# changelog

author: JiangXiujie <jiangxiujie@kylinos.cn> - 4.19.90-52.39.10.ind.v2207
changelog:
  - KYLIN_GYOS: mm/gup: Remove enfornced COW mechanism (jiangxiujie) [task:443768]
  - Update kernel version to 4.19.90-52.39.9.ind.v2207 (jiangxiujie)
  - KYLIN-GYOS: gpu/jjw : mwv207 driver version update to 1.5.5 (fuqiang) [task:443377]
  - 3rd/mtgpu: arm64 add mtgpu driver of version 2025.2.5.0. (wuning) [task:437153]
  - 3rd/arise: cx4 modules are not compiled by default, but x86 supports cx4 modules by default. (wuning) [task:437153]
  - kylin/ethernet: add yt6801 ethernet driver of version 1.0.29. (wuning) [task:431178]
  - KYLIN-GYOS: 3rd/arise: add zx kernel driver cx4 v26.00.15 (fuqiang) [task:414021]


author: Yingkun Meng <mengyingkun@kylinos.cn> - 4.19.90-52.39.11.ind.v2207
changelog:
  - net: fix __dst_negative_advice() race (Eric Dumazet) [task:484607] {CVE-2024-36971}
  - KYLIN-GYOS: x86/defconfig : kylinos_generic_defconfig enable JJW mwv207 driver module. (fuqiang) [task:445502]
  - scipts/buildrpm.sh: support to build 4k kernel source package (gyos) [task:476545]


author: Yingkun Meng <mengyingkun@kylinos.cn> - 4.19.90-52.39.12.ind.v2207
changelog:
  - scipts/buildrpm.sh: support to build 4k kernel source package (jiangxiujie) [task:476545]
  - KYLIN-GYOS: 3rd/inno : Fix innogpu driver compile error (fuqiang) [task:445502]
  - KYLIN-GYOS: defconfig : x86/arm64 kylinos_generic_defconfig GPU_INNO_INNOSILICON to DRM_INNO_GPU (fuqiang) [task:445502]
  - KYLIN-GYOS: 3rd/inno : update innogpu dirver version 3.3.4.46 (fuqiang) [task:445502]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-52.30.v2207
changelog:
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [task:177236] {CVE-2023-42753}
  - xfs: check sb_meta_uuid for dabuf buffer recovery (Dave Chinner) [bug:194635]
  - Revert "NFS: Don't call generic_error_remove_page() while holding locks" (wolfgang huang) [bug:194658]
  - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma) [bug:189726] {CVE-2023-3772}
  - scsi: smartpqi: Fix byte aligned writew for ARM servers (Don Brace) [task:170135]
  - squashfs: fix xattr id and id lookup sanity checks (Phillip Lougher) [task:158827, bug:195777]
  - squashfs: add more sanity checks in id lookup (Phillip Lougher) [task:158034, bug:195777]
  - squashfs: add more sanity checks in xattr id lookup (Phillip Lougher) [task:158034, bug:195777]
  - squashfs: fix inode lookup sanity checks (Sean Nyekjaer) [task:158827, bug:195777]
  - squashfs: add more sanity checks in inode lookup (Phillip Lougher) [task:158034, bug:195777]
  - sched/rt: Optimize checking group RT scheduler constraints (Konstantin Khlebnikov) [task:173985]
  - NETSWIFT: ngbe: Fix: fix call trace caused by xdp (lingfuyi) [task:174284]
  - PCI: Allow VPD access for QLogic ISP2722 (Arun Easi) [bug:187138]
  - resolve compiling error for previous rcu patches (lifangxu) [task:174840]
  - x86/cpu: Avoid cpuinfo-induced IPIing of idle CPUs (Paul E. McKenney) [bug:190769]
  - x86/cpu: Avoid cpuinfo-induced IPI pileups (Paul E. McKenney) [bug:190769]
  - x86/cpu: Disable frequency requests via aperfmperf IPI for nohz_full CPUs (Konstantin Khlebnikov) [bug:190769]
  - rcu: Provide rcu_irq_exit_check_preempt() (Thomas Gleixner) [bug:190769]
  - rcu: Provide rcu_irq_exit_preempt() (Thomas Gleixner) [bug:190769]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-52.31.v2207
changelog:
  - xfs: drop submit side trans alloc for append ioends (Brian Foster) [task:168909]
  - xfs: turn io_append_trans into an io_private void pointer (Christoph Hellwig) [task:168909]
  - xfs: refactor the ioend merging code (Christoph Hellwig) [task:168909]
  - xfs: simplify xfs_ioend_can_merge (Christoph Hellwig) [task:168909]
  - xfs: allow merging ioends over append boundaries (Christoph Hellwig) [task:168909]
  - xfs: merge adjacent io completions of the same type (Darrick J. Wong) [task:168909]
  - xfs: remove unused m_data_workqueue (Darrick J. Wong) [task:168909]
  - xfs: implement per-inode writeback completion queues (Darrick J. Wong) [task:168909]
  - net: nfc: Fix use-after-free caused by nfc_llcp_find_local (Lin Ma) [task:179856] {CVE-2023-3863}
  - nfc: llcp: simplify llcp_sock_connect() error paths (Krzysztof Kozlowski) [task:179856]
  - nfc: llcp: nullify llcp_sock->dev on connect() error paths (Krzysztof Kozlowski) [task:179856]
  - nfc: Fix to check for kmemdup failure (Aditya Pakki) [task:179856]
  - io_uring: always grab file table for deferred statx (Jens Axboe) [task:179249] {CVE-2022-20568}
  - io_uring: disable polling pollfree files (Pavel Begunkov) [task:179288] {CVE-2022-3176}
  - Loongarch: Fix 'extioi' logic error (liubaolin) [task:180502]
  - LoongArch: Adjust {copy, clear}_user exception handler behavior (liubaolin) [task:180502]
  - LoongArch: ACPICA: Events: remove the global lock initialization (liubaolin) [task:180502]
  - LoongArch: Fix macro write_fcsr (liubaolin) [task:180502]
  - LoongArch: Fix return value underflow in exception path (liubaolin) [task:180502]
  - LoongArch: Tweak the BADV and CPUCFG.PRID lines in show_regs() (liubaolin) [task:180502]
  - LoongArch: Humanize the ECFG line when showing registers (liubaolin) [task:180502]
  - LoongArch: Humanize the EUEN line when showing registers (liubaolin) [task:180502]
  - LoongArch: Humanize the PRMD line when showing registers (liubaolin) [task:180502]
  - LoongArch: Humanize the CRMD line when showing registers (liubaolin) [task:180502]
  - LoongArch: Fix format of CSR lines during show_regs() (liubaolin) [task:180502]
  - LoongArch: Print symbol info for $ra and CSR.ERA only for kernel-mode contexts (liubaolin) [task:180502]
  - LoongArch: Print GPRs with ABI names when showing registers (liubaolin) [task:180502]
  - LoongArch: Relay BCE exceptions to userland as SIGSEGV with si_code=SEGV_BNDERR (liubaolin) [task:180502]
  - char: pcmcia: remove all the drivers (Jiri Slaby) [task:177573] {CVE-2022-44033}
  - ipv4: avoid using shared IP generator for connected sockets (Eric Dumazet) [task:179316, task:160493] {CVE-2020-36516}
  - OPENEULER: svm: Delete unused ioctl command (huhai) [task:180214] {CVE-2021-33639}
  - media: mceusb: Use USB_DIR_IN in read request (Hongyu Xie) [task:179257] {CVE-2022-3903}
  - media: mceusb: fix control-message timeouts (Johan Hovold) [bug:150405]
  - iomap: Set all uptodate bits for an Uptodate page (Matthew Wilcox (Oracle)) [bug:197566]
  - iomap: Use kzalloc to allocate iomap_page (Matthew Wilcox (Oracle)) [bug:197566]
  - security/kysec: fix possible memory leak in kysec_hash_sha256() (yangzhao) [task:126288]
  - security/kysec: fix the problem that the manufacturer program takes too long to open (wangkanglong) [bug:139540]
  - security/kysec: start menu freezes after opening Loongson browser (wangkanglong) [bug:102574]
  - security/kysec: add timeout for auth wait_event (yangzhao) [bug:169733, bug:170147]
  - igb: set max size RX buffer when store bad packet is enabled (Radoslaw Tyl) {CVE-2023-45871}
  - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) {CVE-2023-39189}
  - Revert "NFS: Don't interrupt file writeout due to fatal errors" (ChenXiaoSong) [task:198290]
  - Revert "USB: core: Don't hold device lock while reading the "descriptors" sysfs file" (Hongyu Xie) [task:179861] {CVE-2023-37453}
  - OPENEULER: scripts: switch explicitly to Python 3 (Yi Li) [task:180198]
  - ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng) [task:179901] {CVE-2023-31085}
  - remove the lightnvm subsystem (Christoph Hellwig) [task:179254] {CVE-2022-2991}
  - KVM: nVMX: add missing consistency checks for CR0 and CR4 (Paolo Bonzini) [task:179282] {CVE-2023-30456}
  - bpf, sockmap: fix deadlocks in the sockhash and sockmap (Xin Liu) [task:179888] {CVE-2023-0160}
  - bpf: Fix NULL event->prog pointer access in bpf_overflow_handler (Yonghong Song) [task:178877]
  - tweewide: Fix most Shebang lines (Finn Behrens)
  - media: dvb-core: Fix use-after-free due on race condition at dvb_net (Hyunwoo Kim) [task:179859] {CVE-2022-45886}
  - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Hyunwoo Kim) [task:179858] {CVE-2022-45919}
  - USB: ene_usb6250: Allocate enough memory for full object (Kees Cook) [task:166857] {CVE-2023-45862}
  - ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng) {CVE-2023-31085}
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO (Lee, Chun-Yi) {CVE-2023-31083}
  - tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith) {CVE-2023-1206}
  - xen/netback: Fix buffer overrun triggered by unusual packet (Ross Lagerwall) {CVE-2023-34319}
  - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (Steve Rutherford) [bug:193234]
  - dm: don't stop request queue after the dm device is suspended (Ming Lei) [task:172151]
  - dm rq: don't queue request to blk-mq during DM suspend (Ming Lei) [task:172151]
  - Revert "block: move blk_exit_queue into __blk_release_queue" (zhanggenjian) [task:177423]
  - Revert "block: free sched's request pool in blk_cleanup_queue" (zhanggenjian) [task:177423]
  - Revert "blk-mq: remove WARN_ON(!q->elevator) from blk_mq_sched_free_requests" (zhanggenjian) [task:177423]
  - Revert "block: adjust the position of the code section" (zhanggenjian) [task:177423]
  - Revert "blk-mq-sched: Fix blk_mq_sched_free_tags() build warning" (zhanggenjian) [task:177423]
  - KVM: SVM: document KVM_MEM_ENCRYPT_OP, let userspace detect if SEV is available (Paolo Bonzini) [bug:193234]
