# changelog

author: zengwefeng <zwfeng@huawei.com> - 1.26.2-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix crash in nm_wildcard_match_check
         fix leak of NMOvsdbPrivate db_uuid


author: gaoxingwang <gaoxingwang@huawei.com> - 1.26.2-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:libnm: fix leak and return failures from nm_client_load_connections()


author: songliyang <songliyang@kylinos.cn> - 1.26.2-12.p03
changelog:
  - Type:TASK
  - ID:163317
  - SUG:https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commits/main?search=all-mac
  - DESC:add Patch11 to support promisc mode


author: songliyang <songliyang@kylinos.cn> - 1.26.2-12.p05
changelog:
  - Type:TASK
  - ID:[TASK#163317]
  - SUG:NA
  - DESC: fix the date of p03 changelog to solve a problem that don't show earlier changelog on koji
          p04 version is already used by v10-sp3-custom-gazb tag, use p05 instead


author: zhangyulong <zhangyulong@kylinos.com> - 1.26.2-13.p05
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the issue that NetworkManager service does not self-heal when the dbus service is abnormal


author: tenglei <tenglei@kylinos.cn> - 1.26.2-13.p06
changelog:
  - Type:TASK
  - ID:[TASK#375349]
  - SUG:NA
  - DESC:Modify the udev rule to solve the caclico network card hosting problem


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: houhongxun <houhongxun@kylinos.cn> - 0.6.55-2.p01
changelog:
  - Type:update
  - ID:Task#171032
  - SUG:NA
  - DESC:sync kylin modification: fix user display problem in control center or when login
  	add patch: accountsservice-0.6.54-kylin-1000-users-issue.patch(liujilin)


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-31.p23
changelog:
  - Type:bugfix
  - ID:BUG#191289
  - SUG:NA
  - DESC:dracut handle compressed kernel modules
         network use separate main conext for NM-client in threads


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-31.p24
changelog:
  - Type:bugfix
  - ID:BUG#186888
  - SUG:NA
  - DESC:Solve the problem that sometimes the circular loading progress bar does not rotate


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-31.p33
changelog:
  - Type:update
  - ID:task#178419
  - SUG:NA
  - DESC:rename grubloongarch64.efi to BOOTLOONGARCH/BOOTLOONGARCH64.EFI


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-41.p33
changelog:
  - Type:update
  - ID:task#186438
  - SUG:NA
  - DESC:fix empty folder '/usr/bin/liveinst' in arm environmnet
         revert "Set default entry to the BLS id instead of the entry index"
         translate the tips about expected capacity into Chinese
         bugfix change root and storage interface shows
         Don't set LC_ALL for live installations
         Do not crash on network --device link with wireless device
         Do not modify boot order on UEFI if asked


author: Xiao Zai <xiaozai@kylinos.cn> - 33.19-41.p34
changelog:
  - Type:bugfix 
  - ID:BUG#209529,BUG#209613
  - SUG:NA
  - DESC:fixed an issue where the system could be installed in TUI mode without setting an administrator user


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-41.p36
changelog:
  - Type:update
  - ID:BUG#221252
  - SUG:NA
  - DESC:set the environment to en_US.UTF-8 when falling back to text mode


author: lixiaoyong <lixiaoyong@kylinos.com> - 2.8.8-1.p04
changelog:
  - Type: cves
  - ID: [TASK#432004]
  - SUG: NA
  - DESC: fix CVE-2022-3697 CVE-2024-8775 CVE-2024-9902 CVE-2021-3620 CVE-2023-5115


author: lixiaoyong <lixiaoyong@kylinos.com> - 2.8.8-1.p06
changelog:
  - Type: cves/update
  - ID: [TASK#483413]
  - SUG: NA
  - DESC: fix CVE-2021-3583 and modify sensitive words


author: huangwenhua <huangwenhua@kylinos.cn> - 9100h-39.p01
changelog:
  - Type: update
  - ID: [Task#165758]
  - SUG: NA
  - DESC: revise the expression of sensitive words
  	fix regenerate dict.args.in


author: tanyulong <tanyulong@kylinos.cn>-1.17.0-3.p09
changelog:
  - Type:bugfix
  - ID:[BUG#115244]
  - SUG:NA
  - DESC:fix document viewer crashes when clicking to present
  - Add Patches:atril-1.17.0-kylin-fix-bug-115244.patch


author: douyan <douyan@kylinos.cn> - 1.17.0-3.p10
changelog:
  - Type: update
  - ID:   [TASK#187126]
  - SUG:  NA
  - DESC: add atril-1.17.0-kylin-add-zh_HK-translation.patch


author: wangjie <wangjie375@huawei.com> - 2.71-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Add perl to resolve compilation failure
         Add gcc-c++ to solve test failure


author: fuanan <fuanan3@h-partners.com> - 2.71-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix Adapt signed-char check macro which lead to python3 testcase failure.


author: huayadong <huayadong@kylinos.cn> - 0.8-18.p01
changelog:
  - Type: CVE
  - ID  : [Task#482351]
  - SUG : NA
  - DESC: fix CVE-2024-52616, add Patch6010: 0001-Properly-randomize-query-id-of-DNS-packets.patch


author: huangyu <huangyu106@huawei.com> - 32:9.11.21-14
changelog:
  - Type:CVE
  - ID:CVE-2022-2906 CVE-2022-38177 CVE-2022-38178 CVE-2022-2795 CVE-2022-2881
  - SUG:NA
  - DESC:FIX CVE-2022-2906CVE-2022-38177CVE-2022-38178CVE-2022-2795CVE-2022-2881


author: zhanghao <zhanghao383@huawei.com> - 32:9.11.21-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: yangyan <yangyan@kylinos.cn> - 2.31.1-22.1.p02
changelog:
  - Type:CVEs
  - ID:TASK#172088
  - SUG:NA
  - DESC:Fix CVE-2022-47008 CVE-2022-47011 CVE-2022-47696 CVE-2021-46174 CVE-2022-48064


author: pengxu <pengxu@kylinos.cn> - 2.31.1-22.1.p05
changelog:
  - Type:cves
  - ID:CVE-2025-7545
  - SUG:NA
  - DESC: Fix CVE-2025-7545: heap-based buffer overflow in objcopy.


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.0-23
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-jhash-fix-annoying-gcc-fall-through-warnings.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-btt-devs-silence-warning-on-sprintf-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-btt-Fix-overlapping-IO-stats.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-blktrace-don-t-stop-tracer-if-not-setup-trace-succes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-blkparse-remove-duplicated-entry-for-flag-M.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-btt-make-device-devno-use-PATH_MAX-to-avoid-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-make-btt-scripts-python3-ready.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-blktrace-remove-python2-dedpendency.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-btreplay-fix-device-IO-remap-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-blkparse-split-off-the-timestamp-correction-code-in-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-blkparse-fix-absolute-timestamp-when-reading-from-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-btt_plot.py-Use-with-open-as-.-context-manager.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-blkparse-Fix-device-in-event-tracking-error-messages.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-blkparse-Allow-request-tracking-on-non-md-dm-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0015-blkparse-Initialize-and-test-for-undefined-request-t.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/blktrace-fix-exit-directly-when-nthreads-running.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0017-blktrace-Makefile-add-fstack-protector-strong-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0018-fix-parallel-build-failures.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0019-fix-parallel-build-of-btt-and-blkiomon.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0020-blkparse-Fix-up-the-sector-and-length-of-split-compl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0021-blkparse-Fix-a-potential-coredump-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: kouwenqi <kouwenqi@kylinos.cn> - 1.2.0-26.p01
changelog:
  - Type:bugfix
  - ID:[Task#447319]
  - SUG:NA
  - DESC: Backport openEuler-20.03-LTS-SP4  patches:
  	-blkparse: Fix up the sector and length of split completions
  	-blkparse: Fix a potential coredump issue


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.0-23
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-jhash-fix-annoying-gcc-fall-through-warnings.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-btt-devs-silence-warning-on-sprintf-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-btt-Fix-overlapping-IO-stats.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-blktrace-don-t-stop-tracer-if-not-setup-trace-succes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-blkparse-remove-duplicated-entry-for-flag-M.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-btt-make-device-devno-use-PATH_MAX-to-avoid-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-make-btt-scripts-python3-ready.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-blktrace-remove-python2-dedpendency.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-btreplay-fix-device-IO-remap-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-blkparse-split-off-the-timestamp-correction-code-in-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-blkparse-fix-absolute-timestamp-when-reading-from-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-btt_plot.py-Use-with-open-as-.-context-manager.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-blkparse-Fix-device-in-event-tracking-error-messages.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-blkparse-Allow-request-tracking-on-non-md-dm-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0015-blkparse-Initialize-and-test-for-undefined-request-t.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/blktrace-fix-exit-directly-when-nthreads-running.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0017-blktrace-Makefile-add-fstack-protector-strong-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0018-fix-parallel-build-failures.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0019-fix-parallel-build-of-btt-and-blkiomon.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0020-blkparse-Fix-up-the-sector-and-length-of-split-compl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0021-blkparse-Fix-a-potential-coredump-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0022-btt-eliminate-redundant-separators-in-btt-p-display.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: kouwenqi <kouwenqi@kylinos.cn> - 1.2.0-26.p02
changelog:
  - Type:bugfix
  - ID:[Task#455854]
  - SUG:NA
  - DESC: btt: eliminate redundant separators in btt -p display


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.0-23
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-jhash-fix-annoying-gcc-fall-through-warnings.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-btt-devs-silence-warning-on-sprintf-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-btt-Fix-overlapping-IO-stats.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-blktrace-don-t-stop-tracer-if-not-setup-trace-succes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-blkparse-remove-duplicated-entry-for-flag-M.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-btt-make-device-devno-use-PATH_MAX-to-avoid-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-make-btt-scripts-python3-ready.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-blktrace-remove-python2-dedpendency.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-btreplay-fix-device-IO-remap-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-blkparse-split-off-the-timestamp-correction-code-in-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-blkparse-fix-absolute-timestamp-when-reading-from-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-btt_plot.py-Use-with-open-as-.-context-manager.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-blkparse-Fix-device-in-event-tracking-error-messages.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-blkparse-Allow-request-tracking-on-non-md-dm-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0015-blkparse-Initialize-and-test-for-undefined-request-t.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/blktrace-fix-exit-directly-when-nthreads-running.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0017-blktrace-Makefile-add-fstack-protector-strong-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0018-fix-parallel-build-failures.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0019-fix-parallel-build-of-btt-and-blkiomon.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0020-blkparse-Fix-up-the-sector-and-length-of-split-compl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0021-blkparse-Fix-a-potential-coredump-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0022-btt-eliminate-redundant-separators-in-btt-p-display.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0023-blkparse-Fix-up-the-length-of-split-completions.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.0-23
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-jhash-fix-annoying-gcc-fall-through-warnings.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-btt-devs-silence-warning-on-sprintf-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-btt-Fix-overlapping-IO-stats.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-blktrace-don-t-stop-tracer-if-not-setup-trace-succes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-blkparse-remove-duplicated-entry-for-flag-M.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-btt-make-device-devno-use-PATH_MAX-to-avoid-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-make-btt-scripts-python3-ready.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-blktrace-remove-python2-dedpendency.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-btreplay-fix-device-IO-remap-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-blkparse-split-off-the-timestamp-correction-code-in-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-blkparse-fix-absolute-timestamp-when-reading-from-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-btt_plot.py-Use-with-open-as-.-context-manager.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-blkparse-Fix-device-in-event-tracking-error-messages.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-blkparse-Allow-request-tracking-on-non-md-dm-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0015-blkparse-Initialize-and-test-for-undefined-request-t.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/blktrace-fix-exit-directly-when-nthreads-running.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0017-blktrace-Makefile-add-fstack-protector-strong-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0018-fix-parallel-build-failures.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0019-fix-parallel-build-of-btt-and-blkiomon.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0020-blkparse-Fix-up-the-sector-and-length-of-split-compl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0021-blkparse-Fix-a-potential-coredump-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0022-btt-eliminate-redundant-separators-in-btt-p-display.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0023-blkparse-Fix-up-the-length-of-split-completions.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0024-btt-Add-Q2X-and-X2G-statistics.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.0-23
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-jhash-fix-annoying-gcc-fall-through-warnings.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-btt-devs-silence-warning-on-sprintf-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-btt-Fix-overlapping-IO-stats.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-blktrace-don-t-stop-tracer-if-not-setup-trace-succes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-blkparse-remove-duplicated-entry-for-flag-M.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-btt-make-device-devno-use-PATH_MAX-to-avoid-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-make-btt-scripts-python3-ready.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-blktrace-remove-python2-dedpendency.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-btreplay-fix-device-IO-remap-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-blkparse-split-off-the-timestamp-correction-code-in-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-blkparse-fix-absolute-timestamp-when-reading-from-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-btt_plot.py-Use-with-open-as-.-context-manager.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-blkparse-Fix-device-in-event-tracking-error-messages.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-blkparse-Allow-request-tracking-on-non-md-dm-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0015-blkparse-Initialize-and-test-for-undefined-request-t.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/blktrace-fix-exit-directly-when-nthreads-running.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0017-blktrace-Makefile-add-fstack-protector-strong-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0018-fix-parallel-build-failures.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0019-fix-parallel-build-of-btt-and-blkiomon.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0020-blkparse-Fix-up-the-sector-and-length-of-split-compl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0021-blkparse-Fix-a-potential-coredump-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0022-btt-eliminate-redundant-separators-in-btt-p-display.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0023-blkparse-Fix-up-the-length-of-split-completions.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0024-btt-Add-Q2X-and-X2G-statistics.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0025-blkparse-Fix-a-potential-coredump-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0026-blkparse-Verify-if-the-IO-is-split-in-fixup_complete.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: kouwenqi <kouwenqi@kylinos.cn> - 1.2.0-26.p07
changelog:
  - Type:compile
  - ID:[Task#474425]
  - SUG:NA
  - DESC: fix conflict bewtween blktrace-help and iowatcher-help


author: xihaochen <xihaochen@huawei.com> - 1.8.18-17
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:move exchange-bmc-os-info,bmc-snmp-proxy to separate subpackages from ipmitool


author: mengkanglai <mengkanglai2@huawei.com> - 1.8.18-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lan channel fix set alert on off and lanplus realloc the msg if the payload_length gets update


author: jiangjixiang <jiangjixiang@kylinos.cn> - 1.8.18-19.p01
changelog:
  - Type:sync
  - ID: task 186413
  - SUG:NA
  - DESC: synchronize loongarch's patch from 1.8.18-15.p02
      sync Patch6028 to solve the problem of malloc invalid next size (unsorted) when typecode=2 size too small
      sync Patch6029 to solve sel list  timestamp and add CST


author: zhaoyun <zhaoyun@kylinos.cn> - 4.0.3-1.se.01
changelog:
  - Type:update
  - ID:[Task#76232]
  - SUG:NA
  - DESC: 
  - 		1.初始化提交的包安装有问题，修改配置重新提交
  - 		2.sp3重新更新包版本，之前版本是根据桌面的版本
  - 		3.增加debuginfo相关的两个包
  - 		4.增加安全编译选项


author: huangmincai <huangmincai@kylinos.cn> - 4.0.3-1.se.02
changelog:
  - Type:bugfix
  - ID:[Bug#122627, 122621, 117189, 116998, 117040]
  - SUG:NA
  - DESC: 
  - 		1.修复因通过更改密钥后，无法打开保护箱问题;
  - 		2.屏蔽使用终端解锁保护箱时，冗余信息输出;
  - 		3.修复使用终端新建保护箱时，交互信息未翻译问题.


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.4.v2401
changelog:
  - 3rd/ljmcore: update 2.2.4.1 ljmcore driver (v2) (Lu Yao) [task:197912]
  - scsi: megaraid_sas: disabled shared host tagset feature by default (mengfanhui) [bug:204683]
  - USB: serial: pl2303: fix line-speed handling on newer chips (Johan Hovold) [bug:211186]
  - USB: serial: pl2303: add support for PL2303HXN (Charles Yeh) [bug:211186]
  - USB: serial: pl2303: fix tranceiver suspend mode (Johan Hovold) [bug:211186]
  - USB: serial: pl2303: fix non-supported xon/xoff (Johan Hovold) [bug:211186]
  - NETRONOME: NFP: fill version string with VERMAGIC_STRING (Yinjun Zhang) [task:199475]
  - sched: fix failed get node id (liwanwu) [bug:213545]
  - PHYTIUM: drivers/perf: phytium: Bugfix for Phytium ddr/pcie PMU dirvers (Wang Xu) [bug:212814]
  - loop: loop_set_status_from_info() check before assignment (Zhong Jinghua) [task:192988]
  - loop: Check for overflow while configuring loop (Siddh Raman Pant) [task:192988]
  - loop: Factor out configuring loop from status (Martijn Coenen) [task:192988]
  - Revert "loop: Check for overflow while configuring loop" (zhanggenjian) [task:192988]
  - loop: properly observe rotational flag of underlying device (Holger Hoffstätte) [task:192988]
  - loop: Refactor loop_set_status() size calculation (Martijn Coenen) [task:192988]
  - loop: Factor out setting loop device size (Martijn Coenen) [task:192988]
  - loop: Remove sector_t truncation checks (Martijn Coenen) [task:192988]
  - loop: Call loop_config_discard() only after new config is applied (Martijn Coenen) [task:192988]
  - arm64/config: enable CONFIG_GPU_INSPUR (Shixiong Ou) [task:198667]
  - tcm: support tpmrm function of ax99100_spi interface TCM module (jiangxiujie) [task:198010]
  - net: tls, update curr on splice as well (John Fastabend) [task:196365] {CVE-2024-0646}


