# changelog

author: wangjie1 <wangjie1@kylinos.cn> - 1:7.1.2.25-1.p01
changelog:
  - Type: cves
  - ID: CVE-2026-53466, CVE-2026-53467, CVE-2026-55510, CVE-2026-55628, CVE-2026-55597, CVE-2026-55595, CVE-2026-55577, CVE-2026-55594
  - SUG: NA
  - DESC: fix CVE-2026-53466, CVE-2026-53467, CVE-2026-55510, CVE-2026-55628, CVE-2026-55597, CVE-2026-55595, CVE-2026-55577, CVE-2026-55594


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:1.42.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:NetworkManager-dispatcher.service not enabled when installed due to systemd_units not defined


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:1.42.8-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync bugfix patch: delete lease file when connection deleted and 
         update the way to get ppp version because patchlevel.h no more provided in  ppp-2.5.0


author: liuzhilin <liuzhilin@uniontech.com> - 1:1.44.2-2
changelog:
  - add NM to support wifi6(fix dde-network-core build error)
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:Support wireless networks connecting WIFI6 encryption methods,
         so this demand is achieved in NetworkManager, KF5-NetworkManager-QT,
         DDE-Network-Core software package


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1:1.44.2-3.p03
changelog:
  - Type: BugFix
  - ID: [TASK#604471]
  - SUG: NA
  - DESC: mptcp fix error handling rp_filter when kernel don't support mptcp


author: chengguipeng <chengguipeng1@huawei.com> - 1.1.12-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:solove the problem that no message is displayed when running a uninstalled command.


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.8-2
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: pkcon: Use appropriate callbacks for client / task async calls


author: lingsheng <lingsheng1@h-partners.com> - 1.2.8-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Revert PkClient: Replace the GSimpleAsyncResult with the GTask API


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 4.0.5-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: majianhan <majianhan@kylinos.cn> - 36.16.5-34.p13
changelog:
  - Type:bugfix
  - ID:[BUG#277445]
  - SUG:NA
  - DESC:Remove shortcut when set root password to avoid hotkey conflict


author: majianhan <majianhan@kylinos.cn> - 36.16.5-34.p16
changelog:
  - Type:update
  - ID:[TASK#381853]
  - SUG:NA
  - DESC:backport adjust some requires and config for derived os


author: majianhan <majianhan@kylinos.cn> - 36.16.5-45.p01
changelog:
  - Type:update
  - ID:[TASK#425071]
  - SUG:NA
  - DESC:[kylin]Add tiger-vnc-minimal requires back
         [backport]configure only-append-fanalyzer
         [backport]check-that-the-password-contains-the-username
         [backport]bugfix-set-metacity-with-LIBGL_KOPPER_DISABLE-as-yes


author: yueyuankun <yueyuankun@kylinos.cn> - 36.16.5-45.p02
changelog:
  - Type:update
  - ID:[TASK#433557]
  - SUG:NA
  - DESC: aarch64: add 'smmu.bypassdev=0xffe1:0xd200' in /etc/default/grub


author: lixiaoyong <lixiaoyong@kylinos.cn> - 2.9.27-6.p01
changelog:
  - Type: update
  - ID: [Task#424643]
  - SUG: NA
  - DESC: Add support for KylinOS in ansible hostname module


author: Funda Wang <fundawang@yeah.net> - 5.3.1-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-2751 CVE-2025-3158 CVE-2025-3196
  - SUG:NA
  - DESC:fix CVE-2025-2751 CVE-2025-3158 CVE-2025-3196


author: mapengyuan <mapengyuan@xfusion.com> - 5.3.1-16
changelog:
  - Type:CVE
  - CVE:CVE-2025-2754 CVE-2025-2756 CVE-2025-5200
  - SUG:NA
  - DESC:fix CVE-2025-2754 CVE-2025-2756 CVE-2025-5200