  - HYGON: KVM: SVM: Add support for different CSV guests to reuse the same ASID (hanliyang) [bug:193234]
  - KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails (Sean Christopherson) [bug:193234]
  - KVM: SVM: Fix off-by-one indexing when nullifying last used SEV VMCB (Sean Christopherson) [bug:193234]
  - KVM: SVM: Call SEV Guest Decommission if ASID binding fails (Alper Gun) [bug:193234]
  - KVM: SVM: Issue WBINVD after deactivating an SEV guest (Tom Lendacky) [bug:193234]
  - KVM: SVM: Reduce WBINVD/DF_FLUSH invocations (Tom Lendacky) [bug:193234]
  - KVM: SVM: Remove unneeded WBINVD and DF_FLUSH when starting SEV guests (Tom Lendacky) [bug:193234]
  - KVM: SVM: Guard against DEACTIVATE when performing WBINVD/DF_FLUSH (Tom Lendacky) [bug:193234]
  - KVM: SVM: Serialize access to the SEV ASID bitmap (Tom Lendacky) [bug:193234]
  - mm: always have io_remap_pfn_range() set pgprot_decrypted() (Jason Gunthorpe) [bug:193234]
  - HYGON: vfio/pci: Disable VFIO pci reset for hygon DCU device. (fangbaoshun) [bug:193234]
  - swiotlb: Remove call to sme_active() (Thiago Jung Bauermann) [bug:193234]
  - HYGON: KVM: SVM: Print Hygon CSV support info if support is detected (hanliyang) [bug:193234]
  - HYGON: crypto: ccp: Print Hygon CSV API version when CSV support is detected (hanliyang) [bug:193234]
  - HYGON: x86/cpu: Show Hygon csv feature in /proc/cpuinfo (hanliyang) [bug:193234]
  - HYGON: x86/csv: Print CSV info into the kernel log (hanliyang) [bug:193234]
  - HYGON: x86/kvm: Correct number of pages calculation in kvm_init_platform() (hanliyang) [bug:193234]
  - HYGON: x86/mm: Pass variable start to notify_range_enc_status_changed() in __set_memory_enc_dec() (hanliyang) [bug:193234]
  - x86/kvm: Add kexec support for SEV Live Migration. (Ashish Kalra) [bug:193234]
  - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. (Ashish Kalra) [bug:193234]
  - EFI: Introduce the new AMD Memory Encryption GUID. (Ashish Kalra) [bug:193234]
  - mm: x86: Invoke hypercall when page encryption status is changed (Brijesh Singh) [bug:193234]
  - x86/kvm: Add AMD SEV specific Hypercall3 (Brijesh Singh) [bug:193234]
  - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall (Ashish Kalra) [bug:193234]
  - x86/mem_encrypt: Correct physical address calculation in __set_clr_pte_enc() (Isaku Yamahata) [bug:193234]
  - HYGON: Revert "crypto: ccp: Extend sev_user_data_status to provide more information about Hygon firmware" (hanliyang) [bug:193234]
  - HYGON: crypto: ccp: Fix a problem that vq thread may stuck when do multi process test. (Xiangyu Xu) [bug:193234]
  - HYGON: crypto: ccp - Add support for CMD HGSC_CERT_IMPORT (fangbaoshun) [bug:193234]
  - bpf: Don't use tnum_range on array range checking for poke descriptors (Daniel Borkmann) {CVE-2022-2905}
  - bpf: Fix incorrect verifier pruning due to missing register precision taints (Daniel Borkmann) {CVE-2023-2163}
  - security/kysec: use spin_lock_irq() instead of spin_lock() (huanfuxi) [bug:164413]
  - security/kysec: fix bug with deadlock when writing aufs files (yangzhao) [task:136839]
  - security/kysec: fix kmemleak of netctl (wangkanglong) [bug:190255]
  - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (xiaolinkui) [bug:195544]
  - gmjstcm: delete SMO0768 from TCM1 spi device id (Li ZhiGang) [task:175749]
  - mm/munlock: delete munlock_vma_pages_all(), allow oomreap (Hugh Dickins) [bug:163612, bug:188493, bug:188513, bug:189316]
  - netfilter: nft_exthdr: Search chunks in SCTP packets only (Phil Sutter) [bug:192914]
  - netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian (Stephen Suryaputra) [bug:192914]
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal) [bug:192914] {CVE-2023-4881}
  - netfilter: nft_exthdr: Fix for unsafe packet data read (Phil Sutter) [bug:192914]
  - netfilter: nft_exthdr: Support SCTP chunks (Phil Sutter) [bug:192914]
  - netfilter: nf_tables: add support for matching IPv4 options (Stephen Suryaputra) [bug:192914]
  - tpm: add TCM2.0 support in tpm_tis_spi (Li ZhiGang) [task:175234]
  - media: usb: siano: Fix warning due to null work_func_t function pointer (Duoming Zhou) [bug:189733] {CVE-2023-4132}
  - media: usb: siano: Fix use after free bugs caused by do_submit_urb (Duoming Zhou) [bug:189733] {CVE-2023-4132}
  - ipv6: do not leave garbage in rt->fib6_metrics (Eric Dumazet) [task:178045]
  - netfilter: xt_u32: validate user space input (Wander Lairson Costa) [bug:197488] {CVE-2023-39192}
  - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [bug:197492] {CVE-2023-39193}
  - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma) [bug:197496] {CVE-2023-39194}
  - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() (Zixuan Fu) [bug:189769] {CVE-2023-4387}
  - fs: jfs: fix possible NULL pointer dereference in dbFree() (Zixuan Fu) [bug:189765] {CVE-2023-4385}
  - cec-api: prevent leaking memory through hole in structure (Hans Verkuil) [task:157172, bug:197484] {CVE-2020-36766}
  - net/sched: Retire rsvp classifier (Jamal Hadi Salim) [bug:196033] {CVE-2023-42755}
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima) [bug:196022] {CVE-2023-4622}
  - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet) [bug:196026] {CVE-2023-42752}
  - ipv4: fix null-deref in ipv4_link_failure (Kyle Zeng) [task:177575] {CVE-2023-42754}
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() (Hyunwoo Kim) [task:176709] {CVE-2022-45887}


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-52.32.v2207
changelog:
  - vfio/pci: enable CONFIG_VFIO_PCI_VGA for x86 (Cong Liu) [task:184699]
  - drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer (Lu Yao) [task:184449]
  - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Jozsef Kadlecsik) [bug:195544]
  - Revert "netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test" (xiaolinkui) [bug:195544]
  - ext4: forbid commit inconsistent quota data when errors=remount-ro (Ye Bin) [task:183005]
  - quota: fixup *_write_file_info() to return proper error code (Yangtao Li) [task:183005]
  - dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client (Li Lingfeng) [task:183052]
  - dm bufio: do buffer cleanup from a workqueue (Mikulas Patocka) [task:183052]
  - dm bufio: introduce a global cache replacement (Mikulas Patocka) [task:183052]
  - dm bufio: introduce a global queue (Mikulas Patocka) [task:183052]
  - dm bufio: refactor adjust_total_allocated (Mikulas Patocka) [task:183052]
  - dm bufio: call adjust_total_allocated from __link_buffer and __unlink_buffer (Mikulas Patocka) [task:183052]
  - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (Zhihao Cheng) [task:183052]
  - dm thin metadata: add wrappers for managing write locking of metadata (Mike Snitzer) [task:183052]
  - dm: add disk before alloc dax (Li Lingfeng) [task:183060]
  - perf/cgroups: Install cgroup events to correct cpuctx (Song Liu) [task:184204]
  - ovl: adhere to the vfs_ vs. ovl_do_ conventions for xattrs (Miklos Szeredi) [task:186656] {CVE-2023-32629}
  - ext4: fix overflow in ext4_iomap_alloc() (Jan Kara) [task:156171]
  - ext4: Fix occasional generic/418 failure (Jan Kara) [task:156171]
  - ext4: do not block RWF_NOWAIT dio write on unallocated space (Jan Kara) [task:156171]
  - ext4: dio take shared inode lock when overwriting preallocated blocks (Zhang Yi) [task:156171]
  - ext4: optimize file overwrites (Ritesh Harjani) [task:156171]
  - ext4: Optimize ext4 DIO overwrites (Jan Kara) [task:156171]
  - ext4: Move to shared i_rwsem even without dioread_nolock mount opt (Ritesh Harjani) [task:156171]
  - ext4: Start with shared i_rwsem in case of DIO instead of exclusive (Ritesh Harjani) [task:156171]
  - ext4: introduce direct I/O write using iomap infrastructure (Matthew Bobrowski) [task:156171]
  - vfs: introduce file_modified() helper (Amir Goldstein) [task:156171]
  - ext4: remove unnecessary error check (Shi Siyuan) [task:156171]
  - ext4: update ext4_sync_file() to not use __generic_file_fsync() (Matthew Bobrowski) [task:156171]
  - ext4: move inode extension check out from ext4_iomap_alloc() (Matthew Bobrowski) [task:156171]
  - ext4: move inode extension/truncate code out from ->iomap_end() callback (Matthew Bobrowski) [task:156171]
  - ext4: introduce direct I/O read using iomap infrastructure (Matthew Bobrowski) [task:156171]
  - ext4: introduce new callback for IOMAP_REPORT (Matthew Bobrowski) [task:156171]
  - ext4: split IOMAP_WRITE branch in ext4_iomap_begin() into helper (Matthew Bobrowski) [task:156171]
  - ext4: move set iomap routines into a separate helper ext4_set_iomap() (Matthew Bobrowski) [task:156171]
  - ext4: update direct I/O read lock pattern for IOCB_NOWAIT (Matthew Bobrowski) [task:156171]
  - ext4: reorder map.m_flags checks within ext4_iomap_begin() (Matthew Bobrowski) [task:156171]
  - iomap: Allow forcing of waiting for running DIO in iomap_dio_rw() (Jan Kara) [task:156171]
  - iomap: move the iomap_dio_rw ->end_io callback into a structure (Christoph Hellwig) [task:156171]
  - iomap: split size and error for iomap_dio_rw ->end_io (Matthew Bobrowski) [task:156171]
  - Revert "Revert "ext4: Allow parallel DIO reads"" (Shida Zhang) [task:156171]
  - Revert "Revert "Revert "ext4: Allow parallel DIO reads""" (Shida Zhang) [task:156171]
  - Revert "ext4: update direct I/O read lock pattern for IOCB_NOWAIT" (Shida Zhang) [task:156171]
  - Revert "ext4: introduce direct I/O read using iomap infrastructure" (Shida Zhang) [task:156171]
  - scsi: lpfc: Fix missing part of code logic in lpfc_nvmet.c (huhai) [task:184502]