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.5.v2401
changelog:
  - PHYTIUM: PMU: phytium: update ddr/pcie PMU drivers (liyouhong) [bug:212814]
  - kylin/gmjstcm:Adapting TCM1.0 to x86 (wudandan) [task:195669]
  - x86/alternatives: add missing insn.h include (Dave Hansen) [task:198393]
  - x86/alternatives: Sync bp_patching update for avoiding NULL pointer exception (Masami Hiramatsu) [task:198393]
  - x86/kprobes: Fix ordering while text-patching (Peter Zijlstra) [task:198393]
  - x86/alternatives: Add and use text_gen_insn() helper (Peter Zijlstra) [task:198393]
  - x86/alternatives, jump_label: Provide better text_poke() batching interface (Peter Zijlstra) [task:198393]
  - x86/alternatives: Teach text_poke_bp() to emulate instructions (Peter Zijlstra) [task:198393]
  - x86/jump_label: Make tp_vec_nr static (YueHaibing) [task:198393]
  - x86/jump_label: Batch jump label updates (Daniel Bristot de Oliveira) [task:198393]
  - x86/jump_label: Add a __jump_label_set_jump_code() helper (Daniel Bristot de Oliveira) [task:198393]
  - x86/alternative: Batch of patch operations (Daniel Bristot de Oliveira) [task:198393]
  - x86/kprobes: Prohibit probing on functions before kprobe_int3_handler() (Masami Hiramatsu) [task:198393]
  - rcu: Refactor rcu_{nmi,irq}_{enter,exit}() (Byungchul Park) [task:198393]
  - x86/alternatives: Remove the return value of text_poke_*() (Nadav Amit) [task:198393]
  - x86/jump-label: Remove support for custom text poker (Nadav Amit) [task:198393]
  - x86/jump_label: Use text_poke_early() during early init (Nadav Amit) [task:198393]
  - x86/jump_label: Switch to jump_entry accessors (Ard Biesheuvel) [task:198393]
  - security/ima&evm: fix xattr check error (liuqi) [task:192131]
  - nvmet-tcp: Fix the H2C expected PDU len calculation (Maurizio Lombardi) [task:200668]
  - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length (Maurizio Lombardi) [task:200668] {CVE-2023-52454}
  - nvmet-tcp: fix maxh2cdata icresp parameter (Sagi Grimberg) [task:200668]
  - f2fs: explicitly null-terminate the xattr list (Eric Biggers) [task:200626] {CVE-2023-52436}
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Zhipeng Lu) [task:200671] {CVE-2023-52469}
  - net: qualcomm: rmnet: fix global oob in rmnet_policy (Lin Ma) [task:200745] {CVE-2024-26597}
  - sched/membarrier: reduce the ability to hammer on sys_membarrier (Linus Torvalds) [task:200749] {CVE-2024-26602}
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Tony Lindgren) [task:200752] {CVE-2024-26600}
  - binder: signal epoll threads of self-work (Carlos Llamas) [task:200750] {CVE-2024-26606}
  - CIFS: Fix retry mid list corruption on reconnects (Pavel Shilovsky) [task:197803]
  - net: devlink: skip info_get op call if it is not defined in dumpit (Jiri Pirko) [task:199476]
  - Revert "optimize: rm redundant code in kysec fpro" (penghuaihe) [bug:207104]
  - usb: raw-gadget: return -EINVAL if no proper ep address available (Wei Ming Chen)
  - Bluetooth: Fix atomicity violation in {min,max}_key_size_set (Gui-Dong Han) [task:199813] {CVE-2024-24860}
  - Bluetooth: Move {min,max}_key_size debugfs into hci_debugfs_create_le (Marcel Holtmann) [task:199813]
  - Bluetooth: Add support for LE ping feature (Spoorthi Ravishankar Koppad) [task:199813]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.6.v2401
changelog:
  - i2c: sprd: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201796] {CVE-2020-36780}
  - PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter (Zhang Qilong) [task:201796] {CVE-2020-36780}
  - GRT: net: Change the driver name to grtnic_xgb (xiaolinkui) [task:216498]
  - tpm: fix security module cannot get pcr from tcm1 on ax99100 (lijun) [bug:210498]
  - security/kysec: add kysec_tcm_type boot parameter (huanfuxi) [bug:210498]
  - mm: fix NULL pointer dereference in __do_page_cache_readahead() (Jiangshan Yi) [bug:216363, bug:216348]
  - llc: call sock_orphan() at release time (Eric Dumazet) [task:203087] {CVE-2024-26625}
  - af_unix: fix lockdep positive in sk_diag_dump_icons() (Eric Dumazet) [task:203085] {CVE-2024-26624}
  - xen-netback: don't produce zero-size SKB frags (Jan Beulich) [task:203084] {CVE-2023-46838}
  - net: openvswitch: fix race on port output (Felix Huettner) [task:202729]
  - i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201794] {CVE-2020-36782}
  - LoongArch:modify vfat and nls936 config to y (liubaolin) [task:193507]
  - x86/reboot: KVM: Disable SVM during reboot via virt/KVM reboot callback (Sean Christopherson) [task:201922]
  - ipv6: remove max_size check inline with ipv4 (Jon Maxwell) [task:200581] {CVE-2023-52340}
  - net/dst: use a smaller percpu_counter batch for dst entries accounting (Eric Dumazet) [task:200581] {CVE-2023-52340}
  - net: add a route cache full diagnostic message (Peter Oskolkov) [task:200581] {CVE-2023-52340}
  - ipv6: make ip6_rt_gc_expire an atomic_t (Eric Dumazet) [task:200581] {CVE-2023-52340}
  - KVM: arm64: pmu: Reset sample period on overflow handling (Marc Zyngier) [task:197911]
  - KVM: arm/arm64: Remove pmc->bitmask (Andrew Murray) [task:197911]
  - OPENEULER: SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers (zhanglei) [bug:214334]
  - mm: swapoff: shmem_unuse() stop eviction without igrab() (Hugh Dickins) [task:199161]
  - mm: swapoff: take notice of completion sooner (Hugh Dickins) [task:199161]
  - mm: swapoff: remove too limiting SWAP_UNUSE_MAX_TRIES (Hugh Dickins) [task:199161]
  - mm: swapoff: shmem_find_swap_entries() filter out other types (Hugh Dickins) [task:199161]
  - mm: swap: properly update readahead statistics in unuse_pte_range() (Andrea Righi) [task:199161]
  - mm: rid swapoff of quadratic complexity (Vineeth Remanan Pillai) [task:199161]
  - mm: refactor swap-in logic out of shmem_getpage_gfp (Vineeth Remanan Pillai) [task:199161]
  - lwtunnel: ignore any TUNNEL_OPTIONS_PRESENT flags set by users (Xin Long) [task:196541]
  - lwtunnel: change to use nla_put_u8 for LWTUNNEL_IP_OPT_ERSPAN_VER (Xin Long) [task:196541]
  - lwtunnel: get nlsize for erspan options properly (Xin Long) [task:196541]
  - lwtunnel: change to use nla_parse_nested on new options (Xin Long) [task:196541]
  - lwtunnel: add options setting and dumping for erspan (Xin Long) [task:196541]
  - lwtunnel: add options setting and dumping for vxlan (Xin Long) [task:196541]
  - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (Hao Sun) [task:200744] {CVE-2024-26589}
  - crypto: enable SM3_GENERIC configs (chengang) [bug:215175]
  - HYGON/ANOLIS: x86/head/64: Flush caches for .bss..decrypted section after CR3 switches to early_top_pgt (hanliyang) [task:201176]
  - HYGON: drm: Add hydcu-fixup-header drvier to disable PCI RESET, as hydcu not supporting (fangbaoshun) [task:201176]
  - vhost_net: revert upend_idx only on retriable error (Andrey Smetanin) [task:201250]
  - netfilter: nf_tables: don't skip expired elements during walk (Florian Westphal) [task:179882] {CVE-2023-4244}
  - netfilter: nft_set_rbtree: Add missing expired checks (Phil Sutter) [task:179882]
  - EDAC/thunderx: Fix possible out-of-bounds string access (Arnd Bergmann) [task:200669] {CVE-2023-52464}
  - blk-mq: fix IO hang from sbitmap wakeup race (Ming Lei)
  - nvmet-tcp: fix a crash in nvmet_req_complete() (Maurizio Lombardi) {CVE-2023-6536}
  - x86, sched: Treat Intel SNC topology as default, COD as exception (Alison Schofield)
  - Makefile: add mips and loongarch SRCARCH (Li ZhiGang) [task:199827]
  - security/ima&evm: change default hash algorithm to sha256 (liuqi) [task:192131]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.7.v2401
changelog:
  - release 4.19.90-89.7.v2401 (Zhengyuan Liu)
  - Module.kabi: update Module.kabi based on the new whitelist for loongarch64 (jianghaoran) [task:209184]
  - scripts: Add support for loongarch64 in update-kabilist.sh (jianghaoran) [task:209184]
  - kabi: re-update kabi symvers (Zhengyuan Liu)
  - fs/pipe: dont need wake up self in a single process of ub (huangbing) [bug:217416]
  - scripts/cve-cal.sh: add a script to calculate cve and task (Zhengyuan Liu)
  - spec: enable kabi check (Zhengyuan Liu)
  - kabi: update kabi list and symvers (Zhengyuan Liu)
  - update-kabilist.sh: remove the item from kabi list if not existed in Module.symvers (Zhengyuan Liu)
  - compile-and-chkabi.sh: update check-kabi path (Zhengyuan Liu)
  - fs: remove fget_many and fput_many interface (Gou Hao) [bug:217407]
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Pan Bian) [task:207228] {CVE-2023-52566}
  - security/kysec: fix k tag java hung_task_timeout_secs (mengdehui) [bug:218233]
  - nvme-tcp: can't set sk_user_data without write_lock (Maurizio Lombardi) [task:206926]
  - nvmet-tcp: fix incorrect locking in state_change sk callback (Sagi Grimberg) [task:206926] {CVE-2021-47041}
  - nvme-loop: fix memory leak in nvme_loop_create_ctrl() (Wu Bo) [task:206937] {CVE-2021-47074}
  - nvme-loop: don't put ctrl on nvme_init_ctrl error (Chaitanya Kulkarni) [task:206937]
  - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (Sean Christopherson) [task:206928] {CVE-2021-47061}
  - KVM: use struct_size() and flex_array_size() helpers in kvm_io_bus_unregister_dev() (Rustam Kovhaev) [task:206928]
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso) [task:206383] {CVE-2024-26642}
  - llc: make llc_ui_sendmsg() more robust against bonding changes (Eric Dumazet) [task:206384] {CVE-2024-26636}
  - sched/topology: phytium platform add CLS sd (liwanwu) [task:202344]
  - sched: arm64 add cluster domain (huangbing) [task:202344]
  - sched: multi thread rw optimization (liwanwu) [task:202344]
  - fs/elf: Add loading elf sections helpers (liwanwu) [task:202344]
  - ring-buffer: Have saved event hold the entire event (Steven Rostedt (Google)) [task:205154]
  - ring-buffer: Do not attempt to read past "commit" (Steven Rostedt (Google)) [task:205154] {CVE-2023-52501}
  - ring-buffer: Have rb_iter_head_event() handle concurrent writer (Steven Rostedt (VMware)) [task:205154]
  - ring-buffer: Add page_stamp to iterator for synchronization (Steven Rostedt (VMware)) [task:205154]
  - ring-buffer: Have ring_buffer_empty() not depend on tracing stopped (Steven Rostedt (VMware)) [task:205154]
  - ax25: Fix ax25 session cleanup problems (Duoming Zhou) [task:203789]
  - sched/rt: Fix sysctl_sched_rr_timeslice intial value (Cyril Hrubis) [task:205110]
  - sched/rt: Disallow writing invalid values to sched_rt_period_us (Cyril Hrubis) [task:205110]
  - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset (Cyril Hrubis) [task:205110]
  - net: rds: acquire refcount on TCP sockets (Tetsuo Handa) [task:205876]
  - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (Eric Dumazet) [task:205232] {CVE-2023-52502}
  - nfc: constify several pointers to u8, char and sk_buff (Krzysztof Kozlowski) [task:205232]
  - drm: Don't unref the same fb many times by mistake due to deadlock handling (Ville Syrjälä) [task:205231] {CVE-2023-52486}
  - ipv6: init the accept_queue's spinlocks in inet6_create (Zhengchao Shao) [task:205163]
  - tcp: make sure init the accept_queue's spinlocks once (Zhengchao Shao) [task:205163] {CVE-2024-26614}
  - l2tp: pass correct message length to ip6_append_data (Tom Parkin) [task:205227]
  - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells) [task:205227] {CVE-2023-52527}
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe (Dinghao Liu) [task:205220] {CVE-2023-52510}
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Wen Gu) [task:205222] {CVE-2024-26615}
  - net: fix possible store tearing in neigh_periodic_work() (Eric Dumazet) [task:205221] {CVE-2023-52522}
  - neigh: make sure used and confirmed times are valid (Julian Anastasov) [task:205221]
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida) [task:205218] {CVE-2023-52528}
  - net: nfc: llcp: Add lock when modifying device list (Jeremy Cline) [task:205036] {CVE-2023-52524}
  - nfc: nci: assert requested protocol is valid (Jeremy Cline) [task:205032] {CVE-2023-52507}
  - Input: powermate - fix use-after-free in powermate_config_complete (Javier Carrasco) [task:204918] {CVE-2023-52475}
  - llc: Drop support for ETH_P_TR_802_2. (Kuniyuki Iwashima) [task:204916] {CVE-2024-26635}
  - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (Eric Dumazet) [task:204917] {CVE-2024-26633}
  - tomoyo: fix UAF write bug in tomoyo_write_control() (Tetsuo Handa) [task:205063] {CVE-2024-26622}
  - KYLIN/arm64: Add `model name` show for HISI_TSV200 (Youling Tang) [bug:217118]
  - arm64/config: CONFIG_IP_DCCP=m (lingfuyi) [bug:217102]
  - net/core: check length before updating Ethertype in skb_mpls_{push,pop} (Guillaume Nault) [task:200588]
  - net: Fixed updating of ethertype in skb_mpls_push() (Martin Varghese) [task:200588]
  - Fixed updating of ethertype in function skb_mpls_pop (Martin Varghese) [task:200588]
  - net/sched: fix corrupted L2 header with MPLS 'push' and 'pop' actions (Davide Caratti) [task:200588]
  - net: openvswitch: ensure LSE is pullable before reading it (Davide Caratti) [task:200588]
  - net: openvswitch: limit the number of recursions from action sets (Aaron Conole) [task:200588] {CVE-2024-1151}
  - Change in Openvswitch to support MPLS label depth of 3 in ingress direction (Martin Varghese) [task:200588]
  - net: core: add MPLS update core helper and use in OvS (John Hurley) [task:200588]
  - net: core: move pop MPLS functionality from OvS to core helper (John Hurley) [task:200588]
  - net: core: move push MPLS functionality from OvS to core helper (John Hurley) [task:200588]
  - tty: n_gsm: check error while registering tty devices (Hillf Danton)
  - tty: n_gsm: add helpers to convert mux-num to/from tty-base (Martin Hundebøll)
  - USB: gadget: dummy-hcd: Fix errors in port-reset handling (Alan Stern)
  - bfs: extra sanity checking and static inode bitmap (Tigran Aivazian)
  - USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug (Alan Stern)
  - i2c: cadence: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201795] {CVE-2020-36784}
  - i2c: img-scb: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201797] {CVE-2020-36783}
  - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [task:203086]
  - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [task:203086] {CVE-2024-26627}
  - Revert "ARM64/cpuinfo: Fix ft5000c cpu information display issue" (zhanggenjian) [task:177455, bug:210941]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.8.v2401
changelog:
  - Revert "EULER: LoongArch: kvm: fix bug of kvm's hugepage" (Enze Li) [bug:220929, bug:220376]
  - Revert "EULER: LoongArch: KVM: fix vcpu timer functions" (Enze Li) [bug:220929, bug:220376]
  - efi/arm: Show SMBIOS bank/device location in CPER and GHES error logs (Marcin Benka) [bug:218049]
  - ACPI: tables: Simplify PPTT leaf node detection (Jeremy Linton) [task:207620]
  - fs/pipe: don't wakeup self like unixbech pipe, but can epoll and SIGIO (Bing Huang) [task:209335]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.9.v2401
changelog:
  - fs/pipe: recognize write first read last sequence (Bing Huang) [bug:217416]
  - OPENEULER: mm: fix oom killing for disabled pid (Jing Xiangfeng) [task:210376]
  - LoongArch:adjust the calc method of number of packages. (wanghongliang) [task:209781]
  - LoongArch:irqchip/loongarch-extioi:Fix ext irq route error. (wanghongliang) [task:209781]
  - cpufreq: loongson3-acpi: Initialize the value of policy->cur (mengyingkun) [task:209781]
  - ipmi: ls2k500 kcs ipmi add nolock version support. (Chong Qiao) [task:209781]
  - loongarch/kvm: Fixed a huge page leak on a virtual machine (xianglai li) [task:209781]
  - irqchip/loongarch-extioi: Fix ext irq route fail when some cpus offline (Juxin Gao) [task:209781]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.10.v2401
changelog:
  - crypto/ceu: update phytium ceu driver code (zhubing) [task:209505]
  - security/kysec: fix tcm function name error (huanfuxi) [bug:220431]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.11.v2401
changelog:
  - Revert "fs/pipe: dont need wake up self in a single process of ub" (liyouhong) [bug:223670]
  - Revert "fs/pipe: don't wakeup self like unixbech pipe, but can epoll and SIGIO" (liyouhong) [bug:223670]
  - Revert "OPENEULER: mm: fix oom killing for disabled pid" (liyouhong) [bug:223670]
  - Revert "fs/pipe: recognize write first read last sequence" (liyouhong) [bug:223670]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.12.v2401
changelog:
  - sched: Lack CONFIG_CGROUP_SCHED in smart grid function. (gonglinkai) [task:210377]
  - sched: Modify KABI issue (gonglinkai) [task:210377]
  - sched: smart grid function switch (gonglinkai) [task:210377]
  - sched: Add smart grid function (gonglinkai) [task:210377]
  - sched: affinity function switch (gonglinkai) [task:210377]
  - sched:Add the affinity function (gonglinkai) [task:210377]
  - sched: disabled sysctl_sched_optimize_enabled by default (liwanwu) [task:217846]
  - arm64/config: enable CONFIG_SCHED_CLUSTER=y in the biv configuration file (Peng Can) [task:221113]
  - iavf: free q_vectors before queues in iavf_disable_vf (Nicholas Nunley) [task:212529] {CVE-2021-47201}
  - OPENEULER: iomap: add support to track dirty state of sub pages (Shida Zhang) [task:192649]
  - sched/fair: Use candidate prev/recent_used CPU if scanning failed for cluster wakeup (Yicong Yang) [task:206766]
  - sched/fair: Scan cluster before scanning LLC in wake-up path (Barry Song) [task:206766]
  - sched: Add cpus_share_resources API (Barry Song) [task:206766]
  - arch_topology: Make cluster topology span at least SMT CPUs (Yicong Yang) [task:206766]
  - arch_topology: Limit span of cpu_clustergroup_mask() (Ionela Voinescu) [task:206766]
  - topology/sysfs: export cluster attributes only if an architectures has support (Heiko Carstens) [task:206766]
  - sched/topology: Introduce sched_group::flags (Ricardo Neri) [task:206766]
  - sched/topology, arch/arm64: Rebuild the sched_domain hierarchy when the CPU capacity changes (Morten Rasmussen) [task:206766]
  - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Kunwu Chan) [task:207382] {CVE-2023-52607}
  - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (Duoming Zhou) [task:209227, task:214895] {CVE-2024-26654}
  - mm/swap: fix race when skipping swapcache (Kairui Song) [task:210472] {CVE-2024-26759}
  - vxlan: do not destroy fdb if register_netdevice() is failed (Taehee Yoo) [task:210575]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.14.v2401
changelog:
  - scsi: core: don't preallocate small SGL in case of NO_SG_CHAIN (Ming Lei) [task:227191]
  - scsi: lib/sg_pool.c: clear 'first_chunk' in case of no preallocation (Ming Lei) [task:227191]
  - scsi: s390: zfcp_fc: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: zfcp: move SG table helper from aux to fc and make them static (Steffen Maier) [task:227191]
  - scsi: mvumi: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: mvumi: switch to generic DMA API (Christoph Hellwig) [task:227191]
  - scsi: NCR5380: use sg helper to iterate over scatterlist (Finn Thain) [task:227191]
  - scsi: wd33c93: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: ppa: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: pcmcia: nsp_cs: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: imm: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: aha152x: use sg helper to iterate over scatterlist (Finn Thain) [task:227191]
  - scsi: staging: unisys: visorhba: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: usb: image: microtek: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: pmcraid: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: ipr: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: advansys: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: vmw_pvscsi: Use true, false for adapter->use_msg (Jason Yan) [task:227191]
  - scsi: vmw_pvscsi: Silence dma mapping errors (Thomas Hellstrom) [task:227191]
  - scsi: vmw_pvscsi: Fix swiotlb operation (Thomas Hellstrom) [task:227191]
  - scsi: vmw_pscsi: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: vmw_pscsi: switch to generic DMA API (Christoph Hellwig) [task:227191]
  - security/kysec: fix image sign err (penghuaihe) [task:226800]
  - security/ima: allow the root user to read the current policy rules (huanfuxi) [bug:221830]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.15.v2401
changelog:
  - virtio_net: Add XDP frame size in two code paths (Jesper Dangaard Brouer) [task:335781]
  - virtio-net: Add validation for used length (Xie Yongji) [task:221959] {CVE-2021-47352}
  - KVM: x86: Move IA32_XSS-swapping on VM-entry/VM-exit to common x86 code (Aaron Lewis) [task:215599]
  - KVM: x86: Introduce vcpu->arch.xsaves_enabled (Aaron Lewis) [task:215599]
  - kvm: svm: Update svm_xsaves_supported (Aaron Lewis) [task:215599]
  - KVM: x86: Expose XSAVEERPTR to the guest (Sebastian Andrzej Siewior) [task:215599]
  - kvm: x86: Enumerate support for CLZERO instruction (Jim Mattson) [task:215599]
  - kvm: x86: Move IA32_XSS to kvm_{get,set}_msr_common (Aaron Lewis) [task:215599]
  - KVM: x86: Add CPUID support for new instruction WBNOINVD (Robert Hoo) [task:215599]
  - memblock,arm64: expand the static memblock memory table (Zhou Guanghui) [task:331741]
  - LoongArch: Fixup INIT_MEMBLOCK_RESERVED_REGIONS for loongarch (Jun Yi) [task:331741]
  - loongson: pci/quirks: LS7A2000 enble msi (wusheng) [task:331741]
  - LoongArch: Add irq_work support via self IPIs (Yanteng Si) [task:331741]
  - LoongArch: kdump: fix huge memory machine trigger capture kernel failure (Ming Wang) [task:331741]
  - sizes.h: Add entries between SZ_32G and SZ_64T (Matt Coster) [task:331741]
  - sizes.h: Add SZ_1T macro (Christophe Leroy) [task:331741]
  - sizes.h: add SZ_8G/SZ_16G/SZ_32G macros (Huang Shijie) [task:331741]
  - x86/kdump/64: Restrict kdump kernel reservation to <64TB (Baoquan He) [task:331741]
  - x86/kdump: Have crashkernel=X reserve under 4G by default (Dave Young) [task:331741]
  - loongson: spi: fix repeated kfree() (zhaoqunqin) [task:331741]
  - loongson: cpufreq: loongson3-acpi: Fixed the error of assigning the value of Mhz to Khz (Juxin Gao) [task:331741]
  - loongson: pic: update interrupt registration policy (wanghongliang) [task:331741]
  - LoongArch: Fix kernel boot failure with CONFIG_KASAN (Tiezhu Yang) [task:331741]
  - LoongArch: Implement constant timer shutdown interface (Bibo Mao) [task:331741]
  - udp_tunnel: add the ability to hard-code IANA VXLAN (Jakub Kicinski) [task:334943]
  - netfilter: ctnetlink: Fix regression in conntrack entry deletion (Felix Kaechele) [bug:233722]
  - nfp: flower: fix cb_ident duplicate in indirect block register (John Hurley) [task:240857]
  - flow_offload: fix block stats (John Hurley) [task:240857]
  - flow_offload: add statistics retrieval infrastructure and use it (Pablo Neira Ayuso) [bug:240857]
  - net_sched: fold tcf_block_cb_call() into tc_setup_cb_call() (Cong Wang) [bug:240857]
  - net/sched: Remove egdev mechanism (Oz Shlomo) [bug:240857]
  - nfp: flower: remove TC egdev offloads (John Hurley) [bug:240857]
  - nfp: flower: offload tunnel decap rules via indirect TC blocks (John Hurley) [bug:240857]
  - nfp: flower: increase scope of netdev checking functions (John Hurley) [bug:240857]
  - nfp: flower: include geneve as supported offload tunnel type (John Hurley) [bug:240857]
  - nfp: flower: use the common netdev notifier (Jakub Kicinski) [bug:240857]
  - Revert "kbuild: do not create orphan built-in.a or obj-y objects" (taowei) [bug:240857]
  - drm/virtio: fix memory leak of vbuf (liweishi) [task:205462]
  - net: annotate data-race in neigh_output() (Eric Dumazet) [task:205566]
  - mm/swap: Do not abuse the seqcount_t latching API (Ahmed S. Darwish) [task:222964]
  - mm/swap.c: piggyback lru_add_drain_all() calls (Konstantin Khlebnikov) [task:222964]
  - HYGON/ANOLIS: mm: hugetlb: Remove flag __GFP_THISNODE to avoid failures (huhai) [task:222964]
  - HYGON/ANOLIS: x86: kvm: Don't hypercall to enc all usable RAM on CSV platform (yangwencheng) [task:224804]
  - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (Sean Christopherson) [task:224804]
  - kvm: fix wrong exception emulation in check_rdtsc (Hou Wenlong) [task:224804]
  - KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception (Sean Christopherson) [task:224804]
  - KVM: x86: avoid loading a vCPU after .vm_destroy was called (Maxim Levitsky) [task:224804]
  - KVM: Move wiping of the kvm->vcpus array to common code (Marc Zyngier) [task:224804]
  - KVM: SVM: fix panic on out-of-bounds guest IRQ (Yi Wang) [task:224804]
  - crypto: ccp - Failure on re-initialization due to duplicate sysfs filename (Koba Ko) [task:224804]
  - crypto: ccp - Release dma channels before dmaengine unrgister (Koba Ko) [task:224804]
  - KVM: SVM: Zero out GDTR.base and IDTR.base on INIT (Sean Christopherson) [task:224804]
  - KVM: x86: Properly reset MMU context at vCPU RESET/INIT (Sean Christopherson) [task:224804]
  - x86/ioremap: Map EFI-reserved memory as encrypted for SEV (Tom Lendacky) [task:224804]
  - x86/ioremap: Fix CONFIG_EFI=n build (Borislav Petkov) [task:224804]
  - x86/ioremap: Map EFI runtime services data as encrypted for SEV (Tom Lendacky) [task:224804]
  - kvm: svm: de-allocate svm_cpu_data for all cpus in svm_cpu_uninit() (Jacob Xu) [task:224804]
  - efi/x86: Add RNG seed EFI table to unencrypted mapping check (Tom Lendacky) [task:224804]
  - drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [task:224804]
  - x86/crash: Add e820 reserved ranges to kdump kernel's e820 table (Lianbo Jiang) [task:224804]
  - x86/mm: Rework ioremap resource mapping determination (Lianbo Jiang) [task:224804]
  - x86/e820, ioport: Add a new I/O resource descriptor IORES_DESC_RESERVED (Lianbo Jiang) [task:224804]
  - x86/mm: Create a workarea in the kernel for SME early encryption (Thomas Lendacky) [task:224804]
  - HYGON/ANOLIS: arch: x86: mm: support to dec and enc userspace pages (yangwencheng) [task:224804]
  - HYGON/ANOLIS: arch: x86: mm: merge continuous pages into a large range when notifying range enc status changes (eastmoutain) [task:224804]
  - HYGON: kvm/svm/csv: add ioctl API to unpin CSV shared pages (yangwencheng) [task:224804]
  - HYGON: arch/x86/kvm/csv: manage shared pages with rbtree (yangwencheng) [task:224804]
  - HYGON: arch/x86/kvm/csv: assign PFN as HPA for guest mmio GPA's NPT mapping (yangwencheng) [task:224804]
  - HYGON/ANOLIS: crypto: ccp: Check X86_VENDOR_HYGON before CSV3 memory initialization (Xin Jiang) [task:224804]
  - mm: remove lru_add_drain_all in alloc_contig_range (Minchan Kim) [task:224804]
  - HYGON: crypto: ccp: Make the allocation/free code for CSV RING BUFFER queues more readable (hanliyang) [task:224804]
  - KVM: x86: Fix KVM_GET_MSRS stack info leak (Mathias Krause) [task:224804]
  - KVM: clean up the unused argument (Haiwei Li) [task:224804]
  - KVM: x86: use positive error values for msr emulation that causes #GP (Maxim Levitsky) [task:224804]
  - HYGON/ANOLIS: KVM: SVM: Add support for different CSV guests to reuse the same ASID (hanliyang) [task:224804]
  - HYGON/ANOLIS: driver/virt/coco: Only load CSV Guest dirver in CSV guest VM. (hanliyang) [task:224804]
  - HYGON/ANOLIS: driver/virt/coco: Add HYGON CSV Guest dirver. (fangbaoshun) [task:224804]
  - HYGON: newfeature: ccp: ccp-crypto support sm2 on Hygon generation 4th CPU (yangdepei) [task:224804]
  - HYGON: HCT: update hct module to support hct2.0 (yangdepei) [task:224804]
  - Revert "sched: Fix sched_fork() access an invalid sched_task_group" (Bing Huang) [task:224985]
  - xfs: cap longest free extent to maximum allocatable (Dave Chinner) [task:328072]
  - io_uring: drop any code related to SCM_RIGHTS (Jens Axboe) [task:225582] {CVE-2023-52656}
  - svm: Fix compile warning (Zhang Hao) [task:328880]
  - LoongArch: Fixed the virtual block after a long time. (cuitao) [task:333556]
  - Revert "LoongArch:LSVZ: set timer offset at first time once" (lifangxu) [task:331741]
  - atl1c: fix tx timeout after link flap on Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: Work around the DMA RX overflow issue (Sieng-Piaw Liew) [task:222007] {CVE-2023-52834}
  - atl1c: add 4 RX/TX queue support for Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: detect NIC type early (Gatis Peisenieks) [task:222007]
  - atl1c: show correct link speed on Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: remove redundant assignment to variable tpd_req (Colin Ian King) [task:222007]
  - net/atheros: Clean atheros code from driver version (Leon Romanovsky) [task:222007]
  - atl1c: improve performance by avoiding unnecessary pcie writes on xmit (Gatis Peisenieks) [task:222007]
  - net: core: add __netdev_sent_queue as variant of __netdev_tx_sent_queue (Heiner Kallweit) [task:222007]
  - atl1c: prepare for multiple rx queues (Gatis Peisenieks) [task:222007]
  - atl1c: move tx napi into tpd_ring (Gatis Peisenieks) [task:222007]
  - atl1c: move tx cleanup processing out of interrupt (Gatis Peisenieks) [task:222007]
  - net: export dev_set_threaded symbol (Lorenzo Bianconi) [task:222007]
  - atl1c: switch to napi_gro_receive (Sieng Piaw Liew) [task:222007]
  - atl1c: use napi_alloc_skb (Sieng Piaw Liew) [task:222007]
  - inet: inet_defrag: prevent sk release while still in use (Florian Westphal) [task:213813] {CVE-2024-26921}
  - inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [task:213813]
  - skb_expand_head() adjust skb->truesize incorrectly (Vasily Averin) [task:213813]
  - skbuff: introduce skb_expand_head() (Vasily Averin) [task:213813]
  - scsi: core: Increase max device queue_depth to 20480 (zhanggenjian) [task:332943]
  - scsi: megaraid: Clear READ queue map's nr_queues (Ming Lei) [task:332943]
  - scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and real interrupt (Sumit Saxena) [task:332943]
  - scsi: megaraid_sas: mq_poll support (Kashyap Desai) [task:332943]
  - scsi: core: Add mq_poll support to SCSI layer (Kashyap Desai) [task:332943]
  - sched/fair: Fix wrong cpu selecting from isolated domain (Bing Huang) [bug:225308]
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Kuniyuki Iwashima) [task:216629]
  - ARM: 9170/1: fix panic when kasan and kprobe are enabled (sparkhuang) [task:330279] {CVE-2021-47618}
  - cifs: fix underflow in parse_server_interfaces() (Dan Carpenter) [task:214157] {CVE-2024-26828}
  - af_unix: Fix garbage collector racing against connect() (Michal Luczaj) [task:216629] {CVE-2024-26923}
  - af_unix: Do not use atomic ops for unix_sk(sk)->inflight. (Kuniyuki Iwashima) [task:216629]
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Daniel Starke) [task:224203] {CVE-2024-36016}
  - um: Add winch to winch_handlers before registering winch IRQ (Roberto Sassu) {CVE-2024-39292}
  - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Shigeru Yoshida) [task:328474] {CVE-2024-36903}
  - net: fix __dst_negative_advice() race (Eric Dumazet) [task:328468] {CVE-2024-36971}
  - net: annotate data-races around sk->sk_dst_pending_confirm (Eric Dumazet) [task:328468]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.16.v2401
changelog:
  - scsi: smartpqi: Change driver version to 2.1.24-046 (Don Brace) [bug:245145]
  - scsi: smartpqi: Enhance error messages (Mahesh Rajashekhara) [bug:245145]
  - scsi: smartpqi: Enhance controller offline notification (David Strahan) [bug:245145]
  - scsi: smartpqi: Enhance shutdown notification (David Strahan) [bug:245145]
  - scsi: smartpqi: Simplify lun_number assignment (David Strahan) [bug:245145]
  - scsi: smartpqi: Rename pciinfo to pci_info (Kevin Barnett) [bug:245145]
  - scsi: smartpqi: Rename MACRO to clarify purpose (Kevin Barnett) [bug:245145]
  - scsi: smartpqi: Add abort handler (Kevin Barnett) [bug:245145]
  - scsi: smartpqi: Replace one-element arrays with flexible-array members (Gustavo A. R. Silva) [bug:245145]
  - scsi: smartpqi: Replace all non-returning strlcpy() with strscpy() (Azeem Shaikh) [bug:245145]
  - scsi: smartpqi: Update version to 2.1.22-040 (Don Brace) [bug:245145]
  - scsi: smartpqi: Update copyright to 2023 (Don Brace) [bug:245145]
  - scsi: smartpqi: Add sysfs entry for NUMA node in /sys/block/sdX/device (Don Brace) [bug:245145]
  - scsi: smartpqi: Stop sending driver-initiated TURs (Kevin Barnett) [bug:245145]
  - scsi: smartpqi: Add support for RAID NCQ priority (Gilbert Wu) [bug:245145]
  - scsi: smartpqi: Validate block layer host tag (Murthy Bhat) [bug:245145]
  - scsi: smartpqi: Remove contention for raid_bypass_cnt (Mike McGowen) [bug:245145]
  - scsi: smartpqi: Fix rare SAS transport memory leak (Don Brace) [bug:245145]
  - scsi: smartpqi: Remove NULL pointer check (Kevin Barnett) [bug:245145]
  - scsi: smartpqi: Add new controller PCI IDs (David Strahan) [bug:245145]
  - scsi: smartpqi: Map full length of PCI BAR 0 (Mike McGowen) [bug:245145]
  - tracing: Fix race issue between cpu buffer write and swap (Zheng Yejian)
  - kylin/gmjstcm: fix compilation warning (Li Jun) [task:352591, task:357223]
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (Tetsuo Handa) [task:347077] {CVE-2024-41063}
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (David Ruth) [task:344573] {CVE-2024-40995}
  - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Li Qiang) [task:357923]
  - fix a USB crash issue for s5000c with x100 (huhai) [task:355097]
  - fix some compilation warnings (Jiangshan Yi) [task:357223]
  - overflow: Add __must_check attribute to check_*() helpers (Kees Cook) [task:357223]
  - net/mlx5: Add a blank line after declarations (Wenpeng Liang) [task:357223]
  - ext4: remove the special buffer dirty handling in do_journal_get_write_access (Shida Zhang) [task:345663]
  - ext4: fix a potential assertion failure due to improperly dirtied buffer (Shida Zhang) [task:345663]
  - ext4: hoist ext4_block_write_begin and replace the __block_write_begin (Shida Zhang) [task:345663]
  - ext4: persist the new uptodate buffers in ext4_journalled_zero_new_buffers (Shida Zhang) [task:345663]
  - drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update (Srinivasan Shanmugam) [task:352661] {CVE-2024-43903}
  - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules (Ma Jun) [task:352181] {CVE-2024-43907}
  - netlink: convert nlk->flags to atomic flags (Eric Dumazet) [task:345975]
  - x86: stop playing stack games in profile_pc() (Linus Torvalds) [task:347039] {CVE-2024-42096}
  - NFSD: Fix ia_size underflow (Chuck Lever) [task:347049] {CVE-2022-48828}
  - f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC (Chao Yu) [task:352651] {CVE-2024-44942}
  - null_blk: fix validation of block size (Andreas Hindborg) [task:347007] {CVE-2024-41077}
  - wifi: virt_wifi: don't use strlen() in const context (Johannes Berg) [task:352217]
  - wifi: virt_wifi: avoid reporting connection success with wrong SSID (En-Wei Wu) [task:352217] {CVE-2024-43841}
  - virt_wifi: fix error on connect (Matteo Croce) [task:352217]
  - virt_wifi: Return micros for BSS TSF values (A. Cody Schuffelen) [task:352217]
  - virt_wifi: implement ndo_get_iflink (Taehee Yoo) [task:352217]
  - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (Dave Jiang) [task:346975] {CVE-2024-42110}
  - io_uring/io-wq: Use set_bit() and test_bit() at worker->flags (Breno Leitao) [task:347145] {CVE-2024-39508}
  - USB: serial: mos7840: fix crash on resume (Dmitry Smirnov) [task:347175] {CVE-2024-42244}
  - fpga: region: fix compilation error for commit 7dd30f1e070 (limiao) [task:354605]
  - LSM: lsm_hooks.h - fix missing colon in docstring (Ondrej Mosnacek) [bug:258835]
  - kernfs: fix xattr name handling in LSM helpers (Ondrej Mosnacek) [bug:258835]
  - kernfs: initialize security of newly created nodes (Ondrej Mosnacek) [bug:258835]
  - selinux: implement the kernfs_init_security hook (Ondrej Mosnacek) [bug:258835]
  - LSM: add new hook for kernfs node initialization (Ondrej Mosnacek) [bug:258835]
  - kernfs: use simple_xattrs for security attributes (Ondrej Mosnacek) [bug:258835]
  - selinux: try security xattr after genfs for kernfs filesystems (Ondrej Mosnacek) [bug:258835]
  - kernfs: do not alloc iattrs in kernfs_xattr_get (Ondrej Mosnacek) [bug:258835]
  - kernfs: clean up struct kernfs_iattrs (Ondrej Mosnacek) [bug:258835]
  - support compile packages on v7 system (Haoran Jiang) [task:242034]
  - resolve compilation errors on v7 systems (Haoran Jiang) [task:242034]
  - add change boot vga device support (Shixiong Ou) [task:347429]
  - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Kenton Groombridge) [task:346919] {CVE-2024-41071}
  - s390/pkey: Wipe copies of clear-key structures on failure (Holger Dengler) [task:345319] {CVE-2024-42156}
  - ipv6: sr: fix missing sk_buff release in seg6_input_core (Andrea Mayer) [task:347171] {CVE-2024-39490}
  - fbdev: ls2k500sfb fix default video memory size. (Chong Qiao) [task:353249]
  - acpi: mcfg quirk: Increased multi-chip support for the 3C6000, now capable of supporting up to eight chips. (zhenghaowei) [task:353249]
  - irqchip: irq-loongson-pch-msi: Use pch_msi_priv[0] as the default value (zhangtianyang) [task:353249]
  - fbdev: ls2k500sfb update var info according to resolution. (Chong Qiao) [task:353249]
  - filelock: Remove locks reliably when fcntl/close race is detected (Jann Horn) [task:346931] {CVE-2024-41012}
  - btrfs: get rid of warning on transaction commit when using flushoncommit (Filipe Manana) [task:351471] {CVE-2022-48920}
  - f2fs: fix return value of f2fs_convert_inline_inode() (Chao Yu) [task:352015] {CVE-2024-42296}
  - f2fs: fix to consider multiple device for readonly check (Chao Yu) [task:352015]
  - scsi: qla2xxx: validate nvme_local_port correctly (Nilesh Javali) [task:354889] {CVE-2024-42286}
  - xdp: Remove WARN() from __xdp_reg_mem_model() (Daniil Dulov) [task:345323] {CVE-2024-42082}
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Daniel Borkmann) [task:347029] {CVE-2024-42246}
  - crypto: aead,cipher - zeroize key buffer after use (Hailey Mothershead) [task:346415] {CVE-2024-42229}
  - crypto: ecdh - explicitly zeroize private_key (Joachim Vandersmissen) [task:345795] {CVE-2024-42098}
  - gpio: fix compile error (zhouyuhang) [task:347327]
  - nvme: avoid double free special payload (Chunguang Xu) [task:347137] {CVE-2024-41073}
  - ASoC: topology: Fix references to freed memory (Amadeusz Sławiński) [task:346623] {CVE-2024-41069}
  - ila: block BH in ila_output() (Eric Dumazet) [task:346669] {CVE-2024-41081}
  - serial: imx: Introduce timeout when waiting on transmitter empty (Esben Haabendal) [task:345715] {CVE-2024-40967}
  - fou: remove warn in gue_gro_receive on unsupported protocol (Willem de Bruijn) [task:352275] {CVE-2024-44940}
  - media: venus: fix use after free in vdec_close (Dikshita Agarwal) [task:352227] {CVE-2024-42313}
  - dev/parport: fix the array out-of-bounds risk (tuhaowen) [task:352211] {CVE-2024-42301}
  - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Pavel Tikhomirov) [task:221965] {CVE-2024-35839}
  - netfilter: propagate net to nf_bridge_get_physindev (Pavel Tikhomirov) [task:221965]
  - netfilter: nfnetlink_log: use proper helper for fetching physinif (Pavel Tikhomirov) [task:221965]
  - neighbour: annotate lockless accesses to n->nud_state (Eric Dumazet) [task:221965]
  - bpf: bpf_fib_lookup should not return neigh in NUD_FAILED state (Martin KaFai Lau) [task:221965]
  - bpf: Handle ipv6 gateway in bpf_ipv4_fib_lookup (David Ahern) [task:221965]
  - driver core: Fix uevent_show() vs driver detach race (Dan Williams) [task:345303]
  - drivers: core: synchronize really_probe() and dev_uevent() (Dirk Behme) [task:345303] {CVE-2024-39501}
  - security/selinux: Fix SELinux crash issue when disabling stack (chengang) [task:338969]
  - security/selinux: Fix box compile errors when stack disabled (chengang) [task:338969]
  - ipvs: properly dereference pe in ip_vs_add_service (Chen Hanxiao) [task:352245] {CVE-2024-42322}
  - nilfs2: fix kernel bug on rename operation of broken directory (Ryusuke Konishi) [task:347001] {CVE-2024-41034}
  - ceph: prevent use-after-free in encode_cap_msg() (Rishabh Dave) [task:210332] {CVE-2024-26689}
  - kvm: s390: Reject memory region operations for ucontrol VMs (Christoph Schlameuss) [task:352663] {CVE-2024-43819}
  - ice: Don't process extts if PTP is disabled (Jacob Keller) [task:346995] {CVE-2024-42107}
  - closures: Change BUG_ON() to WARN_ON() (Kent Overstreet) [task:345719] {CVE-2024-42252}
  - drm/nouveau: prime: fix refcount underflow (Danilo Krummrich) [task:351447] {CVE-2024-43867}
  - pswiotlb: Fix logical error in setup_p_io_tlb_npages (Jiangshan Yi) [task:353533]
  - Bluetooth: Fix usage of __hci_cmd_sync_status (Luiz Augusto von Dentz) [task:346425]
  - Bluetooth: L2CAP: Fix deadlock (Luiz Augusto von Dentz) [task:346425]
  - Bluetooth: hci_sync: Fix Opcode prints in bt_dev_dbg/err (Marcel Ziswiler) [task:346425]
  - Bluetooth: Fix race condition in hci_cmd_sync_clear (Min Li) [task:346425]
  - Bluetooth: hci_sync: Fix not processing all entries on cmd_sync_work (Luiz Augusto von Dentz) [task:346425]
  - Bluetooth: Add helper for serialized HCI command execution (Marcel Holtmann) [task:346425]
  - Bluetooth: Add support hdev to allocate private data (Tedd Ho-Jeong An) [task:346425]
  - bluetooth/l2cap: sync sock recv cb and release (Edward Adam Davis) [task:346425] {CVE-2024-41062}
  - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Marc Kleine-Budde) [task:223130] {CVE-2023-52878}
  - btrfs: fix use-after-free after failure to create a snapshot (Filipe Manana) [task:330299] {CVE-2022-48733}
  - media: mediatek: vcodec: Handle invalid decoder vsi (Irui Wang) [task:352191] {CVE-2024-43831}
  - tracing: Fix overflow in get_free_elt() (Tze-nan Wu) [task:352671] {CVE-2024-43890}
  - md/dm-raid: don't call md_reap_sync_thread() directly (Yu Kuai) [task:221813] {CVE-2024-35808}
  - fpga: region: add owner module and take its refcount (Marco Pagani) [task:330557] {CVE-2024-35247}
  - f2fs: fix to don't dirty inode for readonly filesystem (Chao Yu) [task:352639] {CVE-2024-42297}
  - ext4: check dot and dotdot of dx_root before making dir indexed (Baokun Li) [task:352649] {CVE-2024-42305}
  - s390/pkey: Wipe copies of protected- and secure-keys (Holger Dengler) [task:346923] {CVE-2024-42155}
  - scsi: qla2xxx: Fix for possible memory corruption (Shreyas Deodhar) [task:352643] {CVE-2024-42288}
  - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (Alexey Kodanev) [task:352637] {CVE-2024-43839}
  - gpio: davinci: Validate the obtained number of IRQs (Aleksandr Mishin) [task:345785] {CVE-2024-42092}
  - PHYTIUM: drm/phytium: Add driver version information (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Add PWM backlight control for pe220x eDP (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Change the drm driver name for pe220x (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Add dc patch for BMC (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Modify driver to adapt to ARM and X86_64 compiles (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Mask the hdcp timer irq (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Mask the AUX reply error interrupt (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Adjust log printing level (WangHao) [task:346055]
  - PHYTIUM: drm/phytium: Replace default EFI fb0 with DC FB (WangHao) [task:346055]
  - PHYTIUM: drm/phytium: Fixed dp codec id (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Get edid audio capability (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Bugfix Xorg startup for ps23xx when using pe2201 bmc card (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Cursor hot support negative numbers (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Enable gamma features (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Add capability of tile mode (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Limit the TU to a maximum of 63 (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Sync patches from 4.19.y-dev oss branch (Wang Yinfeng) [task:346055]
  - Revert "drm/vc4: hdmi: Unregister codec device on unbind" (李豪杰) [task:344615, task:351057]
  - ext4: make sure the first directory block is not a hole (Baokun Li) [task:352077] {CVE-2024-42304}
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Shigeru Yoshida) [task:352297] {CVE-2024-42284}
  - leds: trigger: Unregister sysfs attributes before calling deactivate() (Hans de Goede) [task:352209] {CVE-2024-43830}
  - dma: fix call order in dmam_free_coherent (Lance Richardson) [task:352215] {CVE-2024-43856}
  - bpf: Fix a segment issue when downgrading gso_size (Fred Li) [task:352237] {CVE-2024-42281}
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Yu Kuai) [task:345683] {CVE-2024-39476}
  - nvme-fabrics: use reserved tag for reg read/write command (Chunguang Xu) [task:345283] {CVE-2024-41082}
  - drm/amd/display: Check for NULL pointer (Sung Joon Kim) [task:352265] {CVE-2024-42308}
  - drm/amd/display: Set flip pending for pipe split (Wesley Chalmers) [task:352265]
  - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (Ma Ke) [task:352277] {CVE-2024-42310}
  - serial: core: check uartclk for zero to avoid divide by zero (George Kennedy) [task:352289] {CVE-2024-43893}
  - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (Ma Ke) [task:352293] {CVE-2024-42309}
  - mISDN: Fix a use after free in hfcmulti_tx() (Dan Carpenter) [task:352165] {CVE-2024-42280}
  - md/raid5: avoid BUG_ON() while continue reshape after reassembling (Yu Kuai) [task:352173] {CVE-2024-43914}
  - Bluetooth: MGMT: Add error handling to pair_device() (Griffin Kroah-Hartman) [task:352185] {CVE-2024-43884}
  - net/iucv: fix use after free in iucv_sock_close() (Alexandra Winter) [task:352285] {CVE-2024-42271}
  - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (Niklas Neronin) [task:346971] {CVE-2024-42226}
  - remoteproc: imx_rproc: Skip over memory region when node value is NULL (Aleksandr Mishin) [task:352177] {CVE-2024-43860}
  - remoteproc: imx_rproc: Fix ignoring mapping vdev regions (Dong Aisheng) [task:352177]
  - remoteproc: imx_rproc: ignore mapping vdev regions (Peng Fan) [task:352177]
  - scsi: qla2xxx: Complete command early within lock (Shreyas Deodhar) [task:352295] {CVE-2024-42287}
  - scsi: qla2xxx: During vport delete send async logout explicitly (Manish Rangankar) [task:352283] {CVE-2024-42289}
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (Chao Yu) [task:352271] {CVE-2024-42311}
  - jfs: fix null ptr deref in dtInsertEntry (Edward Adam Davis) [task:352249] {CVE-2024-44939}
  - filelock: Fix fcntl/close race recovery compat path (Jann Horn) [task:347167] {CVE-2024-41020}
  - file: Factor files_lookup_fd_locked out of fcheck_files (Eric W. Biederman) [task:347167]
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Bart Van Assche) [task:352669] {CVE-2024-42285}
  - nilfs2: handle inconsistent state in nilfs_btnode_create_block() (Ryusuke Konishi) [task:352291] {CVE-2024-42295}
  - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Eric Dumazet) [task:347083] {CVE-2024-42114}
  - net: ax25: Fix a compilation error (xiaolinkui) [task:351959]
  - kobject_uevent: Fix OOB access within zap_modalias_env() (Zijun Hu) [task:352127] {CVE-2024-42292}
  - jfs: Fix shift-out-of-bounds in dbDiscardAG (Pei Li) [task:352157] {CVE-2024-44938}
  - bpf: Add enum support to btf_ctx_access() (Martin KaFai Lau) [task:351875]
  - ALSA: hda: Do not unset preset when cleaning up codec (Cezary Rojewski) [task:222115] {CVE-2023-52736}
  - leds: mlxreg: Use devm_mutex_init() for mutex initialization (George Stark) [task:345699] {CVE-2024-42129}
  - locking/mutex: Introduce devm_mutex_init() (George Stark) [task:345699] {CVE-2024-42129}
  - bpf: Fix overrunning reservations in ringbuf (Daniel Borkmann) [task:346969] {CVE-2024-41009}
  - exec: Fix ToCToU between perm check and set-uid/gid usage (Kees Cook) [task:351435] {CVE-2024-43882}
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Baochen Qiang) [task:351227] {CVE-2024-43879}
  - net: dsa: mv88e6xxx: fix use-after-free in mv88e6xxx_mdios_unregister (Vladimir Oltean) [task:346697]
  - net: dsa: mv88e6xxx: don't use devres for mdiobus (Vladimir Oltean) [task:346697] {CVE-2022-48818}
  - net: ipv6: ensure we call ipv6_mc_down() at most once (j.nixdorf@avm.de) [task:351441] {CVE-2022-48910}
  - ipv6/addrconf: use a boolean to choose between UNREGISTER/DOWN (Florent Fourcot) [task:351441]
  - ipv6/addrconf: call addrconf_ifdown with consistent values (Florent Fourcot) [task:351441]
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (Breno Leitao) [task:346411] {CVE-2024-40953}
  - drm/msm: another fix for the headless Adreno GPU (Dmitry Baryshkov) [task:351463] {CVE-2023-52911}
  - drm/msm: Make .remove and .shutdown HW shutdown consistent (Javier Martinez Canillas) [task:351463]
  - CDC-NCM: avoid overflow in sanity checking (Oliver Neukum) [task:351493] {CVE-2022-48938}
  - io_uring: add a schedule point in io_add_buffers() (Eric Dumazet) [task:351479] {CVE-2022-48937}
  - net: usb: qmi_wwan: fix memory leak for not ip packets (Daniele Palmas) [task:351501] {CVE-2024-43861}
  - drm/amd/display: Check pipe offset before setting vblank (Alex Hung) [task:345701] {CVE-2024-42120}
  - devres: Fix memory leakage caused by driver API devm_free_percpu() (Zijun Hu) [task:351331] {CVE-2024-43871}
  - driver core: Cast to (void *) with __force for __percpu pointer (Andy Shevchenko) [task:351331]
  - usb: vhci-hcd: Do not drop references before new references are gained (Oliver Neukum) [task:351507] {CVE-2024-43883}
  - drm/radeon: check bo_va->bo is non-NULL before using it (Pierre-Eric Pelloux-Prayer) [task:346959] {CVE-2024-41060}
  - greybus: Fix use-after-free bug in gb_interface_release due to race condition. (Sicong Huang) [task:347127] {CVE-2024-39495}
  - ixgbe: fix pci device refcount leak (Yang Yingliang) [task:351021] {CVE-2022-48896}
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (Miri Korenblit) [task:346187] {CVE-2024-40929}
  - ocfs2: fix unexpected zeroing of virtual disk (Chi Zhiling) [task:335993]
  - net/sched: initialize noop_qdisc owner (Johannes Berg) [task:217588]
  - net/sched: fix kabi change in struct Qdisc (Zhengchao Shao) [task:217588] {CVE-2024-27010, CVE-2024-27010}
  - net/sched: Fix mirred deadlock on device recursion (Eric Dumazet) [task:217588] {CVE-2024-27010}
  - drop_monitor: replace spin_lock by raw_spin_lock (Wander Lairson Costa) [task:345791] {CVE-2024-40980}
  - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Pablo Neira Ayuso) [task:346667] {CVE-2024-42070}
  - nvmet: always initialize cqe.result (Daniel Wagner) [task:344611] {CVE-2024-41079}
  - ibmvnic: don't release napi in __ibmvnic_open() (Sukadev Bhattiprolu) [task:346945] {CVE-2022-48811}
  - powerpc/vnic: Extend "failover pending" window (Sukadev Bhattiprolu) [task:346945]
  - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (Breno Leitao) [task:344437] {CVE-2024-40901}
  - scsi: mpt3sas: Gracefully handle online firmware update (Suganath Prabu) [task:344437] {CVE-2024-40901}
  - scsi: mpt3sas: Add ioc_<level> logging macros (Joe Perches) [task:344437] {CVE-2024-40901}
  - f2fs: Add inline to f2fs_build_fault_attr() stub (Nathan Chancellor) [task:346823] {CVE-2024-42160}
  - f2fs: check validation of fault attrs in f2fs_build_fault_attr() (Chao Yu) [task:346823] {CVE-2024-42160}
  - MIPS: Octeron: remove source file executable bit (Dominique Martinet) [task:347107]
  - MIPS: Octeon: Add PCIe link status check (Songyang Li) [task:347107] {CVE-2024-40968}
  - spi: fix use-after-free of the add_lock mutex (Michael Walle) [task:221921]
  - spi: fix kabi breakage in struct spi_controller (lifangxu) [task:221921]
  - spi: Fix deadlock when adding SPI controllers on SPI buses (Mark Brown) [task:221921] {CVE-2021-47469}
  - KVM: x86/mmu: make apf token non-zero to fix bug (Liang Zhang) [task:351445] {CVE-2022-48943}
  - Revert "bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode" (yangfeng) [task:345763, task:351327]
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Jesse Zhang) [task:346955] {CVE-2024-42228}
  - RDMA/restrack: Fix potential invalid address access (Wenchao Hao) [task:345671] {CVE-2024-42080}
  - scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (John Garry) [task:346675] {CVE-2022-48792}
  - can: j1939: prevent deadlock by moving j1939_sk_errqueue() (Oleksij Rempel) [task:341503]
  - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new (Oleksij Rempel) [task:341503] {CVE-2023-52887}
  - can: j1939: extend UAPI to notify about RX status (Oleksij Rempel) [task:341503]
  - can: j1939: rename J1939_ERRQUEUE_* to J1939_ERRQUEUE_TX_* (Oleksij Rempel) [task:341503]
  - config: CONFIG_I2C_PHYTIUM_PLATFORM=m (zhouyuhang) [task:338015]
  - OPENEULER: i2c: add Phytium i2c driver (Jiakun Shuai) [task:338015]
  - Revert phytium i2c driver (zhouyuhang) [task:338015]
  - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger) [task:345299] {CVE-2024-39494}
  - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (Ferry Meng) [task:345115] {CVE-2024-41016}
  - ocfs2: add bounds checking to ocfs2_xattr_find_entry() (Ferry Meng) [task:345115] {CVE-2024-41016}
  - ftrace: Fix possible use-after-free issue in ftrace_location() (Zheng Yejian) [task:330288] {CVE-2024-38588}
  - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (Zheng Yejian) [task:330288]
  - smb: client: fix potential UAF in cifs_stats_proc_write() (Paulo Alcantara) [task:221999] {CVE-2024-35868}
  - smb: client: fix potential UAF in smb2_is_valid_oplock_break() (Paulo Alcantara) [task:221987] {CVE-2024-35865}
  - smb: client: fix potential UAF in is_valid_oplock_break() (Paulo Alcantara) [task:327836] {CVE-2024-35863}
  - scsi: pm8001: Fix use-after-free for aborted TMF sas_task (John Garry) [task:346413] {CVE-2022-48791}
  - scsi: pm80xx: Fix TMF task completion race condition (Igor Pylypiv) [task:346413] {CVE-2022-48791}
  - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD (Jose E. Marchesi) [task:345369] {CVE-2024-42161}
  - selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro (Andrii Nakryiko) [task:345369]
  - mmc: davinci: Don't strip remove function when driver is builtin (Uwe Kleine-König) [task:347147] {CVE-2024-39484}
  - mmc: davinci_mmc: Convert to platform remove callback returning void (Yangtao Li) [task:347147]
  - jffs2: Fix potential illegal address access in jffs2_free_inode (Wang Yong) [task:347055] {CVE-2024-42115}
  - media: dvb-frontends: tda10048: Fix integer overflow (Ricardo Ribalda) [task:347059] {CVE-2024-42223}
  - netrom: Fix a memory leak in nr_heartbeat_expiry() (Gavrilov Ilia) [task:347111] {CVE-2024-41006}
  - ext4: do not create EA inode under buffer lock (Jan Kara) [task:347085] {CVE-2024-40972}
  - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Jan Kara) [task:347085]
  - ext4: check the return value of ext4_xattr_inode_dec_ref() (Li Zhong) [task:347085]
  - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (Hagar Hemdan) [task:347093] {CVE-2024-42090}
  - usb: usbtmc: Fix bug in pipe direction for control transfers (Alan Stern) [task:347095] {CVE-2022-48834}
  - usb: usbtmc: Fix memory leak in usbtmc_ioctl_request (Guido Kiener) [task:347095]
  - usb: usbtmc: Add ioctl for generic requests on control (Guido Kiener) [task:347095]
  - xfs: add bounds checking to xlog_recover_process_data (lei lu) [task:347089] {CVE-2024-41014}
  - kdb: Fix buffer overflow during tab-complete (Daniel Thompson) [task:347091] {CVE-2024-39480}
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (Kuniyuki Iwashima) [task:347115] {CVE-2024-41041}
  - scsi: qedf: Fix refcount issue when LOGO is received during TMF (Saurav Kashyap) [task:347117] {CVE-2022-48823}
  - scsi: qedf: Modify flush routine to handle all I/Os and TMF (Shyam Sundar) [task:347117]
  - ocfs2: add bounds checking to ocfs2_check_dir_entry() (lei lu) [task:347123] {CVE-2024-41015}
  - nilfs2: fix inode number range checks (Ryusuke Konishi) [task:347125] {CVE-2024-42105}
  - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (Nikita Zhandarovich) [task:347131] {CVE-2024-41097}
  - ipv6: prevent possible NULL deref in fib6_nh_init() (Eric Dumazet) [task:347135] {CVE-2024-40961}
  - RDMA/mlx5: Add check for srq max_sge attribute (Patrisious Haddad) [task:347141] {CVE-2024-40990}
  - IB/core: Implement a limit on UMAD receive List (Michael Guralnik) [task:346963] {CVE-2024-42145}
  - mm: avoid overflows in dirty throttling logic (Jan Kara) [task:346909] {CVE-2024-42131}
  - libceph: fix race between delayed_work() and ceph_monc_stop() (Ilya Dryomov) [task:346915] {CVE-2024-42232}
  - bnx2x: Fix multiple UBSAN array-index-out-of-bounds (Ghadi Elie Rahme) [task:344619] {CVE-2024-42148}
  - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (Aleksandr Mishin) [task:345121] {CVE-2024-39506}
  - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep (Laurent Pinchart) [task:344571] {CVE-2024-42087}
  - sock_map: avoid race between sock_map_close and sk_psock_put (Thadeu Lima de Souza Cascardo) [task:344585] {CVE-2024-39500}
  - jfs: xattr: fix buffer overflow for invalid xattr (Greg Kroah-Hartman) [task:344449] {CVE-2024-40902}
  - orangefs: fix out-of-bounds fsid access (Mike Marshall) [task:345297] {CVE-2024-42143}
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (Jiangfeng Xiao) [task:345307] {CVE-2024-39488}
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (Dmitry Antipov) [task:345309] {CVE-2024-41072}
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (Eric Dumazet) [task:345313] {CVE-2024-40959}
  - ipv6: sr: fix memleak in seg6_hmac_init_algo (Hangbin Liu) [task:345315] {CVE-2024-39489}
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (Remi Pommarel) [task:345317] {CVE-2024-40912}
  - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() (Lee Jones) [task:345415] {CVE-2024-42236}
  - hfsplus: fix uninit-value in copy_name (Edward Adam Davis) [task:345669] {CVE-2024-41059}
  - iio: chemical: bme680: Fix overflows in compensate() functions (Vasileios Amoiridis) [task:345679] {CVE-2024-42086}
  - HID: core: remove unnecessary WARN_ON() in implement() (Nikita Zhandarovich) [task:345675] {CVE-2024-39509}
  - net: hns3: fix kernel crash problem in concurrent scenario (Yonglong Liu) [task:345677] {CVE-2024-39507}
  - drm/amdgpu: fix UBSAN warning in kv_dpm.c (Alex Deucher) [task:345695] {CVE-2024-40987}
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (Sam Sun) [task:345697] {CVE-2024-39487}
  - tcp_metrics: validate source addr length (Jakub Kicinski) [task:345703] {CVE-2024-42154}
  - net: can: j1939: Initialize unused data in j1939_send_one() (Shigeru Yoshida) [task:345711] {CVE-2024-42076}
  - net/iucv: Avoid explicit cpumask var allocation on stack (Dawei Li) [task:345717] {CVE-2024-42094}
  - jfs: don't walk off the end of ealist (lei lu) [task:345721] {CVE-2024-41017}
  - scsi: myrs: Fix crash in error case (Tong Zhang) [task:345733] {CVE-2022-48824}
  - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (Alan Stern) [task:345741] {CVE-2024-41035}
  - gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (Ian Ray) [task:345787] {CVE-2024-42253}
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (Ma Ke) [task:346897] {CVE-2024-41095}
  - nilfs2: add missing check for inode numbers on directory entries (Ryusuke Konishi) [task:345765] {CVE-2024-42104}
  - bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode (Martin KaFai Lau) [task:345763] {CVE-2024-42063}
  - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (Ma Ke) [task:345779] {CVE-2024-42101}
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (Raju Rangoju) [task:345789] {CVE-2024-40984}
  - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [task:345799] {CVE-2024-42124}
  - scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (Saurav Kashyap) [task:345799]
  - drm/radeon: fix UBSAN warning in kv_dpm.c (Alex Deucher) [task:345729] {CVE-2024-40988}
  - inet_diag: Initialize pad field in struct inet_diag_req_v2 (Shigeru Yoshida) [task:345321] {CVE-2024-42106}
  - ax25: Fix refcount imbalance on inbound connections (Lars Kellogg-Stedman) [task:346363] {CVE-2024-40910}
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Herbert Xu) [task:346361] {CVE-2024-39493}
  - ASoC: fsl-asoc-card: set priv->pdev before using it (Elinor Montmasson) [task:346375] {CVE-2024-42089}
  - ata: libata-core: Fix null pointer dereference on error (Niklas Cassel) [task:346377] {CVE-2024-41098}
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (Alan Stern) [task:346373] {CVE-2024-40904}
  - ocfs2: fix races between hole punching and AIO+DIO (Su Yue) [task:345287] {CVE-2024-40943}
  - s390/pkey: Wipe sensitive data on failure (Holger Dengler) [task:346395] {CVE-2024-42157}
  - ipv6: prevent possible NULL dereference in rt6_probe() (Eric Dumazet) [task:346387] {CVE-2024-40960}
  - drm/exynos/vidi: fix memory leak in .get_modes() (Jani Nikula) [task:346391] {CVE-2024-40932}
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (Emmanuel Grumbach) [task:346417] {CVE-2024-40941}
  - netpoll: Fix race condition in netpoll_owner_active (Breno Leitao) [task:346665] {CVE-2024-41005}
  - net: make sure napi_list is safe for RCU traversal (Jakub Kicinski) [task:346665]
  - ata: libata-core: Fix double free on error (Niklas Cassel) [task:346673] {CVE-2024-41087}
  - net: ethernet: lantiq_etop: fix double free in detach (Aleksander Jan Bajkowski) [task:346393] {CVE-2024-41046}
  - net: lantiq_etop: add blank line after declaration (Aleksander Jan Bajkowski) [task:346393]
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (Ma Ke) [task:346905] {CVE-2024-41089}
  - i2c: lpi2c: Avoid calling clk_get_rate during transfer (Alexander Stein) [task:346895] {CVE-2024-40965}
  - i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work (Carlos Song) [task:346895]
  - i2c: imx-lpi2c: use bulk clk API (Peng Fan) [task:346895]
  - tipc: fix kernel panic when enabling bearer (Tung Nguyen) [task:346901] {CVE-2022-48865}
  - tipc: fix NULL pointer dereference in tipc_disc_rcv() (Tuong Lien) [task:346901]
  - tipc: add reference counter to bearer (Tuong Lien) [task:346901]
  - batman-adv: bypass empty buckets in batadv_purge_orig_ref() (Eric Dumazet) [task:346925] {CVE-2024-40981}
  - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr (Piotr Wojtaszczyk) [task:346937] {CVE-2024-42153}
  - fbdev: savage: Handle err return when savagefb_check_var failed (Cai Xinchen) [task:346943] {CVE-2024-39475}
  - eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX (Jonas Malaco) [task:346951] {CVE-2022-48806}
  - eeprom: ee1004: Remove not needed debug message (Heiner Kallweit) [task:346951]
  - eeprom: New ee1004 driver for DDR4 memory (Jean Delvare) [task:346951]
  - drm/vc4: Fix deadlock on DSI device attach error (Padmanabha Srinivasaiah) [task:346939] {CVE-2022-48826}
  - drm/vc4: dsi: Only register our component once a DSI device is attached (Maxime Ripard) [task:346939]
  - net: do not leave a dangling sk pointer, when socket creation fails (Ignat Korchagin) [task:346957] {CVE-2024-40954}
  - drm/amd/display: Skip finding free audio for unknown engine_id (Alex Hung) [task:346961] {CVE-2024-42119}
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Jan Kara) [task:346949] {CVE-2024-42102}
  - net: dsa: mv88e6xxx: Correct check for empty list (Simon Horman) [task:346967] {CVE-2024-42224}
  - ocfs2: fix DIO failure due to insufficient transaction credits (Jan Kara) [task:346985] {CVE-2024-42077}
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Sagi Grimberg) [task:346989] {CVE-2024-42152}
  - nvmet: update AEN list and array at one place (Daniel Wagner) [task:346989]
  - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects (Nicolas Escande) [task:346993] {CVE-2024-40942}
  - ftruncate: pass a signed offset (Arnd Bergmann) [task:346997] {CVE-2024-42084}
  - vmci: prevent speculation leaks by sanitizing event in event_deliver() (Hagar Gamal Halim Hemdan) [task:347011] {CVE-2024-39499}
  - ppp: reject claimed-as-LCP but actually malformed packets (Dmitry Antipov) [task:347013] {CVE-2024-41044}
  - s390/sclp: Fix sclp_init() cleanup on failure (Heiko Carstens) [task:347023] {CVE-2024-41068}
  - scsi: qedi: Fix crash while reading debugfs attribute (Manish Rangankar) [task:347025] {CVE-2024-40978}
  - mISDN: Fix memory leak in dsp_pipeline_build() (Alexey Khoroshilov) [task:347035] {CVE-2022-48863}
  - mISDN: Remove obsolete PIPELINE_DEBUG debugging information (Zhen Lei) [task:347035]
  - ALSA: emux: improve patch ioctl data validation (Oswald Buddenhagen) [task:347041] {CVE-2024-42097}
  - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors (Ryusuke Konishi) [task:347027] {CVE-2024-39469}
  - nilfs2: return the mapped address from nilfs_get_page() (Matthew Wilcox (Oracle)) [task:347027]
  - nilfs2: Remove check for PageError (Matthew Wilcox (Oracle)) [task:347027]
  - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Tasos Sahanidis) [task:330552]
  - USB: core: Make do_proc_control() and do_proc_bulk() killable (Alan Stern) [task:330552] {CVE-2021-47582}
  - net: relax socket state check at accept time. (Paolo Abeni) [task:341253] {CVE-2024-36484}
  - jfs: Fix array-index-out-of-bounds in diFree (Jeongjun Park)
  - nfsd: Fix races between nfsd4_cb_release() and nfsd4_shutdown_callback() (Trond Myklebust) [task:334950]
  - nfsd: minor 4.1 callback cleanup (Trond Myklebust) [task:334950]
  - drm/vc4: hdmi: Unregister codec device on unbind (Maxime Ripard) [task:344615] {CVE-2022-48852}
  - Bluetooth: Fix slab-out-of-bounds Read in hci_le_ext_adv_report_evt (luoxuanqiang) [task:218812]
  - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Ding Hui) [task:337725] {CVE-2023-52885}
  - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [task:222101] {CVE-2023-52752}
  - crypto: af_alg - get rid of alg_memory_allocated (Eric Dumazet) [task:341427] {CVE-2022-48781}
  - tun: add missing verification for short frame (Dongli Zhang) [task:339091] {CVE-2024-41091, CVE-2024-41091}
  - PCI: pciehp: Reduce noisiness on hot removal (Lukas Wunner) [bug:243223]
  - mm/init: Add quirk for phytium S5000C SoC (Li Qiang) [task:336451]
  - Revert "config: enable CONFIG_RCU_CPU_STALL_CPUTIME and CONFIG_IRQ_TIME_ACCOUNTING" (zhanggenjian) [task:338551]
  - epoll: be better about file lifetimes (Linus Torvalds) [task:330566] {CVE-2024-38580}
  - i2c: acpi: Unbind mux adapters before delete (Hamish Martin) [task:332220] {CVE-2024-39362}
  - i2c: add fwnode APIs (Russell King (Oracle)) [task:332220]
  - powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 (Naveen N. Rao) [task:330290] {CVE-2022-48755}
  - powerpc/ppc-opcode: Fold PPC_INST_* macros into PPC_RAW_* macros (Balamuruhan S) [task:330290]
  - powerpc: sstep: Add tests for addc[.] instruction (Sandipan Das) [task:330290]
  - powerpc: sstep: Add tests for add[.] instruction (Sandipan Das) [task:330290]
  - powerpc: sstep: Add tests for compute type instructions (Sandipan Das) [task:330290]
  - powerpc: sstep: Add support for maddhd, maddhdu, maddld instructions (Sandipan Das) [task:330290]
  - powerpc/ppc-opcode: Consolidate powerpc instructions from bpf_jit.h (Balamuruhan S) [task:330290]
  - powerpc/ppc-opcode: Introduce PPC_RAW_* macros for base instruction encoding (Balamuruhan S) [task:330290]
  - powerpc/signal: Use code patching instead of hardcoding (Christophe Leroy) [task:330290]
  - powerpc/pmem: Add new instructions for persistent storage and sync (Aneesh Kumar K.V) [task:330290]
  - powerpc/64s: Move branch cache flushing bcctr variant to ppc-ops.h (Nicholas Piggin) [task:330290]
  - powerpc/bpf_jit: Reuse instruction macros from ppc-opcode.h (Balamuruhan S) [task:330290]
  - powerpc/bpf: remove unnecessary code-patching (Riwen Lu) [task:330290]
  - ppc: bpf: implement jitting of JMP32 (Jiong Wang) [task:330290]
  - ppc: bpf: implement jitting of BPF_ALU | BPF_ARSH | BPF_* (Jiong Wang) [task:330290]
  - powerpc: bpf: eliminate zero extension code-gen (Jiong Wang) [task:330290]
  - net_sched: walk through all child classes in tc_bind_tclass() (Cong Wang) [task:218825]
  - bpf, sockmap: Fix double bpf_prog_put on error case in map_link (John Fastabend) [task:218786]
  - bpf, sockmap: Attach map progs to psock early for feature probes (John Fastabend) [task:218786]
  - EULER: scheduler: Disable cluster scheduling by default (Yicong Yang) [task:333597]
  - EULER: scheduler: Add boot time enabling/disabling of cluster scheduling (Tim Chen) [task:333597]
  - EULER: scheduler: Add runtime knob sysctl_sched_cluster (Tim Chen) [task:333597]
  - EULER: scheduler: Create SDTL_SKIP flag to skip topology level (Tim Chen) [task:333597]
  - btrfs: fix race between quota rescan and disable leading to NULL pointer deref (Filipe Manana) [task:330358] {CVE-2022-48734}
  - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (Nikolay Borisov) [task:330358] {CVE-2022-48734}
  - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup (Sidong Yang) [task:330358] {CVE-2022-48734}
  - RDMA/hns: Fix UAF for cq async event (Chengchang Tang) [task:330520] {CVE-2024-38545}
  - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" (Finn Thain) [task:330496] {CVE-2024-38607}
  - ALSA: Fix deadlocks with kctl removals at disconnection (Takashi Iwai) [task:330474] {CVE-2024-38600}
  - btrfs: fix deadlock between quota disable and qgroup rescan worker (Shin'ichiro Kawasaki) [task:330358] {CVE-2022-48734}
  - btrfs: fix lockdep splat when enabling and disabling qgroups (Filipe Manana) [task:330358] {CVE-2022-48734}
  - btrfs: move ulist allocation out of transaction in quota enable (David Sterba) [task:330358] {CVE-2022-48734}
  - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Niklas Neronin) [task:223058] {CVE-2023-52781}
  - netfilter: tproxy: bail out if IP has been disabled on the device (Florian Westphal) [task:330558] {CVE-2024-36270}
  - netfilter: use in_dev_for_each_ifa_rcu (Florian Westphal) [task:330558]
  - net: inetdevice: provide replacement iterators for in_ifaddr walk (Florian Westphal) [task:330558]
  - net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov) [task:330544] {CVE-2024-38538}
  - net: add pskb_may_pull_reason() helper (Eric Dumazet) [task:330544]
  - net: core: change return type of pskb_may_pull to bool (Heiner Kallweit) [task:330544]
  - media: i2c: et8ek8: Don't strip remove function when driver is builtin (Uwe Kleine-König) [task:330538] {CVE-2024-38611}
  - ax25: Fix reference count leak issue of net_device (Duoming Zhou) [task:330518] {CVE-2024-38554}
  - RDMA/hns: Fix deadlock on SRQ async events. (Chengchang Tang) [task:330482] {CVE-2024-38591}
  - perf report: Fix memory leaks around perf_tip() (Ian Rogers) [task:225610] {CVE-2021-47543}
  - net: fec: remove .ndo_poll_controller to avoid deadlocks (Wei Fang) [task:330300]
  - wifi: cfg80211: check A-MSDU format more carefully (Johannes Berg) [task:223115] {CVE-2024-35937}
  - vfio/pci: fix potential memory leak in vfio_intx_enable() (Ye Bin) [task:330570] {CVE-2024-38632}
  - ax25: Fix reference count leak issues of ax25_dev (Duoming Zhou) [task:330575] {CVE-2024-38602}
  - ax25: merge repeat codes in ax25_dev_device_down() (Lu Wei) [task:330575] {CVE-2024-38602}
  - eth: sungem: remove .ndo_poll_controller to avoid deadlocks (Jakub Kicinski) [task:330488] {CVE-2024-38597}
  - ptp: fix code indentation issues (Carlos Llamas) [task:222085]
  - ptp: Fix possible memory leak in ptp_clock_register() (Yang Yingliang) [task:222085] {CVE-2021-47455}
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (Kuniyuki Iwashima) [task:330565] {CVE-2024-37356}
  - params: lift param_set_uint_minmax to common code (Sagi Grimberg) [task:330565]
  - ubifs: Fix races between xattr_{set|get} and listxattr operations (Zhihao Cheng) [task:223056] {CVE-2021-47351}
  - ring-buffer: Fix a race between readers and resize checks (Petr Pavlu) [task:330286] {CVE-2024-38601}
  - scsi: bfa: Ensure the copied buf is NUL terminated (Bui Quang Minh) [task:330280] {CVE-2024-38560}
  - kunit: Fix kthread reference (Mickaël Salaün) [task:330287] {CVE-2024-38561}
  - ACPI: CPPC: Fix access width used for PCC registers (Vanshidhar Konda) [task:223069]
  - ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro (Jarred White) [task:223069]
  - ACPI: CPPC: Use access_width over bit_width for system memory accesses (Jarred White) [task:223069] {CVE-2024-35995}
  - ACPI: CPPC: Drop redundant local variable from cpc_read() (Rafael J. Wysocki) [task:223069]
  - ACPI: CPPC: fix some coding style issues (Xiaofei Tan) [task:223069]
  - ACPI: CPPC: Fix up I/O port access in cpc_read() (Rafael J. Wysocki) [task:223069]
  - ACPI: CPPC: Implement support for SystemIO registers (Steven Noonan) [task:223069]
  - ACPI: CPPC: initialise vaddr pointers to NULL (Ionela Voinescu) [task:223069]
  - drm: vc4: Fix possible null pointer dereference (Aleksandr Mishin) [task:330526] {CVE-2024-38546}
  - mmc: sdhci-msm: pervent access to suspended controller (Mantas Pucka) [task:224217] {CVE-2024-36029}
  - mmc: sdhci-msm: add Inline Crypto Engine support (Eric Biggers) [task:224217]
  - mmc: sdhci-msm: Mark sdhci_msm_cqe_disable static (Stephen Boyd) [task:224217]
  - mmc: sdhci-msm: Add CQHCI support for sdhci-msm (Ritesh Harjani) [task:224217]
  - mmc: sdhci-msm: Use OPP API to set clk/perf state (Rajendra Nayak) [task:224217]
  - mmc: sdhci-msm: Re-initialize DLL if MCLK is gated dynamically (Veerabhadrarao Badiganti) [task:224217]
  - nilfs2: fix use-after-free of timer for log writer thread (Ryusuke Konishi) [task:330506] {CVE-2024-38583}
  - KVM: LAPIC: Also cancel preemption timer during SET_LAPIC (Wanpeng Li) [task:330470] {CVE-2022-48765}
  - KVM: LAPIC: Write 0 to TMICT should also cancel vmx-preemption timer (Wanpeng Li) [task:330470]
  - KVM: LAPIC: Advancing the timer expiration on guest initiated write (Wanpeng Li) [task:330470]
  - KVM: LAPIC: Also cancel preemption timer when disarm LAPIC timer (Wanpeng Li) [task:330470]
  - ecryptfs: Fix buffer size for tag 66 packet (Brian Kubisiak) [task:330504] {CVE-2024-38578}
  - netrom: fix possible dead-lock in nr_rt_ioctl() (Eric Dumazet) [task:330492] {CVE-2024-38589}
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (Ilya Maximets) [task:330359] {CVE-2024-38558}
  - bpf: Use VM_MAP instead of VM_ALLOC for ringbuf (Hou Tao) [task:330480] {CVE-2022-48714}
  - m68k: Fix spinlock race in kernel thread creation (Michael Schmitz) [task:330486] {CVE-2024-38613}
  - find-patch: fix tag missing '.' with stable branch (Jackie Liu)
  - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc (Chengfeng Ye) [task:216643] {CVE-2021-47211}
  - LoongArch: PPTT: Supports SMT when physical cores are discontinuous. (Xiangdong Meng) [task:331741]
  - KABI: resolve KABI conflict caused by pswiotlb patch (liyouhong) [task:201557]
  - arm64/config: Enable CONFIG_PSWIOTLB=y (liyouhong) [task:201557]
  - PHYTIUM: pswiotlb: Basic functions of OS are not affected by devices which are incompatible with pswiotlb (Cui Chao) [task:201557]
  - PHYTIUM: pswiotlb: Add blacklist which are incompatible with pswiotlb temporarily (Cui Chao) [task:201557]
  - PHYTIUM: pswiotlb: Fix abnormal expansion when PAGE_SIZE is 64KB (Cui Chao) [task:201557]
  - PHYTIUM: pswiotlb: Disable PSWIOTLB by default (liyouhong) [task:201557]
  - PHYTIUM: pswiotlb: Adapt for iommu-translated mode (Cui Chao) [task:201557]
  - PHYTIUM: pswiotlb: Adapt for iommu-passthrough mode (Cui Chao) [task:201557]
  - PHYTIUM: pswiotlb: Distribute the traffic to PSWIOTLB or not (Cui Chao) [task:201557]
  - PHYTIUM: pswiotlb: Add PSWIOTLB mechanism to improve DMA performance (Cui Chao) [task:201557]
  - jdb2: Don't refuse invalidation of already invalidated buffers (Jan Kara) [task:226534]
  - tcp/dccp: Improve the method of allocating local ports in connect() (xiaolinkui) [task:336487]
  - fanotify: Avoid softlockups when reading many events (Jan Kara) [task:340889]
  - xfs: fix inode allocation block res calculation precedence (Brian Foster) [task:334329]
  - nilfs2: fix potential kernel bug due to lack of writeback flag waiting (Ryusuke Konishi) [task:332240] {CVE-2024-37078}
  - tipc: fix kernel warning when sending SYN message (Tung Nguyen) [task:225562] {CVE-2023-52700}
  - tipc: fix implicit-connect for SYN+ (Xin Long) [task:225562]
  - ipvlan: add ipvlan_route_v6_outbound() helper (Eric Dumazet) [task:223092] {CVE-2023-52796}
  - ipvlan: properly track tx_errors (Eric Dumazet) [task:223092]
  - net: add DEV_STATS_READ() helper (Eric Dumazet) [task:223092]
  - macsec: use DEV_STATS_INC() (Eric Dumazet) [task:223092]
  - macsec: Fix traffic counters/statistics (Clayton Yager) [task:223092]
  - net: fix kabi broken in struct net_device_stats (taowei) [task:204908]
  - net: add atomic_long_t to net_device_stats fields (Eric Dumazet) [task:204908]
  - irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses (Barry Song) [task:336421]
  - net: Fix race for duplicate reqsk on identical SYN (luoxuanqiang) [task:220628]
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Yue Haibing) [task:330556] {CVE-2024-33621}
  - wifi: iwlwifi: read txq->read_ptr under lock (Johannes Berg) [task:224209] {CVE-2024-36922}
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (Bob Pearson) [task:330478] {CVE-2024-38544}
  - tcp: fix page frag corruption on page fault (Paolo Abeni) [task:225588] {CVE-2021-47544}
  - s390/ap: Fix crash in AP internal function modify_bitmap() (Harald Freudenberger) [task:332252] {CVE-2024-38661}
  - media: lgdt3306a: Add a check against null-pointer-def (Zheyu Ma) [task:332251] {CVE-2022-48772}
  - media: dvb-frontends: Use kmemdup instead of duplicating its function (zhong jiang) [task:332251]
  - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Baokun Li) [task:332253] {CVE-2024-39276}
  - Input: cyapa - add missing input core locking to suspend/resume functions (Marek Szyprowski) [task:332207] {CVE-2023-52884}
  - net/9p: fix uninit-value in p9_client_rpc() (Nikita Zhandarovich) [task:332238] {CVE-2024-39301}
  - of: module: add buffer overflow check in of_modalias() (Sergey Shtylyov) [task:330476] {CVE-2024-38541}
  - selinux: fix double free of cond_list on error paths (Vratislav Bendel) [task:330355] {CVE-2022-48740}
  - selinux: fix a double free in cond_read_node()/cond_read_list() (Tom Rix) [task:330355]
  - selinux: fix error return code in cond_read_list() (Wei Yongjun) [task:330355]
  - selinux: convert cond_expr to array (Ondrej Mosnacek) [task:330355]
  - selinux: convert cond_av_list to array (Ondrej Mosnacek) [task:330355]
  - selinux: convert cond_list to array (Ondrej Mosnacek) [task:330355]
  - selinux: simplify evaluate_cond_node() (Ondrej Mosnacek) [task:330355]
  - mlxsw: core_thermal: Fix fan speed in maximum cooling state (Ido Schimmel) [task:223114]
  - mlxsw: thermal: Fix out-of-bounds memory accesses (Ido Schimmel) [task:223114] {CVE-2021-47441}
  - mlxsw: core: Extend cooling device with cooling levels (Vadim Pasternak) [task:223114]
  - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [task:223105] {CVE-2021-47307}
  - usb-storage: alauda: Check whether the media is initialized (Shichao Lai) [task:330542] {CVE-2024-38619}
  - drm/mediatek: Add 0 size check to mtk_drm_gem_obj (Justin Green) [task:330472] {CVE-2024-38549}
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Jiri Pirko) [task:330562] {CVE-2024-37353}
  - ipv6: sr: fix invalid unregister error path (Hangbin Liu) [task:330500] {CVE-2024-38612}
  - wifi: carl9170: add a proper sanity check for endpoints (Nikita Zhandarovich) [task:330490] {CVE-2024-38567}
  - usb: xhci-plat: fix crash when suspend if remote wake enable (Frank Li) [task:330356] {CVE-2022-48761}
  - usb: host: xhci-plat: add .suspend_quirk for struct xhci_plat_priv (Peter Chen) [task:330356]
  - RDMA/hns: Modify the print level of CQE error (Chengchang Tang) [task:330357] {CVE-2024-38590}
  - usb: cdc-wdm: close race between read and workqueue (Oliver Neukum) [task:327804] {CVE-2024-35812}
  - of: module: prevent NULL pointer dereference in vsnprintf() (Sergey Shtylyov) [task:327802] {CVE-2024-35878}
  - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (Dongli Zhang) [task:330555] {CVE-2024-31076}
  - inet_diag: fix kernel-infoleak for UDP sockets (Eric Dumazet) [task:330553] {CVE-2021-47597}
  - inet_diag: use jiffies_delta_to_msecs() (Eric Dumazet) [task:330553]
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Eric Dumazet) [task:330559] {CVE-2024-36286}
  - media: stk1160: fix bounds checking in stk1160_copy_video() (Dan Carpenter) [task:330567] {CVE-2024-38621}
  - serial: max3100: Update uart_driver_registered on driver removal (Andy Shevchenko) [task:330568] {CVE-2024-38633}
  - greybus: lights: check return of get_channel_from_mode (Rui Miguel Silva) [task:330569] {CVE-2024-38637}
  - nilfs2: fix potential hang in nilfs_detach_log_writer() (Ryusuke Konishi) [task:330571] {CVE-2024-38582}
  - nilfs2: fix unexpected freezing of nilfs_segctor_sync() (Ryusuke Konishi) [task:330571]
  - watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger (Duoming Zhou) [task:330572] {CVE-2024-38630}
  - serial: max3100: Lock port->lock when calling uart_handle_cts_change() (Andy Shevchenko) [task:330573] {CVE-2024-38634}
  - dma-buf/sw-sync: don't enable IRQ from sync_print_obj() (Tetsuo Handa) [task:330574] {CVE-2024-38780}
  - stm class: Fix a double free in stm_register_device() (Dan Carpenter) [task:330576] {CVE-2024-38627}
  - enic: Validate length of nl attributes in enic_set_vf_port (Roded Zats) [task:330578] {CVE-2024-38659}
  - scsi: qedf: Ensure the copied buf is NUL terminated (Bui Quang Minh) [task:330528] {CVE-2024-38559}
  - drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group (Junhao He) [task:330522] {CVE-2024-38569}
  - speakup: Fix sizeof() vs ARRAY_SIZE() bug (Dan Carpenter) [task:330524] {CVE-2024-38587}
  - crypto: bcm - Fix pointer arithmetic (Aleksandr Mishin) [task:330302] {CVE-2024-38579}
  - jffs2: prevent xattr node from overflowing the eraseblock (Ilya Denisyev) [task:330534] {CVE-2024-38599}
  - ALSA: timer: Set lower bound of start tick time (Takashi Iwai) [task:330536] {CVE-2024-38618}
  - wifi: ar5523: enable proper endpoint verification (Nikita Zhandarovich) [task:330532] {CVE-2024-38565}
  - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Breno Leitao) [task:330510] {CVE-2024-38596}
  - net/mlx5: Discard command completions in internal error (Akiva Goldberger) [task:330514] {CVE-2024-38555}
  - drm/amd/display: Fix potential index out of bounds in color transformation function (Srinivasan Shanmugam) [task:330516] {CVE-2024-38552}
  - PM / devfreq: Fix buffer overflow in trans_stat_show (Christian Marangi) [task:207389] {CVE-2023-52614}
  - btrfs: don't drop extent_map for free space inode on write error (Josef Bacik) [task:210433] {CVE-2024-26726}
  - fs/9p: fix uninitialized values during inode evict (Eric Van Hensbergen) [task:224205] {CVE-2024-36923}
  - x86/signal: Detect and prevent an alternate signal stack overflow (Chang S. Bae) [task:223059] {CVE-2021-47326}
  - SUNRPC: fix a memleak in gss_import_v2_context (Zhipeng Lu) [task:217597] {CVE-2023-52653}
  - net/smc: fix compile error in smc_vlan_by_tcpsk function (weirongguang) [task:329030]
  - drm/ast: Fix soft lockup (Jammy Huang) [task:221869] {CVE-2024-35952}
  - drm_lease.c: copy user-array safely (Philipp Stanner) [task:223074] {CVE-2023-52820}
  - drm/panel: fix a possible null pointer dereference (Ma Ke) [task:222109] {CVE-2023-52821}
  - drm/amdgpu: fix gart.bo pin_count leak (Leslie Shi) [task:222035] {CVE-2021-47431}
  - lib/generic-radix-tree.c: Don't overflow in peek() (Kent Overstreet) [task:221979] {CVE-2021-47432}
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Thadeu Lima de Souza Cascardo) [task:225616] {CVE-2023-52880}
  - phonet/pep: fix racy skb_queue_empty() use (Rémi Denis-Courmont) [task:220864] {CVE-2024-27402}
  - kprobes: Fix possible use-after-free issue on kprobe registration (Zheng Yejian) [task:223065] {CVE-2024-35955}
  - i2c: smbus: fix NULL function pointer dereference (Wolfram Sang) [task:223077] {CVE-2024-35984}
  - i2c: core: remove level of indentation in i2c_transfer (Wolfram Sang) [task:223077]
  - i2c: core: remove outdated DEBUG output (Wolfram Sang) [task:223077]
  - usb: gadget: f_fs: change ep->status safe in ffs_epfile_io() (Linyu Yuan) [task:225394]
  - drm/sched: Avoid data corruptions (Andrey Grodzovsky) [task:223136] {CVE-2021-47354}
  - cpu/hotplug: Don't offline the last non-isolated CPU (Ran Xiaokai) [task:223118] {CVE-2023-52831}
  - cpu/hotplug: Prevent self deadlock on CPU hot-unplug (Thomas Gleixner) [task:223118] {CVE-2023-52831}
  - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Borislav Petkov (AMD)) [task:223094] {CVE-2024-35876}
  - iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() (Zhang Shurong) [task:223123] {CVE-2023-52802}
  - staging: rtl8712: fix use-after-free in rtl8712_dl_fw (Pavel Skripkin) [task:222111] {CVE-2021-47479}
  - RDMA: Verify port when creating flow rule (Maor Gottlieb) [task:223096] {CVE-2021-47265}
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Kuniyuki Iwashima) [task:328482] {CVE-2024-36933}
  - phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet) [task:328460] {CVE-2024-36946}
  - tpm: tpm_tis_core: distinguish the dmesg between TCM2.0 and TPM2.0 (wudandan) [task:223563]
  - net: sched: sch: Bounds check priority (Kees Cook) [task:222057] {CVE-2023-52734}
  - htb: use anonymous union for simplicity (Cong Wang) [task:222057]
  - media: imon: fix access to invalid resource for the second interface (Takashi Iwai) [task:222087] {CVE-2023-52754}
  - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Justin Tee) [task:328476] {CVE-2024-36952}
  - block: fix overflow in blk_ioctl_discard() (Li Nan) [task:328466] {CVE-2024-36917}
  - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (Zeng Heng) [task:328464] {CVE-2024-36959}
  - bna: ensure the copied buf is NUL terminated (Bui Quang Minh) [task:328454] {CVE-2024-36934}
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman) [task:328462] {CVE-2024-36950}
  - fs/9p: only translate RWX permissions for plain 9P2000 (Joakim Sindholt) [task:328470] {CVE-2024-36964}
  - drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin) [task:328443] {CVE-2024-36960}
  - net/mlx5: Free IRQ rmap and notifier on kernel shutdown (Saeed Mahameed) [task:222795]
  - net/mlx5: Free irqs only on shutdown callback (Shay Drory) [task:222795]
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Eric Dumazet) [task:224189] {CVE-2024-36905}
  - tcp: remove redundant check on tskb (Colin Ian King) [task:224189]
  - .gitignore: Add compilation database file (Toru Komatsu)
  - net/tls: Fix flipped sign in tls_err_abort() calls (Daniel Jordan) [task:223103] {CVE-2021-47496}
  - of: unittest: Fix compile in the non-dynamic case (Christian A. Ehrhardt) [task:220891]
  - of: unittest: Fix of_count_phandle_with_args() expected value message (Geert Uytterhoeven) [task:220891]
  - of: Fix double free in of_parse_phandle_with_args_map (Christian A. Ehrhardt) [task:220891] {CVE-2023-52679}
  - of: unittest: fix EXPECT text for gpio hog errors (Frank Rowand) [task:220891]
  - of: gpio unittest kfree() wrong object (Frank Rowand) [task:220891]
  - of: unittest: make gpio overlay test dependent on CONFIG_OF_GPIO (Frank Rowand) [task:220891]
  - of: unittest: add overlay gpio test to catch gpio hog problem (Frank Rowand) [task:220891]
  - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (Eric Dumazet) [task:223050] {CVE-2024-35976}
  - net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() (Karsten Graul) [task:225614] {CVE-2021-47559}
  - powerpc/mm: Fix lockup on kernel exec fault (Christophe Leroy) [task:222047] {CVE-2021-47350}
  - soc: qcom: llcc: Handle a second device without data corruption (Uwe Kleine-König) [task:222019] {CVE-2023-52871}
  - i2c: dev: copy userspace array safely (Philipp Stanner) [task:223063] {CVE-2023-52758}
  - string.h: add array-wrappers for (v)memdup_user() (Philipp Stanner) [task:223063] {CVE-2023-52758}
  - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Nam Cao) [task:221811] {CVE-2024-35997}
  - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (felix) [task:221821] {CVE-2023-52803}
  - f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances (Chao Yu) [task:221841] {CVE-2021-47335}
  - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Hans Verkuil) [task:227331] {CVE-2024-23848}
  - tpm: tpm_tis: Adapt spi tcm2 card ZIC0603 to x86 (wudandan) [task:220240]
  - rpmbuild: install pem and x509 to kernel-devel (Jiangshan Yi) [task:225263]
  - erofs: fix pcluster use-after-free on UP platforms (Gao Xiang) [task:217577] {CVE-2022-48674}
  - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error (Norihiko Hama) [task:217593] {CVE-2024-26996}
  - bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue (Jason Xing) [task:224201] {CVE-2024-36938}
  - netfilter: nft_compat: remove flush counter optimization (Florian Westphal) [task:221983]
  - netfilter: complete validation of user input (Eric Dumazet) [task:221923]
  - netfilter: nf_tables: flush pending destroy work before exit_net release (Pablo Neira Ayuso) [task:221983] {CVE-2024-35899}
  - netfilter: nft_compat: make sure xtables destructors have run (Florian Westphal) [task:221983]
  - ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup (Feng Zhou) [task:221949] {CVE-2021-47399}
  - netfilter: validate user input for expected length (Eric Dumazet) [task:221923] {CVE-2024-35896}
  - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() (Valentine Fatiev) [task:223066]
  - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path (Valentine Fatiev) [task:223066] {CVE-2021-47438}
  - net: atlantic: eliminate double free in error handling logic (Igor Russkikh) [task:220884] {CVE-2023-52664}
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Fedor Pchelkin) [task:217545] {CVE-2024-26961}
  - NTB: fix possible name leak in ntb_register_device() (Yang Yingliang) [task:217598] {CVE-2023-52652}
  - soc: fsl: qbman: Use raw spinlock for cgr_lock (Sean Anderson) [task:223104] {CVE-2024-35819}
  - soc: fsl: qbman: Add helper for sanity checking cgr ops (Sean Anderson) [task:223104]
  - soc: fsl: qbman: Add CGR update function (Sean Anderson) [task:223104]
  - KVM: x86: Handle SRCU initialization failure during page track init (Haimin Zhang) [task:221891] {CVE-2021-47407}
  - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Oliver Upton) [task:224206] {CVE-2024-36953}
  - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Marc Zyngier) [task:224206]
  - ipv4: Fix uninit-value access in __ip_make_skb() (Shigeru Yoshida) [task:224214] {CVE-2024-36927}
  - can: j1939: fix Use-after-Free, hold skb ref while in use (Oleksij Rempel) [task:225604] {CVE-2021-47232}
  - can: j1939: transport: add j1939_session_skb_find_by_offset() function (Oleksij Rempel) [task:225604]
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Duoming Zhou) [task:225600] {CVE-2024-27398}
  - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc (Norbert Zulinski) [task:225576] {CVE-2021-47501}
  - i40e: Fix sparse error: uninitialized symbol 'ring' (Arkadiusz Kubalewski) [task:225576]
  - i40e: introduce new dump desc XDP command (Ciara Loftus) [task:225576]
  - tcp: do not accept ACK of bytes we never sent (Eric Dumazet) [task:225596] {CVE-2023-52881}
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Duoming Zhou) [task:225580] {CVE-2024-27399}
  - net/mlx5e: Fix page reclaim for dead peer hairpin (Dima Chumak) [task:225574] {CVE-2021-47246}
  - clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (Jernej Skrabec) [task:225550] {CVE-2023-52882}
  - drm/arm/malidp: fix a possible null pointer dereference (Huai-Yuan Liu) [task:225554] {CVE-2024-36014}
  - ppdev: Add an error check in register_device (Huai-Yuan Liu) [task:225556] {CVE-2024-36015}
  - ppdev: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET) [task:225556]
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Roded Zats) [task:225558] {CVE-2024-36017}
  - firewire: nosy: ensure user_length is taken into account when fetching packet contents (Thanassis Avgerinos) [task:225560] {CVE-2024-27401}
  - mmc: mmc_spi: fix error handling in mmc_spi_probe() (Yang Yingliang) [task:225564] {CVE-2023-52708}
  - mmc: mmc_spi: Indentation fixes (Andy Shevchenko) [task:225564]
  - mmc: spi: Convert to use GPIO descriptors (Linus Walleij) [task:225564]
  - phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init() (Tiezhu Yang) [task:225568] {CVE-2021-47234}
  - perf/core: Fix potential NULL deref (Peter Zijlstra) [task:213183]
  - drm/client: Fully protect modes[] with dev->mode_config.mutex (Ville Syrjälä) [task:221977] {CVE-2024-35950}
  - s390/dasd: fix double module refcount decrement (Miroslav Franc) [task:217574] {CVE-2024-27054}
  - mm/filemap: avoid buffered read/write race to read inconsistent data (Baokun Li) [task:225198]
  - blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling (zhengbin) [task:225157]
  - i40e: fix vf may be used uninitialized in this function warning (Aleksandr Loktionov) [task:224190] {CVE-2024-36020}
  - nfs: Handle error of rpc_proc_register() in nfs_net_init(). (Kuniyuki Iwashima) [task:224227] {CVE-2024-36939}


