSWIFT: ngbe: ADD: add retry use an err bit (mengyuanlou) [task:92912]
  - NETSWIFT: ngbe: CH: use sw configure efuse (mengyuanlou) [task:92912]
  - NETSWIFT: ngbe: add pcie recover switch (zhengzhenpeng) [task:92912]
  - NETSWIFT: ngbe: fix pcie recover bugs (zhengzhenpeng) [task:92912]
  - NETSWIFT: ngbe: fix phy set to force 100M autoneg off with partner (zhengzhenpeng) [task:92912]
  - ngbe: Make use of cpumask_local_spread to improve RSS locality (xiaolinkui)
  - ngbe: enable cpumask for wangxun (xiaolinkui)
  - nvme-fcloop: refactor to enable target to host LS (James Smart) [task:62595, task:133366]
  - nvme-fc and nvmet-fc: revise LLDD api for LS reception and LS request (James Smart) [task:62595, task:133366]
  - nvmet-fc: add transport discovery change event callback support (James Smart) [task:62595, task:133366]
  - nvmet: add transport discovery change op (James Smart) [task:62595, task:133366]
  - nvmet: protect discovery change log event list iteration (Sagi Grimberg) [task:62595, task:133366]
  - nvmet: enable Discovery Controller AENs (Jay Sternberg) [task:62595, task:133366]
  - nvmet: allow host connect even if no allowed subsystems are exported (Sagi Grimberg) [task:62595, task:133366]
  - nvmet: add defines for discovery change async events (Jay Sternberg) [task:62595, task:133366]
  - nvmet: change aen mask functions to use bit numbers (Jay Sternberg) [task:62595, task:133366]
  - nvmet: provide aen bit functions for multiple controller types (Jay Sternberg) [task:62595, task:133366]
  - nvmet_fc: support target port removal with nvmet layer (James Smart) [task:62595, task:133366]
  - md-raid10: fix KASAN warning (Mikulas Patocka) [task:128226]
  - md/raid10: Remove unnecessary rcu_dereference in raid10_handle_discard (Xiao Ni) [task:128226]
  - md/raid10: improve discard request for far layout (Xiao Ni) [task:128226]
  - md/raid10: improve raid10 discard request (Xiao Ni) [task:128226]
  - md/raid10: pull the code that wait for blocked dev into one function (Xiao Ni) [task:128226]
  - md/raid10: extend r10bio devs to raid disks (Xiao Ni) [task:128226]
  - md: add md_submit_discard_bio() for submitting discard bio (Xiao Ni) [task:128226]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.26.v2101
changelog:
  - security/kysec: use spin_lock_irq() instead of spin_lock() (huanfuxi) [bug:164413]
  - security/kysec: fix bug with deadlock when writing aufs files (yangzhao) [task:136839]
  - fs: move S_ISGID stripping into the vfs_*() helpers (Yang Xu) [task:141950]
  - fs: Add missing umask strip in vfs_tmpfile (Yang Xu) [task:141950]
  - fs: add mode_strip_sgid() helper (Yang Xu) [task:141950]
  - net/sched: Retire tcindex classifier (Jamal Hadi Salim) [bug:167507] {CVE-2023-1829}
  - xfs: don't expose internal symlink metadata buffers to the vfs (Darrick J. Wong) [bug:160702]
  - xfs: report corruption only as a regular error (Darrick J. Wong) [bug:160702]
  - rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer() (Paul E. McKenney)
  - net: sch_generic: fix the missing new qdisc assignment bug (Yunsheng Lin) [task:145134]
  - net/sched: tcindex: update imperfect hash filters respecting rcu (Pedro Tammela) [bug:164964] {CVE-2023-1281}
  - x86/cpu: Load microcode during restore_processor_state() (Borislav Petkov) [bug:166218]
  - x86/speculation: Restore speculation related MSRs during S3 resume (Pawan Gupta) [bug:166218] {CVE-2023-1637}
  - RDMA/core: Don't infoleak GRH fields (Leon Romanovsky) [bug:166212] {CVE-2021-3923}
  - kvm: initialize all of the kvm_debugregs structure before sending it to userspace (Greg Kroah-Hartman) [bug:166205] {CVE-2023-1513}
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Baisong Zhong) [bug:166188] {CVE-2023-28328}
  - tipc: set con sock in tipc_conn_alloc (Xin Long) [bug:166175] {CVE-2023-1382}
  - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (Zheng Wang) [bug:166225] {CVE-2023-1670}
  - ovl: fix use after free in struct ovl_aio_req (yangerkun) {CVE-2023-1252}
  - seq_buf: Fix overflow in seq_buf_putmem_hex() (Yun Zhou) [bug:166201] {CVE-2023-28772}
  - tipc: fix NULL deref in tipc_link_xmit() (Hoang Le) [bug:166183] {CVE-2023-1390}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.27.v2101
changelog:
  - REDHAT: mm/memcg: Free percpu stats memory of dying memcg's (Waiman Long) [bug:158690, task:139197]
  - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Gwangun Jung) [bug:170041] {CVE-2023-2248}
  - tun: avoid double free in tun_free_netdev (George Kennedy) [task:147853] {CVE-2022-4744}
  - ext4: fix use-after-free in ext4_xattr_set_entry (Baokun Li) [bug:172373] {CVE-2023-2513}
  - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (Baokun Li) [bug:172373]
  - security/selinux: use LSM stack API in setsecurity (penghuaihe) [task:151838]
  - netfilter: nf_tables: deactivate anonymous set from preparation phase (Pablo Neira Ayuso) [task:152325] {CVE-2023-32233}
  - osinfo: Converting memory size to GB from KB (Jackie Liu)
  - netrom: Fix use-after-free caused by accept on already connected socket (Hyunwoo Kim) [bug:172362] {CVE-2023-32269}
  - net: qcom/emac: Fix use after free bug in emac_remove due to race condition (Zheng Wang) [bug:172377, bug:172369] {CVE-2023-33203, CVE-2023-2483}
  - sctp: leave the err path free in sctp_stream_init to sctp_stream_free (Xin Long) [bug:170287] {CVE-2023-2177}
  - sctp: fix err handling of stream initialization (Marcelo Ricardo Leitner) [bug:170287]
  - sctp: fix memleak on err handling of stream initialization (Marcelo Ricardo Leitner) [bug:170287]
  - net: sctp: Fix negotiation of the number of data streams. (David Laight) [bug:170287]
  - sctp: convert to genradix (Kent Overstreet) [bug:170287]
  - generic radix trees (Kent Overstreet) [bug:170287]
  - xfs: verify buffer contents when we skip log replay (Darrick J. Wong) [bug:170280] {CVE-2023-2124}
  - rpmbuild: delete meaningless changelog in kernel.spec (Jiangshan Yi) [task:150163]
  - OPENEULER: Revert "ipvlan: Modify the value of ipvlan modes" (Lu Wei) [task:151834]
  - scsi: dpt_i2o: Remove obsolete driver (Arnd Bergmann) [bug:170296] {CVE-2023-2007}
  - modify the changelog in CHANGELOG.md (Jiangshan Yi)
  - bpf: fix build without barrier_nospec (Jackie Liu) [task:151751, task:151749, task:151304]
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang) [bug:170253] {CVE-2023-1989}
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang) [bug:170231] {CVE-2023-1380}
  - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (Zheng Wang) [bug:170241] {CVE-2023-1855}
  - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition (Zheng Wang) [bug:170245] {CVE-2023-1859}
  - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (Zheng Wang) [bug:170258] {CVE-2023-1990}
  - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (Zheng Wang) [bug:170264] {CVE-2023-30772}
  - bluetooth: Perform careful capability checks in hci_sock_ioctl() (Ruihan Li) [bug:170267] {CVE-2023-2002}
  - uaccess: Add speculation barrier to copy_from_user() (Dave Hansen) [bug:170275] {CVE-2023-0459}
  - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (Wei Chen) [bug:170291] {CVE-2023-2194}
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer) [bug:170300] {CVE-2023-2269}
  - prlimit: do_prlimit needs to have a speculation check (Greg Kroah-Hartman) [bug:170304] {CVE-2023-0458}
  - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (Mike Christie) [bug:170271] {CVE-2023-2162}
  - Makefile: Use .sourceversion to generate SOURCE_VERSION (Jackie Liu)
  - sched/fair: Sanitize vruntime of entity being migrated (Vincent Guittot) [task:147537]
  - sched/fair: sanitize vruntime of entity being placed (Zhang Qiao) [task:147537]
  - kobject: Fix slab-out-of-bounds in fill_kobj_path() (Wang Hai) [task:147538]
  - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Clement Lecigne) [task:147853] {CVE-2023-0266}
  - arm64: Do not forget syscall when starting a new thread. (Francis Laniel) [task:148824]
  - btrfs: fix race between quota disable and quota assign ioctls (Filipe Manana) [task:147853] {CVE-2023-1611}
  - btrfs: qgroup: remove one-time use variables for quota_root checks (Marcos Paulo de Souza) [task:147853]
  - Fix double fget() in vhost_net_set_backend() (Al Viro) [task:147853] {CVE-2023-1838}
  - binder: Address corner cases in deferred copy and fixup (Alessandro Astone) [bug:161123] {CVE-2023-20938}
  - binder: fix pointer cast warning (Arnd Bergmann) [bug:161123] {CVE-2023-20938}
  - binder: defer copies of pre-patched txn data (Todd Kjos) [bug:161123] {CVE-2023-20938}
  - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 (Alessandro Astone) [bug:161123] {CVE-2023-20938}
  - binder: read pre-translated fds from sender buffer (Todd Kjos) [bug:161123] {CVE-2023-20938}
  - binder: avoid potential data leakage when copying txn (Todd Kjos) [bug:161123] {CVE-2023-20938}
  - ANDROID: binder: sync binder driver with android-q-release (Jackie Liu)
  - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Salvatore Bonaccorso) [bug:161148] {CVE-2022-27672}
  - x86/speculation: Identify processors vulnerable to SMT RSB predictions (Tom Lendacky) [bug:161148] {CVE-2022-27672}
  - x86/bugs: Report AMD retbleed vulnerability (Alexandre Chartre) [bug:161148] {CVE-2022-27672}
  - usb: musb: Fix musb_gadget.c rxstate overflow bug (Robin Guo)
  - staging: vt6655: fix potential memory leak (Nam Cao)
  - scsi: ses: Handle enclosure with just a primary component gracefully (Jiri Kosina) [task:147721]
  - scsi: ses: Don't attach if enclosure has no components (James Bottomley) [task:147721]
  - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (Tomas Henzl) [task:147721]
  - scsi: ses: Fix possible desc_ptr out-of-bounds accesses (Tomas Henzl) [task:147721]
  - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (Tomas Henzl) [task:147721]
  - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (Tomas Henzl) [task:147721]
  - Revert "scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process" (Jackie Liu) [task:147721]
  - Revert "scsi: ses: Fix crash caused by kfree an invalid pointer" (Jackie Liu) [task:147721]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.28.v2101
changelog:
  - NETSWIFT: ngbevf: set release version 1.2.0 (luoqing) [task:157307]
  - NETSWIFT: ngbevf: Modify print level (zhongxiangji) [task:157307]
  - NETSWIFT: ngbevf: FIX:fix bug that vf promisc not work (zhongxiangji) [task:157307]
  - NETSWIFT: ngbevf: FIX : make sure when vf load pf can not remove sriov (mengyuanlou) [task:157307]
  - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Hangyu Hua) [task:178770] {CVE-2023-35788}
  - nvme: force set affinity for nvme when config use_interrupt_adaptation (huhai) [task:155820]
  - genirq: Introduce irq_set_affinity_force() to force set interrupt affinity to CPUs (huhai) [task:155820]
  - RDMA/cma: Do not change route.addr.src_addr.ss_family (Jason Gunthorpe) [bug:170284] {CVE-2023-2176}
  - RDMA/core: Refactor rdma_bind_addr (Patrisious Haddad) [bug:170284] {CVE-2023-2176}
  - RDMA/cma: Do not change route.addr.src_addr outside state checks (Jason Gunthorpe) [bug:170284] {CVE-2023-2176}
  - RDMA/cma: Make the locking for automatic state transition more clear (Jason Gunthorpe) [bug:170284] {CVE-2023-2176}
  - Revert "RDMA/cma: Simplify rdma_resolve_addr() error flow" (Parav Pandit) [bug:170284] {CVE-2023-2176}
  - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests (Jason Gunthorpe) [bug:170284] {CVE-2023-2176}
  - fs/proc: task_mmu.c: don't read mapcount for migration entry (Yang Shi) [bug:166215] {CVE-2023-1582}
  - Makefile: Ignore debian and rpmbuild directory (Jackie Liu)
  - xfs: fix reflink source file racing with directio writes (Darrick J. Wong) [task:57649]
  - xfs: force writes to delalloc regions to unwritten (Darrick J. Wong) [task:57649]
  - cifs: improve read performance for page size 64KB & cache=strict & vers=2.1+ (Jones Syue) [bug:175721]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.29.v2101
changelog:
  - security/box: add check inode point when check box dir (mengdehui) [bug:179672]
  - config: remove CONFIG_SECURITY_BOX_ENABLED_ALWAYS (mengdehui) [bug:179672]
  - security/box: set BOX_ENABLED_ALWAYS default n (mengdehui) [bug:179672]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.30.v2101
changelog:
  - ext4: Fix rec_len verify error (Shida Zhang) [task:165596]
  - backport-tools: add release-stable-kernel tool for SP1/SP2 (Jackie Liu)
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE (Pablo Neira Ayuso) [bug:186690] {CVE-2023-3117}
  - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela) [bug:185228] {CVE-2023-3611}
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan) [bug:185232] {CVE-2023-3776}
  - net/sched: cls_u32: Fix reference counter leak leading to overflow (Lee Jones) [bug:185223] {CVE-2023-3609}
  - net: sched: remove NET_CLS_IND config option (Jiri Pirko) [bug:18522]
  - arm64: Fix race condition on PG_dcache_clean in __sync_icache_dcache() (Catalin Marinas) [task:167147]
  - irqchip/gic-v3-its: Enable RESEND_WHEN_IN_PROGRESS for LPIs (James Gowans) [bug:184935]
  - genirq: Allow fasteoi handler to resend interrupts on concurrent handling (James Gowans) [bug:184935]
  - genirq: Expand doc for PENDING and REPLAY flags (James Gowans) [bug:184935]
  - genirq/PM: Introduce IRQCHIP_ENABLE_WAKEUP_ON_SUSPEND flag (Maulik Shah) [bug:184935]
  - genirq: Provide interrupt injection mechanism (Thomas Gleixner) [bug:184935]
  - net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan) [bug:186702] {CVE-2023-3812}
  - tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS (Yunjian Wang) [task:122626]
  - bpf, cpumap: Make sure kthread is running before map update returns (Hou Tao) [task:166213]
  - bpf: cpumap: Fix memory leak in cpu_map_update_elem (Pu Lehui) [task:166213]
  - neighbour: delete neigh_lookup_nodev as not used (Leon Romanovsky) [bug:182698]
  - Remove DECnet support from kernel (Leon Romanovsky) [bug:182698] {CVE-2023-3338}
  - ext4: fix potential htree corruption when growing large_dir directories (Theodore Ts'o)
  - ext4: fix potential htree index checksum corruption (Theodore Ts'o)
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Thadeu Lima de Souza Cascardo) [bug:182682] {CVE-2023-35001}
  - ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) {CVE-2023-0386}
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb (t.feng) [bug:181310] {CVE-2023-3090}
  - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition (Zheng Wang) [bug:179181] {CVE-2023-33288}
  - gfs2: Don't deref jdesc in evict (Bob Peterson) [bug:179231] {CVE-2023-3212}
  - swap: fix do_swap_page() race with swapoff (Miaohe Lin) [task:160285]
  - ixgbe: initialize the LED link active for LED blink support (Li ZhiGang) [task:146678]
  - PCI: pciehp: Cancel bringup sequence if card is not present (Rongguang Wei) [task:127145]
  - arm64/config: CONFIG_ARM_SPE_PMU=m (Jackie Liu)
  - can: j1939: j1939_session_destroy(): fix memory leak of skbs (Fedor Pchelkin) {CVE-2022-3633}
  - media: vivid: dev->bitmap_cap wasn't freed in all cases (Hans Verkuil) {CVE-2023-0615}
  - rds: rds_rm_zerocopy_callback() use list_first_entry() (Pietro Borrello) [bug:164070] {CVE-2023-1078}
  - selinux: properly handle multiple messages in selinux_netlink_send() (Paul Moore) [task:119087] {CVE-2020-10751}
  - vc_screen: modify vcs_size() handling in vcs_read() (George Kennedy) [bug:182724]
  - vc_screen: don't clobber return value in vcs_read (Thomas Weißschuh) [bug:182724]
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (George Kennedy) [bug:182724] {CVE-2023-3567}
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Takashi Iwai) {CVE-2023-31084}
  - NETSWIFT: txgbe: FIX: fix error when start and stop SRIOV (zhongxiangji) [task:160962]
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus) [bug:179189] {CVE-2023-34256}
  - fs: hfsplus: fix UAF issue in hfsplus_put_super (Dongliang Mu) [bug:179193] {CVE-2023-2985}
  - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (Zixuan Fu) [bug:179197] {CVE-2023-3111}
  - btrfs: check return value of btrfs_commit_transaction in relocation (Josef Bacik) [bug:179197]
  - memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang) [bug:179202] {CVE-2023-3141}
  - fbcon: Check font dimension limits (Samuel Thibault) [bug:179208] {CVE-2023-3161}
  - firewire: fix potential uaf in outbound_phy_packet_callback() (Chengfeng Ye) [bug:179212] {CVE-2023-3159}
  - relayfs: fix out-of-bounds access in relay_file_read (Zhang Zhengming) [bug:179216] {CVE-2023-3268}
  - kernel/relay.c: fix read_pos error when multiple readers (Pengcheng Yang) [bug:179216]
  - media: saa7134: fix use after free bug in saa7134_finidev due to race condition (Zheng Wang) [bug:179219] {CVE-2023-35823}
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang) [bug:179223] {CVE-2023-35824}
  - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (Zheng Wang) [bug:179226] {CVE-2023-35828}
  - drm/msm/dpu: Add check for pstates (Jiasheng Jiang) [bug:179237] {CVE-2023-3220}
  - HID: intel_ish-hid: Add check for ishtp_dma_tx_map (Jiasheng Jiang) [bug:179240] {CVE-2023-3358}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.31.v2101
changelog:
  - scripts/release-stable-kernel: reword release log (Zhengyuan Liu)
  - kernel.spec: support 4k kernel-package (Jiangshan Yi) [task:170770]
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis) [bug:189757] {CVE-2023-4128}
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis) [bug:189757] {CVE-2023-4128}
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis) [bug:189757] {CVE-2023-4128}
  - x86: config: add generic_phy driver support (xiaolinkui) [task:170177]
  - x86/tsc: Extend watchdog check exemption to 4-Sockets platform (Feng Tang) [task:188913]
  - x86/tsc: Disable clocksource watchdog for TSC on qualified platorms (Feng Tang) [task:188913]
  - x86/tsc: Add a timer to make sure TSC_adjust is always checked (Feng Tang) [task:188913]
  - x86/hpet: Use another crystalball to evaluate HPET usability (Thomas Gleixner) [task:188913]
  - x86/tsc: Add option to disable tsc clocksource watchdog (Juri Lelli) [task:188913]
  - x86/tsc: Respect tsc command line paraemeter for clocksource_tsc_early (Michael Zhivich)
  - selftests: forwarding: tc_actions: Use ncat instead of nc (Ido Schimmel) [task:166265]
  - act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [task:166265] {CVE-2022-4269}
  - net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [task:166265]
  - net/sched: act_mirred: refactor the handle of xmit (wenxu) [task:166265]
  - net: sched: don't expose action qstats to skb_tc_reinsert() (Vlad Buslov) [task:166265]
  - net: sched: extract qstats update code into functions (Vlad Buslov) [task:166265]
  - net: sched: protect against stack overflow in TC act_mirred (John Hurley) [task:166265]
  - net: sched: refactor reinsert action (John Hurley) [task:166265]
  - sched: fix warning of rq_cputimes (Jackie Liu)
  - ext4: fix bug_on ext4_mb_use_inode_pa (Baokun Li) [task:167485, task:162162]
  - backport-tools: release-stable-kernel: change patch title (Jiangshan Yi)
  - package: Complete the changelog details of the SP2 kernel package (Jiangshan Yi) [task:165835]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.32.v2101
changelog:
  - xfs: check sb_meta_uuid for dabuf buffer recovery (Dave Chinner) [bug:194635]
  - Revert "NFS: Don't call generic_error_remove_page() while holding locks" (wolfgang huang) [bug:194658]
  - btrfs: allow btrfs_truncate_block() to fallback to nocow for data space reservation (Qu Wenruo) [bug:189267]
  - vfs: check fd has read access in kernel_read_file_from_fd() (Matthew Wilcox (Oracle)) [bug:189270]
  - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma) [bug:189726] {CVE-2023-3772}
  - squashfs: fix xattr id and id lookup sanity checks (Phillip Lougher) [task:158827, bug:195777]
  - squashfs: add more sanity checks in id lookup (Phillip Lougher) [task:158034, bug:195777]
  - squashfs: add more sanity checks in xattr id lookup (Phillip Lougher) [task:158034, bug:195777]
  - squashfs: fix inode lookup sanity checks (Sean Nyekjaer) [task:158827, bug:195777]
  - squashfs: add more sanity checks in inode lookup (Phillip Lougher) [task:158034, bug:195777]
  - sched/rt: Optimize checking group RT scheduler constraints (Konstantin Khlebnikov) [task:173985]
  - PCI: Allow VPD access for QLogic ISP2722 (Arun Easi) [bug:187138]
  - netfilter: nft_dynset: disallow object maps (Pablo Neira Ayuso) [bug:192894] {CVE-2023-4563}
  - sched/fair: Fix unthrottle_cfs_rq() for leaf_cfs_rq list (Vincent Guittot)
  - sched/fair: Fix enqueue_task_fair warning (Vincent Guittot)
  - resolve compiling error for previous rcu patches (lifangxu) [task:174840]
  - x86/cpu: Avoid cpuinfo-induced IPIing of idle CPUs (Paul E. McKenney) [bug:190769]
  - x86/cpu: Avoid cpuinfo-induced IPI pileups (Paul E. McKenney) [bug:190769]
  - x86/cpu: Disable frequency requests via aperfmperf IPI for nohz_full CPUs (Konstantin Khlebnikov) [bug:190769]
  - rcu: Provide rcu_irq_exit_check_preempt() (Thomas Gleixner) [bug:190769]
  - rcu: Provide rcu_irq_exit_preempt() (Thomas Gleixner) [bug:190769]
  - btrfs: don't use global reserve for chunk allocation (Josef Bacik) [task:169240]
  - btrfs: add new flushing states for the delayed refs rsv (Josef Bacik) [task:169240]
  - x86/config: enable CONFIG_TCM_QLA2XXX=y (liubaolin) [task:173621]
  - mips/config: remove CONFIG_HZ_256 and keep default Timer frequency (wangxuewen) [bug:188806]
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (valis) [bug:192919] {CVE-2023-4921}
  - dm: don't stop request queue after the dm device is suspended (Ming Lei) [task:172151]
  - dm rq: don't queue request to blk-mq during DM suspend (Ming Lei) [task:172151]
  - mm/memconrtol: Revert "REDHAT: mm/memcg: Free percpu stats memory of dying memcg's" (Jiangshan Yi) [bug:191720]
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Budimir Markovic) [bug:192910] {CVE-2023-4623}
  - config/x86: add debug config support for xfstest (Shida Zhang) [bug:189811]
  - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() (Zixuan Fu) [task:162162] {CVE-2023-4459}
  - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long)
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim) [bug:189761] {CVE-2023-40283}
  - ext4: add check to prevent attempting to resize an fs with sparse_super2 (Josh Triplett) [task:171003, bug:190516]
  - ext4: add reserved GDT blocks check (Zhang Yi) [bug:190521, task:171003]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.33.v2101
changelog:
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [task:177236] {CVE-2023-42753}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.34.v2101
changelog:
  - Revert "KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()" (chentao)
  - Revert "mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse" (lijun)
  - Revert "integrity: Define a trusted platform keyring" (lijun)
  - Revert "integrity: Load certs to the platform keyring" (lijun)
  - Revert "efi: Add EFI signature data types" (lijun)
  - Revert "efi: Add an EFI signature blob parser" (lijun)
  - Revert "efi: Import certificates from UEFI Secure Boot" (lijun)
  - Revert "efi: Allow the "db" UEFI variable to be suppressed" (lijun)
  - Revert "ima: Support platform keyring for kernel appraisal" (lijun)
  - Revert "ima: Use inode_is_open_for_write" (lijun)
  - Revert "x86/efi: move common keyring handler functions to new file" (lijun)
  - Revert "kexec, KEYS: Make use of platform keyring for signature verify" (lijun)
  - Revert "PKCS#7: Refactor verify_pkcs7_signature()" (lijun)
  - Revert "certs: Add wrapper function to check blacklisted binary hash" (lijun)
  - Revert "certs: Replace K{U,G}IDT_INIT() with GLOBAL_ROOT_{U,G}ID" (lijun)
  - Revert "certs: Add EFI_CERT_X509_GUID support for dbx entries" (lijun)
  - ipv4: avoid using shared IP generator for connected sockets (Eric Dumazet) [task:179316, task:160493] {CVE-2020-36516}
  - char: pcmcia: remove all the drivers (Jiri Slaby) [task:177573] {CVE-2022-44033}
  - nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect (Krzysztof Kozlowski) [task:179318] {CVE-2021-38208}
  - xfs: drop submit side trans alloc for append ioends (Brian Foster) [task:168909]
  - xfs: turn io_append_trans into an io_private void pointer (Christoph Hellwig) [task:168909]
  - xfs: refactor the ioend merging code (Christoph Hellwig) [task:168909]
  - xfs: simplify xfs_ioend_can_merge (Christoph Hellwig) [task:168909]
  - xfs: allow merging ioends over append boundaries (Christoph Hellwig) [task:168909]
  - xfs: merge adjacent io completions of the same type (Darrick J. Wong) [task:168909]
  - xfs: remove unused m_data_workqueue (Darrick J. Wong) [task:168909]
  - xfs: implement per-inode writeback completion queues (Darrick J. Wong) [task:168909]
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO (Lee, Chun-Yi) {CVE-2023-31083}
  - tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith) {CVE-2023-1206}
  - xen/netback: Fix buffer overrun triggered by unusual packet (Ross Lagerwall) {CVE-2023-34319}
  - x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD)) [task:179857] {CVE-2023-20593}
  - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (xiaolinkui) [bug:195544]
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() (Hyunwoo Kim) [task:176709] {CVE-2022-45887}
  - Revert "NFS: Don't interrupt file writeout due to fatal errors" (ChenXiaoSong) [task:198290]
  - Revert "USB: core: Don't hold device lock while reading the "descriptors" sysfs file" (Hongyu Xie) [task:179861] {CVE-2023-37453}
  - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Hyunwoo Kim) [task:179858] {CVE-2022-45919}
  - certs: Add EFI_CERT_X509_GUID support for dbx entries (Eric Snowberg) [task:179285] {CVE-2020-26541}
  - certs: Replace K{U,G}IDT_INIT() with GLOBAL_ROOT_{U,G}ID (Mickaël Salaün) [task:179285] {CVE-2020-26541}
  - certs: Add wrapper function to check blacklisted binary hash (Nayna Jain) [task:179285] {CVE-2020-26541}
  - PKCS#7: Refactor verify_pkcs7_signature() (Thiago Jung Bauermann) [task:179285] {CVE-2020-26541}
  - kexec, KEYS: Make use of platform keyring for signature verify (Kairui Song) [task:179285] {CVE-2020-26541}
  - x86/efi: move common keyring handler functions to new file (Nayna Jain) [task:179285] {CVE-2020-26541}
  - ima: Use inode_is_open_for_write (Nikolay Borisov) [task:179285] {CVE-2020-26541}
  - ima: Support platform keyring for kernel appraisal (Nayna Jain) [task:179285] {CVE-2020-26541}
  - efi: Allow the "db" UEFI variable to be suppressed (Josh Boyer) [task:179285] {CVE-2020-26541}
  - efi: Import certificates from UEFI Secure Boot (Josh Boyer) [task:179285] {CVE-2020-26541}
  - efi: Add an EFI signature blob parser (Dave Howells) [task:179285] {CVE-2020-26541}
  - efi: Add EFI signature data types (Dave Howells) [task:179285] {CVE-2020-26541}
  - integrity: Load certs to the platform keyring (Nayna Jain) [task:179285] {CVE-2020-26541}
  - integrity: Define a trusted platform keyring (Nayna Jain) [task:179285] {CVE-2020-26541}
  - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Jann Horn) [bug:144320] {CVE-2022-42703}
  - KVM: nVMX: add missing consistency checks for CR0 and CR4 (Paolo Bonzini) [task:179282] {CVE-2023-30456}
  - ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng) [task:179901] {CVE-2023-31085}
  - remove the lightnvm subsystem (Christoph Hellwig) [task:179254] {CVE-2022-2991}
  - media: dvb-core: Fix use-after-free due on race condition at dvb_net (Hyunwoo Kim) [task:179859] {CVE-2022-45886}
  - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() (Vitaly Kuznetsov) [task:179292] {CVE-2022-2153}
  - USB: ene_usb6250: Allocate enough memory for full object (Kees Cook) [task:166857] {CVE-2023-45862}
  - media: usb: siano: Fix warning due to null work_func_t function pointer (Duoming Zhou) [bug:189733] {CVE-2023-4132}
  - media: usb: siano: Fix use after free bugs caused by do_submit_urb (Duoming Zhou) [bug:189733] {CVE-2023-4132}
  - Revert "block: move blk_exit_queue into __blk_release_queue" (zhanggenjian) [task:177423]
  - Revert "block: free sched's request pool in blk_cleanup_queue" (zhanggenjian) [task:177423]
  - Revert "blk-mq: remove WARN_ON(!q->elevator) from blk_mq_sched_free_requests" (zhanggenjian) [task:177423]
  - Revert "block: adjust the position of the code section" (zhanggenjian) [task:177423]
  - mm/munlock: delete munlock_vma_pages_all(), allow oomreap (Hugh Dickins) [bug:163612, bug:188493, bug:188513, bug:189316]
  - tpm: add TCM2.0 support in tpm_tis_spi (Li ZhiGang) [task:175234]
  - ipv6: do not leave garbage in rt->fib6_metrics (Eric Dumazet) [task:178045]
  - netfilter: xt_u32: validate user space input (Wander Lairson Costa) [bug:197488] {CVE-2023-39192}
  - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [bug:197492] {CVE-2023-39193}
  - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma) [bug:197496] {CVE-2023-39194}
  - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() (Zixuan Fu) [bug:189769] {CVE-2023-4387}
  - fs: jfs: fix possible NULL pointer dereference in dbFree() (Zixuan Fu) [bug:189765] {CVE-2023-4385}
  - cec-api: prevent leaking memory through hole in structure (Hans Verkuil) [task:157172, bug:197484] {CVE-2020-36766}
  - ipv4: fix null-deref in ipv4_link_failure (Kyle Zeng) [task:177575] {CVE-2023-42754}
  - gmjstcm: delete SMO0768 from TCM1 spi device id (Li ZhiGang) [task:175749]
  - netfilter: nft_exthdr: Search chunks in SCTP packets only (Phil Sutter) [bug:192914]
  - netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian (Stephen Suryaputra) [bug:192914]
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal) [bug:192914] {CVE-2023-4881}
  - netfilter: nft_exthdr: Fix for unsafe packet data read (Phil Sutter) [bug:192914]
  - netfilter: nft_exthdr: Support SCTP chunks (Phil Sutter) [bug:192914]
  - netfilter: nf_tables: add support for matching IPv4 options (Stephen Suryaputra) [bug:192914]
  - media: mceusb: Use USB_DIR_IN in read request (Hongyu Xie) [task:179257] {CVE-2022-3903}
  - media: mceusb: fix control-message timeouts (Johan Hovold) [bug:150405]
  - iomap: Set all uptodate bits for an Uptodate page (Matthew Wilcox (Oracle)) [bug:197566]
  - iomap: Use kzalloc to allocate iomap_page (Matthew Wilcox (Oracle)) [bug:197566]
  - igb: set max size RX buffer when store bad packet is enabled (Radoslaw Tyl) {CVE-2023-45871}
  - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) {CVE-2023-39189}
  - net/sched: Retire rsvp classifier (Jamal Hadi Salim) [bug:196033] {CVE-2023-42755}
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima) [bug:196022] {CVE-2023-4622}
  - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet) [bug:196026] {CVE-2023-42752}
  - ext4: prevent partial update of the extent blocks (Zhang Yi) [task:167485]
  - ext4: check for inconsistent extents between index and leaf block (Zhang Yi) [task:167485]
  - ext4: check for out-of-order index extents in ext4_valid_extent_entries() (Zhang Yi) [task:167485]
  - ext4: flush s_error_work before journal destroy in ext4_fill_super (yangerkun) [task:167485]
  - ext4: fix e2fsprogs checksum failure for mounted filesystem (Jan Kara) [task:167485]
  - ext4: always panic when errors=panic is specified (Ye Bin) [task:167485]
  - ext4: fix ext4_error_err save negative errno into superblock (Ye Bin) [task:167485]
  - ext4: fix timer use-after-free on failed mount (Jan Kara) [task:167485]
  - ext4: remove set but not used variable 'es' in ext4_jbd2.c (Jason Yan) [task:167485]
  - ext4: remove set but not used variable 'es' (Jason Yan) [task:167485]
  - ext4: don't try to processed freed blocks until mballoc is initialized (Theodore Ts'o) [task:167485]
  - ext4: drop ext4_handle_dirty_super() (Jan Kara) [task:167485]
  - ext4: use sbi instead of EXT4_SB(sb) in ext4_update_super() (Jan Kara) [task:167485]
  - ext4: save error info to sb through journal if available (Jan Kara) [task:167485]
  - ext4: protect superblock modifications with a buffer lock (Jan Kara) [task:167485]
  - ext4: drop sync argument of ext4_commit_super() (Jan Kara) [task:167485]
  - ext4: combine ext4_handle_error() and save_error_info() (Jan Kara) [task:167485]
  - ext4: defer saving error info from atomic context (Jan Kara) [task:167485]
  - ext4: simplify ext4 error translation (Jan Kara) [task:167485]
  - ext4: move functions in super.c (Jan Kara) [task:167485]
  - ext4: make ext4_abort() use __ext4_error() (Jan Kara) [task:167485]
  - ext4: standardize error message in ext4_protect_reserved_inode() (Jan Kara) [task:167485]
  - ext4: save all error info in save_error_info() and drop ext4_set_errno() (Theodore Ts'o) [task:167485]
  - ext4: save the error code which triggered an ext4_error() in the superblock (Theodore Ts'o) [task:167485]
  - ext4: remove redundant sb checksum recomputation (Jan Kara) [task:167485]
  - ext4: add ext3 report error to userspace by netlink (lijinlin) [task:167485]
  - ext4: Fix not report exception message when mount with errors=continue (Ye Bin) [task:167485]
  - ext4: don't remount read-only with errors=continue on reboot (Jan Kara) [task:167485]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.35.v2101
changelog:
  - OPENEULER: xhci: fix USB xhci controller issue (Longfang Liu) [task:182993]
  - x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys (Dheeraj Kumar Srivastava) [task:166857, task:182934]
  - sch_netem: fix issues in netem_change() vs get_dist_table() (Eric Dumazet) [task:182934]
  - sch_netem: acquire qdisc lock in netem_change() (Eric Dumazet) [task:166857, task:182934]
  - netem: fix zero division in tabledist (Aleksandr Nogikh)
  - cgroup: Do not corrupt task iteration when rebinding subsystem (Xiu Jianfeng) [task:166857, task:182934]
  - cgroup: Make rebind_subsystems() disable v2 controllers all at once (Waiman Long)
  - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (huhai) [task:184636]
  - xen/events: replace evtchn_rwlock with RCU (Juergen Gross) {CVE-2023-34324}
  - xen/events: don't unmask an event channel when an eoi is pending (Juergen Gross) [task:158827]
  - xen/events: don't use chip_data for legacy IRQs (Juergen Gross)
  - XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information. (Thomas Gleixner) [task:157358]
  - lib/stackdepot.c: fix global out-of-bounds in stack_slabs (Alexander Potapenko) [task:155707, task:183063]
  - scsi: hisi_sas: Fix normally completed I/O analysed as failed (Xingui Yang) [task:182978]
  - drm/atomic-helper: Bump vblank timeout to 100 ms (Linus Walleij) [task:182959]
  - net: sched: fix NULL pointer dereference in mq_attach (Zhengchao Shao) [task:183053]
  - mm: disable kernelcore=mirror when no mirror memory (Ma Wupeng) [task:182939]
  - mm, sl[aou]b: guarantee natural alignment for kmalloc(power-of-two) (Vlastimil Babka) [task:182892]
  - iommu/dma: Fix MSI reservation allocation (Marc Zyngier) [task:183064]
  - of: overlay: kmemleak in dup_and_fixup_symbol_prop() (Frank Rowand) [task:183064]
  - bonding: add sending arp and NS packets on each bonding slave interface (Yun Lu) [task:181529]
  - Bonding: split bond_handle_vlan from bond_arp_send (Hangbin Liu) [task:181529]
  - ipv6: separate ndisc_ns_create() from ndisc_send_ns() (Hangbin Liu) [task:181529]
  - ipv6: Fix use of anycast address with loopback (David Ahern) [task:99622, task:183477]
  - ipv6: Create init helper for fib6_nh (user) [task:99622, task:183477]
  - net: nfc: Fix use-after-free caused by nfc_llcp_find_local (Lin Ma) [task:179856] {CVE-2023-3863}
  - nfc: llcp: simplify llcp_sock_connect() error paths (Krzysztof Kozlowski) [task:179856]
  - nfc: llcp: nullify llcp_sock->dev on connect() error paths (Krzysztof Kozlowski) [task:179856]
  - nfc: Fix to check for kmemdup failure (Aditya Pakki) [task:179856]
  - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE (Sean Christopherson) [task:182171]
  - KVM: fix overflow of zero page refcount with ksm running (Zhuang Yanying) [task:157172]
  - ext4: fix check to prevent false positive report of incorrect used inodes (Zhang Yi) [bug:198263, bug:197767]
  - ravb: Fix use-after-free issue in ravb_tx_timeout_work() (Yoshihiro Shimoda) [task:181443] {CVE-2023-35827}
  - kallsyms: fix KYLIN_UNEXPORT_SYMBOLS logic error in kallsyms_on_each_symbol (xuping) [task:121424]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.36.v2101
changelog:
  - dm thin metadata: check fail_io before using data_sm (Li Lingfeng) [task:182982]
  - dm space maps: improve performance with inc/dec on ranges of blocks (Joe Thornber) [task:182982]
  - dm: don't lock fs when the map is NULL during suspend or resume (Li Lingfeng) [task:182983]
  - dm: don't lock fs when the map is NULL in process of resume (Li Lingfeng) [task:182983]
  - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (Jie Wang) [task:182948]
  - drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer (Lu Yao) [task:184449]
  - ext4: forbid commit inconsistent quota data when errors=remount-ro (Ye Bin) [task:183005]
  - quota: fixup *_write_file_info() to return proper error code (Yangtao Li) [task:183005]
  - dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client (Li Lingfeng) [task:183052]
  - dm bufio: do buffer cleanup from a workqueue (Mikulas Patocka) [task:183052]
  - dm bufio: introduce a global cache replacement (Mikulas Patocka) [task:183052]
  - dm bufio: introduce a global queue (Mikulas Patocka) [task:183052]
  - dm bufio: refactor adjust_total_allocated (Mikulas Patocka) [task:183052]
  - dm bufio: call adjust_total_allocated from __link_buffer and __unlink_buffer (Mikulas Patocka) [task:183052]
  - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (Zhihao Cheng) [task:183052]
  - dm thin metadata: add wrappers for managing write locking of metadata (Mike Snitzer) [task:183052]
  - dm: add disk before alloc dax (Li Lingfeng) [task:183060]
  - ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg) [task:188435]
  - ipmi: fix SSIF not responding under certain cond. (Zhang Yuchen) [task:188418]
  - ipmi_ssif: Rename idle state and check (Corey Minyard) [task:188419]
  - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx (Ilpo Järvinen) [task:188423]
  - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (Ilpo Järvinen) [task:188424]
  - af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). (Kuniyuki Iwashima) [task:188425]
  - of: Fix modalias string generation (Miquel Raynal) [task:188428]
  - loop: loop_set_status_from_info() check before assignment (Zhong Jinghua) [task:182968]
  - loop: Check for overflow while configuring loop (Siddh Raman Pant) [task:162162]
  - nfsd: Remove incorrect check in nfsd4_validate_stateid (Trond Myklebust) [task:184474]
  - nfsd4: kill warnings on testing stateids with mismatched clientids (J. Bruce Fields) [task:184474]
  - jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (Zhihao Cheng) [task:187896]
  - EULER: net: hns: fix wrong head when modify the tx feature when sending packets (Yonglong Liu) [task:182947]
  - net/packet: convert po->auxdata to an atomic flag (Eric Dumazet) [task:188433]
  - net/packet: convert po->origdev to an atomic flag (Eric Dumazet) [task:188434]
  - dccp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima) [task:188412]
  - tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct(). (Kuniyuki Iwashima) [task:188412]
  - udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). (Kuniyuki Iwashima) [task:188412]
  - nvmet: nul-terminate the NQNs passed in the connect command (Christoph Hellwig) [task:189180] {CVE-2023-6121}
  - KVM: arm64: Fix clean dcache when vcpu is 0 (zhanghao1) [task:186056]
  - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. (Kuniyuki Iwashima) [task:188414]
  - net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues(). (Kuniyuki Iwashima) [task:188413]
  - sctp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima) [task:188412]
  - NFS: make sure open context mode have FMODE_EXEC when file open for exec (ChenXiaoSong) [task:187717] {CVE-2022-24448}
  - NFSv4: fix open failure with O_ACCMODE flag (ChenXiaoSong) [task:187717] {CVE-2022-24448}
  - Revert "NFSv4: Handle the special Linux file open access mode" (ChenXiaoSong) [task:187717] {CVE-2022-24448}
  - nvmet: fix setting ns queue's segment boundary (pengcan) [task:187823]
  - Revert "Revert "nvmet: fix building bvec from sg list"" (pengcan) [task:187823]
  - config: disable unprivileged eBPF by default (chenyuan) [task:178019, task:186859]
  - ovl: adhere to the vfs_ vs. ovl_do_ conventions for xattrs (Miklos Szeredi) [task:186656] {CVE-2023-32629}
  - net: add vlan_get_protocol_and_depth() helper (Eric Dumazet) [task:182970]
  - net: tap: check vlan with eth_type_vlan() method (Menglong Dong) [task:182970]
  - perf/cgroups: Install cgroup events to correct cpuctx (Song Liu) [task:184204]
  - perf/core: Fix cgroup event list management (Namhyung Kim) [task:184204]
  - perf/core: Optimize perf_install_in_event() (Peter Zijlstra) [task:184204]
  - perf: Rework perf_event_exit_event() (Peter Zijlstra) [task:184204]
  - EULER: perf: Revert "perf: Paper over the hw.target problems" (Yang Jihong) [task:184204]
  - perf: Fix function pointer case (Peter Zijlstra) [task:184204]
  - perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong) [task:184204]
  - perf/core: Fix the same task check in perf_event_set_output (Kan Liang) [task:184204]
  - perf: Fix possible memleak in pmu_dev_alloc() (Chen Zhongjin) [task:184204]
  - perf/core: Fix address filter parser for multiple filters (Adrian Hunter) [task:184204]
  - perf: Fix list corruption in perf_cgroup_switch() (Song Liu) [task:184204]
  - perf/core: Avoid put_page() when GUP fails (Greg Thelen) [task:184204]
  - events: Reuse value read using READ_ONCE instead of re-reading it (Baptiste Lepers) [task:184204]
  - perf: Fix data race between pin_count increment/decrement (Marco Elver) [task:184204]
  - perf/core: Disable page faults when getting phys address (Jiri Olsa) [task:184204]
  - perf/ioctl: Add check for the sample_period value (Ravi Bangoria) [task:184204]
  - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Jozsef Kadlecsik) [bug:195544]
  - Revert "netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test" (xiaolinkui) [bug:195544]
  - ipv6: Fix use of anycast address with loopback (David Ahern) [task:184541, task:183477]
  - ipv6: Create init helper for fib6_nh (David Ahern) [task:184541, task:183477]
  - net/ipv6: Do not reset nl_net in ip6_route_info_create (David Ahern) [task:184541, task:183477]
  - ipv6: Move setting default metric for routes (David Ahern) [task:184541, task:183477]
  - net: rtmsg_to_fib6_config() - use new style struct initializer instead of memset (Maciej Żenczykowski) [task:184541, task:183477]
  - Revert "ipv6: Create init helper for fib6_nh" (luoqing) [task:183477]
  - Revert "ipv6: Fix use of anycast address with loopback" (luoqing) [task:183477]
  - objtool: Don't fail on missing symbol table (Josh Poimboeuf) [task:185741]
  - OPENEULER: irqchip: gic-v3: Collection table support muti pages (wangwudi) [task:183007]
  - tty: tty_jobctrl: fix pid memleak in disassociate_ctty() (Yi Yang) [task:182946]
  - random: fix data race on crng_node_pool (Eric Biggers) [task:97875]
  - ext4: fix leaking sysfs kobject after failed mount (Eric Biggers)
  - nvmet: set loop queue's segment boundary mask as PAGE_SIZE - 1 (pengcan) [task:174281, task:175051, task:175046, bug:195690, bug:195682, bug:195676]
  - Revert "nvmet: fix building bvec from sg list" (pengcan) [task:174281, task:175051, task:175046, bug:195690, bug:195682, bug:195676]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.37.v2101
changelog:
  - af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (Eric Dumazet) [task:198156]
  - tcm: support tpmrm function of ax99100_spi interface TCM module (jiangxiujie) [task:198010]
  - perf: Fix perf_event_validate_size() (Peter Zijlstra) [task:199635] {CVE-2023-6931}
  - netfilter: nf_tables: Reject tables of unsupported family (Phil Sutter) [task:196095] {CVE-2023-6040}
  - USB: serial: pl2303: fix line-speed handling on newer chips (Johan Hovold) [bug:211186]
  - USB: serial: pl2303: add support for PL2303HXN (Charles Yeh) [bug:211186]
  - USB: serial: pl2303: fix tranceiver suspend mode (Johan Hovold) [bug:211186]
  - USB: serial: pl2303: fix non-supported xon/xoff (Johan Hovold) [bug:211186]
  - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (Sharath Srinivasan) [task:198453] {CVE-2024-23849}
  - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() (Tuo Li) [task:198457] {CVE-2024-24855}
  - dm: limit the number of targets and parameter size area (Mikulas Patocka) [task:198455] {CVE-2023-52429}
  - dm ioctl: log an error if the ioctl structure is corrupted (Mikulas Patocka) [task:198455]
  - jfs: fix log->bdev_handle null ptr deref in lbmStartIO (Lizhi Xu) [task:196809]
  - scsi: fcoe: pass in fcoe_rport structure instead of fc_rport_priv (Hannes Reinecke) [task:197881]
  - scsi: libfc: Whitespace cleanup in libfc.h (Hannes Reinecke) [task:197881]
  - scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs (Yihang Li) [task:196398]
  - drm/atomic: Fix potential use-after-free in nonblocking commits (Daniel Vetter) [task:196093] {CVE-2023-51043}
  - drm/amdgpu: Fix potential fence use-after-free v2 (shanzhulig) [task:196092] {CVE-2023-51042}
  - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (Krzysztof Kozlowski) [task:196011] {CVE-2023-46343}
  - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (Dan Carpenter) [task:196363] {CVE-2024-0607}
  - block: fix NULL pointer dereference in account statistics with IDE (Logan Gunthorpe) [task:196111]
  - block: account statistics for passthrough requests (Logan Gunthorpe) [task:196111]
  - machine_t: Limit specific architecture judgment functions (Jackie Liu)
  - net: hns3: fix reset delay time to avoid configuration timeout (Jie Wang) [task:182918]
  - stmmac: remove is_ft_mcu_ready when getting mac addr from nvmem (luyun) [task:18023, bug:210342]
  - smb: client: fix potential OOB in smb2_dump_detail() (Paulo Alcantara) [task:195442] {CVE-2023-6610}
  - smb: client: fix OOB in receive_encrypted_standard() (Paulo Alcantara) [task:196094] {CVE-2024-0565}
  - media: v4l2-mem2mem: fix epoll() by calling poll_wait first (Hans Verkuil) [task:193171]
  - net/sched: cbs: Fix not adding cbs instance to list (Vinicius Costa Gomes) [task:193171]
  - sctp: fix potential deadlock on &net->sctp.addr_wq_lock (Chengfeng Ye) [task:196364] {CVE-2024-0639}
  - tty: fix hang on tty device with no_room set (Hui Li) [task:190651]
  - ZHAOXIN: drm/qxl: remove men_bus_offset set to 0 in qxl_ttm_io_mem_reserve (leoliu-oc) [task:194089]
  - ZHAOXIN: Add support for Zhaoxin GMI SM3 Secure Hash algorithm (leoliu-oc) [task:194087]
  - Input: add bounds checking to input_set_capability() (Jeff LaBundy) [task:162162] {CVE-2022-48619}
  - signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal (Eric W. Biederman)
  - vhost: use kzalloc() instead of kmalloc() followed by memset() (Prathu Baronia) [task:193171] {CVE-2024-0340}
  - iommu/vt-d: Fix agaw for a supported 48 bit guest address width (Saeed Mirzamohammadi) [task:194968]
  - smb: client: fix OOB in smbCalcSize() (Paulo Alcantara) [task:193171] {CVE-2023-6606}
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao) [task:193171] {CVE-2023-6932}
  - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg (Hyunwoo Kim) [task:193171] {CVE-2023-51779}
  - net/rose: Fix Use-After-Free in rose_ioctl (Hyunwoo Kim) [task:193171] {CVE-2023-51782}
  - appletalk: Fix Use-After-Free in atalk_ioctl (Hyunwoo Kim) [task:193171] {CVE-2023-51781}
  - atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim) [task:193171] {CVE-2023-51780}
  - crypto: cryptd - Protect per-CPU resource by disabling BH. (Sebastian Andrzej Siewior) [task:184972]
  - ext4: turning quotas off if mount failed after enable quotas (Baokun Li) [task:184977]
  - OPENEULER: x86/kprobes: Fix the error judgment for debug exceptions (Li Huafei) [task:184976]
  - ipmi_si: fix a memleak in try_smi_init() (Yi Yang) [task:184979]
  - quota: simplify drop_dquot_ref() (Baokun Li) [task:184966]
  - quota: fix dqput() to follow the guarantees dquot_srcu should provide (Baokun Li) [task:184966]
  - quota: add new helper dquot_active() (Baokun Li) [task:184966]
  - quota: rename dquot_active() to inode_quota_active() (Baokun Li) [task:184966]
  - quota: factor out dquot_write_dquot() (Baokun Li) [task:184966]
  - quota: add dqi_dirty_list description to comment of Dquot List Management (Chengguang Xu) [task:184966]
  - quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list (Chengguang Xu) [task:184966]
  - security/selinux: Add selinux process security attributes (chengang) [task:192443]
  - KVM: SVM: Add 5-level page table support for SVM (Wei Huang) [bug:197000]
  - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() (Hangyu Hua) [task:193171] {CVE-2023-7192}
  - OPENEULER: net: hns3: fixes a promoiscuous mode (Yun Lu) [bug:203954]
  - ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan) [task:188430]
  - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation (Linus Torvalds)
  - blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" (Ming Lei)