  - scsi: lpfc: Fix missing part of code logic in lpfc_sli.c (huhai) [task:184502]
  - scsi: lpfc: Fix missing part of code logic in lpfc_nvmet.c (huhai) [task:184502]
  - Revert "scsi: lpfc: Fix GFT_ID and PRLI logic for RSCN" (huhai) [task:184502]
  - perf/core: Fix cgroup event list management (Namhyung Kim) [task:184204]
  - perf/core: Optimize perf_install_in_event() (Peter Zijlstra) [task:184204]
  - perf: Rework perf_event_exit_event() (Peter Zijlstra) [task:184204]
  - EULER: perf: Revert "perf: Paper over the hw.target problems" (Yang Jihong) [task:184204]
  - perf: Fix function pointer case (Peter Zijlstra) [task:184204]
  - perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong) [task:184204]
  - perf/core: Fix the same task check in perf_event_set_output (Kan Liang) [task:184204]
  - perf: Fix possible memleak in pmu_dev_alloc() (Chen Zhongjin) [task:184204]
  - perf/core: Fix address filter parser for multiple filters (Adrian Hunter) [task:184204]
  - perf: Fix list corruption in perf_cgroup_switch() (Song Liu) [task:184204]
  - perf/ioctl: Add check for the sample_period value (Ravi Bangoria) [task:184204]
  - objtool: Don't fail on missing symbol table (Josh Poimboeuf) [task:185741]
  - EULER: arm64/mpam: mark partid non-exclusive if self-owned (Wang ShaoBo) [task:182928]
  - EULER: arm64/mpam: realign step entry when traversing rmid_transform (Wang ShaoBo) [task:182928]
  - tty: tty_jobctrl: fix pid memleak in disassociate_ctty() (Yi Yang) [task:182946]
  - OPENEULER: irqchip: gic-v3: Collection table support muti pages (wangwudi) [task:183007]
  - net: add vlan_get_protocol_and_depth() helper (Eric Dumazet) [task:182970]
  - net: tap: check vlan with eth_type_vlan() method (Menglong Dong) [task:182970]
  - ipv6: Fix use of anycast address with loopback (David Ahern) [task:184541, task:183477]
  - ipv6: Create init helper for fib6_nh (David Ahern) [task:184541, task:183477]
  - net/ipv6: Do not reset nl_net in ip6_route_info_create (David Ahern) [task:184541, task:183477]
  - ipv6: Move setting default metric for routes (David Ahern) [task:184541, task:183477]
  - net: rtmsg_to_fib6_config() - use new style struct initializer instead of memset (Maciej Żenczykowski) [task:184541, task:183477]
  - Revert "ipv6: Create init helper for fib6_nh" (luoqing) [task:183477]
  - Revert "ipv6: Fix use of anycast address with loopback" (luoqing) [task:183477]
  - nvmet: set loop queue's segment boundary mask as PAGE_SIZE - 1 (pengcan) [task:174281, task:175051, task:175046, bug:195690, bug:195682, bug:195676]
  - Revert "nvmet: fix building bvec from sg list" (pengcan) [task:174281, task:175051, task:175046, bug:195690, bug:195682, bug:195676]
  - nbd: fix race between nbd_alloc_config() and module removal (Yu Kuai) [task:162162]
  - OPENEULER: xhci: fix USB xhci controller issue (Longfang Liu) [task:182993]
  - OPENEULER: mm: disable kernelcore=mirror when no mirror memory (Ma Wupeng) [task:182939]
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy) [task:119087] {CVE-2022-3564}
  - io_uring: ensure IOPOLL locks around deferred work (Jens Axboe) [task:179887] {CVE-2023-21400}
  - io_uring: get rid of intermediate IORING_OP_CLOSE stage (Jens Axboe) [task:179891] {CVE-2023-1295}
  - fs: provide locked helper variant of close_fd_get_file() (Jens Axboe) [task:179891]
  - file: Rename __close_fd_get_file close_fd_get_file (Eric W. Biederman) [task:179891]
  - xen/events: replace evtchn_rwlock with RCU (Juergen Gross) {CVE-2023-34324}
  - xen/events: don't unmask an event channel when an eoi is pending (Juergen Gross) [task:158827]
  - xen/events: don't use chip_data for legacy IRQs (Juergen Gross)
  - XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information. (Thomas Gleixner) [task:157358]
  - spi: spi-ls: add slave enumeration support when using acpi (Liu Peibao) [task:118969, task:183450]
  - Loongson2K: SPI: Enable spi driver module (Yinbo Zhu) [task:118969, task:183450]
  - Loongson2K/Loongson7A: SPI: Add spi controller pm support (Yinbo Zhu) [task:118969, task:183450]
  - x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys (Dheeraj Kumar Srivastava) [task:166857, task:182934]
  - sch_netem: fix issues in netem_change() vs get_dist_table() (Eric Dumazet) [task:182934]
  - sch_netem: acquire qdisc lock in netem_change() (Eric Dumazet) [task:166857, task:182934]
  - cgroup: Do not corrupt task iteration when rebinding subsystem (Xiu Jianfeng) [task:166857, task:182934]
  - loop: loop_set_status_from_info() check before assignment (Zhong Jinghua) [task:182968]
  - loop: Check for overflow while configuring loop (Siddh Raman Pant) [task:162162]
  - scsi: hisi_sas: Fix normally completed I/O analysed as failed (Xingui Yang) [task:182978]
  - net/mlx5: Allow async trigger completion execution on single CPU systems (Roy Novich) [task:182578]
  - net/mlx5: Fix possible use-after-free in async command interface (Tariq Toukan) [task:182578]
  - net/mlx5: rate limit alloc_ent error messages (Li RongQing) [task:182578]
  - net/mlx5: Fix a race on command flush flow (Moshe Shemesh) [task:182578]
  - Revert "net/mlx5: Add retry mechanism to the command entry index allocation" (Moshe Shemesh) [task:182578]
  - net/mlx5: Set command entry semaphore up once got index free (Moshe Shemesh) [task:182578]
  - lib/stackdepot.c: fix global out-of-bounds in stack_slabs (Alexander Potapenko) [task:155707, task:183063]
  - i40e: Fix uninitialized variable mfs_max (Colin Ian King) [bug:194556]
  - i40e: Add netlink callbacks support for software based DCB (Arkadiusz Kubalewski) [bug:194556]
  - i40e: Add init and default config of software based DCB (Arkadiusz Kubalewski) [bug:194556]
  - i40e: Add hardware configuration for software based DCB (Arkadiusz Kubalewski) [bug:194556]
  - i40e: remove unused defines (Jesse Brandeburg) [bug:194556]
  - i40e: Move client header location (Shiraz Saleem) [bug:194556]
  - drm/atomic-helper: Bump vblank timeout to 100 ms (Linus Walleij) [task:182959]
  - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one (Florian Westphal) {CVE-2023-39197}
  - net: sched: fix NULL pointer dereference in mq_attach (Zhengchao Shao) [task:183053]
  - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled (Zhipeng Xie) [task:104354]
  - of: overlay: kmemleak in dup_and_fixup_symbol_prop() (Frank Rowand) [task:183064]
  - iommu/dma: Fix MSI reservation allocation (Marc Zyngier) [task:183064]
  - Revert "Revert "mm, sl[aou]b: guarantee natural alignment for kmalloc(power-of-two)"" (Shida Zhang) [task:82242, task:182892]
  - ipv6: Fix use of anycast address with loopback (David Ahern) [task:99622, task:183477]
  - ipv6: Create init helper for fib6_nh (user) [task:99622, task:183477]
  - security/kysec: update memory protect interface (huanfuxi) [bug:193040]
  - 3rd/hsdimm-lite: refactor the module (huanfuxi) [bug:193040]
  - loongarch/module: Reduce the PLT required memory size (liubaolin) [task:183312]
  - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE (Sean Christopherson) [task:182171]
  - KVM: fix overflow of zero page refcount with ksm running (Zhuang Yanying) [task:157172]
  - ravb: Fix use-after-free issue in ravb_tx_timeout_work() (Yoshihiro Shimoda) [task:181443] {CVE-2023-35827}


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-52.33.v2207
changelog:
  - bpf: skmsg, fix psock create on existing kcm/tls port (John Fastabend) [task:189070]
  - Revert "fs/pipe:dont need wake up self in a single process of ub" (xiaolinkui) [task:186974]
  - Revert "fs/pipe: Solve the problem of LTP smoketest failure" (xiaolinkui) [task:186974]
  - security/kysec: allow rsync to inherit trusted lable (huanfuxi) [bug:113477]
  - security/kysec: fix unnecessary inspection in kysec_hash_sync_label_unknown() (yangzhao) [task:126286]
  - security/kysec: fix possible NULL pointer in SM3_final() (yangzhao) [task:126283]
  - epoll: fix missing code of do_epoll_ctl (xiaolinkui) [task:186974]
  - jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (Zhihao Cheng) [task:187896]
  - HYGON:: hct only build on X86 platform (yangdepei) [task:189463]
  - ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg) [task:188435]
  - ipmi: fix SSIF not responding under certain cond. (Zhang Yuchen) [task:188418]
  - ipmi_ssif: Rename idle state and check (Corey Minyard) [task:188419]
  - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx (Ilpo Järvinen) [task:188423]
  - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (Ilpo Järvinen) [task:188424]
  - af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). (Kuniyuki Iwashima) [task:188425]
  - of: Fix modalias string generation (Miquel Raynal) [task:188428]
  - dccp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima) [task:188412]
  - tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct(). (Kuniyuki Iwashima) [task:188412]
  - udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). (Kuniyuki Iwashima) [task:188412]
  - HYGON: Adding ioctl variables MCCP_SHARE_OP_DMA_UNMAP_ALL to distinguish between DMA_UNMAP and DMA_UNMAP_ALL. (Yabin Li) [task:174598]
  - HYGON: add mediated ccp support in virtual machine (Yabin Li) [task:174598]
  - HYGON: bugfix: fix phy addr check failed in hct.ko due to C-bit. (Yabin Li) [task:174598]
  - HYGON: Support interrupt request for HCT asynchronous mode (Yabin Li) [task:174598]
  - HYGON: newfeature: ccp: add hct module (yangdepei) [task:174598]