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.17.v2401
changelog:
  - HYGON: mm: Fix kabi breakage of pv_ops (hanliyang) [task:332685]
  - drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable() (Abhinav Kumar) [task:363787] {CVE-2024-45015}
  - drm/msm/dpu: remove RM dependency on connector state (Jeykumar Sankaran) [task:363787]
  - net/ncsi: Disable the ncsi work before freeing the associated structure (Eddie James) [task:376379] {CVE-2024-49945}
  - aoe: fix the potential use-after-free problem in more places (Chun-Yi Lee) [task:376351] {CVE-2024-49982}
  - security/kysec: permit task killed by parent (penghuaihe) [bug:272883]
  - OPENEULER: kvm: arm64: make ID registers configurable (Peng Liang) [task:352563]
  - OPENEULER: kvm: arm64: emulate the ID registers (Peng Liang) [task:352563]
  - OPENEULER: arm64: add a helper function to traverse arm64_ftr_regs (Peng Liang) [task:352563]
  - Revert "virt/kvm:phytium kunpeng kvm migration" (Hao Ge) [task:352563]
  - net: ethernet: lantiq_etop: fix memory disclosure (Aleksander Jan Bajkowski) [task:376181] {CVE-2024-49997}
  - usb: hub: avoid warm port reset during USB3 disconnect (dengjie03) [bug:251189]
  - skmsg: Skip zero length skb in sk_msg_recvmsg (Geliang Tang) [task:346383] {CVE-2024-41048}
  - bpf, sockmap: Fix partial copy_page_to_iter so progress can still be made (John Fastabend) [task:352421]
  - sysctl: always initialize i_uid/i_gid (Thomas Weißschuh) [task:352223] {CVE-2024-42312}
  - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Scott Mayhew) [task:363951] {CVE-2024-46695}
  - btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() (Filipe Manana) [task:364083] {CVE-2024-46751}
  - btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info() (Filipe Manana) [task:364083]
  - btrfs: remove superfluous metadata check at btrfs_lookup_extent_info() (Filipe Manana) [task:364083]
  - ice: Add netif_device_attach/detach into PF reset flow (Dawid Osuchowski) [task:363961] {CVE-2024-46770}
  - ACPI: video: Change how we determine if brightness key-presses are handled (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses (Hans de Goede) [task:368343] {CVE-2024-46859}
  - platform/x86: panasonic-laptop: Use acpi_video_get_backlight_type() (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: filter out duplicate volume up/down/mute keypresses (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: don't report duplicate brightness key-presses (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: revert "Resolve hotkey double trigger bug" (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: sort includes alphabetically (Hans de Goede) [task:368343]
  - treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 392 (Thomas Gleixner) [task:368343]
  - platform/x86: panasonic-laptop: de-obfuscate button codes (Stefan Seyfried) [task:368343]
  - platform/x86: panasonic-laptop: Replace snprintf in show functions with sysfs_emit (Qing Wang) [task:368343]
  - platform/x86: panasonic-laptop: remove redundant assignment of variable result (Colin Ian King) [task:368343]
  - platform/x86: panasonic-laptop: Add sysfs attributes for firmware brightness registers (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Add support for battery charging threshold (eco mode) (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Resolve hotkey double trigger bug (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Add write support to mute (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Fix sticky key init bug (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Fix naming of platform files for consistency with other modules (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Split MODULE_AUTHOR() by one author per macro call (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Replace ACPI prints with pr_*() macros (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Add support for optical driver power in Y and W series (Kenneth Chan) [task:368343]
  - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) (Kishon Vijay Abraham I) [task:372905] {CVE-2024-47667}
  - nfs: fix UAF in direct writes (Josef Bacik) [task:217568] {CVE-2024-26958}
  - scsi: megaraid: Fix up debug message in megaraid_abort_and_reset() (Hannes Reinecke) [bug:260295]
  - scsi: megaraid_sas: Driver version update to 07.727.03.00-rc1 (Chandrakanth patil) [bug:260295]
  - scsi: megaraid_sas: Log message when controller reset is requested but not issued (Chandrakanth patil) [bug:260295]
  - scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers (Chandrakanth patil) [bug:260295]
  - scsi: megaraid_sas: Fix deadlock on firmware crashdump (Junxiao Bi) [bug:260295]
  - scsi: megaraid: Use pci_dev_id() to simplify the code (Jialin Zhang) [bug:260295]
  - scsi: megaraid_sas: Use pci_dev_id() to simplify the code (Jialin Zhang) [bug:260295]
  - scsi: megaraid_sas: Driver version update to 07.725.01.00-rc1 (Chandrakanth Patil) [bug:260295]
  - scsi: megaraid_sas: Add crash dump mode capability bit in MFI capabilities (Chandrakanth Patil) [bug:260295]
  - scsi: megaraid: Convert sysfs snprintf() to sysfs_emit() (Xuezhi Zhang) [bug:260295]
  - scsi: megaraid_sas: Use struct_size() in code related to struct MR_PD_CFG_SEQ_NUM_SYNC (Gustavo A. R. Silva) [bug:260295]
  - scsi: megaraid_sas: Use struct_size() in code related to struct MR_FW_RAID_MAP (Gustavo A. R. Silva) [bug:260295]
  - scsi: megaraid_sas: Replace one-element array with flexible-array member in MR_PD_CFG_SEQ_NUM_SYNC (Gustavo A. R. Silva) [bug:260295]
  - scsi: megaraid_sas: Replace one-element array with flexible-array member in MR_DRV_RAID_MAP (Gustavo A. R. Silva) [bug:260295]
  - scsi: megaraid_sas: Replace one-element array with flexible-array member in MR_FW_RAID_MAP_DYNAMIC (Gustavo A. R. Silva) [bug:260295]
  - scsi: megaraid_sas: Replace one-element array with flexible-array member in MR_FW_RAID_MAP (Gustavo A. R. Silva) [bug:260295]
  - net/mlx5: Fix bridge mode operations when there are no VFs (Benjamin Poirier) [task:368537] {CVE-2024-46857}
  - net/mlx5: E-switch, Introduce flag to indicate if fdb table is created (Chris Mi) [task:368537]
  - PHYTIUM: can: Modify the version management (Wu Jinyong) [task:346059]
  - PHYTIUM: lbc: Add the driver version description (Wang Hanmo) [task:346059]
  - PHYTIUM: can: Add driver version information (Wu Jinyong) [task:346059]
  - PHYTIUM: drivers/perf: Add version information to Phytium SoC PCIE PMU. (huxianghua) [task:346059]
  - PHYTIUM: drivers/perf: Add version information to Phytium SoC DDR PMU. (huxianghua) [task:346059]
  - PHYTIUM: lbc: Fixed the issue that the driver cannot be removed (Wang Hanmo) [task:346059]
  - PHYTIUM: mtd: spi-nor: Add flash support for two new models (Peng Min) [task:346059]
  - PHYTIUM: can: Fix the bug of runtime PM when removing module. (Wu Jinyong) [task:346059]
  - PHYTIUM: lbc: fixed the issue of unexpected exit in compilation (Wang Hanmo) [task:346059]
  - PHYTIUM: lbc: Add uefi mode support for localbus controller driver (Wang Hanmo) [task:346059]
  - PHYTIUM: dt-bindings: lbc: add bindings for localbus controllers (Wang Hanmo) [task:346059]
  - OPENEULER: genirq: introduce handle_fasteoi_edge_irq for phytium (Yipeng Zou) [task:346059]
  - OPENEULER: genirq: introduce handle_fasteoi_edge_irq flow handler (Yipeng Zou) [task:346059]
  - PHYTIUM: i2c: Use msi instead of INTx in i2c_pcie mode (Wu Jinyong) [task:346059]
  - PHYTIUM: PCIe: Disable SRIOV cabability when pe220x work as BMC cards (Xiao Cong) [task:346059]
  - PHYTIUM: can: Optimize the low performance of can communication (Wu Jinyong) [task:346059]
  - ACPI/IORT: Do not blindly trust DMA masks from firmware (Moritz Fischer) [task:346059]
  - PHYTIUM: arm64: dts: Add pd2308 SoC device tree (Zhou Yulin) [task:346059]
  - staging: iio: frequency: ad9834: Validate frequency parameter value (Aleksandr Mishin) [task:372895] {CVE-2024-47663}
  - staging: iio: frequency: ad9833: Load clock using clock framework (Beniamin Bia) [task:372895]
  - staging: iio: frequency: ad9833: Get frequency value statically (Beniamin Bia) [task:372895]
  - nilfs2: fix state management in error path of log writing function (Ryusuke Konishi) [task:372903] {CVE-2024-47669}
  - wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead (Emmanuel Grumbach) [task:372897] {CVE-2024-47672}
  - scsi: pm80xx: Set phy->enable_completion only when we wait for it (Igor Pylypiv) [task:372775] {CVE-2024-47666}
  - scsi: pm80xx: Add fatal error checks (Changyuan Lyu) [task:372775]
  - scsi: pm80xx: Fix for phy enable/disable functionality (Deepak Ukey) [task:372775]
  - smack: tcp: ipv4, fix incorrect labeling (Casey Schaufler) [task:372671] {CVE-2024-47659}
  - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Kent Overstreet) [task:372519] {CVE-2024-47668}
  - xfs: make sure sb_fdblocks is non-negative (Wengang Wang) [task:354053]
  - netfilter: nft_socket: fix sk refcount leaks (Florian Westphal) [task:368153] {CVE-2024-46855}
  - ASoC: meson: axg-card: fix 'use-after-free' (Arseniy Krasnov) [task:368151] {CVE-2024-46849}
  - ethtool: check device is present when getting link settings (Jamie Bainbridge) [task:364141] {CVE-2024-46679}
  - net/mlx5: Add a timeout to acquire the command queue semaphore (Akiva Goldberger) [task:350687] {CVE-2024-38556}
  - HYGON: drivers/crypto/ccp: memmove is used instead of memcpy in overlapped memmory for tkm (niuyongwen) [task:362023]
  - HYGON: drivers/crypto/ccp: add ioctl API to pin TKM hugepage (xiongmengbiao) [task:362023]
  - HYGON: drivers/crypto/ccp: fix vtkm without C-bit when host SME deactivate (xiongmengbiao) [task:362023]
  - HYGON: drivers/crypto/ccp: support TKM run on CSV (xiongmengbiao) [task:362023]
  - HYGON: drivers/crypto/ccp: remove multi-level pointers processing for vpsp (xiongmengbiao) [task:362023]
  - HYGON: drivers/crypto/ccp: Eliminate dependence of the kvm module on the ccp module (xiongmengbiao) [task:362023]
  - HYGON: drivers/crypto/ccp: Allow VM without a configured vid to use TKM (xiongmengbiao) [task:362023]
  - HYGON: drivers/crypto/ccp: support tkm key isolation (xiongmengbiao) [task:362023]
  - HYGON: drivers/crypto/ccp: Support tkm virtualization (niuyongwen) [task:362023]
  - HYGON: arch/x86/kvm: Support psp virtualization (niuyongwen) [task:362023]
  - HYGON: crypto: ccp: Don't set secure memory region if CSV3 feature is unsupported (hanliyang) [task:362023]
  - HYGON: x86/cpu: Detect memory encryption features on Hygon CPUs (hanliyang) [task:362023]
  - drm/amd/display: Check BIOS images before it is used (Alex Hung) [task:368525] {CVE-2024-46809}
  - drm/amdgpu: Replace one-elements array with flex-array members (Paulo Miguel Almeida) [task:368525]
  - btrfs: clean up our handling of refs == 0 in snapshot delete (Josef Bacik) [task:368305] {CVE-2024-46840}
  - ELF: fix kernel.randomize_va_space double read (Alexey Dobriyan) [task:368307] {CVE-2024-46826}
  - drm/amd/display: Check gpio_id before used as array index (Alex Hung) [task:368129] {CVE-2024-46818}
  - drm/amd/display: Check hpd_gpio for NULL before accessing it (Harry Wentland) [task:368129]
  - drm/amd/display: add gpio lock/unlock (Chiawen Huang) [task:368129]
  - drm/amd/display: fix sporadic multiple aux transaction failure (Yogesh Mohan Marimuthu) [task:368129]
  - drm/amd/display: add query HPD interface. (Chiawen Huang) [task:368129]
  - net: dpaa: Pad packets to ETH_ZLEN (Sean Anderson) [task:368157] {CVE-2024-46854}
  - drm/vmwgfx: Fix a deadlock in dma buf fence polling (Zack Rusin) [task:351069] {CVE-2024-43863}
  - drm/vmwgfx/vmwgfx_fence: Add, remove and demote various documentation params/headers (Lee Jones) [task:351069] {CVE-2024-43863}
  - perf/x86/intel: Limit the period on Haswell (Kan Liang) {CVE-2024-46848}
  - driver: iio: add missing checks on iio_info's callback access (Julien Stephan) [task:363791] {CVE-2024-46715}
  - sched/smt: Fix unbalance sched_smt_present dec/inc (Yang Yingliang) [task:357951] {CVE-2024-44958}
  - dma-direct: Leak pages on dma_set_decrypted() failure (Rick Edgecombe) [task:222011] {CVE-2024-35939}
  - Revert "net: xdp: pull ethernet header off packet after computing skb->protocol" (David S. Miller) [task:364431]
  - xfs: don't account extra agfl blocks as available (Brian Foster) [task:354053]
  - ASoC: topology: Fix route memory corruption (Amadeusz Sławiński) [task:346623] {CVE-2024-41069}
  - gtp: fix a potential NULL pointer dereference (Cong Wang) [task:363647] {CVE-2024-46677}
  - arm64/sparsemem: reduce SECTION_SIZE_BITS (Sudarshan Rajagopalan) [bug:219958]
  - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number (Ma Jun) [task:364199] {CVE-2024-46724}
  - drm/amd/pm: fix the Out-of-bounds read warning (Jesse Zhang) [task:363753] {CVE-2024-46731}
  - memcg_write_event_control(): fix a user-triggerable oops (Al Viro) [task:363965] {CVE-2024-45021}
  - KVM: arm64: Save/restore sp_el0 as part of __guest_enter (Marc Zyngier) [task:351171]
  - arm64: kvm: stop treating register x18 as caller save (Ard Biesheuvel) [task:351171]
  - drm/amd/display: Add null checker before passing variables (Alex Hung) [task:352183] {CVE-2024-43902}
  - nvmet-tcp: fix kernel crash if commands allocation fails (Maurizio Lombardi) [task:363979] {CVE-2024-46737}
  - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Dragos Tatulea) [task:363773] {CVE-2024-44970}
  - ila: call nf_unregister_net_hooks() sooner (Eric Dumazet) [task:364193] {CVE-2024-46782}
  - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (David Fernandez Gonzalez) [task:364051] {CVE-2024-46738}
  - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes (Guenter Roeck) [task:364043] {CVE-2024-46756}
  - scsi: aacraid: Fix double-free on probe failure (Ben Hutchings) [task:363975] {CVE-2024-46673}
  - dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor (Olivier Dautricourt) [task:363973] {CVE-2024-46716}
  - dmaengine: altera-msgdma: Correctly handle descriptor callbacks (Lars-Peter Clausen) [task:363973]
  - hwmon: (lm95234) Fix underflows seen when writing limit attributes (Guenter Roeck) [task:363963] {CVE-2024-46758}
  - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (Camila Alvarez) [task:364071] {CVE-2024-46747}
  - Squashfs: sanity check symbolic link size (Phillip Lougher) [task:364131] {CVE-2024-46744}
  - mmc: mmc_test: Fix NULL dereference on allocation failure (Dan Carpenter) [task:364203] {CVE-2024-45028}
  - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes (Guenter Roeck) [task:364195] {CVE-2024-46757}
  - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (Sascha Hauer) [task:363957] {CVE-2024-46755}
  - apparmor: fix possible NULL pointer dereference (Leesoo Ahn) [task:364181] {CVE-2024-46721}
  - ACPI: extlog: fix NULL pointer dereference check (Prarit Bhargava) [task:364161] {CVE-2023-52605}
  - usb: dwc3: core: Prevent USB core invalid event buffer address access (Selvarasu Ganesan) [task:364045] {CVE-2024-46675}
  - usb: dwc3: core: Skip setting event buffers for host only controllers (Krishna Kurapati) [task:364045]
  - hwmon: (adc128d818) Fix underflows seen when writing limit attributes (Guenter Roeck) [task:363803] {CVE-2024-46759}
  - udf: Avoid excessive partition lengths (Jan Kara) [task:363799] {CVE-2024-46777}
  - drm/amdgpu: fix ucode out-of-bounds read warning (Tim Huang) [task:364077] {CVE-2024-46723}
  - bpf: Remove tst_run from lwt_seg6local_prog_ops. (Sebastian Andrzej Siewior) [task:364073] {CVE-2024-46754}
  - PCI: Add missing bridge lock to pci_bus_lock() (Dan Williams) [task:364081] {CVE-2024-46750}
  - usb: dwc3: st: fix probed platform device ref count on probe error path (Krzysztof Kozlowski) [task:364169] {CVE-2024-46674}
  - sch/netem: fix use after free in netem_dequeue (Stephen Hemminger) [task:364105] {CVE-2024-46800}
  - soc: qcom: cmd-db: Map shared memory as WC, not WB (Volodymyr Babchuk) [task:364171] {CVE-2024-46689}
  - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (Krishna Kumar) [task:364063] {CVE-2024-46761}
  - nfc: pn533: Add poll mod list filling check (Aleksandr Mishin) [task:364099] {CVE-2024-46676}
  - nfc: pn533: Add autopoll capability (Lars Poeschel) [task:364099]
  - nfc: pn533: Add dev_up/dev_down hooks to phy_ops (Lars Poeschel) [task:364099]
  - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). (Kuniyuki Iwashima) [task:364095]
  - can: bcm: Remove proc entry when dev is unregistered. (Kuniyuki Iwashima) [task:364095] {CVE-2024-46771}
  - of/irq: Prevent device address out-of-bounds read in interrupt map walk (Stefan Wiehler) [task:364093] {CVE-2024-46743}
  - binder: fix UAF caused by offsets overwrite (Carlos Llamas) [task:364173] {CVE-2024-46740}
  - nilfs2: protect references to superblock parameters exposed in sysfs (Ryusuke Konishi) [task:364057] {CVE-2024-46780}
  - nilfs2: replace snprintf in show functions with sysfs_emit (Qing Wang) [task:364057]
  - Revert "btrfs: qgroup: fix quota root leak after quota disable failure" (wangdicheng) [task:347151]
  - pinctrl: single: fix potential NULL dereference in pcs_get_function() (Ma Ke) [task:363769] {CVE-2024-46685}
  - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind (Saurabh Sengar) [task:363759] {CVE-2024-46739}
  - drm/amdgpu: fix mc_data out-of-bounds read warning (Tim Huang) [task:363795] {CVE-2024-46722}
  - netem: fix return value if duplicate enqueue fails (Stephen Hemminger) [task:364103] {CVE-2024-45016}
  - net: netem: fix use after free and double free with packet corruption (Jakub Kicinski) [task:364103]
  - fix CONFIG_ARCH_PHYITUM spelling mistake (jiangxiujie) [task:364023]
  - KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 (Marc Zyngier) [task:363883] {CVE-2024-46707}
  - Input: uinput - reject requests with unreasonable number of slots (Dmitry Torokhov) [task:364055] {CVE-2024-46745}
  - net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE (Pablo Neira Ayuso) [task:352231] {CVE-2024-42321}
  - kbuild: Drop -Wdeclaration-after-statement (Peter Zijlstra) [task:368863]
  - kbuild: delete the remaining -Wdeclaration-after-statement (zhouyuhang) [task:368863]
  - tcp_bpf: fix return value of tcp_bpf_sendmsg() (Cong Wang) [task:364047] {CVE-2024-46783}
  - sched/fair: fix x86_64_defconfig build errors (liwanwu) [task:350325]
  - sched/fair: Fix imbalance overflow (Vincent Guittot) [task:333737]
  - sched/fair: Cleanup newidle_balance (Vincent Guittot) [task:333737]
  - sched/fair: Remove sysctl_sched_migration_cost condition (Vincent Guittot) [task:333737]
  - sched/fair: Wait before decaying max_newidle_lb_cost (Vincent Guittot) [task:333737]
  - sched/fair: Skip update_blocked_averages if we are defering load balance (Vincent Guittot) [task:333737]
  - sched/fair: Account update_blocked_averages in newidle_balance cost (Vincent Guittot) [task:333737]
  - sched/fair: Check for idle core in wake_affine (Julia Lawall) [task:333737]
  - sched/fair: Ensure tasks spreading in LLC during LB (Vincent Guittot) [task:333737]
  - sched/fair: Fix condition of avg_load calculation (Tao Zhou) [task:333737]
  - sched/fair: Fix statistics for find_idlest_group() (Vincent Guittot) [task:333737]
  - sched/fair : Improve update_sd_pick_busiest for spare capacity case (Vincent Guittot) [task:333737]
  - sched/fair: Fix find_idlest_group() to handle CPU affinity (Vincent Guittot) [task:333737]
  - sched/fair: Fix rework of find_idlest_group() (Vincent Guittot) [task:333737]
  - sched/fair: Rework find_idlest_group() (Vincent Guittot) [task:333737]
  - sched/fair: Optimize find_idlest_group() (Vincent Guittot) [task:333737]
  - sched/fair: Use load instead of runnable load in wakeup path (Vincent Guittot) [task:333737]
  - sched/fair: Use utilization to select misfit task (Vincent Guittot) [task:333737]
  - sched/fair: Spread out tasks evenly when not overloaded (Vincent Guittot) [task:333737]
  - sched/fair: Use load instead of runnable load in load_balance() (Vincent Guittot) [task:333737]
  - sched/fair: Use rq->nr_running when balancing load (Vincent Guittot) [task:333737]
  - sched/fair: Rework load_balance() (Vincent Guittot) [task:333737]
  - sched/fair: Remove meaningless imbalance calculation (Vincent Guittot) [task:333737]
  - sched/fair: Rename sg_lb_stats::sum_nr_running to sum_h_nr_running (Vincent Guittot) [task:333737]
  - sched/fair: Clean up asym packing (Vincent Guittot) [task:333737]
  - sched/fair: Rename weighted_cpuload() to cpu_runnable_load() (Dietmar Eggemann) [task:333737]
  - sched/fair: Replace source_load() & target_load() with weighted_cpuload() (Dietmar Eggemann) [task:333737]
  - sched/fair: Remove sgs->sum_weighted_load (Dietmar Eggemann) [task:333737]
  - sched/fair: Fix rounding bug for asym packing (Vincent Guittot) [task:333737]
  - sched/fair: Add lsub_positive() and use it consistently (Patrick Bellasi) [task:333737]
  - sched/fair: Clean-up update_sg_lb_stats parameters (Quentin Perret) [task:333737]
  - sched/fair: Change 'prefer_sibling' type to bool (Valentin Schneider) [task:333737]
  - sched/fair: Wrap rq->rd->overload accesses with READ/WRITE_ONCE() (Valentin Schneider) [task:333737]
  - pktgen: use cpus_read_lock() in pg_net_init() (Eric Dumazet) [task:363783] {CVE-2024-46681}
  - mm/vmscan: Fix hard LOCKUP in function isolate_lru_pages (liuye) [task:334682]
  - fix some dtb compile warnings (zhouyuhang) [task:328882, task:329382]
  - net: dsa: mv88e6xxx: Fix out-of-bound access (Joseph Huang) [task:358101] {CVE-2024-44988}
  - ice: Fix race condition during interface enslave (Ivan Vecera) [task:347097] {CVE-2022-48842}
  - btrfs: qgroup: fix quota root leak after quota disable failure (Filipe Manana) [task:347151] {CVE-2024-41078}
  - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() (Chao Yu) [task:347103] {CVE-2024-39467}
  - memcg: protect concurrent access to mem_cgroup_idr (Shakeel Butt) [task:352017] {CVE-2024-43892}
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show() (Chen Ridong) [task:352627] {CVE-2024-43853}
  - ice: Add a per-VF limit on number of FDIR filters (Ahmed Zaki) [task:352625] {CVE-2024-42291}
  - netfilter: ctnetlink: use helper function to calculate expect ID (Pablo Neira Ayuso) [task:357933] {CVE-2024-44944}
  - net: hns3: fix a deadlock problem when config TC during resetting (Jie Wang) [task:358107] {CVE-2024-44995}
  - ssb: Fix potential NULL pointer dereference in ssb_device_uevent() (Rand Deeb) [task:347161] {CVE-2024-40982}
  - fuse: Initialize beyond-EOF page contents before setting uptodate (Jann Horn) [task:358119] {CVE-2024-44947}
  - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (Andi Shyti) [task:351225] {CVE-2024-42259}
  - Input: MT - limit max slots (Tetsuo Handa) [task:357851] {CVE-2024-45008}
  - kcm: Serialise kcm_sendmsg() for the same socket. (Kuniyuki Iwashima) [task:358105] {CVE-2024-44946}
  - ice: Fix improper extts handling (Milena Olech) [task:345311] {CVE-2024-42139}
  - ice: Add GPIO pin support for E823 products (Karol Kolacinski) [task:345311]
  - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (Dmitry Baryshkov) [task:357971] {CVE-2024-44982}
  - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (Mathias Nyman) [task:357961] {CVE-2024-45006}
  - ALSA: line6: Fix racy access to midibuf (Takashi Iwai) [task:357917] {CVE-2024-44954}
  - s390/sclp: Prevent release of buffer in I/O (Peter Oberparleiter) [task:357955] {CVE-2024-44969}
  - x86/mm: Fix pti_clone_pgtable() alignment assumption (Peter Zijlstra) [task:357895] {CVE-2024-44965}
  - ipv6: prevent UAF in ip6_send_skb() (Eric Dumazet) [task:357925] {CVE-2024-44987}
  - atm: idt77252: prevent use after free in dequeue_rx() (Dan Carpenter) [task:357805] {CVE-2024-44998}
  - wifi: mac80211: sdata can be NULL during AMPDU start (Alexander Wetzel) [task:351523] {CVE-2022-48875}
  - x86/mtrr: Check if fixed MTRRs exist before saving them (Andi Kleen) [task:357771] {CVE-2024-44948}
  - usb: gadget: core: Check for unset descriptor (Chris Wulff) [task:357799] {CVE-2024-44960}
  - media: dvb-usb-v2: af9035: fix missing unlock (Hans Verkuil) [task:357803]
  - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (Zhang Shurong) [task:357803] {CVE-2023-52915}
  - ibmvnic: Add tx check to prevent skb leak (Nick Child) [task:345709] {CVE-2024-41066}
  - x86/speculation: Exclude Zhaoxin CPUs from MMIO vulnerability (Enze Li) [task:361049]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.18.v2401
changelog:
  el7.ns7.00.01
  - mm: fix file permission by mistake (Jackie Liu)
  - inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [task:364261]
  - 6lowpan: use rbtree for IP frag queue (Peter Oskolkov) [task:364261]
  - Revert "inet: frags: re-introduce skb coalescing for local delivery" (taowei) [task:364261]
  - kernfs: fix potential NULL dereference in __kernfs_remove (Yushan Zhou) [task:352489]
  - kernfs: fix NULL dereferencing in kernfs_remove (Minchan Kim) [task:352489]
  - kernfs: remove redundant kernfs_rwsem declaration. (Imran Khan) [task:352489]
  - kernfs: prevent early freeing of root node (Minchan Kim) [task:352489]
  - kernfs: switch global kernfs_rwsem lock to per-fs lock (Minchan Kim) [task:352489]
  - icmp: change the order of rate limits (Eric Dumazet) [task:376375] {CVE-2024-47678}
  - REDHAT: mm/memcg: Fix mem_cgroup_id_get_online() underflow problem (lihongfu) [task:391317]
  - REDHAT: mm/memcg: Free percpu stats memory of dying memcg's (lihongfu) [task:391317]
  - x86/microcode/AMD: Fix mixed steppings support (Borislav Petkov (AMD)) [task:383041]
  - security/kysec: fix crash for task kill (mengdehui) [task:390393]
  - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi) [task:371789]
  - virtio-mmio: don't break lifecycle of vm_dev (Wolfram Sang) [task:379857]
  - virtio-mmio: convert to devm_platform_ioremap_resource (Yangtao Li) [task:377245]
  - virtio-mmio: Use to_virtio_mmio_device() to simply code (Tang Bin) [task:379857]
  - slip: make slhc_remember() more robust against malicious packets (Eric Dumazet) [task:376251] {CVE-2024-50033}
  - net: delete "register" keyword (Alexey Dobriyan) [task:376251]
  - config: enable CONFIG_BUG_ON_DATA_CORRUPTION (tanze) [task:354881]
  - usb: typec: altmode should keep reference to parent (Thadeu Lima de Souza Cascardo) [task:387987] {CVE-2024-50150}
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout (Luiz Augusto von Dentz) [task:387967] {CVE-2024-50125}
  - Bluetooth: call sock_hold earlier in sco_conn_del (Desmond Cheong Zhi Xi) [task:387967]
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [task:387575] {CVE-2024-50142}
  - parport: Proper fix for array out-of-bounds access (Takashi Iwai) [task:380221] {CVE-2024-50074}
  - bpf: Use raw_spinlock_t in ringbuf (Wander Lairson Costa) [task:387929] {CVE-2024-50138}
  - nvmet-auth: assign dh_key to NULL after kfree_sensitive (Vitaliy Shevtsov) [task:387435] {CVE-2024-50215}
  - nilfs2: fix kernel bug due to missing clearing of checked flag (Ryusuke Konishi) [task:387405] {CVE-2024-50230}
  - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Eric Dumazet) [task:387901] {CVE-2024-50256}
  - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Simon Horman) [task:387901]
  - ixgbevf: Fix resource leak in ixgbevf_init_module() (Shang XiaoJing) [task:376297] {CVE-2022-49028}
  - sched/pelt: Fix attach_entity_load_avg() corner case (kuyo chang) [task:375977]
  - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Rutland) [task:387961] {CVE-2024-50099}
  - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (Wang Hai) [task:387913] {CVE-2024-50168}
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister (Ye Bin) [task:387981] {CVE-2024-50148}
  - RDMA/mad: Improve handling of timed out WRs of mad agent (Saravanan Vajravel) [task:387985] {CVE-2024-50095}
  - IB/mad: Issue complete whenever decrements agent refcount (Shay Drory) [task:387985]
  - sched/topology: remove phytium platform Manually build CLS sd (liwanwu) [bug:282607]
  - wifi: ath10k: Fix memory leak in management tx (Manikanta Pubbisetty) [task:387963] {CVE-2024-50236}
  - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [task:330540] {CVE-2024-38570}
  - gfs2: simplify gdlm_put_lock with out_free label (Bob Peterson) [task:330540]
  - netfilter: Drop fragmented ndisc packets assembled in netfilter (Georg Kohmann) [bug:277233]
  - be2net: fix potential memory leak in be_xmit() (Wang Hai) [task:387921] {CVE-2024-50167}
  - ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [task:387779] {CVE-2024-50179}
  - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Justin Tee) [task:387983] {CVE-2024-50183}
  - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (Pablo Neira Ayuso) [task:387917] {CVE-2024-50251}
  - net: explicitly clear the sk pointer, when pf->create fails (Ignat Korchagin) [task:387557] {CVE-2024-50186}
  - nilfs2: fix kernel bug due to missing clearing of buffer delay flag (Ryusuke Konishi) [task:387481] {CVE-2024-50116}
  - drm/vc4: Stop the active perfmon before being destroyed (Maíra Canal) [task:387413] {CVE-2024-50187}
  - rtmutex: Drop rt_mutex::wait_lock before scheduling (Roland Xu) [task:368141] {CVE-2024-46829}
  - x86/ioapic: Handle allocation failures gracefully (Thomas Gleixner) [task:380139] {CVE-2024-49927}
  - net/mlx5e: Fix netif state handling (Shay Drory) [task:330508] {CVE-2024-38608}
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Omar Sandoval) [task:380143] {CVE-2024-50082}
  - list: add "list_del_init_careful()" to go with "list_empty_careful()" (Linus Torvalds) [task:380143]
  - gpiolib: fix memory leak in gpiochip_setup_dev() (Zeng Heng) [task:376237] {CVE-2022-48975}
  - gpiolib: check the 'ngpios' property in core gpiolib code (Bartosz Golaszewski) [task:376237]
  - gpiolib: free device name on error path to fix kmemleak (Quanyang Wang) [task:376237]
  - gpio: gpiolib: Normalize return code variable name (Linus Walleij) [task:376237]
  - serial: protect uart_port_dtr_rts() in uart_shutdown() too (Jiri Slaby (SUSE)) [task:376267] {CVE-2024-50058}
  - tcp: avoid too many retransmit packets (Eric Dumazet) [task:347169] {CVE-2024-41007}
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Eric Dumazet) [task:347169]
  - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Menglong Dong) [task:347169]
  - tcp: refactor tcp_retransmit_timer() (Eric Dumazet) [task:347169]
  - padata: use integer wrap around to prevent deadlock on seq_nr overflow (VanGiang Nguyen) [task:376197] {CVE-2024-47739}
  - net/sched: act_mirred: don't override retval if we already lost the skb (Jakub Kicinski) [task:210475] {CVE-2024-26739}
  - bonding: update port speed when getting bond speed (Hangbin Liu) [task:382011]
  - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache (Oliver Upton) [task:200747] {CVE-2024-26598}
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect (Luiz Augusto von Dentz) [task:375621] {CVE-2024-49950}
  - mm: avoid leaving partial pfn mappings around in error case (Linus Torvalds) [task:372881] {CVE-2024-47674}
  - mm: add remap_pfn_range_notrack (Christoph Hellwig) [task:372881]
  - mm/memory.c: make remap_pfn_range() reject unaligned addr (Alex Zhang) [task:372881]
  - mm: fix ambiguous comments for better code readability (chenqiwu) [task:372881]
  - mm: clarify a confusing comment for remap_pfn_range() (WANG Wenhu) [task:372881]
  - docs/core-api/mm: fix return value descriptions in mm/ (Mike Rapoport) [task:372881]
  - nfsd: map the EBADMSG to nfserr_io to avoid warning (Li Lingfeng) [task:376263] {CVE-2024-49875}
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Steve Wahl) [task:376133] {CVE-2024-50017}
  - drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs (Konrad Dybcio) [task:380141] {CVE-2024-49901}
  - bpf: Fix a sdiv overflow issue (Yonghong Song) [task:376399] {CVE-2024-49888}
  - bpf: Rename fixup_bpf_calls and add some comments (Brendan Jackman) [task:376399]
  - dm snapshot: fix lockup in dm_exception_table_exit (Mikulas Patocka) [task:221943] {CVE-2024-35805}
  - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (Ard Biesheuvel) [task:376275] {CVE-2024-49858}
  - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (Qu Wenruo) [task:376151] {CVE-2024-49868}
  - fsnotify: clear PARENT_WATCHED flags lazily (Amir Goldstein) [task:376261] {CVE-2024-47660}
  - xfs: Reduce unnecessary searches when searching for the best extents (Chi Zhiling) [task:377527]
  - jfs: Fix sanity check in dbMount (Dave Kleikamp) [task:376131]
  - jfs: fix out-of-bounds in dbNextAG() and diAlloc() (Jeongjun Park) [task:376131] {CVE-2024-47723}
  - net/xen-netback: prevent UAF in xenvif_flush_hash() (Jeongjun Park) [task:380461] {CVE-2024-49936}
  - net: xen-netback: hash.c: Use built-in RCU list checking (Madhuparna Bhowmik) [task:380461]
  - LoongArch: drivers/pci: Enables the acs ability of loongson Bridge (jianghaoran) [task:373887]
  - LoongArch: drivers/iommu: Support iommu for 3c6000 (Xianglai Li) [task:373887]
  - LoongArch: Temporary add 3C6000 & 3D6000 support (dongbiao) [task:373887]
  - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (Jinjie Ruan) [task:380455] {CVE-2023-52917}
  - fou: fix initialization of grc (Muhammad Usama Anjum) [task:363977]
  - fou: Fix null-ptr-deref in GRO. (Kuniyuki Iwashima) [task:363977] {CVE-2024-46763}
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers (Eric Dumazet) [task:363977]
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers (Eric Dumazet) [task:363977]
  - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr (Mike Marciniszyn) [task:225598] {CVE-2021-47523}
  - vfs: Don't evict inode under the inode lru traversing context (Zhihao Cheng) [task:358113] {CVE-2024-45003}
  - ACPI: sysfs: validate return type of _STR method (Thomas Weißschuh) [task:380101] {CVE-2024-49860}
  - drm/amdgpu/pm: Fix the null pointer dereference for smu7 (Ma Jun) [task:352623] {CVE-2024-43909}
  - drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (Hersen Wu) [task:368523] {CVE-2024-46816}
  - ext4: no need to continue when the number of entries is 1 (Edward Adam Davis) [task:380197] {CVE-2024-49967}
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (Gustavo A. R. Silva) [task:380459] {CVE-2024-50008}
  - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (Toke Høiland-Jørgensen) [task:379923] {CVE-2024-49938}
  - net: add more sanity checks to qdisc_pkt_len_init() (Eric Dumazet) [task:380237] {CVE-2024-49948}
  - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (Eric Dumazet) [task:376177] {CVE-2024-47707}
  - drm/msm/dpu: remove LOCK/CLEAR support in RM (Jeykumar Sankaran) [task:379871]
  - drm/msm/dpu: clean up destination scaler residue (Jeykumar Sankaran) [task:379871]
  - SUNRPC: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [bug:263777]
  - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing) [task:378953]
  - netfilter: br_netfilter: fix panic with metadata_dst skb (Andy Roulin) [task:376437] {CVE-2024-50045}
  - drm/amd/pm: ensure the fw_info is not null before using it (Tim Huang) [task:376229] {CVE-2024-49890}
  - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (Lizhi Xu) [task:375655] {CVE-2024-49877}
  - sock_map: Add a cond_resched() in sock_hash_free() (Eric Dumazet) [task:376293] {CVE-2024-47710}
  - tipc: guard against string buffer overrun (Simon Horman) [task:376129] {CVE-2024-49995}
  - ALSA: asihpi: Fix potential OOB array access (Takashi Iwai) [task:376313] {CVE-2024-50007}
  - iavf: Fix error handling in iavf_init_module() (Yuan Can) [task:376061] {CVE-2022-49027}
  - media: pci: cx23885: check cx23885_vdev_init() return (Hans Verkuil) [task:376301] {CVE-2023-52918}
  - spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware (Devyn Liu) [task:372557] {CVE-2024-47664}
  - nilfs2: fix missing cleanup on rollforward recovery error (Ryusuke Konishi) [task:363971] {CVE-2024-46781}
  - btrfs: replace BUG_ON() with error handling at update_ref_for_cow() (Filipe Manana) [task:363775] {CVE-2024-46752}
  - ACPI: PAD: fix crash in exit_round_robin() (Seiji Nishikawa) [task:376159] {CVE-2024-49935}
  - ACPI: acpi_pad: add a missed blank line after declarations (Xiaofei Tan) [task:376159]
  - drm: omapdrm: Add missing check for alloc_ordered_workqueue (Ma Ke) [task:376335] {CVE-2024-49879}
  - Bluetooth: hci_core: Fix leaking sent_cmd skb (Luiz Augusto von Dentz) [task:344623] {CVE-2022-48844}
  - net/mlx5: Fix HW spec violation configuring uplink (Eli Cohen) [task:365327]
  - net/mlx5e: Add missing capability check for uplink follow (Aya Levin) [task:365327]
  - net/mlx5: Add ts_cqe_to_dest_cqn related bits (Eran Ben Elisha) [task:365327]
  - bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error (Daniel Borkmann) [task:375653] {CVE-2024-47728}
  - RDMA/cxgb4: Added NULL check for lookup_atid (Mikhail Lobanov) [task:376283] {CVE-2024-47749}
  - tcp: check skb is non-NULL in tcp_rto_delta_us() (Josh Hunt) [task:375609] {CVE-2024-47684}
  - rtc: cmos: Fix wake alarm breakage (Rafael J. Wysocki) [task:375407]
  - rtc: cmos: Fix event handler registration ordering issue (Rafael J. Wysocki) [task:375407] {CVE-2022-48953}
  - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Eric Dumazet) [task:375619] {CVE-2024-49949}
  - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Zhu Yanjun) [task:375617] {CVE-2024-47696}
  - net/mlx5e: Fix use-after-free when reverting termination table (Roi Dayan) [task:375625] {CVE-2022-49025}
  - block, bfq: fix possible UAF for bfqq->bic with merge chain (Yu Kuai) [task:375629] {CVE-2024-47706}
  - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (Xin Long) [task:375633] {CVE-2024-49944}
  - MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed (Jiaxun Yang) [task:368269] {CVE-2024-46832}
  - ext4: fix i_data_sem unlock order in ext4_ind_migrate() (Artem Sadovnikov) [task:375967] {CVE-2024-50006}
  - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() (Ryusuke Konishi) [task:375969] {CVE-2024-47699}
  - netfilter: nf_tables: prevent nf_skb_duplicated corruption (Eric Dumazet) [task:376057] {CVE-2024-49952}
  - ppp: fix ppp_async_encode() illegal access (Eric Dumazet) [task:375965] {CVE-2024-50035}
  - ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (Kaixin Wang) [task:375963] {CVE-2024-50059}
  - nfsd: call cache_put if xdr_reserve_space returns NULL (Guoqing Jiang) [task:376185] {CVE-2024-47737}
  - ocfs2: remove unreasonable unlock in ocfs2_read_blocks (Lizhi Xu) [task:376163] {CVE-2024-49965}
  - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error (Junlin Li) [task:375615] {CVE-2024-47697}
  - mailbox: bcm2835: Fix timeout during suspend mode (Stefan Wahren) [task:376341] {CVE-2024-49963}
  - nilfs2: fix potential oob read in nilfs_btree_check_delete() (Ryusuke Konishi) [task:376183] {CVE-2024-47757}
  - ext4: aovid use-after-free in ext4_ext_insert_extent() (Baokun Li) [task:376347] {CVE-2024-49883}
  - ocfs2: cancel dqi_sync_work before freeing oinfo (Joseph Qi) [task:376203] {CVE-2024-49966}
  - arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (Jonathan Cameron) [task:368125] {CVE-2024-46822}
  - arm64: acpi: Move get_cpu_for_acpi_id() to a header (James Morse) [task:368125]
  - drm/amd/display: added NULL check at start of dc_validate_stream (winstang) [task:375221] {CVE-2024-46802}
  - ocfs2: reserve space for inline xattr before attaching reflink tree (Gautham Ananthakrishna) [task:376165] {CVE-2024-49958}
  - btrfs: wait for fixup workers before stopping cleaner kthread during umount (Filipe Manana) [task:376329] {CVE-2024-49867}
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Eric Dumazet) [task:376333] {CVE-2024-47685}
  - ACPI: battery: Fix possible crash when unregistering a battery hook (Armin Wolf) [task:376339] {CVE-2024-49955}
  - ACPI: battery: Simplify battery hook locking (Armin Wolf) [task:376339]
  - net: ethernet: nixge: fix NULL dereference (Yuri Karpov) [task:376191] {CVE-2022-49019}
  - net: nixge: Address compiler warnings when building for i386 (Moritz Fischer) [task:376191]
  - net: nixge: Add support for 64-bit platforms (Moritz Fischer) [task:376191]
  - ext4: fix double brelse() the buffer of the extents path (Baokun Li) [task:376207] {CVE-2024-49882}
  - vfs: fix race between evice_inodes() and find_inode()&iput() (Julian Sun) [task:376219] {CVE-2024-47679}
  - jfs: check if leafidx greater than num leaves per dmap tree (Edward Adam Davis) [task:376377] {CVE-2024-49902}
  - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error (Junlin Li) [task:376239] {CVE-2024-47698}
  - net: Fix an unsafe loop on the list (Anastasia Kovaleva) [task:376085] {CVE-2024-50024}
  - xen: use correct end address of kernel for conflict checking (Juergen Gross) [task:376245] {CVE-2024-47722}
  - media: venus: fix use after free bug in venus_remove due to race condition (Zheng Wang) [task:376401] {CVE-2024-49981}
  - ext4: avoid OOB when system.data xattr changes underneath the filesystem (Thadeu Lima de Souza Cascardo) [task:376249] {CVE-2024-47701}
  - ext4: return error on ext4_find_inline_entry (Thadeu Lima de Souza Cascardo) [task:376249]
  - jfs: Fix uninit-value access of new_ea in ea_buffer (Zhao Mengmeng) [task:376257] {CVE-2024-49900}
  - drm/amd/display: Check stream before comparing them (Alex Hung) [task:376409] {CVE-2024-49896}
  - sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop (Xin Long) [task:376417]
  - sctp: fix memory leak in sctp_stream_outq_migrate() (Zhengchao Shao) [task:376417] {CVE-2022-49013}
  - fbdev: pxafb: Fix possible use after free in pxafb_task() (Kaixin Wang) [task:376117] {CVE-2024-49924}
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation (Srinivasan Shanmugam) [task:376113] {CVE-2024-49894}
  - RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled (Chengchang Tang) [task:376269] {CVE-2024-47735}
  - ocfs2: fix null-ptr-deref when journal load failed. (Julian Sun) [task:376303] {CVE-2024-49957}
  - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (Luiz Augusto von Dentz) [task:376309] {CVE-2024-50044}
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (Baokun Li) [task:376143] {CVE-2024-49959}
  - jfs: Fix uaf in dbFreeBits (Edward Adam Davis) [task:376153] {CVE-2024-49903}
  - e100: Fix possible use after free in e100_xmit_prepare (Wang Hai) [task:376281] {CVE-2022-49026}
  - e100: switch from 'pci_' to 'dma_' API (Christophe JAILLET) [task:376281]
  - tracing: Free buffers when a used dynamic event is removed (Steven Rostedt (Google)) [task:375645] {CVE-2022-49006}
  - tracing: initialize variable in create_dyn_event() (Frank Rowand) [task:375645]
  - tracing: Add unified dynamic event framework (Masami Hiramatsu) [task:375645]
  - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (Pei Xiao) [task:376385] {CVE-2024-49962}
  - HYGON: Add psp interrupt x86 register on hygon 4G platform (chench) [task:380133]
  - serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Finn Thain) [task:217562] {CVE-2024-26999}
  - tty: serial: remove set but not used variable 'error' (YueHaibing) [task:217562]
  - drm/msm/dpu: fix compile error (Lu Yao) [task:379873]
  - Fix a redeclaration compile error (luoxuanqiang) [task:380985]
  - btrfs: don't balance btree inode pages from buffered write path (Nikolay Borisov) [task:375983]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.18.v2401
changelog:
  - mm: fix file permission by mistake (Jackie Liu)
  - inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [task:364261]
  - 6lowpan: use rbtree for IP frag queue (Peter Oskolkov) [task:364261]
  - Revert "inet: frags: re-introduce skb coalescing for local delivery" (taowei) [task:364261]
  - kernfs: fix potential NULL dereference in __kernfs_remove (Yushan Zhou) [task:352489]
  - kernfs: fix NULL dereferencing in kernfs_remove (Minchan Kim) [task:352489]
  - kernfs: remove redundant kernfs_rwsem declaration. (Imran Khan) [task:352489]
  - kernfs: prevent early freeing of root node (Minchan Kim) [task:352489]
  - kernfs: switch global kernfs_rwsem lock to per-fs lock (Minchan Kim) [task:352489]
  - icmp: change the order of rate limits (Eric Dumazet) [task:376375] {CVE-2024-47678}
  - REDHAT: mm/memcg: Fix mem_cgroup_id_get_online() underflow problem (lihongfu) [task:391317]
  - REDHAT: mm/memcg: Free percpu stats memory of dying memcg's (lihongfu) [task:391317]
  - x86/microcode/AMD: Fix mixed steppings support (Borislav Petkov (AMD)) [task:383041]
  - security/kysec: fix crash for task kill (mengdehui) [task:390393]
  - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi) [task:371789]
  - virtio-mmio: don't break lifecycle of vm_dev (Wolfram Sang) [task:379857]
  - virtio-mmio: convert to devm_platform_ioremap_resource (Yangtao Li) [task:377245]
  - virtio-mmio: Use to_virtio_mmio_device() to simply code (Tang Bin) [task:379857]
  - slip: make slhc_remember() more robust against malicious packets (Eric Dumazet) [task:376251] {CVE-2024-50033}
  - net: delete "register" keyword (Alexey Dobriyan) [task:376251]
  - config: enable CONFIG_BUG_ON_DATA_CORRUPTION (tanze) [task:354881]
  - usb: typec: altmode should keep reference to parent (Thadeu Lima de Souza Cascardo) [task:387987] {CVE-2024-50150}
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout (Luiz Augusto von Dentz) [task:387967] {CVE-2024-50125}
  - Bluetooth: call sock_hold earlier in sco_conn_del (Desmond Cheong Zhi Xi) [task:387967]
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [task:387575] {CVE-2024-50142}
  - parport: Proper fix for array out-of-bounds access (Takashi Iwai) [task:380221] {CVE-2024-50074}
  - bpf: Use raw_spinlock_t in ringbuf (Wander Lairson Costa) [task:387929] {CVE-2024-50138}
  - nvmet-auth: assign dh_key to NULL after kfree_sensitive (Vitaliy Shevtsov) [task:387435] {CVE-2024-50215}
  - nilfs2: fix kernel bug due to missing clearing of checked flag (Ryusuke Konishi) [task:387405] {CVE-2024-50230}
  - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Eric Dumazet) [task:387901] {CVE-2024-50256}
  - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Simon Horman) [task:387901]
  - ixgbevf: Fix resource leak in ixgbevf_init_module() (Shang XiaoJing) [task:376297] {CVE-2022-49028}
  - sched/pelt: Fix attach_entity_load_avg() corner case (kuyo chang) [task:375977]
  - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Rutland) [task:387961] {CVE-2024-50099}
  - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (Wang Hai) [task:387913] {CVE-2024-50168}
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister (Ye Bin) [task:387981] {CVE-2024-50148}
  - RDMA/mad: Improve handling of timed out WRs of mad agent (Saravanan Vajravel) [task:387985] {CVE-2024-50095}
  - IB/mad: Issue complete whenever decrements agent refcount (Shay Drory) [task:387985]
  - sched/topology: remove phytium platform Manually build CLS sd (liwanwu) [bug:282607]
  - wifi: ath10k: Fix memory leak in management tx (Manikanta Pubbisetty) [task:387963] {CVE-2024-50236}
  - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [task:330540] {CVE-2024-38570}
  - gfs2: simplify gdlm_put_lock with out_free label (Bob Peterson) [task:330540]
  - netfilter: Drop fragmented ndisc packets assembled in netfilter (Georg Kohmann) [bug:277233]
  - be2net: fix potential memory leak in be_xmit() (Wang Hai) [task:387921] {CVE-2024-50167}
  - ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [task:387779] {CVE-2024-50179}
  - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Justin Tee) [task:387983] {CVE-2024-50183}
  - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (Pablo Neira Ayuso) [task:387917] {CVE-2024-50251}
  - net: explicitly clear the sk pointer, when pf->create fails (Ignat Korchagin) [task:387557] {CVE-2024-50186}
  - nilfs2: fix kernel bug due to missing clearing of buffer delay flag (Ryusuke Konishi) [task:387481] {CVE-2024-50116}
  - drm/vc4: Stop the active perfmon before being destroyed (Maíra Canal) [task:387413] {CVE-2024-50187}
  - rtmutex: Drop rt_mutex::wait_lock before scheduling (Roland Xu) [task:368141] {CVE-2024-46829}
  - x86/ioapic: Handle allocation failures gracefully (Thomas Gleixner) [task:380139] {CVE-2024-49927}
  - net/mlx5e: Fix netif state handling (Shay Drory) [task:330508] {CVE-2024-38608}
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Omar Sandoval) [task:380143] {CVE-2024-50082}
  - list: add "list_del_init_careful()" to go with "list_empty_careful()" (Linus Torvalds) [task:380143]
  - gpiolib: fix memory leak in gpiochip_setup_dev() (Zeng Heng) [task:376237] {CVE-2022-48975}
  - gpiolib: check the 'ngpios' property in core gpiolib code (Bartosz Golaszewski) [task:376237]
  - gpiolib: free device name on error path to fix kmemleak (Quanyang Wang) [task:376237]
  - gpio: gpiolib: Normalize return code variable name (Linus Walleij) [task:376237]
  - serial: protect uart_port_dtr_rts() in uart_shutdown() too (Jiri Slaby (SUSE)) [task:376267] {CVE-2024-50058}
  - tcp: avoid too many retransmit packets (Eric Dumazet) [task:347169] {CVE-2024-41007}
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Eric Dumazet) [task:347169]
  - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Menglong Dong) [task:347169]
  - tcp: refactor tcp_retransmit_timer() (Eric Dumazet) [task:347169]
  - padata: use integer wrap around to prevent deadlock on seq_nr overflow (VanGiang Nguyen) [task:376197] {CVE-2024-47739}
  - net/sched: act_mirred: don't override retval if we already lost the skb (Jakub Kicinski) [task:210475] {CVE-2024-26739}
  - bonding: update port speed when getting bond speed (Hangbin Liu) [task:382011]
  - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache (Oliver Upton) [task:200747] {CVE-2024-26598}
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect (Luiz Augusto von Dentz) [task:375621] {CVE-2024-49950}
  - mm: avoid leaving partial pfn mappings around in error case (Linus Torvalds) [task:372881] {CVE-2024-47674}
  - mm: add remap_pfn_range_notrack (Christoph Hellwig) [task:372881]
  - mm/memory.c: make remap_pfn_range() reject unaligned addr (Alex Zhang) [task:372881]
  - mm: fix ambiguous comments for better code readability (chenqiwu) [task:372881]
  - mm: clarify a confusing comment for remap_pfn_range() (WANG Wenhu) [task:372881]
  - docs/core-api/mm: fix return value descriptions in mm/ (Mike Rapoport) [task:372881]
  - nfsd: map the EBADMSG to nfserr_io to avoid warning (Li Lingfeng) [task:376263] {CVE-2024-49875}
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Steve Wahl) [task:376133] {CVE-2024-50017}
  - drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs (Konrad Dybcio) [task:380141] {CVE-2024-49901}
  - bpf: Fix a sdiv overflow issue (Yonghong Song) [task:376399] {CVE-2024-49888}
  - bpf: Rename fixup_bpf_calls and add some comments (Brendan Jackman) [task:376399]
  - dm snapshot: fix lockup in dm_exception_table_exit (Mikulas Patocka) [task:221943] {CVE-2024-35805}
  - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (Ard Biesheuvel) [task:376275] {CVE-2024-49858}
  - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (Qu Wenruo) [task:376151] {CVE-2024-49868}
  - fsnotify: clear PARENT_WATCHED flags lazily (Amir Goldstein) [task:376261] {CVE-2024-47660}
  - xfs: Reduce unnecessary searches when searching for the best extents (Chi Zhiling) [task:377527]
  - jfs: Fix sanity check in dbMount (Dave Kleikamp) [task:376131]
  - jfs: fix out-of-bounds in dbNextAG() and diAlloc() (Jeongjun Park) [task:376131] {CVE-2024-47723}
  - net/xen-netback: prevent UAF in xenvif_flush_hash() (Jeongjun Park) [task:380461] {CVE-2024-49936}
  - net: xen-netback: hash.c: Use built-in RCU list checking (Madhuparna Bhowmik) [task:380461]
  - LoongArch: drivers/pci: Enables the acs ability of loongson Bridge (jianghaoran) [task:373887]
  - LoongArch: drivers/iommu: Support iommu for 3c6000 (Xianglai Li) [task:373887]
  - LoongArch: Temporary add 3C6000 & 3D6000 support (dongbiao) [task:373887]
  - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (Jinjie Ruan) [task:380455] {CVE-2023-52917}
  - fou: fix initialization of grc (Muhammad Usama Anjum) [task:363977]
  - fou: Fix null-ptr-deref in GRO. (Kuniyuki Iwashima) [task:363977] {CVE-2024-46763}
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers (Eric Dumazet) [task:363977]
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers (Eric Dumazet) [task:363977]
  - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr (Mike Marciniszyn) [task:225598] {CVE-2021-47523}
  - vfs: Don't evict inode under the inode lru traversing context (Zhihao Cheng) [task:358113] {CVE-2024-45003}
  - ACPI: sysfs: validate return type of _STR method (Thomas Weißschuh) [task:380101] {CVE-2024-49860}
  - drm/amdgpu/pm: Fix the null pointer dereference for smu7 (Ma Jun) [task:352623] {CVE-2024-43909}
  - drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (Hersen Wu) [task:368523] {CVE-2024-46816}
  - ext4: no need to continue when the number of entries is 1 (Edward Adam Davis) [task:380197] {CVE-2024-49967}
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (Gustavo A. R. Silva) [task:380459] {CVE-2024-50008}
  - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (Toke Høiland-Jørgensen) [task:379923] {CVE-2024-49938}
  - net: add more sanity checks to qdisc_pkt_len_init() (Eric Dumazet) [task:380237] {CVE-2024-49948}
  - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (Eric Dumazet) [task:376177] {CVE-2024-47707}
  - drm/msm/dpu: remove LOCK/CLEAR support in RM (Jeykumar Sankaran) [task:379871]
  - drm/msm/dpu: clean up destination scaler residue (Jeykumar Sankaran) [task:379871]
  - SUNRPC: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [bug:263777]
  - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing) [task:378953]
  - netfilter: br_netfilter: fix panic with metadata_dst skb (Andy Roulin) [task:376437] {CVE-2024-50045}
  - drm/amd/pm: ensure the fw_info is not null before using it (Tim Huang) [task:376229] {CVE-2024-49890}
  - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (Lizhi Xu) [task:375655] {CVE-2024-49877}
  - sock_map: Add a cond_resched() in sock_hash_free() (Eric Dumazet) [task:376293] {CVE-2024-47710}
  - tipc: guard against string buffer overrun (Simon Horman) [task:376129] {CVE-2024-49995}
  - ALSA: asihpi: Fix potential OOB array access (Takashi Iwai) [task:376313] {CVE-2024-50007}
  - iavf: Fix error handling in iavf_init_module() (Yuan Can) [task:376061] {CVE-2022-49027}
  - media: pci: cx23885: check cx23885_vdev_init() return (Hans Verkuil) [task:376301] {CVE-2023-52918}
  - spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware (Devyn Liu) [task:372557] {CVE-2024-47664}
  - nilfs2: fix missing cleanup on rollforward recovery error (Ryusuke Konishi) [task:363971] {CVE-2024-46781}
  - btrfs: replace BUG_ON() with error handling at update_ref_for_cow() (Filipe Manana) [task:363775] {CVE-2024-46752}
  - ACPI: PAD: fix crash in exit_round_robin() (Seiji Nishikawa) [task:376159] {CVE-2024-49935}
  - ACPI: acpi_pad: add a missed blank line after declarations (Xiaofei Tan) [task:376159]
  - drm: omapdrm: Add missing check for alloc_ordered_workqueue (Ma Ke) [task:376335] {CVE-2024-49879}
  - Bluetooth: hci_core: Fix leaking sent_cmd skb (Luiz Augusto von Dentz) [task:344623] {CVE-2022-48844}
  - net/mlx5: Fix HW spec violation configuring uplink (Eli Cohen) [task:365327]
  - net/mlx5e: Add missing capability check for uplink follow (Aya Levin) [task:365327]
  - net/mlx5: Add ts_cqe_to_dest_cqn related bits (Eran Ben Elisha) [task:365327]
  - bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error (Daniel Borkmann) [task:375653] {CVE-2024-47728}
  - RDMA/cxgb4: Added NULL check for lookup_atid (Mikhail Lobanov) [task:376283] {CVE-2024-47749}
  - tcp: check skb is non-NULL in tcp_rto_delta_us() (Josh Hunt) [task:375609] {CVE-2024-47684}
  - rtc: cmos: Fix wake alarm breakage (Rafael J. Wysocki) [task:375407]
  - rtc: cmos: Fix event handler registration ordering issue (Rafael J. Wysocki) [task:375407] {CVE-2022-48953}
  - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Eric Dumazet) [task:375619] {CVE-2024-49949}
  - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Zhu Yanjun) [task:375617] {CVE-2024-47696}
  - net/mlx5e: Fix use-after-free when reverting termination table (Roi Dayan) [task:375625] {CVE-2022-49025}
  - block, bfq: fix possible UAF for bfqq->bic with merge chain (Yu Kuai) [task:375629] {CVE-2024-47706}
  - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (Xin Long) [task:375633] {CVE-2024-49944}
  - MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed (Jiaxun Yang) [task:368269] {CVE-2024-46832}
  - ext4: fix i_data_sem unlock order in ext4_ind_migrate() (Artem Sadovnikov) [task:375967] {CVE-2024-50006}
  - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() (Ryusuke Konishi) [task:375969] {CVE-2024-47699}
  - netfilter: nf_tables: prevent nf_skb_duplicated corruption (Eric Dumazet) [task:376057] {CVE-2024-49952}
  - ppp: fix ppp_async_encode() illegal access (Eric Dumazet) [task:375965] {CVE-2024-50035}
  - ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (Kaixin Wang) [task:375963] {CVE-2024-50059}
  - nfsd: call cache_put if xdr_reserve_space returns NULL (Guoqing Jiang) [task:376185] {CVE-2024-47737}
  - ocfs2: remove unreasonable unlock in ocfs2_read_blocks (Lizhi Xu) [task:376163] {CVE-2024-49965}
  - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error (Junlin Li) [task:375615] {CVE-2024-47697}
  - mailbox: bcm2835: Fix timeout during suspend mode (Stefan Wahren) [task:376341] {CVE-2024-49963}
  - nilfs2: fix potential oob read in nilfs_btree_check_delete() (Ryusuke Konishi) [task:376183] {CVE-2024-47757}
  - ext4: aovid use-after-free in ext4_ext_insert_extent() (Baokun Li) [task:376347] {CVE-2024-49883}
  - ocfs2: cancel dqi_sync_work before freeing oinfo (Joseph Qi) [task:376203] {CVE-2024-49966}
  - arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (Jonathan Cameron) [task:368125] {CVE-2024-46822}
  - arm64: acpi: Move get_cpu_for_acpi_id() to a header (James Morse) [task:368125]
  - drm/amd/display: added NULL check at start of dc_validate_stream (winstang) [task:375221] {CVE-2024-46802}
  - ocfs2: reserve space for inline xattr before attaching reflink tree (Gautham Ananthakrishna) [task:376165] {CVE-2024-49958}
  - btrfs: wait for fixup workers before stopping cleaner kthread during umount (Filipe Manana) [task:376329] {CVE-2024-49867}
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Eric Dumazet) [task:376333] {CVE-2024-47685}
  - ACPI: battery: Fix possible crash when unregistering a battery hook (Armin Wolf) [task:376339] {CVE-2024-49955}
  - ACPI: battery: Simplify battery hook locking (Armin Wolf) [task:376339]
  - net: ethernet: nixge: fix NULL dereference (Yuri Karpov) [task:376191] {CVE-2022-49019}
  - net: nixge: Address compiler warnings when building for i386 (Moritz Fischer) [task:376191]
  - net: nixge: Add support for 64-bit platforms (Moritz Fischer) [task:376191]
  - ext4: fix double brelse() the buffer of the extents path (Baokun Li) [task:376207] {CVE-2024-49882}
  - vfs: fix race between evice_inodes() and find_inode()&iput() (Julian Sun) [task:376219] {CVE-2024-47679}
  - jfs: check if leafidx greater than num leaves per dmap tree (Edward Adam Davis) [task:376377] {CVE-2024-49902}
  - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error (Junlin Li) [task:376239] {CVE-2024-47698}
  - net: Fix an unsafe loop on the list (Anastasia Kovaleva) [task:376085] {CVE-2024-50024}
  - xen: use correct end address of kernel for conflict checking (Juergen Gross) [task:376245] {CVE-2024-47722}
  - media: venus: fix use after free bug in venus_remove due to race condition (Zheng Wang) [task:376401] {CVE-2024-49981}
  - ext4: avoid OOB when system.data xattr changes underneath the filesystem (Thadeu Lima de Souza Cascardo) [task:376249] {CVE-2024-47701}
  - ext4: return error on ext4_find_inline_entry (Thadeu Lima de Souza Cascardo) [task:376249]
  - jfs: Fix uninit-value access of new_ea in ea_buffer (Zhao Mengmeng) [task:376257] {CVE-2024-49900}
  - drm/amd/display: Check stream before comparing them (Alex Hung) [task:376409] {CVE-2024-49896}
  - sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop (Xin Long) [task:376417]
  - sctp: fix memory leak in sctp_stream_outq_migrate() (Zhengchao Shao) [task:376417] {CVE-2022-49013}
  - fbdev: pxafb: Fix possible use after free in pxafb_task() (Kaixin Wang) [task:376117] {CVE-2024-49924}
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation (Srinivasan Shanmugam) [task:376113] {CVE-2024-49894}
  - RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled (Chengchang Tang) [task:376269] {CVE-2024-47735}
  - ocfs2: fix null-ptr-deref when journal load failed. (Julian Sun) [task:376303] {CVE-2024-49957}
  - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (Luiz Augusto von Dentz) [task:376309] {CVE-2024-50044}
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (Baokun Li) [task:376143] {CVE-2024-49959}
  - jfs: Fix uaf in dbFreeBits (Edward Adam Davis) [task:376153] {CVE-2024-49903}
  - e100: Fix possible use after free in e100_xmit_prepare (Wang Hai) [task:376281] {CVE-2022-49026}
  - e100: switch from 'pci_' to 'dma_' API (Christophe JAILLET) [task:376281]
  - tracing: Free buffers when a used dynamic event is removed (Steven Rostedt (Google)) [task:375645] {CVE-2022-49006}
  - tracing: initialize variable in create_dyn_event() (Frank Rowand) [task:375645]
  - tracing: Add unified dynamic event framework (Masami Hiramatsu) [task:375645]
  - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (Pei Xiao) [task:376385] {CVE-2024-49962}
  - HYGON: Add psp interrupt x86 register on hygon 4G platform (chench) [task:380133]
  - serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Finn Thain) [task:217562] {CVE-2024-26999}
  - tty: serial: remove set but not used variable 'error' (YueHaibing) [task:217562]
  - drm/msm/dpu: fix compile error (Lu Yao) [task:379873]
  - Fix a redeclaration compile error (luoxuanqiang) [task:380985]
  - btrfs: don't balance btree inode pages from buffered write path (Nikolay Borisov) [task:375983]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.19.v2401
changelog:
  - PHYTIUM: drivers/perf:phytium: Add PCIe PMU Support for PS240XX. (wangsiyu01) [task:409047]
  - PHYTIUM: drivers/perf:phytium: Add DDR PMU Support for PS240XX. (wangsiyu01) [task:409047]
  - mm/shmem: return head page from find_lock_entry (Matthew Wilcox (Oracle)) [task:410009, task:422535]
  - net: hns3: add new 200G link modes for hisilicon device (Hao Lan) [task:411873, task:422535]
  - net: hns3: add some link modes for hisilicon device (Hao Chen) [task:411873, task:422535]
  - net: hns3: make symbol 'hclge_mac_speed_map_to_fw' static (Wei Yongjun) [task:411873, task:422535]
  - net: hns3: refine function hclge_cfg_mac_speed_dup_hw() (Guangbin Huang) [task:411873, task:422535]
  - net: hns3: modify functions of converting speed ability to ethtool link mode (Guangbin Huang) [task:411873, task:422535]
  - net: hns3: add new function hclge_get_speed_bit() (Guangbin Huang) [task:411873, task:422535]
  - net: hns3: add macros for mac speeds of firmware command (Guangbin Huang) [task:411873, task:422535]
  - net: hns3: add support for 200G device (Guangbin Huang) [task:411873, task:422535]
  - net/mlx5: Fix variable not being completed when function returns (Chenguang Zhao) [task:412201, task:422535]
  - REDHAT: rpmspec: amend removal of depmod created files to include modules.builtin.alias.bin (Jiangshan Yi) [task:413827, task:422535]
  - rpmbuild: avoid providing duplicate dtb directory (Jiangshan Yi) [task:413827, task:422535]
  - NETSWIFT: txgbevf: FIX: fix issue in kylin4.19-kernel test (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: set version 1.3.2 (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX:fix compile error in some redhat os (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix compile error on some os (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: fix: fix slt test error log (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix bug that try to free already-free irq (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix bug that slt test failed (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: Modify compile mode (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix bug that vf pcie device not is remove when after rmmod pf driver (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: set version 1.3.2rc0 (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix bug that txgbevf 802.1ad vlan ping fail (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix VF UDP RSS cannot off (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: Revert "FIX: fix VF RSS rules not working" (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: Revert commit b283dc9be78e (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix VF RSS rules not working (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: ADD: add new file Module.supported (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix TXGBE_VXSTATUS_SPEED not right (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix qinq issue in centos: (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: fix: fix vf only supports a maximum of 2 queues (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: Synchronous wangxun txgbevf driver source code (luoqing) [task:226013, task:422535]
  - NETSWIFT: txgbevf: set version to 1.3.1 (Juxia He) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix compile warning on linx 6.0.60.4 and linxos 6.0.60 (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix compile warning on ubuntu 22.10 and 23.04 (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: txgbevf: fix: fix change not mtu work on some os like centos7.7 (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix bug tx/rx count error when down/up while count exceed 0x100000000 (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: txgbevf: Update version to 1.3.1rc0 for test (Juxia He) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix rx/tx count error when down/up (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: txgbevf: ADD: add the interfacce to show fw version on vf (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: FIX bug that set vlan failed but not return error (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix vf cannot revice packets after pcie reset (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: FIX DRV_VERSION not right (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: txgbevf: Modify: modify compile command (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix issue in kernel test (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: add msglvl for kr debug messages (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix bug on vxlan-gpe tunnel packet hw offload (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: ocp ncsi link is down when driver probe (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: feat: add support to desc check (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: txgbe: sp: fix 10kr autoneg to cx4/5 (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: vxlan/geneve ipv6 add/delete port bug (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: feat: force dac cable to kr mode (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: feat: reset flow (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: ipv6 offload (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: update version to 1.3.6.2 (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: tx csum by soft except tcp udp sctp (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: feat: send autoneg setting to firmware (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: set version 1.3.6 in main file (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX:fix loud xsk in some kernel may error (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: fix bug that send packet failed in certain conditions (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX:fix xsk tx may cause kernel crash (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: allow to add nedev_uc_addr over 64 (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix bug that slt test failed (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix 802.1ad rx_csum_offload_errors not increase (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: set version 1.3.6rc1 (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: vlvf value not right (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: feat: sync adaptive rx/rx usecs/tx-frames-irq setting to txgbe (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix the ethtool -t loopback test fails when the multi-speed sfp links to 1000M and veto on (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: delete error code (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: function 1 ethtool -i show firmware err (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: fix some bugs about vf 802.1ad vlan (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: change firmware-version format (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: ethtool support to set multi rss when sriov is enabled (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: review: fix backplane fw ethtool show error (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: fix some problem in code review (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: Fix handling of NAPI budget when multiple queues are enabled per vector (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: add support for set vf mac with zero_ether_addr (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix get lldp flag wrong when probe (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: loopback test may fail when veto on and the rate is set to 1000M and link down (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: set version to 1.3.6rc0 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: sync new kr tarinning flow (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix : remove vf mtu restriction (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix bug that try to handled null pointer (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: feat: Added the function of vf trust (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix to create fdir rule index 0 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: marvell phy nic which not support ocp link speed wrong (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: feat: set flow control xon to default off (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix ether type filter configuration in VT mode (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: add get lldp status by mbx (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: correct ether type in ethtool -n (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix PF RSS when multi_rss is enabled (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix fdir filter action queue info (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix to get info of ether type filter (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: ADD: support to add ether type filter by ethtool (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Revert "MODIFY: vf do not make its own receice-hash" (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: feat: support wol on fun 1 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: remove duplicate pings vf and set vf after ping (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: ethtool set rss indir table (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: ethtool can't take effect for hash key (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Revert "Fix:skip lan_rst after retriggering interrupt" (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Revert "Fix: skip lan reset condition is imperfect" (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: patch-3 vf only supports a maximum of 2 queues JIRA: http://projsw.trustnetic.com/browse/SAP-263 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX:fix compile error when define DISABLE_PACKET_SPLIT (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: fix bug that close rx-vlan-offload not work and rx-vlan-stag-filter can not close (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: ADD: update vpd when use ethtool -f to upgrade (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: patch-v2 vf only supports a maximum of 2 queues (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: ethtool show max_combined wrong when enable sriov (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: fix vf only supports a maximum of 2 queues (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: set mac_sgmii to autoneg off failed (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: fix bug that vf mtu can be larger than pf mtu (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix error print when remove geneve or vxlan (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: ADD: add firmware quirks for WHGX (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: replacing 1G sfp module to dual-speed sfp module, link speed is 1G (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: update kr trainning flow 4 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: update release note to 1.3.5.1 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: feat: add led blink support for oem (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: fix commit 57d2aa3 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: set version to 1.3.5 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: ADD: add support tunnel prot set on kernel over 5.9 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix compile error because not define txgbe_xdp_locking_key (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: SWESMBI Software EEPROM semaphore not granted. (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix in some kernel version, when xdp_redirect tx drop may free page error (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: The xdpring count is now maintained at the cpu core count or maximum xdpring(2) (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: The xdpring count is now maintained at the cpu core count or maximum xdpring (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: ethool -s ethx autoneg on cannot link to 10G (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix when load or unload xdp program, may calltrace. and fix lro may can't set after set lro when xdp load (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix bug that ifconfig down but not disable laser (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: Can't change lro when xdp load and change lro to which before xdp load when unload xdp (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: when load xdp ,turn off lro(2) (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: when load xdp ,turn off lro (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: add free page in head split mode (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: update kr trainning flow (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix when load xdp_pass may oom (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: 64k pagesize memory leak (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Update kr trainning flow 3 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix bug that disable sriov not clear Etype filter (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: ethtool -S not support return EINVAL (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix compile error when define DISABLE_PACKET_SPLIT_2 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: firmware version read from flash instead of shadow ram (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix not to set prbs_en in en_cl72_krtr (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: 1000Base-T sfp module and cable link update error (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix bug that insmod with param max_vfs (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix compile warning on sles 11.3 and 11.4 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix ethtool set coalesce adaptive (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: skip lan reset condition is imperfect (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Revert "Fix: skip lan reset condition is imperfect" (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: skip lan reset condition is imperfect (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix when load xdp_redirect program (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix ethtool -t loopback test failed (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix compile error when define DISABLE PACKET_SPLIT (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: i2c fails trying to read DAC (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Tidy up codes for sonarcloud scanner (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: update kr trainning flow 3 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Update version to 1.3.5rc1 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix call trace when PAGE_SIZE<8k (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Limit change mtu range when xdp loaded (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: ADD: check cpu arch or pcie upstream before bus reset (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: ADD: add macro define in configure (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix bug that mailbox error (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix compile error (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: ADD: add support 802.1ad vlan (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: not do pcie reset when sriov enable (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix compile error (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: remove default fec set (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: software timestamp skbs as late as possible (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix compile error about xdp (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: delete unused declaration (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: strtoul compile error (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: skip lan_rst after retriggering interrupt (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: Limit rss queues when the xdp program loads copper sfp (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix 1G speed autoneg on/off functions (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: set version 1.3.5rc0 for test (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: Limit rss queues (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Add: Tidy up i2c_read 1G copper sfp flow (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: insmod driver and nsci link is down when using copper sfp (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix compile error xdp_rxq_info_reg (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: delete useless debug message (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix compile err when kernel version less than 4.20 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: ADD: add the interfacce to show fw version on vf (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix can't ethtool -t call null point (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: ADD: add support xdp (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: fix bug (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Upgrade kr trainning flow (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: number of descriptor must be multiple of 128 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Delete: delete phy hardware reset in reset_hw for led oem (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Add: display aer error type (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Add: firmware use i2c to access sfp module (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fit txgbe_is_lldp return flow (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: kcompat.h not define some (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: ngbevf: fix issue in kylin4.19-kernel test (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: ngbevf: Synchronous wangxun ngbevf driver source code (luoqing) [task:226013, task:422535]