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.38.v2101
changelog:
  - Fix blk_mq_tags struct lock kabi issue (wolfgang huang) [task:206478]
  - OPENEULER: SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers (zhanglei) [task:205210]
  - ext4: fix underflow in ext4_max_bitmap_size() (Zhang Yi) [bug:203264]
  - ax25: Fix ax25 session cleanup problems (Duoming Zhou) [task:203789]
  - mm: fix race between MADV_FREE reclaim and blkdev direct IO read (Mauricio Faria de Oliveira) [task:162162, task:204700]
  - ring-buffer: Have saved event hold the entire event (Steven Rostedt (Google)) [task:205154]
  - ring-buffer: Do not attempt to read past "commit" (Steven Rostedt (Google)) [task:205154] {CVE-2023-52501}
  - ring-buffer: Have rb_iter_head_event() handle concurrent writer (Steven Rostedt (VMware)) [task:205154]
  - ring-buffer: Add page_stamp to iterator for synchronization (Steven Rostedt (VMware)) [task:205154]
  - ring-buffer: Have ring_buffer_empty() not depend on tracing stopped (Steven Rostedt (VMware)) [task:205154]
  - sched/rt: Fix sysctl_sched_rr_timeslice intial value (Cyril Hrubis) [task:205110]
  - sched/rt: Disallow writing invalid values to sched_rt_period_us (Cyril Hrubis) [task:205110]
  - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset (Cyril Hrubis) [task:205110]
  - net: rds: acquire refcount on TCP sockets (Tetsuo Handa) [task:205876]
  - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (Eric Dumazet) [task:205232] {CVE-2023-52502}
  - nfc: constify several pointers to u8, char and sk_buff (Krzysztof Kozlowski) [task:205232]
  - drm: Don't unref the same fb many times by mistake due to deadlock handling (Ville Syrjälä) [task:205231] {CVE-2023-52486}
  - ipv6: init the accept_queue's spinlocks in inet6_create (Zhengchao Shao) [task:205163]
  - tcp: make sure init the accept_queue's spinlocks once (Zhengchao Shao) [task:205163] {CVE-2024-26614}
  - l2tp: pass correct message length to ip6_append_data (Tom Parkin) [task:205227]
  - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells) [task:205227] {CVE-2023-52527}
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe (Dinghao Liu) [task:205220] {CVE-2023-52510}
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Wen Gu) [task:205222] {CVE-2024-26615}
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida) [task:205218] {CVE-2023-52528}
  - tomoyo: fix UAF write bug in tomoyo_write_control() (Tetsuo Handa) [task:205063] {CVE-2024-26622}
  - net: nfc: llcp: Add lock when modifying device list (Jeremy Cline) [task:205036] {CVE-2023-52524}
  - nfc: nci: assert requested protocol is valid (Jeremy Cline) [task:205032] {CVE-2023-52507}
  - Input: powermate - fix use-after-free in powermate_config_complete (Javier Carrasco) [task:204918] {CVE-2023-52475}
  - llc: Drop support for ETH_P_TR_802_2. (Kuniyuki Iwashima) [task:204916] {CVE-2024-26635}
  - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (Eric Dumazet) [task:204917] {CVE-2024-26633}
  - mm: slab: fix kmem_cache_create failed when sysfs node not destroyed (Nanyong Sun) [task:203804]
  - tty: n_gsm: check error while registering tty devices (Hillf Danton)
  - tty: n_gsm: add helpers to convert mux-num to/from tty-base (Martin Hundebøll)
  - USB: gadget: dummy-hcd: Fix errors in port-reset handling (Alan Stern)
  - bfs: extra sanity checking and static inode bitmap (Tigran Aivazian)
  - USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug (Alan Stern)
  - i2c: cadence: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201795] {CVE-2020-36784}
  - i2c: img-scb: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201797] {CVE-2020-36783}
  - i2c: sprd: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201796] {CVE-2020-36780}
  - PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter (Zhang Qilong) [task:201796] {CVE-2020-36780}
  - llc: call sock_orphan() at release time (Eric Dumazet) [task:203087] {CVE-2024-26625}
  - af_unix: fix lockdep positive in sk_diag_dump_icons() (Eric Dumazet) [task:203085] {CVE-2024-26624}
  - xen-netback: don't produce zero-size SKB frags (Jan Beulich) [task:203084] {CVE-2023-46838}
  - i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201794] {CVE-2020-36782}
  - net: sched: sch_teql: fix null-pointer dereference (Pavel Tikhomirov) [task:215813]
  - nfsd: fix use-after-free due to delegation race (J. Bruce Fields) [task:160493]
  - rpmbuild: support srpm when need (Jackie Liu) [task:201386]
  - blk-mq: fix is_flush_rq (Ming Lei) [task:199095]
  - blk-mq: fix kernel panic during iterating over flush request (Ming Lei) [task:199095]
  - block: factor out a new helper from blk_rq_init() (Yu Kuai) [task:199095]
  - blk-mq: don't grab rq's refcount in blk_mq_check_expired() (Ming Lei) [task:199095]
  - blk-mq: clearing flush request reference in tags->rqs[] (Ming Lei) [task:199095]
  - blk-mq: clear stale request in tags->rq[] before freeing one request pool (Ming Lei) [task:199095]
  - blk-mq: grab rq->refcount before calling ->fn in blk_mq_tagset_busy_iter (Ming Lei) [task:199095]
  - loop: loop_set_status_from_info() check before assignment (Zhong Jinghua) [task:192988]
  - loop: Check for overflow while configuring loop (Siddh Raman Pant) [task:192988]
  - loop: Factor out configuring loop from status (Martijn Coenen) [task:192988]
  - Revert "loop: Check for overflow while configuring loop" (zhanggenjian) [task:192988]
  - loop: properly observe rotational flag of underlying device (Holger Hoffstätte) [task:192988]
  - loop: Refactor loop_set_status() size calculation (Martijn Coenen) [task:192988]
  - loop: Factor out setting loop device size (Martijn Coenen) [task:192988]
  - loop: Remove sector_t truncation checks (Martijn Coenen) [task:192988]
  - loop: Call loop_config_discard() only after new config is applied (Martijn Coenen) [task:192988]
  - Revert "loop: loop_set_status_from_info() check before assignment" (zhanggenjian) [task:192988]
  - KVM: arm64: pmu: Reset sample period on overflow handling (Marc Zyngier) [task:197911]
  - KVM: arm/arm64: Remove pmc->bitmask (Andrew Murray) [task:197911]
  - kylin/gmjstcm:Adapting TCM1.0 to x86 (wudandan) [task:195669]
  - netfilter: nf_tables: don't skip expired elements during walk (Florian Westphal) [task:179882] {CVE-2023-4244}
  - netfilter: nft_set_rbtree: Add missing expired checks (Phil Sutter) [task:179882]
  - EDAC/thunderx: Fix possible out-of-bounds string access (Arnd Bergmann) [task:200669] {CVE-2023-52464}
  - blk-mq: fix IO hang from sbitmap wakeup race (Ming Lei)
  - Makefile: add mips and loongarch SRCARCH (Li ZhiGang) [task:199827]
  - f2fs: explicitly null-terminate the xattr list (Eric Biggers) [task:200626] {CVE-2023-52436}
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Zhipeng Lu) [task:200671] {CVE-2023-52469}
  - net: qualcomm: rmnet: fix global oob in rmnet_policy (Lin Ma) [task:200745] {CVE-2024-26597}
  - sched/membarrier: reduce the ability to hammer on sys_membarrier (Linus Torvalds) [task:200749] {CVE-2024-26602}
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Tony Lindgren) [task:200752] {CVE-2024-26600}
  - binder: signal epoll threads of self-work (Carlos Llamas) [task:200750] {CVE-2024-26606}
  - CIFS: Fix retry mid list corruption on reconnects (Pavel Shilovsky) [task:197803]
  - Bluetooth: Fix atomicity violation in {min,max}_key_size_set (Gui-Dong Han) [task:199813] {CVE-2024-24860}
  - Bluetooth: Move {min,max}_key_size debugfs into hci_debugfs_create_le (Marcel Holtmann) [task:199813]
  - Bluetooth: Add support for LE ping feature (Spoorthi Ravishankar Koppad) [task:199813]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.39.v2101
changelog:
  - tcp: fix race condition when creating child sockets from syncookies (Ricardo Dias) [task:162162]
  - mm/swap: fix race when skipping swapcache (Kairui Song) [task:210472] {CVE-2024-26759}
  - clk: Use parent node pointer during registration if necessary (Stephen Boyd) [task:215336]
  - driver core: Let dev_of_node() accept a NULL dev (Stephen Boyd) [task:215336]
  - clk: sunxi-ng: Unregister clocks/resets when unbinding (Samuel Holland) [task:212525, task:215462] {CVE-2021-47205}
  - Revert "clk: sunxi-ng: add support for the Allwinner A100 CCU" (Jiangshan Yi) [task:215462]
  - Revert "clk: sunxi-ng: Add support for the Allwinner H616 CCU" (Jiangshan Yi) [task:215462]
  - Revert "clk: sunxi-ng: Unregister clocks/resets when unbinding" (Jiangshan Yi) [task:215462]
  - clk: Add of_clk_hw_register() API for early clk drivers (Stephen Boyd) [task:212789, task:215462]
  - clk: Prepare for clk registration API that uses DT nodes (Stephen Boyd) [task:212789, task:215462]
  - securirty/kysec: fix dentry info mem leak (mengdehui) [bug:217795]
  - security/kysec: Add mount_lock when traversing mnt list (mengdehui) [bug:217795]
  - security/kysec: Add fault tolerance when sb_sec is NULL (mengdehui) [bug:217795]
  - scsi: qedf: Add pointer checks in qedf_update_link_speed() (Javed Hasan) [task:206931] {CVE-2021-47077}
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (Chun-Yi Lee) [task:194976] {CVE-2023-6270}
  - thermal: Fix NULL pointer dereferences in of_thermal_ functions (Subbaraman Narayanamurthy) [task:212533] {CVE-2021-47202}
  - tracing/trigger: Fix to return error if failed to alloc snapshot (Masami Hiramatsu (Google)) [task:212517] {CVE-2024-26920}
  - x86, relocs: Ignore relocations in .notes section (Kees Cook) [task:212412] {CVE-2024-26816}
  - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume (Omar Sandoval) [task:209259] {CVE-2024-26644}
  - PM / devfreq: Synchronize devfreq_monitor_[start/stop] (Mukesh Ojha) [task:209249] {CVE-2023-52635}
  - nilfs2: fix potential bug in end_buffer_async_write (Ryusuke Konishi) [task:210283] {CVE-2024-26685}
  - aoe: avoid potential deadlock at set_capacity (Maksim Kiselev) [task:210627] {CVE-2024-26775}
  - clk: sunxi-ng: Unregister clocks/resets when unbinding (Samuel Holland) [task:212525] {CVE-2021-47205}
  - clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock (Icenowy Zheng) [task:155707]
  - clk: sunxi-ng: Add support for the Allwinner H616 CCU (Andre Przywara) [task:212525]
  - clk: sunxi-ng: add support for the Allwinner A100 CCU (Yangtao Li) [task:212525]
  - clk: sunxi: Don't call clk_hw_get_name() on a hw that isn't registered (Stephen Boyd) [task:212525]
  - clk: sunxi-ng: v3s: add Allwinner V3 support (Icenowy Zheng) [task:212525]
  - clk: sunxi-ng: v3s: add the missing PLL_DDR1 (Icenowy Zheng) [task:153627]
  - clk: sunxi-ng: v3s: Use local parent references for CLK_FIXED_FACTOR (Chen-Yu Tsai) [task:212525]
  - clk: sunxi-ng: switch to of_clk_hw_register() for registering clks (Chen-Yu Tsai) [task:212525]
  - clk: sunxi-ng: h6: Preset hdmi-cec clock parent (Jernej Skrabec) [task:212525]
  - clk: sunxi-ng: f1c100s: fix USB PHY gate bit offset (Icenowy Zheng) [task:212525]
  - clk: sunxi-ng: add support for suniv F1C100s SoC (Mesih Kilinc) [task:212525]
  - x86/alternatives: Disable KASAN in apply_alternatives() (Kirill A. Shutemov) [task:205153] {CVE-2023-52504}
  - binder: fix race between mmput() and do_exit() (Carlos Llamas) [task:207402] {CVE-2023-52609}
  - reiserfs: Avoid touching renamed directory if parent does not change (Jan Kara) [task:207282] {CVE-2023-52591}
  - bnxt_en: Fix RX consumer index logic in the error path. (Michael Chan) [task:206925] {CVE-2021-47015}
  - bnxt_en: Reduce unnecessary message log during RX errors. (Michael Chan) [task:206925]
  - md: don't clear MD_RECOVERY_FROZEN for new dm-raid until resume (Yu Kuai) [task:210625]
  - md: Don't ignore suspended array in md_check_recovery() (Yu Kuai) [task:210625] {CVE-2024-26758}
  - vfio/pci: Lock external INTx masking ops (Alex Williamson) [task:210634] {CVE-2024-26810}
  - rt2x00: initialize last_reset (Stanislaw Gruszka) [task:207285]
  - rt2x00: clear IV's on start to fix AP mode regression (Stanislaw Gruszka) [task:207285] {CVE-2023-52595}
  - rt2x00: add restart hw (Stanislaw Gruszka) [task:207285]
  - rt2800: add pre_reset_hw callback (Stanislaw Gruszka) [task:207285]
  - rt2800: initial watchdog implementation (Stanislaw Gruszka) [task:207285]
  - rt2800: add helpers for reading dma done index (Stanislaw Gruszka) [task:207285]
  - rt2x00: allow to specify watchdog interval (Stanislaw Gruszka) [task:207285]
  - rt2x00: use different txstatus timeouts when flushing (Stanislaw Gruszka) [task:207285]
  - rt2x00: do not check for txstatus timeout every time on tasklet (Stanislaw Gruszka) [task:207285]
  - rt2800mmio: use txdone/txstatus routines from lib (Stanislaw Gruszka) [task:207285]
  - rt2800: move usb specific txdone/txstatus routines to rt2800lib (Stanislaw Gruszka) [task:207285]
  - net/smc: remove device from smcd_dev_list after failed device_add() (Julian Wiedmann) [task:207216] {CVE-2021-47143}
  - KVM: Destroy target device if coalesced MMIO unregistration fails (Sean Christopherson) [task:206929] {CVE-2021-47060}
  - KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (Kefeng Wang) [task:206929] {CVE-2021-47060}
  - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed (Sean Christopherson) [task:206929] {CVE-2021-47060}
  - ubi: Check for too small LEB size in VTBL code (Richard Weinberger) [task:212058] {CVE-2024-25739}
  - Bluetooth: Fix TOCTOU in HCI debugfs implementation (Bastien Nocera) [task:212057] {CVE-2024-24859}
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (Yuxuan Hu) [task:212059] {CVE-2024-22099}
  - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (Ziqi Zhao) [task:210651] {CVE-2023-52638}
  - net: rds: use maybe_get_net() when acquiring refcount on TCP sockets (Tetsuo Handa) [task:209413]
  - asix: fix wrong return value in asix_check_host_enable() (Pavel Skripkin) [task:206939]
  - asix: fix uninit-value in asix_mdio_read() (Pavel Skripkin) [task:206939] {CVE-2021-47101}
  - net: asix: fix uninit value bugs (Pavel Skripkin) [task:206939]
  - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command (Michal Grzedzicki) [task:205228] {CVE-2023-52500}
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Xingyuan Mo) [task:210392] {CVE-2023-7042}
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Baokun Li) [task:210360] {CVE-2024-26773}
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Baokun Li) [task:210642] {CVE-2024-26772}
  - ext4: fix double-free of blocks due to wrong extents moved_len (Baokun Li) [task:210641] {CVE-2024-26704}
  - RDMA/srpt: Support specifying the srpt_service_guid parameter (Bart Van Assche) [task:210645] {CVE-2024-26744}
  - net: ip_tunnel: prevent perpetual headroom growth (Florian Westphal) [task:210646] {CVE-2024-26804}
  - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (Oleksij Rempel) [task:210648] {CVE-2023-52637}
  - can: j1939: j1939_sk_init(): set SOCK_RCU_FREE to call sk_destruct() after RCU is done (Oleksij Rempel) [task:210648]
  - fbdev: savage: Error out if pixclock equals zero (Fullway Wang) [task:210633] {CVE-2024-26778}
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Zach O'Keefe) [task:210632] {CVE-2024-26720}
  - wifi: mac80211: fix race condition on enabling fast-xmit (Felix Fietkau) [task:210626] {CVE-2024-26779}
  - dmaengine: ti: edma: Add some null pointer checks to the edma_probe (Kunwu Chan) [task:210482] {CVE-2024-26771}
  - btrfs: dev-replace: properly validate device names (David Sterba) [task:210624] {CVE-2024-26791}
  - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter (Ryosuke Yasuoka) [task:210464] {CVE-2024-26805}
  - fbdev: sis: Error out if pixclock equals zero (Fullway Wang) [task:210465] {CVE-2024-26777}
  - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [task:210432] {CVE-2024-26743}
  - Bluetooth: Avoid potential use-after-free in hci_error_reset (Ying Hsu) [task:210462] {CVE-2024-26801}
  - ipv6: sr: fix possible use-after-free and null-ptr-deref (Vasiliy Kovalev) [task:210463] {CVE-2024-26735}
  - gtp: fix use-after-free and null-ptr-deref in gtp_newlink() (Alexander Ofitserov) [task:210471] {CVE-2024-26793}
  - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() (Vasiliy Kovalev) [task:210471]
  - ARM: ep93xx: Add terminator to gpiod_lookup_table (Nikita Shubin) [task:210473] {CVE-2024-26751}
  - dm-crypt: don't modify the data when using authenticated encryption (Mikulas Patocka) [task:210478] {CVE-2024-26763}
  - nilfs2: fix data corruption in dsync block recovery for small block sizes (Ryusuke Konishi) [task:210301] {CVE-2024-26697}
  - usb: hub: Guard against accesses to uninitialized BOS descriptors (Ricardo Cañuelo) [task:205167] {CVE-2023-52477}
  - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (Hans de Goede) [task:205219] {CVE-2023-52478}
  - NFS: Fix an Oopsable condition in __nfs_pageio_add_request() (Trond Myklebust) [task:207226] {CVE-2021-47167}
  - ip6_vti: fix slab-use-after-free in decode_session6 (Zhengchao Shao) [task:205581]
  - ip_vti: fix potential slab-use-after-free in decode_session6 (Zhengchao Shao) [task:205581]
  - xfrm: fix slab-use-after-free in decode_session6 (Zhengchao Shao) [task:205581]
  - media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run (Zheng Wang) [task:204919] {CVE-2023-52491}
  - media: platform: Add mechanism to handle jpeg hardware's locking up (Xia Jiang) [task:204919]
  - media: platform: Improve power on and power off flow (Xia Jiang) [task:204919]
  - vfio/pci: Disable auto-enable of exclusive INTx IRQ (Alex Williamson) {CVE-2024-27437}
  - genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() (Barry Song)
  - media: vimc: stream: fix build by missing dev (Jackie Liu) [task:209415]
  - virtio-blk: remove VIRTIO_BLK_F_SCSI support (Christoph Hellwig) [task:209004]
  - net: prevent mss overflow in skb_segment() (Eric Dumazet) [task:209255] {CVE-2023-52435}
  - media: vimc: streamer: if kthread_stop fails, ignore the error (Dafna Hirschfeld) [task:209314]
  - tracing: Ensure visibility when inserting an element into tracing_map (Petr Pavlu) [task:209253] {CVE-2024-26645}
  - efi/arm: Show SMBIOS bank/device location in CPER and GHES error logs (Marcin Benka) [bug:218049]
  - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (Shigeru Yoshida) [task:209216] {CVE-2024-26663}
  - sr9800: Add check for usbnet_get_endpoints (Chen Ni) [task:209210] {CVE-2024-26651}
  - inet: read sk->sk_family once in inet_recv_error() (Eric Dumazet) [task:209235] {CVE-2024-26679}
  - ppp_async: limit MRU to 64K (Eric Dumazet) [task:209233] {CVE-2024-26675}
  - netfilter: nf_tables: disallow timeout for anonymous sets (Pablo Neira Ayuso) [task:207391] {CVE-2023-52620}
  - swapfile: fix soft lockup in scan_swap_map_slots (Chen Wandun) [task:183285]
  - Revert "i40e: The state of phy may not be correct during power-on" (xiaolinkui) [task:210775]
  - kernfs: don't create a negative dentry if inactive node exists (Ian Kent) [task:210868]
  - kernfs: also call kernfs_set_rev() for positive dentry (Hou Tao) [task:210868]
  - kernfs: dont call d_splice_alias() under kernfs node lock (Ian Kent) [task:210868]
  - kernfs: use i_lock to protect concurrent inode updates (Ian Kent) [task:210868]
  - kernfs: switch kernfs to use an rwsem (Ian Kent) [task:210868]
  - kernfs: use VFS negative dentry caching (Ian Kent) [task:210868]
  - kernfs: add a revision to identify directory node changes (Ian Kent) [task:210868]
  - scsi: core: avoid preallocating big SGL for data (Ming Lei) [task:208527]
  - scsi: core: avoid preallocating big SGL for protection information (Ming Lei) [task:208527]
  - scsi: lib/sg_pool.c: improve APIs for allocating sg pool (Ming Lei) [task:208527]
  - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Kunwu Chan) [task:207382] {CVE-2023-52607}
  - powerpc/mm: fix a warning when a cache is common to PGD and hugepages (Christophe Leroy) [task:207382] {CVE-2023-52607}
  - powerpc/mm: replace hugetlb_cache by PGT_CACHE(PTE_T_ORDER) (Christophe Leroy) [task:207382] {CVE-2023-52607}
  - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (Duoming Zhou) [task:209227, task:214895] {CVE-2024-26654}
  - ALSA: sh: Fix compile warning wrt const (Takashi Iwai) [task:155707, task:214895]
  - ALSA: aica: Fix a long-time build breakage (Takashi Iwai) [task:153627, task:214895]
  - net: openvswitch: fix race on port output (Felix Huettner) [task:202729]
  - x86/kvm: Do not try to disable kvmclock if it was not enabled (Kirill A. Shutemov) [task:207214]
  - x86/kvm: Disable kvmclock on all CPUs on shutdown (Vitaly Kuznetsov) [task:207214] {CVE-2021-47110}
  - x86/kvm: Teardown PV features on boot CPU as well (Vitaly Kuznetsov) [task:206940] {CVE-2021-47112}
  - security/kysec: fix k tag java hung_task_timeout_secs (mengdehui) [bug:218233]
  - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (Sean Christopherson) [task:206928] {CVE-2021-47061}
  - KVM: use struct_size() and flex_array_size() helpers in kvm_io_bus_unregister_dev() (Rustam Kovhaev) [task:206928]
  - overflow.h: Add flex_array_size() helper (Gustavo A. R. Silva) [task:162874, task:161899]
  - jfs: fix uaf in jfs_evict_inode (Edward Adam Davis) [task:207381] {CVE-2023-52600}
  - tipc: wait and exit until all work queues are done (Xin Long) [task:207225] {CVE-2021-47163}
  - team: fix null-ptr-deref when team device type is changed (Ziyang Xuan) [task:207278] {CVE-2023-52574}
  - perf/x86/lbr: Filter vsyscall addresses (JP Kobryn) [task:205164] {CVE-2023-52476}
  - UBSAN: array-index-out-of-bounds in dtSplitRoot (Osama Muhammad) [task:207406] {CVE-2023-52603}
  - s390/ptrace: handle setting of fpc register correctly (Heiko Carstens) [task:207408] {CVE-2023-52598}
  - KVM: s390: fix setting of fpc register (Heiko Carstens) [task:207400] {CVE-2023-52597}
  - PCI: switchtec: Fix stdev_release() crash after surprise hot remove (Daniel Stodden) [task:207403] {CVE-2023-52617}
  - switchtec: Add MRPC DMA mode support (Wesley Sheng) [task:207403]
  - can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer() (Oleksij Rempel) [task:205575]
  - ceph: fix deadlock or deadcode of misusing dget() (Xiubo Li) [task:207229] {CVE-2023-52583}
  - IB/ipoib: Fix mcast list locking (Daniel Vacek) [task:207280] {CVE-2023-52587}
  - RDMA/IPoIB: Fix error code return in ipoib_mcast_join (Jack Wang) [task:207280]
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Minsuk Kang) [task:207380] {CVE-2023-52594}
  - jfs: fix array-index-out-of-bounds in diNewExt (Edward Adam Davis) [task:207379] {CVE-2023-52599}
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree (Osama Muhammad) [task:207384] {CVE-2023-52604}
  - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Herbert Xu) [task:207385] {CVE-2023-52615}
  - powerpc/lib: Validate size for vector operations (Naveen N Rao) [task:207386] {CVE-2023-52606}
  - ocfs2: Avoid touching renamed directory if parent does not change (Jan Kara) [task:207378] {CVE-2023-52590}
  - fs: ocfs2: check status values (Artem Chernyshev) [task:207378]
  - pstore/ram: Fix crash when setting number of cpus to an odd number (Weichen Chen) [task:207388] {CVE-2023-52619}
  - SUNRPC: Fix a suspicious RCU usage warning (Anna Schumaker) [task:207390] {CVE-2023-52623}
  - jfs: fix slab-out-of-bounds Read in dtSearch (Manas Ghandat) [task:207383] {CVE-2023-52602}
  - crypto: scomp - fix req->dst buffer overflow (Chengming Zhou) [task:207387] {CVE-2023-52612}
  - crypto: scompress - initialize per-CPU variables on each CPU (Sebastian Andrzej Siewior) [task:207387]
  - crypto: scompress - Use per-CPU struct instead multiple variables (Sebastian Andrzej Siewior) [task:207387]
  - crypto: scompress - return proper error code for allocation failure (Sebastian Andrzej Siewior) [task:207387]
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Pan Bian) [task:207228] {CVE-2023-52566}
  - nvme-loop: fix memory leak in nvme_loop_create_ctrl() (Wu Bo) [task:206937] {CVE-2021-47074}
  - nvme-loop: don't put ctrl on nvme_init_ctrl error (Chaitanya Kulkarni) [task:206937]
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso) [task:206383] {CVE-2024-26642}
  - llc: make llc_ui_sendmsg() more robust against bonding changes (Eric Dumazet) [task:206384] {CVE-2024-26636}
  - ACPI: tables: Simplify PPTT leaf node detection (Jeremy Linton) [task:207620]
  - cve-cal.sh: distinguish task and bug (Zhengyuan Liu)