  - HYGON: Support tkm virtualization (niuyongwen) [task:174598]
  - HYGON: Support psp virtualization (niuyongwen) [task:174598]
  - HYGON: newfeature: common: Add psp mutex enable ioctl support (chench) [task:174598]
  - HYGON: newfeature: common: concurrent psp access support between user and kernel space (chench) [task:174598]
  - HYGON: crypto: ccp: Add support for issue commands in RING_BUFFER Mode (fangbaoshun) [task:174598]
  - HYGON: crypto: ccp: Implement SEV_RING_BUFFER command handler (fangbaoshun) [task:174598]
  - HYGON: crypto:ccp: Add the status dequeue API support for CSV RING_BUFFER Mode (fangbaoshun) [task:174598]
  - HYGON: crypto:ccp: Add the command enqueue API support for CSV RING_BUFFER Mode (fangbaoshun) [task:174598]
  - HYGON: crypto: ccp: Add the init and free API support for CSV RING_BUFFER Mode (fangbaoshun) [task:174598]
  - net: Add conditions for auto affinity (xiaolinkui) [task:187683]
  - sctp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima) [task:188412]
  - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. (Kuniyuki Iwashima) [task:188414]
  - net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues(). (Kuniyuki Iwashima) [task:188413]
  - EULER: config: enable set the max iova mag size to 128 (Zhang Zekun) [task:183036]
  - EULER: iommu/iova: increase the iova_rcache depot max size (Zhang Zekun) [task:183036]
  - dm thin metadata: check fail_io before using data_sm (Li Lingfeng) [task:182982]
  - dm space maps: improve performance with inc/dec on ranges of blocks (Joe Thornber) [task:182982]
  - dm: don't lock fs when the map is NULL during suspend or resume (Li Lingfeng) [task:182983]
  - dm: don't lock fs when the map is NULL in process of resume (Li Lingfeng) [task:182983]
  - skbuff: Fix a race between coalescing and releasing SKBs (Liang Chen) [task:185227]
  - skbuff: fix coalescing for page_pool fragment recycling (Jean-Philippe Brucker) [task:185227]
  - skbuff: Fix a potential race while recycling page_pool packets (Ilias Apalodimas) [task:185227]
  - security/kyextend: Remove the default assignment of zero (chengang) [bug:189708]
  - NFS: make sure open context mode have FMODE_EXEC when file open for exec (ChenXiaoSong) [task:187717] {CVE-2022-24448}
  - NFSv4: fix open failure with O_ACCMODE flag (ChenXiaoSong) [task:187717] {CVE-2022-24448}
  - Revert "NFSv4: Handle the special Linux file open access mode" (ChenXiaoSong) [task:187717] {CVE-2022-24448}
  - EULER: net: hns3: update hns3 version to 23.7.1 (Yonglong Liu) [task:186993]
  - EULER: net: hns3: fix tx timeout issue (Jian Shen) [task:186991]
  - EULER: net: hns3: add barrier in vf mailbox reply process (Yonglong Liu) [task:182950]
  - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (Jie Wang) [task:182948]
  - nvmet: fix setting ns queue's segment boundary (pengcan) [task:187823]
  - Revert "Revert "nvmet: fix building bvec from sg list"" (pengcan) [task:187823]
  - config: disable unprivileged eBPF by default (chenyuan) [task:178019, task:186859]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.34.v2207
changelog:
  - scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs (Yihang Li) [task:196398]
  - ida: Fix crash in ida_free when the bitmap is empty (Matthew Wilcox (Oracle)) [task:196096] {CVE-2023-6915}
  - drm/atomic: Fix potential use-after-free in nonblocking commits (Daniel Vetter) [task:196093] {CVE-2023-51043}
  - drm/amdgpu: Fix potential fence use-after-free v2 (shanzhulig) [task:196092] {CVE-2023-51042}
  - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (Krzysztof Kozlowski) [task:196011] {CVE-2023-46343}
  - net: hns3: fix output information incomplete for dumping tx queue info with debugfs (Jie Wang) [task:183106]
  - net: hns3: fix reset delay time to avoid configuration timeout (Jie Wang) [task:182918]
  - security/kysec: bound pcr_extend with kysec status not exectl. (penghuaihe) [bug:210446, bug:210278, bug:210330, bug:210312]
  - security/kysec: encapsulate hash cal as a separate function (penghuaihe) [bug:210446, bug:210278, bug:210330, bug:210312]
  - stmmac: remove is_ft_mcu_ready when getting mac addr from nvmem (luyun) [task:18023, bug:210342]
  - config: Enable support for CFB mode (chengang) [bug:211037]
  - tty: fix hang on tty device with no_room set (Hui Li) [task:190651]
  - security/kysec: Fix inheritance error in parent process marking (chengang) [task:208546]
  - smb: client: fix potential OOB in smb2_dump_detail() (Paulo Alcantara) [task:195442] {CVE-2023-6610}
  - smb: client: fix OOB in receive_encrypted_standard() (Paulo Alcantara) [task:196094] {CVE-2024-0565}
  - media: v4l2-mem2mem: fix epoll() by calling poll_wait first (Hans Verkuil) [task:193171]
  - net/sched: cbs: Fix not adding cbs instance to list (Vinicius Costa Gomes) [task:193171]
  - sctp: fix potential deadlock on &net->sctp.addr_wq_lock (Chengfeng Ye) [task:196364] {CVE-2024-0639}
  - LoongArch: driver : rnp: Fix the irq numbers of rnp dirver request. (liubaolin) [task:195831]
  - netfilter: ipset: Fix the last missing check of nla_parse_deprecated() (Jozsef Kadlecsik) [task:193171]
  - Revert "Revert "ima: check the xattr length of ima&evm before measurement"" (mengdehui) [task:195294]
  - Revert "Revert "ima: change the default hash algorithm to sha256"" (mengdehui) [task:195294]
  - net/vlan: include the shift in skb_vlan_tag_get_prio() (Michał Mirosław) [task:194897]
  - Loongson: Loongson3: numa: fix high_memory calculate. (Chong Qiao) [task:194608]
  - LoongArch: numa: fix high_memory calculate. (Chong Qiao) [task:194609]
  - spi: loongson: add bus driver for the loongson spi controller (Qiming Yang) [task:194611]
  - signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal (Eric W. Biederman)
  - release-stable-kernel: Add Zhengyuan Liu as Maintainer for SP3 (Jackie Liu)
  - Input: add bounds checking to input_set_capability() (Jeff LaBundy) [task:162162] {CVE-2022-48619}
  - Revert "ima: change the default hash algorithm to sha256" (liuqi) [task:192131]
  - Revert "ima: check the xattr length of ima&evm before measurement" (liuqi) [task:192131]
  - bpf, devmap: Use GFP_KERNEL for xdp bulk queue allocation (Jun'ichi Nomura) [bug:203534]
  - smb: client: fix OOB in smbCalcSize() (Paulo Alcantara) [task:193171] {CVE-2023-6606}
  - phy: fix driver name display error (xiaolinkui) [task:194225]
  - dm crypt: Initialize crypto wait structures (Damien Le Moal) [task:184881]
  - dm crypt: fix GFP flags passed to skcipher_request_alloc() (Mikulas Patocka) [task:184881]
  - dm crypt: reuse eboiv skcipher for IV generation (Ard Biesheuvel) [task:184881]
  - dm crypt: Implement Elephant diffuser for Bitlocker compatibility (Milan Broz) [task:184881]
  - dm crypt: implement eboiv - encrypted byte-offset initialization vector (Milan Broz) [task:184881]
  - vhost: use kzalloc() instead of kmalloc() followed by memset() (Prathu Baronia) [task:193171] {CVE-2024-0340}
  - bpf: Synchronize dispatcher update with bpf_dispatcher_xdp_func (Jiri Olsa) [task:190915]
  - Revert "security/kysec: add netlink_send hook into LSM." (tianyunnuan) [task:179762]
  - Revert "security/kysec: pk label limit is useful only in sm env." (tianyunnuan) [task:179762]
  - security/kysec: Fix bug of non-execution tcm2 extension (liuqi) [task:193262]
  - security/kysec: Fix build dependence with tpm (liuqi) [task:193237]
  - nbd: fix null-ptr-dereference while accessing 'nbd->config' (Li Nan) [task:184984]
  - nbd: factor out a helper to get nbd_config without holding 'config_lock' (Li Nan) [task:184984]
  - nbd: fold nbd config initialization into nbd_alloc_config() (Li Nan) [task:184984]
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao) [task:193171] {CVE-2023-6932}
  - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg (Hyunwoo Kim) [task:193171] {CVE-2023-51779}
  - net/rose: Fix Use-After-Free in rose_ioctl (Hyunwoo Kim) [task:193171] {CVE-2023-51782}
  - appletalk: Fix Use-After-Free in atalk_ioctl (Hyunwoo Kim) [task:193171] {CVE-2023-51781}
  - atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim) [task:193171] {CVE-2023-51780}
  - security/kysec: Fixed compilation errors without PROCESS PROTECT (chengang) [task:192327]
  - OPENEULER: irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801 (Xiang Chen) [task:183018]
  - irqchip/gic-v3-its: Make is_v4 use a TYPER copy (Marc Zyngier) [task:183018]
  - crypto: cryptd - Protect per-CPU resource by disabling BH. (Sebastian Andrzej Siewior) [task:184972]
  - blk-wbt: make enable_state more accurate (Yu Kuai) [task:184970]
  - ext4: turning quotas off if mount failed after enable quotas (Baokun Li) [task:184977]
  - OPENEULER: x86/kprobes: Fix the error judgment for debug exceptions (Li Huafei) [task:184976]
  - ipmi_si: fix a memleak in try_smi_init() (Yi Yang) [task:184979]
  - quota: simplify drop_dquot_ref() (Baokun Li) [task:184966]
  - quota: fix dqput() to follow the guarantees dquot_srcu should provide (Baokun Li) [task:184966]
  - quota: add new helper dquot_active() (Baokun Li) [task:184966]
  - quota: rename dquot_active() to inode_quota_active() (Baokun Li) [task:184966]
  - quota: factor out dquot_write_dquot() (Baokun Li) [task:184966]
  - quota: add dqi_dirty_list description to comment of Dquot List Management (Chengguang Xu) [task:184966]
  - quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list (Chengguang Xu) [task:184966]
  - jbd2: fix checkpoint cleanup performance regression (Zhang Yi) [task:184982]