author: majianhan <majianhan@kylinos.cn> - 5.3.1-17
changelog:
  - Type:CVE
  - CVE:CVE-2025-2752 CVE-2025-2755 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204
  - SUG:NA
  - DESC:fix CVE-2025-2752 CVE-2025-2755 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204


author: shixuantong<shixuantong@huawei.com> - 0.3.6-25
changelog:
  - Type:cves
  - ID:CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839
  - SUG:NA
  - DESC:fix CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839


author: zhangzikang <zhangzikang@kylinos.cn> - 1:3.1.2-7.p01
changelog:
  - Type: update
  - ID: [TASK#424647]
  - SUG: NA
  - DESC: Add audit-kycompat subpackage.
          Supply follow symbols to solve the API/ABI compatibility issue:
            audit_add_dir


author: litianhao <litianhao@kylinos.cn> - 1:3.1.2-7.p01.se.01
changelog:
  - Type: update
  - ID: [TASK#431219] audit合入安全补丁
  - SUG: NA
  - DESC: 合入kysec补丁
          audit-add-kysec.patch
          audit-refactor-dep-kysec.patch


author: litianhao <litianhao@kylinos.cn> - 1:3.1.2-7.p01.se.02
changelog:
  - Type: update
  - ID: [BUG#332988]【V11 2503】【b01】审计管理开启后自动停
  - SUG: NA
  - DESC: 未加载上kysec时不退出服务
          audit-skip-kysec-check-if-not-loaded.patch


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1:3.1.2-7.p01.se.03
changelog:
  - Type: update
  - ID: [TASK#439186] kysec2.0审计日志输出
  - SUG: NA
  - DESC: 适配ksaf日志
          audit-add-support-for-ksaf-log.patch


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1:3.1.2-7.p01.se.04
changelog:
  - Type: update
  - ID: [TASK#474839] 【v11 2503】审计包功能优化
  - SUG: NA
  - DESC: ksaf审计日志变动
          audit-trigger-by-ksaf-audit-log-update.patch


author: mengyuan <mengyuan@kylinos.cn> - 1:3.1.2-7.p01.se.05
changelog:
  - Type: update
  - ID: [BUG#369603]【V11-2503】审计规则配置删除后重启auditd规则依然存在
  - SUG: NA
  - DESC: 更新默认审计规则，与红帽、ubuntu保持一致
          audit.spec


author: litianhao <litianhao@kylinos.cn> - 1:3.1.2-7.p01.se.06
changelog:
  - Type: update
  - ID: [TASK#443733]增加kydima日志类型
  - SUG: NA
  - DESC: 日志事件类型增加kydima类型
          audit-add-kydima-msg-type.patch


author: mengyuan <mengyuan@kylinos.cn> - 1:3.1.2-7.p01.se.07
changelog:
  - Type: update
  - ID: [BUG#381503]【V11 2503】auditadm-审计相关目录权限划分错误
  - SUG: NA
  - DESC: 修复三权状态下生成的audit.rules文件属主异常问题
  	audit-fix-audit-rule-perm-when-3adm.patch


author: pengxi <pengxi@kylinos.cn> - 1:3.1.2-7.p01.se.08
changelog:
  - Type: update
  - ID: [BUG#235394]【mugen】loongarch服务器audit测试集的测试子项oe_test_audit_autrace测试失败
  - SUG: NA
  - DESC: autrace在loongarch64下插入规则失败
  	audit-fix-rule-insert-error-on-loongarch64.patch
          添加loongarch64系统调用表
      audit-add-syscall-table-for-loongarch64.patch


author: mengyuan <mengyuan@kylinos.cn> - 1.0.1-07
changelog:
  - Type: update
  - ID: [TASK#435244] 提升单元测试覆盖率
  - SUG: NA
  - DESC: 提升单元测试覆盖率
  -       audit-status-libs-add-gcov-comment.patch