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.40.v2101
changelog:
  - net/mlx5: No command allowed when command interface is not ready (Huy Nguyen) [task:224111]
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [task:198456] {CVE-2024-1086}
  - uio: Fix use-after-free in uio_open (Guanghui Feng) [task:209257] {CVE-2023-52439}
  - drm/amdgpu: Reset IH OVERFLOW_CLEAR bit (Friedrich Vock) [task:220691] {CVE-2024-26915}
  - LOONGSON: rtc-ls2x: fix a ls3a4000 rtc update trouble (zhangtianyang) [task:147526]
  - iavf: free q_vectors before queues in iavf_disable_vf (Nicholas Nunley) [task:212529] {CVE-2021-47201}
  - drm/amdgpu: validate the parameters of bo mapping operations more clearly (xinhui pan) [task:220691] {CVE-2024-26922}
  - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Chia-I Wu) [task:220691]
  - drm/amdgpu: check alignment on CPU page for bo map (Xℹ Ruoyao) [task:220691]
  - media: edia: dvbdev: fix a use-after-free (Zhipeng Lu) [task:220692] {CVE-2024-27043}
  - media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Hyunwoo Kim) [task:220692] {CVE-2022-45884}
  - media: dvbdev: fix error logic at dvb_register_device() (Mauro Carvalho Chehab) [task:220692]
  - media: dvbdev: Fix memleak in dvb_register_device (Dinghao Liu) [task:220692]
  - media: media/dvb: Use kmemdup rather than duplicating its implementation (Fuqian Huang) [task:220692]
  - media: dvbdev: remove double-unlock (Mauro Carvalho Chehab) [task:220692]
  - media: dvbdev: fix refcnt bug (Lin Ma) [task:220692]
  - media: dvbdev: adopts refcnt to avoid UAF (Lin Ma) [task:220692]
  - media: dvbdev: Fix memory leak in dvb_media_device_free() (Peilin Ye) [task:220692]
  - media: dvb-core: Fix double free in dvb_register_device() (Keita Suzuki) [task:220692]
  - mm: swap: fix race between free_swap_and_cache() and swapoff() (Ryan Roberts) [task:220694] {CVE-2024-26960}
  - swap: comments get_swap_device() with usage rule (Huang Ying) [task:220694]
  - virt/kvm/arm/mmu.c: fix missing asm/machine_t.h (Jiangshan Yi) [task:220688]
  - net/smc: Fix possible access to freed memory in link clear (Yacan Liu) [task:219443] {CVE-2022-48673}
  - scsi: sd: Fix sd_do_mode_sense() buffer length handling (Damien Le Moal) [task:213954] {CVE-2021-47182}
  - scsi: core: Fix scsi_mode_sense() buffer length handling (Damien Le Moal) [task:213954] {CVE-2021-47182}
  - scsi: core: Reshuffle response handling in scsi_mode_sense() (Hannes Reinecke) [task:213954] {CVE-2021-47182}
  - scsi: core: Fixup calling convention for scsi_mode_sense() (Hannes Reinecke) [task:213954] {CVE-2021-47182}
  - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [task:217548] {CVE-2024-26982}
  - clk: zynq: Prevent null pointer dereference caused by kmalloc failure (Duoming Zhou) [task:217565] {CVE-2024-27037}
  - sysv: don't call sb_bread() with pointers_lock held (Tetsuo Handa) [task:219573]
  - afs: Increase buffer size in afs_update_volume_status() (Daniil Dulov) [task:210635] {CVE-2024-26736}
  - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion (Bart Van Assche) [task:210640]
  - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio (Bart Van Assche) [task:210640] {CVE-2024-26764}
  - Bluetooth: af_bluetooth: Fix deadlock (Luiz Augusto von Dentz) [task:214134] {CVE-2024-26886}
  - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Ziyang Xuan) [task:217550] {CVE-2024-27019}
  - net/mlx5e: Prevent deadlock while disabling aRFS (Carolina Jubran) [task:217553] {CVE-2024-27014}
  - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier (ZhaoLong Wang) [task:219460] {CVE-2023-52449}
  - speakup: Avoid crash on very long word (Samuel Thibault) [task:219451] {CVE-2024-26994}
  - f2fs: fix to avoid dirent corruption (Chao Yu) [task:219461] {CVE-2023-52444}
  - apparmor: avoid crash when parsed profile name is empty (Fedor Pchelkin) [task:219459] {CVE-2023-52443}
  - powerpc/pseries/memhp: Fix access beyond end of drmem array (Nathan Lynch) [task:219457] {CVE-2023-52451}
  - powerpc/pseries/memhotplug: Quieten some DLPAR operations (Laurent Dufour) [task:219457]
  - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (Hyunwoo Kim) [task:219456] {CVE-2024-27395}
  - net: openvswitch: ovs_ct_exit to be done under ovs_lock (Tonghao Zhang) [task:219456]
  - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value (Anastasia Belova) [task:219454] {CVE-2024-27051}
  - net: gtp: Fix Use-After-Free in gtp_dellink (Hyunwoo Kim) [task:219455] {CVE-2024-27396}
  - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays (Gabor Juhos) [task:219452] {CVE-2024-26966}
  - crypto: qat - resolve race condition during AER recovery (Damian Muszynski) [task:219450] {CVE-2024-26974}
  - crypto: qat - fix double free during reset (Svyatoslav Pankratov) [task:219450]
  - txgbe: Fix handling of NAPI budget when multiple queues are enabled per vector (xiaolinkui) [task:217379]
  - ngbe: Fix handling of NAPI budget when multiple queues are enabled per vector (xiaolinkui) [task:217379]
  - printk: disable optimistic spin during panic (Stephen Brennan) [task:217379]
  - printk: Add panic_in_progress helper (Stephen Brennan) [task:217379]
  - s390/zcrypt: fix reference counting on zcrypt card objects (Harald Freudenberger) [task:219444] {CVE-2024-26957}
  - xfs: wake commit waiters on CIL abort before log item abort (Brian Foster) [task:217956]
  - clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays (Gabor Juhos) [task:219446] {CVE-2024-26969}
  - vfio/platform: Create persistent IRQ handlers (Alex Williamson) [task:210628] {CVE-2024-26813}
  - vfio/platform: Disable virqfds on cleanup (Alex Williamson) [task:210628]
  - dm: call the resume method on internal suspend (Mikulas Patocka) [task:214159] {CVE-2024-26880}
  - quota: Fix potential NULL pointer dereference (Wang Jianjian) [task:214158] {CVE-2024-26878}
  - quota: check time limit when back out space/inode change (Chengguang Xu) [task:214158]
  - quota: code cleanup for __dquot_alloc_space() (Chengguang Xu) [task:214158]
  - jfs: fix array-index-out-of-bounds in dbAdjTree (Manas Ghandat) [task:207401] {CVE-2023-52601}
  - x86/xen: Add some null pointer checking to smp.c (Kunwu Chan) [task:214160] {CVE-2024-26908}
  - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Xiu Jianfeng) [task:164562]
  - xen/events: only register debug interrupt for 2-level events (Juergen Gross) [task:164562]
  - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled (Rahul Rameshbabu) [task:214161] {CVE-2023-52644}
  - b43: dma: Fix use true/false for bool type variable (Saurav Girepunje) [task:214161]
  - i40e: Fix VF MAC filter removal (Ivan Vecera) [task:214154]
  - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [task:214154] {CVE-2024-26830}
  - i40e: Add ensurance of MacVlan resources for every trusted VF (Karen Sornek) [task:214154]
  - i40e: Fix MAC address setting for a VF via Host/VM (Slawomir Laba) [task:214154]
  - i40e: Refactoring VF MAC filters counting to make more reliable (Aleksandr Loktionov) [task:62834]
  - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip (Hsin-Yi Wang) [task:214148] {CVE-2024-26874}
  - net: Set true network header for ECN decapsulation (Gilad Naaman) [task:214149]
  - net/bnx2x: Prevent access to a freed page in page_pool (Thinh Tran) [task:214143] {CVE-2024-26859}
  - vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang) [task:205064] {CVE-2022-48627}
  - ext4: avoid online resizing failures due to oversized flex bg (Baokun Li) [task:207394] {CVE-2023-52622}
  - ext4: unify the type of flexbg_size to unsigned int (Baokun Li) [task:207394] {CVE-2023-52622}
  - ext4: remove unnecessary check from alloc_flex_gd() (Baokun Li) [task:207394] {CVE-2023-52622}
  - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Oleg Nesterov) [task:210335] {CVE-2024-26686}
  - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Oleg Nesterov) [task:210335]
  - fs/proc: do_task_stat: use __for_each_thread() (Oleg Nesterov) [task:210335]
  - exit: Use the correct exit_code in /proc/<pid>/stat (Eric W. Biederman) [task:210335]
  - RDMA/rxe: Return CQE error if invalid lkey was supplied (Leon Romanovsky) [task:206932] {CVE-2021-47076}
  - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Lena Wang) [task:214040] {CVE-2024-26851}
  - IB/hfi1: Fix a memleak in init_credit_return (Zhipeng Lu) [task:214039] {CVE-2024-26839}
  - nfc: nci: free rx_data_reassembly skb on NCI device cleanup (Fedor Pchelkin) [task:213955] {CVE-2024-26825}
  - NFC: nci: fix memory leak in nci_allocate_device (Dongliang Mu) [task:158827]
  - hsr: Fix uninit-value access in hsr_get_node() (Shigeru Yoshida) [task:214042] {CVE-2024-26863}
  - net: hsr: fix placement of logical operator in a multi-line statement (Murali Karicheri) [task:214042]
  - amdkfd: use calloc instead of kzalloc to avoid integer overflow (Dave Airlie) [task:214061] {CVE-2024-26817}
  - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Nikita Zhandarovich) [task:214102] {CVE-2024-26901}
  - media: pvrusb2: fix uaf in pvr2_context_set_notify (Edward Adam Davis) [task:214062] {CVE-2024-26875}
  - media: pvrusb2: fix use after free on context disconnection (Ricardo B. Marliere) [task:214062]
  - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Armin Wolf) [task:214136] {CVE-2024-26894}
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Eric Dumazet) [task:214130] {CVE-2024-26852}
  - bpf: Fix hashtab overflow check on 32-bit arches (Toke Høiland-Jørgensen) [task:214132] {CVE-2024-26884}
  - scsi: target: core: Add TMF to tmr_list handling (Dmitry Bogdanov) [task:214137] {CVE-2024-26845}
  - arp: Prevent overflow in arp_req_get(). (Kuniyuki Iwashima) [task:210302] {CVE-2024-26733}
  - drm: bridge/panel: Cleanup connector on bridge detach (Paul Cercueil) [task:206930] {CVE-2021-47063}
  - sched: disabled sysctl_sched_optimize_enabled by default (liwanwu) [task:217846]
  - PHYTIUM: KVM: arm64: Move the clean of dcache to the map handler (zhanghao1) [task:218131]
  - USB: core: Fix deadlock in usb_deauthorize_interface() (Alan Stern) [task:217563] {CVE-2024-26934}
  - usb: roles: fix NULL pointer issue when put module's reference (Xu Yang) [task:210461] {CVE-2024-26747}
  - media: rc: bpf attach/detach requires write permission (Sean Young) [task:214138] {CVE-2023-52642}
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Alan Stern) [task:217585] {CVE-2024-26993}
  - btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve (Filipe Manana) [task:214141] {CVE-2024-26904}
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Alan Stern) [task:217587] {CVE-2024-27059}
  - nilfs2: prevent kernel bug at submit_bh_wbc() (Ryusuke Konishi) [task:217584] {CVE-2024-26955}
  - nilfs2: use a more common logging style (Joe Perches) [task:217584]
  - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays (Gabor Juhos) [task:217583] {CVE-2024-26965}
  - scsi: qla2xxx: Fix command flush on cable pull (Quinn Tran) [task:217582] {CVE-2024-26931}
  - nilfs2: fix failure to detect DAT corruption in btree and direct mappings (Ryusuke Konishi) [task:217589] {CVE-2024-26956}
  - media: go7007: fix a memleak in go7007_load_encoder (Zhipeng Lu) [task:217575] {CVE-2024-27074}
  - media: v4l2-tpg: fix some memleaks in tpg_alloc (Zhipeng Lu) [task:217576] {CVE-2024-27078}
  - SUNRPC: fix some memleaks in gssx_dec_option_array (Zhipeng Lu) [task:217578] {CVE-2024-27388}
  - drm/tegra: dsi: Add missing check for of_find_device_by_node (Chen Ni) [task:217580] {CVE-2023-52650}
  - mm/swapfile.c: __swap_entry_free() always free 1 entry (Wei Yang) [task:217590]
  - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Huang Ying) [task:217590]
  - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Huang Ying) [task:217590]
  - serial: mxs-auart: add spinlock around changing cts state (Emil Kronborg) [task:217594] {CVE-2024-27000}
  - nouveau: fix instmem race condition around ptr stores (Dave Airlie) [task:217591] {CVE-2024-26984}
  - net/rds: fix possible cp null dereference (Mahmoud Adam) [task:217596]
  - net/rds: fix WARNING in rds_conn_connect_if_down (Edward Adam Davis) [task:217596] {CVE-2024-27024}
  - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler (Fei Shao) [task:217571] {CVE-2024-27028}
  - scsi: ufs: core: Improve SCSI abort handling (Bart Van Assche) [task:212521] {CVE-2021-47188}
  - nfp: flower: handle acti_netdevs allocation failure (Duoming Zhou) [task:217573] {CVE-2024-27046}
  - nilfs2: fix OOB in nilfs_set_de_type (Jeongjun Park) [task:217541] {CVE-2024-26981}
  - fat: fix uninitialized field in nostale filehandles (Jan Kara) [task:217540] {CVE-2024-26973}
  - tun: limit printing rate when illegal packet received by tun dev (Lei Chen) [task:217543] {CVE-2024-27013}
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Ziyang Xuan) [task:217564] {CVE-2024-27020}
  - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Pablo Neira Ayuso) [task:217564]
  - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [task:217566] {CVE-2024-26976}
  - drm: nv04: Fix out of bounds access (Mikhail Kobuk) [task:217570] {CVE-2024-27008}
  - vfio/pci: Create persistent INTx handler (Alex Williamson) [task:210644] {CVE-2024-26812}
  - vfio: Introduce interface to flush virqfd inject workqueue (Alex Williamson) [task:210644]
  - media: dvb-frontends: avoid stack overflow warnings with clang (Arnd Bergmann) [task:217558] {CVE-2024-27075}
  - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity (Zhipeng Lu) [task:217549] {CVE-2024-27077}
  - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (Rand Deeb) [task:214041] {CVE-2024-26855}
  - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi) [task:210638] {CVE-2024-26696}
  - binder: check offset alignment in binder_get_object() (Carlos Llamas) [task:216630] {CVE-2024-26926}
  - xen/events: close evtchn after mapping cleanup (Maximilian Heyne) [task:210357] {CVE-2024-26687}
  - wifi: mac80211: fix potential key use-after-free (Johannes Berg) [task:205233] {CVE-2023-52530}
  - xfs: check free AG space when making per-AG reservations (Darrick J. Wong) [task:215506]
  - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (Luís Henriques) [task:216634] {CVE-2022-48631}
  - media: xc4000: Fix atomicity violation in xc4000_get_frequency (Gui-Dong Han) [task:216633] {CVE-2024-24861}
  - RDMA/srpt: Do not register event handler until srpt device is fully setup (William Kucharski) [task:213762] {CVE-2024-26872}
  - btrfs: fix hang during unmount when stopping a space reclaim worker (Filipe Manana) [task:216635] {CVE-2022-48664}
  - Btrfs: fix crash during unmount due to race with delayed inode workers (Filipe Manana) [task:155707]
  - xhci: handle isoc Babble and Buffer Overrun events properly (Michal Pecio) [task:209228] {CVE-2024-26659}
  - xhci: process isoc TD properly when there was a transaction error mid TD. (Mathias Nyman) [task:209228]
  - xhci: Fix incorrect tracking of free space on transfer rings (Mathias Nyman) [task:209228]
  - xhci: store TD status in the td struct instead of passing it along (Mathias Nyman) [task:209228]
  - xhci: remove extra loop in interrupt context (Mathias Nyman) [task:209228]
  - xhci: get isochronous ring directly from endpoint structure (Mathias Nyman) [task:209228]
  - compiler_attributes.h: Add 'fallthrough' pseudo keyword for switch/case use (Joe Perches)
  - drm/amdgpu: restrict bo mapping within gpu address limits (Rajneesh Bhardwaj) [task:216641]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.41.v2101
changelog:
  - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() (Valentine Fatiev) [task:223066]
  - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path (Valentine Fatiev) [task:223066] {CVE-2021-47438}
  - net/mlx5: Fix mlx5_core_destroy_cq() error flow (Yishai Hadas) [task:223066]
  - scsi: core: don't preallocate small SGL in case of NO_SG_CHAIN (Ming Lei) [task:227191]
  - scsi: lib/sg_pool.c: clear 'first_chunk' in case of no preallocation (Ming Lei) [task:227191]
  - scsi: s390: zfcp_fc: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: zfcp: move SG table helper from aux to fc and make them static (Steffen Maier) [task:227191]
  - scsi: mvumi: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: mvumi: switch to generic DMA API (Christoph Hellwig) [task:227191]
  - scsi: NCR5380: use sg helper to iterate over scatterlist (Finn Thain) [task:227191]
  - scsi: wd33c93: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: ppa: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: pcmcia: nsp_cs: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: imm: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: aha152x: use sg helper to iterate over scatterlist (Finn Thain) [task:227191]
  - scsi: staging: unisys: visorhba: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: usb: image: microtek: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: pmcraid: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: ipr: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: advansys: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: vmw_pvscsi: Use true, false for adapter->use_msg (Jason Yan) [task:227191]
  - scsi: vmw_pvscsi: Silence dma mapping errors (Thomas Hellstrom) [task:227191]
  - scsi: vmw_pvscsi: Fix swiotlb operation (Thomas Hellstrom) [task:227191]
  - scsi: vmw_pscsi: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: vmw_pscsi: switch to generic DMA API (Christoph Hellwig) [task:227191]
  - scsi: lpfc: use sg helper to iterate over scatterlist (Ming Lei) [task:62595, task:227191]
  - spec: enable kabi check (Zhengyuan Liu) [task:224852]
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (Saurav Kashyap) [task:224219] {CVE-2024-36919}
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Kuniyuki Iwashima) [task:224221] {CVE-2024-36904}
  - tipc: fix UAF in error path (Paolo Abeni) [task:224223] {CVE-2024-36886}
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Eric Dumazet) [task:224225] {CVE-2024-36902}
  - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (Wesley Cheng) [task:224213] {CVE-2024-36894}
  - usb: gadget: f_fs: use io_data->status consistently (John Keeping) [task:224213]
  - pinctrl: core: delete incorrect free in pinctrl_enable() (Dan Carpenter) [task:224212] {CVE-2024-36940}
  - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) [task:221819] {CVE-2021-47386}
  - hwmon: (w83791d) convert to use devm_i2c_new_dummy_device (Wolfram Sang) [task:221819]
  - net: fix out-of-bounds access in ops_init (Thadeu Lima de Souza Cascardo) [task:224208] {CVE-2024-36883}
  - tcp: properly terminate timers for kernel sockets (Eric Dumazet) [task:223109] {CVE-2024-35910}
  - mptcp: add sk_stop_timer_sync helper (Geliang Tang) [task:223109]
  - bonding: stop the device in bond_setup_by_slave() (Eric Dumazet) [task:223073] {CVE-2023-52784}
  - bonding: reset bond's flags when down link is P2P device (Hangbin Liu) [task:223073]
  - wifi: nl80211: don't free NULL coalescing rule (Johannes Berg) [task:224195] {CVE-2024-36941}
  - Julia Lawall reported this null pointer dereference, this should fix it. (Mike Marshall) [task:224194] {CVE-2024-36023}
  - orangefs: Fix sb refcount leak when allocate sb info failed. (Chenyuan Mi) [task:224194]
  - orangefs: set up and use backing_dev_info (Martin Brandenburg) [task:224194]
  - dyndbg: fix old BUG_ON in >control parser (Jim Cromie) [task:223134] {CVE-2024-35947}
  - btrfs: send: handle path ref underflow in header iterate_inode_ref() (David Sterba) [task:223135] {CVE-2024-35935}
  - drm/amd/display: Avoid NULL dereference of timing generator (Wayne Lin) [task:222113] {CVE-2023-52753}
  - ax25: fix use-after-free bugs caused by ax25_ds_del_timer (Duoming Zhou) [task:222117] {CVE-2024-35887}
  - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Harshit Mogalapalli) [task:223052] {CVE-2024-35944}
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (Wenchao Hao) [task:223057] {CVE-2023-52809}
  - pwm: Fix double shift bug (Dan Carpenter) [task:223061] {CVE-2023-52756}
  - mm, slub: fix potential memoryleak in kmem_cache_open() (Miaohe Lin) [task:223062] {CVE-2021-47466}
  - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (Jia-Ju Bai) [task:223064] {CVE-2023-52855}
  - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (Ziyang Xuan) [task:223071] {CVE-2021-47459}
  - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Ping-Ke Shih) [task:223076] {CVE-2023-52832}
  - media: bttv: fix use after free error due to btv->timeout timer (Zheng Wang) [task:223078] {CVE-2023-52847}
  - thermal: core: prevent potential string overflow (Dan Carpenter) [task:223081] {CVE-2023-52868}
  - usb: udc: remove warning when queue disabled ep (yuan linyu) [task:223085] {CVE-2024-35822}
  - Bluetooth: btintel: Fixe build regression (Luiz Augusto von Dentz) [task:223087]
  - Bluetooth: btintel: Fix null ptr deref in btintel_read_version (Edward Adam Davis) [task:223087] {CVE-2024-35933}
  - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Shigeru Yoshida) [task:223088] {CVE-2023-52845}
  - jfs: fix array-index-out-of-bounds in dbFindLeaf (Manas Ghandat) [task:223091] {CVE-2023-52799}
  - dma-debug: prevent an error message from causing runtime problems (Hamza Mahfooz) [task:223100] {CVE-2021-47374}
  - dma-debug: report -EEXIST errors in add_dma_entry (Hamza Mahfooz) [task:223100]
  - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) [task:223098] {CVE-2021-47385}
  - hwmon: (w83792d) convert to use devm_i2c_new_dummy_device (Wolfram Sang) [task:223098]
  - net/mlx5e: fix a double-free in arfs_create_groups (Zhipeng Lu) [task:223101] {CVE-2024-35835}
  - net/mlx5: Use kfree(ft->g) in arfs_create_groups() (Denis Efremov) [task:223101]
  - ubifs: Set page uptodate in the correct place (Matthew Wilcox (Oracle)) [task:223108] {CVE-2024-35821}
  - hid: cp2112: Fix duplicate workqueue initialization (Danny Kaehn) [task:223106] {CVE-2023-52853}
  - HID: cp2112: Use irqchip template (Linus Walleij) [task:223106]
  - soc: fsl: qbman: Always disable interrupts when taking cgr_lock (Sean Anderson) [task:223111] {CVE-2024-35806}
  - raid1: fix use-after-free for original bio in raid1_write_request() (Yu Kuai) [task:223112] {CVE-2024-35979}
  - md/raid1: free the r1bio before waiting for blocked rdev (Xueshi Hu) [task:223112]
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Felix Fietkau) [task:223119] {CVE-2024-35789}
  - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Justin Tee) [task:223120] {CVE-2024-35930}
  - PCI/PM: Drain runtime-idle callbacks before driver removal (Rafael J. Wysocki) [task:223117] {CVE-2024-35809}
  - PCI: Drop pci_device_remove() test of pci_dev->driver (Uwe Kleine-König) [task:223117]
  - net/sched: act_skbmod: prevent kernel-infoleak (Eric Dumazet) [task:223125] {CVE-2024-35893}
  - irqchip/gic-v3-its: Prevent double free on error (Guanrui Huang) [task:222083] {CVE-2024-35847}
  - irqchip/gic-v3-its: Fix potential VPE leak on error (Kaige Fu)
  - ext4: fix corruption during on-line resize (Maximilian Heyne) [task:222107] {CVE-2024-35807}
  - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Kemeng Shi) [task:222107]
  - block: prevent division by zero in blk_rq_stat_sum() (Roman Smirnov) [task:222081] {CVE-2024-35925}
  - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Sindhu Devale) [task:222091] {CVE-2024-36004}
  - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) [task:222075] {CVE-2021-47384}
  - hwmon: (w83793d) convert to use devm_i2c_new_dummy_device (Wolfram Sang) [task:222075]
  - i2c: add newly exported functions to the header, too (Wolfram Sang) [task:222075]
  - i2c: core: add device-managed version of i2c_new_dummy (Heiner Kallweit) [task:222075]
  - i2c: core: improve return value handling of i2c_new_device and i2c_new_dummy (Heiner Kallweit) [task:222075]
  - vt: fix unicode buffer corruption when deleting characters (Nicolas Pitre) [task:222055] {CVE-2024-35823}
  - platform/x86: wmi: Fix opening of char device (Armin Wolf) [task:222045] {CVE-2023-52864}
  - platform/x86: wmi: remove unnecessary initializations (Barnabás Pőcze) [task:222045]
  - ALSA: hda: Fix possible null-ptr-deref when assigning a stream (Cezary Rojewski) [task:222049] {CVE-2023-52806}
  - cifs: Fix use-after-free in rdata->read_into_pages() (ZhaoLong Wang) [task:222065] {CVE-2023-52741}
  - s390/dasd: protect device queue against concurrent access (Jan Höppner) [task:222069] {CVE-2023-52774}
  - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() (Zhipeng Lu) [task:222033] {CVE-2024-35828}
  - tty: vcc: Add check for kstrdup() in vcc_probe() (Yi Yang) [task:222029] {CVE-2023-52789}
  - x86/mm/pat: fix VM_PAT handling in COW mappings (David Hildenbrand) [task:222013] {CVE-2024-35877}
  - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ido Schimmel) [task:219462] {CVE-2024-26586}
  - perf/core: Bail out early if the request AUX area is out of bound (Shuai Xue) [task:222041] {CVE-2023-52835}
  - arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer (Nathan Chancellor) [task:222027] {CVE-2023-52750}
  - arm64: Make CPU_BIG_ENDIAN depend on ld.bfd or ld.lld 13.0.0+ (Nathan Chancellor) [task:222027]
  - arm64: Kconfig: add a choice for endianness (Anders Roxell) [task:222027]
  - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (Dan Carpenter) [task:222005] {CVE-2023-52840}
  - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data (Jiasheng Jiang) [task:222009] {CVE-2023-52865}
  - Bluetooth: Fix memory leak in hci_req_sync_complete() (Dmitry Antipov) [task:222003] {CVE-2024-35978}
  - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() (Dominique Martinet) [task:222001]
  - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (David Sterba) [task:222001] {CVE-2024-35936}
  - erspan: make sure erspan_base_hdr is present in skb->head (Eric Dumazet) [task:221973] {CVE-2024-35888}
  - ip_gre: do not report erspan version on GRE interface (Hangbin Liu) [task:221973]
  - erspan: Check IFLA_GRE_ERSPAN_VER is set. (William Tu) [task:221973]
  - erspan: Add type I version 0 support. (William Tu) [task:221973]
  - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (Ryosuke Yasuoka) [task:221993]
  - nfc: nci: Fix uninit-value in nci_rx_work (Ryosuke Yasuoka) [task:221993]
  - nfc: nci: Fix kcov check in nci_rx_work() (Tetsuo Handa) [task:221993]
  - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet (Ryosuke Yasuoka) [task:221993] {CVE-2024-35915}
  - jfs: fix array-index-out-of-bounds in diAlloc (Manas Ghandat) [task:221969] {CVE-2023-52805}
  - media: tc358743: register v4l2 async device only after successful setup (Alexander Stein) [task:221967] {CVE-2024-35830}
  - md/raid5: fix atomicity violation in raid5_cache_count (Gui-Dong Han) [task:212055] {CVE-2024-23307}
  - dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock (Sergey Senozhatsky) [task:205035] {CVE-2023-52516}
  - dma-debug: make __dma_entry_alloc_check_leak() static (Jason Yan) [task:205035]
  - dma-debug: Make leak-like behaviour apparent (Robin Murphy) [task:205035]
  - dma-debug: Dynamically expand the dma_debug_entry pool (Robin Murphy) [task:205035]
  - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (Johannes Thumshirn) [task:221877] {CVE-2024-35849}
  - fbmon: prevent division by zero in fb_videomode_from_videomode() (Roman Smirnov) [task:221889] {CVE-2024-35922}
  - ipv6: Fix infinite recursion in fib6_dump_done(). (Kuniyuki Iwashima) [task:221895] {CVE-2024-35886}
  - net/mlx5: Properly link new fs rules into the tree (Cosmin Ratiu) [task:221917] {CVE-2024-35960}
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Rajeshwar R Shinde) [task:221919] {CVE-2023-52764}
  - llc: verify mac len before reading mac header (Willem de Bruijn) [task:221933] {CVE-2023-52843}
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [task:221945] {CVE-2024-35969}
  - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (Mario Limonciello) [task:221901] {CVE-2023-52818}
  - drm/radeon: possible buffer overflow (Konstantin Meskhidze) [task:221865] {CVE-2023-52867}
  - fs/jfs: Add validity check for db_maxag and db_agpref (Juntong Deng) [task:221861] {CVE-2023-52804}
  - mm: fix use-after-free bug when mm->mmap is reused after being freed (Suren Baghdasaryan) [task:217008]
  - mm: protect free_pgtables with mmap_lock write lock in exit_mmap (Suren Baghdasaryan) [task:217008]
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Ziyang Xuan) [task:221827] {CVE-2024-35898}
  - fs/jfs: Add check for negative db_l2nbperpage (Juntong Deng) [task:221929] {CVE-2023-52810}
  - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (Siddh Raman Pant) [task:221929]
  - fs: jfs: fix shift-out-of-bounds in dbAllocAG (Dongliang Mu) [task:164562]
  - jfs: fix divide error in dbNextAG (Pavel Skripkin) [task:162162]
  - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (Mario Limonciello) [task:221829] {CVE-2023-52819}
  - Bluetooth: Fix double free in hci_conn_cleanup (ZhengHan Wang) [task:221833] {CVE-2023-52830}
  - batman-adv: Avoid infinite loop trying to resize local TT (Sven Eckelmann) [task:221835] {CVE-2024-35982}
  - ALSA: usx2y: Don't call free_pages_exact() with NULL address (Takashi Iwai) [task:221837] {CVE-2021-47332}
  - ALSA: us122l: Use alloc_pages_exact() (Takashi Iwai) [task:221837]
  - net/sched: fix lockdep splat in qdisc_tree_reduce_backlog() (Eric Dumazet) [task:221845] {CVE-2024-35892}
  - locking/ww_mutex/test: Fix potential workqueue corruption (John Stultz) [task:221843] {CVE-2023-52836}
  - gfs2: ignore negated quota changes (Bob Peterson) [task:221849] {CVE-2023-52759}
  - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Alex Deucher) [task:221851]
  - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Qu Huang) [task:221851] {CVE-2023-52817}
  - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data (Jiasheng Jiang) [task:221847] {CVE-2023-52875}
  - netrom: Fix a data-race around sysctl_netrom_link_fails_count (Jason Xing) [task:220900] {CVE-2024-27420}
  - netrom: Fix a data-race around sysctl_netrom_transport_busy_delay (Jason Xing) [task:220866] {CVE-2024-27424}
  - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Kunwu Chan) [task:220898] {CVE-2023-52675}
  - rpmsg: virtio: Free driver_override when rpmsg_remove() (Xiaolei Wang) [task:220897] {CVE-2023-52670}
  - ACPI: video: check for error while searching for backlight device parent (Nikita Kiryushin) [task:220896] {CVE-2023-52693}
  - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() (Sergey Shtylyov) [task:220894] {CVE-2023-52685}
  - ACPI: LPIT: Avoid u32 multiplication overflow (Nikita Kiryushin) [task:220888] {CVE-2023-52683}
  - calipso: fix memory leak in netlbl_calipso_add_pass() (Gavrilov Ilia) [task:220887] {CVE-2023-52698}
  - netlabel: remove unused parameter in netlbl_netlink_auditinfo() (Zheng Yejian) [task:220887]
  - net: netlabel: Fix kerneldoc warnings (Andrew Lunn) [task:220887]
  - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries (Jason Xing) [task:220882] {CVE-2024-27426}
  - netfilter: nft_limit: reject configurations that cause integer overflow (Florian Westphal) [task:209247] {CVE-2024-26668}
  - netfilter: nft_limit: avoid possible divide error in nft_limit_init (Eric Dumazet)
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found. (Johan Carlsson) [task:220883] {CVE-2024-27436}
  - drm/amd/pm: fix a double-free in si_dpm_init (Zhipeng Lu) [task:220893] {CVE-2023-52691}
  - netrom: Fix a data-race around sysctl_netrom_routing_control (Jason Xing) [task:220890] {CVE-2024-27421}
  - usb: gadget: ncm: Fix handling of zero block length packets (Krishna Kurapati) [task:220889]
  - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs (Krishna Kurapati) [task:220889] {CVE-2024-27405}
  - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (Krishna Kurapati) [task:220889]
  - USB: gadget: f_ncm: Fix NDP16 datagram validation (Bryan O'Donoghue) [task:157172]
  - USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() (Brooke Basile) [task:157172]
  - powerpc/powernv: Add a null pointer check in opal_event_init() (Kunwu Chan) [task:220885] {CVE-2023-52686}
  - netrom: Fix data-races around sysctl_net_busy_read (Jason Xing) [task:220863] {CVE-2024-27419}
  - wifi: nl80211: reject iftype change with mesh ID change (Johannes Berg) [task:220865] {CVE-2024-27410}
  - netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay (Jason Xing) [task:220871] {CVE-2024-27425}
  - netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser (Jason Xing) [task:220876] {CVE-2024-27428}
  - efi/capsule-loader: fix incorrect allocation size (Arnd Bergmann) [task:220877] {CVE-2024-27413}
  - netrom: Fix a data-race around sysctl_netrom_transport_timeout (Jason Xing) [task:220880] {CVE-2024-27427}
  - netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout (Jason Xing) [task:220881] {CVE-2024-27422}
  - netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size (Jason Xing) [task:220881]
  - netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser (Jason Xing) [task:220878] {CVE-2024-27429}
  - netrom: Fix a data-race around sysctl_netrom_default_path_quality (Jason Xing) [task:220874] {CVE-2024-27430}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.42.v2101
changelog:
  - block: recalculate segment count for multi-segment discards correctly (David Jeffery) [task:327413]
  - jdb2: Don't refuse invalidation of already invalidated buffers (Jan Kara) [task:226534]
  - atl1c: fix tx timeout after link flap on Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: Work around the DMA RX overflow issue (Sieng-Piaw Liew) [task:222007] {CVE-2023-52834}
  - atl1c: add 4 RX/TX queue support for Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: detect NIC type early (Gatis Peisenieks) [task:222007]
  - atl1c: show correct link speed on Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: remove redundant assignment to variable tpd_req (Colin Ian King) [task:222007]
  - net/atheros: Clean atheros code from driver version (Leon Romanovsky) [task:222007]
  - atl1c: improve performance by avoiding unnecessary pcie writes on xmit (Gatis Peisenieks) [task:222007]
  - net: core: add __netdev_sent_queue as variant of __netdev_tx_sent_queue (Heiner Kallweit) [task:222007]
  - net: bql: add __netdev_tx_sent_queue() (Eric Dumazet) [task:68842]
  - atl1c: prepare for multiple rx queues (Gatis Peisenieks) [task:222007]
  - atl1c: move tx napi into tpd_ring (Gatis Peisenieks) [task:222007]
  - atl1c: move tx cleanup processing out of interrupt (Gatis Peisenieks) [task:222007]
  - atl1c: switch to napi_gro_receive (Sieng Piaw Liew) [task:222007]
  - atl1c: use napi_alloc_skb (Sieng Piaw Liew) [task:222007]
  - PCI: Add ACS quirk for Wangxun NICs (Mengyuan Lou) [task:335407]
  - PCI: Unify ACS quirk desired vs provided checking (Bjorn Helgaas) [task:335407]
  - PCI: Add ACS quirk for iProc PAXB (Abhinav Ratna) [task:335407]
  - PCI: Make ACS quirk implementations more uniform (Bjorn Helgaas) [task:335407]
  - net: Prevent infinite while loop in skb_tx_hash() (Michael Chan) [task:218258]
  - inet: inet_defrag: prevent sk release while still in use (Florian Westphal) [task:213813] {CVE-2024-26921}
  - inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [task:213813]
  - skb_expand_head() adjust skb->truesize incorrectly (Vasily Averin) [task:213813]
  - skbuff: introduce skb_expand_head() (Vasily Averin) [task:213813]
  - OPENEULER: svm: Delete unused ioctl command (Jiangshan Yi) [task:180214] {CVE-2021-33639}
  - af_unix: fix build by missing ky_kabi.h (Jackie Liu)
  - sched/fair: Fix wrong cpu selecting from isolated domain (Bing Huang) [bug:225308]
  - selinux: avoid dereference of garbage after mount failure (Christian Göttsche) [task:221817] {CVE-2024-35904}
  - selinux: mark some global variables __ro_after_init (Ondrej Mosnacek) [task:221817]
  - selinux: make selinuxfs_mount static (Ondrej Mosnacek) [task:221817]
  - dma: fix kabi broken for introduce dma_max_mapping_size() (leixiang) [task:226458]
  - virtio-blk: fix implicit overflow on virtio_max_dma_size (zhenwei pi) [task:221853] {CVE-2023-52762}
  - virtio-blk: support per-device queue depth (Joseph Qi) [task:221853]
  - virtio-blk: Consider virtio_max_dma_size() for maximum segment size (Joerg Roedel) [task:176679]
  - virtio: Introduce virtio_max_dma_size() (Joerg Roedel) [task:176679]
  - dma: Introduce dma_max_mapping_size() (Joerg Roedel) [task:176679]
  - swiotlb: Add is_swiotlb_active() function (Joerg Roedel) [task:176679]
  - swiotlb: Introduce swiotlb_max_mapping_size() (Joerg Roedel) [task:176679]
  - vfs: vfs_clone_file_prep_inodes should return EINVAL for a clone from beyond EOF (Darrick J. Wong) [task:204423, task:327911]
  - bpf: pull before calling skb_postpull_rcsum() (Jakub Kicinski) [task:329163]
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Kuniyuki Iwashima) [task:216629]
  - ARM: 9170/1: fix panic when kasan and kprobe are enabled (sparkhuang) [task:330279] {CVE-2021-47618}
  - cifs: fix underflow in parse_server_interfaces() (Dan Carpenter) [task:214157] {CVE-2024-26828}
  - af_unix: Fix garbage collector racing against connect() (Michal Luczaj) [task:216629] {CVE-2024-26923}
  - af_unix: Do not use atomic ops for unix_sk(sk)->inflight. (Kuniyuki Iwashima) [task:216629]
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Daniel Starke) [task:224203] {CVE-2024-36016}
  - um: Add winch to winch_handlers before registering winch IRQ (Roberto Sassu) {CVE-2024-39292}
  - sched/fair: Fix enqueue_task_fair() warning some more (Phil Auld) [task:116750]
  - ext4: fix bug for rename with RENAME_WHITEOUT (yangerkun) [task:328134]
  - mm: list_lru: set shrinker map bit when child nr_items is not zero (Yang Shi) [task:226549]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.43.v2101
changelog:
  - overflow: Add __must_check attribute to check_*() helpers (Kees Cook) [task:357223]
  - net/mlx5: Add a blank line after declarations (Wenpeng Liang) [task:357223]
  - ext4: remove the special buffer dirty handling in do_journal_get_write_access (Shida Zhang) [task:345663]
  - ext4: fix a potential assertion failure due to improperly dirtied buffer (Shida Zhang) [task:345663]
  - ext4: hoist ext4_block_write_begin and replace the __block_write_begin (Shida Zhang) [task:345663]
  - ext4: persist the new uptodate buffers in ext4_journalled_zero_new_buffers (Shida Zhang) [task:345663]
  - PHYTIUM: drm/phytium: Add driver version information (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Add PWM backlight control for pe220x eDP (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Change the drm driver name for pe220x (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Add dc patch for BMC (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Modify driver to adapt to ARM and X86_64 compiles (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Mask the hdcp timer irq (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Mask the AUX reply error interrupt (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Adjust log printing level (WangHao) [task:346055]
  - PHYTIUM: drm/phytium: Replace default EFI fb0 with DC FB (WangHao) [task:346055]
  - PHYTIUM: drm/phytium: Fixed dp codec id (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Get edid audio capability (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Bugfix Xorg startup for ps23xx when using pe2201 bmc card (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Cursor hot support negative numbers (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Enable gamma features (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Add capability of tile mode (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Limit the TU to a maximum of 63 (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Sync patches from 4.19.y-dev oss branch (Wang Yinfeng) [task:346055]
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy) [task:119087] {CVE-2022-3564}
  - spi: fix kabi breakage in struct spi_controller (lifangxu) [task:221921]
  - spi: Fix deadlock when adding SPI controllers on SPI buses (Mark Brown) [task:221921] {CVE-2021-47469}
  - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Pablo Neira Ayuso) [task:346667] {CVE-2024-42070}
  - sched/core: Further clarify sched_class::set_next_task() (Peter Zijlstra) [task:101857]
  - sched: Fix pick_next_task() vs 'change' pattern race (Peter Zijlstra) [task:101857]
  - sched: Rework pick_next_task() slow-path (Peter Zijlstra) [task:101857]
  - sched: Allow put_prev_task() to drop rq->lock (Peter Zijlstra) [task:101857]
  - sched/fair: Expose newidle_balance() (Peter Zijlstra) [task:101857]
  - sched: Add task_struct pointer to sched_class::set_curr_task (Peter Zijlstra) [task:101857]
  - sched: Rework CPU hotplug task selection (Peter Zijlstra) [task:101857]
  - sched/{rt,deadline}: Fix set_next_task vs pick_next_task (Peter Zijlstra) [task:101857]
  - sched/core: Introduce set_next_task() helper for better code readability (Muchun Song) [task:101857]
  - security/selinux: Fixed crash caused by selinux (mengdehui) [bug:258979]
  - PHYTIUM: drm/phytium: save vram by dma (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: skip less than 640x480 mode (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: adjust e2000 phy parameters (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: disable pixel clock before dc reset (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: support for linux-5.10.0 (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: Remove reset before close pixel clock (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: Read EDID when getting mode (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: Add E2000 Display Engine support (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: update phytium x100 dc driver before support e2000 (oushixiong) [task:110384]
  - ASoC: hdmi-codec: Add an op to set callback function for plug event (Cheng-Yi Chiang) [task:110384]
  - arm64/spinlock: fix a -Wunused-function warning (Qian Cai) [task:351849]
  - locking/osq: Use optimized spinning loop for arm64 (Waiman Long) [task:351849]
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (David Ruth) [task:344573] {CVE-2024-40995}
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (Tetsuo Handa) [task:347077] {CVE-2024-41063}
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Daniel Borkmann) [task:347029] {CVE-2024-42246}
  - drop_monitor: replace spin_lock by raw_spin_lock (Wander Lairson Costa) [task:345791] {CVE-2024-40980}
  - fpga: region: fix compilation error for commit 7dd30f1e070 (limiao) [task:354605]
  - crypto: aead,cipher - zeroize key buffer after use (Hailey Mothershead) [task:346415] {CVE-2024-42229}
  - crypto: ecdh - explicitly zeroize private_key (Joachim Vandersmissen) [task:345795] {CVE-2024-42098}
  - gpio: fix compile error (zhouyuhang) [task:347327]
  - nvme: avoid double free special payload (Chunguang Xu) [task:347137] {CVE-2024-41073}
  - ASoC: topology: Fix references to freed memory (Amadeusz Sławiński) [task:346623] {CVE-2024-41069}
  - ila: block BH in ila_output() (Eric Dumazet) [task:346669] {CVE-2024-41081}
  - serial: imx: Introduce timeout when waiting on transmitter empty (Esben Haabendal) [task:345715] {CVE-2024-40967}
  - fou: remove warn in gue_gro_receive on unsupported protocol (Willem de Bruijn) [task:352275] {CVE-2024-44940}
  - media: venus: fix use after free in vdec_close (Dikshita Agarwal) [task:352227] {CVE-2024-42313}
  - dev/parport: fix the array out-of-bounds risk (tuhaowen) [task:352211] {CVE-2024-42301}
  - driver core: Fix uevent_show() vs driver detach race (Dan Williams) [task:345303]
  - drivers: core: synchronize really_probe() and dev_uevent() (Dirk Behme) [task:345303] {CVE-2024-39501}
  - ipvs: properly dereference pe in ip_vs_add_service (Chen Hanxiao) [task:352245] {CVE-2024-42322}
  - nilfs2: fix kernel bug on rename operation of broken directory (Ryusuke Konishi) [task:347001] {CVE-2024-41034}
  - ceph: prevent use-after-free in encode_cap_msg() (Rishabh Dave) [task:210332] {CVE-2024-26689}
  - kvm: s390: Reject memory region operations for ucontrol VMs (Christoph Schlameuss) [task:352663] {CVE-2024-43819}
  - md/dm-raid: don't call md_reap_sync_thread() directly (Yu Kuai) [task:221813] {CVE-2024-35808}
  - md: fix kabi broken in struct mddev (zhouyuhang) [task:183151]
  - OPENEULER: md: use interruptible apis in idle/frozen_sync_thread (Yu Kuai) [task:183151]
  - md: wake up 'resync_wait' at last in md_reap_sync_thread() (Yu Kuai) [task:183151]
  - md: refactor idle/frozen_sync_thread() to fix deadlock (Yu Kuai) [task:183151]
  - md: add a mutex to synchronize idle and frozen in action_store() (Yu Kuai) [task:183151]
  - md: refactor action_store() for 'idle' and 'frozen' (Yu Kuai) [task:183151]
  - md-cluster/raid10: call update_size in md_reap_sync_thread (Guoqing Jiang) [task:128226]
  - closures: Change BUG_ON() to WARN_ON() (Kent Overstreet) [task:345719] {CVE-2024-42252}
  - drm/nouveau: prime: fix refcount underflow (Danilo Krummrich) [task:351447] {CVE-2024-43867}
  - Bluetooth: Fix usage of __hci_cmd_sync_status (Luiz Augusto von Dentz) [task:346425]
  - Bluetooth: L2CAP: Fix deadlock (Luiz Augusto von Dentz) [task:346425]
  - Bluetooth: hci_sync: Fix Opcode prints in bt_dev_dbg/err (Marcel Ziswiler) [task:346425]
  - Bluetooth: Fix race condition in hci_cmd_sync_clear (Min Li) [task:346425]
  - Bluetooth: hci_sync: Fix not processing all entries on cmd_sync_work (Luiz Augusto von Dentz) [task:346425]
  - Bluetooth: Add helper for serialized HCI command execution (Marcel Holtmann) [task:346425]
  - Bluetooth: Add support hdev to allocate private data (Tedd Ho-Jeong An) [task:346425]
  - bluetooth/l2cap: sync sock recv cb and release (Edward Adam Davis) [task:346425] {CVE-2024-41062}
  - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Marc Kleine-Budde) [task:223130] {CVE-2023-52878}
  - btrfs: fix use-after-free after failure to create a snapshot (Filipe Manana) [task:330299] {CVE-2022-48733}
  - media: mediatek: vcodec: Handle invalid decoder vsi (Irui Wang) [task:352191] {CVE-2024-43831}
  - tracing: Fix overflow in get_free_elt() (Tze-nan Wu) [task:352671] {CVE-2024-43890}
  - fpga: region: add owner module and take its refcount (Marco Pagani) [task:330557] {CVE-2024-35247}
  - f2fs: fix to don't dirty inode for readonly filesystem (Chao Yu) [task:352639] {CVE-2024-42297}
  - ext4: check dot and dotdot of dx_root before making dir indexed (Baokun Li) [task:352649] {CVE-2024-42305}
  - s390/pkey: Wipe copies of protected- and secure-keys (Holger Dengler) [task:346923] {CVE-2024-42155}
  - scsi: qla2xxx: Fix for possible memory corruption (Shreyas Deodhar) [task:352643] {CVE-2024-42288}
  - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (Alexey Kodanev) [task:352637] {CVE-2024-43839}
  - gpio: davinci: Validate the obtained number of IRQs (Aleksandr Mishin) [task:345785] {CVE-2024-42092}
  - Revert "drm/vc4: hdmi: Unregister codec device on unbind" (李豪杰) [task:344615, task:351057]
  - ext4: make sure the first directory block is not a hole (Baokun Li) [task:352077] {CVE-2024-42304}
  - ext4: fix file system corrupted when rmdir non empty directory with IO error (Ye Bin)
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Shigeru Yoshida) [task:352297] {CVE-2024-42284}
  - leds: trigger: Unregister sysfs attributes before calling deactivate() (Hans de Goede) [task:352209] {CVE-2024-43830}
  - dma: fix call order in dmam_free_coherent (Lance Richardson) [task:352215] {CVE-2024-43856}
  - drm/amd/display: Check for NULL pointer (Sung Joon Kim) [task:352265] {CVE-2024-42308}
  - drm/amd/display: Set flip pending for pipe split (Wesley Chalmers) [task:352265]
  - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (Ma Ke) [task:352277] {CVE-2024-42310}
  - serial: core: check uartclk for zero to avoid divide by zero (George Kennedy) [task:352289] {CVE-2024-43893}
  - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (Ma Ke) [task:352293] {CVE-2024-42309}
  - mISDN: Fix a use after free in hfcmulti_tx() (Dan Carpenter) [task:352165] {CVE-2024-42280}
  - md/raid5: avoid BUG_ON() while continue reshape after reassembling (Yu Kuai) [task:352173] {CVE-2024-43914}
  - Bluetooth: MGMT: Add error handling to pair_device() (Griffin Kroah-Hartman) [task:352185] {CVE-2024-43884}
  - net/iucv: fix use after free in iucv_sock_close() (Alexandra Winter) [task:352285] {CVE-2024-42271}
  - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (Niklas Neronin) [task:346971] {CVE-2024-42226}
  - remoteproc: imx_rproc: Skip over memory region when node value is NULL (Aleksandr Mishin) [task:352177] {CVE-2024-43860}
  - remoteproc: imx_rproc: Fix ignoring mapping vdev regions (Dong Aisheng) [task:352177]
  - remoteproc: imx_rproc: ignore mapping vdev regions (Peng Fan) [task:352177]
  - scsi: qla2xxx: During vport delete send async logout explicitly (Manish Rangankar) [task:352283] {CVE-2024-42289}
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (Chao Yu) [task:352271] {CVE-2024-42311}
  - jfs: fix null ptr deref in dtInsertEntry (Edward Adam Davis) [task:352249] {CVE-2024-44939}
  - filelock: Fix fcntl/close race recovery compat path (Jann Horn) [task:347167] {CVE-2024-41020}
  - file: Factor files_lookup_fd_locked out of fcheck_files (Eric W. Biederman) [task:347167]
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Bart Van Assche) [task:352669] {CVE-2024-42285}
  - nilfs2: handle inconsistent state in nilfs_btnode_create_block() (Ryusuke Konishi) [task:352291] {CVE-2024-42295}
  - net: ax25: Fix a compilation error (xiaolinkui) [task:351959]
  - kobject_uevent: Fix OOB access within zap_modalias_env() (Zijun Hu) [task:352127] {CVE-2024-42292}
  - jfs: Fix shift-out-of-bounds in dbDiscardAG (Pei Li) [task:352157] {CVE-2024-44938}