  - NETSWIFT: ngbevf: set version 1.2.1.1 (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: FIX: fix set vf mtu err (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: FIX: fix handle kernel NULL pointer when add vxlan (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: add release time and modify version to 1.2.2 (Juxia He) [task:226013, task:422535]
  - NETSWIFT: ngbevf: fix: fix bug that error dmesg when add double vlan (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: FIX: fix bug that vf can't ifconfig up (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: FIX: fix compile error (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: Revert "fix : fix bug that vf get ack timeout when pf ifconfig down up" (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: set version 1.2.2rc0 for test (Juxia He) [task:226013, task:422535]
  - NETSWIFT: ngbevf: FIX: fix mailbox error when ifconfig pf down/up (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: fix: fix bug that vf can not link when phy is not internal (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: Fix: fix the bug that ip link set vf state not work (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: FIX: fix bug that try to free already-free irq (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: ADD: add new file Module.supported (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: fix : fix bug that vf get ack timeout when pf ifconfig down up (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: fix: fix bug that pf ping vf but vf not reset (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: FIX: fix bug that txvlan and rxvlan cannot close (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: feat: add the interface to show fw version on vf (luoqing) [task:226013, task:422535]
  - NETSWIFT: ngbevf: FIX: fix bug that 10M link speed error (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: fix: fix change not mtu work on some os like centos7.7 (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX:fix tunnel packets unreachable when enable sriov (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: Fixed resolving ipv6 packet header errors (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: Optimize reset flow when driver is tx hang or timeout (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: ngbe: update version to 1.2.6.3 (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: tx csum by soft except tcp udp sctp (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: update version to 1.2.6.2 (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: add HAVE_NETDEV_XMIT_MORE for kylin os (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: ngbe: update release notes and version to 1.2.6.1 (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: Fix: Hardware block max request size to 128 (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: Fix: allow to add nedev_uc_addr over 16 (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: Synchronous wangxun ngbe driver source code (luoqing) [task:226013, task:422535]
  - NETSWIFT: ngbe: update release note and version 1.2.6 (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: Revert "FIX: When do ethtool -C, if not change any coalesce parameters supported, will return -EINVAL" (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: ngbe: set version to 1.2.6rc2 (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: Add a delay between pings for slt test (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: Add a delay between pings (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: yt8531s-ca can't generate interrupt in combo mode (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: ngbe: feat: add support for notifying firmware phy link (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: remove vf mtu restriction (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix slt test failed (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix fail to obtain mbx lock when slt test (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: modify version to 1.2.6rc1 for test (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix mailbox error when ifconfig pf down (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix compile error (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: add get lldp status by mbx (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: fix bug that vf mtu can not be larger than pf mtu (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: code review (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix compile error (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: default to set gpio_0 input direction (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix compile error (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix compile error in kylinos (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: feat: add the interface to set the vf link state (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: modify version to 1.2.6rc0 (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: add mtu change limit and rx buffer 3k for xdp (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: feat: check cpu arch or pcie upstream type to determine whether to do recovery (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: ethtool can't set hash key (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: add print when port down and change lldp (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: Revert "FIX:allow set lldp when nic down" (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix bug that try to handled null pointer (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: feat: add support that set vf vlan type 802.1ad (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: compile warming because unused value (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: allow set lldp when nic down (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: fix bugs set tx frame irq to 65536 exceed u16 max value (zhenpengzheng) [task:226013, task:422535]
  - NETSWIFT: ngbe: revert: revert tx timeout retrigger irq flow (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: fix bug that rx multicast count not right (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: fix bug that failed to receive vlan packets when promisc enable (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: fix bug that vf can not link when phy is not internal (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: feat: Added the function of vf trust (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: add dynamic itr configurable; (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: yt8531sh-ca phy can't powerdown in mode 2 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: ngbe: feat: add param for yt phy unidirectional mode (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: fix bug that vlan filter change but not work (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: fix bug that some feature that can not change (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: fix bug that cant set ip vlan when mac vlan is set (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: fix bug that vf mtu can be larger than pf mtu (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: rtl8211fs and jl2201 some bugs. (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: feat: add the interface to show fw version on vf (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: fix ethtool -S may out of range (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: feat/fix: commit message example (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: yt8531h check phy id failed (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: ngbe: ADD: Synchronize xdp changes off txgbe (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: Fix: fix commit 7a14ec5 (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: ADD: add support for XZP211FS phy (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: ngbe: ADD: add support for new phy JL2201-N048C and rtl8211f (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: ADD: add support for yt phy unidirectional mode (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix bug that mailbox error (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: Fix: Inspur ncsi nic cannot wake on lan. (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: Revert "Fix:wol can't work in inspur ncsi nic" (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: Fix: wol can't work in inspur ncsi nic (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: may calltrace when run loop test because pagecnt_bias err (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix compile error when define DISABLE_PACKET_SPLIT (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix xdp page processing flow (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: ADD: add support for showing AER error type (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: ADD: add support for inspur ncsi card (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: When do ethtool -C, if not change any coalesce parameters supported, will return -EINVAL (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix may calltrace due to page_ref count error,and fix calltrace when unload xdp (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: software timestamp skbs as late as possible (Mengyuan Lou) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix when load xdp_redirect program (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix may call trace when xdp redirect load because no XDP_PACKET_HEADROOM (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix the statistics of queues 4 to 7 are lost after xdp program is loaded (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: update unresolved issues to release notes and set version (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: ADD: update vpd when use ethtool -f to upgrade (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: set version 1.2.5.2 (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: ifconfig down will not powerdown external phy (wenduanqiang) [task:226013, task:422535]
  - bpf, sockmap: Fix race between element replace and close() (Michal Luczaj) [task:410365] {CVE-2024-56664}
  - bpf, sockmap: Fix preempt_rt splat when using raw_spin_lock_t (John Fastabend) [task:410365]
  - bpf, sockhash: Synchronize delete from bucket list on map free (Jakub Sitnicki) [task:333747]
  - bpf, sockhash: Fix memory leak when unlinking sockets in sock_hash_free (Jakub Sitnicki) [task:333747]
  - bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap (Daniel Borkmann) [task:410365]
  - net: Fix icmp host relookup triggering ip_rt_bug (Dong Chenchen) [task:410447] {CVE-2024-56647}
  - bpf: fix OOB devmap writes when deleting elements (Maciej Fijalkowski) [task:410065]
  - xsk: fix OOB map writes when deleting elements (Maciej Fijalkowski) [task:410065] {CVE-2024-56614}
  - config/x86: change TCG_HYGON to y (mengdehui) [task:415311, task:422535]
  - drivers/gmjstcm: import CVE-2011-1160 CVE-2011-1162 fixes to tcm.c (Li ZhiGang) [task:406609] {CVE-2024-24891}
  - drivers/gmjstcm: fix a dev_err() call in spi tcm device probe (Li ZhiGang) [task:406609]
  - bpf: fix recursive lock when verdict program return SK_PASS (Jiayuan Chen) [task:412141] {CVE-2024-56694}
  - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Sidraya Jayagond) [task:410367] {CVE-2024-53210}
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (Ryusuke Konishi) [task:410479] {CVE-2024-56619}
  - ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [task:410395] {CVE-2024-56532}
  - hfsplus: don't query the device logical block size multiple times (Thadeu Lima de Souza Cascardo) [task:410029] {CVE-2024-56548}
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (Dan Carpenter) [task:408543] {CVE-2024-53158}
  - NFSD: Prevent a potential integer overflow (Chuck Lever) [task:408541] {CVE-2024-53146}
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter() (Dmitry Antipov) [task:408545] {CVE-2024-53155}
  - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (Luo Qiu) [task:408531] {CVE-2024-53157}
  - xen/netfront: fix crash when removing device (Juergen Gross) [task:408535] {CVE-2024-53240}
  - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (Furong Xu) [task:391021] {CVE-2024-53058}
  - kylin_extend: fix kernel NULL pointer dereference (huanfuxi) [task:391387, task:422535]
  - security: fix bug while get path by inode (penghuaihe) [task:387321, task:422535]
  - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (Al Viro) [task:406597] {CVE-2024-42265}
  - drm/amdgpu: change vm->task_info handling (Shashank Sharma) [task:347157] {CVE-2024-41008}
  - LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context (Huacai Chen) [task:387571] {CVE-2024-50111}
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jeongjun Park) [task:408553] {CVE-2024-53156}
  - wifi: iwlegacy: Clear stale interrupts before resuming device (Ville Syrjälä) [task:387911] {CVE-2024-50234}
  - net: do not delay dst_entries_add() in dst_release() (Eric Dumazet) [task:380195] {CVE-2024-50036}
  - f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread() (Chao Yu) [task:376109] {CVE-2024-47691}
  - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (Yi Yang) [task:400455] {CVE-2023-6546}
  - tty: n_gsm: fix restart handling via CLD command (Daniel Starke) [task:400455]
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens) [task:403255] {CVE-2024-53104}
  - HYGON: ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio (Liao Xuan) [task:389315]
  - HYGON: hwmon/k10temp: Add support for Hygon family 18h model 10h (Liao Xuan) [task:389315]
  - HYGON: EDAC/amd64: Add support for Hygon family 18h model 10h (Liao Xuan) [task:389315]
  - HYGON: x86/amd_nb: Add support for Hygon family 18h model 10h (Liao Xuan) [task:389315]
  - HYGON: x86/cpu: Get LLC ID for Hygon family 18h model 10h (Liao Xuan) [task:389315]
  - HYGON: perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h (Liao Xuan) [task:389315]
  - HYGON: EDAC/amd64: Add support for Hygon family 18h model 7h (Liao Xuan) [task:389315]
  - HYGON: x86/amd_nb: Add support for Hygon family 18h model 7h (Liao Xuan) [task:389315]
  - drm/vc4: fix compile error (Lu Yao) [task:397559]
  - HYGON: arch: The Kconfig for enhanced copy capabilities for Hygon processor (Zhiteng Qiu) [task:365605, task:422535]
  - HYGON: arch: Enhanced copy capabilities for Hygon processor (Zhiteng Qiu) [task:365605, task:422535]
  - btrfs: fix the length of reserved qgroup to free (Haisu Wang) [task:364175]
  - btrfs: fix qgroup reserve leaks in cow_file_range (Boris Burkov) [task:364175] {CVE-2024-46733}
  - block: Fix kabi caused by blk.h (Zheng Tan) [task:381405]
  - block: fix kabi broken in stat_group (Zheng Tan) [task:381405]
  - block: support to account io_ticks precisely (Yu Kuai) [task:381405]
  - block: fix the problem of io_ticks becoming smaller (Chunguang Xu) [task:381405]
  - block: account merge of two requests (Konstantin Khlebnikov) [task:381405]
  - block: don't call part_{inc,dec}_in_flight for blk-mq devices (Christoph Hellwig) [task:381405]
  - block: remove the unused q argument to part_in_flight and part_in_flight_rw (Christoph Hellwig) [task:381405]
  - block: move the blk-mq calls out of part_in_flight{,_rw} (Christoph Hellwig) [task:381405]
  - block: avoid double io accounting for flush request (Ming Lei) [task:381405]
  - block/diskstats: accumulate all per-cpu counters in one pass (Konstantin Khlebnikov) [task:381405]
  - block: mark part_in_flight and part_in_flight_rw static (Christoph Hellwig) [task:381405]
  - block: move sysfs methods shared by disks and partitions to genhd.c (Christoph Hellwig) [task:381405]
  - block: add iostat counters for flush requests (Konstantin Khlebnikov) [task:381405]
  - fsl/fman: Fix refcount handling of fman-related devices (Aleksandr Mishin) [task:387475] {CVE-2024-50166}
  - fsl/fman: Save device references taken in mac_probe() (Aleksandr Mishin) [task:387475]
  - net: fman: Use physical address for userspace interfaces (Sean Anderson) [task:387475]
  - net: dpaa: Use mac_dev variable in dpaa_netdev_init (Sean Anderson) [task:387475]
  - net: fman: Clean up error handling (Sean Anderson) [task:387475]
  - net: fman: Map the base address once (Sean Anderson) [task:387475]
  - net: fman: memac: Uninitialized variable on error path (Dan Carpenter) [task:387475]
  - net: fman: Configure fixed link in memac_initialization (Sean Anderson) [task:387475]
  - net: fman: Move struct dev to mac_device (Sean Anderson) [task:387475]
  - net: fman: Get PCS node in per-mac init (Sean Anderson) [task:387475]
  - dpaa_eth: Use random MAC address when none is given (Madalin Bucur) [task:387475]
  - fsl/fman: use resource_size (Julia Lawall) [task:387475]
  - ocfs2: fix a deadlock when commit trans (Joseph Qi) [task:353893]
  - ocfs2: fix race between searching chunks and release journal_head from buffer_head (Gautham Ananthakrishna) [task:353893] {CVE-2021-47493}
  - jbd2: export jbd2_journal_[grab|put]_journal_head (Joseph Qi) [task:353893]
  - net: mdio: fix unbalanced fwnode reference count in mdio_device_release() (Zeng Heng) [task:376343] {CVE-2022-48961}
  - net: mdio: use device_set_node() to setup both fwnode and of (Ioana Ciornei) [task:376343]
  - driver core: add a helper to setup both the of_node and fwnode of a device (Ioana Ciornei) [task:376343]
  - media: av7110: fix a spectre vulnerability (Mauro Carvalho Chehab) [task:390755] {CVE-2024-50289}
  - firmware_loader: Block path traversal (Jann Horn) [task:375665] {CVE-2024-47742}
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (Hyunwoo Kim) [task:396803] {CVE-2024-53103}
  - net: fix data-races around sk->sk_forward_alloc (Wang Liang) [task:396799] {CVE-2024-53124}
  - filemap: Fix bounds checking in filemap_read() (Trond Myklebust) [task:390893] {CVE-2024-50272}
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Ryusuke Konishi) [task:398629] {CVE-2024-53130}
  - netlink: terminate outstanding dump on socket close (Jakub Kicinski) [task:398631] {CVE-2024-53140}
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Ryusuke Konishi) [task:398633] {CVE-2024-53131}
  - netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park) [task:398615] {CVE-2024-53141}
  - security/kysec: Call put_cred() before function return (chengang) [task:390393]
  - fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni) [task:396801] {CVE-2024-53101}
  - ocfs2: uncache inode which has failed entering the group (Dmitry Antipov) [task:396817] {CVE-2024-53112}
  - f2fs: Require FMODE_WRITE for atomic write ioctls (Jann Horn) [task:376135] {CVE-2024-47740}
  - mm: split critical region in remap_file_pages() and invoke LSMs in between (Kirill A. Shutemov) [task:376325]
  - mm: call the security_mmap_file() LSM hook in remap_file_pages() (Shu Han) [task:376325] {CVE-2024-47745}
  - mm/mmap.c: don't unlock VMAs in remap_file_pages() (Liam Howlett) [task:376325]
  - net/mlx5: fs, lock FTE when checking if active (Mark Bloch) [task:396807] {CVE-2024-53121}
  - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (Al Viro) [task:363785] {CVE-2024-45025}
  - s390/cio: rename bitmap_size() -> idset_bitmap_size() (Alexander Lobakin) [task:363785]
  - bitmap: introduce generic optimized bitmap_size() (Alexander Lobakin) [task:363785]
  - tools: move alignment-related macros to new <linux/align.h> (Alexander Lobakin) [task:363785]
  - tools headers UAPI: Sync linux/const.h with the kernel headers (Arnaldo Carvalho de Melo) [task:363785]
  - tools headers: Grab copy of linux/const.h, needed by linux/bits.h (Arnaldo Carvalho de Melo) [task:363785]
  - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (Hans de Goede) [task:387555] {CVE-2024-50134}
  - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Shradha Gupta) [task:391031] {CVE-2024-26820}
  - hv_netvsc: Mark VF as slave before exposing it to user-mode (Long Li) [task:391031]
  - hv_netvsc: use netif_is_bond_master() instead of open code (Juhee Kang) [task:391031]
  - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (Pedro Tammela) [task:392639] {CVE-2024-53057}
  - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() (Dmitry Antipov) [task:380475] {CVE-2024-47713}
  - i40e: fix race condition by adding filter's intermediate sync state (Aleksandr Loktionov) [task:390579] {CVE-2024-53088}
  - i40e: fix i40e_count_filters() to count only active/new filters (Aleksandr Loktionov) [task:390579]
  - bcache: remove unused bch_mark_cache_readahead function def in stats.h (Lin Feng) [task:222079]
  - bcache: avoid oversized read request in cache missing code path (Coly Li) [task:222079] {CVE-2021-47275}
  - bcache: remove bcache device self-defined readahead (Coly Li) [task:222079]
  - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Justin Tee) [task:376073] {CVE-2024-49891}
  - scsi: lpfc: Revise ndlp kref handling for dev_loss_tmo_callbk and lpfc_drop_node (Justin Tee) [task:376073]
  - uprobe: avoid out-of-bounds memory access of fetching args (Qiao Ma) [task:380099] {CVE-2024-50067}
  - f2fs: get rid of online repaire on corrupted directory (Chao Yu) [task:375661] {CVE-2024-47690}
  - security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong) [task:390885] {CVE-2024-50301}
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu) [task:391029] {CVE-2024-53066}
  - usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu) [task:390745] {CVE-2024-50269}
  - media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab) [task:391027] {CVE-2024-53061}
  - sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long) [task:390741] {CVE-2024-50299}
  - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (Zicheng Qu) [task:387919] {CVE-2024-50233}
  - staging: iio: ad9832: use clock framework for clock reference (Marcelo Schmitt) [task:387919]
  - staging: iio: ad9832: organize includes (Marcelo Schmitt) [task:387919]
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (Felix Fietkau) [task:390869] {CVE-2024-50237}
  - cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction (Chen Ridong) [task:390867] {CVE-2024-53054}
  - net/tls: Use RCU API to access tls_ctx->netdev (Maxim Mikityanskiy) [task:207215]
  - net/tls: Remove the context from the list in tls_device_down (Maxim Mikityanskiy) [task:207215]
  - tls: Fix context leak on tls_device_down (Maxim Mikityanskiy) [task:207215]
  - net/tls: Fix use-after-free after the TLS device goes down and up (Maxim Mikityanskiy) [task:207215] {CVE-2021-47131}
  - net/tls: Replace TLS_RX_SYNC_RUNNING with RCU (Maxim Mikityanskiy) [task:207215]
  - userfaultfd: fix checks for huge PMDs (Jann Horn) [task:363981] {CVE-2024-46787}
  - media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab) [task:390895] {CVE-2024-53063}
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (Ido Schimmel) [task:390739] {CVE-2024-50304}
  - HID: core: zero-initialize the report buffer (Jiri Kosina) [task:392647] {CVE-2024-50302}
  - media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab) [task:392635] {CVE-2024-50290}
  - media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab) [task:392643] {CVE-2024-50287}
  - dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai) [task:390571] {CVE-2024-50278}
  - dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai) [task:390571]
  - net: arc: fix the device for dma_map_single/dma_unmap_single (Johan Jonker) [task:391803] {CVE-2024-50295}
  - net: hns3: fix kernel crash when uninstalling driver (Peiyang Wang) [task:391805] {CVE-2024-50296}
  - net/sched: accept TCA_STAB only for root qdisc (Eric Dumazet) [task:375649] {CVE-2024-50039}
  - net: sched: refactor grafting Qdiscs with a parent (Jakub Kicinski) [task:375649]
  - nilfs2: propagate directory read errors from nilfs_find_entry() (Ryusuke Konishi) [task:387959] {CVE-2024-50202}
  - btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana) [task:390749] {CVE-2024-50273}
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner) [task:390611] {CVE-2024-50265}
  - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (Edward Adam Davis) [task:390609] {CVE-2024-50218}
  - USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter) [task:390585] {CVE-2024-50267}
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Hyunwoo Kim) [task:390583] {CVE-2024-50264}
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Kuniyuki Iwashima) [task:387777] {CVE-2024-50154}
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai) [task:390581] {CVE-2024-50279}
  - net: fix crash when config small gso_max_size/gso_ipv4_max_size (Wang Liang) [task:387479] {CVE-2024-50258}
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Sean Christopherson) [task:387973] {CVE-2024-50115}
  - bpf: Prevent tail call between progs attached to different hooks (Xu Kuohai) [task:376069] {CVE-2024-50063}
  - bpf: Fix potential race in tail call compatibility check (Toke Høiland-Jørgensen) [task:376069]
  - Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (Luiz Augusto von Dentz) [task:396699] {CVE-2024-8805, CVE-2024-8805}
  - ext4: fix bad checksum after online resize (Baokun Li) [task:402035]
  - ext4: fix timer use-after-free on failed mount (Xiaxi Shen) [task:376211] {CVE-2024-49960}
  - ext4: update orig_path in ext4_find_extent() (Baokun Li) [task:376209] {CVE-2024-49881}
  - ext4: fix slab-use-after-free in ext4_split_extent_at() (Baokun Li) [task:376087] {CVE-2024-49884}
  - ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path (Theodore Ts'o) [task:376087]
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Baokun Li) [task:344489] {CVE-2024-40998}
  - uprobes: fix kernel info leak via "[uprobes]" vma (Oleg Nesterov) [task:375973] {CVE-2024-49975}
  - Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() (Sungwoo Kim) [task:223107] {CVE-2024-36013}
  - Bluetooth: Remove BT_HS (Luiz Augusto von Dentz) [task:223107]
  - Bluetooth: remove redundant assignment to variable icid (Colin Ian King) [task:223107]
  - Bluetooth: Remove unused declaration amp_read_loc_info() (Yue Haibing) [task:353905]
  - Bluetooth: a2mp: Use struct_size() helper (Gustavo A. R. Silva) [task:353905]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.20.v2401
changelog:
  - KVM: arm64: vgic-its: Fix irq reference release error (张浩) [task:427908]
  - loongarch/kabi: fix kabi issue for "LoongArch: Add AVEC irqchip support" (wangxuewen) [task:390417]
  - LoongArch: Backport page table code (Huacai Chen) [task:390417]
  - LOONGSON: misc: driver for loongson se sdf (Zhao Qunqin) [task:390417]
  - LOONGSON: soc: driver for loongson se (Zhao Qunqin) [task:390417]
  - LoongArch:LSVZ: Replace set_pte with kvm_set_pte (Bibo Mao) [task:390417]
  - LoongArch: KVM: Select huge page only if secondary mmu supports it (Bibo Mao) [task:390417]
  - LoongArch:LSVZ: disable vcpu preempt detection (Bibo Mao) [task:390417]
  - LoongArch:LSVZ: Delay secondary mmu tlb flush until guest entry (Bibo Mao) [task:390417]
  - LoongArch:LSVZ: Remove SW timer switch when vcpu is halt polling (Bibo Mao) [task:390417]
  - LoongArch: Make KASAN usable for variable cpu_vabits (Kanglong Wang) [task:390417]
  - LoongArch: Add AVEC irqchip support (Tianyang Zhang) [task:390417]
  - LoongArch: Get correct cores_per_package for SMT systems (Chao Li) [task:390417]
  - Loongarch: Revert quicklist (zhangtianyang) [task:390417]
  - LoongArch: fixup for hardware ptw (Yi Jun) [task:390417]
  - fix the script release-stable-kernel don't work well (Jiangshan Yi) [task:426781]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.21.v2401
changelog:
  - xdp: fix invalid wait context of page_pool_destroy() (Taehee Yoo) [task:352233] {CVE-2024-43834}
  - hrtimers: Push pending hrtimers away from outgoing CPU earlier (Thomas Gleixner) [task:397891, task:429297]
  - LoongArch:LSVZ: Clear LLBCTL if secondary mmu mapping is changed (Bibo Mao) [task:428996]
  - LoongArch: Add retry support for handle_mm_fault (Bibo Mao) [task:428996]
  - PCI/portdrv: Do not disable PCIE ports for loongarch (Ming Wang) [task:428996]
  - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 (Haowei Zheng) [task:428996]
  - drivers/se: add ACPI support for Loongson SE and SDF driver (Zhao Qunqin) [task:428996]
  - Loongarch: Fix error when build selftest/bpf (Juxin Gao) [task:428996]
  - drivers/irqchip: Disable pci_irq_limit when using avec interrupt controller (gaojuxin) [task:428996]
  - LoongArch: add hypcall to emulate syscall in kvm (NiuGenen) [task:428996]
  - LoongArch: Let pmd_present() return true when splitting pmd (Bibo Mao) [task:428996]
  - Loongarch:Fixup reserve screen info memory for above-4G firmware (zhangtianyang) [task:428996]
  - drivers/iommu: Repair the iommu pass-through TLB refresh and page table mapping problem (Xianglai Li) [task:428996]
  - LoongArch: Revert qspinlock to test-and-set simple lock on VM (Bibo Mao) [task:428996]
  - LoongArch: LSVZ: Detect host pagesize by page table walk (Bibo Mao) [task:428996]
  - LoongArch: LSVZ: Revert allocate page table with numa support (Bibo Mao) [task:428996]
  - PHYTIUM: drivers/perf:phytium: Add PCIe PMU Support for PS240XX (liyouhong) [task:434168]
  - PHYTIUM: drivers/perf:phytium: Add DDR PMU Support for PS240XX (liyouhong) [task:434168]
  - Revert "PHYTIUM: drivers/perf:phytium: Add DDR PMU Support for PS240XX." (liyouhong) [task:434168]
  - Revert "PHYTIUM: drivers/perf:phytium: Add PCIe PMU Support for PS240XX." (liyouhong) [task:434168]
  - PHYTIUM: pswiotlb: Fix kernel panic when the dma phy address is DMA_MAPPING_ERROR (Cui Chao) [task:435962]
  - PHYTIUM: pswiotlb: Add bypass rules of pswiotlb for specific application scenes (Cui Chao) [task:435962]
  - PHYTIUM: pswiotlb: Add support for PS24080 (liyouhong) [task:435962]
  - PHYTIUM: pswiotlb: Adapt for coherent dma memory allocation bypass SMMU (liyouhong) [task:435962]
  - PHYTIUM: pswiotlb: Adapt for coherent dma memory allocation (Cui Chao) [task:399911]
  - PHYTIUM: pswiotlb: Avoid dead lock when expansion occures (liyouhong) [task:399911]
  - PHYTIUM: pswiotlb: Avoid sleep when pswiotlb is used in interrupt contexts (liyouhong) [task:399911]
  - PHYTIUM: pswiotlb: Fix kernel panic when the dma phy address is 0 (Cui Chao) [task:399911]
  - PHYTIUM: pswiotlb: Fix softlockup when PAGE_SIZE is 4KB (Cui Chao) [task:399911]
  - PHYTIUM: pswiotlb: Add version information (liyouhong) [task:399911]
  - PHYTIUM: pswiotlb: Resolve KABI conflicts (liyouhong) [task:399911]
  - PHYTIUM: pswiotlb: Expansion is disabled when remaining memory is insufficient (liyouhong) [task:399911]
  - PHYTIUM: pswiotlb: Reduce overhead when pools are searched (liyouhong) [task:399911]
  - net: sched: Fix setting last executed chain on skb extension (Paul Blakey) [task:397467]
  - bpf: Add struct bpf_redir_neigh forward declaration to BPF helper defs (Andrii Nakryiko) [task:397467]
  - bpf: Fix bpf_redirect_neigh helper api to support supplying nexthop (Toke Høiland-Jørgensen) [task:397467]
  - net: sched: Support specifying a starting chain via tc skb ext (Paul Blakey) [task:397467]
  - net: sched: Change the block's chain list to an rcu list (Paul Blakey) [task:397467]
  - KABI: fix mini_Qdisc ABI breakage (chenyuan) [task:397467]
  - net: sched: Pass ingress block to tcf_classify_ingress (Paul Blakey) [task:397467]
  - net: sched: Introduce ingress classification function (Paul Blakey) [task:397467]
  - net/sched: Set default of CONFIG_NET_TC_SKB_EXT to N (Paul Blakey) [task:397467]
  - sk_buff: drop all skb extensions on free and skb scrubbing (Florian Westphal) [task:397467]
  - net: openvswitch: don't unlock mutex when changing the user_features fails (Tonghao Zhang) [task:397467]
  - net: openvswitch: Set OvS recirc_id from tc chain index (Paul Blakey) [task:397467]
  - md/md-bitmap: Add missing destroy_work_on_stack() (Yuan Can) [task:393427]
  - md/raid1-10: fix casting from randomized structure in raid1_submit_write() (Yu Kuai) [task:393427]
  - md/raid1: avoid soft lockup under high load (Hannes Reinecke) [task:393427]
  - md/raid1-10: limit the number of plugged bio (Yu Kuai) [task:393427]
  - md/raid1-10: don't handle pluged bio by daemon thread (Yu Kuai) [task:393427]
  - md/md-bitmap: add a new helper to unplug bitmap asynchrously (Yu Kuai) [task:393427]
  - md/raid1-10: submit write io directly if bitmap is not enabled (Yu Kuai) [task:393427]
  - md/raid1-10: factor out a helper to submit normal write (Yu Kuai) [task:393427]
  - md/raid1-10: factor out a helper to add bio to plug (Yu Kuai) [task:393427]
  - md: raid1/raid10: drop pending_cnt (Mariusz Tkaczyk) [task:393427]
  - md: drop queue limitation for RAID1 and RAID10 (Mariusz Tkaczyk) [task:393427]
  - HYGON: EDAC/amd64: Fix the calculation of umc base for Hygon family 18h model 4h (Liao Xuan) [task:435723]
  - HYGON: EDAC/amd64: Add support for Hygon family 18h model 8h (Liao Xuan) [task:435723]
  - HYGON: x86/amd_nb: Add support for Hygon family 18h model 8h (Liao Xuan) [task:435723]
  - HYGON: EDAC/amd64: Get instance id for Hygon family 18h model 10h (Liao Xuan) [task:435723]
  - HYGON: EDAC/amd64: Get correct memory type for Hygon family 18h model 10h (Liao Xuan) [task:435723]
  - HYGON: EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h (Liao Xuan) [task:435723]
  - HYGON: EDAC/amd64: Adjust address translation for Hygon family 18h model 10h (Liao Xuan) [task:435723]
  - HYGON: x86/amd_nb: Add helper function to identify Hygon family 18h model 10h (Liao Xuan) [task:435723]
  - HYGON: iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC (Liao Xuan) [task:435723]
  - HYGON: x86/amd_nb: Get DF ID from F5 device for Hygon family 18h model 7h (Liao Xuan) [task:435723]
  - HYGON: EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h (Liao Xuan) [task:435723]
  - HYGON: EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h (Liao Xuan) [task:435723]
  - HYGON: EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h (Liao Xuan) [task:435723]
  - HYGON: EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h (Liao Xuan) [task:435723]
  - HYGON: EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h (Liao Xuan) [task:435723]
  - HYGON: x86/cpu/hygon: Refactor the CPU topology deriving method for Hygon (Liao Xuan) [task:435723]
  - HYGON: x86/amd_nb: Restrict the model range for Hygon m4h series processors (Liao Xuan) [task:435723]
  - HYGON: x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h (Liao Xuan) [task:435723]
  - HYGON: KVM: x86/svm: Add set_guest_pat_wb parameter for non-passthrough application scenarios (Liao Xuan) [task:419887, task:435723]
  - HYGON: pinctrl: Add device HID for Hygon GPIO controller (Liao Xuan) [task:435723]
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (Radu Rendec) [task:439937] {CVE-2025-21785}
  - RDMA/hns: Enable RoCE on virtual functions (Wei Xu) [bug:319931]
  - RDMA/hns: Set parameters of all the functions belong to a PF (Wei Xu) [bug:319931]
  - RDMA/hns: Reserve the resource for the VFs (Wei Xu) [bug:319931]
  - RDMA/hns: Query the number of functions supported by the PF (Wei Xu) [bug:319931]
  - RDMA/hns: Simplify function's resource related command (Xi Wang) [bug:319931]
  - RDMA/hns: Simplify command fields for HEM base address configuration (Xi Wang) [bug:319931]
  - RDMA/hns: Reorganize process of setting HEM (Xi Wang) [bug:319931]
  - RDMA/hns: Refactor reset state checking flow (Xi Wang) [bug:319931]
  - RDMA/hns: Reorganize hns_roce_create_cq() (Yixing Liu) [bug:319931]
  - RDMA/hns: Refactor hns_roce_v2_poll_one() (Weihang Li) [bug:319931]
  - RDMA/hns: Support query information of functions from FW (Wei Xu) [bug:319931]
  - RDMA/hns: Delete redundant judgment when preparing descriptors (Xinhao Liu) [bug:319931]
  - gro_cells: reduce number of synchronize_net() calls (Eric Dumazet) [task:432553]
  - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (Antonio Quartulli) [task:393407] {CVE-2024-53060}
  - net: b44: set pause params only when interface is up (Peter Münster) [task:434220]
  - stackdepot: respect __GFP_NOLOCKDEP allocation flag (Andrey Ryabinin) [task:434220]
  - mtd: diskonchip: work around ubsan link failure (Arnd Bergmann) [task:434220]
  - Bluetooth: hci_core: Fix possible buffer overflow (Luiz Augusto von Dentz) [task:434220]
  - xfrm: Avoid clang fortify warning in copy_to_user_tmpl() (Nathan Chancellor) [task:434220]
  - comedi: comedi_test: Prevent timers rescheduling during deletion (Ian Abbott) [task:434220]
  - btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args (Qu Wenruo) [task:434220]
  - net: stmmac: fix TSO DMA API usage causing oops (Russell King (Oracle)) [task:412193] {CVE-2024-56719}
  - net: stmmac: Fix TSO descriptor with Enhanced Addressing (Jose Abreu) [task:412193]
  - net: stmmac: Fix the problem of tso_xmit (yuqi jin) [task:412193]
  - net: stmmac: Enable support for > 32 Bits addressing in XGMAC (Jose Abreu) [task:412193]
  - security/kysec: read SM3_256 bank use tpm_pcr_read_for_sm3 function (huanfuxi) [task:431169]
  - tpm: add tpm_pcr_read_for_sm3 function for read SM3_256 bank (huanfuxi) [task:431169]
  - eth: bnxt: always recalculate features after XDP clearing, fix null-deref (Jakub Kicinski) [task:428486] {CVE-2025-21682}
  - netfilter: IDLETIMER: Fix for possible ABBA deadlock (Phil Sutter) [task:421021] {CVE-2024-54683}
  - SUNRPC: no need get cache ref when protected by rcu (Yang Erkun) [task:429509]
  - sunrpc: cache : Replace seq_printf with seq_puts (Xu Wang) [task:429509]
  - nfsd: no need get cache ref when protected by rcu (Yang Erkun) [task:429509]
  - SUNRPC: introduce cache_check_rcu to help check in rcu context (Yang Erkun) [task:429509]
  - SUNRPC: make sure cache entry active before cache_show (Yang Erkun) [task:429509] {CVE-2024-53174}
  - SUNRPC: Allow cache lookups to use RCU protection rather than the r/w spinlock (Trond Myklebust) [task:429509]
  - SUNRPC: Refactor sunrpc_cache_lookup (Trond Myklebust) [task:429509]
  - sched/deadline: Fix task_struct reference leak (Wander Lairson Costa) [task:347043] {CVE-2024-41023}
  - fix compile error on MIPS (wangxuewen) [task:429452]
  - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (Luiz Augusto von Dentz) [task:429498] {CVE-2024-56590}
  - skbuff: introduce skb_pull_data (Luiz Augusto von Dentz) [task:429498]
  - drm/dp_mst: Fix MST sideband message body length check (Imre Deak) [task:429526] {CVE-2024-56616}
  - drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (Ma Ke) [task:420525] {CVE-2024-56778}
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (Ma Ke) [task:420269] {CVE-2024-56777}
  - ovl: Filter invalid inodes with missing lookup function (Vasiliy Kovalev) [task:416333] {CVE-2024-56570}
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Yongliang Gao) [task:412179] {CVE-2024-56739}
  - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (Zhen Lei) [task:412169] {CVE-2024-56746}
  - fbdev/sh7760fb: Alloc DMA memory from hardware device (Thomas Zimmermann) [task:412169]
  - 9p/xen: fix release of IRQ (Alex Zenla) [task:412037] {CVE-2024-56704}
  - crypto: bcm - add error check in the ahash_hmac_init function (Chen Ridong) [task:412173] {CVE-2024-56681}
  - ALSA: usb-audio: Fix a DMA to stack memory bug (Dan Carpenter) [task:410485]
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Benoît Sevens) [task:410485] {CVE-2024-53197}
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (Alper Nebi Yasak) [task:410399] {CVE-2024-56539}
  - vfio/pci: Properly hide first-in-list PCIe extended capability (Avihai Horon) [task:410377] {CVE-2024-53214}
  - fs/io_uring: fix missing NOWAIT check for O_DIRECT start write (Jens Axboe) [task:391015] {CVE-2024-53052}
  - mm/swapfile: skip HugeTLB pages for unuse_vma (Liu Shixin) [task:419359] {CVE-2024-50199}
  - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() (Jinjie Ruan) [task:419337]
  - posix-clock: Fix missing timespec64 check in pc_clock_settime() (Jinjie Ruan) [task:419337] {CVE-2024-50195}
  - drm/amd: Guard against bad data for ATIF ACPI method (Mario Limonciello) [task:387573] {CVE-2024-50117}
  - xfs: attach dquots to inode before reading data/cow fork mappings (Darrick J. Wong) [task:426909]
  - ila: serialize calls to nf_register_net_hooks() (Eric Dumazet) [task:425032] {CVE-2024-57900}
  - bpf, sockmap: Several fixes to bpf_msg_pop_data (Zijian Zhang) [task:412183] {CVE-2024-56720}
  - bpf, sockmap: msg_pop_data can incorrecty set an sge length (John Fastabend) [task:412183]
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open() (Trond Myklebust) [task:410439] {CVE-2024-53173}
  - NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid() (Trond Myklebust) [task:410439] {CVE-2024-53173}
  - initramfs: avoid filename buffer overrun (David Disseldorp) [task:398621] {CVE-2024-53142}
  - bpf: Fix out-of-bounds write in trie_get_next_key() (Byeonguk Jeong) [task:387905] {CVE-2024-50262}
  - ext4: avoid use-after-free in ext4_ext_show_leaf() (Baokun Li) [task:376359] {CVE-2024-49889}
  - tipc: fix NULL deref in cleanup_bearer() (Eric Dumazet) [task:410449]
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (Kuniyuki Iwashima) [task:410449] {CVE-2024-56642}
  - scsi: sg: Fix slab-use-after-free read in sg_release() (Suraj Sonawane) [task:410451] {CVE-2024-56631}
  - sh: intc: Fix use-after-free bug in register_intc_controller() (Dan Carpenter) [task:410463] {CVE-2024-53165}
  - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [task:410393] {CVE-2024-56531}
  - ALSA: 6fire: Release resources at card release (Takashi Iwai) [task:410473] {CVE-2024-53239}
  - net/smc: initialize close_work early to avoid warning (Wen Gu) [task:410481] {CVE-2024-56641}
  - bpf: Fix bpf_sk_select_reuseport() memory leak (Michal Luczaj) [task:428533] {CVE-2025-21683}
  - net: Generate reuseport group ID on group creation (Jakub Sitnicki) [task:428533]
  - RDMA/uverbs: Prevent integer overflow issue (Dan Carpenter) [task:425748] {CVE-2024-57890}
  - mac802154: check local interfaces before deleting sdata list (Lizhi Xu) [task:429350] {CVE-2024-57948}
  - jfs: fix shift-out-of-bounds in dbSplit (Ghanshyam Agrawal) [task:429537] {CVE-2024-56597}
  - af_packet: avoid erroring out after sock_init_data() in packet_create() (Ignat Korchagin) [task:429525] {CVE-2024-56606}
  - jfs: fix array-index-out-of-bounds in jfs_readdir (Ghanshyam Agrawal) [task:429545] {CVE-2024-56596}
  - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (Filipe Manana) [task:429500] {CVE-2024-57896}
  - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (Nihar Chaithanya) [task:429494] {CVE-2024-56595}
  - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Yang Erkun) [task:429530] {CVE-2024-56779}
  - scsi: hisi_sas: Create all dump files during debugfs initialization (Yihang Li) [task:429527] {CVE-2024-56588}
  - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [task:429535] {CVE-2024-57807}
  - jffs2: Fix rtime decompressor (Richard Weinberger) [task:429542]
  - jffs2: Prevent rtime decompress memory corruption (Kinsey Moore) [task:429542] {CVE-2024-57850}
  - drm/amd/display: Add check for granularity in dml ceil/floor helpers (Roman Li) [task:429533] {CVE-2024-57922}
  - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Yi Yang) [task:412137] {CVE-2024-56690}
  - leds: class: Protect brightness_show() with led_cdev->led_access mutex (Mukesh Ojha) [task:429495] {CVE-2024-56587}
  - iommu/arm-smmu: Defer probe of clients after smmu device bound (Pratyush Brahma) [task:410455] {CVE-2024-56568}
  - dma-debug: fix a possible deadlock on radix_lock (Levi Yun) [task:429502] {CVE-2024-47143}
  - dma-debug: clean up put_hash_bucket() (Dan Carpenter) [task:429502]
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Zhen Lei) [task:412177] {CVE-2024-56747}
  - net: sched: fix ordering of qlen adjustment (Lion Ackermann) [task:429507] {CVE-2024-53164}
  - PCI: Fix use-after-free of slot->bus on hot remove (Lukas Wunner) [task:429480] {CVE-2024-53194}
  - wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (Norbert van Bolhuis) [task:429493] {CVE-2024-56593}
  - scsi: qla2xxx: Fix use after free on unload (Quinn Tran) [task:429485] {CVE-2024-56623}
  - net: af_can: do not leave a dangling sk pointer in can_create() (Ignat Korchagin) [task:429514] {CVE-2024-56603}
  - wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (Issam Hamdi) [task:429536] {CVE-2024-57899}
  - wifi: mac80211: fix mesh id corruption on 32 bit systems (Felix Fietkau) [task:429536]
  - net: inet6: do not leave a dangling sk pointer in inet6_create() (Ignat Korchagin) [task:429511] {CVE-2024-56600}
  - sched/deadline: Fix warning in migrate_enable for boosted tasks (Wander Lairson Costa) [task:410385] {CVE-2024-56583}
  - selinux: ignore unknown extended permissions (Thiébaud Weksteen) [task:427277] {CVE-2024-57931}
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Liu Jian) [task:412151] {CVE-2024-56688}
  - dm thin: make get_first_thin use rcu-safe list first function (Krister Johansen) [task:427323] {CVE-2025-21664}
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (Suraj Sonawane) [task:410053] {CVE-2024-56662}
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (Andy Shevchenko) [task:412161] {CVE-2024-56723}
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (Andy Shevchenko) [task:412167] {CVE-2024-56724}
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (Andy Shevchenko) [task:412167]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.22.v2401
changelog:
  - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (Imre Deak) [task:429517] {CVE-2024-57798}
  - drm/dp_mst: Introduce new refcounting scheme for mstbs and ports (Lyude Paul) [task:429517]
  - drm/dp_mst: Rename drm_dp_mst_get_validated_(port|mstb)_ref and friends (Lyude Paul) [task:429517]
  - drm/dp_mst: Correct the bug in drm_dp_update_payload_part1() (Wayne Lin) [task:429517]
  - drm/dp_mst: Refactor drm_dp_update_payload_part1() (Lyude Paul) [task:429517]
  - drm/dp_mst: Remove bogus conditional in drm_dp_update_payload_part1() (Lyude Paul) [task:429517]
  - drm/dp_mst: Fix some formatting in drm_dp_payload_send_msg() (Lyude Paul) [task:429517]
  - Bluetooth: hci_qca: Fix the teardown problem for real (Thomas Gleixner) [task:440775]
  - Bluetooth: hci_qca: Use del_timer_sync() before freeing (Steven Rostedt) [task:440775] {CVE-2022-49555}
  - nilfs2: fix possible int overflows in nilfs_fiemap() (Nikita Zhandarovich) [task:441380] {CVE-2025-21736}
  - ftrace: Clean up hash direct_functions on register failures (Song Liu) [task:440761] {CVE-2022-49402}
  - tcp: Fix data-races around sysctl_tcp_base_mss. (Kuniyuki Iwashima) [task:440603] {CVE-2022-49597}
  - ipmr: do not call mr_mfc_uses_dev() for unres entries (Eric Dumazet) [task:440524] {CVE-2025-21719}
  - nbd: don't allow reconnect after disconnect (Yu Kuai) [task:441294] {CVE-2025-21731}
  - nbd: Aovid double completion of a request (Xie Yongji) [task:441294]
  - binfmt_flat: Fix integer overflow bug on 32 bit systems (Dan Carpenter) [task:440786] {CVE-2024-58010}
  - staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances (Stefan Wahren) [task:440751] {CVE-2022-49106}
  - ata: libata: Fix memory leak for error path in ata_host_alloc() (Zheng Qixing) [bug:335381]
  - dlm: fix possible lkb_resource null dereference (Alexander Aring) [task:429489] {CVE-2024-47809}
  - hrtimers: Handle CPU state correctly on hotplug (Koichiro Den) [task:431132] {CVE-2024-57951}
  - io_uring: check for overflows in io_sqe_buffer_register (Pavel Begunkov) [task:419631] {CVE-2024-53187}
  - kcsan: Turn report_filterlist_lock into a raw_spinlock (Marco Elver) [task:429532] {CVE-2024-56610}
  - nvme-pci: fix freeing of the HMB descriptor table (Christoph Hellwig) [task:412165] {CVE-2024-56756}
  - wifi: iwlwifi: mvm: avoid NULL pointer dereference (Miri Korenblit) [task:376287] {CVE-2024-49929}
  - netfilter: xtables: fix typo causing some targets not to load on IPv6 (Pablo Neira Ayuso) [task:376295]
  - netfilter: xtables: avoid NFPROTO_UNSPEC where needed (Florian Westphal) [task:376295] {CVE-2024-50038}
  - netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value (Juhee Kang) [task:376295]
  - netfilter: xtables: Bring SPDX identifier back (Thomas Gleixner) [task:376295]
  - netfilter: xtables: Add snapshot of hardidletimer target (Manoj Basapathi) [task:376295]
  - Bluetooth: fix use-after-free in device_for_each_child() (Dmitry Antipov) [task:410041] {CVE-2024-53237}
  - driver core: Introduce device_find_any_child() helper (Andy Shevchenko) [task:410041]
  - scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (Easwar Hariharan) [task:431135] {CVE-2025-21690}
  - ceph: fix potential use-after-free in ceph_mdsc_build_path (Jeff Layton) [task:429522]
  - sssnic: improve 3SNIC 910/920/930 NIC driver (weiwei1) [bug:276645]
  - PCI: Add ACS quirk for Wangxun FF5xxx NICs (Mengyuan Lou) [task:441941]
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX (Pablo Neira Ayuso) [task:426326] {CVE-2025-21648}
  - netfilter: Use kvcalloc (Joe Perches) [task:426326]
  - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [task:410151] {CVE-2024-56533}
  - nfsd: restore callback functionality for NFSv4.0 (NeilBrown) [task:410431]
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Chuck Lever) [task:410431] {CVE-2024-53217}
  - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (David Hildenbrand) [task:410435] {CVE-2024-56611}
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Takashi Iwai) [task:408539] {CVE-2024-53150}
  - tracing: Prevent bad count for tracing_cpumask_write (Lizhi Xu) [task:417443] {CVE-2024-56763}
  - Revert "vxlan: do not destroy fdb if register_netdevice() is failed" (zhulei) [task:447090]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.23.v2401
changelog:
  - re-update changelog for incoming 4.19.90-89.23.v2401 (Zhengyuan Liu)
  - nvme-core: add reset timeout attribute interface (mengfanhui) [task:431925]
  - nvme: Check for readiness more quickly, to speed up boot time (Josh Triplett) [task:431925]
  - thermal/core: Fix memory leak in __thermal_cooling_device_register() (Yang Yingliang) [task:440493] {CVE-2022-49468}
  - scsi: ufs: bsg: Set bsg_queue to NULL after removal (Guixin Liu) [task:440641] {CVE-2024-54458}
  - bpf: Protect against int overflow for stack access size (Andrei Matei) [task:434197]
  - bpf: Fix verification of indirect var-off stack access (Andrei Matei) [task:434197]
  - bpf: Remove misleading spec_v1 check on var-offset stack read (Luis Gerhorst) [task:434197]
  - bpf: Fix slot type check in check_stack_write_var_off (Kumar Kartikeya Dwivedi) [task:434197]
  - bpf: Allow variable-offset stack access (Andrei Matei) [task:434197]
  - bpf: Check scalar or invalid register in check_helper_mem_access (Lorenz Bauer) [task:434197]
  - bpf: Fix register equivalence tracking. (Alexei Starovoitov) [task:434197]
  - bpf: Propagate scalar ranges through register assignments. (Alexei Starovoitov) [task:434197]
  - bpf: remove unneeded conversion to bool in __mark_reg_unknown (Zou Wei) [task:434197]
  - debug/configs: enable CMA and CMA_DEBUG (wangxuewen) [task:450606]
  -  update changelog for incoming 4.19.90-89.23.v2401 (Zhengyuan Liu)
  - drm/amd/display: Ensure index calculation will not overflow (Alex Hung) [task:364207] {CVE-2024-46726}
  - vxlan: do not destroy fdb if register_netdevice() is failed (Taehee Yoo) [task:447090]
  - hrtimers: fix kabi broken (xueqin Luo) [task:448280, task:448269]
  - hrtimers: fix LTP/xfstes failures by correcting HRTIMERS_DYING position (xueqin Luo) [task:448280, task:448269]
  - nfsd: clear acl_access/acl_default after releasing them (Li Lingfeng) [task:440481] {CVE-2025-21796}
  - enable ROH driver (YANGANG) [bug:333289]
  - OPENEULER: roh/core: Add ROH device driver (YANGANG) [bug:333289]
  - ipv6: Fix soft lockups in fib6_select_path under high next hop churn (Omid Ehtemam-Haghighi) [task:412171] {CVE-2024-56703}
  - xfs: don't walk off the end of a directory data block (lei lu) [task:347099] {CVE-2024-41013}
  - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (Zijian Zhang) [task:410445] {CVE-2024-56633}
  - netfilter: nf_tables: prefer nft_chain_validate (Florian Westphal) [task:346389] {CVE-2024-41042}
  - netfilter: nf_tables: allow loop termination for pending fatal signal (Florian Westphal) [task:346389]
  - netfilter: nftables: add loop check helper function (Pablo Neira Ayuso) [task:346389]
  - bcache: call force_wake_up_gc() if necessary in check_should_bypass() (Coly Li) [task:445847]
  - block: fix integer overflow in BLKSECDISCARD (Alexey Dobriyan) [task:376277] {CVE-2024-49994}
  - ocfs2: free inode when ocfs2_get_init_inode() fails (Tetsuo Handa) [task:410407] {CVE-2024-56630}
  - net: lapb: increase LAPB_HEADER_LEN (Eric Dumazet) [task:410469] {CVE-2024-56659}
  - netfilter: x_tables: fix LED ID check in led_tg_check() (Dmitry Antipov) [task:410373] {CVE-2024-56650}
  - media: i2c: tc358743: Fix crash in the probe error path when using polling (Alexander Shiyan) [task:410369] {CVE-2024-56576}
  - btrfs: ref-verify: fix use-after-free after invalid ref action (Filipe Manana) [task:410453] {CVE-2024-56581}
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit() (Ye Bin) [task:410391] {CVE-2024-53227}
  - media: ts2020: fix null-ptr-deref in ts2020_probe() (Li Zetao) [task:410423] {CVE-2024-56574}
  - ubi: fastmap: Fix duplicate slab cache names while attaching (Zhihao Cheng) [task:410387] {CVE-2024-53172}
  - dccp: Fix memory leak in dccp_feat_change_recv (Ivan Solodovnikov) [task:410471] {CVE-2024-56643}
  - PCI: Fix reset_method_store() memory leak (Todd Kjos) [task:412143] {CVE-2024-56745}
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (Zhen Lei) [task:412149] {CVE-2024-56748}
  - scsi: qedf: Print message during bailout conditions (Saurav Kashyap) [task:412149]
  - scsi: qedf: Cleanup rrq_work after QEDF_CMD_OUTSTANDING is cleared (Shyam Sundar) [task:412149]
  - scsi: qedf: Check for link state before processing LL2 packets and send fipvlan retries (Saurav Kashyap) [task:412149]
  - media: wl128x: Fix atomicity violation in fmc_send_cmd() (Qiu-ji Chen) [task:412191] {CVE-2024-56700}
  - can: j1939: j1939_session_new(): fix skb reference counting (Dmitry Antipov) [task:410389] {CVE-2024-56645}
  - gpio: grgpio: Add NULL check in grgpio_probe (Charles Han) [task:410441] {CVE-2024-56634}
  - gpio: grgpio: use a helper variable to store the address of ofdev->dev (Bartosz Golaszewski) [task:410441]
  - HID: wacom: fix when get product name maybe null pointer (WangYuli) [task:410433] {CVE-2024-56629}
  - usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (Lianqin Hu) [task:410125] {CVE-2024-56670}
  - net: inet: do not leave a dangling sk pointer in inet_create() (Ignat Korchagin) [task:416337] {CVE-2024-56601}
  - arm64: probes: Fix uprobes for big-endian kernels (Mark Rutland) [task:416531] {CVE-2024-50194}
  - arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning (junhua huang) [task:416531]
  - arm64:uprobe fix the uprobe SWBP_INSN in big-endian (junhua huang) [task:416531]
  - dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (Chen Ridong) [task:417437] {CVE-2024-56767}
  - media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (Nikita Zhandarovich) [task:417435] {CVE-2024-56769}
  - mmc: jz4740: Apply DMA engine limits to maximum segment size (Aidan MacDonald) [task:441291] {CVE-2022-49522}
  - media: i2c: dw9714: add optional regulator support (Angus Ainslie) [task:440678] {CVE-2022-49528}
  - sysctl: Fix data races in proc_douintvec_minmax(). (Kuniyuki Iwashima) [task:440639] {CVE-2022-49640}
  - kernel/sysctl.c: define minmax conv functions in terms of non-minmax versions (Zev Weiss) [task:440639]
  - usb: atm: cxacru: fix a flaw in existing endpoint checks (Nikita Zhandarovich) [task:446878]
  - fs/proc: fix softlockup in __read_vmcore (part 2) (Rik van Riel) [task:446878]
  - i2c: pnx: Fix timeout in wait functions (Vladimir Riabchun) [task:446878]
  - drm/amdgpu/atomfirmware: silence UBSAN warning (Alex Deucher) [task:446878]
  - mm: optimize the redundant loop of mm_update_owner_next() (Jinliang Zheng) [task:446878]
  - net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings (Oliver Neukum) [task:446878]
  - perf/core: Fix missing wakeup when waiting for context reference (Haifeng Xu) [task:446878]
  - fs/proc: fix softlockup in __read_vmcore (Rik van Riel) [task:446878]
  - media: dw2102: fix a potential buffer overflow (Mauro Carvalho Chehab) [task:446878]
  - media: mc: mark the media devnode as registered from the, start (Hans Verkuil) [task:446878]
  - media: dw2102: Don't translate i2c read into write (Michael Bunk) [task:446878]
  - filemap: avoid truncating 64-bit offset to 32 bits (Marco Nelissen) [task:428527] {CVE-2025-21665}
  - openvswitch: fix lockup on tx to unregistering netdev with carrier (Ilya Maximets) [task:428511] {CVE-2025-21681}
  - scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock" (Lee Duncan) [task:427978]
  - atm: idt77252: fix a memleak in open_card_ubr0 (Zhipeng Lu) [task:427978]
  - net: ipv4: fix a memleak in ip_setup_cork (Zhipeng Lu) [task:427978]
  - fjes: fix memleaks in fjes_hw_setup (Zhipeng Lu) [task:427978]
  - btrfs: don't warn if discard range is not aligned to sector (David Sterba) [task:427978]
  - net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe (Kunwu Chan) [task:427978]
  - usb: mon: Fix atomicity violation in mon_bin_vma_fault (Gui-Dong Han) [task:427978]
  - wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update (Edward Adam Davis) [task:427978]
  - wifi: cfg80211: free beacon_ies when overridden from hidden BSS (Benjamin Berg) [task:427978]
  - crypto: stm32/crc32 - fix parsing list of devices (Thomas Bourgoin) [task:427978]
  - gpu/drm/radeon: fix two memleaks in radeon_vm_init (Zhipeng Lu) [task:427978]
  - clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() (Kuan-Wei Chiu) [task:427978]
  - clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() (Kuan-Wei Chiu) [task:427978]
  - drm/crtc: fix uninitialized variable use (Jani Nikula) [task:427978]
  - libsubcmd: Fix memory leak in uniq() (Ian Rogers) [task:427978]
  - drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table (Zhipeng Lu) [task:427978]
  - drm/radeon/dpm: fix a memleak in sumo_parse_power_table (Zhipeng Lu) [task:427978]
  - media: cx231xx: fix a memleak in cx231xx_init_isoc (Zhipeng Lu) [task:427978]
  - net/tg3: fix race condition in tg3_reset_task() (Thinh Tran) [task:427978]
  - PNP: ACPI: fix fortify warning (Dmitry Antipov) [task:427978]
  - crypto: ccp - fix memleak in ccp_init_dm_workarea (Dinghao Liu) [task:427978]
  - kdb: Fix a potential buffer overflow in kdb_local() (Christophe JAILLET) [task:427978]
  - media: dvbdev: drop refcount on error path in dvb_device_open() (Dan Carpenter) [task:427978]
  - scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock (Chengfeng Ye) [task:427978]
  - ext4: replace the traditional ternary conditional operator with with max()/min() (Kemeng Shi) [task:427978]
  - drm/crtc: Fix uninit-value bug in drm_mode_setcrtc (Ziqi Zhao) [task:427978]
  - ext4: mark group as trimmed only if it was fully scanned (Dmitry Monakhov) [task:427978]
  - ext4: change s_last_trim_minblks type to unsigned long (Lukas Czerner) [task:427978]
  - ext4: add new helper interface ext4_try_to_trim_range() (Wang Jianchao) [task:427978]
  - ext4: remove the 'group' parameter of ext4_trim_extent (Wang Jianchao) [task:427978]
  - kdb: Censor attempts to set PROMPT without ENABLE_MEM_READ (Daniel Thompson) [task:427978]
  - virtio-blk: don't keep queue frozen during system suspend (Ming Lei) [task:429497] {CVE-2024-57946}
  - virtio-blk: Ensure no requests in virtqueues before deleting vqs. (Yi Sun) [task:429497]
  - net: hns3: don't auto enable misc vector (Jian Shen) [task:426325] {CVE-2025-21651}
  - netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush (Pablo Neira Ayuso) [task:434662]
  - netfilter: nftables: add helper function to set the base sequence number (Pablo Neira Ayuso) [task:434662]
  - macintosh/via-macii: Remove BUG_ON assertions (Finn Thain) [task:434662]
  - lan78xx: Fix race conditions in suspend/resume handling (John Efstathiades) [task:433676]
  - lan78xx: Fix partial packet errors on suspend/resume (John Efstathiades) [task:433676]
  - lan78xx: Add missing return code checks (John Efstathiades) [task:433676]
  - lan78xx: Fix white space and style issues (John Efstathiades) [task:433676]
  - net: usb: lan78xx: Remove lots of set but unused 'ret' variables (Lee Jones) [task:433676]
  - nilfs2: replace WARN_ONs for invalid DAT metadata block requests (Ryusuke Konishi) [task:433676]
  - btrfs: ref-verify: free ref cache before clearing mount opt (Fedor Pchelkin) [task:433676]
  - cachefiles: fix memory leak in cachefiles_add_cache() (Baokun Li) [task:433676]
  - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [task:433676]
  - net: sched: Disallow replacing of child qdisc from one parent to another (Jamal Hadi Salim) [task:431730] {CVE-2025-21700}
  - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (Qasim Ijaz) [task:430210] {CVE-2025-21689}
  - vfio/platform: check the bounds of read/write syscalls (Alex Williamson) [task:430197] {CVE-2025-21687}
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Ignat Korchagin) [task:431136] {CVE-2024-56602}
  - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures (Guilherme G. Piccoli) [task:431123] {CVE-2024-53190}
  - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (Ville Syrjälä) [task:429505] {CVE-2024-56369}
  - drm/modes: Switch to 64bit maths to avoid integer overflow (Ville Syrjälä) [task:429505]
  - rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (Matthieu Baerts (NGI0)) [task:426327] {CVE-2025-21635}
  - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() (Ignat Korchagin) [task:429518] {CVE-2024-56604}
  - usb: cdc-acm: Check control transfer buffer size before access (Jann Horn) [task:441929] {CVE-2025-21704}
  - drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem (Lucas Stach) [task:440801] {CVE-2022-49336}
  - wifi: rtlwifi: fix memory leaks and invalid access at probe error path (Thadeu Lima de Souza Cascardo) [task:442585] {CVE-2024-58063}
  - net: remove two BUG() from skb_checksum_help() (Eric Dumazet) [task:441332] {CVE-2022-49497}
  - net: ethernet: bgmac: Fix refcount leak in bcma_mdio_mii_register (Miaoqian Lin) [task:441333] {CVE-2022-49342}
  - net: bgmac: support MDIO described in DT (Rafał Miłecki) [task:441333]
  - dmaengine: qcom: bam_dma: fix runtime PM underflow (Caleb Connolly) [task:440724] {CVE-2022-49650}
  - dmaengine: qcom: bam_dma: Manage clocks when controlled_remotely is set (Thara Gopinath) [task:440724]
  - ceph: give up on paths longer than PATH_MAX (Max Kellermann) [task:429522] {CVE-2024-53685}
  - ceph: tone down loglevel on ceph_mdsc_build_path warning (Jeff Layton) [task:429522]
  - ipv6: Fix signed integer overflow in __ip6_append_data (Wang Yufen) [task:440725] {CVE-2022-49728}
  - udp6: pass flow in ip6_make_skb together with cork (Pavel Begunkov) [task:440725]
  - ipv6: pass full cork into __ip6_append_data() (Pavel Begunkov) [task:440725]
  - raw: Fix a data-race around sysctl_raw_l3mdev_accept. (Kuniyuki Iwashima) [task:440643] {CVE-2022-49631}
  - ubifs: skip dumping tnc tree when zroot is null (pangliyuan) [task:442592] {CVE-2024-58058}
  - media: uvcvideo: Fix double free in error path (Laurent Pinchart) [task:440566] {CVE-2024-57980}
  - vrf: use RCU protection in l3mdev_l3_out() (Eric Dumazet) [task:440813] {CVE-2025-21791}
  - drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf (Miaoqian Lin) [task:443712] {CVE-2022-49693}
  - drm: msm: Use DRM_DEV_* instead of dev_* (Mamta Shukla) [task:443712]
  - drm: Convert to using %pOFn instead of device_node.name (Rob Herring) [task:443712]
  - drm/msm/a6xx: Poll for HFI responses (Jordan Crouse) [task:443712]
  - drm/msm: dsi: Return errors whan dt parsing fails (Sean Paul) [task:443712]
  - netfilter: use get_random_u32 instead of prandom (Florian Westphal) [task:440743] {CVE-2022-49698}
  - netfilter: nft_meta: place prandom handling in a helper (Florian Westphal) [task:440743]
  - wifi: ath10k: avoid NULL pointer error during sdio remove (Kang Yang) [task:429496] {CVE-2024-56599}
  - comedi: Flush partial mappings in error case (Jann Horn) [task:408549] {CVE-2024-53148}
  - staging: comedi: use dma_mmap_coherent for DMA-able buffer mmap (Ian Abbott) [task:408549]
  - net/ipv6: release expired exception dst cached in socket (Jiri Wiesner) [task:410459] {CVE-2024-56644}
  - crypto: qat - add param check for DH (Giovanni Cabiddu) [task:443713] {CVE-2022-49564}
  - usb: gadget: f_tcm: Don't free command immediately (Thinh Nguyen) [task:443717] {CVE-2024-58055}
  - ext4: avoid remount errors with 'abort' mount option (Jan Kara) [task:387437]
  - ext4: don't set SB_RDONLY after filesystem errors (Jan Kara) [task:387437] {CVE-2024-50191}
  - ext4: fix warning in ext4_handle_inode_extension (Ye Bin) [task:441296] {CVE-2022-49352}
  - ath10k: skip ath10k_halt during suspend for driver state RESTARTING (Abhishek Kumar) [task:441263] {CVE-2022-49519}
  - ath10k: add support for hardware rfkill (Wen Gong) [task:441263]
  - acct: perform last write from workqueue (Christian Brauner) [task:444128] {CVE-2025-21846}
  - kernel/acct.c: use dedicated helper to access rlimit values (Yang Yang) [task:444128]
  - kernel/acct.c: use #elif instead of #end and #elif (Hui Su) [task:444128]
  - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (Yang Yingliang) [task:440729] {CVE-2022-49323}
  - driver core: platform: Reimplement devm_platform_ioremap_resource (Dejin Zheng) [task:440729]
  - drivers: provide devm_platform_get_and_ioremap_resource() (Dejin Zheng) [task:440729]
  - iommu/arm-smmu-v3: check return value after calling platform_get_resource() (Yang Yingliang) [task:440798] {CVE-2022-49319}
  - iommu/arm-smmu-v3: Fix resource_size check (Masahiro Yamada) [task:440798]
  - drop_monitor: fix incorrect initialization order (Gavrilov Ilia) [task:444123] {CVE-2025-21862}
  - media: uvcvideo: Remove dangling pointers (Ricardo Ribalda) [task:440495] {CVE-2024-58002}
  - media: uvcvideo: Only save async fh if success (Ricardo Ribalda) [task:440495]
  - media: davinci: vpif: fix use-after-free on driver unbind (Johan Hovold) [task:440590] {CVE-2021-47653}
  - media: davinci: vpif: fix unbalanced runtime PM enable (Johan Hovold) [task:440590]
  - media: platform: davinci: Use DEFINE_SPINLOCK() for spinlock (Zheng Yongjun) [task:440590]
  - media: vpif: Fix runtime PM imbalance in vpif_probe (Dinghao Liu) [task:440590]
  - block: adjust the statistical timing of 'ios' and 'sectors' (zhanggenjian) [task:430223]
  - rxrpc: Fix call timer start racing with call destruction (David Howells) [task:441367] {CVE-2022-49149}
  - ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe (Miaoqian Lin) [task:440819] {CVE-2022-49486}
  - team: prevent adding a device which is already a team device lower (Octavian Purdila) [task:444119] {CVE-2024-58071}
  - f2fs: remove WARN_ON in f2fs_is_valid_blkaddr (Dongliang Mu) [task:441366] {CVE-2022-49318}
  - mlxsw: core: Allow thermal zone binding to an external cooling device (Vadim Pasternak) [task:440493]
  - ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero (Piotr Skajewski) [task:440499] {CVE-2022-49584}
  - bfq: Update cgroup information before merging bio (Jan Kara) [task:440630] {CVE-2022-49413}
  - Revert "rpmbuild: install pem and x509 to kernel-devel" (zhangxi) [bug:327806]
  - ceph: fix memory leak in ceph_readdir when note_last_dentry returns error (Xiubo Li) [task:440576] {CVE-2022-49107}
  - OPENEULER: net: hns3: fix statistics issue when disable page pool (YANGANG) [bug:333286]
  - OPENEULER: net: hns3: default select PAGE_POOL_STATS (YANGANG) [bug:333286]
  - OPENEULER: net: hns3: add support for page_pool_get_stats (YANGANG) [bug:333286]
  - block: fix that util can be greater than 100% (Yu Kuai) [bug:335388]
  - blk-mq: do not update io_ticks with passthrough requests (Haisu Wang) [bug:335388]
  - blk-mq: Reuse callback in blk_mq_in_flight*() (Pavel Begunkov) [bug:335388]
  - block: update io_ticks when io hang (Zhang Wensheng) [bug:335388]
  - block: add a blk_account_io_merge_bio helper (Konstantin Khlebnikov) [bug:335388, task:381405]
  - ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. (Kuniyuki Iwashima) [task:440400] {CVE-2022-49580}
  - crypto: qat - add param check for RSA (Giovanni Cabiddu) [task:440656] {CVE-2022-49563}
  - ocfs2: handle a symlink read error correctly (Matthew Wilcox (Oracle)) [task:440661] {CVE-2024-58001}
  - tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. (Kuniyuki Iwashima) [task:441342] {CVE-2022-49594}
  - net: hns3: fix oops when unload drivers paralleling (Jian Shen) [task:440405] {CVE-2025-21802}
  - watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe (Miaoqian Lin) [task:440542] {CVE-2022-49373}
  - watchdog: ts4800_wdt: Convert to use device managed functions and other improvements (Guenter Roeck) [task:440542]
  - net: rose: lock the socket in rose_bind() (Eric Dumazet) [task:440441] {CVE-2025-21749}
  - net: rose: add missing dev_put() on error in rose_bind (YueHaibing) [task:440441]
  - batman-adv: fix panic during interface removal (Andy Strohman) [task:440627] {CVE-2025-21781}
  - net: davicom: fix UAF in dm9000_drv_remove (Chenyuan Yang) [task:442351] {CVE-2025-21715}
  - NFC: nci: Add bounds checking in nci_hci_create_pipe() (Dan Carpenter) [task:441347] {CVE-2025-21735}
  - orangefs: fix a oob in orangefs_debug_write (Mike Marshall) [task:441261] {CVE-2025-21782}
  - mips: ralink: fix a refcount leak in ill_acc_of_setup() (Hangyu Hua) [task:440744] {CVE-2022-49117}
  - MIPS: Convert to using %pOFn instead of device_node.name (Rob Herring) [task:440744]
  - crypto: qat - fix memory leak in RSA (Giovanni Cabiddu) [task:440585] {CVE-2022-49566}
  - media: rga: fix possible memory leak in rga_probe (Hangyu Hua) [task:440605] {CVE-2022-49502}
  - media: rockchip/rga: do proper error checking in probe (Kyle Copperfield) [task:440605]
  - media: rockchip/rga: fix error handling in probe (Dan Carpenter) [task:440605]
  - media: rockchip/rga: use pm_runtime_resume_and_get() (Mauro Carvalho Chehab) [task:440605]
  - net: hns3: set port base vlan tbl_sta to false before removing old vlan (Guangbin Huang) [task:440448]
  - net: hns3: add vlan list lock to protect vlan list (Jian Shen) [task:440448] {CVE-2022-49182}
  - net: hns3: fix port base vlan add fail when concurrent with reset (Jian Shen) [task:440448]
  - net: hns3: split function hclge_update_port_base_vlan_cfg() (Jian Shen) [task:440448]
  - net: hns3: fix duplicate node in VLAN list (Guojia Liao) [task:440448]
  - RDMA/mlx5: Fix memory leak in error flow for subscribe event routine (Yongzhi Liu) [task:441916] {CVE-2022-49206}
  - linux/dim: Fix divide by 0 in RDMA DIM (Tao Liu) [task:441301] {CVE-2022-49670}
  - mpam: Fix several section mismatch warnings (Enze Li) [task:441567]
  - usb: xhci: Fix NULL pointer dereference on certain command aborts (Michal Pecio) [task:440504] {CVE-2024-57981}
  - usb: xhci: Add timeout argument in address_device USB HCD callback (Hardik Gajjar) [task:440504]
  - wifi: mac80211: fix qos on mesh interfaces (Felix Fietkau) [task:441302]
  - wifi: mac80211: fix queue selection for mesh/OCB interfaces (Felix Fietkau) [task:441302] {CVE-2022-49646}
  - mac80211: when using iTXQ, select the queue in ieee80211_subif_start_xmit (Felix Fietkau) [task:441302]
  - i2c: dev: check return value when calling dev_set_name() (Andy Shevchenko) [task:441922] {CVE-2022-49046}
  - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (Dmitry Antipov) [task:440617] {CVE-2024-58014}
  - PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events (Miaoqian Lin) [task:440704] {CVE-2022-49668}
  - PM / devfreq: exynos-events: change matching code during probe (Lukasz Luba) [task:440704]
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (Kuan-Wei Chiu) [task:440747] {CVE-2024-58017}
  - udp: Fix a data-race around sysctl_udp_l3mdev_accept. (Kuniyuki Iwashima) [task:440506] {CVE-2022-49577}
  - net: rose: fix timer races against user threads (Eric Dumazet) [task:440589] {CVE-2025-21718}
  - dm mirror log: clear log bits up to BITS_PER_LONG boundary (Mikulas Patocka) [task:441371]
  - dm mirror log: round up region bitmap size to BITS_PER_LONG (Mikulas Patocka) [task:441371] {CVE-2022-49710}
  - USB: hub: Ignore non-compliant devices with too many configs or interfaces (Alan Stern) [task:441287] {CVE-2025-21776}
  - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (Liu Jian) [task:410467] {CVE-2024-53168}
  - net: make sock_inuse_add() available (Eric Dumazet) [task:410467]
  - partitions: mac: fix handling of bogus partition table (Jann Horn) [task:440508] {CVE-2025-21772}
  - media: i2c: dw9714: Disable the regulator when the driver fails to probe (Zheyu Ma) [task:440678] {CVE-2022-49528}