author: mengyuan <mengyuan@kylinos.cn> - 1.0.1-08
changelog:
  - Type: update
  - ID: [BUG#368109]【B15】【V11-2503】【安全SDK】【安全审计】安全审计状态配置测试失败
  - SUG: NA
  - DESC:修复审计状态配置接口可能会配置多条审计状态的问题
          audit-status-libs-fix-cmdline.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.1-13
changelog:
  - Type: update
  - ID: [TASK#649675] 组件优化
  - DESC: 组件优化
          audit-status-libs-fix-threat-analysis.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.1-14
changelog:
  - Type: update
  - ID: [TASK#650835] 组件功能增强
  - DESC: 可能的缓冲区溢出问题修复
          audit-status-libs-fix-buffer-overflow.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 0.29.1-2.p02
changelog:
  - Type:bugfix
  - ID:BUG#256609
  - SUG:NA
  - DESC:Fix patch is ineffective for loongarch64 repo noarch packages


author: songliyang <songliyang@kylinos.cn> -0.29.1-2.p04
changelog:
  - Type: update
  - ID:   TASK#393729
  - SUG:  NA
  - DESC: Add clang-libs install dependency
  	Fix some bugs for JDK probes detector in 'extend' dir


author: zhangzikang <zhangzikang@kylinos.cn> - -0.29.1-3.p01
changelog:
  - Type:update
  - ID:[TASK#424647]
  - SUG:NA
  - DESC: Remove clang-libs install dependency
          Fix CVE-2024-2314


author: songliyang <songliyang@kylinos.cn> - -0.29.1-3.p03
changelog:
  - Type: bugfix
  - ID:   [BUG#336580]
  - SUG:  NA
  - DESC: 1.fix thread detect error
          2.optimize output


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.37-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-2
changelog:
  - Type:CVE
  - CVE:CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: tangce<tangce1@huawei.com> - 32:9.18.21-5
changelog:
  - Type:CVE
  - CVE:CVE-2025-8677,CVE-2025-40778,CVE-2025-40780
  - SUG:NA
  - DESC:fix CVE-2025-8677,CVE-2025-40778,CVE-2025-40780


author: tangce <tangce1@h-partners.com> - 32:9.18.21-9
changelog:
  - Type:CVE
  - CVE:CVE-2026-3039,CVE-2026-3592,CVE-2026-5946
  - SUG:NA
  - DESC:fix CVE-2026-3039,CVE-2026-3592,CVE-2026-5946


author: pengxu <pengxu@kylinos.cn> - 2.41-12.p02
changelog:
  - Type:compile
  - ID:BUG#335025
  - SUG:NA
  - DESC: 1.LoongArch: keep compatible with older gcc.
          2.Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying symbols without version info.
          3.Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes.


author: pengxu <pengxu@kylinos.cn> - 2.41-12.p04
changelog:
  - Type:update
  - ID:TASK#482763
  - SUG:NA
  - DESC: Update support for Zhaoxin GMI instructions and add support for PadLock PHE2, RNG2 and XMODX instructions.


author: pengxu <pengxu@kylinos.cn> - 2.41-12.p05
changelog:
  - Type:cves
  - ID:CVE-2025-7545
  - SUG:NA
  - DESC: Fix CVE-2025-7545: heap-based buffer overflow in objcopy.


author: pengxu <pengxu@kylinos.cn> - 2.41-12.p06
changelog:
  - Type:cves
  - ID:BUG#515201
  - SUG:NA
  - DESC: 1.Fix CVE-2025-5244: bfd nullpointer protection.
          2.Fix CVE-2025-5245: debug nullpointer protection.