  - fs/jfs: fix potential integer overflow on shift of a int (Colin Ian King) [task:158034]
  - ALSA: hda: Do not unset preset when cleaning up codec (Cezary Rojewski) [task:222115] {CVE-2023-52736}
  - leds: mlxreg: Use devm_mutex_init() for mutex initialization (George Stark) [task:345699] {CVE-2024-42129}
  - locking/mutex: Introduce devm_mutex_init() (George Stark) [task:345699] {CVE-2024-42129}
  - exec: Fix ToCToU between perm check and set-uid/gid usage (Kees Cook) [task:351435] {CVE-2024-43882}
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Baochen Qiang) [task:351227] {CVE-2024-43879}
  - net: dsa: mv88e6xxx: fix use-after-free in mv88e6xxx_mdios_unregister (Vladimir Oltean) [task:346697]
  - net: dsa: mv88e6xxx: don't use devres for mdiobus (Vladimir Oltean) [task:346697] {CVE-2022-48818}
  - net: ipv6: ensure we call ipv6_mc_down() at most once (j.nixdorf@avm.de) [task:351441] {CVE-2022-48910}
  - ipv6/addrconf: use a boolean to choose between UNREGISTER/DOWN (Florent Fourcot) [task:351441]
  - ipv6/addrconf: call addrconf_ifdown with consistent values (Florent Fourcot) [task:351441]
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (Breno Leitao) [task:346411] {CVE-2024-40953}
  - net: usb: qmi_wwan: fix memory leak for not ip packets (Daniele Palmas) [task:351501] {CVE-2024-43861}
  - drm/amd/display: Check pipe offset before setting vblank (Alex Hung) [task:345701] {CVE-2024-42120}
  - devres: Fix memory leakage caused by driver API devm_free_percpu() (Zijun Hu) [task:351331] {CVE-2024-43871}
  - driver core: Cast to (void *) with __force for __percpu pointer (Andy Shevchenko) [task:351331]
  - usb: vhci-hcd: Do not drop references before new references are gained (Oliver Neukum) [task:351507] {CVE-2024-43883}
  - drm/radeon: check bo_va->bo is non-NULL before using it (Pierre-Eric Pelloux-Prayer) [task:346959] {CVE-2024-41060}
  - greybus: Fix use-after-free bug in gb_interface_release due to race condition. (Sicong Huang) [task:347127] {CVE-2024-39495}
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (Miri Korenblit) [task:346187] {CVE-2024-40929}
  - ocfs2: fix unexpected zeroing of virtual disk (Chi Zhiling) [task:335993]
  - net/sched: initialize noop_qdisc owner (Johannes Berg) [task:217588]
  - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (Breno Leitao) [task:344437] {CVE-2024-40901}
  - scsi: mpt3sas: Gracefully handle online firmware update (Suganath Prabu) [task:344437] {CVE-2024-40901}
  - scsi: mpt3sas: Add ioc_<level> logging macros (Joe Perches) [task:344437] {CVE-2024-40901}
  - f2fs: Add inline to f2fs_build_fault_attr() stub (Nathan Chancellor) [task:346823] {CVE-2024-42160}
  - f2fs: check validation of fault attrs in f2fs_build_fault_attr() (Chao Yu) [task:346823] {CVE-2024-42160}
  - MIPS: Octeron: remove source file executable bit (Dominique Martinet) [task:347107]
  - MIPS: Octeon: Add PCIe link status check (Songyang Li) [task:347107] {CVE-2024-40968}
  - scsi: qla2xxx: validate nvme_local_port correctly (Nilesh Javali) [task:354889] {CVE-2024-42286}
  - xdp: Remove WARN() from __xdp_reg_mem_model() (Daniil Dulov) [task:345323] {CVE-2024-42082}
  - bpf: Fix a segment issue when downgrading gso_size (Fred Li) [task:352237] {CVE-2024-42281}
  - bpf: add bpf_skb_adjust_room flag BPF_F_ADJ_ROOM_FIXED_GSO (Willem de Bruijn) [task:352237]
  - bpf: add bpf_skb_adjust_room mode BPF_ADJ_ROOM_MAC (Willem de Bruijn) [task:352237]
  - CDC-NCM: avoid overflow in sanity checking (Oliver Neukum) [task:351493] {CVE-2022-48938}
  - ibmvnic: don't release napi in __ibmvnic_open() (Sukadev Bhattiprolu) [task:346945] {CVE-2022-48811}
  - ibmvnic: avoid calling napi_disable() twice (Lijun Pan) [task:158827]
  - nvme-fabrics: use reserved tag for reg read/write command (Chunguang Xu) [task:345283] {CVE-2024-41082}
  - powerpc/vnic: Extend "failover pending" window (Sukadev Bhattiprolu) [task:346945]
  - kylin/gmjstcm: fix compilation warning (Li Jun) [task:352591]
  - gianfar: ethtool: Fix refcount leak in gfar_get_ts_info (Miaoqian Lin) [task:347101] {CVE-2022-48856}
  - net: inetdevice: provide replacement iterators for in_ifaddr walk (Florian Westphal) [task:352595]
  - net: hns3: fix kernel crash problem in concurrent scenario (Yonglong Liu) [task:351743] {CVE-2024-39507}
  - netpoll: Fix race condition in netpoll_owner_active (Breno Leitao) [task:351743]
  - net: make sure napi_list is safe for RCU traversal (Jakub Kicinski) [task:351743]
  - Revert "loop: Remove sector_t truncation checks" (Ben Hutchings)
  - KVM: x86/mmu: make apf token non-zero to fix bug (Liang Zhang) [task:351445] {CVE-2022-48943}
  - mmc: sdhci: Add sd host v4 mode (Chunyan Zhang) [task:350607]
  - mmc: sdhci: Add version V4 definition (Chunyan Zhang) [task:350607]
  - mmc: sdhci: Let a vendor driver supply and update ADMA descriptor size (Veerabhadrarao Badiganti) [task:350607]
  - mmc: sdhci: Add ADMA2 64-bit addressing support for V4 mode (Chunyan Zhang) [task:350607]
  - mmc: sdhci: add adma_table_cnt member to struct sdhci_host (Jisheng Zhang) [task:350607]
  - net: fix kabi broken in struct dst_ops (taowei) [task:200581]
  - ipv6: remove max_size check inline with ipv4 (Jon Maxwell) [task:200581] {CVE-2023-52340}
  - net/dst: use a smaller percpu_counter batch for dst entries accounting (Eric Dumazet) [task:200581] {CVE-2023-52340}
  - net: add a route cache full diagnostic message (Peter Oskolkov) [task:200581] {CVE-2023-52340}
  - net: fix kabi broken in struct netns_ipv6 (taowei) [task:200581]
  - ipv6: make ip6_rt_gc_expire an atomic_t (Eric Dumazet) [task:200581] {CVE-2023-52340}
  - crypto: ccp - Remove forward declaration (Nathan Chancellor) [task:352385]
  - kprobes: Fix compiler warning for !CONFIG_KPROBES_ON_FTRACE (Muchun Song) [task:352385]
  - fix some compilation warnings (Jiangshan Yi) [task:352385]
  - irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses (Barry Song) [task:336421]
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Jesse Zhang) [task:346955] {CVE-2024-42228}
  - scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (John Garry) [task:346675] {CVE-2022-48792}
  - can: j1939: prevent deadlock by moving j1939_sk_errqueue() (Oleksij Rempel) [task:341503]
  - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new (Oleksij Rempel) [task:341503] {CVE-2023-52887}
  - can: j1939: extend UAPI to notify about RX status (Oleksij Rempel) [task:341503]
  - can: j1939: rename J1939_ERRQUEUE_* to J1939_ERRQUEUE_TX_* (Oleksij Rempel) [task:341503]
  - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger) [task:345299] {CVE-2024-39494}
  - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (Ferry Meng) [task:345115] {CVE-2024-41016}
  - ocfs2: add bounds checking to ocfs2_xattr_find_entry() (Ferry Meng) [task:345115] {CVE-2024-41016}
  - smb: client: fix potential UAF in cifs_stats_proc_write() (Paulo Alcantara) [task:221999] {CVE-2024-35868}
  - smb: client: fix potential UAF in smb2_is_valid_oplock_break() (Paulo Alcantara) [task:221987] {CVE-2024-35865}
  - smb: client: fix potential UAF in is_valid_oplock_break() (Paulo Alcantara) [task:327836] {CVE-2024-35863}
  - scsi: pm8001: Fix use-after-free for aborted TMF sas_task (John Garry) [task:346413] {CVE-2022-48791}
  - scsi: pm80xx: Fix TMF task completion race condition (Igor Pylypiv) [task:346413] {CVE-2022-48791}
  - mmc: davinci: Don't strip remove function when driver is builtin (Uwe Kleine-König) [task:347147] {CVE-2024-39484}
  - mmc: davinci_mmc: Convert to platform remove callback returning void (Yangtao Li) [task:347147]
  - jffs2: Fix potential illegal address access in jffs2_free_inode (Wang Yong) [task:347055] {CVE-2024-42115}
  - media: dvb-frontends: tda10048: Fix integer overflow (Ricardo Ribalda) [task:347059] {CVE-2024-42223}
  - ext4: do not create EA inode under buffer lock (Jan Kara) [task:347085] {CVE-2024-40972}
  - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Jan Kara) [task:347085]
  - ext4: check the return value of ext4_xattr_inode_dec_ref() (Li Zhong) [task:347085]
  - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Ritesh Harjani) [task:166857]
  - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (Hagar Hemdan) [task:347093] {CVE-2024-42090}
  - usb: usbtmc: Fix bug in pipe direction for control transfers (Alan Stern) [task:347095] {CVE-2022-48834}
  - usb: usbtmc: Fix memory leak in usbtmc_ioctl_request (Guido Kiener) [task:347095]
  - usb: usbtmc: Add ioctl for generic requests on control (Guido Kiener) [task:347095]
  - xfs: add bounds checking to xlog_recover_process_data (lei lu) [task:347089] {CVE-2024-41014}
  - kdb: Fix buffer overflow during tab-complete (Daniel Thompson) [task:347091] {CVE-2024-39480}
  - scsi: qedf: Fix refcount issue when LOGO is received during TMF (Saurav Kashyap) [task:347117] {CVE-2022-48823}
  - scsi: qedf: Modify flush routine to handle all I/Os and TMF (Shyam Sundar) [task:347117]
  - ocfs2: add bounds checking to ocfs2_check_dir_entry() (lei lu) [task:347123] {CVE-2024-41015}
  - nilfs2: fix inode number range checks (Ryusuke Konishi) [task:347125] {CVE-2024-42105}
  - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (Nikita Zhandarovich) [task:347131] {CVE-2024-41097}
  - ipv6: prevent possible NULL deref in fib6_nh_init() (Eric Dumazet) [task:347135] {CVE-2024-40961}
  - IB/core: Implement a limit on UMAD receive List (Michael Guralnik) [task:346963] {CVE-2024-42145}
  - mm: avoid overflows in dirty throttling logic (Jan Kara) [task:346909] {CVE-2024-42131}
  - libceph: fix race between delayed_work() and ceph_monc_stop() (Ilya Dryomov) [task:346915] {CVE-2024-42232}
  - bnx2x: Fix multiple UBSAN array-index-out-of-bounds (Ghadi Elie Rahme) [task:344619] {CVE-2024-42148}
  - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (Aleksandr Mishin) [task:345121] {CVE-2024-39506}
  - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep (Laurent Pinchart) [task:344571] {CVE-2024-42087}
  - jfs: xattr: fix buffer overflow for invalid xattr (Greg Kroah-Hartman) [task:344449] {CVE-2024-40902}
  - orangefs: fix out-of-bounds fsid access (Mike Marshall) [task:345297] {CVE-2024-42143}
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (Jiangfeng Xiao) [task:345307] {CVE-2024-39488}
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (Dmitry Antipov) [task:345309] {CVE-2024-41072}
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (Eric Dumazet) [task:345313] {CVE-2024-40959}
  - ipv6: sr: fix memleak in seg6_hmac_init_algo (Hangbin Liu) [task:345315] {CVE-2024-39489}
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (Remi Pommarel) [task:345317] {CVE-2024-40912}
  - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() (Lee Jones) [task:345415] {CVE-2024-42236}
  - hfsplus: fix uninit-value in copy_name (Edward Adam Davis) [task:345669] {CVE-2024-41059}
  - iio: chemical: bme680: Fix overflows in compensate() functions (Vasileios Amoiridis) [task:345679] {CVE-2024-42086}
  - HID: core: remove unnecessary WARN_ON() in implement() (Nikita Zhandarovich) [task:345675] {CVE-2024-39509}
  - drm/amdgpu: fix UBSAN warning in kv_dpm.c (Alex Deucher) [task:345695] {CVE-2024-40987}
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (Sam Sun) [task:345697] {CVE-2024-39487}
  - tcp_metrics: validate source addr length (Jakub Kicinski) [task:345703] {CVE-2024-42154}
  - net: can: j1939: Initialize unused data in j1939_send_one() (Shigeru Yoshida) [task:345711] {CVE-2024-42076}
  - net/iucv: Avoid explicit cpumask var allocation on stack (Dawei Li) [task:345717] {CVE-2024-42094}
  - jfs: don't walk off the end of ealist (lei lu) [task:345721] {CVE-2024-41017}
  - gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (Ian Ray) [task:345787] {CVE-2024-42253}
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (Ma Ke) [task:346897] {CVE-2024-41095}
  - nilfs2: add missing check for inode numbers on directory entries (Ryusuke Konishi) [task:345765] {CVE-2024-42104}
  - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (Ma Ke) [task:345779] {CVE-2024-42101}
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (Raju Rangoju) [task:345789] {CVE-2024-40984}
  - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [task:345799] {CVE-2024-42124}
  - scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (Saurav Kashyap) [task:345799]
  - drm/radeon: fix UBSAN warning in kv_dpm.c (Alex Deucher) [task:345729] {CVE-2024-40988}
  - inet_diag: Initialize pad field in struct inet_diag_req_v2 (Shigeru Yoshida) [task:345321] {CVE-2024-42106}
  - ax25: Fix refcount imbalance on inbound connections (Lars Kellogg-Stedman) [task:346363] {CVE-2024-40910}
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Herbert Xu) [task:346361] {CVE-2024-39493}
  - ASoC: fsl-asoc-card: set priv->pdev before using it (Elinor Montmasson) [task:346375] {CVE-2024-42089}
  - ata: libata-core: Fix null pointer dereference on error (Niklas Cassel) [task:346377] {CVE-2024-41098}
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (Alan Stern) [task:346373] {CVE-2024-40904}
  - ocfs2: fix races between hole punching and AIO+DIO (Su Yue) [task:345287] {CVE-2024-40943}
  - s390/pkey: Wipe sensitive data on failure (Holger Dengler) [task:346395] {CVE-2024-42157}
  - ipv6: prevent possible NULL dereference in rt6_probe() (Eric Dumazet) [task:346387] {CVE-2024-40960}
  - drm/exynos/vidi: fix memory leak in .get_modes() (Jani Nikula) [task:346391] {CVE-2024-40932}
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (Emmanuel Grumbach) [task:346417] {CVE-2024-40941}
  - ata: libata-core: Fix double free on error (Niklas Cassel) [task:346673] {CVE-2024-41087}
  - net: ethernet: lantiq_etop: fix double free in detach (Aleksander Jan Bajkowski) [task:346393] {CVE-2024-41046}
  - net: lantiq_etop: add blank line after declaration (Aleksander Jan Bajkowski) [task:346393]
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (Ma Ke) [task:346905] {CVE-2024-41089}
  - i2c: lpi2c: Avoid calling clk_get_rate during transfer (Alexander Stein) [task:346895] {CVE-2024-40965}
  - i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work (Carlos Song) [task:346895]
  - i2c: imx-lpi2c: use bulk clk API (Peng Fan) [task:346895]
  - tipc: fix kernel panic when enabling bearer (Tung Nguyen) [task:346901] {CVE-2022-48865}
  - tipc: fix NULL pointer dereference in tipc_disc_rcv() (Tuong Lien) [task:346901]
  - tipc: add reference counter to bearer (Tuong Lien) [task:346901]
  - batman-adv: bypass empty buckets in batadv_purge_orig_ref() (Eric Dumazet) [task:346925] {CVE-2024-40981}
  - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr (Piotr Wojtaszczyk) [task:346937] {CVE-2024-42153}
  - fbdev: savage: Handle err return when savagefb_check_var failed (Cai Xinchen) [task:346943] {CVE-2024-39475}
  - drm/vc4: Fix deadlock on DSI device attach error (Padmanabha Srinivasaiah) [task:346939] {CVE-2022-48826}
  - drm/vc4: dsi: Only register our component once a DSI device is attached (Maxime Ripard) [task:346939]
  - drm/amd/display: Skip finding free audio for unknown engine_id (Alex Hung) [task:346961] {CVE-2024-42119}
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Jan Kara) [task:346949] {CVE-2024-42102}
  - net: dsa: mv88e6xxx: Correct check for empty list (Simon Horman) [task:346967] {CVE-2024-42224}
  - ocfs2: fix DIO failure due to insufficient transaction credits (Jan Kara) [task:346985] {CVE-2024-42077}
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Sagi Grimberg) [task:346989] {CVE-2024-42152}
  - nvmet: update AEN list and array at one place (Daniel Wagner) [task:346989]
  - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects (Nicolas Escande) [task:346993] {CVE-2024-40942}
  - ftruncate: pass a signed offset (Arnd Bergmann) [task:346997] {CVE-2024-42084}
  - vmci: prevent speculation leaks by sanitizing event in event_deliver() (Hagar Gamal Halim Hemdan) [task:347011] {CVE-2024-39499}
  - ppp: reject claimed-as-LCP but actually malformed packets (Dmitry Antipov) [task:347013] {CVE-2024-41044}
  - ppp: ensure minimum packet size in ppp_write() (Eric Dumazet) [task:160493]
  - s390/sclp: Fix sclp_init() cleanup on failure (Heiko Carstens) [task:347023] {CVE-2024-41068}
  - scsi: qedi: Fix crash while reading debugfs attribute (Manish Rangankar) [task:347025] {CVE-2024-40978}
  - mISDN: Fix memory leak in dsp_pipeline_build() (Alexey Khoroshilov) [task:347035] {CVE-2022-48863}
  - mISDN: Remove obsolete PIPELINE_DEBUG debugging information (Zhen Lei) [task:347035]
  - ALSA: emux: improve patch ioctl data validation (Oswald Buddenhagen) [task:347041] {CVE-2024-42097}
  - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors (Ryusuke Konishi) [task:347027] {CVE-2024-39469}
  - nilfs2: return the mapped address from nilfs_get_page() (Matthew Wilcox (Oracle)) [task:347027]
  - nilfs2: Remove check for PageError (Matthew Wilcox (Oracle)) [task:347027]
  - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (Alan Stern) [task:345741] {CVE-2024-41035}
  - USB: core: add endpoint-blacklist quirk (Johan Hovold) [task:345741] {CVE-2024-41035}
  - usb: core: config: using bit mask instead of individual bits (Pavel Hofman) [task:345741] {CVE-2024-41035}
  - usb: core: config: fix validation of wMaxPacketValue entries (Pavel Hofman) [task:345741] {CVE-2024-41035}
  - USB: Fix: Don't skip endpoint descriptors with maxpacket=0 (Alan Stern) [task:345741] {CVE-2024-41035}
  - ACPI: CPPC: Fix access width used for PCC registers (Vanshidhar Konda) [task:223069]
  - ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro (Jarred White) [task:223069]
  - ACPI: CPPC: Use access_width over bit_width for system memory accesses (Jarred White) [task:223069] {CVE-2024-35995}
  - ACPI: CPPC: Drop redundant local variable from cpc_read() (Rafael J. Wysocki) [task:223069]
  - ACPI: CPPC: fix some coding style issues (Xiaofei Tan) [task:223069]
  - ACPI: CPPC: Fix up I/O port access in cpc_read() (Rafael J. Wysocki) [task:223069]
  - ACPI: CPPC: Implement support for SystemIO registers (Steven Noonan) [task:223069]
  - ACPI: CPPC: initialise vaddr pointers to NULL (Ionela Voinescu) [task:223069]
  - drm/vc4: hdmi: Unregister codec device on unbind (Maxime Ripard) [task:344615] {CVE-2022-48852}
  - net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov) [task:330544] {CVE-2024-38538}
  - tcp: Fix listen() regression in 4.19.270 (Kuniyuki Iwashima) [task:166857, bug:253275]
  - ftrace: Fix possible use-after-free issue in ftrace_location() (Zheng Yejian) [task:330288] {CVE-2024-38588}
  - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (Zheng Yejian) [task:330288]
  - netfilter: tproxy: bail out if IP has been disabled on the device (Florian Westphal) [task:330558] {CVE-2024-36270}
  - netfilter: use in_dev_for_each_ifa_rcu (Florian Westphal) [task:330558]
  - virtio_net: Add XDP frame size in two code paths (Jesper Dangaard Brouer) [bug:252011]
  - xdp: fix kabi broken of xdp_do_redirect (lingfuyi) [bug:252011]
  - xdp: Add frame size to xdp_buff (Jesper Dangaard Brouer) [bug:252011]
  - rpmbuild: add --without-kabi-check parameter support (Jiangshan Yi) [task:345291]
  - net_sched: walk through all child classes in tc_bind_tclass() (Cong Wang) [task:218825]
  - net: relax socket state check at accept time. (Paolo Abeni) [task:341253] {CVE-2024-36484}
  - jfs: Fix array-index-out-of-bounds in diFree (Jeongjun Park)
  - nfsd: Fix races between nfsd4_cb_release() and nfsd4_shutdown_callback() (Trond Myklebust) [task:334950]
  - nfsd: minor 4.1 callback cleanup (Trond Myklebust) [task:334950]
  - net/tls: Fix flipped sign in tls_err_abort() calls (Daniel Jordan) [task:223103] {CVE-2021-47496}
  - tls: Fix socket mem accounting error under async encryption (Vakul Garg) [task:82911]
  - net/tls: Add support for async decryption of tls records (Vakul Garg) [task:82911]
  - net/tls: Add support for async encryption of records for performance (Vakul Garg) [task:82911]
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Kuniyuki Iwashima) [task:328482] {CVE-2024-36933}
  - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Dong Chenchen) [task:166857]
  - net/mlx5e: Fix page reclaim for dead peer hairpin (Dima Chumak) [task:225574] {CVE-2021-47246}
  - Bluetooth: Fix slab-out-of-bounds Read in hci_le_ext_adv_report_evt (luoxuanqiang) [task:218812]
  - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Ding Hui) [task:337725] {CVE-2023-52885}
  - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [task:222101] {CVE-2023-52752}
  - crypto: af_alg - get rid of alg_memory_allocated (Eric Dumazet) [task:341427] {CVE-2022-48781}
  - epoll: be better about file lifetimes (Linus Torvalds) [task:330566] {CVE-2024-38580}
  - i2c: acpi: Unbind mux adapters before delete (Hamish Martin) [task:332220] {CVE-2024-39362}
  - i2c: add fwnode APIs (Russell King (Oracle)) [task:332220]
  - btrfs: fix race between quota rescan and disable leading to NULL pointer deref (Filipe Manana) [task:330358] {CVE-2022-48734}
  - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (Nikolay Borisov) [task:330358] {CVE-2022-48734}
  - btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan (Filipe Manana) [task:158034]
  - btrfs: fix lockdep splat when reading qgroup config on mount (Filipe Manana) [task:158034]
  - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup (Sidong Yang) [task:330358] {CVE-2022-48734}
  - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" (Finn Thain) [task:330496] {CVE-2024-38607}
  - ALSA: Fix deadlocks with kctl removals at disconnection (Takashi Iwai) [task:330474] {CVE-2024-38600}
  - btrfs: fix deadlock between quota disable and qgroup rescan worker (Shin'ichiro Kawasaki) [task:330358] {CVE-2022-48734}
  - btrfs: fix lockdep splat when enabling and disabling qgroups (Filipe Manana) [task:330358] {CVE-2022-48734}
  - btrfs: move ulist allocation out of transaction in quota enable (David Sterba) [task:330358] {CVE-2022-48734}
  - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Niklas Neronin) [task:223058] {CVE-2023-52781}
  - media: i2c: et8ek8: Don't strip remove function when driver is builtin (Uwe Kleine-König) [task:330538] {CVE-2024-38611}
  - ax25: Fix reference count leak issue of net_device (Duoming Zhou) [task:330518] {CVE-2024-38554}
  - perf report: Fix memory leaks around perf_tip() (Ian Rogers) [task:225610] {CVE-2021-47543}
  - net: fec: remove .ndo_poll_controller to avoid deadlocks (Wei Fang) [task:330300]
  - wifi: cfg80211: check A-MSDU format more carefully (Johannes Berg) [task:223115] {CVE-2024-35937}
  - vfio/pci: fix potential memory leak in vfio_intx_enable() (Ye Bin) [task:330570] {CVE-2024-38632}
  - ax25: Fix reference count leak issues of ax25_dev (Duoming Zhou) [task:330575] {CVE-2024-38602}
  - ax25: merge repeat codes in ax25_dev_device_down() (Lu Wei) [task:330575] {CVE-2024-38602}
  - eth: sungem: remove .ndo_poll_controller to avoid deadlocks (Jakub Kicinski) [task:330488] {CVE-2024-38597}
  - ptp: fix code indentation issues (Carlos Llamas) [task:222085]
  - ptp: Fix possible memory leak in ptp_clock_register() (Yang Yingliang) [task:222085] {CVE-2021-47455}
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (Kuniyuki Iwashima) [task:330565] {CVE-2024-37356}
  - params: lift param_set_uint_minmax to common code (Sagi Grimberg) [task:330565]
  - ubifs: Fix races between xattr_{set|get} and listxattr operations (Zhihao Cheng) [task:223056] {CVE-2021-47351}
  - ring-buffer: Fix a race between readers and resize checks (Petr Pavlu) [task:330286] {CVE-2024-38601}
  - scsi: bfa: Ensure the copied buf is NUL terminated (Bui Quang Minh) [task:330280] {CVE-2024-38560}
  - drm: vc4: Fix possible null pointer dereference (Aleksandr Mishin) [task:330526] {CVE-2024-38546}
  - mmc: sdhci-msm: pervent access to suspended controller (Mantas Pucka) [task:224217] {CVE-2024-36029}
  - mmc: sdhci-msm: add Inline Crypto Engine support (Eric Biggers) [task:224217]
  - mmc: sdhci-msm: Mark sdhci_msm_cqe_disable static (Stephen Boyd) [task:224217]
  - mmc: sdhci-msm: Add CQHCI support for sdhci-msm (Ritesh Harjani) [task:224217]
  - mmc: sdhci-msm: Use OPP API to set clk/perf state (Rajendra Nayak) [task:224217]
  - mmc: sdhci-msm: Re-initialize DLL if MCLK is gated dynamically (Veerabhadrarao Badiganti) [task:224217]
  - xfs: cap longest free extent to maximum allocatable (Dave Chinner) [task:328072]
  - nilfs2: fix use-after-free of timer for log writer thread (Ryusuke Konishi) [task:330506] {CVE-2024-38583}
  - KVM: LAPIC: Also cancel preemption timer during SET_LAPIC (Wanpeng Li) [task:330470] {CVE-2022-48765}
  - KVM: LAPIC: Write 0 to TMICT should also cancel vmx-preemption timer (Wanpeng Li) [task:330470]
  - KVM: LAPIC: Advancing the timer expiration on guest initiated write (Wanpeng Li) [task:330470]
  - KVM: LAPIC: Also cancel preemption timer when disarm LAPIC timer (Wanpeng Li) [task:330470]
  - ecryptfs: Fix buffer size for tag 66 packet (Brian Kubisiak) [task:330504] {CVE-2024-38578}
  - netrom: fix possible dead-lock in nr_rt_ioctl() (Eric Dumazet) [task:330492] {CVE-2024-38589}
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (Ilya Maximets) [task:330359] {CVE-2024-38558}
  - m68k: Fix spinlock race in kernel thread creation (Michael Schmitz) [task:330486] {CVE-2024-38613}
  - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc (Chengfeng Ye) [task:216643] {CVE-2021-47211}
  - net/sched: fix kabi change in struct Qdisc (Zhengchao Shao) [task:217588] {CVE-2024-27010, CVE-2024-27010}
  - net/sched: Fix mirred deadlock on device recursion (Eric Dumazet) [task:217588] {CVE-2024-27010}
  - ipvlan: add ipvlan_route_v6_outbound() helper (Eric Dumazet) [task:223092] {CVE-2023-52796}
  - net: annotate data-race in neigh_output() (Eric Dumazet) [task:205566]
  - neighbor: Add skip_cache argument to neigh_output (David Ahern) [task:205566]
  - ipvlan: properly track tx_errors (Eric Dumazet) [task:223092]
  - net: add DEV_STATS_READ() helper (Eric Dumazet) [task:223092]
  - macsec: use DEV_STATS_INC() (Eric Dumazet) [task:223092]
  - macsec: Fix traffic counters/statistics (Clayton Yager) [task:223092]
  - macsec: avoid use-after-free in macsec_handle_frame() (Eric Dumazet) [task:158034]
  - net: fix kabi broken in struct net_device_stats (taowei) [task:204908]
  - net: add atomic_long_t to net_device_stats fields (Eric Dumazet) [task:204908]
  - xfs: prohibit fstrim in norecovery mode (Darrick J. Wong) [task:57649, bug:247827]
  - netfilter: conntrack: serialize hash resizes and cleanups (Eric Dumazet) [task:226456] {CVE-2021-47408}
  - fanotify: Avoid softlockups when reading many events (Jan Kara) [task:340889]
  - xfs: fix inode allocation block res calculation precedence (Brian Foster) [task:334329]
  - nilfs2: fix potential kernel bug due to lack of writeback flag waiting (Ryusuke Konishi) [task:332240] {CVE-2024-37078}
  - OPENEULER: tcp/dccp: Add another way to allocate local ports in connect() (xiaolinkui) [task:336487]
  - ipv6: prevent NULL dereference in ip6_output() (Eric Dumazet) [task:226456]
  - ipv6: annotate data-races around cnf.disable_ipv6 (Eric Dumazet) [task:226456]
  - net: fix __dst_negative_advice() race (Eric Dumazet) [task:328468] {CVE-2024-36971}
  - net: annotate data-races around sk->sk_dst_pending_confirm (Eric Dumazet) [task:328468]
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Yue Haibing) [task:330556] {CVE-2024-33621}
  - usb: cdc-wdm: close race between read and workqueue (Oliver Neukum) [task:327804] {CVE-2024-35812}
  - wifi: iwlwifi: read txq->read_ptr under lock (Johannes Berg) [task:224209] {CVE-2024-36922}
  - tcp: fix page frag corruption on page fault (Paolo Abeni) [task:225588] {CVE-2021-47544}
  - s390/ap: Fix crash in AP internal function modify_bitmap() (Harald Freudenberger) [task:332252] {CVE-2024-38661}
  - media: lgdt3306a: Add a check against null-pointer-def (Zheyu Ma) [task:332251] {CVE-2022-48772}
  - media: dvb-frontends: Use kmemdup instead of duplicating its function (zhong jiang) [task:332251]
  - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Baokun Li) [task:332253] {CVE-2024-39276}
  - Input: cyapa - add missing input core locking to suspend/resume functions (Marek Szyprowski) [task:332207] {CVE-2023-52884}
  - net/9p: fix uninit-value in p9_client_rpc() (Nikita Zhandarovich) [task:332238] {CVE-2024-39301}
  - of: module: add buffer overflow check in of_modalias() (Sergey Shtylyov) [task:330476] {CVE-2024-38541}
  - mlxsw: core_thermal: Fix fan speed in maximum cooling state (Ido Schimmel) [task:223114]
  - mlxsw: thermal: Fix out-of-bounds memory accesses (Ido Schimmel) [task:223114] {CVE-2021-47441}
  - mlxsw: core: Extend cooling device with cooling levels (Vadim Pasternak) [task:223114]
  - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [task:223105] {CVE-2021-47307}
  - usb-storage: alauda: Check whether the media is initialized (Shichao Lai) [task:330542] {CVE-2024-38619}
  - drm/mediatek: Add 0 size check to mtk_drm_gem_obj (Justin Green) [task:330472] {CVE-2024-38549}
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Jiri Pirko) [task:330562] {CVE-2024-37353}
  - ipv6: sr: fix invalid unregister error path (Hangbin Liu) [task:330500] {CVE-2024-38612}
  - wifi: carl9170: add a proper sanity check for endpoints (Nikita Zhandarovich) [task:330490] {CVE-2024-38567}
  - usb: xhci-plat: fix crash when suspend if remote wake enable (Frank Li) [task:330356] {CVE-2022-48761}
  - usb: host: xhci-plat: add .suspend_quirk for struct xhci_plat_priv (Peter Chen) [task:330356]
  - of: module: prevent NULL pointer dereference in vsnprintf() (Sergey Shtylyov) [task:327802] {CVE-2024-35878}
  - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (Dongli Zhang) [task:330555] {CVE-2024-31076}
  - inet_diag: fix kernel-infoleak for UDP sockets (Eric Dumazet) [task:330553] {CVE-2021-47597}
  - inet_diag: use jiffies_delta_to_msecs() (Eric Dumazet) [task:330553]
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Eric Dumazet) [task:330559] {CVE-2024-36286}
  - media: stk1160: fix bounds checking in stk1160_copy_video() (Dan Carpenter) [task:330567] {CVE-2024-38621}
  - serial: max3100: Update uart_driver_registered on driver removal (Andy Shevchenko) [task:330568] {CVE-2024-38633}
  - greybus: lights: check return of get_channel_from_mode (Rui Miguel Silva) [task:330569] {CVE-2024-38637}
  - nilfs2: fix potential hang in nilfs_detach_log_writer() (Ryusuke Konishi) [task:330571] {CVE-2024-38582}
  - nilfs2: fix unexpected freezing of nilfs_segctor_sync() (Ryusuke Konishi) [task:330571]
  - watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger (Duoming Zhou) [task:330572] {CVE-2024-38630}
  - serial: max3100: Lock port->lock when calling uart_handle_cts_change() (Andy Shevchenko) [task:330573] {CVE-2024-38634}
  - dma-buf/sw-sync: don't enable IRQ from sync_print_obj() (Tetsuo Handa) [task:330574] {CVE-2024-38780}
  - stm class: Fix a double free in stm_register_device() (Dan Carpenter) [task:330576] {CVE-2024-38627}
  - enic: Validate length of nl attributes in enic_set_vf_port (Roded Zats) [task:330578] {CVE-2024-38659}
  - scsi: qedf: Ensure the copied buf is NUL terminated (Bui Quang Minh) [task:330528] {CVE-2024-38559}
  - speakup: Fix sizeof() vs ARRAY_SIZE() bug (Dan Carpenter) [task:330524] {CVE-2024-38587}
  - crypto: bcm - Fix pointer arithmetic (Aleksandr Mishin) [task:330302] {CVE-2024-38579}
  - jffs2: prevent xattr node from overflowing the eraseblock (Ilya Denisyev) [task:330534] {CVE-2024-38599}
  - ALSA: timer: Set lower bound of start tick time (Takashi Iwai) [task:330536] {CVE-2024-38618}
  - wifi: ar5523: enable proper endpoint verification (Nikita Zhandarovich) [task:330532] {CVE-2024-38565}
  - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Breno Leitao) [task:330510] {CVE-2024-38596}
  - drm/amd/display: Fix potential index out of bounds in color transformation function (Srinivasan Shanmugam) [task:330516] {CVE-2024-38552}
  - virtio-net: Add validation for used length (Xie Yongji) [task:221959] {CVE-2021-47352}
  - PM / devfreq: Fix buffer overflow in trans_stat_show (Christian Marangi) [task:207389] {CVE-2023-52614}
  - btrfs: don't drop extent_map for free space inode on write error (Josef Bacik) [task:210433] {CVE-2024-26726}
  - fs/9p: fix uninitialized values during inode evict (Eric Van Hensbergen) [task:224205] {CVE-2024-36923}
  - x86/signal: Detect and prevent an alternate signal stack overflow (Chang S. Bae) [task:223059] {CVE-2021-47326}
  - net/smc: fix compile error in smc_vlan_by_tcpsk function (weirongguang) [task:329030]
  - drm_lease.c: copy user-array safely (Philipp Stanner) [task:223074] {CVE-2023-52820}
  - drm/panel: fix a possible null pointer dereference (Ma Ke) [task:222109] {CVE-2023-52821}
  - drm/amdgpu: fix gart.bo pin_count leak (Leslie Shi) [task:222035] {CVE-2021-47431}
  - lib/generic-radix-tree.c: Don't overflow in peek() (Kent Overstreet) [task:221979] {CVE-2021-47432}
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Thadeu Lima de Souza Cascardo) [task:225616] {CVE-2023-52880}
  - phonet/pep: fix racy skb_queue_empty() use (Rémi Denis-Courmont) [task:220864] {CVE-2024-27402}
  - i2c: smbus: fix NULL function pointer dereference (Wolfram Sang) [task:223077] {CVE-2024-35984}
  - i2c: core: remove level of indentation in i2c_transfer (Wolfram Sang) [task:223077]
  - i2c: core: remove outdated DEBUG output (Wolfram Sang) [task:223077]
  - usb: gadget: f_fs: change ep->status safe in ffs_epfile_io() (Linyu Yuan) [task:225394]
  - drm/sched: Avoid data corruptions (Andrey Grodzovsky) [task:223136] {CVE-2021-47354}
  - cpu/hotplug: Don't offline the last non-isolated CPU (Ran Xiaokai) [task:223118] {CVE-2023-52831}
  - cpu/hotplug: Prevent self deadlock on CPU hot-unplug (Thomas Gleixner) [task:223118] {CVE-2023-52831}
  - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Borislav Petkov (AMD)) [task:223094] {CVE-2024-35876}
  - iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() (Zhang Shurong) [task:223123] {CVE-2023-52802}
  - staging: rtl8712: fix use-after-free in rtl8712_dl_fw (Pavel Skripkin) [task:222111] {CVE-2021-47479}
  - phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet) [task:328460] {CVE-2024-36946}
  - net: sched: sch: Bounds check priority (Kees Cook) [task:222057] {CVE-2023-52734}
  - htb: use anonymous union for simplicity (Cong Wang) [task:222057]
  - media: imon: fix access to invalid resource for the second interface (Takashi Iwai) [task:222087] {CVE-2023-52754}
  - block: fix overflow in blk_ioctl_discard() (Li Nan) [task:328466] {CVE-2024-36917}
  - bna: ensure the copied buf is NUL terminated (Bui Quang Minh) [task:328454] {CVE-2024-36934}
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman) [task:328462] {CVE-2024-36950}
  - fs/9p: only translate RWX permissions for plain 9P2000 (Joakim Sindholt) [task:328470] {CVE-2024-36964}
  - drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin) [task:328443] {CVE-2024-36960}
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Eric Dumazet) [task:224189] {CVE-2024-36905}
  - tcp: remove redundant check on tskb (Colin Ian King) [task:224189]
  - .gitignore: Add compilation database file (Toru Komatsu)
  - of: unittest: Fix compile in the non-dynamic case (Christian A. Ehrhardt) [task:220891]
  - of: unittest: Fix of_count_phandle_with_args() expected value message (Geert Uytterhoeven) [task:220891]
  - of: Fix double free in of_parse_phandle_with_args_map (Christian A. Ehrhardt) [task:220891] {CVE-2023-52679}
  - of: unittest: fix EXPECT text for gpio hog errors (Frank Rowand) [task:220891]
  - of: gpio unittest kfree() wrong object (Frank Rowand) [task:220891]
  - of: unittest: make gpio overlay test dependent on CONFIG_OF_GPIO (Frank Rowand) [task:220891]
  - of: unittest: add overlay gpio test to catch gpio hog problem (Frank Rowand) [task:220891]
  - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (Eric Dumazet) [task:223050] {CVE-2024-35976}
  - net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() (Karsten Graul) [task:225614] {CVE-2021-47559}
  - powerpc/mm: Fix lockup on kernel exec fault (Christophe Leroy) [task:222047] {CVE-2021-47350}
  - soc: qcom: llcc: Handle a second device without data corruption (Uwe Kleine-König) [task:222019] {CVE-2023-52871}
  - i2c: dev: copy userspace array safely (Philipp Stanner) [task:223063] {CVE-2023-52758}
  - string.h: add array-wrappers for (v)memdup_user() (Philipp Stanner) [task:223063] {CVE-2023-52758}
  - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Nam Cao) [task:221811] {CVE-2024-35997}
  - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (felix) [task:221821] {CVE-2023-52803}
  - f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances (Chao Yu) [task:221841] {CVE-2021-47335}
  - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Hans Verkuil) [task:227331] {CVE-2024-23848}
  - erofs: fix pcluster use-after-free on UP platforms (Gao Xiang) [task:217577] {CVE-2022-48674}
  - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error (Norihiko Hama) [task:217593] {CVE-2024-26996}
  - netfilter: complete validation of user input (Eric Dumazet) [task:221923]
  - netfilter: validate user input for expected length (Eric Dumazet) [task:221923] {CVE-2024-35896}
  - net: atlantic: eliminate double free in error handling logic (Igor Russkikh) [task:220884] {CVE-2023-52664}
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Fedor Pchelkin) [task:217545] {CVE-2024-26961}
  - NTB: fix possible name leak in ntb_register_device() (Yang Yingliang) [task:217598] {CVE-2023-52652}
  - soc: fsl: qbman: Use raw spinlock for cgr_lock (Sean Anderson) [task:223104] {CVE-2024-35819}
  - soc: fsl: qbman: Add helper for sanity checking cgr ops (Sean Anderson) [task:223104]
  - soc: fsl: qbman: Add CGR update function (Sean Anderson) [task:223104]
  - KVM: x86: Handle SRCU initialization failure during page track init (Haimin Zhang) [task:221891] {CVE-2021-47407}
  - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Oliver Upton) [task:224206] {CVE-2024-36953}
  - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Marc Zyngier) [task:224206]
  - ipv4: Fix uninit-value access in __ip_make_skb() (Shigeru Yoshida) [task:224214] {CVE-2024-36927}
  - can: j1939: fix Use-after-Free, hold skb ref while in use (Oleksij Rempel) [task:225604] {CVE-2021-47232}
  - can: j1939: transport: add j1939_session_skb_find_by_offset() function (Oleksij Rempel) [task:225604]
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Duoming Zhou) [task:225600] {CVE-2024-27398}
  - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc (Norbert Zulinski) [task:225576] {CVE-2021-47501}
  - i40e: Fix sparse error: uninitialized symbol 'ring' (Arkadiusz Kubalewski) [task:225576]
  - i40e: introduce new dump desc XDP command (Ciara Loftus) [task:225576]
  - tcp: do not accept ACK of bytes we never sent (Eric Dumazet) [task:225596] {CVE-2023-52881}
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Duoming Zhou) [task:225580] {CVE-2024-27399}
  - clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (Jernej Skrabec) [task:225550] {CVE-2023-52882}
  - drm/arm/malidp: fix a possible null pointer dereference (Huai-Yuan Liu) [task:225554] {CVE-2024-36014}
  - ppdev: Add an error check in register_device (Huai-Yuan Liu) [task:225556] {CVE-2024-36015}
  - ppdev: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET) [task:225556]
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Roded Zats) [task:225558] {CVE-2024-36017}
  - firewire: nosy: ensure user_length is taken into account when fetching packet contents (Thanassis Avgerinos) [task:225560] {CVE-2024-27401}
  - mmc: mmc_spi: fix error handling in mmc_spi_probe() (Yang Yingliang) [task:225564] {CVE-2023-52708}
  - mmc: mmc_spi: Indentation fixes (Andy Shevchenko) [task:225564]
  - mmc: spi: Convert to use GPIO descriptors (Linus Walleij) [task:225564]
  - phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init() (Tiezhu Yang) [task:225568] {CVE-2021-47234}
  - drm/client: Fully protect modes[] with dev->mode_config.mutex (Ville Syrjälä) [task:221977] {CVE-2024-35950}
  - s390/dasd: fix double module refcount decrement (Miroslav Franc) [task:217574] {CVE-2024-27054}
  - mm/filemap: avoid buffered read/write race to read inconsistent data (Baokun Li) [task:225198]
  - drm/virtio: fix memory leak of vbuf (liweishi) [task:205462]
  - blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling (zhengbin) [task:225157]
  - nfs: Handle error of rpc_proc_register() in nfs_net_init(). (Kuniyuki Iwashima) [task:224227] {CVE-2024-36939}
  - overflow: Include header file with SIZE_MAX declaration (Leon Romanovsky) [task:158034]
  - linux/kernel.h: split *_MAX and *_MIN macros into <linux/limits.h> (Masahiro Yamada) [task:87159]
  - linux/kernel.h: use 'short' to define USHRT_MAX, SHRT_MAX, SHRT_MIN (Masahiro Yamada) [task:87159]
  - tipc: fix kernel warning when sending SYN message (Tung Nguyen) [task:225562] {CVE-2023-52700}
  - tipc: fix implicit-connect for SYN+ (Xin Long) [task:225562]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.44.v2101
changelog:
  - nvme: ensure subsystem reset is single threaded (Keith Busch) [task:367867, bug:153851] {CVE-2022-3169}
  - nvme: Wait for reset state when required (Keith Busch) [task:367867, bug:150386]
  - nvme: Prevent resets during paused controller state (Keith Busch) [task:85444, task:367867]
  - nvme-pci: Sync queues on reset (Keith Busch) [task:367867, bug:150386]
  - kabi: fix the kabi issue caused by the addition of 'reset_in_progress' in struct usb_device (shitao) [task:370243]
  - USB: core: Prevent nested device-reset calls (Alan Stern) [task:370243] {CVE-2022-4662}
  - Fix a redeclaration compile error (luoxuanqiang) [task:380985]
  - pid: take a reference when initializing `cad_pid` (Mark Rutland) [task:370883]
  - btrfs: do not BUG_ON in link_to_fixup_dir (Josef Bacik) [task:158827, task:370885]
  - crypto: qcom-rng - ensure buffer for generate is completely filled (Brian Masney) [task:370835]
  - ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure (Marc Zyngier) [task:370833] {CVE-2021-46953}
  - crash_core, vmcoreinfo: append 'SECTION_SIZE_BITS' to vmcoreinfo (Pingfan Liu) [bug:281263]
  - crash_core, vmcoreinfo: Append 'MAX_PHYSMEM_BITS' to vmcoreinfo (Bhupesh Sharma) [bug:281263]
  - kdump: Document kernel data exported in the vmcoreinfo note (Lianbo Jiang) [bug:281263]
  - net/mlx5: Add a timeout to acquire the command queue semaphore (Akiva Goldberger) [task:350687] {CVE-2024-38556}
  - net/mlx5: Avoid possible free of command entry while timeout comp handler (Eran Ben Elisha) [task:350687]
  - udf: Avoid excessive partition lengths (Jan Kara) [task:363799] {CVE-2024-46777}
  - udf: Define EFSCORRUPTED error code (Jan Kara) [task:166857]
  - ELF: fix kernel.randomize_va_space double read (Alexey Dobriyan) [task:368307] {CVE-2024-46826}
  - null_blk: fix validation of block size (Andreas Hindborg) [task:347007] {CVE-2024-41077}
  - block: Add a helper to validate the block size (Xie Yongji)
  - RDMA/cxgb4: Added NULL check for lookup_atid (Mikhail Lobanov) [task:376283] {CVE-2024-47749}
  - rtc: cmos: Fix wake alarm breakage (Rafael J. Wysocki) [task:375407]
  - rtc: cmos: Fix event handler registration ordering issue (Rafael J. Wysocki) [task:375407] {CVE-2022-48953}
  - block, bfq: fix possible UAF for bfqq->bic with merge chain (Yu Kuai) [task:375629] {CVE-2024-47706}
  - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (Xin Long) [task:375633] {CVE-2024-49944}
  - MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed (Jiaxun Yang) [task:368269] {CVE-2024-46832}
  - ext4: fix i_data_sem unlock order in ext4_ind_migrate() (Artem Sadovnikov) [task:375967] {CVE-2024-50006}
  - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() (Ryusuke Konishi) [task:375969] {CVE-2024-47699}
  - netfilter: nf_tables: prevent nf_skb_duplicated corruption (Eric Dumazet) [task:376057] {CVE-2024-49952}
  - ppp: fix ppp_async_encode() illegal access (Eric Dumazet) [task:375965] {CVE-2024-50035}
  - ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (Kaixin Wang) [task:375963] {CVE-2024-50059}
  - nfsd: call cache_put if xdr_reserve_space returns NULL (Guoqing Jiang) [task:376185] {CVE-2024-47737}
  - ocfs2: remove unreasonable unlock in ocfs2_read_blocks (Lizhi Xu) [task:376163] {CVE-2024-49965}
  - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error (Junlin Li) [task:375615] {CVE-2024-47697}
  - mailbox: bcm2835: Fix timeout during suspend mode (Stefan Wahren) [task:376341] {CVE-2024-49963}
  - nilfs2: fix potential oob read in nilfs_btree_check_delete() (Ryusuke Konishi) [task:376183] {CVE-2024-47757}
  - ext4: aovid use-after-free in ext4_ext_insert_extent() (Baokun Li) [task:376347] {CVE-2024-49883}
  - ocfs2: cancel dqi_sync_work before freeing oinfo (Joseph Qi) [task:376203] {CVE-2024-49966}
  - drm/amd/display: added NULL check at start of dc_validate_stream (winstang) [task:375221] {CVE-2024-46802}
  - ocfs2: reserve space for inline xattr before attaching reflink tree (Gautham Ananthakrishna) [task:376165] {CVE-2024-49958}
  - btrfs: wait for fixup workers before stopping cleaner kthread during umount (Filipe Manana) [task:376329] {CVE-2024-49867}
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Eric Dumazet) [task:376333] {CVE-2024-47685}
  - ACPI: battery: Fix possible crash when unregistering a battery hook (Armin Wolf) [task:376339] {CVE-2024-49955}
  - ACPI: battery: Simplify battery hook locking (Armin Wolf) [task:376339]
  - net: ethernet: nixge: fix NULL dereference (Yuri Karpov) [task:376191] {CVE-2022-49019}
  - net: nixge: Address compiler warnings when building for i386 (Moritz Fischer) [task:376191]
  - net: nixge: Add support for 64-bit platforms (Moritz Fischer) [task:376191]
  - ext4: fix double brelse() the buffer of the extents path (Baokun Li) [task:376207] {CVE-2024-49882}
  - vfs: fix race between evice_inodes() and find_inode()&iput() (Julian Sun) [task:376219] {CVE-2024-47679}
  - jfs: check if leafidx greater than num leaves per dmap tree (Edward Adam Davis) [task:376377] {CVE-2024-49902}
  - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error (Junlin Li) [task:376239] {CVE-2024-47698}
  - net: Fix an unsafe loop on the list (Anastasia Kovaleva) [task:376085] {CVE-2024-50024}
  - xen: use correct end address of kernel for conflict checking (Juergen Gross) [task:376245] {CVE-2024-47722}
  - media: venus: fix use after free bug in venus_remove due to race condition (Zheng Wang) [task:376401] {CVE-2024-49981}
  - ext4: avoid OOB when system.data xattr changes underneath the filesystem (Thadeu Lima de Souza Cascardo) [task:376249] {CVE-2024-47701}
  - ext4: return error on ext4_find_inline_entry (Thadeu Lima de Souza Cascardo) [task:376249]
  - jfs: Fix uninit-value access of new_ea in ea_buffer (Zhao Mengmeng) [task:376257] {CVE-2024-49900}
  - drm/amd/display: Check stream before comparing them (Alex Hung) [task:376409] {CVE-2024-49896}
  - sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop (Xin Long) [task:376417]
  - sctp: fix memory leak in sctp_stream_outq_migrate() (Zhengchao Shao) [task:376417] {CVE-2022-49013}
  - fbdev: pxafb: Fix possible use after free in pxafb_task() (Kaixin Wang) [task:376117] {CVE-2024-49924}
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation (Srinivasan Shanmugam) [task:376113] {CVE-2024-49894}
  - ocfs2: fix null-ptr-deref when journal load failed. (Julian Sun) [task:376303] {CVE-2024-49957}
  - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (Luiz Augusto von Dentz) [task:376309] {CVE-2024-50044}
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (Baokun Li) [task:376143] {CVE-2024-49959}
  - jfs: Fix uaf in dbFreeBits (Edward Adam Davis) [task:376153] {CVE-2024-49903}
  - e100: Fix possible use after free in e100_xmit_prepare (Wang Hai) [task:376281] {CVE-2022-49026}
  - e100: switch from 'pci_' to 'dma_' API (Christophe JAILLET) [task:376281]
  - aoe: fix the potential use-after-free problem in more places (Chun-Yi Lee) [task:376351] {CVE-2024-49982}
  - usb: hub: avoid warm port reset during USB3 disconnect (Mathias Nyman) [bug:251189]
  - net: ethernet: lantiq_etop: fix memory disclosure (Aleksander Jan Bajkowski) [task:376181] {CVE-2024-49997}
  - tracing: Free buffers when a used dynamic event is removed (Steven Rostedt (Google)) [task:375645] {CVE-2022-49006}
  - tracing: initialize variable in create_dyn_event() (Frank Rowand) [task:375645]
  - tracing: Add unified dynamic event framework (Masami Hiramatsu) [task:375645]
  - mm: swapoff: shmem_unuse() stop eviction without igrab() (Hugh Dickins) [task:357255]
  - mm: swapoff: take notice of completion sooner (Hugh Dickins) [task:357255]
  - mm: swapoff: remove too limiting SWAP_UNUSE_MAX_TRIES (Hugh Dickins) [task:357255]
  - mm: swapoff: shmem_find_swap_entries() filter out other types (Hugh Dickins) [task:357255]
  - mm: swap: properly update readahead statistics in unuse_pte_range() (Andrea Righi) [task:357255]
  - mm: rid swapoff of quadratic complexity (Vineeth Remanan Pillai) [task:357255]
  - mm: refactor swap-in logic out of shmem_getpage_gfp (Vineeth Remanan Pillai) [task:357255]
  - fix CONFIG_ARCH_PHYITUM spelling mistake (jiangxiujie) [task:364023]
  - ext4: Fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed (Ye Bin) [task:355213] {CVE-2021-47117}
  - Revert "ext4: Fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed" (Ye Bin)
  - ext4: Fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed (Ye Bin)
  - ext4: fix memory leak in ext4_fill_super (Pavel Skripkin) [task:370877] {CVE-2021-47119}
  - ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts'o) [task:370801] {CVE-2024-0775}
  - security/box: fix bug with kvmalloc free (zhubing) [task:370661]