  - jbd2: remove __journal_try_to_free_buffer() (Zhang Yi) [task:184983]
  - jbd2: fix a race when checking checkpoint buffer busy (Zhang Yi) [task:184983]
  - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (Zhihao Cheng) [task:184983]
  - jbd2: remove journal_clean_one_cp_list() (Zhang Yi) [task:184983]
  - jbd2: remove t_checkpoint_io_list (Zhang Yi) [task:184983]
  - jbd2: recheck chechpointing non-dirty buffer (Zhang Yi) [task:184983]
  - security/kysec: implementation of dentry_create_files_as() hook (yangzhao) [bug:30065]
  - security/kysec: remove judgments greater than 32 signals (wangkanglong) [bug:111722]
  - security/kysec: filter signals which are not kill signal in task_kill() (yangzhao) [bug:107836]
  - security/kysec: use msleep_interruptible() instead of msleep() (yangzhao) [task:131471]
  - security/kysec: optimize kysec thread waiting mode by wait_event (yangzhao) [task:110527]
  - KVM: arm64: Fix clean dcache when vcpu is 0 (zhanghao1) [task:186056]
  - nfsd: Remove incorrect check in nfsd4_validate_stateid (Trond Myklebust) [task:184474]
  - nfsd4: kill warnings on testing stateids with mismatched clientids (J. Bruce Fields) [task:184474]
  - EULER: net: hns: fix wrong head when modify the tx feature when sending packets (Yonglong Liu) [task:182947]
  - KVM: SVM: Add 5-level page table support for SVM (Wei Huang) [bug:197000]
  - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() (Hangyu Hua) [task:193171] {CVE-2023-7192}
  - HYGON: crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash (liulanyi) [bug:207605]
  - security/kysec: Record TPM log using a kthread (liuqi) [task:181343]
  - security/kysec: Only record TPM log once per file (liuqi) [task:181343]
  - security/kysec: Add TPM based static measurement functions (huanfuxi) [task:177770, task:181343]
  - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation (Linus Torvalds)
  - blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" (Ming Lei)
  - ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan) [task:188430]
  - net/packet: convert po->auxdata to an atomic flag (Eric Dumazet) [task:188433]
  - net/packet: convert po->origdev to an atomic flag (Eric Dumazet) [task:188434]
  - nvmet: nul-terminate the NQNs passed in the connect command (Christoph Hellwig) [task:189180] {CVE-2023-6121}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.35.v2207
changelog:
  - USB: serial: pl2303: fix line-speed handling on newer chips (Johan Hovold) [bug:211186]
  - USB: serial: pl2303: add support for PL2303HXN (Charles Yeh) [bug:211186]
  - USB: serial: pl2303: fix tranceiver suspend mode (Johan Hovold) [bug:211186]
  - USB: serial: pl2303: fix non-supported xon/xoff (Johan Hovold) [bug:211186]
  - perf: Fix perf_event_validate_size() (Peter Zijlstra) [task:199635] {CVE-2023-6931}
  - loop: loop_set_status_from_info() check before assignment (Zhong Jinghua) [task:192988]
  - loop: Check for overflow while configuring loop (Siddh Raman Pant) [task:192988]
  - loop: Factor out configuring loop from status (Martijn Coenen) [task:192988]
  - Revert "loop: Check for overflow while configuring loop" (zhanggenjian) [task:192988]
  - loop: properly observe rotational flag of underlying device (Holger Hoffstätte) [task:192988]
  - loop: Refactor loop_set_status() size calculation (Martijn Coenen) [task:192988]
  - loop: Factor out setting loop device size (Martijn Coenen) [task:192988]
  - loop: Remove sector_t truncation checks (Martijn Coenen) [task:192988]
  - loop: Call loop_config_discard() only after new config is applied (Martijn Coenen) [task:192988]
  - Revert "loop: loop_set_status_from_info() check before assignment" (zhanggenjian) [task:192988]
  - tcm: support tpmrm function of ax99100_spi interface TCM module (jiangxiujie) [task:198010]
  - LoongArch: Clean up play_dead code (Yangyinglu) [task:198660]
  - LoongArch:LSVZ: remove uncached_acc CSR emulation (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: rename gcsr_readq with gcsr_read (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: rename wait instruction with idle (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: remove unused variable (Mao Bibo) [task:118969]
  - LoongArch: delete struct boot_mem_map (liuyun) [task:198660]
  - LoongArch:LSVZ: set guestid variable at percpu area (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: rename lvz_trap_handle_xxx with _kvm_handle_xxx (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: kvm code cleanup v2 (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: kvm code cleanup on mm (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: kvm code cleanup (Mao Bibo) [task:198660]
  - PCI: Add ACS quirk for Wangxun NICs (Mengyuan Lou) [task:195929]
  - PCI: Unify ACS quirk desired vs provided checking (Bjorn Helgaas) [task:195929]
  - PCI: Add ACS quirk for iProc PAXB (Abhinav Ratna) [task:195929]
  - PCI: Make ACS quirk implementations more uniform (Bjorn Helgaas) [task:195929]
  - rpmbuild: Choose the algorithm for module signing based on the config (chengang) [task:197392]
  - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (Sharath Srinivasan) [task:198453] {CVE-2024-23849}
  - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() (Tuo Li) [task:198457] {CVE-2024-24855}
  - dm: limit the number of targets and parameter size area (Mikulas Patocka) [task:198455] {CVE-2023-52429}
  - dm ioctl: log an error if the ioctl structure is corrupted (Mikulas Patocka) [task:198455]
  - jfs: fix log->bdev_handle null ptr deref in lbmStartIO (Lizhi Xu) [task:196809]
  - scsi: fcoe: pass in fcoe_rport structure instead of fc_rport_priv (Hannes Reinecke) [task:197881]
  - scsi: libfc: Whitespace cleanup in libfc.h (Hannes Reinecke) [task:197881]
  - netfilter: nf_tables: Reject tables of unsupported family (Phil Sutter) [task:196095] {CVE-2023-6040}
  - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (Dan Carpenter) [task:196363] {CVE-2024-0607}
  - security/kysec: Resolve abnormal KYSEC audit log issues (chengang) [bug:210410]
  - block: fix NULL pointer dereference in account statistics with IDE (Logan Gunthorpe) [task:196111]
  - block: account statistics for passthrough requests (Logan Gunthorpe) [task:196111]
  - machine_t: Limit specific architecture judgment functions (Jackie Liu)
  - LoongArch: hugepage table replace tlb (liuyun) [task:198242]
  - ZHAOXIN: Update PMU uncore dump bug patch (leoliu-oc) [bug:203040]
  - ZHAOXIN: Update PMU support for Zhaoxin KX-7000 (leoliu-oc) [bug:203040]
  - ZHAOXIN: Fix Zhaoxin PMU uncore kdump fail bug (leoliu-oc) [bug:203040]
  - arch/x86: avoid redefinition issues (liwanwu) [bug:203040]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.36.v2207
changelog:
  - package: Fix packing problem when building rpm packages (Jiangshan Yi) [task:171572, task:201386]
  - rpmbuild: support srpm when need (Jackie Liu) [task:201386]
  - net: openvswitch: fix race on port output (Felix Huettner) [task:202729]
  - i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201794] {CVE-2020-36782}
  - net: sched: sch_teql: fix null-pointer dereference (Pavel Tikhomirov) [task:215813]
  - mm: swapoff: shmem_unuse() stop eviction without igrab() (Hugh Dickins) [task:199161]
  - mm: swapoff: take notice of completion sooner (Hugh Dickins) [task:199161]
  - mm: swapoff: remove too limiting SWAP_UNUSE_MAX_TRIES (Hugh Dickins) [task:199161]
  - mm: swapoff: shmem_find_swap_entries() filter out other types (Hugh Dickins) [task:199161]
  - mm: swap: properly update readahead statistics in unuse_pte_range() (Andrea Righi) [task:199161]
  - mm: rid swapoff of quadratic complexity (Vineeth Remanan Pillai) [task:199161]
  - mm: refactor swap-in logic out of shmem_getpage_gfp (Vineeth Remanan Pillai) [task:199161]
  - shmem: Convert shmem_add_to_page_cache to XArray (Matthew Wilcox) [task:199161]
  - shmem: Convert find_swap_entry to XArray (Matthew Wilcox) [task:199161]
  - shmem: Convert shmem_confirm_swap to XArray (Matthew Wilcox) [task:199161]
  - shmem: Convert shmem_radix_tree_replace to XArray (Matthew Wilcox) [task:199161]
  - LoongArch:modify vfat and nls936 config to y (liubaolin) [task:193507]
  - LoongArch:LSVZ: disable hugepage during migration process (Bibo Mao) [task:198660]
  - LoongArch: LSVZ: Fix huge page check issue (liubaolin) [task:198660]
  - LoongArch: Flush the cache of PTW when creating new page table. (liubaolin) [task:198660]
  - LoongArch: Introduce hardware page table walk (liubaolin) [task:198660]
  - irqchip/loongarch: Improve extioi code for guest cpu (liubaolin) [task:198660]
  - LoongArch: Fix initrd parsing in the small fdt method (Youling Tang) [task:198660]
  - LoongArch: Fix the initrd parsing on the command line (yangqiming) [task:198660]
  - LoongArch: Efistub support V40 interface (yangqiming) [task:198660]
  - LoongArch: Fix kexec operation failed to resolve initrd on V4.0 interface (Youling Tang) [task:198660]
  - LoongArch: Support initrd passing by systemtable (Jianmin Lv) [task:198660]
  - irqchip: irq-loongarch-extioi: fix code error (Baoqi Zhang) [task:198660]
  - irqchip: irq-loongarch-extioi: update dt parameters (Liu Peibao) [task:198660]
  - loongarch: fix enable_pcie_wakeup() called twice (mengyingkun) [task:198660]
  - LoongArch: Rename csr register Help functions (Yanteng Si) [task:198660]
  - x86/alternatives: add missing insn.h include (Dave Hansen) [task:198393]
  - x86/alternatives: Sync bp_patching update for avoiding NULL pointer exception (Masami Hiramatsu) [task:198393]