author: pengxu <pengxu@kylinos.cn> - 2.41-12.p07
changelog:
  - Type:cves
  - ID:BUG#542003
  - SUG:NA
  - DESC: 1.Fix CVE-2022-47007: Fixed a memory leak in stab_demangle_v3_arg in stabs.c
          2.Fix CVE-2025-11412: Fixed a segmentation fault in bfd_elf_gc_record_vtentry in elflink.c
          3.Fix CVE-2025-11494: Fixed incorrect discarding of the _GLOBAL_OFFSET_TABLE_ symbol in x86 linkers
          4.Fix CVE-2025-11840: Fixed a segmentation fault in coffcode.h caused by NULL name in EMPTY_HOWTO
          5.Fix CVE-2026-6846: Fixed a buffer overflow in xcoff_link_add_symbols in xcofflink.c
          6.Fix CVE-2025-11082: Fixed an out-of-bounds read during .eh_frame parsing in elf-eh-frame.c


author: pengxu <pengxu@kylinos.cn> - 2.41-12.p08
changelog:
  - Type:cves
  - ID:CVE-2025-7546
  - SUG:NA
  - DESC:Fix CVE-2025-7546: Fixed an out-of-bounds write vulnerability in the bfd_elf_set_group_contents function


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.05
changelog:
  - Type:update
  - ID:[Task# 365725]
  - SUG:NA
  - DESC: unit test
  - 添加补丁:
  - TASK-365725-remove-redundant-class.patch
  - TASK-365725-add-unit-test-libboxmanage.patch
  - TASK-365725-refactor-libboxmanage-unit-test-improve.patch


author: shuzetian <shuzetian@kylinos.cn> - 3.1.3-2.se.06
changelog:
  - Type:update
  - ID:[Bug#302085,300875]
  - SUG:NA
  - DESC: fix bugs
  - 添加补丁:
  - BUG-302085-fix-box-create-error-message-show.patch
  - BUG-300875-fix-pamauthenticDialog-lost-focus.patch


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.07
changelog:
  - Type:update
  - ID:[Task# 421387]
  - SUG:NA
  - DESC: update copyright for all source files
  - 添加补丁:
  - TASK-421387-copyright-for-all-source-file.patch
  - TASK-421387-fix-copyright-and-add-some-comments.patch
  - TASK-421387-add-copyright-qtsingleapp.patch


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.08
changelog:
  - Type:update
  - ID:[Task# 434209]
  - SUG:NA
  - DESC: delete unused widgets,and increase unit-test coverage to 70%; add security and compiliance policy check
  - 添加补丁:
  - TASK-434209-improve-delete-unused-widgets-v11-server-unit-test.patch
  - refactor-safe-and-compiliance-policy-check.patch
  - remove-commons.patch


author: liu_yi <liu_yi@kylinos.cn> - 3.1.3-2.se.09
changelog:
  - Type:update
  - ID:[BUG#249477,304851]
  - SUG:NA
  - DESC: linkage psw verify editor and error tips; update user guide image and doc
  - 添加补丁:
  - BUG-249477-linkage-psw-verify-editor-and-error-tips.patch
  - BUG-304851-update-user-guide-docs.patch


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.10
changelog:
  - Type:update
  - ID:[TASK# 458348]
  - SUG:NA
  - DESC: solve some leak issues from fortify check.
  - 添加补丁:
  - operation-leak-issue-solve.patch


author: shuzetian <shuzetian@kylinos.cn> - 3.1.3-2.se.11
changelog:
  - Type:update
  - ID:[Bug# 363533,352157,352309,352202]
  - SUG:NA
  - DESC: fix bugs
  - 添加补丁:
  - BUG352202-update-icon-color-to-white.patch
  - BUG-352309-optimize-focus.patch
  - BUG-352157-update-ts-file.patch
  - BUG363533-update-save-button-ts.patch
  - BUG352202-update-icon-color-to-system.patch


author: shuzetian <shuzetian@kylinos.cn> - 3.1.3-2.se.12
changelog:
  - Type:update
  - ID:[Bug# 364541]
  - SUG:NA
  - DESC: fix bugs
  - 添加补丁:
  - Patch40:fix-tmp-acl.patch
  - Patch41:BUG-364541-fix-box-sort-tableview.patch