  - security/box: fix bug with can't get dir contents (yangzhao) [task:211220]
  - crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (Tong Zhang) [task:158827] {CVE-2021-47056}
  - i40e: Add bounds check for ch[] array (Piotr Kwapulinski) [task:367865] {CVE-2019-0149}
  - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses (Eric Dumazet) [task:370241] {CVE-2021-4203}
  - drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable() (Abhinav Kumar) [task:363787] {CVE-2024-45015}
  - drm/msm/dpu: remove RM dependency on connector state (Jeykumar Sankaran) [task:363787]
  - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (Pei Xiao) [task:376385] {CVE-2024-49962}
  - config: enable CONFIG_BUG_ON_DATA_CORRUPTION (tanze) [task:354881]
  - sysctl: always initialize i_uid/i_gid (Thomas Weißschuh) [task:352223] {CVE-2024-42312}
  - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Scott Mayhew) [task:363951] {CVE-2024-46695}
  - btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() (Filipe Manana) [task:364083] {CVE-2024-46751}
  - btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info() (Filipe Manana) [task:364083]
  - btrfs: remove superfluous metadata check at btrfs_lookup_extent_info() (Filipe Manana) [task:364083]
  - ACPI: video: Change how we determine if brightness key-presses are handled (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses (Hans de Goede) [task:368343] {CVE-2024-46859}
  - platform/x86: panasonic-laptop: Use acpi_video_get_backlight_type() (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: filter out duplicate volume up/down/mute keypresses (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: don't report duplicate brightness key-presses (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: revert "Resolve hotkey double trigger bug" (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: sort includes alphabetically (Hans de Goede) [task:368343]
  - treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 392 (Thomas Gleixner) [task:368343]
  - platform/x86: panasonic-laptop: de-obfuscate button codes (Stefan Seyfried) [task:368343]
  - platform/x86: panasonic-laptop: Replace snprintf in show functions with sysfs_emit (Qing Wang) [task:368343]
  - platform/x86: panasonic-laptop: remove redundant assignment of variable result (Colin Ian King) [task:368343]
  - platform/x86: panasonic-laptop: Add sysfs attributes for firmware brightness registers (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Add support for battery charging threshold (eco mode) (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Resolve hotkey double trigger bug (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Add write support to mute (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Fix sticky key init bug (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Fix naming of platform files for consistency with other modules (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Split MODULE_AUTHOR() by one author per macro call (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Replace ACPI prints with pr_*() macros (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Add support for optical driver power in Y and W series (Kenneth Chan) [task:368343]
  - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) (Kishon Vijay Abraham I) [task:372905] {CVE-2024-47667}
  - nfs: fix UAF in direct writes (Josef Bacik) [task:217568] {CVE-2024-26958}
  - staging: iio: frequency: ad9834: Validate frequency parameter value (Aleksandr Mishin) [task:372895] {CVE-2024-47663}
  - staging: iio: frequency: ad9833: Load clock using clock framework (Beniamin Bia) [task:372895]
  - staging: iio: frequency: ad9833: Get frequency value statically (Beniamin Bia) [task:372895]
  - nilfs2: fix state management in error path of log writing function (Ryusuke Konishi) [task:372903] {CVE-2024-47669}
  - wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead (Emmanuel Grumbach) [task:372897] {CVE-2024-47672}
  - scsi: pm80xx: Set phy->enable_completion only when we wait for it (Igor Pylypiv) [task:372775] {CVE-2024-47666}
  - scsi: pm80xx: Add fatal error checks (Changyuan Lyu) [task:372775]
  - scsi: pm80xx: Fix for phy enable/disable functionality (Deepak Ukey) [task:372775]
  - kernfs: fix potential NULL dereference in __kernfs_remove (Yushan Zhou) [task:352489]
  - kernfs: fix NULL dereferencing in kernfs_remove (Minchan Kim) [task:352489]
  - kernfs: remove redundant kernfs_rwsem declaration. (Imran Khan) [task:352489]
  - kernfs: prevent early freeing of root node (Minchan Kim) [task:352489]
  - kernfs: switch global kernfs_rwsem lock to per-fs lock (Minchan Kim) [task:352489]
  - perf/x86/intel: Limit the period on Haswell (Kan Liang) {CVE-2024-46848}
  - tcp_bpf: fix return value of tcp_bpf_sendmsg() (Cong Wang) [task:364047] {CVE-2024-46783}
  - tracing: Fix race issue between cpu buffer write and swap (Zheng Yejian)
  - ALSA: line6: Fix racy access to midibuf (Takashi Iwai) [task:364721]
  - smack: tcp: ipv4, fix incorrect labeling (Casey Schaufler) [task:372671] {CVE-2024-47659}
  - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Kent Overstreet) [task:372519] {CVE-2024-47668}
  - xfs: make sure sb_fdblocks is non-negative (Wengang Wang) [task:354053]
  - netfilter: nft_socket: fix sk refcount leaks (Florian Westphal) [task:368153] {CVE-2024-46855}
  - ASoC: meson: axg-card: fix 'use-after-free' (Arseniy Krasnov) [task:368151] {CVE-2024-46849}
  - ethtool: check device is present when getting link settings (Jamie Bainbridge) [task:364141] {CVE-2024-46679}
  - drm/amd/display: Check BIOS images before it is used (Alex Hung) [task:368525] {CVE-2024-46809}
  - drm/amdgpu: Replace one-elements array with flex-array members (Paulo Miguel Almeida) [task:368525]
  - btrfs: clean up our handling of refs == 0 in snapshot delete (Josef Bacik) [task:368305] {CVE-2024-46840}
  - drm/amd/display: Check gpio_id before used as array index (Alex Hung) [task:368129] {CVE-2024-46818}
  - drm/amd/display: Check hpd_gpio for NULL before accessing it (Harry Wentland) [task:368129]
  - drm/amd/display: add gpio lock/unlock (Chiawen Huang) [task:368129]
  - drm/amd/display: fix sporadic multiple aux transaction failure (Yogesh Mohan Marimuthu) [task:368129]
  - drm/amd/display: add query HPD interface. (Chiawen Huang) [task:368129]
  - net: dpaa: Pad packets to ETH_ZLEN (Sean Anderson) [task:368157] {CVE-2024-46854}
  - drm/vmwgfx: Fix a deadlock in dma buf fence polling (Zack Rusin) [task:351069] {CVE-2024-43863}
  - drm/vmwgfx/vmwgfx_fence: Add, remove and demote various documentation params/headers (Lee Jones) [task:351069] {CVE-2024-43863}
  - driver: iio: add missing checks on iio_info's callback access (Julien Stephan) [task:363791] {CVE-2024-46715}
  - sched/smt: Fix unbalance sched_smt_present dec/inc (Yang Yingliang) [task:357951] {CVE-2024-44958}
  - xfs: don't account extra agfl blocks as available (Brian Foster) [task:354053]
  - ASoC: topology: Fix route memory corruption (Amadeusz Sławiński) [task:346623] {CVE-2024-41069}
  - gtp: fix a potential NULL pointer dereference (Cong Wang) [task:363647] {CVE-2024-46677}
  - arm64/sparsemem: reduce SECTION_SIZE_BITS (Sudarshan Rajagopalan) [bug:219958]
  - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number (Ma Jun) [task:364199] {CVE-2024-46724}
  - drm/amd/pm: fix the Out-of-bounds read warning (Jesse Zhang) [task:363753] {CVE-2024-46731}
  - memcg_write_event_control(): fix a user-triggerable oops (Al Viro) [task:363965] {CVE-2024-45021}
  - drm/amd/display: Add null checker before passing variables (Alex Hung) [task:352183] {CVE-2024-43902}
  - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Dragos Tatulea) [task:363773] {CVE-2024-44970}
  - ila: call nf_unregister_net_hooks() sooner (Eric Dumazet) [task:364193] {CVE-2024-46782}
  - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (David Fernandez Gonzalez) [task:364051] {CVE-2024-46738}
  - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes (Guenter Roeck) [task:364043] {CVE-2024-46756}
  - scsi: aacraid: Fix double-free on probe failure (Ben Hutchings) [task:363975] {CVE-2024-46673}
  - dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor (Olivier Dautricourt) [task:363973] {CVE-2024-46716}
  - dmaengine: altera-msgdma: Correctly handle descriptor callbacks (Lars-Peter Clausen) [task:363973]
  - hwmon: (lm95234) Fix underflows seen when writing limit attributes (Guenter Roeck) [task:363963] {CVE-2024-46758}
  - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (Camila Alvarez) [task:364071] {CVE-2024-46747}
  - Squashfs: sanity check symbolic link size (Phillip Lougher) [task:364131] {CVE-2024-46744}
  - mmc: mmc_test: Fix NULL dereference on allocation failure (Dan Carpenter) [task:364203] {CVE-2024-45028}
  - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes (Guenter Roeck) [task:364195] {CVE-2024-46757}
  - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (Sascha Hauer) [task:363957] {CVE-2024-46755}
  - apparmor: fix possible NULL pointer dereference (Leesoo Ahn) [task:364181] {CVE-2024-46721}
  - ACPI: extlog: fix NULL pointer dereference check (Prarit Bhargava) [task:364161] {CVE-2023-52605}
  - usb: dwc3: core: Prevent USB core invalid event buffer address access (Selvarasu Ganesan) [task:364045] {CVE-2024-46675}
  - usb: dwc3: core: Skip setting event buffers for host only controllers (Krishna Kurapati) [task:364045]
  - mm/vmscan: Fix hard LOCKUP in function isolate_lru_pages (liuye) [task:334682]
  - hwmon: (adc128d818) Fix underflows seen when writing limit attributes (Guenter Roeck) [task:363803] {CVE-2024-46759}
  - drm/amdgpu: fix ucode out-of-bounds read warning (Tim Huang) [task:364077] {CVE-2024-46723}
  - bpf: Remove tst_run from lwt_seg6local_prog_ops. (Sebastian Andrzej Siewior) [task:364073] {CVE-2024-46754}
  - PCI: Add missing bridge lock to pci_bus_lock() (Dan Williams) [task:364081] {CVE-2024-46750}
  - usb: dwc3: st: fix probed platform device ref count on probe error path (Krzysztof Kozlowski) [task:364169] {CVE-2024-46674}
  - sch/netem: fix use after free in netem_dequeue (Stephen Hemminger) [task:364105] {CVE-2024-46800}
  - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (Krishna Kumar) [task:364063] {CVE-2024-46761}
  - nfc: pn533: Add poll mod list filling check (Aleksandr Mishin) [task:364099] {CVE-2024-46676}
  - nfc: pn533: Add autopoll capability (Lars Poeschel) [task:364099]
  - nfc: pn533: Add dev_up/dev_down hooks to phy_ops (Lars Poeschel) [task:364099]
  - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). (Kuniyuki Iwashima) [task:364095]
  - can: bcm: Remove proc entry when dev is unregistered. (Kuniyuki Iwashima) [task:364095] {CVE-2024-46771}
  - of/irq: Prevent device address out-of-bounds read in interrupt map walk (Stefan Wiehler) [task:364093] {CVE-2024-46743}
  - binder: fix UAF caused by offsets overwrite (Carlos Llamas) [task:364173] {CVE-2024-46740}
  - nilfs2: protect references to superblock parameters exposed in sysfs (Ryusuke Konishi) [task:364057] {CVE-2024-46780}
  - nilfs2: replace snprintf in show functions with sysfs_emit (Qing Wang) [task:364057]
  - Revert "btrfs: qgroup: fix quota root leak after quota disable failure" (wangdicheng) [task:347151]
  - pinctrl: single: fix potential NULL dereference in pcs_get_function() (Ma Ke) [task:363769] {CVE-2024-46685}
  - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind (Saurabh Sengar) [task:363759] {CVE-2024-46739}
  - drm/amdgpu: fix mc_data out-of-bounds read warning (Tim Huang) [task:363795] {CVE-2024-46722}
  - netem: fix return value if duplicate enqueue fails (Stephen Hemminger) [task:364103] {CVE-2024-45016}
  - net: netem: fix use after free and double free with packet corruption (Jakub Kicinski) [task:364103]
  - Input: uinput - reject requests with unreasonable number of slots (Dmitry Torokhov) [task:364055] {CVE-2024-46745}
  - net: dsa: mv88e6xxx: Fix out-of-bound access (Joseph Huang) [task:358101] {CVE-2024-44988}
  - btrfs: qgroup: fix quota root leak after quota disable failure (Filipe Manana) [task:347151] {CVE-2024-41078}
  - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() (Chao Yu) [task:347103] {CVE-2024-39467}
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show() (Chen Ridong) [task:352627] {CVE-2024-43853}
  - netfilter: ctnetlink: use helper function to calculate expect ID (Pablo Neira Ayuso) [task:357933] {CVE-2024-44944}
  - net: hns3: fix a deadlock problem when config TC during resetting (Jie Wang) [task:358107] {CVE-2024-44995}
  - ssb: Fix potential NULL pointer dereference in ssb_device_uevent() (Rand Deeb) [task:347161] {CVE-2024-40982}
  - fuse: Initialize beyond-EOF page contents before setting uptodate (Jann Horn) [task:358119] {CVE-2024-44947}
  - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (Andi Shyti) [task:351225] {CVE-2024-42259}
  - Input: MT - limit max slots (Tetsuo Handa) [task:357851] {CVE-2024-45008}
  - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Li Qiang) [task:357923]
  - kcm: Serialise kcm_sendmsg() for the same socket. (Kuniyuki Iwashima) [task:358105] {CVE-2024-44946}
  - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (Dmitry Baryshkov) [task:357971] {CVE-2024-44982}
  - s390/sclp: Prevent release of buffer in I/O (Peter Oberparleiter) [task:357955] {CVE-2024-44969}
  - x86/mm: Fix pti_clone_pgtable() alignment assumption (Peter Zijlstra) [task:357895] {CVE-2024-44965}
  - ipv6: prevent UAF in ip6_send_skb() (Eric Dumazet) [task:357925] {CVE-2024-44987}
  - atm: idt77252: prevent use after free in dequeue_rx() (Dan Carpenter) [task:357805] {CVE-2024-44998}
  - wifi: mac80211: sdata can be NULL during AMPDU start (Alexander Wetzel) [task:351523] {CVE-2022-48875}
  - x86/mtrr: Check if fixed MTRRs exist before saving them (Andi Kleen) [task:357771] {CVE-2024-44948}
  - usb: gadget: core: Check for unset descriptor (Chris Wulff) [task:357799] {CVE-2024-44960}
  - media: dvb-usb-v2: af9035: fix missing unlock (Hans Verkuil) [task:357803]
  - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (Zhang Shurong) [task:357803] {CVE-2023-52915}
  - ibmvnic: Add tx check to prevent skb leak (Nick Child) [task:345709] {CVE-2024-41066}
  - drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update (Srinivasan Shanmugam) [task:352661] {CVE-2024-43903}
  - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules (Ma Jun) [task:352181] {CVE-2024-43907}
  - x86: stop playing stack games in profile_pc() (Linus Torvalds) [task:347039] {CVE-2024-42096}
  - NFSD: Fix ia_size underflow (Chuck Lever) [task:347049] {CVE-2022-48828}
  - f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC (Chao Yu) [task:352651] {CVE-2024-44942}
  - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (Dave Jiang) [task:346975] {CVE-2024-42110}
  - USB: serial: mos7840: fix crash on resume (Dmitry Smirnov) [task:347175] {CVE-2024-42244}
  - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Kenton Groombridge) [task:346919] {CVE-2024-41071}
  - s390/pkey: Wipe copies of clear-key structures on failure (Holger Dengler) [task:345319] {CVE-2024-42156}
  - ipv6: sr: fix missing sk_buff release in seg6_input_core (Andrea Mayer) [task:347171] {CVE-2024-39490}
  - filelock: Remove locks reliably when fcntl/close race is detected (Jann Horn) [task:346931] {CVE-2024-41012}
  - btrfs: get rid of warning on transaction commit when using flushoncommit (Filipe Manana) [task:351471] {CVE-2022-48920}
  - f2fs: fix return value of f2fs_convert_inline_inode() (Chao Yu) [task:352015] {CVE-2024-42296}
  - f2fs: fix to consider multiple device for readonly check (Chao Yu) [task:352015]
  - ocfs2: fix data corruption by fallocate (Junxiao Bi) [task:158827, task:370879]
  - KVM: Add infrastructure and macro to mark VM as bugged (Sean Christopherson) [task:370239, bug:128559]
  - net: add <linux/cpu.h> to net/core/pktgen.c (Yan Wang) [task:363783]
  - netfilter: nftables: avoid overflows in nft_hash_buckets() (Eric Dumazet) [task:370849] {CVE-2021-46992}
  - Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() (Sungwoo Kim) [task:223107] {CVE-2024-36013}
  - Bluetooth: Remove BT_HS (Luiz Augusto von Dentz) [task:223107]
  - Bluetooth: remove redundant assignment to variable icid (Colin Ian King) [task:223107]
  - Bluetooth: Remove unused declaration amp_read_loc_info() (Yue Haibing) [task:353905]
  - Bluetooth: a2mp: Use struct_size() helper (Gustavo A. R. Silva) [task:353905]
  - ethernet:enic: Fix a use after free bug in enic_hard_start_xmit (Lv Yunlong) [task:370851] {CVE-2021-46998}
  - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Lv Yunlong) [task:370853] {CVE-2021-47013}
  - RDMA/rxe: Clear all QP fields if creation failed (Leon Romanovsky) [task:370867] {CVE-2021-47078}
  - inet: fully convert sk->sk_rx_dst to RCU rules (Eric Dumazet) [task:370873] {CVE-2021-47103}
  - net: caif: fix memory leak in cfusbl_device_notify (Pavel Skripkin) [task:370875] {CVE-2021-47121}
  - openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [task:370837] {CVE-2021-46955}
  - vsock/virtio: free queued packets when closing socket (Stefano Garzarella) [task:169356] {CVE-2021-47024}
  - REDHAT: mm/memcg: Fix mem_cgroup_id_get_online() underflow problem (lihongfu) [task:361929]
  - REDHAT: mm/memcg: Free percpu stats memory of dying memcg's (Waiman Long) [task:361929]
  - pktgen: use cpus_read_lock() in pg_net_init() (Eric Dumazet) [task:363783] {CVE-2024-46681}
  - pktgen: fix misuse of BUG_ON() in pktgen_thread_worker() (Di Zhu) [task:363783]
  - soc: qcom: cmd-db: Map shared memory as WC, not WB (Volodymyr Babchuk) [task:364171] {CVE-2024-46689}
  - net: caif: fix memory leak in caif_device_notify (Pavel Skripkin) [task:370887] {CVE-2021-47122}
  - net: caif: add proper error handling (Pavel Skripkin) [task:370887]
  - net: caif: added cfserl_release function (Pavel Skripkin) [task:370887]
  - net: dsa: mt7530: fix VLAN traffic leaks (DENG Qingfang) [task:370889] {CVE-2021-47160}
  - security/kysec: permit task killed by parent (penghuaihe) [bug:272883]
  - NFS: remove unused check for negative dentry (Benjamin Coddington) [task:361903]
  - NFSv3: use nfs_add_or_obtain() to create and reference inodes (Benjamin Coddington) [task:361903]
  - NFS: Refactor nfs_instantiate() for dentry referencing callers (Benjamin Coddington) [task:361903]
  - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (Mathias Nyman) [task:357961] {CVE-2024-45006}
  - net: fix pmtu check in nopmtudisc mode (Florian Westphal) [task:372755]
  - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (Ye Bin) [task:370803] {CVE-2021-33631}
  - ext4: factor out write end code of inline file (Zhang Yi) [task:370803]
  - ext4: check and update i_disksize properly (Zhang Yi) [task:370803]
  - ext4: correct the error path of ext4_write_inline_data_end() (Zhang Yi) [task:370803]
  - net: hns3: put off calling register_netdev() until client initialize complete (Jian Shen) [task:370881] {CVE-2021-47139}
  - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Hans de Goede) [task:370865]
  - security/kysec: Converges 3adm Control in Kysec Component (chengang) [task:168278]
  - security/kysec: open some audit log in kysec softmode (penghuaihe) [bug:177929]
  - security/kysec: fix bug with cannot remotely mount an NFS shared directory (yangzhao) [bug:149063]
  - memcg: protect concurrent access to mem_cgroup_idr (Shakeel Butt) [task:352017] {CVE-2024-43892}
  - kbuild: Drop -Wdeclaration-after-statement (Peter Zijlstra) [task:368863]
  - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() (Vitaly Kuznetsov) [task:370239] {CVE-2022-2153}
  - KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 (Marc Zyngier) [task:363883] {CVE-2024-46707}
  - KVM: arm64: Save/restore sp_el0 as part of __guest_enter (Marc Zyngier) [task:351171]
  - arm64: kvm: stop treating register x18 as caller save (Ard Biesheuvel) [task:351171]
  - dma-direct: Leak pages on dma_set_decrypted() failure (Rick Edgecombe) [task:222011] {CVE-2024-35939}
  - drm/msm: another fix for the headless Adreno GPU (Dmitry Baryshkov) [task:351463] {CVE-2023-52911}
  - drm/msm: Make .remove and .shutdown HW shutdown consistent (Javier Martinez Canillas) [task:351463]
  - drm/msm: Fix wrong size calculation (Xianting Tian) [task:160493]
  - drm/msm: fix shutdown hook in case GPU components failed to bind (Dmitry Baryshkov) [task:158827]
  - drm/msm: Call msm_init_vram before binding the gpu (Craig Tatlor) [task:158034]
  - drm/msm: add shutdown support for display platform_driver (Krishna Manikandan) [task:157172]
  - drm/msm: fix leaks if initialization fails (Pavel Machek) [task:157172]
  - drm/msm: Set dma maximum segment size for mdss (Sean Paul) [task:155707]
  - netlink: convert nlk->flags to atomic flags (Eric Dumazet) [task:345975]
  - netlink: Use copy_to_user() for optval in netlink_getsockopt(). (Kuniyuki Iwashima) [task:345975]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.45.v2101
changelog:
  - net/mlx5: Fix variable not being completed when function returns (Chenguang Zhao) [task:412201]
  - cifs: Return correct error code from smb2_get_enc_key (Paul Aurich) [task:370839] {CVE-2021-46960}
  - Input: appletouch - initialize work before device registration (Pavel Skripkin) [task:160493, task:370827] {CVE-2021-46932}
  - i2c: validate user data in compat ioctl (Pavel Skripkin) [task:160493, task:370823] {CVE-2021-46934}
  - net: fix build warning (taowei) [task:362055]
  - drm/msm/dpu: fix compile error (Lu Yao) [task:359017, task:410539]
  - scsi: smartpqi: add no_write_same for logical volumes (Dave Carroll) [task:388235]
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (Ido Schimmel) [task:390739] {CVE-2024-50304}
  - rcu: Add support for consolidated-RCU reader checking (Joel Fernandes (Google)) [task:390739]
  - rcu: Remove redundant debug_locks check in rcu_read_lock_sched_held() (Joel Fernandes (Google)) [task:390739]
  - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach (Zheng Wang) [task:370805, task:223093] {CVE-2024-35811, CVE-2023-47233}
  - net: Only allow init netns to set default tcp cong to a restricted algo (Jonathon Reinhart) [task:370855] {CVE-2021-47010}
  - soundwire: stream: fix memory leak in stream config error path (Rander Wang) [task:158827, task:370857] {CVE-2021-47020}
  - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (Yi Yang) [task:400455] {CVE-2023-6546}
  - tty: n_gsm: fix restart handling via CLD command (Daniel Starke) [task:400455]
  - bus: qcom: Put child node before return (Pan Bian) [task:158827, task:370863] {CVE-2021-47054}
  - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Zhu Yanjun) [task:375617] {CVE-2024-47696}
  - RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled (Chengchang Tang) [task:376269] {CVE-2024-47735}
  - net/tls: tls_is_tx_ready() checked list_entry (Pietro Borrello) [task:370245] {CVE-2023-1075}
  - net/tls: Fixed race condition in async encryption (Vakul Garg) [task:82911, task:370245]
  - binder: fix async_free_space accounting for empty parcels (Todd Kjos) [task:160493, task:370819] {CVE-2021-46935}
  - HID: usbhid: fix info leak in hid_submit_ctrl (Anirudh Rayabharam) [task:158827, task:370811] {CVE-2021-46906}
  - ext4: fix timer use-after-free on failed mount (Xiaxi Shen) [task:376211] {CVE-2024-49960}
  - f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread() (Chao Yu) [task:376109] {CVE-2024-47691}
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens) [task:403255] {CVE-2024-53104}
  - Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (Luiz Augusto von Dentz) [task:396699] {CVE-2024-8805, CVE-2024-8805}
  - btrfs: fix the length of reserved qgroup to free (Haisu Wang) [task:364175]
  - btrfs: fix qgroup reserve leaks in cow_file_range (Boris Burkov) [task:364175] {CVE-2024-46733}
  - drm/vc4: fix compile error (Lu Yao) [task:402971, task:407347]
  - drm/vc4: fix compile error (Lu Yao) [task:397559, task:407347]
  - drivers: provide devm_platform_ioremap_resource() (Bartosz Golaszewski) [task:48091]
  - bridge: join all-snoopers multicast address (Linus Lüssing) [task:152171]
  - net: bridge: convert and rename mcast disabled (Nikolay Aleksandrov)
  - net: bridge: convert group_addr_set option to a bit (Nikolay Aleksandrov)
  - net: bridge: convert nf call options to bits (Nikolay Aleksandrov)
  - net: bridge: add bitfield for options and convert vlan opts (Nikolay Aleksandrov)
  - fsl/fman: Fix refcount handling of fman-related devices (Aleksandr Mishin) [task:387475] {CVE-2024-50166}
  - net: fman: Unregister ethernet device on removal (Sean Anderson) [task:164562]
  - fsl/fman: Save device references taken in mac_probe() (Aleksandr Mishin) [task:387475]
  - net: fman: Use physical address for userspace interfaces (Sean Anderson) [task:387475]
  - net: dpaa: Use mac_dev variable in dpaa_netdev_init (Sean Anderson) [task:387475]
  - net: fman: Clean up error handling (Sean Anderson) [task:387475]
  - net: fman: Map the base address once (Sean Anderson) [task:387475]
  - net: fman: memac: Uninitialized variable on error path (Dan Carpenter) [task:387475]
  - net: fman: Configure fixed link in memac_initialization (Sean Anderson) [task:387475]
  - net: fman: Move struct dev to mac_device (Sean Anderson) [task:387475]
  - fsl/fman: use resource_size (Julia Lawall) [task:387475]
  - dpaa_eth: Use random MAC address when none is given (Madalin Bucur) [task:387475]
  - net: fman: Get PCS node in per-mac init (Sean Anderson) [task:387475]
  - fsl/fman: Check for null pointer after calling devm_ioremap (Jiasheng Jiang) [task:160493]
  - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Shradha Gupta) [task:391031] {CVE-2024-26820}
  - hv_netvsc: use netif_is_bond_master() instead of open code (Juhee Kang) [task:391031]
  - hv_netvsc: Mark VF as slave before exposing it to user-mode (Long Li) [task:391031]
  - hv_netvsc: Fix race between VF offering and VF association message from host (Gaurav Kohli) [task:164562]
  - block: add blk_alloc_disk and blk_cleanup_disk APIs (Christoph Hellwig) [task:157536]
  - f2fs: get rid of online repaire on corrupted directory (Chao Yu) [task:375661] {CVE-2024-47690}
  - fscrypt: fix race where ->lookup() marks plaintext dentry as ciphertext (Eric Biggers) [task:158034]
  - fscrypt: only set dentry_operations on ciphertext dentries (Eric Biggers) [task:158034]
  - fscrypt: clean up and improve dentry revalidation (Eric Biggers) [task:158034]
  - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [task:330540] {CVE-2024-38570}
  - gfs2: simplify gdlm_put_lock with out_free label (Bob Peterson) [task:330540]
  - gfs2: Don't call dlm after protocol is unmounted (Bob Peterson) [task:160493]
  - gfs2: Don't skip dlm unlock if glock has an lvb (Bob Peterson) [task:158034]
  - net/mlx5e: Fix netif state handling (Shay Drory) [task:330508] {CVE-2024-38608}
  - net/mlx5e: Avoid detaching non-existing netdev under switchdev mode (Alaa Hleihel)
  - padata: use integer wrap around to prevent deadlock on seq_nr overflow (VanGiang Nguyen) [task:376197] {CVE-2024-47739}
  - padata: unbind parallel jobs from specific CPUs (Daniel Jordan) [task:160493]
  - padata: use separate workqueues for parallel and serial work (Daniel Jordan) [task:160493]
  - padata, pcrypt: take CPU hotplug lock internally in padata_alloc_possible (Daniel Jordan) [task:160493]
  - crypto: pcrypt - remove padata cpumask notifier (Daniel Jordan) [task:160493]
  - crypto: pcrypt - Fix user-after-free on module unload (Herbert Xu) [task:153627]
  - crypto/pcrypt: Replace synchronize_rcu_bh() with synchronize_rcu() (Paul E. McKenney) [task:160493]
  - padata: make padata_do_parallel find alternate callback CPU (Daniel Jordan) [task:160493]
  - padata: allocate workqueue internally (Daniel Jordan) [task:160493]
  - virtio-mmio: don't break lifecycle of vm_dev (Wolfram Sang) [task:379857]
  - virtio-mmio: convert to devm_platform_ioremap_resource (Yangtao Li) [task:377245]
  - virtio-mmio: Use to_virtio_mmio_device() to simply code (Tang Bin) [task:379857]
  - slip: make slhc_remember() more robust against malicious packets (Eric Dumazet) [task:376251] {CVE-2024-50033}
  - net: delete "register" keyword (Alexey Dobriyan) [task:376251]
  - slip: make slhc_compress() more robust against malicious packets (Eric Dumazet) [task:155707]
  - tcp: check skb is non-NULL in tcp_rto_delta_us() (Josh Hunt) [task:375609] {CVE-2024-47684}
  - tcp: introduce tcp_skb_timestamp_us() helper (Eric Dumazet)
  - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi) [task:371789]
  - ocfs2: fix a deadlock when commit trans (Joseph Qi) [task:353893]
  - ocfs2: fix race between searching chunks and release journal_head from buffer_head (Gautham Ananthakrishna) [task:353893] {CVE-2021-47493}
  - jbd2: export jbd2_journal_[grab|put]_journal_head (Joseph Qi) [task:353893]
  - net: mdio: fix unbalanced fwnode reference count in mdio_device_release() (Zeng Heng) [task:376343] {CVE-2022-48961}
  - net: mdio: use device_set_node() to setup both fwnode and of (Ioana Ciornei) [task:376343]
  - driver core: add a helper to setup both the of_node and fwnode of a device (Ioana Ciornei) [task:376343]
  - media: av7110: fix a spectre vulnerability (Mauro Carvalho Chehab) [task:390755] {CVE-2024-50289}
  - firmware_loader: Block path traversal (Jann Horn) [task:375665] {CVE-2024-47742}
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (Hyunwoo Kim) [task:396803] {CVE-2024-53103}
  - net: fix data-races around sk->sk_forward_alloc (Wang Liang) [task:396799] {CVE-2024-53124}
  - filemap: Fix bounds checking in filemap_read() (Trond Myklebust) [task:390893] {CVE-2024-50272}
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Ryusuke Konishi) [task:398629] {CVE-2024-53130}
  - netlink: terminate outstanding dump on socket close (Jakub Kicinski) [task:398631] {CVE-2024-53140}
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Ryusuke Konishi) [task:398633] {CVE-2024-53131}
  - netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park) [task:398615] {CVE-2024-53141}
  - fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni) [task:396801] {CVE-2024-53101}
  - ocfs2: uncache inode which has failed entering the group (Dmitry Antipov) [task:396817] {CVE-2024-53112}
  - f2fs: Require FMODE_WRITE for atomic write ioctls (Jann Horn) [task:376135] {CVE-2024-47740}
  - mm: split critical region in remap_file_pages() and invoke LSMs in between (Kirill A. Shutemov) [task:376325]
  - mm: call the security_mmap_file() LSM hook in remap_file_pages() (Shu Han) [task:376325] {CVE-2024-47745}
  - mm/mmap.c: don't unlock VMAs in remap_file_pages() (Liam Howlett) [task:376325]
  - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (Al Viro) [task:363785] {CVE-2024-45025}
  - s390/cio: rename bitmap_size() -> idset_bitmap_size() (Alexander Lobakin) [task:363785]
  - bitmap: introduce generic optimized bitmap_size() (Alexander Lobakin) [task:363785]
  - tools: move alignment-related macros to new <linux/align.h> (Alexander Lobakin) [task:363785]
  - tools headers UAPI: Sync linux/const.h with the kernel headers (Arnaldo Carvalho de Melo) [task:363785]
  - tools headers: Grab copy of linux/const.h, needed by linux/bits.h (Arnaldo Carvalho de Melo) [task:363785]
  - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (Hans de Goede) [task:387555] {CVE-2024-50134}
  - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (Pedro Tammela) [task:392639] {CVE-2024-53057}
  - uprobes: fix kernel info leak via "[uprobes]" vma (Oleg Nesterov) [task:375973] {CVE-2024-49975}
  - ext4: update orig_path in ext4_find_extent() (Baokun Li) [task:376209] {CVE-2024-49881}
  - ext4: fix slab-use-after-free in ext4_split_extent_at() (Baokun Li) [task:376087] {CVE-2024-49884}
  - ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path (Theodore Ts'o) [task:376087]
  - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() (Dmitry Antipov) [task:380475] {CVE-2024-47713}
  - i40e: fix race condition by adding filter's intermediate sync state (Aleksandr Loktionov) [task:390579] {CVE-2024-53088}
  - i40e: fix i40e_count_filters() to count only active/new filters (Aleksandr Loktionov) [task:390579]
  - bcache: remove unused bch_mark_cache_readahead function def in stats.h (Lin Feng) [task:222079]
  - bcache: avoid oversized read request in cache missing code path (Coly Li) [task:222079] {CVE-2021-47275}
  - bcache: remove bcache device self-defined readahead (Coly Li) [task:222079]
  - uprobe: avoid out-of-bounds memory access of fetching args (Qiao Ma) [task:380099] {CVE-2024-50067}
  - security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong) [task:390885] {CVE-2024-50301}
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu) [task:391029] {CVE-2024-53066}
  - usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu) [task:390745] {CVE-2024-50269}
  - media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab) [task:391027] {CVE-2024-53061}
  - sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long) [task:390741] {CVE-2024-50299}
  - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (Zicheng Qu) [task:387919] {CVE-2024-50233}
  - staging: iio: ad9832: use clock framework for clock reference (Marcelo Schmitt) [task:387919]
  - staging: iio: ad9832: organize includes (Marcelo Schmitt) [task:387919]
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (Felix Fietkau) [task:390869] {CVE-2024-50237}
  - userfaultfd: fix checks for huge PMDs (Jann Horn) [task:363981] {CVE-2024-46787}
  - media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab) [task:390895] {CVE-2024-53063}
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Baokun Li) [task:344489] {CVE-2024-40998}
  - HID: core: zero-initialize the report buffer (Jiri Kosina) [task:392647] {CVE-2024-50302}
  - media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab) [task:392635] {CVE-2024-50290}
  - media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab) [task:392643] {CVE-2024-50287}
  - dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai) [task:390571] {CVE-2024-50278}
  - dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai) [task:390571]
  - net/sched: accept TCA_STAB only for root qdisc (Eric Dumazet) [task:375649] {CVE-2024-50039}
  - net: sched: refactor grafting Qdiscs with a parent (Jakub Kicinski) [task:375649]
  - nilfs2: propagate directory read errors from nilfs_find_entry() (Ryusuke Konishi) [task:387959] {CVE-2024-50202}
  - btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana) [task:390749] {CVE-2024-50273}
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner) [task:390611] {CVE-2024-50265}
  - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (Edward Adam Davis) [task:390609] {CVE-2024-50218}
  - USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter) [task:390585] {CVE-2024-50267}
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Hyunwoo Kim) [task:390583] {CVE-2024-50264}
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai) [task:390581] {CVE-2024-50279}
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Sean Christopherson) [task:387973] {CVE-2024-50115}
  - usb: typec: altmode should keep reference to parent (Thadeu Lima de Souza Cascardo) [task:387987] {CVE-2024-50150}
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout (Luiz Augusto von Dentz) [task:387967] {CVE-2024-50125}
  - Bluetooth: call sock_hold earlier in sco_conn_del (Desmond Cheong Zhi Xi) [task:387967]
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [task:387575] {CVE-2024-50142}
  - parport: Proper fix for array out-of-bounds access (Takashi Iwai) [task:380221] {CVE-2024-50074}
  - nilfs2: fix kernel bug due to missing clearing of checked flag (Ryusuke Konishi) [task:387405] {CVE-2024-50230}
  - ixgbevf: Fix resource leak in ixgbevf_init_module() (Shang XiaoJing) [task:376297] {CVE-2022-49028}
  - sched/pelt: Fix attach_entity_load_avg() corner case (kuyo chang) [task:375977]
  - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Rutland) [task:387961] {CVE-2024-50099}
  - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (Wang Hai) [task:387913] {CVE-2024-50168}
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister (Ye Bin) [task:387981] {CVE-2024-50148}
  - RDMA/mad: Improve handling of timed out WRs of mad agent (Saravanan Vajravel) [task:387985] {CVE-2024-50095}
  - IB/mad: Issue complete whenever decrements agent refcount (Shay Drory) [task:387985]
  - netfilter: Drop fragmented ndisc packets assembled in netfilter (Georg Kohmann) [bug:277233]
  - be2net: fix potential memory leak in be_xmit() (Wang Hai) [task:387921] {CVE-2024-50167}
  - ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [task:387779] {CVE-2024-50179}
  - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (Pablo Neira Ayuso) [task:387917] {CVE-2024-50251}
  - nilfs2: fix kernel bug due to missing clearing of buffer delay flag (Ryusuke Konishi) [task:387481] {CVE-2024-50116}
  - drm/vc4: Stop the active perfmon before being destroyed (Maíra Canal) [task:387413] {CVE-2024-50187}
  - serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Finn Thain) [task:217562] {CVE-2024-26999}
  - tty: serial: remove set but not used variable 'error' (YueHaibing) [task:217562]
  - rtmutex: Drop rt_mutex::wait_lock before scheduling (Roland Xu) [task:368141] {CVE-2024-46829}
  - x86/ioapic: Handle allocation failures gracefully (Thomas Gleixner) [task:380139] {CVE-2024-49927}
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Omar Sandoval) [task:380143] {CVE-2024-50082}
  - list: add "list_del_init_careful()" to go with "list_empty_careful()" (Linus Torvalds) [task:380143]
  - gpiolib: fix memory leak in gpiochip_setup_dev() (Zeng Heng) [task:376237] {CVE-2022-48975}
  - gpiolib: check the 'ngpios' property in core gpiolib code (Bartosz Golaszewski) [task:376237]
  - gpiolib: free device name on error path to fix kmemleak (Quanyang Wang) [task:376237]
  - gpio: gpiolib: Normalize return code variable name (Linus Walleij) [task:376237]
  - tcp: avoid too many retransmit packets (Eric Dumazet) [task:347169] {CVE-2024-41007}
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Eric Dumazet) [task:347169]
  - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Menglong Dong) [task:347169]
  - tcp: refactor tcp_retransmit_timer() (Eric Dumazet) [task:347169]
  - net/sched: act_mirred: don't override retval if we already lost the skb (Jakub Kicinski) [task:210475] {CVE-2024-26739}
  - bonding: update port speed when getting bond speed (Hangbin Liu) [task:382011]
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect (Luiz Augusto von Dentz) [task:375621] {CVE-2024-49950}
  - nfsd: map the EBADMSG to nfserr_io to avoid warning (Li Lingfeng) [task:376263] {CVE-2024-49875}
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Steve Wahl) [task:376133] {CVE-2024-50017}
  - drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs (Konrad Dybcio) [task:380141] {CVE-2024-49901}
  - dm snapshot: fix lockup in dm_exception_table_exit (Mikulas Patocka) [task:221943] {CVE-2024-35805}
  - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (Ard Biesheuvel) [task:376275] {CVE-2024-49858}
  - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (Qu Wenruo) [task:376151] {CVE-2024-49868}
  - fsnotify: clear PARENT_WATCHED flags lazily (Amir Goldstein) [task:376261] {CVE-2024-47660}
  - xfs: Reduce unnecessary searches when searching for the best extents (Chi Zhiling) [task:377527]
  - jfs: Fix sanity check in dbMount (Dave Kleikamp) [task:376131]
  - jfs: fix out-of-bounds in dbNextAG() and diAlloc() (Jeongjun Park) [task:376131] {CVE-2024-47723}
  - net/xen-netback: prevent UAF in xenvif_flush_hash() (Jeongjun Park) [task:380461] {CVE-2024-49936}
  - net: xen-netback: hash.c: Use built-in RCU list checking (Madhuparna Bhowmik) [task:380461]
  - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (Jinjie Ruan) [task:380455] {CVE-2023-52917}
  - fou: fix initialization of grc (Muhammad Usama Anjum) [task:363977]
  - fou: Fix null-ptr-deref in GRO. (Kuniyuki Iwashima) [task:363977] {CVE-2024-46763}
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers (Eric Dumazet) [task:363977]
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers (Eric Dumazet) [task:363977]
  - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr (Mike Marciniszyn) [task:225598] {CVE-2021-47523}
  - vfs: Don't evict inode under the inode lru traversing context (Zhihao Cheng) [task:358113] {CVE-2024-45003}
  - ACPI: sysfs: validate return type of _STR method (Thomas Weißschuh) [task:380101] {CVE-2024-49860}
  - drm/amdgpu/pm: Fix the null pointer dereference for smu7 (Ma Jun) [task:352623] {CVE-2024-43909}
  - drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (Hersen Wu) [task:368523] {CVE-2024-46816}
  - ext4: no need to continue when the number of entries is 1 (Edward Adam Davis) [task:380197] {CVE-2024-49967}
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (Gustavo A. R. Silva) [task:380459] {CVE-2024-50008}
  - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (Toke Høiland-Jørgensen) [task:379923] {CVE-2024-49938}
  - net: add more sanity checks to qdisc_pkt_len_init() (Eric Dumazet) [task:380237] {CVE-2024-49948}
  - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (Eric Dumazet) [task:376177] {CVE-2024-47707}
  - drm/msm/dpu: remove LOCK/CLEAR support in RM (Jeykumar Sankaran) [task:379871]
  - drm/msm/dpu: clean up destination scaler residue (Jeykumar Sankaran) [task:379871]
  - SUNRPC: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [bug:263777]
  - btrfs: don't balance btree inode pages from buffered write path (Nikolay Borisov) [task:375983]
  - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing) [task:378953]
  - netfilter: br_netfilter: fix panic with metadata_dst skb (Andy Roulin) [task:376437] {CVE-2024-50045}
  - drm/amd/pm: ensure the fw_info is not null before using it (Tim Huang) [task:376229] {CVE-2024-49890}
  - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (Lizhi Xu) [task:375655] {CVE-2024-49877}
  - tipc: guard against string buffer overrun (Simon Horman) [task:376129] {CVE-2024-49995}
  - ALSA: asihpi: Fix potential OOB array access (Takashi Iwai) [task:376313] {CVE-2024-50007}
  - media: pci: cx23885: check cx23885_vdev_init() return (Hans Verkuil) [task:376301] {CVE-2023-52918}
  - nilfs2: fix missing cleanup on rollforward recovery error (Ryusuke Konishi) [task:363971] {CVE-2024-46781}
  - btrfs: replace BUG_ON() with error handling at update_ref_for_cow() (Filipe Manana) [task:363775] {CVE-2024-46752}
  - ACPI: PAD: fix crash in exit_round_robin() (Seiji Nishikawa) [task:376159] {CVE-2024-49935}
  - ACPI: acpi_pad: add a missed blank line after declarations (Xiaofei Tan) [task:376159]
  - drm: omapdrm: Add missing check for alloc_ordered_workqueue (Ma Ke) [task:376335] {CVE-2024-49879}
  - Bluetooth: hci_core: Fix leaking sent_cmd skb (Luiz Augusto von Dentz) [task:344623] {CVE-2022-48844}
  - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. (Vincent Pelletier) [task:160493]
  - NFC: st21nfca: Fix memory leak in device probe and remove (Wei Yongjun) [task:160493]
  - locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Ali Saidi)
  - Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync() (Duoming Zhou) [bug:189740] {CVE-2023-4134}
  - Intel: cpuidle: Allow idle states to be disabled by default (Rafael J. Wysocki)
  - Intel: Documentation: admin-guide: PM: Add cpuidle document (Rafael J. Wysocki)
  - Intel: cpuidle: use BIT() for idle state flags and remove CPUIDLE_DRIVER_FLAGS_MASK (Yangtao Li)
  - Intel: ACPI: processor: Export acpi_processor_evaluate_cst() (Rafael J. Wysocki)
  - Intel: ACPI: processor: Clean up acpi_processor_evaluate_cst() (Rafael J. Wysocki)
  - Intel: ACPI: processor: Export function to claim _CST control (Rafael J. Wysocki)
  - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS (Josh Poimboeuf) [task:164574]
  - intel_idle: Disable IBRS during long idle (Peter Zijlstra) [task:164574]
  - Intel: intel_idle: Allow ACPI _CST to be used for selected known processors (Rafael J. Wysocki)
  - Intel: intel_idle: Use ACPI _CST for processor models without C-state tables (Rafael J. Wysocki)
  - Intel: intel_idle: Refactor intel_idle_cpuidle_driver_init() (Rafael J. Wysocki)
  - x86/bugs: Optimize SPEC_CTRL MSR writes (Peter Zijlstra) [task:164562]
  - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value (Peter Zijlstra) [task:164562]
  - x86/entry: Add kernel IBRS implementation (Peter Zijlstra) [task:164574]
  - x86/cpufeatures: Move RETPOLINE flags to word 11 (Peter Zijlstra) [task:164574]
  - x86/entry: Remove skip_r11rcx (Peter Zijlstra) [task:164562]
  - x86/entry/64: Fix unwind hints in kernel exit path (Josh Poimboeuf)
  - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS (Pawan Gupta) [task:164562]
  - x86/CPU/AMD: Do not leak quotient data after a division by 0 (Borislav Petkov (AMD)) [task:179889, bug:189752] {CVE-2023-20588}
  - x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD)) [bug:185043] {CVE-2023-20593}
  - x86/cpu/amd: Move the errata checking functionality up (Borislav Petkov (AMD)) [bug:185043] {CVE-2023-20593}
  - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Dave Hansen) [bug:189744]
  - x86/speculation: Add force option to GDS mitigation (Daniel Sneddon) [bug:189744]
  - x86/speculation: Add Kconfig option for GDS (Daniel Sneddon) [bug:189744]
  - x86/speculation: Add cpu_show_gds() prototype (Arnd Bergmann) [bug:189744]
  - x86: Move gds_ucode_mitigated() declaration to header (Arnd Bergmann) [bug:189744]
  - KVM: Add GDS_NO support to KVM (Daniel Sneddon) [bug:189744] {CVE-2022-40982}
  - x86/speculation: Add Gather Data Sampling mitigation (Daniel Sneddon) [bug:189744] {CVE-2022-40982}
  - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Pawan Gupta) [task:164574]
  - x86/common: Stamp out the stepping madness (Peter Zijlstra) [task:164574]
  - x86/cpu/amd: Make erratum #1054 a legacy erratum (Kim Phillips) [task:157172]
  - x86/cpu/amd: Enable the fixed Instructions Retired counter IRPERF (Kim Phillips) [task:155809]
  - x86/bugs: Report Intel retbleed vulnerability (Peter Zijlstra) [task:164574]
  - x86/cpu: Fix migration safety with X86_BUG_NULL_SEL (Jane Malalane)
  - Revert "x86/cpu/amd: Add a Zenbleed fix" (Yan Wang) [bug:185043]
  - x86/bugs: Add AMD retbleed= boot parameter (Alexandre Chartre) [task:164562]
  - fix the kabi error of del_timer and del_timer_sync (Yan Wang) [bug:189740]
  - list: Add hlist_unhashed_lockless() (Eric Dumazet)
  - cxgb4: fix use after free bugs caused by circular dependency problem (Duoming Zhou) [bug:189736] {CVE-2023-4133}
  - timers: Provide timer_shutdown[_sync]() (Thomas Gleixner) [bug:189740]
  - timers: Add shutdown mechanism to the internal functions (Thomas Gleixner) [bug:189740]
  - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (Thomas Gleixner) [bug:189740]
  - timers: Rename del_timer() to timer_delete() (Thomas Gleixner) [bug:189740]
  - timers: Rename del_timer_sync() to timer_delete_sync() (Thomas Gleixner) [bug:189740]
  - timers: Use del_timer_sync() even on UP (Thomas Gleixner) [bug:189740]
  - timers: Silently ignore timers with a NULL function (Thomas Gleixner) [bug:189740]
  - timers: Update kernel-doc for various functions (Thomas Gleixner) [bug:189740]
  - timers: Replace BUG_ON()s (Thomas Gleixner) [bug:189740]
  - timer: Use hlist_unhashed_lockless() in timer_pending() (Eric Dumazet)
  - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (Steven Rostedt (Google)) [bug:189740]
  - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (Steven Rostedt (Google)) [bug:189740]
  - net: hso: fix null-ptr-deref during tty device unregistration (Anirudh Rayabharam) [task:158827]
  - usb: hso: check for return value in hso_serial_common_create() (Rustam Kovhaev) [task:157172]
  - net: fix use-after-free in tw_timer_handler (Muchun Song)
  - i2c: Fix a potential use after free (Xu Wang) [task:162162]
  - bpf: Fix a sdiv overflow issue (Yonghong Song) [task:376399] {CVE-2024-49888}
  - bpf: Rename fixup_bpf_calls and add some comments (Brendan Jackman) [task:376399]
  - ring-buffer: Fix race while reader and writer are on the same page (Zheng Yejian) [task:387361]
  - ring-buffer: Fix race between reset page and reading page (Steven Rostedt (Google)) [task:387361]
  - inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [task:364261]
  - Revert "inet: frags: re-introduce skb coalescing for local delivery" (taowei) [task:364261]
  - 6lowpan: use rbtree for IP frag queue (Peter Oskolkov) [task:364261]
  - net: Add and use skb_mark_not_on_list(). (David S. Miller)
  - dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails (Benjamin Block)
  - md/raid1: properly indicate failure when ending a failed write request (Paul Clements) [task:370831] {CVE-2021-46950}
  - userfaultfd: release page in error path to avoid BUG_ON (Axel Rasmussen) [task:370847] {CVE-2021-46988}
  - hfsplus: prevent corruption in shrinking truncate (Jouni Roivas) [task:370845, task:158827] {CVE-2021-46989}
  - ACPI: custom_method: fix potential use-after-free issue (Mark Langsdorf) [task:370843, task:153627] {CVE-2021-46966}
  - phonet/pep: refuse to enable an unbound pipe (Rémi Denis-Courmont) [task:160493, task:370871] {CVE-2021-47086}
  - irqchip/gic-v3: Do not enable irqs when handling spurious interrups (He Ying) [task:370841] {CVE-2021-46961}
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Kuniyuki Iwashima) [task:387777] {CVE-2024-50154}
  - tcp: relookup sock for RST+ACK packets handled by obsolete req sock (Alexander Ovechkin) [task:387777]
  - inet_connection_sock: remove unused parameter of reqsk_queue_unlink func (Zhiqiang Liu) [task:387777]