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.24.v2401
changelog:
  - secondly update changelog for incoming 4.19.90-89.24.v2401 (Zhengyuan Liu)
  - Revert "LoongArch: Increase ARCH_DMA_MINALIGN up to 16" (Wang Yan) [task:478151]
  - update changelog for incoming 4.19.90-89.24.v2401 (Zhengyuan Liu)
  - net: fix race between napi kthread mode and busy poll (Wei Wang) [task:466046]
  - neigh: fix ARP retransmit timer guard (Hangbin Liu) [task:470107]
  - neigh: support smaller retrans_time settting (Hangbin Liu) [task:470107]
  - net: link_watch: prevent starvation when processing linkwatch wq (Yunsheng Lin) [task:470107]
  - HYGON: crypto: ccp: Fix the issue of TDM support detection failure on Hygon platforms without psp firmware support. (niuyongwen) [bug:337403]
  - HYGON: perf/x86/uncore: Add support for Hygon family 18h model 4-8h and 10h DF PMU (wudandan) [bug:340362]
  - iommu/amd: Fix potential @entry null deref (Joao Martins) [task:457728]
  - iommu/amd: Disable AMD IOMMU if CMPXCHG16B feature is not supported (Suravee Suthikulpanit) [task:457728]
  - iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (Suravee Suthikulpanit) [task:457728]
  - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (Suravee Suthikulpanit) [task:457728]
  - net: fix a compilation (xiaolinkui) [task:468687]
  - Revert "loongarch/kabi: fix kabi issue for "LoongArch: Add AVEC irqchip support"" (wangxuewen) [task:471631]
  - loongarch/kabi: fix kabi issue for "LoongArch: Remove shm_align_mask and use SHMLBA instead" (wangxuewen) [task:458327]
  - udp: Deal with race between UDP socket address change and rehash (Stefano Brivio) [task:469817] {CVE-2024-57974}
  - Revert "udp: Deal with race between UDP socket address change and rehash" (taowei) [task:469817]
  - Kdump: Resolve Second Kernel Boot Failure (duanchenghao) [bug:353716, bug:353689]
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (Sean Christopherson) [task:442641] {CVE-2024-58083}
  - thermal: int340x: Add NULL check for adev (Chenyuan Yang) [task:459932] {CVE-2025-23136}
  - fbdev: smscufx: fix error handling code in ufx_usb_probe (Dongliang Mu) [task:448819] {CVE-2022-49741}
  - video: fbdev: don't print error message on framebuffer_alloc() failure (Bartlomiej Zolnierkiewicz) [task:448819]
  - video: fbdev: intelfb: return -ENOMEM on framebuffer_alloc() failure (Bartlomiej Zolnierkiewicz) [task:448819]
  - video: fbdev: s3c-fb: return -ENOMEM on framebuffer_alloc() failure (Bartlomiej Zolnierkiewicz) [task:448819]
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (Pavel Paklov) [task:466598] {CVE-2025-37927}
  - bpf: avoid holding freeze_mutex during mmap operation (Andrii Nakryiko) [task:444118] {CVE-2025-21853}
  - bpf: Prevent mmap()'ing read-only maps as writable (Andrii Nakryiko) [task:444118]
  - bpf: Prevent re-mmap()'ing BPF map as writable for initially r/o mapping (Andrii Nakryiko) [task:444118]
  - qibfs: fix _another_ leak (Al Viro) [task:466584] {CVE-2025-37983}
  - wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() (Wentao Liang) [task:466615] {CVE-2025-37990}
  - wifi: wl1251: fix memory leak in wl1251_tx_work (Abdun Nihaal) [task:466597] {CVE-2025-37982}
  - drm/nouveau: prime: fix ttm_bo_delayed_delete oops (Chris Bainbridge) [task:460149] {CVE-2025-37765}
  - driver core: fix potential NULL pointer dereference in dev_uevent() (Dmitry Torokhov) [task:462069] {CVE-2025-37800}
  - driver core: introduce device_set_driver() helper (Dmitry Torokhov) [task:462069]
  - driver core: bus: implement bus_get/put() without the private pointer (Greg Kroah-Hartman) [task:462069]
  - driver core: add local subsys_get and subsys_put functions (Greg Kroah-Hartman) [task:462069]
  - Revert "driver core: Fix uevent_show() vs driver detach race" (Greg Kroah-Hartman) [task:462069]
  - usb: dwc3: gadget: Replace list_for_each_entry_safe() if using giveback (Wesley Cheng) [task:440766] {CVE-2022-49398}
  - tty: serial: fsl_lpuart: fix race on RX DMA shutdown (Alexander Sverdlin) [task:461247] {CVE-2023-53094}
  - misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (Kunihiko Hayashi) [task:460201] {CVE-2025-23140}
  - i2c: cros-ec-tunnel: defer probe if parent EC is not present (Thadeu Lima de Souza Cascardo) [task:460209] {CVE-2025-37781}
  - xenbus: Use kref to track req lifetime (Jason Andryuk) [task:466603] {CVE-2025-37949}
  - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init (Gabriel Shahrouzi) [task:462560] {CVE-2025-37878}
  - ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (Murad Masimov) [task:440505] {CVE-2025-21792}
  - scsi: hisi_sas: Free irq vectors in order for v3 HW (Qi Liu) [task:440479] {CVE-2022-49118}
  - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (Cong Wang) [task:419353]
  - net/sched: netem: account for backlog updates from child qdisc (Martin Ottens) [task:419353] {CVE-2024-56770}
  - net: netem: use a list in addition to rbtree (Peter Oskolkov) [task:419353]
  - wifi: rtlwifi: remove unused check_buddy_priv (Thadeu Lima de Souza Cascardo) [task:442589] {CVE-2024-58072}
  - rtlwifi: replace usage of found with dedicated list iterator variable (Jakob Koschel) [task:442589]
  - rtlwifi: Fix errors in spacing in wifi.h (Larry Finger) [task:442589]
  - rtlwifi: Fix problems with block comments in wifi.h (Larry Finger) [task:442589]
  - rtlwifi: Remove CamelCase variables from base code (Larry Finger) [task:442589]
  - batman-adv: Drop unmanaged ELP metric worker (Sven Eckelmann) [task:439944] {CVE-2025-21823}
  - batman-adv: Ignore neighbor throughput metrics in error case (Sven Eckelmann) [task:439944]
  - batman-adv: ELP - use wifi tx bitrate as fallback (René Treffer) [task:439944]
  - list: fix a data-race around ep->rdllist (Kuniyuki Iwashima) [task:440750] {CVE-2022-49443}
  - list: introduce list_is_head() helper and re-use it in list.h (Andy Shevchenko) [task:440750]
  - net: phy: leds: fix memory leak (Qingfang Deng) [task:466413] {CVE-2025-37989}
  - LoongArch: Increase ARCH_DMA_MINALIGN up to 16 (Huacai Chen) [task:459709] {CVE-2025-22049}
  - sched/core: Prevent rescheduling when interrupts are disabled (Thomas Gleixner) [task:448841] {CVE-2023-52935}
  - s390/sclp: Add check for get_zeroed_page() (Haoxiang Li) [task:462569] {CVE-2025-37883}
  - f2fs: fix to do sanity check on node blkaddr in truncate_node() (Chao Yu) [task:416339] {CVE-2024-56692}
  - f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() (Chao Yu) [task:440555] {CVE-2022-49380}
  - f2fs: do not count ENOENT for error case (Jaegeuk Kim) [task:439941]
  - f2fs: avoid infinite loop to flush node pages (Jaegeuk Kim) [task:439941] {CVE-2022-49317}
  - f2fs: fix wrong condition check when failing metapage read (Jaegeuk Kim) [task:439941]
  - f2fs: avoid an infinite loop in f2fs_sync_dirty_inodes (Jaegeuk Kim) [task:439941]
  - f2fs: set SBI_NEED_FSCK flag when inconsistent node block found (Weichao Guo) [task:439941]
  - scsi: pm8001: Fix task leak in pm8001_send_abort_all() (Damien Le Moal) [task:440632] {CVE-2022-49120}
  - scsi: pm80xx: Fix command issue sizing (peter chang) [task:440632]
  - scsi: pm80xx: Squashed logging cleanup changes (peter chang) [task:440632]
  - xfs: don't include bnobt blocks when reserving free block pool (Darrick J. Wong) [task:464914]
  - xfs: set aside allocation btree blocks from block reservation (Brian Foster) [task:464914]
  - xfs: introduce in-core global counter of allocbt blocks (Brian Foster) [task:464914]
  - btrfs: always report error in run_one_delayed_ref() (Qu Wenruo) [task:448850] {CVE-2022-49761}
  - xfs: fix leaked dealloc blocks accounting (Shida Zhang) [task:467725]
  - kernel.spec: support 4knew Compilation method (lihaofeng) [task:448372]
  - mmu_notifiers: Add code replication hook support on NUMA systems (huhai) [task:449356]
  - scsi: st: Fix array overflow in st_setup() (Kai Mäkisara) [task:462440] {CVE-2025-37857}
  - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (Patrisious Haddad) [task:459937] {CVE-2025-22086}
  - RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (Chen Zhongjin) [task:460250] {CVE-2022-49925}
  - IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition (Niels Dossche) [task:441319] {CVE-2022-49089}
  - usbnet: gl620a: fix endpoint checking in genelink_bind() (Nikita Zhandarovich) [task:448793] {CVE-2025-21877}
  - netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [task:410153] {CVE-2024-56637}
  - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (Eric Dumazet) [task:426473] {CVE-2025-21653}
  - ax25: rcu protect dev->ax25_ptr (Eric Dumazet) [task:440765] {CVE-2025-21812}
  - ax25: Use kernel universal linked list to implement ax25_dev_list (Duoming Zhou) [task:440765]
  - page_pool: avoid infinite loop to schedule delayed worker (Jason Xing) [task:462587] {CVE-2025-37859}
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Cong Wang) [task:461022] {CVE-2025-37798}
  - tipc: fix memory leak in tipc_link_xmit (Tung Nguyen) [task:461213] {CVE-2025-37757}
  - i40e: Fix kernel crash during reboot when adapter is in recovery mode (Ivan Vecera) [task:461215] {CVE-2023-53114}
  - net_sched: hfsc: Fix a UAF vulnerability in class handling (Cong Wang) [task:461360] {CVE-2025-37797}
  - tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (Tung Nguyen) [task:461966] {CVE-2025-37824}
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (Jinghao Jia) [task:421045] {CVE-2024-53680}
  - f2fs: fix race in concurrent f2fs_stop_gc_thread (Long Li) [task:410149] {CVE-2024-53218}
  - f2fs: use spin_lock to avoid hang (Jaegeuk Kim) [task:440817] {CVE-2022-49169}
  - btrfs: do not double complete bio on errors during compressed reads (Josef Bacik) [task:440568] {CVE-2022-49167}
  - btrfs: fix use-after-free when attempting to join an aborted transaction (Filipe Manana) [task:440409] {CVE-2025-21753}
  - net: bcmgenet: Revert "Use stronger register read/writes to assure ordering" (Jeremy Linton) [task:441340]
  - net: bcmgenet: Use stronger register read/writes to assure ordering (Jeremy Linton) [task:441340] {CVE-2022-49194}
  - net: systemport: fix potential memory leak in bcm_sysport_xmit() (Wang Hai) [task:387641] {CVE-2024-50171}
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (Quang Le) [task:434029] {CVE-2025-21702}
  - net_sched: sch_fifo: implement lockless __fifo_dump() (Eric Dumazet) [task:434029]
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() (Marcel Hamer) [task:440550] {CVE-2025-21744}
  - netrom: check buffer length before accessing it (Ilya Shchipletsov) [task:425034] {CVE-2024-57802}
  - SUNRPC: Fix the svc_deferred_event trace class (Chuck Lever) [task:439956] {CVE-2022-49065}
  - SUNRPC: Clean up request deferral tracepoints (Chuck Lever) [task:439956]
  - SUNRPC: Simplify defining common RPC trace events (Chuck Lever) [task:439956]
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung (Arnaud Lecomte) [task:460175] {CVE-2025-37749}
  - can: j1939: j1939_send_one(): fix missing CAN header initialization (Oliver Hartkopp) [task:460174] {CVE-2022-49845}
  - wifi: at76c50x: fix use after free access in at76_disconnect (Abdun Nihaal) [task:460161] {CVE-2025-37796}
  - net: vlan: don't propagate flags on open (Stanislav Fomichev) [task:460234] {CVE-2025-23163}
  - sctp: detect and prevent references to a freed transport in sendmsg (Ricardo Cañuelo Navarro) [task:460144] {CVE-2025-23142}
  - net: openvswitch: fix nested key length validation in the set() action (Ilya Maximets) [task:460141] {CVE-2025-37789}
  - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (Debin Zhu) [task:459581] {CVE-2025-22063}
  - atm: Fix NULL pointer dereference (Minjoong Kim) [task:459567] {CVE-2025-22018}
  - net_sched: skbprio: Remove overly strict queue assertions (Cong Wang) [task:458462] {CVE-2025-38637}
  - f2fs: fix missing free nid in f2fs_handle_failed_inode (Jaegeuk Kim) [task:440776] {CVE-2022-49255}
  - ubifs: Fix to add refcount once page is set private (Zhihao Cheng) [task:439948] {CVE-2021-47635}
  - include/linux/pagemap.h: introduce attach/detach_page_private (Guoqing Jiang) [task:439948]
  - btrfs: use latest_dev in btrfs_show_devname (Anand Jain) [task:330554] {CVE-2021-47599}
  - btrfs: convert latest_bdev type to btrfs_device and rename (Anand Jain) [task:330554] {CVE-2021-47599}
  - ext4: fix access to uninitialised lock in fc replay path (Luis Henriques (SUSE)) [task:376395] {CVE-2024-50014}
  - media: streamzap: fix race between device disconnection and urb callback (Murad Masimov) [task:459565] {CVE-2025-22027}
  - bpf: Fix deadlock between rcu_tasks_trace and event_mutex. (Alexei Starovoitov) [task:462409] {CVE-2025-37884}
  - bpf: Fix kmemleak warning for percpu hashmap (Yonghong Song) [task:461956] {CVE-2025-37807}
  - net: annotate races around sk->sk_bound_dev_if (Eric Dumazet) [task:439947] {CVE-2022-49420}
  - drm/scheduler: fix fence ref counting (Christian König) [task:460223] {CVE-2022-49829}
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Matthieu Baerts (NGI0)) [task:426896] {CVE-2025-21640}
  - fs: relax assertions on failure to encode file handles (Amir Goldstein) [task:429490] {CVE-2024-57924}
  - xfs: fix freeing speculative preallocations for preallocated files (Christoph Hellwig) [task:449979]
  - xfs: update fork seq counter on data fork changes (Brian Foster) [task:449979]
  - net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition (Kaixin Wang) [task:387977] {CVE-2024-47747}
  - fs: add a new SB_I_NOUMASK flag (Jeff Layton) [task:438543, task:442990]
  - NFS: Further optimisations for 'ls -l' (Trond Myklebust) [task:438543, task:442990]
  - NFS: Support larger readdir buffers (Trond Myklebust) [task:438543, task:442990]
  - NFS: Remove unnecessary kmap in nfs_readdir_xdr_to_array() (Trond Myklebust) [task:438543, task:442990]
  - NFS: Clean up nfs_readdir_page_filler() (Trond Myklebust) [task:438543, task:442990]
  - NFS: Clean up directory array handling (Trond Myklebust) [task:438543, task:442990]
  - nfs: pass the correct prototype to read_cache_page (Christoph Hellwig) [task:438543, task:442990]
  - NFS: Clean up readdir struct nfs_cache_array (Trond Myklebust) [task:438543, task:442990]
  - nfs: Replace zero-length array with flexible-array member (Gustavo A. R. Silva) [task:438543, task:442990]
  - NFS: Ensure contents of struct nfs_open_dir_context are consistent (Trond Myklebust) [task:438543, task:442990]
  - NFS: Use the 64-bit server readdir cookies when possible (Trond Myklebust) [task:438543, task:442990]
  - nfs: optimise readdir cache page invalidation (Dai Ngo) [task:438543, task:442990]
  - clocksource: Skip watchdog check for large watchdog intervals (Jiri Wiesner) [task:431250]
  - clocksource: Reduce the default clocksource_watchdog() retries to 2 (Waiman Long) [task:457161]
  - clocksource: Avoid accidental unstable marking of clocksources (Waiman Long) [task:457161]
  - clocksource: Print deviation in nanoseconds when a clocksource becomes unstable (Feng Tang) [task:431250]
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (Cong Wang) [task:461961] {CVE-2025-37823}
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy (Matthieu Baerts (NGI0)) [task:426435] {CVE-2025-21639}
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Matthieu Baerts (NGI0)) [task:426436] {CVE-2025-21638}
  - spi: mpc52xx: Add cancel_work_sync before module remove (Pei Xiao) [task:421039] {CVE-2024-50051}
  - net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads (Jonathan Currier) [task:461948] {CVE-2025-37833}
  - tcp/dccp: Add another way to allocate local ports in bind() (luoxuanqiang) [task:452905]
  - netfilter: socket: Lookup orig tuple for IPv6 SNAT (Maxim Mikityanskiy) [task:459941] {CVE-2025-22021}
  - SSSNIC: fix a compilation of 3snic drivers (xiaolinkui) [task:458713]
  - net/rose: prevent integer overflows in rose_setsockopt() (Nikita Zhandarovich) [task:441317] {CVE-2025-21711}
  - netfilter: conntrack: revisit the gc initial rescheduling bias (Antoine Tenart) [task:441321]
  - netfilter: conntrack: fix the gc rescheduling delay (Antoine Tenart) [task:441321]
  - ip: Fix data-races around sysctl_ip_prot_sock. (Kuniyuki Iwashima) [task:440771] {CVE-2022-49578}
  - net: port < inet_prot_sock(net) --> inet_port_requires_bind_service(net, port) (Maciej Żenczykowski) [task:440771]
  - net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (Jakub Kicinski) [task:440770] {CVE-2025-21768}
  - udp: Deal with race between UDP socket address change and rehash (Stefano Brivio) [task:441338] {CVE-2024-57974}
  - ipv6: udp: constify 'struct net' parameter of socket lookups (Eric Dumazet) [task:441338]
  - udp: constify 'struct net' parameter of socket lookups (Eric Dumazet) [task:441338]
  - udp: Remove unused variable/function (exact_dif) (Tim Beale) [task:441338]
  - udp: Remove unused parameter (exact_dif) (Tim Beale) [task:441338]
  - net: ipv6: drop unneeded likely() call around IS_ERR() (Enrico Weigelt) [task:441338]
  - udp6: add missing rehash callback to udplite (Alexey Kodanev) [task:441338]
  - net: udp6: prefer listeners bound to an address (Peter Oskolkov) [task:441338]
  - netfilter: conntrack: revisit gc autotuning (Florian Westphal) [task:441321] {CVE-2022-49110}
  - net: fix geneve_opt length integer overflow (Lin Ma) [task:458450] {CVE-2025-22055}
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled (Filipe Manana) [task:429487] {CVE-2024-56759}
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Nikolay Kuratov) [task:427427] {CVE-2024-57938}
  - tcp: Fix data-races around sysctl_tcp_l3mdev_accept. (Kuniyuki Iwashima) [task:440800] {CVE-2022-49599}
  - tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() (Eric Dumazet) [task:440800]
  - usb: gadget: f_midi: fix MIDI Streaming descriptor lengths (John Keeping) [task:442582] {CVE-2025-21835}
  - igb: Fix potential invalid memory access in igb_init_module() (Yuan Can) [task:421029] {CVE-2024-52332}
  - quota: flush quota_release_work upon quota writeback (Ojaswin Mujoo) [task:420523] {CVE-2024-56780}
  - ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe (Miaoqian Lin) [task:440548] {CVE-2022-49241}
  - ASoC: atmel: sam9x5_wm8731: use devm_snd_soc_register_card() (Yang Yingliang) [task:440548]
  - bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener (Jakub Sitnicki) [task:448847] {CVE-2023-52986}
  - ip: Fix data-races around sysctl_ip_fwd_update_priority. (Kuniyuki Iwashima) [task:440687] {CVE-2022-49603}
  - xfs: fix log recovery when unknown rocompat bits are set (Darrick J. Wong) [task:450130]
  - xfs: allow inode inactivation during a ro mount log recovery (Darrick J. Wong) [task:450130]
  - bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals (Daniel Borkmann) [task:441339] {CVE-2022-49658}
  - smb: client: Add check for next_buffer in receive_encrypted_standard() (Haoxiang Li) [task:444124] {CVE-2025-21844}
  - cifs: fix potential memory leaks in session setup (Paulo Alcantara) [task:448797] {CVE-2023-53008}
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end (Ming-Hung Tsai) [task:426323] {CVE-2024-57929}
  - RDMA/core: Fix ib block iterator counter overflow (Yonatan Nachum) [task:448788] {CVE-2023-53026}
  - ice: always check VF VSI pointer values (Jacob Keller) [task:440513] {CVE-2022-49516}
  - ipv4: Fix data-races around sysctl_fib_multipath_hash_policy. (Kuniyuki Iwashima) [task:440707] {CVE-2022-49579}
  - tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. (Kuniyuki Iwashima) [task:440692] {CVE-2022-49585}
  - tcp: disable TFO blackhole logic by default (Wei Wang) [task:440692]
  - tcp: Fix a data-race around sysctl_tcp_ecn_fallback. (Kuniyuki Iwashima) [task:441283] {CVE-2022-49630}
  - netfilter: nf_tables: fix crash when nf_trace is enabled (Florian Westphal) [task:440633]
  - netfilter: nf_tables: avoid skb access on nf_stolen (Florian Westphal) [task:440633] {CVE-2022-49622}
  - netfilter: nf_tables: consolidate rule verdict trace call (Pablo Neira Ayuso) [task:440633]
  - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (Haoxiang Li) [task:444125] {CVE-2025-21848}
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Kuniyuki Iwashima) [task:444121]
  - geneve: Fix use-after-free in geneve_find_dev(). (Kuniyuki Iwashima) [task:444121] {CVE-2025-21858}
  - remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region (Miaoqian Lin) [task:440416] {CVE-2022-49188}
  - remoteproc: qcom_q6v5_mss: Extract mba/mpss from memory-region (Sibi Sankar) [task:440416]
  - ext4: fix race condition between ext4_write and ext4_convert_inline_data (Baokun Li) [task:439963] {CVE-2022-49414}
  - ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow (Baokun Li) [task:449973]
  - ext4: avoid potential data overflow in next_linear_group (Kemeng Shi) [task:449973]
  - ext4: use locality group preallocation for small closed files (Jan Kara) [task:449973]
  - ext4: avoid unnecessary spreading of allocations among groups (Jan Kara) [task:449973]
  - ext4: discard preallocations before releasing group lock (Jan Kara) [task:449973]
  - ext4: fix dead loop in ext4_mb_new_blocks (Ye Bin) [task:449973]
  - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS (Baokun Li) [task:449973]
  - ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow (Baokun Li) [task:449973]
  - ext4: add two helper functions extent_logical_end() and pa_logical_end() (Baokun Li) [task:449973]
  - ext4: fix rbtree traversal bug in ext4_mb_use_preallocated (Ojaswin Mujoo) [task:449973]
  - ext4: mballoc: Remove useless setting of ac_criteria (Ritesh Harjani) [task:449973]
  - ext4: add EXT4_MB_HINT_GOAL_ONLY test in ext4_mb_use_preallocated (Kemeng Shi) [task:449973]
  - ext4: Stop searching if PA doesn't satisfy non-extent file (Ojaswin Mujoo) [task:449973]
  - ext4: Use rbtrees to manage PAs instead of inode i_prealloc_list (Ojaswin Mujoo) [task:449973]
  - ext4: Refactor code related to freeing PAs (Ojaswin Mujoo) [task:449973]
  - ext4: Convert pa->pa_inode_list and pa->pa_obj_lock into a union (Ojaswin Mujoo) [task:449973]
  - ext4: limit the length of per-inode prealloc list (brookxu) [task:449973]
  - ext4: reorganize if statement of ext4_mb_release_context() (brookxu) [task:449973]
  - ext4: add mb_debug logging when there are lost chunks (brookxu) [task:449973]
  - ext4: mballoc: add blocks to PA list under same spinlock after allocating blocks (Ritesh Harjani) [task:449973]
  - ext4: use built-in RCU list checking in mballoc (Madhuparna Bhowmik) [task:449973]
  - ext4: Abstract out overlap fix/check logic in ext4_mb_normalize_request() (Ojaswin Mujoo) [task:449973]
  - ext4: Move overlap assert logic into a separate function (Ojaswin Mujoo) [task:449973]
  - ext4: Refactor code in ext4_mb_normalize_request() and ext4_mb_use_preallocated() (Ojaswin Mujoo) [task:449973]
  - ext4: avoid unnecessary pointer dereference in ext4_mb_normalize_request (Kemeng Shi) [task:449973]
  - ext4: Add allocation criteria 1.5 (CR1_5) (Ojaswin Mujoo) [task:449973]
  - ext4: Add per CR extent scanned counter (Ojaswin Mujoo) [task:449973]
  - ext4: Abstract out logic to search average fragment list (Ojaswin Mujoo) [task:449973]
  - ext4: fixup possible uninitialized variable access in ext4_mb_choose_next_group_cr1() (Jan Kara) [task:449973]
  - ext4: use is_power_of_2 helper in ext4_mb_regular_allocator (Kemeng Shi) [task:449973]
  - ext4: Avoid scanning smaller extents in BG during CR1 (Ojaswin Mujoo) [task:449973]
  - ext4: Add counter to track successful allocation of goal length (Ojaswin Mujoo) [task:449973]
  - ext4: Convert mballoc cr (criteria) to enum (Ojaswin Mujoo) [task:449973]
  - ext4: use buckets for cr 1 block scan instead of rbtree (Jan Kara) [task:449973]
  - ext4: fix sparse warnings (Theodore Ts'o) [task:449973]
  - ext4: add proc files to monitor new structures (Harshad Shirwadkar) [task:449973]
  - ext4: make mballoc try target group first even with mb_optimize_scan (Jan Kara) [task:449973]
  - ext4: mballoc: add more mb_debug() msgs (Ritesh Harjani) [task:449973]
  - ext4: mballoc: refactor ext4_mb_show_ac() (Ritesh Harjani) [task:449973]
  - ext4: improve cr 0 / cr 1 group scanning (Harshad Shirwadkar) [task:449973]
  - ext4: add ability to return parsed options from parse_options (Harshad Shirwadkar) [task:449973]
  - ext4: add MB_NUM_ORDERS macro (Harshad Shirwadkar) [task:449973]
  - ext4: optimize the implementation of ext4_mb_good_group() (brookxu) [task:449973]
  - ext4: add prefetch_block_bitmaps mount option (Theodore Ts'o) [task:449973, addresses-google-bug:159488342]
  - ext4: add prefetching for block allocation bitmaps (Alex Zhuravlev) [task:449973]
  - ext4: add mballoc stats proc file (Harshad Shirwadkar) [task:449973]
  - ext4: drop s_mb_bal_lock and convert protected fields to atomic (Harshad Shirwadkar) [task:449973]
  - ext4: skip non-loaded groups at cr=0/1 when scanning for good groups (Alex Zhuravlev) [task:449973]
  - ext4: mballoc: use lock for checking free blocks while retrying (Ritesh Harjani) [task:449973]
  - ext4: mballoc: introduce pcpu seqcnt for freeing PA to improve ENOSPC handling (Ritesh Harjani) [task:449973]
  - ext4: mballoc: refactor ext4_mb_discard_preallocations() (Ritesh Harjani) [task:449973]
  - ext4: mballoc: refactor ext4_mb_good_group() (Ritesh Harjani) [task:449973]
  - xfs: fix chown leaking delalloc quota blocks when fssetxattr fails (Darrick J. Wong) [task:450133]
  - xfs: always return -ENOSPC on project quota reservation failure (Eric Sandeen) [task:450133]
  - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition (Kaixin Wang) [task:458685] {CVE-2025-37838}
  - blkcg: Add during the process to ensure data synchronization between CPUs. (cuitao) [task:404161, task:455283]
  - blkcg: handle dying request_queue when associating a blkg (Dennis Zhou) [task:404161, task:455283]
  - OPENEULER: sched/fair: Introduce multiple qos level (liwanwu) [task:447047]
  - scsi/megaraid: fix the iommu free issue (Zheng Tan) [bug:343066, bug:334281, bug:328152]
  - mmc: core: use sysfs_emit() instead of sprintf() (Sergey Shtylyov) [task:440609] {CVE-2022-49267}
  - RDMA/mlx5: Move events notifier registration to be after device registration (Patrisious Haddad) [task:410141] {CVE-2024-53224}
  - net: asix: add proper error handling of usb read errors (Pavel Skripkin) [task:440657] {CVE-2022-49226}
  - net: restrict SO_REUSEPORT to inet sockets (Eric Dumazet) [task:425031] {CVE-2024-57903}
  - sock: redo the psock vs ULP protection check (Jakub Kicinski) [task:425031]
  - bpf: Fix potential array overflow in bpf_trampoline_get_progs() (Yuntao Wang) [task:441305] {CVE-2022-49548}
  - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (Hans de Goede) [task:440567]
  - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() (Duoming Zhou) [task:440567] {CVE-2022-49309}
  - staging: rtl8723bs: replace _cancel_timer with del_timer_sync (Ross Schmidt) [task:440567]
  - staging: rtl8723bs: replace __inline by inline (Rasmus Villemoes) [task:440567]
  - i2c: designware: use casting of u64 in clock multiplication to avoid overflow (Lareine Khawaly) [task:448836] {CVE-2022-49749}
  - i2c: designware: Use DIV_ROUND_CLOSEST() macro (Andy Shevchenko) [task:448836]
  - math64: New DIV_S64_ROUND_CLOSEST helper (Chunyan Zhang) [task:448836]
  - units: Add SI metric prefix definitions (Andy Shevchenko) [task:448836]
  - include/linux/units.h: add helpers for kelvin to/from Celsius conversion (Akinobu Mita) [task:448836]
  - mm/mmap: teach generic_get_unmapped_area{_topdown} to handle hugetlb mappings (Oscar Salvador) [task:450281]
  - regulator: check that dummy regulator has been probed before using it (Christian Eggers) [task:452500, task:464599] {CVE-2025-22008}
  - hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (Ma Wupeng) [task:450240, task:464599] {CVE-2025-21931}
  - fbdev: hyperv_fb: Allow graceful removal of framebuffer (Saurabh Sengar) [task:450275, task:464599] {CVE-2025-21976}
  - fbdev: Introduce devm_register_framebuffer() (Thomas Weißschuh) [task:450275, task:464599]
  - drm/amd/display: Assign normalized_pix_clk when color depth = 14 (Alex Hung) [task:450278, task:464599] {CVE-2025-21956}
  - LoongArch: Set hugetlb mmap base address aligned with pmd size (Bibo Mao) [task:450281, task:464599] {CVE-2025-21949}
  - LoongArch: Remove shm_align_mask and use SHMLBA instead (Huacai Chen) [task:450281, task:464599]
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params (Ma Ke) [task:450263, task:464599] {CVE-2025-21941}
  - drm/amd/display: Check for invalid input params when building scaling params (Michael Strauss) [task:450263, task:464599]
  - RDMA/hns: Fix ah error counter in sw stat not increasing (Junxian Huang) [bug:333288]
  - RDMA/hns: Modify debugfs name (Yuyu Li) [bug:333288]
  - RDMA/hns: Support SW stats with debugfs (Junxian Huang) [bug:333288]
  - RDMA/hns: Add debugfs to hns RoCE (Junxian Huang) [bug:333288]
  - txgbe: FIX: fix delete redefine netdev_xmit_more in kylin os (linyuexie) [task:458496]
  - ngbe: FIX: fix delete redefine netdev_xmit_more in kylin os (linyuexie) [task:458496]
  - bpf: sync_linked_regs() must preserve subreg_def (Eduard Zingerman) [task:398625] {CVE-2024-53125}
  - bpf: Check the other end of slot_type for STACK_SPILL (Martin KaFai Lau) [task:434197]
  - ipv4: prevent potential spectre v1 gadget in fib_metrics_match() (Eric Dumazet) [task:448792] {CVE-2023-52996}
  - netfilter: allow exp not to be removed in nf_ct_find_expectation (Xin Long) [task:444898] {CVE-2023-52927}
  - LoongArch: irqchip/pch-lpc: fix irq_mask error. (wanghongliang) [task:450160]
  - LoongArch: fix kexec and kdump kernel runtime error (Ming Wang) [task:450160]
  - pci/msi: Increase the forgetting of {} after if (Juxin Gao) [task:450160]
  - LoongArch: KVM: Add interrupt checking with Loongson AVEC (Xianglai Li) [task:450160]
  - LoongArch: KVM: Fixed VM migration failure after ptw was enabled (Xianglai Li) [task:450160]
  - loongarch/kvm: Fixed the virtual machine crash problem after the physical machine wakes up from sleep (Xianglai Li) [task:450160]
  - driver/irqchip: add extioi cpu encode support for 6.6 host (Xianglai Li) [task:450160]
  - cpufreq: loongson3-acpi: Change failed status to disable (Juxin Gao) [task:450160]
  - LoongArch:LSVZ: Fix typo issue using funtion kvm_gcsr_write() (Bibo Mao) [task:450160]
  - LoongArch: KVM: enable ptw for kvm (Xianglai Li) [task:450160]
  - mlxsw: spectrum: Guard against invalid local ports (Amit Cohen) [task:440543] {CVE-2022-49134}
  - mlxsw: spectrum: Protect driver from buggy firmware (Amit Cohen) [task:440543]
  - mlxsw: Verify the accessed index doesn't exceed the array length (Danielle Ratson) [task:440543]
  - nvme-fc: fix racing controller reset and create association (James Smart) [task:395841]
  - nvme-fc: avoid calling _nvme_fc_abort_outstanding_ios from interrupt context (James Smart) [task:395841]
  - nvme-fc: do not wait in vain when unloading module (Daniel Wagner) [task:395841] {CVE-2024-26846}
  - nvme-fc: remove nvme_fc_terminate_io() (James Smart) [task:395841]
  - nvme-fc: eliminate terminate_io use by nvme_fc_error_recovery (James Smart) [task:395841]
  - nvme-fc: track error_recovery while connecting (James Smart) [task:395841]
  - nvme-fc: fix io timeout to abort I/O (James Smart) [task:395841]
  - nvme-fc: convert assoc_active flag to bit op (James Smart) [task:395841]
  - nvme-fc: remove err_work work item (James Smart) [task:395841]
  - nvme_fc: add 'nvme_discovery' sysfs attribute to fc transport device (James Smart) [task:395841]
  - Revert "usb: xhci: Add timeout argument in address_device USB HCD callback" (dengjie03) [task:440504]
  - Revert "usb: xhci: Fix NULL pointer dereference on certain command aborts" (dengjie03) [task:440504]
  - usb-storage: apply IGNORE_UAS for Realtek RTL9210 (dengjie03) [bug:332982]
  - sysctl: Fix data races in proc_douintvec(). (Kuniyuki Iwashima) [task:440762] {CVE-2022-49641}
  - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (Akash M) [task:426433] {CVE-2024-57913}
  - ALSA: pcm: Add sanity NULL check for the default mmap fault handler (Takashi Iwai) [task:429543] {CVE-2024-53180}
  - net: gso: fix ownership in __udp_gso_segment (Antoine Tenart) [task:450256] {CVE-2025-21926}
  - udp: rehash on disconnect (Willem de Bruijn) [task:450256]
  - net: ipv4: drop unneeded likely() call around IS_ERR() (Enrico Weigelt) [task:450256]
  - udp: add missing rehash callback to udplite (Alexey Kodanev) [task:450256]
  - net: udp: prefer listeners bound to an address (Peter Oskolkov) [task:450256]
  - clk: qcom: clk-rcg2: Update logic to calculate D value for RCG (Taniya Das) [task:440546] {CVE-2022-49189}
  - ftrace: Avoid potential division by zero in function_stat_show() (Nikolay Kuratov) [task:450271] {CVE-2025-21898}
  - ice: fix memory leak in aRFS after reset (Grzegorz Nitka) [task:450280] {CVE-2025-21981}
  - caif_virtio: fix wrong pointer check in cfv_probe() (Vitaliy Shevtsov) [task:450247] {CVE-2025-21904}
  - gpio: rcar: Use raw_spinlock to protect register access (Niklas Söderlund) [task:450255] {CVE-2025-21912}
  - gpio: rcar: Optimize GPIO pin state read on R-Car Gen3 (Geert Uytterhoeven) [task:450255]
  - gpio: rcar: Implement gpio_chip.get_multiple() (Geert Uytterhoeven) [task:450255]
  - gpio: rcar: Rework hardware features handling (Geert Uytterhoeven) [task:450255]
  - gpio: rcar: Cache gpiochip_get_data() return value (Geert Uytterhoeven) [task:450255]
  - gpio: rcar: select General Output Register to set output states (Vladimir Zapolskiy) [task:450255]
  - gpio: rcar: reference device instead of platform device (Vladimir Zapolskiy) [task:450255]
  - slimbus: messaging: Free transaction ID in delayed interrupt scenario (Visweswara Tanuku) [task:450260] {CVE-2025-21914}
  - net_sched: Prevent creation of classes with TC_H_ROOT (Cong Wang) [task:450261] {CVE-2025-21971}
  - wifi: cfg80211: regulatory: improve invalid hints checking (Nikita Zhandarovich) [task:450244] {CVE-2025-21910}
  - HID: appleir: Fix potential NULL dereference at raw event handle (Daniil Dulov) [task:450218] {CVE-2025-21948}
  - Mucse: rnp: never use err_handler avoid os crash when aer error recover (Dong Yibo) [task:447054]
  - memcg: fix soft lockup in the OOM process (Chen Ridong) [task:440777] {CVE-2024-57977}
  - usb: renesas_usbhs: Flush the notify_hotplug_work (Claudiu Beznea) [task:450259] {CVE-2025-21917}
  - vlan: enforce underlying device type (Oscar Maes) [task:450262] {CVE-2025-21920}
  - scsi: qla1280: Fix kernel oops when debug level > 2 (Magnus Lindholm) [task:450276] {CVE-2025-21957}
  - scsi: qla1280: use lower_32_bits and upper_32_bits instead of reinventing them (Christoph Hellwig) [task:450276]
  - wifi: nl80211: reject cooked mode if it is set along with other flags (Vitaliy Shevtsov) [task:450266] {CVE-2025-21909}
  - rapidio: fix an API misues when rio_add_net() fails (Haoxiang Li) [task:450268] {CVE-2025-21934}
  - llc: do not use skb_get() before dev_queue_xmit() (Eric Dumazet) [task:450248] {CVE-2025-21925}
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (Zhang Lixu) [task:450254] {CVE-2025-21928}
  - rapidio: add check for rio_add_net() in rio_scan_alloc_net() (Haoxiang Li) [task:450246] {CVE-2025-21935}
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (Chengen Du) [task:450787] {CVE-2025-21993}
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (Florent Revest) [task:450788] {CVE-2025-21991}
  - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() (Nikita Zhandarovich) [task:451120] {CVE-2025-21996}
  - Bluetooth: Fix error code in chan_alloc_skb_cb() (Dan Carpenter) [task:451118] {CVE-2025-22007}
  - EDAC/ghes: Setup DIMM label from DMI and use it in error reports (Robert Richter) [task:409255]
  - EDAC/mc: Remove enable_per_layer_report function argument (Robert Richter) [task:409255]
  - EDAC/mc: Report "unknown memory" on too many DIMM labels found (Robert Richter) [task:409255]
  - EDAC/mc: Fix use-after-free and memleaks during device removal (Robert Richter) [task:409255]
  - EDAC/mc: Reduce indentation level in edac_mc_handle_error() (Robert Richter) [task:409255]
  - EDAC/mc: Remove needless zero string termination (Robert Richter) [task:409255]
  - EDAC: Introduce an mci_for_each_dimm() iterator (Robert Richter) [task:409255]
  - EDAC: Remove EDAC_DIMM_OFF() macro (Robert Richter) [task:409255]
  - EDAC: Replace EDAC_DIMM_PTR() macro with edac_get_dimm() function (Robert Richter) [task:409255]
  - EDAC/mc_sysfs: Make debug messages consistent (Robert Richter) [task:409255]
  - EDAC/mc_sysfs: Remove pointless gotos (Robert Richter) [task:409255]
  - EDAC: Prefer 'unsigned int' to bare use of 'unsigned' (Robert Richter) [task:409255]
  - EDAC/sysfs: Remove csrow objects on errors (Robert Richter) [task:409255]
  - EDAC/sysfs: Drop device references properly (Greg KH) [task:409255]
  - EDAC: Drop per-memory controller buses (Borislav Petkov) [task:409255]
  - EDAC: Don't add devices under /sys/bus/edac (Tony Luck) [task:409255]
  - ppp: Fix KMSAN uninit-value warning with bpf (Jiayuan Chen) [task:450270] {CVE-2025-21922}
  - ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (Kuniyuki Iwashima) [task:451123] {CVE-2025-22005}
  - net: atm: fix use after free in lec_send() (Dan Carpenter) [task:451119] {CVE-2025-22004}
  - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (Kohei Enju) [task:450269] {CVE-2025-21959}
  - netfilter: nf_conncount: fix wrong variable type (Yunjian Wang) [task:450269]
  - arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall (Alexandru Elisei) [task:440489] {CVE-2022-49520}
  - hwrng: nomadik - keep clock enabled while hwrng is registered (Martin Kaiser) [task:440480]
  - hwrng: st - keep clock enabled while hwrng is registered (Martin Kaiser) [task:440408]
  - hwrng: nomadik - Change clk_disable to clk_disable_unprepare (Miaoqian Lin) [task:440408]
  - hwrng: cavium - fix NULL but dereferenced coccicheck error (Wan Jiabing) [task:440408] {CVE-2022-49177}
  - hwrng: cavium - Check health status while reading random data (Sunil Goutham) [task:440408]
  - hwrng: st - Fix W=1 unused variable warning (Herbert Xu) [task:440408]
  - hwrng: n2-drv - fix typo (Stephen Rothwell) [task:440408]
  - hwrng: drivers - Use device-managed registration API (Chuhong Yuan) [task:440408]
  - icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr. (Kuniyuki Iwashima) [task:440570] {CVE-2022-49632}
  - kernel/resource: fix kfree() of bootmem memory again (Miaohe Lin) [task:440655] {CVE-2022-49190}
  - macsec: fix UAF bug for real_dev (Ziyang Xuan) [task:439954] {CVE-2022-49390}
  - tee: optee: Fix supplicant wait loop (Sumit Garg) [task:448794] {CVE-2025-21871}
  - bpf: Skip task with pid=1 in send_signal_common() (Hao Sun) [task:448840] {CVE-2023-52992}
  - netlink: prevent potential spectre v1 gadgets (Eric Dumazet) [task:448831] {CVE-2023-53000}