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.14
changelog:
  - Type:update
  - ID:[TASK# 553761][BUG# 351907]
  - SUG:NA
  - DESC: box-manager safer compile params
  - 添加补丁:
  - BUG351907-add-update-display-sync-with-boxadm.patch
  - TASK-553761-remove-fstack-protector-all.patch
  - TASK-553761-remove-fstack-protector-all_fix1.patch


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.15
changelog:
  - Type:update
  - ID:[TASK# 629781]
  - SUG:NA
  - DESC: box-manager dbus control union
  - 添加补丁:
  - TASK-629781-dbus-control-union.patch


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.16
changelog:
  - Type:update
  - ID:[TASK# 629781]
  - SUG:NA
  - DESC: se.16版本在os-release-v11-svr25-updates-test分支入库
  - TASK-629781-dbus-control-union.patch已包含其全部修改
  - 添加补丁:
  - TASK-629781-dbus-control-union.patch


author: shuzetian <shuzetian@kylinos.cn> - 3.1.3-2.se.17
changelog:
  - Type:update
  - ID:[TASK# 636635]
  - SUG:NA
  - DESC: kill_allProcessSignal添加uid检测避免路径构造终止了其他进程
  - 添加补丁:
  - TASK-636635-fix-dbus-killprocess.patch


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.18
changelog:
  - Type:update
  - ID:[TASK#647185]
  - SUG:NA
  - DESC:
  - TASK#647185 保护箱管理界面 capability 过度授权整改
  - box-manager 删除全部 capability


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.03
changelog:
  - Type:update
  - ID:[Task#332808]
  - SUG:NA
  - DESC:
  - 添加单元测试用例
  - 添加补丁	TASK-332808-add-cunit-test.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.04
changelog:
  - Type:update：
  - ID:[Task#332808]
  - SUG:NA
  - DESC:
  - 修改makefile.am使覆盖率达标
  - 添加补丁	update-makefile.patch


author: liu_yi <liu_yi@kylinos.cn> - 4.0.3-2.se.05
changelog:
  - Type:update
  - ID:[Task#361227][Task#366325][Task#367585]
  - SUG:NA
  - DESC:	添加安全编译参数
  		安全函数整改
  		修复sonarcube扫描漏洞
  		ksaf2.0保护箱接口兼容适配
  - 添加补丁:
  - TASK-361227-add-security-compile-parameters.patch
  - TASK-366325-use-security-funcs-and-fix-sonarcube-bugs.patch
  - TASK-367585-adapt-to-ksaf-kbox-framework-funcs.patch
  - KYLIN-supplement-file-header-comment.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.06
changelog:
  - Type:update
  - ID:[Task#360917 Bug#291793,290515,296749,290423]
  - SUG:NA
  - DESC:
  - 添加代码使覆盖率提升
  - fix bugs
  - 添加补丁	
  - TASK-360917-add_cunit.patch
  - BUG-291793-update-changepw.patch
  - BUG-290515-can-not-open-encrypted-box.patch
  - BUG-296749-add-printf-help-info.patch
  - BUG-290423-add-new-box-module-judge.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.07
changelog:
  - Type:update
  - ID:[Bug#290515]
  - SUG:NA
  - DESC:
  - fix bugs
  - 添加补丁	
  - BUG-290515-refix-retval-judge.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.08
changelog:
  - Type:update
  - ID:[Task#421385][Task#386411]
  - SUG:NA
  - DESC:
  - 门禁合规修改
  - 添加补丁	
  - TASK-421385-update-copyright.patch 
  - TASK-386411-fix-fortify.patch
  - update-copyright-year.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.09
changelog:
  - Type:update
  - ID:[Bug#327994][Bug#327997]
  - SUG:NA
  - DESC:
  - fix bugs
  - 添加补丁	
  - BUG-327994-327997-fix-fuzz-crashes.patch 
  - BUG-327994-327997-fix-fuzz-crashes1.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.10
changelog:
  - Type:update
  - ID:[Bug#352437][Bug#352432][Bug#351901][Task#434210]
  - SUG:NA
  - DESC:
  - fix bugs
  - 添加补丁	
  - Patch25:TASK-434210-update-sonarqube-coverage-70%.patch
  - Patch26:fuzz.patch
  - Patch27:BUG-352437-underscore-should-not-be-special-character.patch
  - Patch28:BUG-352432-password-cannot-exceed-32-digitals.patch
  - Patch29:BUG-351901-update-boxadm-v.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.11
changelog:
  - Type:update
  - ID:[Bug#364339]
  - SUG:NA
  - DESC:
  - fix bugs
  - 添加补丁
  - Patch30:fix-tmp-acl.patch
  - Patch31:BUG-364339-update-boxadm-l-info.patch