author: jinzhiguang <jinzhiguang@kylinos.cn> - 0.11.0-8.p01
changelog:
  - Type: update
  - ID:   TASK#183701
  - SUG:  NA
  - DESC: rebuild and addpatch:
  	0001-fix-non-trivial-designated-initializers.patch
  	0001-use-btf_dump__new_deprecated.patch


author: lijian1 <lijian1@kylinos.cn> - 0.11.0-8.p02
changelog:
  - Type: Bugfix
  - ID: TASK#218577
  - SUG: NA
  - DESC: fix percpu map without args, c07f23af3507e0b4971ec4343523d976a048b078,
          3f2b438c8b497129f952531375429b1a93e7620d,39f3996d17f88124acc0170b8659e0856555043a
          3fbe73909e009a6741faed1c444daffed478395e;add patch 0005 for so path;add 0006 for tcpdrop.bt.


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-13
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 CVE-2021-42386


author: liuxu <liuxu156@huawei.com> - 1:1.31.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: lutianxiong<lutianxiong@huawei.com> - 1.16.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix invalid read in ares_parse_soa_reply.c found during fuzzing


author: xinghe <xinghe2@h-partners.com> - 1.16.1-7
changelog:
  - Type:cves
  - CVE:CVE-2023-31130 CVE-2023-31124 CVE-2023-31147
  - SUG:NA
  - DESC:fix CVE-2023-31130 CVE-2023-31124 CVE-2023-31147


author: yanglu <yanglu60@huawei.com> - 1.15.14-5
changelog:
  - Type:cves
  - ID:CVE-2018-19876 CVE-2019-6461 CVE-2019-6462
  - SUG:NA
  - DESC: fix CVE-2018-19876 CVE-2019-6461 CVE-2019-6462


author: guoshengsheng <guoshengsheng@kylinos.cn>-1.12.7-1kord0k233.p12
changelog:
  - Add caja-1.12.7-Kylin-hide-three-option-in-trash.patch
  - Delete "Listview New Documents" "cut" "copy" in trash


author: guoshengsheng <guoshengsheng@kylinos.cn>-1.12.7-1kord0k233.p13
changelog:
  - Add caja-1.12.7-Kylin-fix-bug-17932.patch
  - Resolve Changing the resolution will cause the desktop icons to not be adaptively arranged