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.25.v2401
changelog:
  - secondly update changelog for incoming 4.19.90-89.25.v2401 (Zhengyuan Liu)
  - xfs: push the AIL in xlog_grant_head_wake (Dave Chinner) [task:507733]
  - EULER: sched/smart_grid: Prevent double-free in sched_grid_qos_free (Yipeng Zou) [task:505997]
  - update changelog for incoming 4.19.90-89.25.v2401 (Zhengyuan Liu)
  - mm/memory.c: Make the refreshing rate of rss_stat manual (Enze Li) [task:362195]
  - bpf: sync_linked_regs() must preserve subreg_def (Eduard Zingerman) [task:398625, task:460124] {CVE-2024-53125}
  - bpf: Fix wrong reg type conversion in release_reference() (Youlin Li) [task:460124] {CVE-2022-49873}
  - bpf: Add helper macro bpf_for_each_reg_in_vstate (Kumar Kartikeya Dwivedi) [task:434197, task:460124]
  - bpf: Support for pointers beyond pkt_end. (Alexei Starovoitov) [task:434197, task:460124]
  - Revert "bpf: sync_linked_regs() must preserve subreg_def" (Yun Lu) [task:460124]
  - bpf: Fix WARN() in get_bpf_raw_tp_regs (Tao Chen) [task:497313] {CVE-2025-38285}
  - jfs: add check read-only before truncation in jfs_truncate_nolock() (Vasiliy Kovalev) [task:459936] {CVE-2024-58094}
  - hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key (Vasiliy Kovalev) [task:460140] {CVE-2025-37782}
  - jfs: Fix uninit-value access of imap allocated in the diMount() function (Zhongqiu Han) [task:460236] {CVE-2025-37742}
  - jfs: remove unnecessary oom message (Zhen Lei) [task:460236]
  - jfs: Prevent copying of nlink with value 0 from disk inode (Edward Adam Davis) [task:460150] {CVE-2025-37741}
  - ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() (Henry Martin) [task:460300] {CVE-2025-37758}
  - isofs: Prevent the use of too small fid (Edward Adam Davis) [task:460221] {CVE-2025-37780}
  - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [task:448967] {CVE-2025-21699}
  - block: Fix handling of offline queues in blk_mq_alloc_request_hctx() (Bart Van Assche) [task:440716] {CVE-2022-49720}
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Dennis Lam) [task:425033] {CVE-2024-57892}
  - ocfs2: correct return value of ocfs2_local_free_info() (Joseph Qi) [task:425033]
  - bfq: Avoid merging queues with different parents (Jan Kara) [task:441921] {CVE-2022-49412}
  - jfs: Fix null-ptr-deref in jfs_ioc_trim (Dylan Wolff) [task:491953] {CVE-2025-38203}
  - xfs: fix xfs leaked delalloc blocks accounting p2 (Shida Zhang) [task:494391]
  - iio: adc: at91: call input_free_device() on allocated iio_dev (Joe Hattori) [task:426329] {CVE-2024-57904}
  - kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) [task:448817] {CVE-2023-52936}
  - irqdomain: Remove debugfs_file from struct irq_domain (Greg Kroah-Hartman) [task:448817]
  - USB: gadget: f_midi: f_midi_complete to call queue_work (Jill Donahue) [task:444127] {CVE-2025-21859}
  - nilfs2: prevent use of deleted inode (Edward Adam Davis) [task:421043] {CVE-2024-53690}
  - bpf: Use preempt_count() directly in bpf_send_signal_common() (Hou Tao) [task:442356]
  - bpf: Send signals asynchronously if !preemptible (Puranjay Mohan) [task:442356] {CVE-2025-21728}
  - fbdev: sisfb: Fix strbuf array overflow (Andrey Shumilin) [task:387561] {CVE-2024-50180}
  - iio: accel: mma8452: use the correct logic to get mma8452_data (Haibo Chen) [task:440788] {CVE-2022-49285}
  - drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init (Miaoqian Lin) [task:440488] {CVE-2022-49462}
  - drm/msm/a6xx: Rename a6xx_gmu_probe to a6xx_gmu_init (Sean Paul) [task:440488]
  - ext4: fix off-by-one error in do_split (Artem Sadovnikov) [task:460184] {CVE-2025-23150}
  - btrfs: fix inode list leak during backref walking at find_parent_nodes() (Filipe Manana) [task:460298] {CVE-2022-49913}
  - Btrfs: preftree: use rb_first_cached (Liu Bo) [task:460298]
  - ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() (Ashish Kalra) [task:460284] {CVE-2022-49885}
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Yajun Deng) [task:459707] {CVE-2023-53034}
  - f2fs: fix to do sanity check on total_data_blocks (Chao Yu) [task:440482] {CVE-2022-49360}
  - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del (Luiz Augusto von Dentz) [task:450217]
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (Luiz Augusto von Dentz) [task:450217] {CVE-2025-21969}
  - PCI: phytium: Add hotplug and hotreset workaround patch for phytium SoCs (huhai) [task:477347]
  - crypto: null - Use spin lock instead of mutex (Herbert Xu) [task:461960] {CVE-2025-37808}
  - crypto: null - Remove VLA usage of skcipher (Kees Cook) [task:461960]
  - crypto: skcipher - Set tfm in SYNC_SKCIPHER_REQUEST_ON_STACK (Herbert Xu) [task:461960]
  - crypto: skcipher - Introduce crypto_sync_skcipher (Kees Cook) [task:461960]
  - iommu: smmuv3: Not print information of SMMU 0x10 event (huhai) [task:477347]
  - drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table (Charles Han) [task:497273] {CVE-2025-38319}
  - bpf: Annotate bpf_long_memcpy with data_race (Daniel Borkmann) [task:494931] {CVE-2023-52521}
  - bpf, sockmap: Avoid using sk_socket after free when sending (Jiayuan Chen) [task:491315] {CVE-2025-38154}
  - KVM: Don't null dereference ops->destroy (Alexey Kardashevskiy) [task:440631] {CVE-2022-49568}
  - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var (Murad Masimov) [task:491907] {CVE-2025-38214}
  - bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO (Kumar Kartikeya Dwivedi) [task:481763] {CVE-2022-49961}
  - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (Youngjun Lee) [task:495947] {CVE-2025-38249}
  - net: hns3: fix incorrect components info of ethtool --reset command (Jie Wang) [bug:367889]
  - net: hns3: add support for triggering reset by ethtool (Yufeng Mo) [bug:367889]
  - smb: client: Fix use-after-free in cifs_fill_dirent (Wang Zhaolong) [task:482229] {CVE-2025-38051}
  - scsi: megaraid_sas: Fix invalid node index (Chen Yu) [task:495933] {CVE-2025-38239}
  - jfs: validate AG parameters in dbMount() to prevent crashes (Vasiliy Kovalev) [task:491929] {CVE-2025-38230}
  - fs/jfs: consolidate sanity checking in dbMount (Dave Kleikamp) [task:491929]
  - jfs: add sanity check for agwidth in dbMount (Edward Adam Davis) [task:491929]
  - net_sched: sch_sfq: move the limit validation (Octavian Purdila) [task:440591]
  - net_sched: sch_sfq: don't allow 1 packet limit (Octavian Purdila) [task:440591] {CVE-2024-57996}
  - net_sched: sch_sfq: handle bigger packets (Eric Dumazet) [task:440591]
  - vgacon: Add check for vc_origin address range in vgacon_scroll() (GONG Ruiqi) [task:491959] {CVE-2025-38213}
  - net: openvswitch: Fix the dead loop of MPLS parse (Faicker Mo) [task:492665] {CVE-2025-38146}
  - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). (Kuniyuki Iwashima) [task:495937] {CVE-2025-38245}
  - seg6: Fix validation of nexthop addresses (Ido Schimmel) [task:497745] {CVE-2025-38310}
  - ZHAOXIN: pmu: disable events/zhaoxin/uncore (leoliu-oc) [bug:353063]
  - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() (Sergey Shtylyov) [task:497753] {CVE-2025-38312}
  - media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (Wentao Liang) [task:494929] {CVE-2025-38237}
  - jffs2: check jffs2_prealloc_raw_node_refs() result in few other places (Fedor Pchelkin) [task:497135] {CVE-2025-38328}
  - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). (Kuniyuki Iwashima) [task:497287] {CVE-2025-38324}
  - fbcon: Make sure modelist not set on unregistered console (Kees Cook) [task:491975] {CVE-2025-38198}
  - fbcon: Introduce wrapper for console->fb_info lookup (Daniel Vetter) [task:491975]
  - wifi: ath9k_htc: Abort software beacon handling if disabled (Toke Høiland-Jørgensen) [task:491657] {CVE-2025-38157}
  - xen/privcmd: fix error exit of privcmd_ioctl_dm_op() (Juergen Gross) [task:482077] {CVE-2022-49989}
  - aoe: clean device rq_list in aoedev_downdev() (Justin Sanders) [task:497277] {CVE-2025-38326}
  - crypto: hisilicon/sec - don't sleep when in softirq (Zhengchao Shao) [task:481943] {CVE-2022-50171}
  - net: clear the dst when changing skb protocol (Jakub Kicinski) [task:492357] {CVE-2025-38192}
  - bpf: update skb->protocol in bpf_skb_net_grow (Willem de Bruijn) [task:492357]
  - of: check previous kernel's ima-kexec-buffer against memory bounds (Vaibhav Jain) [task:482053] {CVE-2022-50159}
  - arm64/machine_t: Add Soc-id Judgment for the S5000C series. (tanze) [task:489537]
  - set linkdata NIC to y in x86, arm and loongarch (YANGANG) [task:449997]
  - LINKDATA: SXE: add support for linkdata sxe NIC (YANGANG) [task:449997]
  - ax25: Remove broken autobind (Murad Masimov) [task:459548] {CVE-2025-22109}
  - udp: Fix memory accounting leak. (Kuniyuki Iwashima) [task:459933] {CVE-2025-22058}
  - ibmvnic: Use kernel helpers for hex dumps (Nick Child) [task:459569] {CVE-2025-22104}
  - pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() (Josh Poimboeuf) [task:462579] {CVE-2025-37850}
  - ext4: fix BUG_ON() when directory entry has invalid rec_len (Luís Henriques) [task:460128] {CVE-2022-49879}
  - ext4: refactor initialize_dirent_tail() (Theodore Ts'o) [task:460128]
  - ext4: rename "dirent_csum" functions to use "dirblock" (Theodore Ts'o) [task:460128]
  - ext4: fix OOB read when checking dotdot dir (Acs, Jakub) [task:458578] {CVE-2025-37785}
  - Bluetooth: use hdev->workqueue when queuing hdev->{cmd,ncmd}_timer works (Tetsuo Handa) [task:481991]
  - Bluetooth: When HCI work queue is drained, only queue chained work (Schspa Shi) [task:481991] {CVE-2022-50166}
  - Bluetooth: Add ncmd=0 recovery handling (Manish Mandlik) [task:481991]
  - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() (Liu Jian) [task:461321] {CVE-2023-53133}
  - bnxt: Do not read past the end of test names (Kees Cook) [task:448825] {CVE-2023-53010}
  - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). (Kuniyuki Iwashima) [task:492663] {CVE-2025-38181}
  - genirq/affinity: Improve __irq_build_affinity_masks() (Ming Lei) [bug:341996, bug:350695]
  - xfs: split up the xfs_reflink_end_cow work into smaller transactions (Darrick J. Wong) [task:489411]
  - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (Terry Junge) [task:491897] {CVE-2025-38103}
  - HID: hyperv: Correctly access fields declared as __le16 (Michael Kelley) [task:491897]
  - bpf: fix ktls panic with sockmap (Jiayuan Chen) [task:492661] {CVE-2025-38166}
  - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (Haixia Qu) [task:492195] {CVE-2025-38184}
  - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Kefeng Wang) [task:448807] {CVE-2023-52939}
  - bpf: track changes_pkt_data property for global functions (Eduard Zingerman) [task:461065] {CVE-2024-58098}
  - bpf: add find_containing_subprog() utility function (Eduard Zingerman) [task:461065]
  - bpf: use bitfields for simple per-subprog bool flags (Andrii Nakryiko) [task:461065]
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (Henry Martin) [task:461952] {CVE-2025-37830}
  - perf python: Convert tracepoint.py example to python3 (Tanu M) [task:488387]
  - PHYTIUM: PCI: Add ACS quirk for phytium root and switch ports (leixiang) [task:477923]
  - net: ch9200: fix uninitialised access during mii_nway_restart (Qasim Ijaz) [task:486337] {CVE-2025-38086}
  - ocfs2: fix data corruption after failed write (Jan Kara via Ocfs2-devel) [task:461083] {CVE-2023-53081}
  - ext4: update s_journal_inum if it changes after journal replay (Baokun Li) [task:461218] {CVE-2023-53091}
  - jbd2: remove wrong sb->s_sequence check (Jan Kara) [task:462570] {CVE-2025-37839}
  - scsi: target: Fix WRITE_SAME No Data Buffer crash (Mike Christie) [task:463324] {CVE-2022-21546}
  - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) (Alexander Lobakin) [task:482165] {CVE-2022-50093}
  - virtio-gpu: fix a missing check to avoid NULL dereference (Xiaomeng Tong) [task:481883] {CVE-2022-50181}
  - bpf, cgroup: Fix kernel BUG in purge_effective_progs (Pu Lehui) [task:482137]
  - bpf: Fix KASAN use-after-free Read in compute_effective_progs (Tadeusz Struk) [task:482137] {CVE-2022-50219}
  - bpf, netns: Handle multiple link attachments (Jakub Sitnicki) [task:482137]
  - bpf: fix potential 32-bit overflow when accessing ARRAY map element (Andrii Nakryiko) [task:482217] {CVE-2022-50167}
  - net: stmmac: fix notifier registration (Aaro Koskinen) [bug:370375]
  - perf: Fix pmu_filter_match() (Peter Zijlstra) [task:464493]
  - nfsd: decrease sc_count directly if fail to queue dl_recall (Li Lingfeng) [task:459566]
  - nfsd: put dl_stid if fail to queue dl_recall (Li Lingfeng) [task:459566] {CVE-2025-22025}
  - nfsd: make nfsd4_run_cb a bool return function (Jeff Layton) [task:459566]
  - jfs: reject on-disk inodes of an unsupported type (Dmitry Antipov) [task:459660] {CVE-2025-37925}
  - dlm: prevent NPD when writing a positive value to event_done (Thadeu Lima de Souza Cascardo) [task:459658] {CVE-2025-23131}
  - ocfs2: validate l_tree_depth to avoid out-of-bounds access (Vasiliy Kovalev) [task:459623] {CVE-2025-22079}
  - jfs: add check read-only before txBeginAnon() call (Vasiliy Kovalev) [task:459938] {CVE-2024-58095}
  - nvmet-tcp: don't restore null sk_state_change (Alistair Francis) [task:481811] {CVE-2025-38035}
  - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (Al Viro) [task:482067] {CVE-2025-38058}
  - scsi: iscsi: Fix HW conn removal use after free (Mike Christie) [task:482545] {CVE-2022-50031}
  - scsi: target: iscsi: Fix timeout on deleted connection (Dmitry Bogdanov) [task:482265] {CVE-2025-38075}
  - ALSA: pcm: Fix race of buffer access at PCM OSS layer (Takashi Iwai) [task:482035] {CVE-2025-38078}
  - virtio_net: fix memory leak inside XPD_TX with mergeable (Xuan Zhuo) [task:482159] {CVE-2022-50065}
  - Revert "virtio_net: enable napi_tx by default" (Tang Longjun) [task:476739]
  - media: dvb-core: Fix use-after-free on race condition at dvb_frontend (Hyunwoo Kim) [task:478283] {CVE-2022-45885}
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo (Silvano Seva) [task:466609] {CVE-2025-37970}
  - nilfs2: protect access to buffers with no active references (Ryusuke Konishi) [task:441315] {CVE-2025-21811}
  - iio: pressure: zpa2326: fix information leak in triggered buffer (Javier Carrasco) [task:426431] {CVE-2024-57912}
  - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (Javier Carrasco) [task:426437] {CVE-2024-57911}
  - iio: imu: kmx61: fix information leak in triggered buffer (Javier Carrasco) [task:426324] {CVE-2024-57908}
  - jfs: array-index-out-of-bounds fix in dtReadFirst (Ghanshyam Agrawal) [task:419633] {CVE-2024-56598}
  - udf: fix uninit-value use in udf_get_fileshortad (Gianfranco Trad) [task:387577] {CVE-2024-50143}
  - f2fs: fix to check atomic_file in f2fs ioctl interfaces (Chao Yu) [task:375569] {CVE-2024-49859}
  - nfc: fdp: Fix potential memory leak in fdp_nci_send() (Shang XiaoJing) [task:460238] {CVE-2022-49924}
  - net/mlx5: Fix steering rules cleanup (Lama Kayal) [task:461036] {CVE-2023-53079}
  - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Ryo Takakura) [task:460254] {CVE-2025-23161}
  - bpf: consider that tail calls invalidate packet pointers (Eduard Zingerman) [task:461040] {CVE-2024-58237}
  - bpf: refactor bpf_helper_changes_pkt_data to use helper number (Eduard Zingerman) [task:461040]
  - iio: light: opt3001: fix deadlock due to concurrent flag access (Luca Ceresoli) [task:466236] {CVE-2025-37968}
  - mm/gup: Remove enfornced COW mechanism (Peter Xu) [task:446992]
  - net: tls: explicitly disallow disconnect (Jakub Kicinski) [task:460146] {CVE-2025-37756}
  - HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX (Tomasz Pakuła) [task:466581] {CVE-2025-37942}
  - HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc (Zhang Lixu) [task:461023]
  - HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (Reka Norman) [task:461023] {CVE-2023-53039}
  - devm-helpers: Add resource managed version of work init (Matti Vaittinen) [task:461023]
  - devm-helpers: Fix devm_delayed_work_autocancel() kerneldoc (Matti Vaittinen) [task:461023]
  - workqueue: Add resource managed version of delayed work init (Matti Vaittinen) [task:461023]
  - xsk: Add missing overflow check in xdp_umem_reg (Kal Conley) [task:460911] {CVE-2023-53080}
  - xsk: Fix number of pinned pages/umem size discrepancy (Björn Töpel) [task:460911]
  - net/xdp: use shift instead of 64 bit division (Pavel Machek) [task:460911]
  - net: usb: lan78xx: Limit packet length to skb->len (Szymon Heidrich) [task:461084] {CVE-2023-53068}
  - net: ena: Fix error handling in ena_init() (Yuan Can) [task:460204] {CVE-2022-49813}
  - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() (Shang XiaoJing) [task:460177] {CVE-2022-49923}
  - NFC: nxp-nci: remove unnecessary labels (wengjianfeng) [task:460177]
  - btrfs: do not clean up repair bio if submit fails (Josef Bacik) [task:440526] {CVE-2022-49168}
  - nilfs2: handle errors that nilfs_prepare_chunk() may return (Ryusuke Konishi) [task:440497] {CVE-2025-21721}
  - nilfs2: eliminate staggered calls to kunmap in nilfs_rename (Ryusuke Konishi) [task:440497]
  - nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link (Ryusuke Konishi) [task:440497]
  - nilfs2: fix potential deadlock with newly created symlinks (Ryusuke Konishi) [task:387559] {CVE-2024-50229}
  - HID: ignore non-functional sensor in HP 5MP Camera (Chia-Lin Kao (AceLan)) [task:450748] {CVE-2025-21992}
  - RDMA/hns: Fix soft lockup during bt pages loop (Junxian Huang) [task:452502] {CVE-2025-22010}
  - scsi: pm8001: Fix tag leaks on error (Damien Le Moal) [task:440565] {CVE-2022-49121}
  - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails (Nikolay Aleksandrov) [task:461063] {CVE-2023-53103}
  - bonding: Fix memory leak when changing bond type to Ethernet (Ido Schimmel) [task:461063]
  - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change (Nikolay Aleksandrov) [task:461063]
  - bpf: Scrub packet on bpf_redirect_peer (Paul Chaignon) [task:466592] {CVE-2025-37959}
  - uprobes: Reject the shared zeropage in uprobe_write_opcode() (Tong Tiangen) [task:448833] {CVE-2025-21881}
  - module: ensure that kobject_put() is safe for module type kobjects (Dmitry Antipov) [task:471773] {CVE-2025-37995}
  - RDMA/core: Silence oversized kvmalloc() warning (Shay Drory) [task:462568] {CVE-2025-37867}
  - net/9p: use a dedicated spinlock for trans_fd (Dominique Martinet) [task:460118] {CVE-2022-49765}
  - scsi: hisi_sas: Add cond_resched() for no forced preemption model (Yihang Li) [task:429513] {CVE-2024-56589}
  - ibmvnic: Don't reference skb after sending to VIOS (Nick Child) [task:444126] {CVE-2025-21855}
  - 9p/net: fix improper handling of bogus negative read/write replies (Dominique Martinet) [task:462564] {CVE-2025-37879}
  - 9pnet: allow making incomplete read requests (Sergey Alirzaev) [task:462564]
  - PCI: Fix reference leak in pci_register_host_bridge() (Ma Ke) [task:462406] {CVE-2025-37836}
  - tracing: Fix wild-memory-access in register_synth_event() (Shang XiaoJing) [task:460168] {CVE-2022-49799}