author: shuzetian <liu_yi@kylinos.cn> - 4.0.3-2.se.14
changelog:
  - Type:update
  - ID:[BUG#532223] [BUG#541253]
  - SUG:NA
  - DESC:
  - BUG#541253 KVE-2026-0422
  - BUG#532223 KVE-2026-0408


author: liu_yi <liu_yi@kylinos.cn> - 4.0.3-2.se.15
changelog:
  - Type:update
  - ID:[TASK#638949]
  - SUG:NA
  - DESC:
  - TASK#638949 box-utils组件增强
  - a: 修复策略配置问题
  - b: 修复box scanner命令注入问题


author: fuwei <fuwei@kylinos.cn> - 4.0.3-2.se.16
changelog:
  - Type:update
  - ID:[TASK#647179]
  - SUG:NA
  - DESC:
  - TASK#647179 保护箱命令行工具 capability 过度授权整改
  - a: boxadm 删除全部 capability
  - b: boxmount/boxumount 仅保留 cap_sys_admin+ep


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.17
changelog:
  - Type:update
  - ID:[BUG#637187]
  - SUG:NA
  - DESC:
  - BUG#637187修复KVE-2026-0701 box_cipher_update空指针解引用问题


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.1.v2505
changelog:
  - LOONGSON: drivers/iommu: add iommu support (Xianglai Li) [bug:348286]
  - LOONGSON: driver/vfio: disable vfio pci intx (Xianglai Li) [bug:348286]
  - LOONGSON: loongarch/configs: enable vfio mdev config (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Fix PMU pass-through issue if VM exits to host finally (Bibo Mao) [bug:348286]
  - LOONGSON: drivers/pci: Enable pci bridge acs capability (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Repair the restart pressure test virtual machine hang dead problem (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add interrupt checking with Loongson AVEC (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Reload guest CSR registers after S4 (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: add virt extioi cpu encode support (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Fixed VM migration failure after ptw was enabled (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add reset function for irqchip (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: arch/loongarch/kvm: Fix extioi restart issue (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: enable ptw for kvm (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add irqfd support (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add PCHPIC user mode read and write functions (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add PCHPIC read and write functions (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add PCHPIC device support (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add EXTIOI user mode read and write functions (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add EXTIOI read and write functions (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add EXTIOI device support (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add IPI user mode read and write function (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add IPI read and write function (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add IPI device support (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add iocsr and mmio bus simulation in kernel (Xianglai Li) [bug:348286]
  - Revert "LoongArch: KVM: Add iocsr and mmio bus simulation in kernel" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add IPI device support" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add IPI read and write function" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add IPI user mode read and write function" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add EIOINTC device support" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add EIOINTC read and write functions" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add EIOINTC user mode read and write functions" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add PCHPIC device support" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add PCHPIC read and write functions" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add PCHPIC user mode read and write functions" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add irqfd support" (cuitao) [bug:348286]