  - x86/kprobes: Fix ordering while text-patching (Peter Zijlstra) [task:198393]
  - x86/alternatives: Add and use text_gen_insn() helper (Peter Zijlstra) [task:198393]
  - x86/alternatives, jump_label: Provide better text_poke() batching interface (Peter Zijlstra) [task:198393]
  - x86/alternatives: Teach text_poke_bp() to emulate instructions (Peter Zijlstra) [task:198393]
  - x86/jump_label: Make tp_vec_nr static (YueHaibing) [task:198393]
  - x86/jump_label: Batch jump label updates (Daniel Bristot de Oliveira) [task:198393]
  - x86/jump_label: Add a __jump_label_set_jump_code() helper (Daniel Bristot de Oliveira) [task:198393]
  - x86/alternative: Batch of patch operations (Daniel Bristot de Oliveira) [task:198393]
  - x86/kprobes: Prohibit probing on functions before kprobe_int3_handler() (Masami Hiramatsu) [task:198393]
  - rcu: Refactor rcu_{nmi,irq}_{enter,exit}() (Byungchul Park) [task:198393]
  - x86/alternatives: Remove the return value of text_poke_*() (Nadav Amit) [task:198393]
  - x86/jump-label: Remove support for custom text poker (Nadav Amit) [task:198393]
  - x86/jump_label: Use text_poke_early() during early init (Nadav Amit) [task:198393]
  - x86/jump_label: Switch to jump_entry accessors (Ard Biesheuvel) [task:198393]
  - jump_label: Implement generic support for relative references (Ard Biesheuvel) [task:198393]
  - jump_label: Abstract jump_entry member accessors (Ard Biesheuvel) [task:198393]
  - KVM: arm64: pmu: Reset sample period on overflow handling (Marc Zyngier) [task:197911]
  - KVM: arm/arm64: Remove pmc->bitmask (Andrew Murray) [task:197911]
  - kylin/gmjstcm:Adapting TCM1.0 to x86 (wudandan) [task:195669]
  - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (Hao Sun) [task:200744] {CVE-2024-26589}
  - crypto: enable SM3_GENERIC configs (chengang) [bug:215175]
  - vhost_net: revert upend_idx only on retriable error (Andrey Smetanin) [task:201250]
  - netfilter: nf_tables: don't skip expired elements during walk (Florian Westphal) [task:179882] {CVE-2023-4244}
  - netfilter: nft_set_rbtree: Add missing expired checks (Phil Sutter) [task:179882]
  - EDAC/thunderx: Fix possible out-of-bounds string access (Arnd Bergmann) [task:200669] {CVE-2023-52464}
  - blk-mq: fix IO hang from sbitmap wakeup race (Ming Lei)
  - Makefile: add mips and loongarch SRCARCH (Li ZhiGang) [task:199827]
  - security/ima&evm: change default hash algorithm to sha256 (liuqi) [task:192131]
  - security/ima&evm: fix xattr check error (liuqi) [task:192131]
  - f2fs: explicitly null-terminate the xattr list (Eric Biggers) [task:200626] {CVE-2023-52436}
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Zhipeng Lu) [task:200671] {CVE-2023-52469}
  - net: qualcomm: rmnet: fix global oob in rmnet_policy (Lin Ma) [task:200745] {CVE-2024-26597}
  - sched/membarrier: reduce the ability to hammer on sys_membarrier (Linus Torvalds) [task:200749] {CVE-2024-26602}
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Tony Lindgren) [task:200752] {CVE-2024-26600}
  - binder: signal epoll threads of self-work (Carlos Llamas) [task:200750] {CVE-2024-26606}
  - CIFS: Fix retry mid list corruption on reconnects (Pavel Shilovsky) [task:197803]
  - net: devlink: skip info_get op call if it is not defined in dumpit (Jiri Pirko) [task:199476]
  - Revert "optimize: rm redundant code in kysec fpro" (penghuaihe) [bug:207104]
  - Bluetooth: Fix atomicity violation in {min,max}_key_size_set (Gui-Dong Han) [task:199813] {CVE-2024-24860}
  - Bluetooth: Move {min,max}_key_size debugfs into hci_debugfs_create_le (Marcel Holtmann) [task:199813]
  - Bluetooth: Add support for LE ping feature (Spoorthi Ravishankar Koppad) [task:199813]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.37.v2207
changelog:
  - scripts: add a script to calculate tasks (Zhengyuan Liu)
  - Revert "GRT: net: fix some warning by gcc" (zhulei) [task:215796]
  - clk: sunxi-ng: Unregister clocks/resets when unbinding (Samuel Holland) [task:212525, task:215462] {CVE-2021-47205}
  - Revert "clk: sunxi-ng: add support for the Allwinner A100 CCU" (Jiangshan Yi) [task:215462]
  - Revert "clk: sunxi-ng: Add support for the Allwinner H616 CCU" (Jiangshan Yi) [task:215462]
  - Revert "clk: sunxi-ng: Unregister clocks/resets when unbinding" (Jiangshan Yi) [task:215462]
  - clk: Add of_clk_hw_register() API for early clk drivers (Stephen Boyd) [task:212789, task:215462]
  - clk: Prepare for clk registration API that uses DT nodes (Stephen Boyd) [task:212789, task:215462]
  - GRT: net: fix some warning by gcc (zhulei) [task:215796]
  - security/kysec: Fixed kernel compilation security warnings (mengdehui) [task:215795]
  - security/kysec: fix some code still run when pcr closed (mengdehui) [bug:217795]
  - securirty/kysec: fix dentry info mem leak (mengdehui) [bug:217795]
  - security/kysec: Add mount_lock when traversing mnt list (mengdehui) [bug:217795]
  - security/kysec: Add fault tolerance when sb_sec is NULL (mengdehui) [bug:217795]
  - NETSWIFT: txgbe: fix some warning by gcc (zhulei) [task:215796]
  - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Kunwu Chan) [task:207382] {CVE-2023-52607}
  - powerpc/mm: fix a warning when a cache is common to PGD and hugepages (Christophe Leroy) [task:207382] {CVE-2023-52607}
  - powerpc/mm: replace hugetlb_cache by PGT_CACHE(PTE_T_ORDER) (Christophe Leroy) [task:207382] {CVE-2023-52607}
  - Revert "i40e: The state of phy may not be correct during power-on" (xiaolinkui) [task:210775]
  - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (Duoming Zhou) [task:209227, task:214895] {CVE-2024-26654}
  - ALSA: sh: Fix compile warning wrt const (Takashi Iwai) [task:155707, task:214895]
  - ALSA: aica: Fix a long-time build breakage (Takashi Iwai) [task:153627, task:214895]
  - LoongArch:adjust the calc method of number of packages. (wanghongliang) [task:209781]
  - LoongArch:irqchip/loongarch-extioi:Fix ext irq route error. (wanghongliang) [task:209781]
  - cpufreq: loongson3-acpi: Initialize the value of policy->cur (mengyingkun) [task:209781]
  - ipmi: ls2k500 kcs ipmi add nolock version support. (Chong Qiao) [task:209781]
  - irqchip/loongarch-extioi: Fix ext irq route fail when some cpus offline (Juxin Gao) [task:209781]
  - OPENEULER: SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers (zhanglei) [task:205210]
  - arm64/config: CONFIG_PHYTIUM_MBOX=m (chizhiling) [bug:221940]
  - OPENEULER: mailbox: add phytium mailbox driver (Chen Ziqiang) [bug:221940]
  - scsi: qedf: Add pointer checks in qedf_update_link_speed() (Javed Hasan) [task:206931] {CVE-2021-47077}
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (Chun-Yi Lee) [task:194976] {CVE-2023-6270}
  - thermal: Fix NULL pointer dereferences in of_thermal_ functions (Subbaraman Narayanamurthy) [task:212533] {CVE-2021-47202}
  - tracing/trigger: Fix to return error if failed to alloc snapshot (Masami Hiramatsu (Google)) [task:212517] {CVE-2024-26920}
  - x86, relocs: Ignore relocations in .notes section (Kees Cook) [task:212412] {CVE-2024-26816}
  - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume (Omar Sandoval) [task:209259] {CVE-2024-26644}
  - PM / devfreq: Synchronize devfreq_monitor_[start/stop] (Mukesh Ojha) [task:209249] {CVE-2023-52635}
  - nilfs2: fix potential bug in end_buffer_async_write (Ryusuke Konishi) [task:210283] {CVE-2024-26685}
  - aoe: avoid potential deadlock at set_capacity (Maksim Kiselev) [task:210627] {CVE-2024-26775}
  - clk: sunxi-ng: Unregister clocks/resets when unbinding (Samuel Holland) [task:212525] {CVE-2021-47205}
  - clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock (Icenowy Zheng) [task:155707]
  - clk: sunxi-ng: Add support for the Allwinner H616 CCU (Andre Przywara) [task:212525]
  - clk: sunxi-ng: add support for the Allwinner A100 CCU (Yangtao Li) [task:212525]
  - clk: sunxi: Don't call clk_hw_get_name() on a hw that isn't registered (Stephen Boyd) [task:212525]
  - clk: sunxi-ng: v3s: add Allwinner V3 support (Icenowy Zheng) [task:212525]
  - clk: sunxi-ng: v3s: add the missing PLL_DDR1 (Icenowy Zheng) [task:153627]
  - clk: sunxi-ng: v3s: Use local parent references for CLK_FIXED_FACTOR (Chen-Yu Tsai) [task:212525]
  - clk: sunxi-ng: switch to of_clk_hw_register() for registering clks (Chen-Yu Tsai) [task:212525]
  - clk: sunxi-ng: h6: Preset hdmi-cec clock parent (Jernej Skrabec) [task:212525]
  - clk: sunxi-ng: f1c100s: fix USB PHY gate bit offset (Icenowy Zheng) [task:212525]
  - clk: sunxi-ng: add support for suniv F1C100s SoC (Mesih Kilinc) [task:212525]
  - x86/alternatives: Disable KASAN in apply_alternatives() (Kirill A. Shutemov) [task:205153] {CVE-2023-52504}
  - binder: fix race between mmput() and do_exit() (Carlos Llamas) [task:207402] {CVE-2023-52609}
  - reiserfs: Avoid touching renamed directory if parent does not change (Jan Kara) [task:207282] {CVE-2023-52591}
  - bnxt_en: Fix RX consumer index logic in the error path. (Michael Chan) [task:206925] {CVE-2021-47015}
  - bnxt_en: Reduce unnecessary message log during RX errors. (Michael Chan) [task:206925]
  - md: don't clear MD_RECOVERY_FROZEN for new dm-raid until resume (Yu Kuai) [task:210625]
  - md: Don't ignore suspended array in md_check_recovery() (Yu Kuai) [task:210625] {CVE-2024-26758}
  - vfio/pci: Lock external INTx masking ops (Alex Williamson) [task:210634] {CVE-2024-26810}
  - rt2x00: initialize last_reset (Stanislaw Gruszka) [task:207285]