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.26.v2401
changelog:
  - net: drop bad gso csum_start and offset in virtio_net_hdr (Willem de Bruijn) [task:534195]
  - net: missing check virtio (Denis Arefev) [task:534195]
  - fix kabi issue for "net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation" (xiaolinkui) [task:534195]
  - net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation (Willem de Bruijn) [task:534195]
  - net: group skb_shinfo zerocopy related bits together. (Jonathan Lemon) [task:534195]
  - netfilter: nf_tables: fix nat hook table deletion (Florian Westphal) [task:534199]
  - net: hsr: Add VLAN support (WingMan Kwok) [task:534197]
  - RDMA/nl: Do not permit empty devices names during RDMA_NLDEV_CMD_NEWLINK/SET (Jason Gunthorpe) [task:534193]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.27.v2401
changelog:
  - thirdly update changelog for incoming 4.19.90-89.27.v2401 (Zhengyuan Liu)
  - net: tighten bad gso csum offset check in virtio_net_hdr (Willem de Bruijn) [task:541407]
  - Revert "LoongArch: Remove shm_align_mask and use SHMLBA (duanchenghao) [task:541467]
  - Revert "mm/mmap: teach generic_get_unmapped_area{_topdown} to handle hugetlb mappings" (duanchenghao) [task:541467]
  - Revert "LoongArch: Set hugetlb mmap base address aligned with pmd size" (duanchenghao) [task:541467]
  - Revert "LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE" (duanchenghao) [task:541467]
  - mm: ksize() should silently accept a NULL pointer (William Kucharski) [task:434197, bug:423829]
  - mm/slab.c: fix kernel-doc warning for __ksize() (Randy Dunlap) [task:434197, bug:423829]
  - mm/kasan: add object validation in ksize() (Marco Elver) [task:434197, bug:423829]
  - mm/slab: refactor common ksize KASAN logic into slab_common.c (Marco Elver) [task:434197, bug:423829]
  - mm/kasan: change kasan_check_{read,write} to return boolean (Marco Elver) [task:434197, bug:423829]
  - mm/kasan: introduce __kasan_check_{read,write} (Marco Elver) [task:434197, bug:423829]
  - LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE (Huacai Chen) [task:541467]
  - RDMA/srpt: Fix a use-after-free (Bart Van Assche) [task:482173] {CVE-2022-50129}
  - bpf, verifier: Fix memory leak in array reallocation for stack state (Kees Cook) [task:434197]
  - secondly update changelog for incoming 4.19.90-89.27.v2401 (Zhengyuan Liu)
  - linux/virtio_net.h: Support USO offload in vnet header. (Andrew Melnychenko) [task:534195]
  - net: accept UFOv6 packages in virtio_net_hdr_to_skb (Willem de Bruijn) [task:534195]
  - net: check if protocol extracted by virtio_net_hdr_set_proto is correct (Balazs Nemeth) [task:534195]
  - ALSA: hda: Manage concurrent reg access more properly (Takashi Iwai) [task:221568]
  - media: venus: hfi_parser: add check to avoid out of bound access (Vikash Garodia) [task:460230] {CVE-2025-23157}
  - media: venus: hfi_parser: Add check to keep the number of codecs within range (Vikash Garodia) [task:460230]
  - bpf: Fix accesses to uninit stack slots (Andrei Matei) [task:434197, task:525023]
  - bpf: verifier: Improve function state reallocation (Lorenz Bauer) [task:434197, task:525023]
  - mm: slab: provide krealloc_array() (Bartosz Golaszewski) [task:434197, task:525023]
  - wifi: prevent A-MSDU attacks in mesh networks (Mathy Vanhoef) [task:519717] {CVE-2025-38512}
  - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Leon Romanovsky) [task:214146] {CVE-2024-26907}
  - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ (Alexey Dobriyan) [task:214146]
  - stddef: Introduce DECLARE_FLEX_ARRAY() helper (Kees Cook) [task:214146]
  - tls: stop recv() if initial process_rx_list gave us non-DATA (Sabrina Dubroca) [task:522807] {CVE-2024-58239}
  - tls: rx: drop pointless else after goto (Jakub Kicinski) [task:522807]
  - tls: rx: jump to a more appropriate label (Jakub Kicinski) [task:522807]
  - net: bridge: use DEV_STATS_INC() (Eric Dumazet) [task:207281] {CVE-2023-52578}
  - wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() (Dan Carpenter) [task:520535]
  - iwlwifi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang) [task:520535] {CVE-2025-38602}
  - bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots (Tao Lyu) [task:532401]
  - bpf: fix check for attempt to corrupt spilled pointer (Andrii Nakryiko) [task:532401] {CVE-2023-52462}
  - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Dmitry Torokhov) [bug:407309]
  - bpf: Move skb->len == 0 checks into __bpf_redirect (Stanislav Fomichev) [task:328841]
  - net/af_packet: check len when min_header_len equals to 0 (Zhengchao Shao) [task:328841]
  - bpf: Don't redirect packets with invalid pkt_len (Zhengchao Shao) [task:328841]
  - net: fix refcount bug in sk_psock_get (2) (Hawkins Jiawei) [task:218801]
  - net, sk_msg: Don't use RCU_INIT_POINTER on sk_user_data (Jakub Sitnicki) [task:218801]
  - net, sk_msg: Clear sk_user_data pointer on clone if tagged (Jakub Sitnicki) [task:218801]
  - scsi: libsas: Abort all in-flight requests when device is gone (Jason Yan) [bug:408215, task:537245]
  - drm/amdgpu: install stub fence into potential unused fence pointers (Lang Yu) [task:531789, task:534643] {CVE-2023-53248}
  - dma-buf: add dma_fence_get_stub (Christian König) [task:531789, task:534643]
  - udf: Fix uninitialized array access for some pathnames (Jan Kara) [task:373027, task:534643]
  - ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (Li Zhong) [task:532227, task:534643] {CVE-2022-50327}
  - IB/mlx5: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov) [task:533505]
  - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (Adham Faris) [task:533505]
  - net/mlx5: Fix spelling mistake "syndrom" -> "syndrome" (Colin Ian King) [task:533505]
  - net/mlx5e: Correctly report errors for ethtool rx flows (Cosmin Ratiu) [task:533505]
  - net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (Carolina Jubran) [task:533505]
  - net/mlx5: Fix fw tracer first block check (Moshe Shemesh) [task:533505]
  - net/mlx5: improve some comments (Hu Haowen) [task:533505]
  - net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() (Yuanjun Gong) [task:533505]
  - ceph: take snap_empty_lock atomically with snaprealm refcount change (Jeff Layton) [task:530217]
  - net: Fix TOCTOU issue in sk_is_readable() (Michal Luczaj) [task:491659] {CVE-2025-38112}
  - net/mlx5e: Fix cleanup null-ptr deref on encap lock (Paul Blakey) [task:461217] {CVE-2023-53105}
  - sctp: initialize more fields in sctp_v6_from_sk() (Eric Dumazet) [task:532203] {CVE-2025-39812}
  - fs: writeback: fix use-after-free in __mark_inode_dirty() (Jiufei Xue) [task:534347] {CVE-2025-39866}
  - writeback: Fix inode->i_io_list not be protected by inode->i_lock error (Jchao Sun) [task:534347]
  - wifi: mac80211_hwsim: drop short frames (Johannes Berg) [task:532575] {CVE-2023-53321}
  - netfilter: x_tables: fix percpu counter block leak on error path when creating new netns (Pavel Tikhomirov) [task:531791] {CVE-2023-53200}
  - selinux: fix cred stacking bug (penghuaihe) [task:490643]
  - security: support bpf hooks stacking (penghuaihe) [task:490643]
  - drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() (Hangyu Hua) [task:440742] {CVE-2022-49644}
  - skbuff: skb_segment, Call zero copy functions before using skbuff frags (Mohamed Khalfella) [task:532803] {CVE-2023-53354}
  - modpost: fix off by one in is_executable_section() (Dan Carpenter) [task:534137] {CVE-2023-53397}
  - usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() (Yang Yingliang) [task:532165] {CVE-2022-50246}
  - RDMA/bnxt_re: wraparound mbox producer index (Kashyap Desai) [task:531719] {CVE-2023-53201}
  - drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug (K Prateek Nayak) [task:532209]
  - cacheinfo: Fix shared_cpu_map to handle shared caches at different levels (Yong-Xuan Wang) [task:532209] {CVE-2023-53254}
  - cacheinfo: Align checks in cache_shared_cpu_map_{setup,remove} for readability (Sudeep Holla) [task:532209]
  - cacheinfo: Add helper to access any cache index for a given CPU (Sudeep Holla) [task:532209]
  - comedi: pcl812: Fix bit shift out of bounds (Ian Abbott) [task:519689] {CVE-2025-38530}
  - blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (Li Jinlin) [task:530285]
  - Revert "blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd" (cuitao) [task:530285]
  - blkcg: Fix multiple bugs in blkcg_activate_policy() (Tejun Heo) [task:530285]
  - blkcg: pass @q and @blkcg into blkcg_pol_alloc_pd_fn() (Tejun Heo) [task:530285]
  - comedi: aio_iiro_16: Fix bit shift out of bounds (Ian Abbott) [task:519361] {CVE-2025-38529}
  - tee: fix NULL pointer dereference in tee_shm_put (Pei Xiao) [task:534351] {CVE-2025-39865}
  - af_unix: Fix data-races around user->unix_inflight. (Kuniyuki Iwashima) [task:532219] {CVE-2023-53204}
  - net: sched: sfb: fix null pointer access issue when sfb_init() fails (Zhengchao Shao) [task:532833] {CVE-2022-50356}
  - KVM: SVM: Fix vgif feature not enabled (张浩) [task:532315]
  - driver: base: fix UAF when driver_attach failed (Schspa Shi) [task:440534] {CVE-2022-49385}
  - bpf: Reject narrower access to pointer ctx fields (Paul Chaignon) [task:520583] {CVE-2025-38591}
  - ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (Haoxiang Li) [task:523425] {CVE-2025-38664}
  - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle (Chen Zhongjin) [task:531315] {CVE-2023-53250}
  - drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (Ivan Stepchenko) [task:442357] {CVE-2024-58052}
  - drm/amdgpu: fix usage slab after free (Vitaly Prosyak) [task:429491] {CVE-2024-56551}
  - drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again (shaoyunl) [task:225612] {CVE-2021-47551}
  - drm/amdkfd: don't use dqm lock during device reset/suspend/resume (Philip Yang) [task:225612]
  - drm/i915/selftests: fix subtraction overflow bug (Andrzej Hajda) [task:440726] {CVE-2022-49635}
  - tcp: Add sysctl to configure ephemeral port shuffle period for connect() (luoxuanqiang) [task:522905]
  - tcp: Add sysctl to control port randomization in __inet_hash_connect() (Xuanqiang Luo) [task:522905]
  - PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 (Werner Sembach) [task:442591] {CVE-2025-21831}
  - x86/PCI: Avoid PME from D3hot/D3cold for AMD Rembrandt and Phoenix USB4 (Mario Limonciello) [task:442591]
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (Lucy Thrun) [task:530189] {CVE-2025-39751}
  - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (Soenke Huster) [task:440402] {CVE-2022-49139}
  - ALSA: seq: oss: Send fragmented SysEx messages immediately (Takashi Iwai) [task:429534] {CVE-2024-57893}
  - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() (Zhang Shurong) [task:532109] {CVE-2023-53220}
  - ipv6: sr: Fix MAC comparison to be constant-time (Eric Biggers) [task:527963] {CVE-2025-39702}
  - net/sched: Fix backlog accounting in qdisc_dequeue_internal (William Liu) [task:527995] {CVE-2025-39677}
  - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Dan Carpenter) [task:530193]
  - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Takashi Iwai) [task:530193] {CVE-2025-39757}
  - tracing: Add down_write(trace_event_sem) when adding trace event (Steven Rostedt) [task:520111] {CVE-2025-38539}
  - jbd2: prevent softlockup in jbd2_log_do_checkpoint() (Baokun Li) [task:527509]
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Takashi Iwai) [task:527383] {CVE-2025-38729}
  - ipv6: fix possible infinite loop in fib6_info_uses_dev() (Eric Dumazet) [task:520571] {CVE-2025-38587}
  - wifi: mac80211: reject TDLS operations when station is not associated (Moon Hee Lee) [task:523365] {CVE-2025-38644}
  - srcu: Tighten cleanup_srcu_struct() GP checks (Paul E. McKenney) [task:440484] {CVE-2022-49651}
  - tcp: also NULL skb->dev when copy was needed (Florian Westphal) [task:526817]
  - tcp: ensure skb->dev is NULL before leaving TCP stack (Eric Dumazet) [task:526817]
  - net: 9p: fix refcount leak in p9_read_work() error handling (Hangyu Hua) [task:482233] {CVE-2022-50114}
  - net_sched: Flush gso_skb list too during ->change() (Cong Wang) [task:476201] {CVE-2025-37992}
  - openvswitch: Fix unsafe attribute parsing in output_userspace() (Eelco Chaudron) [task:471767] {CVE-2025-37998}
  - config/x86: enable CONFIG_DRM_PHYTIUM (Shixiong Ou) [task:522397]
  - net/packet: fix a race in packet_set_ring() and packet_notifier() (Quang Le) [task:523421] {CVE-2025-38617}
  - f2fs: fix to avoid UAF in f2fs_sync_inode_meta() (Chao Yu) [task:520783] {CVE-2025-38578}
  - iavf: Fix reset error handling (Przemyslaw Patynowski) [task:482117] {CVE-2022-50053}
  - io_uring: prevent opcode speculation (Pavel Begunkov) [task:444117] {CVE-2025-21863}
  - Remove sensitive words (Haofeng Li) [task:524133]
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [task:503861] {CVE-2025-38352}
  - block/blk-throttle: Fix spinlock corruption when skipping throttling (Yang Xiuwei) [task:512445]
  - vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic) [task:523419] {CVE-2025-38618}
  - REDHAT: spec: Fix internal "File listed twice" errors (Prarit Bhargava) [task:506475]
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Jann Horn) [task:486335] {CVE-2025-38085}
  - net/sched: Restrict conditions for adding duplicating netems to qdisc tree (William Liu) [task:520771] {CVE-2025-38553}
  - update changelog for incoming 4.19.90-89.27.v2401 (Zhengyuan Liu)
  - media: xc2028: avoid use-after-free in load_firmware_cb() (Chi Zhiling) [task:219526]
  - can: bcm: Fix UAF in bcm_proc_show() (YueHaibing) [task:371789]
  - usb: gadget: configfs: Fix OOB read on empty string write (Xinyu Liu) [task:507017, task:516901] {CVE-2025-38497}
  - arm64: paravirt: Use RCU read locks to guard stolen_time (Prakruthi Deepak Heragu) [task:516941]
  - arm64: paravirt: Initialize steal time when cpu is online (Andrew Jones) [task:516941]
  - arm64: Retrieve stolen time as paravirtualized guest (Steven Price) [task:516941]
  - KVM: arm64: Provide VCPU attributes for stolen time (Steven Price) [task:516941]
  - KVM: Allow kvm_device_ops to be const (Steven Price) [task:516941]
  - KVM: arm64: Support stolen time reporting via shared structure (Steven Price) [task:516941]
  - KVM: arm64: Implement PV_TIME_FEATURES call (Steven Price) [task:516941]
  - KVM: arm64: Document PV-time interface (Steven Price) [task:516941]
  - ia64: kprobes: Fix to pass correct trampoline address to the handler (Masami Hiramatsu) [task:485647]
  - ia64: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (Kuniyuki Iwashima) [task:495865] {CVE-2025-38250}
  - tracing: Fix use-after-free in print_graph_function_flags during tracer switching (Tengda Wu) [task:458968] {CVE-2025-22035}
  - udp: fix skb_copy_and_csum_datagram with odd segment sizes (Willem de Bruijn) [task:516751]
  - iov_iter: reduce code duplication (Al Viro) [task:516751]
  - iov_iter: teach csum_and_copy_to_iter() to handle pipe-backed ones (Al Viro) [task:516751]
  - security/lsm: Fix missing selinux file type (mengdehui) [task:506521]
  - driver/tpm: fix NULL err when creat vtpm (mengdehui) [task:519155]
  - kysec/ppro: Fix get paths that are not real paths (mengdehui) [bug:387337]
  - media: cxusb: no longer judge rbuf when the write fails (Edward Adam Davis) [task:491981] {CVE-2025-38229}
  - geneve: make sure to pull inner header in geneve_rx() (Eric Dumazet) [task:214140] {CVE-2024-26857}
  - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() (Eric Dumazet) [task:214149] {CVE-2024-26882}
  - net: ethernet: stmmac: fix write to sgmii_adapter_base (Dinh Nguyen) [task:441324]
  - net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link (Dinh Nguyen) [task:441324] {CVE-2022-49061}
  - gpio: prevent potential speculation leaks in gpio_device_get_desc() (Hagar Hemdan) [task:352677]
  - scsi: megaraid_sas: Make most module parameters static (Dr. David Alan Gilbert) [task:505377, task:522117]
  - megaraid_sas: don't set QUEUE_FLAG_NOMERGES (Christoph Hellwig) [task:505377, task:522117]
  - scsi: megasas: Stop using the SCSI pointer (Bart Van Assche) [task:505377, task:522117]
  - scsi: megaraid_sas: Add helper functions for irq_context (Sumit Saxena) [task:505377, task:522117]
  - scsi: megaraid_sas: Call scsi_done() directly (Bart Van Assche) [task:505377, task:522117]
  - scsi: core: Rename scsi_mq_done() into scsi_done() and export it (Bart Van Assche) [task:505377, task:522117]
  - scsi: megaraid_sas: Retry reads of outbound_intr_status reg (Shivasharan S) [task:505377, task:522117]
  - rpmbuild: The 4K compilation option was removed from rpmbuild. (lihaofeng) [task:490099]
  - Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken (Pedro Nishiyama) [task:491387] {CVE-2025-38099}
  - Bluetooth: Add quirk for broken READ_VOICE_SETTING (Pedro Nishiyama) [task:491387]
  - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (Luiz Augusto von Dentz) [task:491397] {CVE-2025-38117}
  - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (Alexis Lothoré) [task:491205] {CVE-2025-38126}
  - net: stmmac: Calculate CDC error only once (Kurt Kanzenbach) [task:491205]
  - net: stmmac: retain PTP clock time during SIOCSHWTSTAMP ioctls (Holger Assmann) [task:491205]
  - net: stmmac: Fix signed/unsigned wreckage (Thomas Gleixner) [task:491205]
  - net: stmmac: add timestamp correction to rid CDC sync error (Voon Weifeng) [task:491205]
  - net: stmmac: Get correct timestamp values from XGMAC (Jose Abreu) [task:491205]
  - net: stmmac: fix ptp timestamping on Rx on gmac4 (Ilias Apalodimas) [task:491205]
  - net: stmmac: implement the SIOCGHWTSTAMP ioctl (Artem Panfilov) [task:491205]
  - mtk-sd: reset host->mrq on prepare_data() error (Sergey Senozhatsky) [task:505919]
  - mtk-sd: Prevent memory corruption from DMA map failure (Masami Hiramatsu (Google)) [task:505919] {CVE-2025-38401}
  - mmc: mediatek: use data instead of mrq parameter from msdc_{un}prepare_data() (Yue Hu) [task:505919]
  - mmc: mediatek: fix SDIO IRQ detection issue (jjian zhou) [task:505919]
  - mmc: bcm2835: Drop pointer to mmc_host from bcm2835_host (Lukas Wunner) [task:505919]
  - panic: implement nmi_panic_self_stop function for KunPeng 920 (liqiang01) [task:515025]
  - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (Xiang Mei) [task:507039]
  - net/sched: sch_qfq: Fix race condition on qfq_aggregate (Xiang Mei) [task:507039] {CVE-2025-38477}
  - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Mark Zhang) [task:507033] {CVE-2025-38387}
  - nbd: fix race between timeout and normal completion (Ming Lei) [task:511239] {CVE-2024-49855}
  - btrfs: fix deadlock between quota enable and other quota operations (Filipe Manana) [task:510715, task:503849, task:463272]
  - LoongArch: Define the __io_aw() hook as mmiowb() (Huacai Chen) [task:221961] {CVE-2024-35818}
  - ipv6: mcast: add RCU protection to mld_newpack() (Eric Dumazet) [task:440273] {CVE-2025-21758}
  - ndisc: extend RCU protection in ndisc_send_skb() (Eric Dumazet) [task:440599] {CVE-2025-21760}
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (Eric Dumazet) [task:440498] {CVE-2025-21761}
  - ndisc: use RCU protection in ndisc_alloc_skb() (Eric Dumazet) [task:440498]
  - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() (Eric Dumazet) [task:440498]
  - mld: avoid unnecessary high order page allocation in mld_newpack() (Taehee Yoo) [task:440273]
  - KVM: async_pf: Cleanup kvm_setup_async_pf() (Vitaly Kuznetsov) [task:511433]
  - fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var (Murad Masimov) [task:491927] {CVE-2025-38215}
  - cpufreq: governor: Use kobject release() method to free dbs_data (Kevin Hao) [task:440528] {CVE-2022-49513}
  - cpufreq: Move to_gov_attr_set() to cpufreq.h (Kevin Hao) [task:440528]
  - driver core: fix deadlock in __device_attach (Zhang Wensheng) [task:441300] {CVE-2022-49371}
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [task:425040] {CVE-2024-57884}
  - sw_64: kprobes: Use generic kretprobe trampoline handler (Feng Yang) [task:510463]
  - block: don't allow the same type rq_qos add more than once (Jinke Han) [task:482125] {CVE-2022-50086}
  - dm thin: fix use-after-free crash in dm_sm_register_threshold_callback (Luo Meng) [task:481813] {CVE-2022-50092}
  - jfs: fix array-index-out-of-bounds read in add_missing_indices (Aditya Dutt) [task:491905] {CVE-2025-38204}
  - net: lan743x: Fix memleak issue when GSO enabled (Thangaraj Samynathan) [task:466617] {CVE-2025-37909}
  - lan743x: fix endianness when accessing descriptors (Alexey Denisov) [task:466617]
  - lan743x: fix rx_napi_poll/interrupt ping-pong (Sven Van Asbroeck) [task:466617]
  - lan743x: remove redundant initialization of variable current_head_index (Colin Ian King) [task:466617]
  - lan743x: remove redundant assignment to variable rx_process_result (Colin Ian King) [task:466617]
  - wifi: iwlwifi: don't warn when if there is a FW error (Miri Korenblit) [task:491311] {CVE-2025-38096}
  - ipvs: fix uninit-value for saddr in do_output_route4 (Julian Anastasov) [task:466487] {CVE-2025-37961}
  - sch_htb: make htb_qlen_notify() idempotent (Cong Wang) [task:466415] {CVE-2025-37932}
  - bnxt_en: Fix out-of-bound memcpy() during ethtool -w (Shruti Parab) [task:466237] {CVE-2025-37911}
  - net: atlantic: fix aq_vec index out of range error (Chia-Lin Kao (AceLan)) [task:481741] {CVE-2022-50066}
  - scsi: zfcp: Fix double free of FSF request when qdio send fails (Benjamin Block) [task:460278] {CVE-2022-49789}
  - dm cache: prevent BUG_ON by blocking retries on failed device resumes (Ming-Hung Tsai) [task:481765] {CVE-2025-38066}
  - net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (Peter Seiderer) [task:481989] {CVE-2025-38061}
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Shin'ichiro Kawasaki) [task:492667] {CVE-2025-38211}
  - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private (Weihang Li) [task:492667]
  - neighbour: use RCU protection in __neigh_notify() (Eric Dumazet) [task:440628] {CVE-2025-21763}
  - neighbour: delete redundant judgment statements (Li Zetao) [task:440628]
  - ipv6: mcast: extend RCU protection in igmp6_send() (Eric Dumazet) [task:440728] {CVE-2025-21759}
  - rpl: Fix use-after-free in rpl_do_srh_inline(). (Kuniyuki Iwashima) [task:507049] {CVE-2025-38476}
  - f2fs: fix to do sanity check on sbi->total_valid_block_count (Chao Yu) [task:490963] {CVE-2025-38163}
  - Bluetooth: use memset avoid memory leaks (Minghao Chi (CGEL ZTE)) [task:439933] {CVE-2022-49116}
  - team: better TEAM_OPTION_TYPE_STRING validation (Eric Dumazet) [task:440782] {CVE-2025-21787}
  - net_sched: sch_sfq: reject invalid perturb period (Eric Dumazet) [task:491933] {CVE-2025-38193}
  - ice: fix Tx scheduler error handling in XDP callback (Michal Kubiak) [task:491665] {CVE-2025-38127}
  - kprobes: Make local functions static (Masami Hiramatsu) [task:485647]
  - kprobes: Free kretprobe_instance with RCU callback (Masami Hiramatsu) [task:485647]
  - kprobes: Remove NMI context check (Masami Hiramatsu) [task:485647]
  - loongarch: kprobes: Use generic kretprobe trampoline handler (Feng Yang) [task:485647]
  - sparc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - sh: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - s390: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - powerpc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - mips: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - arc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - arm64: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - arm: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - x86/kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - kprobes: Add generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - atm: clip: Fix NULL pointer dereference in vcc_sendmsg() (Yue Haibing) [task:505883] {CVE-2025-38458}
  - ipc: fix to protect IPCS lookups using RCU (Jeongjun Park) [task:491917] {CVE-2025-38212}
  - HID: core: ensure the allocated report buffer can contain the reserved report ID (Benjamin Tissoires) [task:507035] {CVE-2025-38495}
  - Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() (Kuniyuki Iwashima) [task:507031] {CVE-2025-38473}
  - usb: net: sierra: check for no status endpoint (Oliver Neukum) [task:507045] {CVE-2025-38474}
  - net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (William Liu) [task:507019] {CVE-2025-38468}
  - sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed (Waiman Long) [task:482073] {CVE-2022-50103}
  - Bluetooth: btrtl: Prevent potential NULL dereference (Dan Carpenter) [task:460185] {CVE-2025-37792}
  - ACPICA: Refuse to evaluate a method if arguments are missing (Rafael J. Wysocki) [task:505901] {CVE-2025-38386}
  - mtd: spinand: fix memory leak of ECC engine conf (Pablo Martin-Gomez) [task:505937] {CVE-2025-38384}
  - HID: core: do not bypass hid_hw_raw_request (Benjamin Tissoires) [task:507013] {CVE-2025-38494}
  - usb: typec: altmodes/displayport: do not index invalid pin_assignments (RD Babiera) [task:505909] {CVE-2025-38391}
  - perf: Fix sample vs do_exit() (Peter Zijlstra) [task:505889] {CVE-2025-38424}
  - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() (Tengda Wu) [task:497747] {CVE-2025-38320}
  - scsi: lpfc: Use memcpy() for BIOS version (Daniel Wagner) [task:497751] {CVE-2025-38332}
  - ftrace: Fix UAF when lookup kallsym after ftrace disabled (Ye Bin) [task:497283] {CVE-2025-38346}
  - atm: clip: Fix potential null-ptr-deref in to_atmarpd(). (Kuniyuki Iwashima) [task:505877] {CVE-2025-38460}
  - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (Zhu Yanjun) [task:482019] {CVE-2025-38024}
  - intel_th: Fix a resource leak in an error handling path (Christophe JAILLET) [task:482199] {CVE-2022-50143}
  - crypto: algif_hash - fix double free in hash_accept (Ivan Pravdin) [task:482127] {CVE-2025-38079}
  - btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (Goldwyn Rodrigues) [task:482133] {CVE-2025-38034}
  - intel_th: msu: Fix vmalloced buffers (Alexander Shishkin) [task:482209] {CVE-2022-50142}
  - intel_th: msu: Get rid of the window size limit (Alexander Shishkin) [task:482209]
  - mm/vmscan: don't try to reclaim hwpoison folio (Jinjiang Tu) [task:461947] {CVE-2025-37834}
  - libnvdimm/labels: Fix divide error in nd_label_data_init() (Robert Richter) [task:482039] {CVE-2025-38072}
  - nvdimm: Split label init out from the logic for getting config data (Alexander Duyck) [task:482039]
  - libnvdimm, dimm: Maximize label transfer size (Dan Williams) [task:482039]
  - block: fix resource leak in blk_register_queue() error path (Zheng Qixing) [task:466601] {CVE-2025-37980}
  - jffs2: check that raw node were preallocated before writing summary (Artem Sadovnikov) [task:491885] {CVE-2025-38194}
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (Fedor Pchelkin) [task:419629]
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (Ignat Korchagin) [task:419629] {CVE-2024-56605}
  - drivers/rapidio/rio_cm.c: prevent possible heap overwrite (Andrew Morton) [task:488165] {CVE-2025-38090}
  - thunderbolt: Do not double dequeue a configuration request (Sergey Senozhatsky) [task:491861] {CVE-2025-38174}
  - can: bcm: add missing rcu read protection for procfs content (Oliver Hartkopp) [task:476361] {CVE-2025-38003}
  - can: bcm: add locking for bcm_op runtime updates (Oliver Hartkopp) [task:476359] {CVE-2025-38004}
  - efi: fix potential NULL deref in efi_mem_reserve_persistent (Anton Gusev) [task:448780] {CVE-2023-52976}
  - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (Evgenii Shatokhin) [task:425037] {CVE-2024-57889}
  - fbdev: omapfb: Add 'plane' value check (Leonid Arapov) [task:462582] {CVE-2025-37851}
  - usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() (Chenyuan Yang) [task:462584] {CVE-2025-37881}
  - mtd: rawnand: brcmnand: fix PM resume warning (Kamal Dasu) [task:462586] {CVE-2025-37840}
  - fs/jfs: Prevent integer overflow in AG size calculation (Rand Deeb) [task:462439] {CVE-2025-37858}
  - pm: cpupower: bench: Prevent NULL dereference on malloc failure (Zhongqiu Han) [task:462443] {CVE-2025-37841}
  - HID: pidff: Fix null pointer dereference in pidff_find_fields (Tomasz Pakuła) [task:462571] {CVE-2025-37862}
  - mcb: fix a double free bug in chameleon_parse_gdd() (Haoxiang Li) [task:461958] {CVE-2025-37817}
  - usb: dwc3: gadget: check that event count does not exceed event buffer length (Frode Isaksen) [task:461959] {CVE-2025-37810}
  - staging: rtl8712: fix uninit-value in usb_read8() and friends (Wang Cheng) [task:441328] {CVE-2022-49301}
  - staging: rtl8712: usb_ops.c: Remove leading p from variable names (Nishka Dasgupta) [task:441328]
  - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() (Zhang Shurong) [task:463860] {CVE-2023-53146}
  - mtd: inftlcore: Add error check for inftl_read_oob() (Wentao Liang) [task:466613] {CVE-2025-37892}
  - tracing: Fix oob write in trace_seq_to_buffer() (Jeongjun Park) [task:466608] {CVE-2025-37923}
  - arp: use RCU protection in arp_xmit() (Eric Dumazet) [task:440668] {CVE-2025-21762}
  - ipv6: use RCU protection in ip6_default_advmss() (Eric Dumazet) [task:441272] {CVE-2025-21765}
  - net: add dev_net_rcu() helper (Eric Dumazet) [task:441272, task:440668]
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Jiri Pirko) [task:350517]
  - dm cache: fix flushing uninitialized delayed_work on cache_ctr error (Ming-Hung Tsai) [task:390747] {CVE-2024-50280}
  - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() (Josh Poimboeuf) [task:466477] {CVE-2025-37937}
  - ftrace: Add cond_resched() to ftrace_graph_set_hash() (zhoumin) [task:466616] {CVE-2025-37940}
  - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (Henry Martin) [task:461963] {CVE-2025-37829}
  - ext4: ignore xattrs past end (Bhupesh) [task:460186] {CVE-2025-37738}
  - usb: dwc2: fix a devres leak in hw_enable upon suspend resume (Fabrice Gasnier) [task:460650] {CVE-2023-53054}
  - usb: dwc2: Always disable regulators on driver teardown (Marc Zyngier) [task:460650]
  - iio: adc: ti-ads8688: fix information leak in triggered buffer (Javier Carrasco) [task:426440] {CVE-2024-57906}
  - usb: xhci: Apply the link chain quirk on NEC isoc endpoints (Michal Pecio) [task:458303] {CVE-2025-22022}
  - usb: xhci: move link chain bit quirk checks into one helper function. (Niklas Neronin) [task:458303]
  - xhci: Don't pass struct xhci_hcd pointer to xhci_link_seg() (Mathias Nyman) [task:458303]
  - atm: clip: Fix infinite recursive call of clip_push(). (Kuniyuki Iwashima) [task:505897] {CVE-2025-38459}
  - vsock/vmci: Clear the vmci transport packet properly when initializing it (HarshaVardhana S A) [task:505907] {CVE-2025-38403}
  - media: venus: hfi: add check to handle incorrect queue size (Vikash Garodia) [task:460274] {CVE-2025-23158}
  - media: venus: hfi: add a check to handle OOB in sfr region (Vikash Garodia) [task:460239] {CVE-2025-23159}
  - reset: uniphier-glue: Fix possible null-ptr-deref (Hui Tang) [task:448822] {CVE-2022-49758}
  - reset: uniphier-glue: Use reset_control_bulk API (Philipp Zabel) [task:448822]
  - reset: uniphier-usb3: Rename to reset-uniphier-glue (Kunihiko Hayashi) [task:448822]
  - media: venus: hfi_parser: refactor hfi packet parsing logic (Vikash Garodia) [task:460123] {CVE-2025-23156}
  - media: venus: hfi: add checks to handle capabilities from firmware (Vikash Garodia) [task:460123]
  - media: venus: hfi_parser: Check for instance after hfi platform get (Stanimir Varbanov) [task:460123]
  - media: venus: hfi_parser: Don't initialize parser on v1 (Stanimir Varbanov) [task:460123]
  - media: venus: Fix uninitialized variable count being checked for zero (Colin Ian King) [task:460123]
  - media: venus: Get codecs and capabilities from hfi platform (Stanimir Varbanov) [task:460123]
  - media: venus: parser: Prepare parser for multiple invocations (Stanimir Varbanov) [task:460123]
  - bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() (Shin'ichiro Kawasaki) [task:439953] {CVE-2022-49711}
  - tipc: Fix use-after-free in tipc_conn_close(). (Kuniyuki Iwashima) [task:505893] {CVE-2025-38464}
  - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint (Mike Christie) [task:458998] {CVE-2025-22083}
  - RDMA/srpt: Introduce a reference count in struct srpt_device (Bart Van Assche) [task:482173]
  - RDMA/srpt: Duplicate port name members (Bart Van Assche) [task:482173]
  - drm/qxl: fix UAF on handle creation (Wander Lairson Costa) [task:346813] {CVE-2023-39198}
  - RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() (Jianglei Nie) [task:482015] {CVE-2022-50138}
  - RDMA/qedr: Improve error logs for rdma_alloc_tid error return (Prabhakar Kushwaha) [task:482015]
  - net_sched: sch_sfq: fix a potential crash on gso_skb handling (Eric Dumazet) [task:491209] {CVE-2025-38115}
  - calipso: unlock rcu before returning -EAFNOSUPPORT (Eric Dumazet) [task:491257]
  - calipso: Don't call calipso functions for AF_INET sk. (Kuniyuki Iwashima) [task:491257] {CVE-2025-38147}
  - net: cadence: macb: Fix a possible deadlock in macb_halt_tx. (Mathieu Othacehe) [task:491663] {CVE-2025-38094}
  - sch_hfsc: make hfsc_qlen_notify() idempotent (Cong Wang) [task:491937] {CVE-2025-38177}
  - wifi: mac80211: Purge vif txq in ieee80211_do_stop() (Remi Pommarel) [task:460303] {CVE-2025-37794}
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Kyungwook Boo) [task:491963] {CVE-2025-38200}
  - wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads (Minsuk Kang) [task:448783] {CVE-2022-49740}
  - atm: Revert atm_account_tx() if copy_from_iter_full() fails. (Kuniyuki Iwashima) [task:491903] {CVE-2025-38190}
  - linkdata: fix some code style errors (Gang Yan) [task:495093]
  - net: atm: fix /proc/net/atm/lec handling (Eric Dumazet) [task:491983] {CVE-2025-38180}
  - net: atm: add lec_mutex (Eric Dumazet) [task:497319] {CVE-2025-38323}
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (Ye Bin) [task:459580] {CVE-2025-22121}
  - ext4: introduce ITAIL helper (Ye Bin) [task:459580]
  - ext4: improve xattr consistency checking and error reporting (Theodore Ts'o) [task:459580]
  - set linkdata ps3/ps3stor to m in x86, arm and loongarch (Cao Guanghui) [task:449995]
  - LINKDATA: ps3/ps3stor: update driver support for linkdata (liujie) [task:449995]
  - bpf: Fix a data-race around bpf_jit_limit. (Kuniyuki Iwashima) [task:482243] {CVE-2022-49967}
  - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Dong Chenchen) [task:494275] {CVE-2025-38129}
  - page_pool: fix inconsistency for page_pool_ring_[un]lock() (Yunsheng Lin) [task:494275]
  - net: page_pool: use in_softirq() instead (Qingfang DENG) [task:494275]