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p23
changelog:
  - add patch26:0001-fix-chandao-bug-44721-modify-default-newfilename.patch
  - add patch27:0001-Fix-rename-status.patch
  - 同步龙芯补丁。


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p26
changelog:
  - add patch28:caja-1.12.7-kylin-fix-bugzilla-8197-Udisk-file-system-is-inconsistent.patch
  - 修复caja显示U盘文件系统格式与命令行查看不一致问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p27
changelog:
  - Type:bugfix
  - ID  :[bug#8460][bugzilla]
  - SUG :NA
  - DESC:add patch31:caja-1.12.7-kylin-fix-icon-overlap-when-creating-a-new-file.patch
         删除对于桌面图标大小等级SMALLEST,SMALLER的屏蔽，解决等级SMALLEST,SMALLER,SMALL，
         三种模式下新建文件，图标重叠问题.解决缩放图标时，SMALLER,SMALL两个级别形态相
         同问题.修改图标间距，解决SMALLER,SMALL两个级别，桌面图标与标题重叠问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p27
changelog:
  - Type:fixbug
  - ID  :[bug#8460][bugzilla]
  - SUG :NA
  - DESC:add patch31:caja-1.12.7-kylin-fix-icon-overlap-when-creating-a-new-file.patch
         删除对于桌面图标大小等级SMALLEST,SMALLER的屏蔽，解决等级SMALLEST,SMALLER,SMALL，
         三种模式下新建文件，图标重叠问题然.解决缩放图标时，SMALLER,SMALL两个级别形态相
         同问题.修改图标间距，解决SMALLER,SMALL两个级别，桌面图标与标题重叠问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p28
changelog:
  - Type:fixbug
  - ID  :[bug#113327]
  - SUG :NA
  - DESC:add patch32:caja-1.12.7-kylin-fix-Unable-to-remount-after-Udisk-is-unmounted.patch
         修复当U盘没有UUID时，手动卸载，再挂载caja崩溃问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p29
changelog:
  - Type:fixbug
  - ID  :[Task#160363]
  - SUG :NA
  - DESC:add patch33:caja-1.12.7-kylin-change-the-dvd-capacity-display.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p31
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add caja-update-translations-for-hk-and-tw.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p33
changelog:
  - Type: bugfix
  - ID:   [TASK#205172]
  - SUG:  NA
  - DESC: add caja-update-Secure-translations-for-hk-and-tw.patch


author: huayadong <huayadong@kylinos.cn> - 01.12.7-1kord0k233.p35
changelog:
  - Type: bugfix
  - ID:   [BUG#217322]
  - SUG:  NA
  - DESC: delete Requires: redhat-menus ,add Requires: kylin-menu


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p36
changelog:
  - Type: bugfix
  - ID:   [BUG#240575]
  - SUG:  NA
  - DESC: fix an used after free problem which caused disk format failure


author: lijian1<lijian1@kylinos.cn> - 1.51.0-6.p01
changelog:
  - Type: cves
  - ID: [TASK#393895]
  - SUG:  NA
  - DESC:  Fix CVE-2024-24577, CVE-2022-36113, CVE-2022-36114, fix kernel copy panic.


author: hanshuang <hanshuang@kylinos.cn> - 1:12.2.8-8.p01
changelog:
  - Modify spec file fix python34-devel  python34-setuptools  python34-Cython openEuler-rpm-config problem


author: wanghao <wanghao2@kylinos.com.cn> -1.0.0-3.skl3.se.07
changelog:
  - Type:update
  - ID: [TASK#121480]
  - SUG:NA
  - DESC: 解决chpolicy切换策略，强制重启后，策略切换失败的问题
  -         add patch: chpolicy-fix-selinux-error-after-force-reboot.patch


author: zhangyujing <zhangyujing1@huawei.com> - 6.8-2.1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:setcifsacl: fix adding ACE when owner sid in unexpected location
         cifs.upcall: fix a compiler warning


author: haowenchao <haowenchao@huawei.com> - 6.10-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-CVE-2021-20208.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/1001-cifs.upcall-update-the-cap-bounding-set-only-when-CA.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/1002-mount.cifs-update-the-cap-bounding-set-only-when-CAP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-CVE-2022-27239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-CVE-2022-29869.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 19.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix the error level logs displayed for the cloud-init-local service


author: yanjianqing <yanjianqing@kylinos.cn> -19.4-6.p03
changelog:
  - Type:CVE
  - ID:[Task#154159]
  - SUG:NA
  - DESC:fix CVE-2022-2084
  -      Fix test_net.py testcase fail
  -      Fix a unitest error


author: Martin Pitt <mpitt@redhat.com> - 189-1
changelog:
  - Add search box to Services page rhbz#1657752
  - Connect to firewalld as superuser rhbz#1664158
  - Fix log filtering rhbz#1665421
  - Show error message for invalid IdM domain names rhbz#1659333
  - Changing passwords as root does not ask for current password rhbz#1666005


author: Martin Pitt <mpitt@redhat.com> - 191-1
changelog:
  - System: Enable/disable SMT rhbz#1678956
  - Logs: Add service filtering rhbz#1657756
  - Networking: Add custom firewall ports rhbz#1660400


author: Martin Pitt <mpitt@redhat.com> - 196-1
changelog:
  - Networking: Add Firewall Zones configuration rhbz#1678473
  - Fix ssh login to unknown hosts rhbz#1701174
  - Fix login when ~/.bashrc prints to stdout rhbz#1716223
  - Much better On/Off buttons, also avoid text overlap rhbz#1677593


author: Martin Pitt <mpitt@redhat.com> - 196.1-1
changelog:
  - networkmanager: Show correct IPv6 route metric in dialog (rhbz#1719575)
  - networkmanager: Ensure that endianess is always set (rhbz#1728213)
  - Update translations (rhbz#1689977)


author: Liang yangang <liangyangang@kylinos.cn> - 196.3-1.01.p01
changelog:
  - add mips64el arch support,
  - add Requires for storaged to support lvm: libblockdev libblockdev-devel libudisks2 udisk2-lvm2


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-200
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix and bump version to 200, bugfix include
         1. check task list to avoid unnecessary cleanup.
         2. fix dead loop
         3. cleanup dangling shim by brand new context
         4. fix potential panic for task in unknown state


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-201
changelog:
  - Type:bugfix                                          
  - ID:NA                                                   
  - SUG:NA
  - DESC:reduce permissions for bundle dir to fix CVE-2021-41103


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-202
changelog:
  - Type:bugfix
  - ID:NA 
  - SUG:NA
  - DESC:Use fs.RootPath when mounting volumes for bundle dir to fix CVE-2022-23648


author: lvxiangcong<lvxiangcong@kylinos.cn> - 1.2.0-209.p03
changelog:
  - Type:update
  - ID:[TASK#206575]
  - SUG:NA
  - DESC:fix cve-2023-39325 and cve-2022-41723 skipping p02 due to the presence of koji


author: fuanan <fuanan3@huawei.com> - 2.13-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add 'autoconf automake' to BuildRequires to use autoreconf command


author: Shi Jingying <shijingying@kylinos.cn> - 7.3.0-20190804.35.p01
changelog:
  - modify gcc description
  - from This is compiler for arm64
  - to The gcc package contains the GNU Compiler Collection version 7.
    You'll need this package in order to compile C code.


author: lijian1 <lijian1@kylinos.cn> - 7.3.0-20190804.35.p03
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify gcc.spec: Add file libstdc++fs.a to package libstdc++-static


author: Yu Peng <yupeng@kylinos.cn> - 7.3.0-20190804.35.p08
changelog:
  - Type:enhancement
  - ID:[Task#361285]
  - SUG:NA
  - DESC:Add -02 compilation option to optimize compilation speed.


author: yanglongkang <yanglongkang@huawei.com> - 2.3.3-4
changelog:
  - add buildrequire gcc
    add make check
    backport upstream patches to solve several problems -epoch2


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-Check-segment-gaps-regardless-of-heap-space.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-Fix-posible-buffer-overflows-in-LUKS-conversion.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-Fix-a-memleak-in-blockwise-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-CVE-2021-4122.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-4
changelog:
  - Type:cves
  - ID:CVE-2020-27840 CVE-2021-20277 CVE-2021-20254
  - SUG:NA
  - DESC:fix CVE-2020-27840 CVE-2021-20277 CVE-2021-20254


author: chxssg <chxssg@qq.com> - 4.11.12-6
changelog:
  - Type:cves
  - ID:CVE-2020-14318 CVE-2020-14323 CVE-2020-14383 
  - SUG:NA
  - DESC:fix CVE-2020-14318 CVE-2020-14323 CVE-2020-14383


author: xihaochen <xihaochen@huawei.com> - 4.11.12-8
changelog:
  - Type:cves
  - ID:CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738
  - SUG:NA
  - DESC:fix CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-9
changelog:
  - Type:cves
  - ID:CVE-2021-43566
  - SUG:NA
  - DESC:backport patches to fix CVE-2021-43566:
         s3/lib: add parent_smb_fname function
         smbd: use parent_smb_fname in check_parent_access
         smbd: use parent_smb_fname in inherit_new_acl
         s3/VFS: Add SMB_VFS_MKDIRAT
         vfs_full_audit: pass conn to smb_fname_str_do_log
         s3/VFS: change connection_struct cwd_fname to cwd_fsp
         s3/smbd: Change mkdir_internal to call SMB_VFS_MKDIRAT
         smbd: use parent_smb_fname in mkdir_internal
         fix CVE-2021-43566


author: xinghe <xinghe2@h-partners.com> - 4.11.12-31
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: changtao <changtao@kylinos.cn> - 4.11.12-32.p03
changelog:
  - Type:bugfix
  - ID:[BUG#220458]
  - CVE:NA
  - SUG:NA
  - DESC:fix require satisfied libldb version for samba-client


author: yuboyun <yuboyun@huawei.com> - 4.11.6-8
changelog:
  - Type:cves
  - ID:CVE-2020-10730 CVE-2020-10745 CVE-2020-14303 CVE-2020-10760
  - SUG:NA
  - DESC:fix CVE-2020-10730CVE-2020-10745CVE-2020-14303CVE-2020-10760


author: yanglu <yanglu72@huawei.com> - 7.71.1-11
changelog:
  - Type:CVE
  - CVE:CVE-2021-22945 CVE-2021-22946 CVE-2021-22947
  - SUG:NA
  - DESC:fix CVE-2021-22945 CVE-2021-22946 CVE-2021-22947


author: gaoxingwang<gaoxingwang@huawei.com> - 7.71.1-12
changelog:
  - Type:CVE
  - CVE:CVE-2021-22922 CVE-2021-22923
  - SUG:NA
  - DESC:disable metalink to fix CVE-2021-22922 and CVE-2021-22923


author: gaihuiying <eaglegai@163.com> - 7.71.1-13
changelog:
  - Type:cves
  - CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
  - SUG:NA
  - DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776


author: gaihuiying <eaglegai@163.com> - 7.71.1-15
changelog:
  - Type:cves
  - CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
  - SUG:NA
  - DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208


author: gaihuiying <eaglegai@163.com> - 7.71.1-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix build error when add --disable-http-auth configure option


author: xingwei <xingwei14@h-partners.com> - 7.71.1-23
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dynbuf: provide curlx_ names for reuse by the curl tool
         curl: use curlx_dynbuf for realloc when loading config files
         curl: make file2string use dynbuf
         paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: liyanan <liyanan32@huawei.com> - 2.1.27-11
changelog:
  - Split cyrus-sasl-ldap cyrus-sasl-gs2 cyrus-sasl-scram cyrus-sasl-gssapi
    cyrus-sasl-md5 cyrus-sasl-ntlm cyrus-sasl-plain sub-package


author: hanhuijie <hanhuijie@kylinos.cn> - 1:1.12.16-16.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#116083]
  - SUG:NA
  - DESC: Add Patch:dbus-fix-security-label-trailing-comma.patch to remove trailing comma of security-label.


author: zhoushuiqing <zhoushuiqing2@huawei.com> - 3.6.2-5
changelog:
  - Type:CVE
  - CVE:CVE-2005-1849,CVE-2016-9840,CVE-2016-9841,CVE-2016-9843,CVE-2018-25032,CVE-2022-37434
  - SUG:NA
  - DESC:backport patchs fix zlib cves: CVE-2005-1849 CVE-2016-9840
         CVE-2016-9841 CVE-2016-9843 CVE-2018-25032 CVE-2022-37434
         backport-fix-CVE-2005-1849.patch
         backport-fix-CVE-2016-9840.patch
         backport-fix-CVE-2016-9841.patch
         backport-fix-CVE-2016-9843.patch
         backport-fix-CVE-2018-25032.patch
         backport-fix-CVE-2022-37434-1.patch
         backport-fix-CVE-2022-37434-2.patch


author: wangxiao <wangxiao65@huawei.com> - 10.13.1.1-2
changelog:
  - fix CVE-2018-1313
  - a specially-crafted network packet can be used to request the
  - Derby Network Server to boot a database whose location and contents
  - are under the user's control.


author: baiguo <baiguo@kylinos.cn> - 8:2.03.09-5.p05
changelog:
  - Type: bugfix
  - ID: [Task#346081]
  - SUG: NA
  - DESC: fix an double free in the error path from _stats_creat_group


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-8
changelog:
  - Type:cves
  - ID:CVE-2021-25214, CVE-2021-25215, CVE-2021-25219, CVE-2021-25220
  - SUG:restart
  - DESC: Fix CVE-2021-25214 CVE-2021-25215 CVE-2021-25219 CVE-2021-25220


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-9
changelog:
  - Type:cves
  - ID:CVE-2022-2928, CVE-2022-2929
  - SUG:restart
  - DESC: Fix CVE-2022-2928 and CVE-2022-2929


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-10
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-8
changelog:
  - Type:cves
  - ID:CVE-2021-25214, CVE-2021-25215, CVE-2021-25219, CVE-2021-25220
  - SUG:restart
  - DESC:Fix CVE-2021-25214 CVE-2021-25215 CVE-2021-25219 CVE-2021-25220


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-9
changelog:
  - Type:cves
  - ID:CVE-2022-2928, CVE-2022-2929
  - SUG:restart
  - DESC:Fix CVE-2022-2928 and CVE-2022-2929


author: lijiaan <lijiaan@kylinos.cn> - 1.0.0.rc16-52.p01
changelog:
  - modify spec  after %build  add cp /usr/lib/rpm/kylin/confit.* ./autoconf
  - DESC: config.guess and config.sub ensure the software can be compiled and
    run correctly in a variety of different system env.


author: yanshuai <yanshuai01@kylinos.cn> - 1.0.0.rc16-52.p03
changelog:
  - Type: bugfix
  - ID: [BUG#302327]
  - SUG: NA
  - DESC: fix dmraid help info display incomplete problem'


author: huangwenhua <huangwenhua@kylinos.cn> - 4.2.23-3.p04
changelog:
  - Type:update
  - ID:TASK#352125
  - SUG:NA
  - DESC:Add Ignore libtirpc-1.2.6-2 because of libtirpc Obsoletes libtirpc-devel < V-R


author: huangwenhua <huangwenhua@kylinos.cn> - 4.2.23-3.p05
changelog:
  - Type:update
  - ID:TASK#370745
  - SUG:NA
  - DESC: Add Ignore older rpm because of latest rpm split rpm-plugin-systemd-inhibit


author: Qin Fandong <qinfandong@kylinos.cn> - 4.2.23-3.p07
changelog:
  - Type: task
  - ID: [TASK#394271]
  - SUG: NA
  - DESC: unlock pidfile if current process is NOT dnf, backport
          from openEuler, commit d6f56a08


author: liulong <liulong20@huawei.com> - 2.82-4
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2020-25681 CVE-2020-25682 CVE-2020-25683 CVE-2020-25684 CVE-2020-25685 CVE-2020-25686 CVE-2020-25687


author: zengwefeng <zwfeng@huawei.com> - 2.82-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add missing check for NULL return from allocate_rfd
         Fix DNS reply when asking for DNSSEC and a validated


author: gaihuiying <gaihuiying1@huawei.com> - 2.82-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC: Handle caching with EDNS options better
          Fix to 75e2f0aec33e58ef5b8d4d107d821c215a52827c
          Fix for 12af2b171de0d678d98583e2190789e544440e02
          Fix problem with DNS retries in 2.83 2.84 version
          Simplify preceding fix
          Update to new struct frec fields in conntrack code
          Use the values of min port and max port in TCP connection
          Correct occasional bind dynamic synchronization
          Move fd into frec_src fixes 15b60ddf935a531269bb8c68
          fix CVE-2021-3448


author: renmingshuai <renmingshuai@huawei.com> - 2.82-14
changelog:
  - Type:bugfix
  - Id:
  - SUG:NA
  - DESC:Reduce code duplication, reuse existing functions
         Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: liuzekun<liuzekun@huawei.com> - 18.09.0-102
changelog:
  - Type:bugfix
  - ID:NA
  - CVE:NA
  - SUG:restart
  - DESC:
  1.delete stale containerd object on start failure
  2.remove redundant word item
  3.delete event is not need to process
  4.stat process exit file when kill process dire
  5.sync cli vendor
  6.fix CVE-2020-13401
  7.do not add w to LDFLAGS
  8.add files in proc for mask
  9.fix docker load files leak
  10.do not sync if BYPAAS_SYNC is false
  11.fix panic on single character volumes
  12.fix stats memory usage display error
  13.add more messages for ops when device not found
  14.mask proc pin_memory


author: jingrui<jingrui@huawei.com> - 18.09.0-105
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix include
    1. fix image cleanup failed.
    2. cleanup load tmp files.
    3. kill residual container process.
    4. resume suspend dm device.
    5. dont kill containerd during dockerd starting.
    6. handle exit event for restore failed container.
    7. wait io with timeout when start failed.
    8. support hostname mirror registry.
    9. mask unused proc files.


author: xiadanni<xiadanni1@huawei.com> - 18.09.0-200
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix and bump version to 200, bugfix include
         1. fix execCommands leak in health-check.
         2. check containerd pid before kill it.


author: xiadanni<xiadanni1@huawei.com> - 18.09.0-201
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix Access to remapped root allows privilege escalation to real root (CVE-2021-21284)


author: xiadanni<xiadanni1@huawei.com> - 18.09.0-202
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent an invalid image from crashing docker daemon(CVE-2021-21285)


author: lvxiangcong<lvxiangcong@kylinos.cn> - 18.09.0-202.p03
changelog:
  - Type:CVE
  - CVE: CVE-2023-25173 && CVE-2023-25153
  - SUG:NA
  - DESC:fix CVE-2023-25173 && CVE-2023-25153 && Rebuild docker-engine


author: lvxiangcong <lvxiangcong@kylinos.cn> - 18.09.0.202.p05
changelog:
  - Type: BUG
  - ID:   [BUG#197029]
  - SUG:  NA
  - DESC: rebuild docker engine for golang update to 1.15.7-32.p01


author: lvxiangcong <lvxiangcong@kylinos.cn> - 18.09.0-202.p08
changelog:
  - Type: TASK
  - ID:   [TASK#206575]
  - SUG:  NA
  - DESC: rebuild for containerd fix cve-2023-39325 and cve-2022-41723


author: weiyuan <weiyuan@kylinos.cn> - 18.09.0-202.p10
changelog:
  - Type: CVE
  - ID: CVE-2021-41091
        CVE-2024-29018
        CVE-2024-24557
        CVE-2021-41092
        CVE-2021-41089
  - SUG: NA
  - DESC: backport fix cve CVE-2021-41091 CVE-2024-29018 CVE-2024-24557 CVE-2021-41092 CVE-2021-41089


author: weiyucheng <weiyucheng@kylinos.cn> - 18.09.0-202.p11.02
changelog:
  - Type: cves
  - ID: CVE-2024-36621
        CVE-2024-36623
        CVE-2022-24769
  - SUG: NA
  - DESC: backport fix cve CVE-2024-36621 CVE-2024-36623 CVE-2022-24769


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-102
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fixes config.Namespaces is empty when accessed
         write freezer state after every state check
         may kill other process when container has been stopped
         fix cgroup hugetlb size prefix for kB
         check nil pointers in cgroup manager


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-104
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:don't deny all devices when update cgroup resource
         do not permit /proc mounts to non-directories
         fix permission denied


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-200
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix and bump version to 200, bugfix include
         1. add cpu and memory info when print cgroup info
         2. fix freezing race


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-201
changelog:
  - Type:CVE
  - CVE:CVE-2021-30465
  - SUG:NA
  - DESC:add mount destination validation(fix CVE-2021-30465)


author: cenhuilin<cenhuilin@kylinos.cn> - 1.0.0.rc3-201.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix connect container failed when reading partially written state.json content


author: sunjialin <sunjialin@kylinos.cn> -2.3.10.1-4.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:Modify the patch number of dovecot-2.3.10.1-surpport-mips64el.patch,
         Patch number:6012 coincide, modify Patch6012 to Patch7000


author: likai01 <likai01@kylinos.cn> - 1:2.3.15-3.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:add the dovecot-2.3.10.1-surpport-mips64el.patch[liu feng] to compile smoothly


author: gaoyukun <gaoyukun@kylinos.cn> - 1:2.3.15-6.p01
changelog:
  - Type:NA
  - ID:TASK#156265
  - SUG:NA
  - DESC:add patch:0001-dovecot-2.3.15-kylin-remove-sensitive-characters.patch


author: wanghao<wanghao2@kylinox.cn> - 050-3.se.p04.07
changelog:
  - Type: update
  - ID: [Task#129149]
  - SUG:NA
  - DESC: 添加magic配置文件,修复执行控制白名单初始化时类型判断失败的问题
  -         add patch: dracut-050-add-magic-config-file.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 050-3.se.p05.07
changelog:
  - Type:bugfix
  - ID:[BUG#211690]
  - SUG:NA
  - DESC:add kernel/kylin in 90kernel-modules-extra/module-setup.sh, support kylin kernel
  -      add patch: dracut-050-support-kylin-kernel.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 050-3.se.p05.08
changelog:
  - Type:update
  - ID:[Task#195740]
  - SUG:NA
  - DESC:同步sp4补丁,
  -      [BUG#209238] 【sp4】【管理员分权】自定义增加备份还原分区安装系统，开启strict模式后，secadm和auditadm用户异常
  -      add dracut-fix-mount-home-failed.patch


author: Wenhua Huang <huangwenhua@kylinos.cn> - 050-3.se.p06.08
changelog:
  - Type:update
  - ID:[TASK#174208]
  - SUG:NA
  - DESC: nvme 安装盘系统在安装dracut-config-generic 软件包重新生成initramfs.img 系统重启失败
  -	add patch: dracut-fix-lvm-pv-scan-nvme-mpath.patch


author: wuguanghao<wuguanghao3@huawei.com> - 1.45.6-4
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-e2fsprogs-set-hugefile-from-4T-to-1T-in-hugefile-tes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-e2fsck-fix-off-by-one-check-when-validating-depth-of.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-mke2fs-fix-up-check-for-hardlinks-always-false-if-in.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-add-device-check-in-ismount-process.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-libss-add-newer-libreadline.so.8-to-dlopen-path.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-e2fsck-fix-indexed-dir-rehash-failure-with-metadata_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-libext2fs-retry-reading-superblock-on-open-when-chec.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-libext2fs-fix-potential-buffer-overrun-in-__get_dire.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-tune2fs-reset-MMP-state-on-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-e2fsck-use-size_t-instead-of-int-in-string_copy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-libext2fs-fix-incorrect-negative-error-return-in-uni.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-debugfs-fix-double-free-in-realloc-error-path-in-rea.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-tune2fs-fix-resource-leak-in-handle_quota_options.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-libext2fs-fix-UBSAN-warning-in-ext2fs_mmp_new_seq.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0015-libext2fs-fix-segault-when-setting-an-xattr-with-an-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0016-mke2fs-fix-a-importing-a-directory-with-an-ACL-and-i.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0017-mke2fs-fix-resource-leak-on-error-path-when-creating.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0018-libext2fs-fix-incorrect-error-code-return-in-ext2fs_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0019-debugfs-fix-memory-allocation-failures-when-parsing-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0020-debugfs-fix-logdump-on-file-systems-with-block-sizes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0021-libext2fs-fix-crash-when-ext2fs_mmp_stop-is-called-b.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0022-debugfs-fix-dump_metadata_block-for-block-sizes-8192.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0023-debugfs-fix-memory-leak-problem-in-read_list.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0024-debugfs-fix-rdump-and-ls-to-handle-uids-and-gids-655.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0025-e2image-fix-overflow-in-l2-table-processing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0026-e2fsck-fix-last-mount-write-time-when-e2fsck-is-forc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0027-profile_create_node-set-magic-before-strdup-name-to-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0028-tdb_transaction_recover-fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0029-zap_sector-fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0030-misc-fix-potential-segmentation-fault-problem-in-sca.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0031-ext2ed-fix-potential-NULL-pointer-dereference-in-dup.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0032-ss_add_info_dir-fix-error-handling-when-memory-alloc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0033-ss_create_invocation-fix-error-handling-when-memory-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0034-ss_create_invocation-fix-potential-unititalized-refe.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0035-libext2fs-fix-unexpected-NULL-variable.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0036-libsupport-fix-potental-NULL-pointer-dereferences-in.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0037-libext2fs-fix-coverity-nits-in-tdb.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0038-e2fsck-exit-journal-recovery-when-find-EIO-ENOMEM-er.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0039-e2fsck-exit-journal-recovery-when-jounral-superblock.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0040-e2fsck-add-env-param-E2FS_UNRELIABLE_IO-to-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0041-e2fsck-do-not-clean-up-file-acl-if-the-inode-is-trun.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0042-e2fsck-handle-level-is-overflow-in-ext2fs_extent_get.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0043-libext2fs-add-sanity-check-to-extent-manipulation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequire git


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 1.45.6-8
changelog:
  - DESC: fix three issues:
    - e2fsck: exit journal recovery when find EIO, ENOMEM errors
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4RZUT?from=project-issue
    - e2fsck: exit journal recovery when jounral superblock fails to update
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4S0SD?from=project-issue
    - e2fsck: add env param E2FS_UNRELIABLE_IO to fix unreliable io case
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4RZVX?from=project-issue


author: openEuler Buildteam <buildteam@openeuler.org> - 201908-8
changelog:
  - enable multiple threads compiling
  - Pass EXTRA_OPTFLAGS and EXTRA_OPTFLAGS options to make command
  - enable IPv6 for X86_64


author: Jinhua Cao <caojinhua1@huawei.com> - 202002-11
changelog:
  - BaseTools: fix ucs-2 lookup on python3.9
  - BaseTools: Work around array.array.tostring() removal in python3.9


author: xiaoyuliang <xiaoyuliang@kylinos.cn> -202011-7.p02
changelog:
  - Type:	Update
  - ID:	[TASK#138646]
  - SUG:	NA
  - Desc:	fix CVE-2022-4450 CVE-2023-0286 CVE-2023-0215 CVE-2023-0401
  	from src-openeuler/edk2 openEuler-22.03-LTS branch.


author: yanjianqing <yanjianqing@kylinos.cn> - 202011-7.p04
changelog:
  - Type: Update
  - ID:   [TASK#163005]
  - SUG:  NA
  - Desc: fix CVE-2022-4304
          from src-openeuler/edk2 openEuler-22.03-LTS branch.


author: lijunwei <lijunwei@kylinos.cn> - 202011-7.p05
changelog:
  - Type: Update
  - ID:   [TASK#204641]
  - SUG:  NA
  - Desc: Add Patch0030~Patch0066 fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、
          CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727、CVE-2022-36763、
          CVE-2022-36764、CVE-2022-36765、CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、
          CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235


author: cuiyudong <cuiyudong@kylinos.cn> - 202011-7.p05
changelog:
  - Type: Update
  - ID:   [TASK#204640]
  - SUG:  NA
  - Desc: fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、
          CVE-2023-3446、CVE-2023-3817、CVE-2024-0727、CVE-2022-36763、
          CVE-2022-36764、CVE-2022-36765、CVE-2023-45229、CVE-2023-45230、
          CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、
          CVE-2023-45235


author: xiaoyuliang <xiaoyuliang@kylinos.cn> -202011-7.p07
changelog:
  - Type: Update
  - ID:   [TASK#363445]
  - SUG:  NA
  - DESC: fix CVE-2024-1298/CVE-2024-5535/CVE-2021-3712/CVE-2022-0778


author: lijunwei <lijunwei@kylinos.cn> - 202011-7.p08
changelog:
  - Type: Update
  - ID:   [TASK#388581]
  - SUG:  NA
  - DESC: Fix CVE-2024-38796/CVE-2023-45236/CVE-2023-45237


author: panxiaohe <panxh.life@foxmail.com> - 0.180-7
changelog:
  - Get instance correctly for eu-ar -N option
  - Use make macros
  - Use upstream patch for no stdin flag


author: panxiaohe <panxh.life@foxmail.com> - 0.180-9
changelog:
  - change the permission of eu-* to 750
  - add elfutils-extra
  - move eu-objdump, eu-readelf, eu-nm to elfutils-extra


author: fuanan <fuanan3@h-partners.com> - 0.180-11
changelog:
  - Fix "/usr/lib64/libdebuginfod.so.1" not found when uninstall elfutils-debuginfod-client-devel
  - Fix Obsoletes in spec


author: fuanan <fuanan3@h-partners.com> - 0.180-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix segfault in eu-ar -m
         Use upstream patch for Fix error of parsing object file perms


author: wangshuo <wangshuo@kylinos.cn> - 0.180-15.p01
changelog:
  - Type:[update/bugfix]
  - ID:[TASK#186441][BUG#203894]
  - SUG:NA
  - DESC:x86_64/aarch64: The kernel parameter 'kernel.yama.ptrace_scope = 0' has been commented out.
  -      loongarch64: Add Patch1001-1003, support loongarch64


author: wangshuo <wangshuo@kylinos.cn> - 0.180-15.p02
changelog:
  - Type:[update]
  - ID:[TASK#186441]
  - SUG:NA
  - DESC:p01 build already exists at 239 Koji, causing ctdy-build task failure


author: wangqiang <wangqiang1@kylinos.cn> - 0.180-15.p03
changelog:
  - Type:[bugfix]
  - ID:[TASK#351059] 
  - SUG:NA                                                                     
  - DESC:Add buildrequire to support compress


author: yangcheng <yangcheng87@huawei.com> - 1:27.1-6
changelog:
  - fixed the upgrade error caused by the info file in the emacs-common software package being repackaged


author: zhangxiaolu <zhangxiaolu@kylinos.com> - 1:27.1-14.p01
changelog:
  - type bug fix
  - ID bug fix
  - add patch:kylin-change-translation-emacs.patch
  - DESC: add translate bug add modify spec


author: lijiaan <lijiaan@kylinos.cn> - 1.12.0-2kord0k41.04
changelog:
  - Add modified-parameters-appear-at-the-same-time.patch
  - modified limit appear -k --keep-newer-files at the same time
  - 03 version number was occupied by zj


author: GuoCe <guoce@kylinos.cn> - 1.12.0-2kord0k41.05
changelog:
  - Add resolve_position_display_chinese_character_garbled_code.patch
  - 使用归档管理器打开一个压缩文件，点击归档文件-属性，当位置信息有汉字时显示乱码
  - Add fix-just-add-file-without-directory.patch
  - 空文件夹压缩后，使用归档文件器打开再另存为时，提示信息一闪而过且没有保存成功


author: huayadong <huayadong@kylinos.cn> - 1.12.0-2kord0k41.p08
changelog:
  - add patch41, engrampa-1.12.0-kylin-fix-bug-failed-to-save-the-file-with-the-same-name.patch.
  - fix chandao bug 46607.


author: peijiankang <peijiankang@kylinos.cn> - 1.12.0-2kord0k41.p09
changelog:
  - Type: bugfix
  - ID:   [TASK#185071]
  - SUG:  NA
  - DESC: add engrampa-add-translation-for-tw-and-hk.patch


author: douyan <douyan@kylinos.cn> - 1.12.0-2kord0k41.p10
changelog:
  - Type: bugfix
  - ID:   [TASK#187126]
  - SUG:  NA
  - DESC: engrampa-1.12.0-kylin-add-zh_HK-translation.patch


author: huayadong <huayadong@kylinos.cn> - 1.12.2-2kord7.p03
changelog:
  - Type: bugfix
  - ID:   [Bug#156426]
  - SUG:  NA
  - DESC: add Patch2:eom-1.12.2-kylin-Repair-g_object_New-destruction-results-in-core.patch


author: xiehongyu <xiehongyu@kylin.cn> - 3.30.1-4.01
changelog:
  - Add evince-3.30.1-kylin-perfect-Internationalization.patch
  - Fixed BUG #12046, #11966, perfect Internationalization


author: dillon chen <dillon.chen@gmail.com> - 2.4.5-5
changelog:
  - CVE-2020-18651,CVE-2020-18652
  - CVE-2021-36048,CVE-2021-39847,CVE-2021-42530,CVE-2021-36046,CVE-2021-36055
  - CVE-2021-40716,CVE-2018-12648,CVE-2021-36054,CVE-2021-36047,CVE-2021-36052
  - CVE-2021-36058,CVE-2021-36045,CVE-2021-42531,CVE-2021-36064,CVE-2021-42529
  - CVE-2021-42528,CVE-2021-36050,CVE-2021-40732
  - CVE-2021-36056,CVE-2021-42532,CVE-2021-36053,CVE-2021-36051


author: openEuler Buildteam <buildteam@openeuler.org> - 0.26-19
changelog:
  - Type:cves
  - ID:CVE-2019-13109
  - SUG:NA
  - DESC:fix CVE-2019-13109
         fix ICC profile in PNG images


author: wangkerong <wangkerong@huawei.com> - 0.26-25
changelog:
  - Type:cves
  - ID:CVE-2021-29464 CVE-2021-29463 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29464,CVE-2021-29463,CVE-2021-29473


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29463 CVE-2021-29464 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29463,CVE-2021-29464,CVE-2021-29473


author: wangjie <wangjie375@huawei.com> - 2.2.9-4
changelog:
  - Type:CVE
  - ID:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827
  - SUG:NA
  - DESC:fix CVE-2021-45960 CVE-2021-46143
         CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 2.2.9-6
changelog:
  - Type:CVE
  - ID:CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - SUG:NA
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: cuiyudong <cuiyudong@kylinos.cn> - 4.2.9.1.p04
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add support gb18030-patch ; add gd18030 conf and so  
          add page size-patch ; modify size to 16
          add modify patch ; delete 9 coding for gb18030


author: wangkai <13474090681@163.com> - 1:2.3.0-1
changelog:
  - Update to 2.3.0 for fix CVE-2022-48682
  - Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  - Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
  - Use configure script for installation (Autotools/Automake).
  - Rename cs command ("clear all selections") from cs to csel.
  - Rename igs command ("invert selections") from igs to isel.
  - Add "prune" command as synonym for DELETE key.
  - Clear selections after deleting files via prune/DELETE.
  - Fix dependency issues when fdupes is configured to not use ncurses.
  - Do not enter ncurses mode when --immediate option given.


author: lvfei <lvfei@huawei.com> - 3.0.3.32900-7.p01
changelog:
  - Type:NA
  - ID:bug#134276
  - SUG:NA
  - DESC: remove executable permission bits for firebird-superserver.service


author: wangxiao <wangxiao65@huawei.com> - 79.0-4
changelog:
  - Fix CVE-2020-15664 CVE-2020-15665 CVE-2020-15666 CVE-2020-15667
    CVE-2020-15668 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p05
changelog:
  - modify firefox-wayland.desktop add NoDisplay=true
  - modify firefox.js modify openeuler to kylinos
  - modify distribution.ini modify openeuler to kylinos


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p06
changelog:
  - modify firefox.js modify http://www.kylinos.cn to https://www.kylinos.cn
  - mofify firefox.js  browser.startup.homepage  http://www.kylinos.cn to file:///usr/share/doc/HTML/index.html
  - add patch:firefox-modify-firsturl-http-to-https.patch


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p09
changelog:
  -  Fix CVE-2020-15969 CVE-2020-15999 CVE-2020-16012 CVE-2020-26951
    CVE-2020-26953 CVE-2020-26956 CVE-2020-26957 CVE-2020-26958
    CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26963
    CVE-2020-26965 CVE-2020-25966 CVE-2020-26967 CVE-2022-25235
    CVE-2022-25236 and CVE-2022-25315 CVE-2022-40674


author: wangwenfeng <wangwenfeng@kylinos.cn> - 79.0-4.p11
changelog:
  - Type:compile
  - ID:[TASK#148328]
  - SUG:NA
  - DESC:Make Firefox dependent on the Freetype package. add dependency.