  - rt2x00: clear IV's on start to fix AP mode regression (Stanislaw Gruszka) [task:207285] {CVE-2023-52595}
  - rt2x00: add restart hw (Stanislaw Gruszka) [task:207285]
  - rt2800: add pre_reset_hw callback (Stanislaw Gruszka) [task:207285]
  - rt2800: initial watchdog implementation (Stanislaw Gruszka) [task:207285]
  - rt2800: add helpers for reading dma done index (Stanislaw Gruszka) [task:207285]
  - rt2x00: allow to specify watchdog interval (Stanislaw Gruszka) [task:207285]
  - rt2x00: use different txstatus timeouts when flushing (Stanislaw Gruszka) [task:207285]
  - rt2x00: do not check for txstatus timeout every time on tasklet (Stanislaw Gruszka) [task:207285]
  - rt2800mmio: use txdone/txstatus routines from lib (Stanislaw Gruszka) [task:207285]
  - rt2800: move usb specific txdone/txstatus routines to rt2800lib (Stanislaw Gruszka) [task:207285]
  - net/smc: remove device from smcd_dev_list after failed device_add() (Julian Wiedmann) [task:207216] {CVE-2021-47143}
  - KVM: Destroy target device if coalesced MMIO unregistration fails (Sean Christopherson) [task:206929] {CVE-2021-47060}
  - KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (Kefeng Wang) [task:206929] {CVE-2021-47060}
  - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed (Sean Christopherson) [task:206929] {CVE-2021-47060}
  - ubi: Check for too small LEB size in VTBL code (Richard Weinberger) [task:212058] {CVE-2024-25739}
  - Bluetooth: Fix TOCTOU in HCI debugfs implementation (Bastien Nocera) [task:212057] {CVE-2024-24859}
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (Yuxuan Hu) [task:212059] {CVE-2024-22099}
  - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (Ziqi Zhao) [task:210651] {CVE-2023-52638}
  - net: rds: use maybe_get_net() when acquiring refcount on TCP sockets (Tetsuo Handa) [task:209413]
  - tee: optee: Fix incorrect page free bug (Sumit Garg) [task:206938] {CVE-2021-47087}
  - asix: fix wrong return value in asix_check_host_enable() (Pavel Skripkin) [task:206939]
  - asix: fix uninit-value in asix_mdio_read() (Pavel Skripkin) [task:206939] {CVE-2021-47101}
  - net: asix: fix uninit value bugs (Pavel Skripkin) [task:206939]
  - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command (Michal Grzedzicki) [task:205228] {CVE-2023-52500}
  - x86/kvm: Do not try to disable kvmclock if it was not enabled (Kirill A. Shutemov) [task:207214]
  - x86/kvm: Disable kvmclock on all CPUs on shutdown (Vitaly Kuznetsov) [task:207214] {CVE-2021-47110}
  - x86/kvm: Teardown PV features on boot CPU as well (Vitaly Kuznetsov) [task:206940] {CVE-2021-47112}
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Xingyuan Mo) [task:210392] {CVE-2023-7042}
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Baokun Li) [task:210360] {CVE-2024-26773}
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Baokun Li) [task:210642] {CVE-2024-26772}
  - ext4: fix double-free of blocks due to wrong extents moved_len (Baokun Li) [task:210641] {CVE-2024-26704}
  - RDMA/srpt: Support specifying the srpt_service_guid parameter (Bart Van Assche) [task:210645] {CVE-2024-26744}
  - net: ip_tunnel: prevent perpetual headroom growth (Florian Westphal) [task:210646] {CVE-2024-26804}
  - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (Oleksij Rempel) [task:210648] {CVE-2023-52637}
  - can: j1939: j1939_sk_init(): set SOCK_RCU_FREE to call sk_destruct() after RCU is done (Oleksij Rempel) [task:210648]
  - fbdev: savage: Error out if pixclock equals zero (Fullway Wang) [task:210633] {CVE-2024-26778}
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Zach O'Keefe) [task:210632] {CVE-2024-26720}
  - wifi: mac80211: fix race condition on enabling fast-xmit (Felix Fietkau) [task:210626] {CVE-2024-26779}
  - dmaengine: ti: edma: Add some null pointer checks to the edma_probe (Kunwu Chan) [task:210482] {CVE-2024-26771}
  - btrfs: dev-replace: properly validate device names (David Sterba) [task:210624] {CVE-2024-26791}
  - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter (Ryosuke Yasuoka) [task:210464] {CVE-2024-26805}
  - fbdev: sis: Error out if pixclock equals zero (Fullway Wang) [task:210465] {CVE-2024-26777}
  - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [task:210432] {CVE-2024-26743}
  - Bluetooth: Avoid potential use-after-free in hci_error_reset (Ying Hsu) [task:210462] {CVE-2024-26801}
  - ipv6: sr: fix possible use-after-free and null-ptr-deref (Vasiliy Kovalev) [task:210463] {CVE-2024-26735}
  - gtp: fix use-after-free and null-ptr-deref in gtp_newlink() (Alexander Ofitserov) [task:210471] {CVE-2024-26793}
  - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() (Vasiliy Kovalev) [task:210471]
  - ARM: ep93xx: Add terminator to gpiod_lookup_table (Nikita Shubin) [task:210473] {CVE-2024-26751}
  - dm-crypt: don't modify the data when using authenticated encryption (Mikulas Patocka) [task:210478] {CVE-2024-26763}
  - nilfs2: fix data corruption in dsync block recovery for small block sizes (Ryusuke Konishi) [task:210301] {CVE-2024-26697}
  - usb: hub: Guard against accesses to uninitialized BOS descriptors (Ricardo Cañuelo) [task:205167] {CVE-2023-52477}
  - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (Hans de Goede) [task:205219] {CVE-2023-52478}
  - NFS: Fix an Oopsable condition in __nfs_pageio_add_request() (Trond Myklebust) [task:207226] {CVE-2021-47167}
  - ip6_vti: fix slab-use-after-free in decode_session6 (Zhengchao Shao) [task:205581]
  - ip_vti: fix potential slab-use-after-free in decode_session6 (Zhengchao Shao) [task:205581]
  - xfrm: fix slab-use-after-free in decode_session6 (Zhengchao Shao) [task:205581]
  - media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run (Zheng Wang) [task:204919] {CVE-2023-52491}
  - media: platform: Add mechanism to handle jpeg hardware's locking up (Xia Jiang) [task:204919]
  - media: platform: Improve power on and power off flow (Xia Jiang) [task:204919]
  - vfio/pci: Disable auto-enable of exclusive INTx IRQ (Alex Williamson) {CVE-2024-27437}
  - genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() (Barry Song)
  - media: vimc: stream: fix build by missing dev (Jackie Liu) [task:209415]
  - ACPI: tables: Simplify PPTT leaf node detection (Jeremy Linton) [task:207620]
  - virtio-blk: remove VIRTIO_BLK_F_SCSI support (Christoph Hellwig) [task:209004]
  - net: prevent mss overflow in skb_segment() (Eric Dumazet) [task:209255] {CVE-2023-52435}
  - media: vimc: streamer: if kthread_stop fails, ignore the error (Dafna Hirschfeld) [task:209314]
  - tracing: Ensure visibility when inserting an element into tracing_map (Petr Pavlu) [task:209253] {CVE-2024-26645}
  - efi/arm: Show SMBIOS bank/device location in CPER and GHES error logs (Marcin Benka) [bug:218049]
  - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (Shigeru Yoshida) [task:209216] {CVE-2024-26663}
  - sr9800: Add check for usbnet_get_endpoints (Chen Ni) [task:209210] {CVE-2024-26651}
  - inet: read sk->sk_family once in inet_recv_error() (Eric Dumazet) [task:209235] {CVE-2024-26679}
  - ppp_async: limit MRU to 64K (Eric Dumazet) [task:209233] {CVE-2024-26675}
  - netfilter: nf_tables: disallow timeout for anonymous sets (Pablo Neira Ayuso) [task:207391] {CVE-2023-52620}
  - swapfile: fix soft lockup in scan_swap_map_slots (Chen Wandun) [task:183285]
  - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (Sean Christopherson) [task:206928] {CVE-2021-47061}
  - KVM: use struct_size() and flex_array_size() helpers in kvm_io_bus_unregister_dev() (Rustam Kovhaev) [task:206928]
  - overflow.h: Add flex_array_size() helper (Gustavo A. R. Silva) [task:162874, task:161899]
  - jfs: fix uaf in jfs_evict_inode (Edward Adam Davis) [task:207381] {CVE-2023-52600}
  - tipc: wait and exit until all work queues are done (Xin Long) [task:207225] {CVE-2021-47163}
  - team: fix null-ptr-deref when team device type is changed (Ziyang Xuan) [task:207278] {CVE-2023-52574}
  - perf/x86/lbr: Filter vsyscall addresses (JP Kobryn) [task:205164] {CVE-2023-52476}
  - UBSAN: array-index-out-of-bounds in dtSplitRoot (Osama Muhammad) [task:207406] {CVE-2023-52603}
  - s390/ptrace: handle setting of fpc register correctly (Heiko Carstens) [task:207408] {CVE-2023-52598}
  - KVM: s390: fix setting of fpc register (Heiko Carstens) [task:207400] {CVE-2023-52597}
  - PCI: switchtec: Fix stdev_release() crash after surprise hot remove (Daniel Stodden) [task:207403] {CVE-2023-52617}
  - switchtec: Add MRPC DMA mode support (Wesley Sheng) [task:207403]
  - can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer() (Oleksij Rempel) [task:205575]
  - ceph: fix deadlock or deadcode of misusing dget() (Xiubo Li) [task:207229] {CVE-2023-52583}
  - IB/ipoib: Fix mcast list locking (Daniel Vacek) [task:207280] {CVE-2023-52587}
  - RDMA/IPoIB: Fix error code return in ipoib_mcast_join (Jack Wang) [task:207280]
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Minsuk Kang) [task:207380] {CVE-2023-52594}
  - jfs: fix array-index-out-of-bounds in diNewExt (Edward Adam Davis) [task:207379] {CVE-2023-52599}
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree (Osama Muhammad) [task:207384] {CVE-2023-52604}
  - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Herbert Xu) [task:207385] {CVE-2023-52615}
  - powerpc/lib: Validate size for vector operations (Naveen N Rao) [task:207386] {CVE-2023-52606}
  - ocfs2: Avoid touching renamed directory if parent does not change (Jan Kara) [task:207378] {CVE-2023-52590}