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-13
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 CVE-2021-42386


author: liuxu <liuxu156@huawei.com> - 1:1.31.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: lutianxiong<lutianxiong@huawei.com> - 1.16.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix invalid read in ares_parse_soa_reply.c found during fuzzing


author: xinghe <xinghe2@h-partners.com> - 1.16.1-7
changelog:
  - Type:cves
  - CVE:CVE-2023-31130 CVE-2023-31124 CVE-2023-31147
  - SUG:NA
  - DESC:fix CVE-2023-31130 CVE-2023-31124 CVE-2023-31147


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p26
changelog:
  - add patch28:caja-1.12.7-kylin-fix-bugzilla-8197-Udisk-file-system-is-inconsistent.patch
  - 修复caja显示U盘文件系统格式与命令行查看不一致问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p27
changelog:
  - Type:fixbug
  - ID  :[bug#8460][bugzilla]
  - SUG :NA
  - DESC:add patch31:caja-1.12.7-kylin-fix-icon-overlap-when-creating-a-new-file.patch
         删除对于桌面图标大小等级SMALLEST,SMALLER的屏蔽，解决等级SMALLEST,SMALLER,SMALL，
         三种模式下新建文件，图标重叠问题然.解决缩放图标时，SMALLER,SMALL两个级别形态相
         同问题.修改图标间距，解决SMALLER,SMALL两个级别，桌面图标与标题重叠问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p28
changelog:
  - Type:fixbug
  - ID  :[bug#113327]
  - SUG :NA
  - DESC:add patch32:caja-1.12.7-kylin-fix-Unable-to-remount-after-Udisk-is-unmounted.patch
         修复当U盘没有UUID时，手动卸载，再挂载caja崩溃问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p29
changelog:
  - Type:fixbug
  - ID  :[Task#160363]
  - SUG :NA
  - DESC:add patch33:caja-1.12.7-kylin-change-the-dvd-capacity-display.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p31
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add caja-update-translations-for-hk-and-tw.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p33
changelog:
  - Type: bugfix
  - ID:   [TASK#205172]
  - SUG:  NA
  - DESC: add caja-update-Secure-translations-for-hk-and-tw.patch


author: huayadong <huayadong@kylinos.cn> - 01.12.7-1kord0k233.p35
changelog:
  - Type: bugfix
  - ID:   [BUG#217322]
  - SUG:  NA
  - DESC: delete Requires: redhat-menus ,add Requires: kylin-menu


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p36
changelog:
  - Type: bugfix
  - ID:   [BUG#240575]
  - SUG:  NA
  - DESC: fix an used after free problem which caused disk format failure


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p37
changelog:
  - Type: bugfix
  - ID:   [BUG#340468]
  - SUG:  NA
  - DESC: don't free memory that was not dynamically allocated


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p39
changelog:
  - Type: update
  - ID:   [TASK#500863]
  - SUG:  NA
  - DESC: fix nonremovable disks incorrectly placed under removable disks


author: hanshuang <hanshuang@kylinos.cn> - 1:12.2.8-8.p01
changelog:
  - Modify spec file fix python34-devel  python34-setuptools  python34-Cython openEuler-rpm-config problem


author: tenglei <tenglei@kylinos.cn> - 1:12.2.8-8.p05
changelog:
  - Type:BUG#194959,BUG#215185
  - ID:NA
  - SUG:NA
  - DESC: 1) Remove subman because of not support kylinos.
          2) fix CVE-2021-20288 on loongarch


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 19.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix the error level logs displayed for the cloud-init-local service


author: yanjianqing <yanjianqing@kylinos.cn> -19.4-6.p03
changelog:
  - Type:CVE
  - ID:[Task#154159]
  - SUG:NA
  - DESC:fix CVE-2022-2084
  -      Fix test_net.py testcase fail
  -      Fix a unitest error


author: caiyinan <caiyinan@kylinos.cn> - 196.3-1.p06
changelog:
  - Type:bugfix
  - ID:[bug#186959]
  - SUG:NA
  - DESC:fix unlinked other OS branding file by excluding from packages


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.28-12.p08
changelog:
  - Type: bugfix
  - ID: [BUG#191919]
  - SUG: NA
  - DESC:skip p07,Remove wrong country_name in locatedata.


author: Xu Jin <jinxu@kylinos.cn> - 2.28-12.p10
changelog:
  - Type:CVE
  - ID:[TASK#184397]
  - SUG:NA
  - DESC:fix CVE-2022-23219 CVE-2021-3999 CVE-2022-23218 CVE-2023-0687


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.28-12.p12
changelog:
  - Type:cves
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:Fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: panzhe <panzhe@kylinos.cn> - 2.28-12.p15
changelog:
  - Type: bugfix
  - ID: [BUG#280777]
  - SUG:  NA
  - DESC: fix pthread_once hangs when init routine throws an exception


author: panzhe <panzhe@kylinos.cn> - 2.28-12.p16
changelog:
  - Type: update
  - ID: [BUG#343449]
  - SUG:  NA
  - DESC: Fix missing lib after glibc update , and resolve the file conflict issue of /usr/lib64/libnss_nis.so


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.2.0-213
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker


author: lijian<lijian2@kylinos.cn> - 1.2.0-213.p03
changelog:
  - Type:bugfix
  - ID:[BUG#352209]
  - SUG:NA
  - DESC:Added package conflict with docker-engine to avoid co-installation issues


author: lijian<lijian2@kylinos.cn> - 1:1.1.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:rebuild for golang cvefix: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: lijian <lijian2@kylinos.cn> - 1:1.1.0-9.p02
changelog:
  - Type:cves
  - ID:CVE-2023-39325 CVE-2023-44487 CVE-2025-27144
  - SUG:NA
  - DESC:fix CVE-2023-39325 CVE-2023-44487 CVE-2025-27144


author: jiangchuangang <jiangchuangang@huawei.com> - 8.32-6
changelog:
  - skip testcase for overlay filesystem because of no inotify_add_watch
    add test-skip-overlay-filesystem-because-of-no-inotify_add_watch.patch


author: jiangchuangang<jiangchuangang@huawei.com> - 8.32-9
changelog:
  - sync patches from community
  - add backport-pr-fix-infinite-loop-when-double-spacing.patch
    backport-wc-ensure-we-update-file-offset.patch


author: jiangchuangang <jiangchuangang@huawei.com> - 8.32-10
changelog:
  - sync patches from community
  - add backport-who-fix-only-theoretical-overflow.patch
        backport-tac-handle-short-reads-on-input.patch
        backport-setenv-Don-t-crash-if-malloc-returns-NULL.patch
        backport-who-don-t-crash-if-clock-gyrates.patch
        backport-doc-od-strings-clarify-operation.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 8.32-10.p01
changelog:
  - Type:update
  - ID:TASK#186438;BUG#199873
  - SUG:NA
  - DESC:fix typo in zh_CN.po
         using the ns7.6 stat file


author: xinghe <xinghe2@h-partners.com> - 4.11.12-31
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: sunjialin <sunjialin@kylinos.cn> - 4.11.12-32.p01
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Modify Requires:libldb & Skip export LDFLAGS & Rebuild for libcrypt.so.1 on loongarch


author: changtao <changtao@kylinos.cn> - 4.11.12-32.p03
changelog:
  - Type:bugfix
  - ID:[BUG#220458]
  - SUG:NA
  - DESC:fix smbd, don't log success as error
         fix require satisfied libldb version for samba-client


author: peijiankang <peijiankang@kylinos.cn> - 1:2.2.13-21.se.01
changelog:
  - Type: cves
  - ID:   [TASK#344691]
  - SUG:  NA
  - DESC:合入打印机设备管控 Patch6009: kysec-devctl-printer-control-separate.patch
         generic-hardened-ld
         sync from 2.2.13-19.p01.se.01


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dynbuf: provide curlx_ names for reuse by the curl tool
         curl: use curlx_dynbuf for realloc when loading config files
         curl: make file2string use dynbuf
         paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-38
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: xingwei <xingwei14@h-partners.com> - 7.71.1-41
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:altsvc: avoid integer overflow in expire calculation
         test391: verify --path-as-is with redirect
         urlapi: fix redirect to a new fragment or query (only)


author: xinghe <xinghe2@h-partners.com> - 7.71.1-42
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:curl_path: bring back support for SFTP path ending in /~
         curl_path: make SFTP handle a path like /~ properly


author: gaoyukun <gaoyukun@kylinos.cn> - 7.71.1-43.p01
changelog:
  - Type:bugfix
  - ID:TASK#414527
  - SUG:NA
  - DESC: add configure options '--enable-ares' to support feature '-dns-servers', resolve test1592,507,534 failure.


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 8:2.03.09-15.p01
changelog:
  - Type: updates
  - ID: [Task#186442]
  - SUG: NA
  - DESC: Sync 2.03.09-12.p05 source rpm patches:
  	p01:0018-LD_LIBRARY_PATH-add-extra-dir.patch
  	p03:1000-use-4k-sector-size-when-any-dev-is-4k.patch
  	p04:lvmlockd: add suport for loongarch64


author: baiguo <baiguo@kylinos.cn> - 8:2.03.09-15.p03
changelog:
  - Type: bugfix
  - ID: [Task#346081]
  - SUG: NA
  - DESC: fix an double free in the error path from _stats_creat_group
          because sp4-ha occupies p02,so p03 is used.


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-8
changelog:
  - Type:cves
  - ID:CVE-2021-25214, CVE-2021-25215, CVE-2021-25219, CVE-2021-25220
  - SUG:restart
  - DESC: Fix CVE-2021-25214 CVE-2021-25215 CVE-2021-25219 CVE-2021-25220


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-9
changelog:
  - Type:cves
  - ID:CVE-2022-2928, CVE-2022-2929
  - SUG:restart
  - DESC: Fix CVE-2022-2928 and CVE-2022-2929


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-10
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: lijiaan <lijiaan@kylinos.cn> - 1.0.0.rc16-52.p01
changelog:
  - modify spec  after %build  add cp /usr/lib/rpm/kylin/confit.* ./autoconf
  - DESC: config.guess and config.sub ensure the software can be compiled and
    run correctly in a variety of different system env.


author: yanshuai <yanshuai01@kylinos.cn> - 1.0.0.rc16-52.p03
changelog:
  - Type: bugfix
  - ID: [BUG#302327]
  - SUG: NA
  - DESC: fix dmraid help info display incomplete problem'


author: gaihuiying <gaihuiying1@huawei.com> - 4.2.23-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove recommends rpm-plugins-systemd-inhibit
         backport community patches and fix CVE-2021-3445
         delete duplicate python3-libdnf dependency


author: wanfeng <wanfeng@kylinos.cn> - 4.2.23-11.p01
changelog:
  - Type:update
  - ID:Task#163840
  - SUG:NA
  - DESC:and modify bugtracker url, and add support loongarch64
  -      add patch:1000-Kylin-modify-bugtracker-url-and-support-loongarch64.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 4.2.23-11.p02
changelog:
  - Type:bugfix
  - ID:BUG#211784
  - SUG:NA
  - DESC: move bash-completion/completions/dnf to dnf package, fix dnf command completion issue


author: majianhan <majianhan@kylinos.cn> - 4.2.23-11.p03
changelog:
  - Type:bugfix
  - ID:[TASK#451989]
  - SUG:NA
  - DESC:Fix permature exit in download_packages due to untranslated


author: yueyuankun <yueyuankun@kylinos.cn> - 4.2.23-11.p04
changelog:
  - Type:bugfix
  - ID:BUG#415025
  - SUG:NA
  - DESC:fix yum.misc.decompress() is unable to handle .zst files
         fix typo


author: renmingshuai <renmingshuai@huawei.com> - 2.86-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix parsing of IPv6 addresses with peer from netlink
         Fix bad interaction between --address=/#/<ip> and
              --server=/some.domain/#
         Fix --address=/#/...... which was lost in 2.86


author: renmingshuai <renmingshuai@huawei.com> - 2.86-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: zhangbowei <zhangbowei@kylinos.cn> - 18.09.0-261.p01
changelog:
  - Type:update
  - CVE:NA
  - SUG:NA
  - DESC:support loong64 and merge kylin patch:
  	0005-kylin-fix-buildmode-pie-for-loong64.patch,
  	0006-kylin-fix-firewalld-warning-for-loong64.patch,
  	0007-kylin-fix-docker-swarm-run-failed-for-loongarch64.patch


author: lvxiangcong <lvxiangcong@kylinos.cn> - 18.09.0-261.p02
changelog:
  - Type: TASK
  - ID:   [TASK#206575]
  - SUG:  NA
  - DESC: rebuild for containerd fix cve-2023-39325 and cve-2022-41723


author: weiyuan <weiyuan@kylinos.cn> - 18.09.0-261.p04
changelog:
  - Type: CVE
  - ID: CVE-2024-29018
        CVE-2024-24557
  - SUG: NA
  - DESC: backport fix cve CVE-2024-29018 CVE-2024-24557


author: weiyucheng <weiyucheng@kylinos.cn> - 18.09.0-261.p05.04
changelog:
  - Type: cves
  - ID: CVE-2024-36621
        CVE-2024-36623
  - SUG: NA
  - DESC: backport fix cve CVE-2024-36621 CVE-2024-36623


author: zhangbowei<zhangbowei@kylinos.cn> - 18.09.0-261.p06.04
changelog:
  - Type:bugfix
  - ID:[Task#480351]
  - SUG:NA
  - DESC: fix file conflicts between docker-engine and docker-runc,containerd,docker-proxy


author: songnannan<songnannan2@huawei.com> 0.8.0.dev.2-2.h1
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:the debuginfo and debugsource packages are not generated by default


author: zhangbowei<zhangbowei@kylinos.cn> - 1.0.0.rc3-219
changelog:
  - Type: bugfix
  - CVE:  NA
  - SUG:  NA
  - DESC: fix the bug when runc failed to update fat container memory value


author: weiyuan <weiyuan@kylinos.cn> - 1.0.0.rc3-223
changelog:
  - Type: CVE
  - ID: CVE-2024-45310
  - SUG: NA
  - DESC: backport fix cve CVE-2024-45310 and sync loong64 arch support


author: gaoyukun <gaoyukun@kylinos.cn> - 1:2.3.15-6.p01
changelog:
  - Type:NA
  - ID:TASK#156265
  - SUG:NA
  - DESC:add patch:0001-dovecot-2.3.15-kylin-remove-sensitive-characters.patch


author: gaoyukun <gaoyukun@kylinos.cn> - 1:2.3.15-6.p02
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:add the dovecot-2.3.10.1-surpport-mips64el.patch[liu feng] to compile smoothly


author: wangchen<wangchen137@huawei.com> - 1.8.17-7
changelog:
  - Fix Md5 hash does not match for two different runs.
    Fix Incorrect label name in case regeneration of HTML without regeneration of dot files.


author: lipengyu <lipengyu@kylinos.cn> - 1:1.8.17-8.p01
changelog:
  - Type:update
  - ID:[BUG#337307]
  - SUG:NA
  - DESC:add Obsoletes:doxygen-latex to fix update test failed


author: fuanan <fuanan3@h-partners.com> - 0.180-11
changelog:
  - Fix "/usr/lib64/libdebuginfod.so.1" not found when uninstall elfutils-debuginfod-client-devel
  - Fix Obsoletes in spec


author: fuanan <fuanan3@h-partners.com> - 0.180-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix segfault in eu-ar -m
         Use upstream patch for Fix error of parsing object file perms


author: wangshuo <wangshuo@kylinos.cn> - 0.180-15.p01
changelog:
  - Type:[update/bugfix]
  - ID:[TASK#186441][BUG#203894]
  - SUG:NA
  - DESC:x86_64/aarch64: The kernel parameter 'kernel.yama.ptrace_scope = 0' has been commented out.
  -      loongarch64: Add Patch1001-1003, support loongarch64


author: wangshuo <wangshuo@kylinos.cn> - 0.180-15.p02
changelog:
  - Type:[update]
  - ID:[TASK#186441]
  - SUG:NA
  - DESC:p01 build already exists at 239 Koji, causing ctdy-build task failure


author: wangqiang <wangqiang1@kylinos.cn> - 0.180-15.p03
changelog:
  - Type:[bugfix]
  - ID:[TASK#351059] 
  - SUG:NA                                                                     
  - DESC:Add buildrequire to support compress


author: houzhiwei <houzhiwei@kylinos.cn> - 0.180-15.p04
changelog:
  - Type:[update]
  - ID:[TASK#414525]
  - SUG:NA
  - DESC:correctly fix libdebuginfod.so requirement，fix CVE-2025-1352 CVE-2025-1372 CVE-2025-1376 CVE-2025-1377


author: gaoyukun <gaoyukun@kylinos.com> - 1:27.1-15.p01
changelog:
  - type: bugfix 
  - ID: NA
  - DESC: add patch:kylin-change-translation-emacs.patch, add translate bug add modify spec and add config.guess and config.sub in build dir for compile.


author: lijiaan <lijiaan@kylinos.cn> - 1.12.0-2kord0k41.04
changelog:
  - Add modified-parameters-appear-at-the-same-time.patch
  - modified limit appear -k --keep-newer-files at the same time
  - 03 version number was occupied by zj


author: GuoCe <guoce@kylinos.cn> - 1.12.0-2kord0k41.05
changelog:
  - Add resolve_position_display_chinese_character_garbled_code.patch
  - 使用归档管理器打开一个压缩文件，点击归档文件-属性，当位置信息有汉字时显示乱码
  - Add fix-just-add-file-without-directory.patch
  - 空文件夹压缩后，使用归档文件器打开再另存为时，提示信息一闪而过且没有保存成功


author: huayadong <huayadong@kylinos.cn> - 1.12.0-2kord0k41.p08
changelog:
  - add patch41, engrampa-1.12.0-kylin-fix-bug-failed-to-save-the-file-with-the-same-name.patch.
  - fix chandao bug 46607.


author: peijiankang <peijiankang@kylinos.cn> - 1.12.0-2kord0k41.p09
changelog:
  - Type: bugfix
  - ID:   [TASK#185071]
  - SUG:  NA
  - DESC: add engrampa-add-translation-for-tw-and-hk.patch


author: douyan <douyan@kylinos.cn> - 1.12.0-2kord0k41.p10
changelog:
  - Type: bugfix
  - ID:   [TASK#187126]
  - SUG:  NA
  - DESC: engrampa-1.12.0-kylin-add-zh_HK-translation.patch


author: huayadong <huayadong@kylinos.cn> - 1.12.2-2kord7.p03
changelog:
  - Type: bugfix
  - ID:   [Bug#156426]
  - SUG:  NA
  - DESC: add Patch2:eom-1.12.2-kylin-Repair-g_object_New-destruction-results-in-core.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.2-2kord7.p04
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-eom-add-some-missing-traditional-translations-for-HK.patch


author: dillon chen <dillon.chen@gmail.com> - 2.4.5-5
changelog:
  - CVE-2020-18651,CVE-2020-18652
  - CVE-2021-36048,CVE-2021-39847,CVE-2021-42530,CVE-2021-36046,CVE-2021-36055
  - CVE-2021-40716,CVE-2018-12648,CVE-2021-36054,CVE-2021-36047,CVE-2021-36052
  - CVE-2021-36058,CVE-2021-36045,CVE-2021-42531,CVE-2021-36064,CVE-2021-42529
  - CVE-2021-42528,CVE-2021-36050,CVE-2021-40732
  - CVE-2021-36056,CVE-2021-42532,CVE-2021-36053,CVE-2021-36051


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29463 CVE-2021-29464 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29463,CVE-2021-29464,CVE-2021-29473