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p14
changelog:
  - Type:CVE
  - ID:TASK#162235 
  - SUG:NA
  - DESC: Fix fix CVE-2021-45960 CVE-2021-46143
          CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p18
changelog:
  - Type: cves
  - ID: CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946 CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406 CVE-2020-15675      
        CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998
  - SUG: restart
  - DESC: fix CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946  CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406   
              CVE-2020-15675  CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p19
changelog:
  - Type: cves
  - ID: CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946 CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406 CVE-2020-15675      
        CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998 CVE-2022-29912
  - SUG: restart
  - DESC: fix CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946  CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406   
          CVE-2020-15675  CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998 CVE-2022-29912


author: huayadong <huayadong@kylinos.cn> - 2.13.92-1.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#251085]
  - SUG : NA
  - DESC: add Patch9001:fontconfig-2.13.92-kylin-backport-Report-more-detailed-logs-instead-of-assertion.patch


author: baizhonggui <baizhonggui@huawei.com> - 20200314-5
changelog:
  - Fix building error: Could not open %files file /home/abuild/rpmbuild/BUILD/fontforge-20200314/FontForge.lang:No such file or directory
  - Add glib in BuildRequires


author: wangyue <wangyue92@huawei.com> - 20200314-6
changelog:
  - remove useless glib buildrequire
  - move /usr/lib/rpm/find-lang.sh /builddir/build/BUILDROOT/fontforge-20200314-7.p02.ky10.x86_64 to correct stage


author: Like <like@kylinos.cn> - 20200314-7.p02
changelog:
  - Type:cves
  - ID:CVE-2024-25081 CVE-2024-25082
  - SUG:NA
  - DESC:add patch3 fix CVE-2024-25081 CVE-2024-25082


author: huanghaitao <huanghaitao8@huawei.com> - 3.0.15-19
changelog:
  - Make help package requires by freeradius

   Aug 21 2020 yuboyun <yuboyun@huawei.com> - 3.0.15-18
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: release +1 for rebuild


author: gaoyukun<gaoyukun@kylinos.cn> - 3.0.15-28.p01
changelog:
  - Type: bugfix
  - ID: [BUG#278033、278023]
  - SUG:NA
  - DESC: Add sed -i '/^95$/d' /etc/uid_list,resolve the issue of installation failure after uninstallation.


author: gaoyukun<gaoyukun@kylinos.cn> - 3.0.15-28.p02
changelog:
  - Type: bugfix、compile
  - ID: [BUG#278033、278023]
  - SUG:NA
  - DESC: solve compilation problems,  remove "


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39352
  - Fix CVE-2023-39353
  - Fix CVE-2023-39354
  - Fix CVE-2023-39356
  - Fix CVE-2023-40181
  - Fix CVE-2023-40186
  - Fix CVE-2023-40188
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40589


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: huayadong<huayadong@kylinos.cn> 1.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#378883]
  - SUG : NA
  - DESC: add patch gb-cjk-fonts-1.0.0-kylin-add-GB_SS_CDK.TTF.patch
          新增国标宋体-超大字符集扩.TTF


author: <majian@kylinos.cn> - 9.2-7.p01
changelog:
  - Type: update
  - ID: [TASK#186426]
  - SUG: NA
  - DESC: Init package for Kylin V10 sp4 and add Kylin patches.
  - [BUG#112827] fix replace manufacturer string from openEuler to KylinOS in version info.
  - [BUG#199946] fix gdb hangup crash issue when attach running process debug.


author: majian <majian@kylinos.cn> - 9.2-7.p02
changelog:
  - Type: bugfix
  - ID: [BUG#218056]
  - SUG: NA
  - DESC: Add 0002-Set-entry-point-when-text-segment-is.patch.


author: huayadong <huayadong@kylinos.cn> - 1:3.30.1-10.p01
changelog:
  - Type:	compile
  - ID: 	[TASK#75897]
  - SUG:	NA
  - DESC: add patch7:gdm-3-30-1-kylin-add-pam-config.patch


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p01
changelog:
  - Type: compile
  - ID:   [TASK#75897]
  - SUG:  NA
  - DESC: add patch7:gdm-3-30-1-kylin-add-pam-config.patch


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#75897]
  - SUG:  NA
  - DESC: add patch0:gdm-3-30-1-kylin-add-pam-config.patch


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p02
changelog:
  - Type: cve
  - ID:   [TASK#133075]
  - SUG:  NA
  - DESC: add patch1:gdm-3.38.2.1-kylin-use-autoptr-to-handle-errors-in-look-for-existing-users.patch
  	Fix CVE-2020-16125


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p03
changelog:
  - Type: bugfix
  - ID:   [BUG#160751]
  - SUG:  NA
  - DESC: add patch2:gdm-3.38.2.1-kylin-fix-fix-the-problem-of-failing-to-start.patch


author: huayadong <huayadong@kylinos.com> - 2.5.6-1.p01
changelog:
  - Type:bugfix
  - ID  :[bug#135451]
  - SUG :NA
  - DESC:add patch0: geoclue-2.5.6-kylin-fix-the-problem-that-the-program-does-not-exit-after-the-user-logs-off.patch


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: panxiaohe <panxiaohe@huawei.com> - 2.27.0-4
changelog:
  - Fix CVE-2021-29468
  - Add gcc and gettext to BuildRequires
    - necessary for building and msgfmt command


author: fuanan <fuanan3@h-partners.com> - 2.27.0-13
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.27.0-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.27.0-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.27.0-16
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: gaihuiying <gaihuiying1@huawei.com> - 2.23.0-16
changelog:
  - Type:cves
  - ID:CVE-2020-11008
  - SUG:NA
  - DESC:fix CVE-2020-11008
         credential: detect unrepresentable values when parsin urls
         fsck: detect gitmodules URLs with embedded newlines


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.27.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolved the problem that a failure message is displayed when the git-daemon package is uninstalled


author: fandeyuan <fandeyuan@kylinos.cn> - 2.62.5-7.p01
changelog:
  - Type: Bugfix
  - ID: [TASK#200965]
  - SUG: NA
  - DESC: add change-g_error-terminate-signal-to-abort.patch


author: litenglong <litenglong@kylinos.cn> - 2.62.5-4.p03
changelog:
  - Type:bugfix
  - ID:[BUG#329022]
  - SUG:NA
  - DESC:Fix race between D-Bus signal emission and unsubscription


author: liqingqing_1229<liqingqing3@huawei.com> - 2.28-44
changelog:
  - fix bug 26100: correct locking and cancellation cleanup in syslog functions. 
  - origin bugzilla link is https://sourceware.org/bugzilla/show_bug.cgi?id=26100


author: zhaowei<zhaowei23@huawei.com> - 2.28-45
changelog:
  - fix bug 965941: fix build with libselinux >= 3.1 
  - origin bugzilla link is https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965941


author: Qingqing Li <liqingqing3@huawei.com> - 2.28-46
changelog:
  - fix handling of collating symbols in fnmatch.
    upstream link is: https://sourceware.org/bugzilla/show_bug.cgi?id=26620
  - fix SEM_STAT_ANY kernel argument pass.
    upstream link is: https://sourceware.org/bugzilla/show_bug.cgi?26637
  - fix i686 test-strftime3.c compile warning.


author: liusirui<liusirui@huawei.com> - 2.28-47
changelog:
  - Fix CVE-2020-27618, iconv accept redundant shift sequences in IBM1364 [BZ #26224]
    https://sourceware.org/bugzilla/show_bug.cgi?id=26224


author: Wang Shuo <wangshuo_1994@foxmail.com> - 2.28-48
changelog:
  - Fix CVE-2020-29573, Harden printf against non-normal long double values
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-29573
    https://sourceware.org/bugzilla/show_bug.cgi?id=26649


author: Wang Shuo<wangshuo_1994@foxmail.com> - 2.28-49
changelog:
  - Fix CVE-2020-29562, Fix incorrect UCS4 inner loop bounds (BZ#26923)
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29562
    https://sourceware.org/bugzilla/show_bug.cgi?id=26923


author: majian <majian@kylinos.cn> - 2.28-49.p09
changelog:
  - cves: CVE-2023-0687
  - ID: [TASK#141422]
  - SUG: NA
  - DESC: Fix CVE-2023-0687.
    https://gitee.com/src-openeuler/glibc/pulls/555


author: majian <majian*kylinos.cn> - 2.28-49.p10
changelog:
  - Type: bugfix
  - ID: [TASK#148359]
  - SUG: NA
  - DESC: move <lua> script in '%posttrans' and '%postun' from all-langpacks subpackage to common subpackage.


author: majian <majian@kylinos.cn> - 2.28-49.p13
changelog:
  - Type: update
  - ID: [TASK#200535]
  - SUG: NA
  - DESC: Patch60: Disable threads in Intel vm environment to avoid performance degradation.


author: <majian@kylinos.cn> - 2.28-49.p14
changelog:
  - Type: cves
  - ID:   [TASK#180596]
  - SUG:  NA
  - DESC: fix CVE-2023-4806 CVE-2023-5156 CVE-2023-4813.


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.28-49.p16
changelog:
  - Type:cves
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:Fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 7.0-10.p03
changelog:
  - Type:cves
  - ID:CVE-2022-48340
  - SUG:NA
  - DESC:Backport v10-sp3-updates-sc p02 patch to fix CVE-2022-48340


author: mengchaoming<mengchaoming@kylinos.cn>- 3.30.1-2.p03
changelog:
  -add patch:gnome-calculator-3.30.1-kylin-fix-bug.patch
  -输入等于号等同于回车计算结果
  -进制转化的时候置灰不能输入的数字
  -单位转换的时候，对应的标签做相应的变化


author: huayadong <huayadong@kylinos.cn>- 3.30.1-2.p06
changelog:
  - add Patch:gnome-calculator-3.30.1-kylin-numlook-bug.patch
  - add Source1:gnome-calculator.tar.gz  --chengrui


author: peijiankang <peijiankang@kylinos.cn>- 3.30.1-2.p10
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add gnome-calculator-update-translations-for-hk.patch


author: liujilin <liujilin@kylinos.cn> - 3.32.1-1.p03
changelog:
  - add patch3:  gnome-logs-3.32.1-kylin-rpm-to-install-logs.patch
  - add polkit policy.
  - change anacpnda logs to rpm logs.


author: liujilin <liujilin@kylinos.cn> - 3.32.1-1.p05
changelog:
  - add patch5:  gnome-logs-3.32.1-kylin-export-logs-display-error.patch
  - export install logs, log file will display error.


author: wanggang <wanggang@kylinos.cn> - 3.32.1-1.p06
changelog:
  - add Patch06:  gnome-logs-3.32.1-kylin-close-keyboard-shortcut.patch
  - close-keyboard-shortcut menu.


author: huayadong<huayadong@kylinos.cn> - 3.32.1-1.p08
changelog:
  - add patch0008:gnome-logs-3.32.1-kylin-fix-bug54920-VNC-is-connected-to-the-server-cannot-be-opened.patch
  - Patch0008:修复vnc连接到服务器日志工具打不开问题.patch


author: wangxiao<wangxia65@huawei.com> -3.30.1-6
changelog:
  - move the libcroco sources directly under src/st
    remove the libcroco dependency from the meson.build files


author: huayadong <huayadong@kylinos.cn> - 3.30.1-10.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#165420]
  - SUG:  NA
  - DESC: add Requires: llvm-libs >= 8.0.1-1.6.p01 only for loongarch64


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-19.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:Remove package:help  BuildArch require
  -      Fix bad /usr/lib/golang}/lib/ macro


author: hanchao<hanchao47@huawei.com> - 1.15.7-21
changelog:
  - Type:CVE
  - CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
  - SUG:NA
  - DESC:fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879


author: hanchao <hanchao47@huawei.com> - 1.15.7-24
changelog:
  - Type:CVE
  - CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
  - SUG:NA
  - DESC:fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725


author: hanchao <hanchao47@huawei.com> - 1.15.7-25
changelog:
  - Type:CVE
  - CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
  - SUG:NA
  - DESC:fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: hanchao <hanchao63@huawei.com> - 1.15.7-27
changelog:
  - Type:CVE
  - CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
  - SUG:NA
  - DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540


author: hanchao <hanchao63@huawei.com> - 1.15.7-28
changelog:
  - Type:CVE
  - CVE:CVE-2023-29402,CVE-2023-29404,CVE-2023-29405
  - SUG:NA
  - DESC: fix CVE-2023-29402,CVE-2023-29404,CVE-2023-29405


author: zhangbowei <zhangbowei@kylinos.cn> - 1.15.7-32.p01
changelog:
  - Type: BUG
  - ID:   [BUG#197029]
  - SUG:  NA
  - DESC: merge upstream of permit invalid host header for docker


author: luoyujie <luoyujie5@huawei.com> - 1.15.7-34
changelog:
  - Type:CVE
  - CVE:CVE-2023-39318,CVE-2023-39319
  - SUG:NA
  - DESC:fix CVE-2023-39318 and CVE-2023-39319


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-37.p02
changelog:
  - Type:update
  - ID:[TASK#189214]
  - SUG:NA
  - DESC:Add Patch9004, fix test error about mod_insecure_issue63845


author: hanchao <hanchao63@huawei.com> - 1.15.7-39.p01
changelog:
  - Type:CVE
  - CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
  - SUG:NA
  - DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-42.p01
changelog:
  - Type:bugfix
  - ID:[TASK#206034]
  - SUG:NA
  - DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-43.p02
changelog:
  - Type:update
  - ID:[TASK#213363]
  - SUG:NA
  - DESC:Add Patch9901-9902, modify spec, support mips64el and loongarch64
  -      Add Patch9903, support loong64 mips64el for CVE-2023-29403


author: houhongxun <houhongxun@kylinos.cn> - 20200916-3.p02
changelog:
  - Type: update
  - ID:   [TASK#327639]
  - SUG:  NA
  - DESC: rebuild to remove sensitive information for sp1、sp2、sp3、sp4


author: lvying <lvying6@huawei.com> - 2.7-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG: NA
  - DESC: peripheral package quality reinforcement: backport bugfix patches from community


author: wangqiang <wangqiang1@kylinos.cn> - 2.8-1.p01
changelog:
  - Type:enhancement
  - ID:[TASK#393475]
  - SUG:NA
  - DESC:Add configure option '--with-tcmalloc-pagesize=64' adopt to aarch64 with 64K pazgesize


author: Like <like@kylinos.cn> - 2.44.0-5.p01
changelog:
  - Type: bugfix
  - ID:   NA
  - SUG:  NA
  - DESC: add patch9000: 0001-Support-loongarch64.patch
          sync from 2.44.0-3.p01


author: hanzhijun <hanzhijun1@huawei.com> - 2.04-3
changelog:
  - Type:cves
  - Id:CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15705 CVE-2020-15706 CVE-2020-15707
  - SUG:NA
  - DESC:fix CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15705 CVE-2020-15706 CVE-2020-15707


author: shuihengcheng <shuihengcheng@kylinos.cn> - 2.04-5.se.01
changelog:
  - add KYLIN-add-bootargs-for-security.patch
  - add 0001-support-FT1500-and-FT2000-uboot.patch
  - add 0001-fix-x86-legacy-problems.patch


author: Han Shuang<hanshuang@kylinos.cn> - 2.04-5.se.01.p02
changelog:
  - modify grub2.spec fix yum update after grub no password 
  - add to /etc/grub.d/00_header  superusers password


author: Han Shuang<hanshuang@kylinos.cn> - 2.04-5.se.01.p03
changelog:
  - modify grub.patches add Patch0250: KYLIN-add-bootargs-for-security.patch Patch0251: 0001-support-FT1500-and-FT2000-uboot.patch Patch0252: 0001-fix-x86-legacy-problems.patch Patch0253: 0001-modify-10_linux.patch


author: Zhang Zeyang<zhangzeyang@kylinos.cn> - 2.04-5.se.01.p07
changelog:
  - Type:CVE
  - CVE:CVE-2021-3981 CVE-2020-27779 CVE-2020-14372 CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2021-20225 CVE-2021-20233
  - SUG:NA
  - DESC:Fix CVE:CVE-2021-3981 CVE-2020-27779 CVE-2020-14372 CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2021-20225 CVE-2021-20233


author: Like<like@kylinos.cn> - 2.04-5.se.01.p08
changelog:
  - Type:CVE
  - CVE:CVE-2021-3697 CVE-2022-28735 CVE-2022-28736 CVE-2022-28734 CVE-2022-28733 CVE-2021-3695 CVE-2021-3696
  - SUG:NA
  - DESC:Fix CVE-2021-3697 CVE-2022-28735 CVE-2022-28736 CVE-2022-28734 CVE-2022-28733 CVE-2021-3695 CVE-2021-3696


author: Xiao Zai<xiaozai@kylinos.cn> - 2.04-5.se.01.p09
changelog:
  - Type:NA
  - ID:BUG#134276
  - SUG:NA
  - DESC: remove executable permission bit for grub-boot-indeterminate.service


author: Xiao Zai <xiaozai@kylinos.cn> - 2.04-5.se.01.p10
changelog:
  - Type:bugfix
  - ID:task#143178
  - SUG:NA
  - DESC: move the password from spec file into 00_header.in file


author: liuyang <liuyang01@kylinos.cn> - 2.04-5.se.01.p12
changelog:
  - Type:CVE
  - ID:TASK#338411
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity
         kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: andy <liuyang01@kylinos.cn> - 2.04-5.se.01.p14
changelog:
  - Type:CVE
  - ID:task#381521
  - CVE:CVE-2022-2601 and CVE-2022-3775
  - SUG:NA
  - DESC:Fix for CVE-2022-2601 and CVE-2022-3775


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.3-1
changelog:
  - Upgrade to 1.2.3
  - Update Version, Release, Source0, BuildRequires
  - Update stage 'build', 'install', 'check' and 'files'


author: jiangping <jiangping@kylinos.cn> - 1.16.2-2.p02
changelog:
  - Type:bug
  - ID:87466
  - SUG:NA
  - DESC:fix yum update conflicting  with Obsoletes: gstreamer-help < 1.16.2-2


author: Funda Wang <fundawang@yeah.net> - 1.16.2-6
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
    CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
    CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
    CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
    CVE-2024-47546


author: peijiankang <peijiankang@kylinos.cn> 2.24.32-11.p01
changelog:
  - Type: cves
  - ID:   [TASK#356995]
  - SUG:  NA
  - DESC: modify spec file enable_immodules_package 1  build gtk2-immodules packages
          add file gtk+-2.24.32-kylin-13336.patch
          add patch 0001-fix-chandao-bug47120.patch
          add patch:0001-add-some-translate.patch
          sync from 2.24.32-7.p03


author: peijiankang <peijiankang@kylinos.cn> - 3.24.21-6.p01
changelog:
  - Type: cves
  - ID:   [TASK#356907]
  - SUG:  NA
  - DESC: add gtk3-update-translations-for-hk.patch
          Handle the mouse block problem of virt-manager virtual machine
          modify gtk3 spec file enable_immodules_package 1
          sync from 3.24.21-1.p03


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.4-1
changelog:
  - Upgrade to 1.2.4
  - Update Version, Release, Source0, BuildRequires
  - Delete sed operation which existed in this version
  - Add patch for fix CVE-2021-33516
  - Update stage 'prep', 'build', 'install', 'check', 'files'


author: yueyuankun <yueyuankun@kylinos.cn> 1.40.2-7.p01
changelog:
  - Add patch01: gvfs-1.40.2-kylin-fixed-place-sidebar-safe-remove-issue.patch
  - coldplug not hava "safe remove" issue.
  - BuildRequires: libwbclient-devel
  - Add Patch02, 解决“我的电脑”中“收藏夹”报错问题，解决U盘有时无法自动挂载的问题
  - Add Patch03, 解决U盘有时无法自动挂载的问题
  - Add Patch04, 解决窗口界面显示为“网络”


author: mengchaoming<mengchaoming@kylinos.cn>-0.5.1-10.60
changelog:
  - add mips Patch56: hardinfo-0.5.1-kylin-scsi-permissions-issue.patch
  - add aarch64 Patch57: hardinfo-0.5.1-kylin-scsi-permissions-issue-and-cpu-info-incorrect.patch
  - add mips Patch58: hardinfo-0.5.1-kylin-mips-cpu-display.patch
  - add aarch64 Patch59: hardinfo-0.5.1-kylin-aarch64-cpu-info.patch
  - modify get_disk_info.sh add access control


author: mengchaoming<mengchaoming@kylinos.cn>-0.5.1-10.61
changelog:
  -add arm patch60:hardinfo-0.5.1-kylin-arm-pci-no-identify.patch
  -add x86 patch61:hardinfo-0.5.1-kylin-x86-pci-no-identify.patch


author: mengchaoming<mengchaoming@kylinos.cn>-0.5.1-10.63
changelog:
  -add patch68:hardinfo-0.5.1-kylin-user-resources-null.patch
  -add x86 patch66:hardinfo-0.5.1-kylin-x86_64-memtotal-not-incorrect.patch --liyunqing
  -add arm patch67:hardinfo-0.5.1-kylin-arm-memtotal-incorrect.patch  --liyunqing
  -add patch64:hardinfo-0.5.1-kylin-disk-name-incomplete.patch
  -add patch65:hardinfo-0.5.1-kylin-arm-device-name-incomplete.patch
  -post execute get_dist_info.sh
  -add patch63:hardinfo-0.5.1-kylin-arm-cpu-null.patch


author: liyunqing <liyunqing@kylinos.cn> - 0.5.1-10.64
changelog:
  - add patch69:hardinfo-0.5.1-kylin-x86-storage-vendor-incorrect.patch
  - add patch70:hardinfo-0.5.1-kylin-arm-storage-vendor-incorrect.patch


author: mengchaoming <mengchaoming@kylinos.cn>- 0.5.1-10.67
changelog:
  - add patch72: hardinfo-0.5.1-kylin-modify-boots-kernel-info.patch
  - add patch73: hardinfo-0.5.1-arm-kylin-modify-boots-kernel-info.patch


author: mengchaoming <mengchaoming@kylinos.cn>- 0.5.1-10.68
changelog:
  -add patch74:hardinfo-0.5.1-kylin-nvme-segmentfault-and-name-null.patch
  -add patch75:hardinfo-0.5.1-kylin-nvme-segmentfault-and-name-null-x86.patch
  -fix external bug5017


author: huayadong <huayadong@kylinos.cn>-0.5.1-10.70
changelog:
  - add Patch77: hardinfo-0.5.1-fix-bug-101193-bug-101305-x86.patch
  - add Patch78: hardinfo-0.5.1-fix-bug-101193-bug-101305-ARM.patch


author: caodongxia <caodongxia@huawei.com> - 1.8.20-12
changelog:
  - add sub packages hdf5-openmpi-static, hdf5-openmpi-devel, hdf5-openmpi,
  - hdf5-mpich-static, hdf5-mpich-devel, hdf5-mpich


author: yaoxin <yaoxin30@h-parters.com> - 1.12.1-1
changelog:
  - Update to 1.12.1 and fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: gongxingliang <gongxingliang@kylinos.cn> - 1.14.5-1.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:Remove compile options (-fallow-argument-mismatch -fallow-invalid-boz) to fix compilation failure


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-8
changelog:
  - Type:cves
  - ID:CVE-2021-26690
  - SUG:NA
  - DESC:fix CVE-2021-26690
         modify version number in changelog


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-9
changelog:
  - Type:cves
  - ID:CVE-2021-34798 CVE-2021-36160 CVE-2021-40438
  - SUG:restart
  - DESC:fix CVE-2021-34798 CVE-2021-36160 CVE-2021-40438


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-10
changelog:
  - Type:cves
  - ID:CVE-2021-40438 CVE-2021-39275
  - SUG:restart
  - DESC:fix CVE-2021-40438 fully and correctly
         fix CVE-2021-39275


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix int overflow in ap_timeout_parameter_parse
         Improve fix to please a fuzzer int overflow


author: liuxiong <liuxiong@kylinos.cn> - 2.4.43-12.p01
changelog:
  - Add history patch
  - add a space between Server and Test in file index.html
  - Change index.html in SOURCES
  - change openEuler to Kylin
  - Change httpd.conf in SOURCES.
  - Hide httpd version.
  - Turn TraceEnable off.


author: liuxiong <liuxiong@kylinos.cn> - 2.4.43-12.p02
changelog:
  - Change index.html in SOURCES
  - change openEuler to Kylin
  - Change httpd.conf in SOURCES.
  - Hide httpd version.
  - Turn TraceEnable off.


author: xiehongyu <xiehongyu@kylinos.cn> - 2.4.43-12.p03
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934


author: Like <like@kylinos.cn> - 2.4.43-12.p04
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-28614 CVE-2022-26377 CVE-2022-30522 
         CVE-2022-28615  CVE-2022-31813


author: chenzhitao <chenzhitao8@huawei.com> - 2.4.43-16
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-28614 CVE-2022-26377 CVE-2022-30522 CVE-2022-28615  CVE-2022-31813


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: hanjinpeng <liutao1@kylinos.cn> - 2.4.43-20.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-13.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-21
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:NA
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: zhangyulong <zhangyulong@kylinos.com> - 2.4.43-23.p02
changelog:
  - Type:TASK
  - ID:195905
  - SUG:NA
  - DESC:add backport-CVE-2019-17567-fix-limit-lengteh-of-domain.patch


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:restart
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.43-24
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-25
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.4.43-25.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-13.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.
          add backport-CVE-2019-17567-fix-limit-lengteh-of-domain.patch


author: yuboyun <yuboyun@huawei.com> - 2.4.43-3
changelog:
  - Type:cves
  - ID:CVE-2020-9490 CVE-2020-11984 CVE-2020-11993
  - SUG:restart
  - DESC:fix CVE-2020-9490CVE-2020-11984CVE-2020-11993


author: xuhe <xuhe@kylinos.cn> - 1.7.1-11.p01
changelog:
  - Type: bugfix
  - ID: BUG#131728
  - SUG: NA
  - DESC: Fix yum install fail on x86_64 platform and fix build error due to files missing


author: liyunqing <liyunqing@kylinos.cn> - 0.3.82-1.p02
changelog:
  - Add p10002: bug#48052、47928 add ChineseHK and capitalized the first letter
  - Add p10003: solve the problem of license's bad display


author: gaoxingwang<gaoxingwang@huawei.com> - 10.04-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon


author: hexiaole <hexiaole@kylinos.cn> - 10.04-3.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:Patch10:add-check-before-arping.patch:add interface state check before arping from 10.04-1.p02:0001-fix-restart-network-server-fail.patch and 10.04-1.p02:0002-modify-wait-time-to-30s.patch


author: jiangjixiang <jiangjixiang@kylinos.cn> - 10.04-3.p02
changelog:
  - Type:bugfix
  - ID:[task#150862]
  - SUG:NA
  - DESC:Add patch11 to resolve the issue of resolv.conf being cleared.
         this issue is introduced by patch0 and patch5.


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: liyunqing <liyunqing@kylinos.cn> - 5.5.0-4.p01
changelog:
  - Type:bugfix
  - Id:[BUG#152353]
  - SUG:NA
  - DESC:modify enum ipvlan_mode with kernel and add support vlan l3s


author: liyunqing <liyunqing@kylinos.cn> - 5.5.0-4.p02
changelog:
  - Type:bugfix
  - ID:[task#167348]
  - SUG:NA
  - DESC:remove feature-iproute-limit-operation-ip-netns-del.patch


author: lixiang <lixiang172@huawei.com> - 0.9.4-14
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:restart
  - DESC:Modify gen-version script and add changelog automatically


author: leizhongkai<leizhongkai@huawei.com> - 0.9.5-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:restart
  - DESC:make `isula-build ctr-img images` display comfortably


author: wangyue <wangyue92@huawei.com> - 2.9.8-6
changelog:
  - fix CVE-2020-36179 CVE-2020-36180 CVE-2020-36181
    CVE-2020-36182 CVE-2020-36188 CVE-2020-36189
    CVE-2020-36187 CVE-2020-36186 CVE-2020-36184 CVE-2020-36183


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.332-b09.0
changelog:
  - deleted Support-Git-commit-ID-in-the-SOURCE-field-of-the-release.patch
  - deleted 8167014-jdeps-failed-with-Missing-message-warn-skippen-entry.patch
  - deleted fix-wrong-commitID-in-release-file.patch
  - deleted recreate-.java_pid-file-when-deleted-for-attach-mechanism.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8194154.patch
  - modified add-missing-test-case.patch
  - add fix-make-bugs-when-git-and-hg-not-exist.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.342-b07.0
changelog:
  - del 8168926.patch
  - del 8194154.patch
  - del 8202142-jfr-event-io-TestInstrumentation-is-unstable.patch
  - del 8266187_Memory_leak_in_appendBootClassPath.patch
  - del debuginfo.diz-should-not-contain-the-path-after-unzip.patch
  - del fix-make-bugs-when-git-and-hg-not-exist.patch
  - modified 7092821-java.security.Provider.getService-is-synchro.patch
  - modified 8268819-SA-Remove-libthread_db-dependency-on-Linux.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch


author: fandeyuan <fandeyuan@kylinos.cn> - 1:1.8.0.312-b07.10.p01
changelog:
  - Type:bugfix
  - Id:[TASK#138430]
  - SUG:NA
  - DESC: add 8268361-Fix-the-infinite-loop-in-next_line.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.382-b05.9
changelog:
  - add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
  - add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
  - add Record-the-number-of-processes-to-errlog-file.patch.patch
  - add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
  - add The-OverWriteOldestGCLog-option-is-added-to-control.patch
  - add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
  - add add-make-Appcds-jsa-rw-region-deterministic.patch
  - add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - add add-8198423-Improve-metaspace-chunk-allocation.patch
  - add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
  - add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - add add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - add add-8226530-test-case-fixed.patch
  - add add-8147940-Modify-testcase-this-test-does-not-assum.patch
  - add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
  - add add-Do-not-collect_class-when-DynamicCDS-dump.patch
  - add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
  - add add-Adapting-IOException-of-Zip-to-ZipException.patch
  - add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
  - add add-fix-windows-build-Dynamic-CDS-failure.patch
  - add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.392-b08.0
changelog:
  - add 8308682-Enhance-AES-performance.patch
  - add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
  - add Add-metaspace-memory-allocation-failure-validation.patch
  - add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
  - del 8202952.patch
  - del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
  - modified Dynamic-CDS-Archive.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase1.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - upgrade to jdk8u392-b08


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.2
changelog:
  - remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - remove add-8226530-test-case-fixed.patch
  - remove add-Adapting-IOException-of-Zip-to-ZipException.patch


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 1:1.8.0.392-b08.2.p01
changelog:
  - Type: cves
  - ID: [TASK#183363]
  - SUG: NA
  - fix install fail caused by %pretrans reporting error 
  	add 8268361-Fix-the-infinite-loop-in-next_line.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.402-b06.0
changelog:
  - modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
  - modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified g1gc-numa-aware-Implementation.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8203699.patch
  - add Add-CaptchaTest-and-fix-KAE-Testcases.patch
  - add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
  - add Add-compiling-option-GS-when-building-windows-JDK.patch
  - add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
  - add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
  - add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
  - add 8057967-CallSite-dependency-tracking-scales-devastat.patch
  - add 8079205-CallSite-dependency-tracking-is-broken-after.patch


author: Benshuai5D <benshuai5d@163.com> - 1:1.8.0.402-b06.4
changelog:
  - add 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - add 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
  - add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
  - add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
  - add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
  - add GCC-12-reports-some-compiler-warnings.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.412-b08.0
changelog:
  - del 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - del 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase2.patch
  - modified support-numactl-for-hadoop-yarn.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.412-b08.3
changelog:
  - add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
  - add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.412-b08.4
changelog:
  - fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
  - fix loongson vendor error


author: Xiang Gao <gaoxiang@kylinos.cn> -1:1.8.0.412-b08.5.p02
changelog:
  - Type:update
  - ID:TASK#205860,TASK#218926
  - SUG:NA
  - DESC:1.Add Hygon dhyana processor support
         2.fix atomic operation issus when cpu scaling
         3.Add Zhaoxin processor support


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.422-b05.rolling
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8136577_Make_AbortVMOnException_available_in_product_builds.patch
  - modified Dynamic-CDS-Archive.patch
  - modified add-safe-compilation-flags.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified openjdk-1.8.0.spec
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - Add Backport-6956385-URLConnection.getLastModified-leaks-file-han.patch
  - Add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch
  - Add Backport-8068864-C2-failed-modified-node-is-not-on-IGVN._work.patch
  - Add Backport-8151845-Comment-in-globals.hpp-for-MetaspaceSize-is-.patch
  - Add Backport-8209362-sun-security-ssl-SSLSocketImpl-ReuseAddr.jav.patch
  - Add Backport-8210706-G1-may-deadlock-when-starting-a-concurrent-c.patch
  - Add Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - Add Huawei-Add-Aggressive-CDS.patch
  - Add Huawei-Keep-objects-when-remove-unshareable-info.patch
  - Add Huawei-improve-GCTR-performance.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.3.p01
changelog:
  - Type: update
  - ID:   TASK#337667
  - SUG:  NA
  - DESC: 1.Add Hygon dhyana processor support
          2.Fix atomic operation issus when cpu scaling
          3.Add Zhaoxin processor support


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.422-b05.4
changelog:
  - Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
  - Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: gaoxiang <gaoxiang@kylinos.cn> -1:1.8.0.422-b05.6.p02
changelog:
  - JDK8 supports 8074981-Integer-FP-scalar-reduction-optimization
  - backport AVX512 support, disable by default.


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432.b06-1
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add Backport-8057910-G1-BOT-verification-should-not-pass.patch
  - add Backport-8069330-and-adapt-G1GC-related-optimization.patch
  - add SA-redact-support-password.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC: 1.JDK8u432 GA release
  	2.Default parameter updates for x86
  	3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
  	4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: aijm <aijiaming1@huawei.com> - 1:11.0.10.9-3
changelog:
  - add downgrade-the-symver-of-log2f-posix-spawn.patch
  - add 8254078-DataOutputStream-is-very-slow-post-disabling.patch
  - add 8217918-C2-XX-AggressiveUnboxing-is-broken.patch
  - add Fix-the-memcpy-symbol-issue-during-JDK11-x64-build.patch


author: linhaibing21 <linhaibing@huawei.com> - 1:11.0.12.7-0
changelog:
  - Update to 11.0.12+7 (GA)
  - delete 8207160-ClassReader-adjustMethodParams-can-potentially-return-null-if-the-args-list-is-empty.patch
  - delete 8217918-C2-XX-AggressiveUnboxing-is-broken.patch
  - delete 8223667-ASAN-build-broken.patch
  - delete 8264640.patch
  - other adaptations to 11.0.12


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.15.10-0
changelog:
  - modified 8231441-3-AArch64-Initial-SVE-backend-support.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.16.8-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
  - modified fast-serializer-jdk11.patch
  - modified dfx-enhancement-of-FastSerializer.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
  - modified add-missing-inline.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix_X509TrustManagerImpl_symantec_distrust.patch
  - add fix_Internal_and_external_code_inconsistency.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.6-0
changelog:
  - update to 11.0.17+5
  - modified NUMA-Aware-Implementation-humongous-region.patch
  - modified Add-KAE-implementation.patch
  - modified fast-serializer-jdk11.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.8-0
changelog:
  - update to 11.0.17+8(GA)
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.21.9-0
changelog:
  - update to 11.0.21+9(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified 8214527-AArch64-ZGC-for-Aarch64.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.22.7-0
changelog:
  - update to 11.0.22+7(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: huangjie <huangjie150@huawei.com> - 1:11.0.23.9-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified delete_expired_certificates.patch


author: songliyang <songliyang@kylinos.cn> - 1.11.0.24.8-3.p01
changelog:
  - Type: update
  - ID:   [TASK#337669]
  - SUG:  NA
  - DESC: 1.Add Hygon dhyana processor support
          2.Add Zhaoxin processor support


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC: 1.openjdk-11.0.25.9 GA release
  	2.add Hygon dhyana processor support
          3.add Zhaoxin processor support
  	4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: like <like@kylinos.cn> - 30-13.p03
changelog:
  - add patch1: rpm-config-mips64el-macros-debugsource-optflags-O2.patch
  --fix macros-debugsource_template and gcc-optflags-O3-to-O2


author: yueyuankun <yueyuankun@kylinos.cn> - 30-13.p06
changelog:
  - Type:bugfix
  - ID:task#200351
  - SUG:NA
  - DESC:fix the issue of missing changelog during compilation


author: likai01 <likai01@kylinos.cn> 2.0.20-14.p03
changelog:
  - Type:cves
  - ID:CVE-2021-20269
  - SUG:NA
  - DESC:FIX CVE-2021-20269,modify kdump-lib-initramfs.sh under SOURCES directly


author: Xinpeng Liu<liuxp11@chinatelecom.cn> -1:0.9.1-14
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:modify the code stype in make_hotpatch and fix compile bug


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-16
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:create-diff-object: error on detect new/changed ALTINSTR_ENTRY_CB


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:kpatch: update sympos for duplicate symbols in vmlinux
         create-diff-object: fix segment fault when sec2->rela is NULL


author: zhangbowei <zhangbowei@kylinos.cn> - 1.15.7-2.p01
changelog:
  - Type:bug
  - ID:[BUG#139325]
  - SUG:NA
  - DESC:remove the "--allow-privileged=true" in patches/orig/kubeadm.conf


author: Jan Chaloupka <jchaloup@redhat.com> - 1.12.5-2
changelog:
  - Allow to install cri-o as alternative to docker
    resolves: #1631053
  - Allow to install moby-engine as alternative to docker
    resolves: #1683154


author: Jan Chaloupka <jchaloup@redhat.com> - 1.13.5-1
changelog:
  - Update to v1.13.5 (CVE-2019-1002101 - Mishandling of symlinks allows for arbitrary file write via `kubectl cp`)
    resolves: #1693884


author: Jan Chaloupka <jchaloup@redhat.com> - 1.15.2-1
changelog:
  - Update to v1.15.2 (CVE-2019-11250 kubernetes: Bearer tokens written to logs at high verbosity levels (>= 7))
    resolves: #1740435


author: lijian <lijian2@kylinos.cn> - 1.15.7-2.p02
changelog:
  - Type:CVE
  - CVE:CVE-2024-3177
  - SUG:NA
  - DESC: Fix CVE-2024-3177, add envFrom to serviceaccount admission plugin


author: lijian <lijian2@kylinos.cn> - 1.15.7-2.p03
changelog:
  - Type:CVE
  - CVE:CVE-2024-8551
  - SUG:NA
  - DESC:Fix CVE-2024-8551, add code to fix kubelet/metrics memory issue


author: zhangdashuang<zhangdashuang@kylinos.cn> - 1.3.10-5.p05
changelog:
  - add patch kylin_activation_fix_76021_76160_76173_75744.patch
  - fix bug76021 bug76160 bug76173 bug75744


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p18
changelog:
  - add patch 18:kylin_activation_fix_103100.patch
  - bug 103100:【济宁市委】ukey激活异常 
  - 本次更新解决激活ukey后会导致断错误,移除了华为可信1.3.10-10到1.3.10-17版本.


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p20
changelog:
  - add patch30 kylin_activation_fix_103100_ukey_activation_error.patch
  - bug 103100 ukey激活异常，优化激活过程。使界面不弹出Marco，系统不卡顿。


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p22
changelog:
  - Type:bugfix&task
  - ID:[BUG#122719] [TASK#88923] 
  - SUG:NA
  - DESC:limit dbus method import_auth_file


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p24
changelog:
  - Type:bugfix
  - ID:[BUG#89131&&BUG128952]
  - SUG:NA
  - DESC:fix show qr code err and import License err