  - fs: ocfs2: check status values (Artem Chernyshev) [task:207378]
  - pstore/ram: Fix crash when setting number of cpus to an odd number (Weichen Chen) [task:207388] {CVE-2023-52619}
  - SUNRPC: Fix a suspicious RCU usage warning (Anna Schumaker) [task:207390] {CVE-2023-52623}
  - jfs: fix slab-out-of-bounds Read in dtSearch (Manas Ghandat) [task:207383] {CVE-2023-52602}
  - crypto: scomp - fix req->dst buffer overflow (Chengming Zhou) [task:207387] {CVE-2023-52612}
  - crypto: scompress - initialize per-CPU variables on each CPU (Sebastian Andrzej Siewior) [task:207387]
  - crypto: scompress - Use per-CPU struct instead multiple variables (Sebastian Andrzej Siewior) [task:207387]
  - crypto: scompress - return proper error code for allocation failure (Sebastian Andrzej Siewior) [task:207387]
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Pan Bian) [task:207228] {CVE-2023-52566}
  - nvme-loop: fix memory leak in nvme_loop_create_ctrl() (Wu Bo) [task:206937] {CVE-2021-47074}
  - nvme-loop: don't put ctrl on nvme_init_ctrl error (Chaitanya Kulkarni) [task:206937]
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso) [task:206383] {CVE-2024-26642}
  - llc: make llc_ui_sendmsg() more robust against bonding changes (Eric Dumazet) [task:206384] {CVE-2024-26636}
  - security/kysec: fix k tag java hung_task_timeout_secs (mengdehui) [bug:218233]
  - ring-buffer: Have saved event hold the entire event (Steven Rostedt (Google)) [task:205154]
  - ring-buffer: Do not attempt to read past "commit" (Steven Rostedt (Google)) [task:205154] {CVE-2023-52501}
  - ring-buffer: Have rb_iter_head_event() handle concurrent writer (Steven Rostedt (VMware)) [task:205154]
  - ring-buffer: Add page_stamp to iterator for synchronization (Steven Rostedt (VMware)) [task:205154]
  - ring-buffer: Have ring_buffer_empty() not depend on tracing stopped (Steven Rostedt (VMware)) [task:205154]
  - sched/rt: Fix sysctl_sched_rr_timeslice intial value (Cyril Hrubis) [task:205110]
  - sched/rt: Disallow writing invalid values to sched_rt_period_us (Cyril Hrubis) [task:205110]
  - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset (Cyril Hrubis) [task:205110]
  - net: rds: acquire refcount on TCP sockets (Tetsuo Handa) [task:205876]
  - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (Eric Dumazet) [task:205232] {CVE-2023-52502}
  - nfc: constify several pointers to u8, char and sk_buff (Krzysztof Kozlowski) [task:205232]
  - drm: Don't unref the same fb many times by mistake due to deadlock handling (Ville Syrjälä) [task:205231] {CVE-2023-52486}
  - ipv6: init the accept_queue's spinlocks in inet6_create (Zhengchao Shao) [task:205163]
  - tcp: make sure init the accept_queue's spinlocks once (Zhengchao Shao) [task:205163] {CVE-2024-26614}
  - l2tp: pass correct message length to ip6_append_data (Tom Parkin) [task:205227]
  - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells) [task:205227] {CVE-2023-52527}
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe (Dinghao Liu) [task:205220] {CVE-2023-52510}
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Wen Gu) [task:205222] {CVE-2024-26615}
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida) [task:205218] {CVE-2023-52528}
  - tomoyo: fix UAF write bug in tomoyo_write_control() (Tetsuo Handa) [task:205063] {CVE-2024-26622}
  - net: nfc: llcp: Add lock when modifying device list (Jeremy Cline) [task:205036] {CVE-2023-52524}
  - nfc: nci: assert requested protocol is valid (Jeremy Cline) [task:205032] {CVE-2023-52507}
  - Input: powermate - fix use-after-free in powermate_config_complete (Javier Carrasco) [task:204918] {CVE-2023-52475}
  - llc: Drop support for ETH_P_TR_802_2. (Kuniyuki Iwashima) [task:204916] {CVE-2024-26635}
  - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (Eric Dumazet) [task:204917] {CVE-2024-26633}
  - Revert "arm64/config: CONFIG_IP_DCCP=m" (Jiangshan Yi) [task:206427]
  - ax25: Fix ax25 session cleanup problems (Duoming Zhou) [task:203789]
  - mm: fix race between MADV_FREE reclaim and blkdev direct IO read (Mauricio Faria de Oliveira) [task:162162, task:204700]
  - nfsd: fix use-after-free due to delegation race (J. Bruce Fields) [task:160493]
  - arm64/config: CONFIG_IP_DCCP=m (lingfuyi) [bug:217102]
  - tty: n_gsm: check error while registering tty devices (Hillf Danton)
  - tty: n_gsm: add helpers to convert mux-num to/from tty-base (Martin Hundebøll)
  - USB: gadget: dummy-hcd: Fix errors in port-reset handling (Alan Stern)
  - bfs: extra sanity checking and static inode bitmap (Tigran Aivazian)
  - USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug (Alan Stern)
  - i2c: cadence: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201795] {CVE-2020-36784}
  - i2c: img-scb: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201797] {CVE-2020-36783}
  - i2c: sprd: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201796] {CVE-2020-36780}
  - PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter (Zhang Qilong) [task:201796] {CVE-2020-36780}
  - security/kysec: add kysec_tcm_type boot parameter (huanfuxi) [bug:210498]
  - llc: call sock_orphan() at release time (Eric Dumazet) [task:203087] {CVE-2024-26625}
  - af_unix: fix lockdep positive in sk_diag_dump_icons() (Eric Dumazet) [task:203085] {CVE-2024-26624}
  - xen-netback: don't produce zero-size SKB frags (Jan Beulich) [task:203084] {CVE-2023-46838}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.38.v2207
changelog:
  - driver core: Let dev_of_node() accept a NULL dev (Stephen Boyd) [task:215336, bug:226512]
  - GRT: fix some warning by gcc (zhulei) [task:215796]
  - clk: Use parent node pointer during registration if necessary (Stephen Boyd) [bug:226512]


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p08
changelog:
  -Type:update
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-add-some-missing-traditional-chinese-translations.patch


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p09
changelog:
  -Type:update
  -ID:[TASK#187123]
  -SUG:NA
  -DESC:add patch 0001-mate-panel-add-some-more-missing-traditional-chinese.patch


author: huayadong <huayadong@kylinos.cn> 1.12.1-1kord30~rc3.p02
changelog:
  - Type: bugfix
  - ID  : [任务#75897]
  - SUG : NA
  - DESC: add %post:glib-compile-schemas /usr/share/glib-2.0/schemas 解决首次安装post脚本报错.


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.8.1-10.se.01
changelog:
  - Type:update
  - ID:[Task#185579]
  - SUG:NA
  - DESC: shadow-utils修复无效路经的问题
  -         add patch: shadow-utils-fix-invalid-path.patch
  -       加入kysec和user检查
  -         add patch: shadow-4.7-kysec-and-user-check.patch
  -       恢复-o命令选项
  -         add patch: shadow-recover-o-option-and-move-real-operate.patch
  -       修复newuid不能加入uid_list的问题
  -         add patch: shadow-fix-newuid-not-into-uid_list.patch
  -       修正了参数u不使用时的唯一uid
  -         add patch: shadow-fix-unique-uid-when-arg-u-not-used.patch
  -       chpasswd使用pam
  -         add patch: shadow-chpasswd-use-pam.patch
  -       修复添加用户错误和uid_list重复的问题
  -         add patch: shadow-4.7-fix-mock-add-user-err-fix-uid_list-duplication.patch
  -       修复使用pam引发的问题
  -         add patch: shadow-fix-use-pam-patch.patch
  -       超过1000，不检查uid
  -         add patch: shadow-change-do-not-check-uid-if-bigger-than-1000.patch
  -       添加登录检查相同UID的功能
  -         add patch: shadow-login-check-same-uid.patch
  -       修复bug#71437：security-switch切换模式，default模式切换到strict模式，报错的问题
  -         add patch: shadow-reserved-admin-uids.patch
  -       useradd中将uid>1000的判断改为>=1000,否则创建uid为1000的用户不会写入uid_list中
  -         add patch: shadow-useradd-modify-uid-great-than-or-equal-to-1000.patch
  -       off状态,-u参数默认getpwuid; on状态,-u使用uid_used
  -          add patch: shadow-chkuid-off-oflg-pwuid.patch
  -         add patch: shadow-get-chkuid-state.patch


author: mengchaogming<mengchaoming@kylinos.cn>-- 2:4.8.1-10.se.01.p01
changelog:
  - Type:update
  - ID:[Task#198754]
  - SUG:NA
  - DESC:支持香港繁体中文
  - add patch:shadow-4.8.1-add-zh_HK.po.patch
  - add patch:shadow-4.8.1-add-zh_HK_1.patch


author: caiyinan <caiyinan@kylinos.cn> - 243-55.p01
changelog:
  -- add Patch10001: 0002-Change-the-NTP-server.patch(import changes from 243-31.se.p06)
     Change NTP server.
  -- add patch10002:systemd-243-kylin-init5-hang.patch(import changes from 243-31.se.p06)
     Modify ctrl+alt+F2 switch to init5 stuck problem
  -- add patch10003:systemd-243-kylin-init1-add-check-console-tty1.patch(import changes from 243-31.se.p06)
     fix bug 1568:Input init1 in the graphical interface, switching to single user is abnormal, the screen is black, the cursor in the upper left corner flickers, and the graphical interface cannot be switched


author: wanghao <wanghao2@kylinos.cn> - 243-55.p01.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 修复了当LSM堆叠启用时systemctl的selinux拒绝错误
  -         add patch: systemd-fix-selinux-denied-error-for-systemctl-when-lsm-stacking-is-enable.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p02.se.01
changelog:
  - Type:bugfix
  - ID:rhbz#1819868
  - SUG:NA
  - DESC: fix create pod container fail and systemd timeout (rhbz #1819868)


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p04.se.01
changelog:
  - Type:compile
  - ID:TASK#142824
  - SUG:NA
  - DESC: Support loongarch64
          Remove gnu-efi check in loongarch64


author: Li Mingle <limingle@kylinos.cn> - 243-55.p04.se.01.ws
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC: prevent unprivileged user from executing reboot operation