  - LOONGSON: irqchip/loongson-eiointc: Add virt extension support (Bibo Mao) [bug:348286]
  - HYGON: tpm: Fixed the bug that tcm driver cannot be initialized normally (chench246) [task:462020]
  - HYGON: crypto: ccp: Support userspace mmap psp mmio (xiongmengbiao) [bug:346243]
  - HYGON: crypto: ccp: Support vpsp ringbuffer overcommit (xiongmengbiao) [bug:346243]
  - HYGON: crypto: ccp: Use a workqueue to clean up the vpsp ringbuffer (xiongmengbiao) [bug:346243]
  - HYGON: crypto: ccp: move vpsp-related functions to vpsp.c (xiongmengbiao) [bug:346243]
  - HYGON: drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn (niuyongwen) [bug:346243]
  - HYGON: drivers/crypto/ccp: memmove is used instead of memcpy in overlapped memmory for tkm (niuyongwen) [bug:346243]
  - HYGON: drivers/crypto/ccp: add ioctl API to pin TKM hugepage (xiongmengbiao) [bug:346243]
  - HYGON: driver/crypto/ccp: fix vtkm without C-bit when host SME deactivate (xiongmengbiao) [bug:346243]
  - HYGON: crypto: ccp: support TKM run on CSV (xiongmengbiao) [bug:346243]
  - HYGON: crypto: ccp: remove multi-level pointers processing for vpsp (xiongmengbiao) [bug:346243]
  - configs: Rename inspur-drm to yhgch-drm (Shixiong Ou) [bug:344261, bug:350729, bug:344066]
  - INSPUR: 3rd/inspur: Rename inspur-drm to yhgch-drm (Shixiong Ou) [bug:344261, bug:350729, bug:344066]
  - inet6: constify 'struct net' parameter of various lookup helpers (Eric Dumazet) [task:441338]
  - inet: constify 'struct net' parameter of various lookup helpers (Eric Dumazet) [task:441338]
  - inet: constify inet_sk_bound_dev_eq() net parameter (Eric Dumazet) [task:441338]
  - mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (Yosry Ahmed) [task:459564] {CVE-2025-22030}
  - sw64/config: rename generic_defconfig to openkylin_generic_defconfig (Jackie Liu)
  - filelock: fix name of file_lease slab cache (Omar Sandoval) [task:444220]
  - nfsd: nfsd_file_lease_notifier_call gets a file_lease as an argument (Jeff Layton) [task:444220]
  - filelock: fix deadlock detection in POSIX locking (Jeff Layton) [task:444220]
  - slab: Fix too strict alignment check in create_cache() (Geert Uytterhoeven) [task:444220]
  - io_uring: specify freeptr usage for SLAB_TYPESAFE_BY_RCU io_kiocb cache (Jens Axboe) [task:444220]
  - io_uring: port to struct kmem_cache_args (Christian Brauner) [task:444220]
  - filelock: always define for_each_file_lock() (Jeff Layton) [task:444220]
  - fs: port files to file_ref (Christian Brauner) [task:444220]
  - file: massage cleanup of files that failed to open (Al Viro) [task:444220]
  - fs: add file_ref (Christian Brauner) [task:444220]
  - fs: protect backing files with rcu (Christian Brauner) [task:444220]
  - eth: bnxt: fix truesize for mb-xdp-pass case (Taehee Yoo) [task:450243] {CVE-2025-21961}
  - drm/vmwgfx: Disable coherent dumb buffers without 3d (Zack Rusin) [task:461067] {CVE-2024-46712}
  - drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle (Chen Ridong) [task:461324] {CVE-2024-53115}
  - cpuidle, sched: Use smp_mb__after_atomic() in current_clr_polling() (Yujun Dong) [task:390083]
  - sched: idle: Optimize the generic idle loop by removing needless memory barrier (Zhongqiu Han) [task:390083]
  - sched/psi: Optimise psi_group_change a bit (Tvrtko Ursulin) [task:390083]
  - percpu_counter: add a cmpxchg-based _add_batch variant (Mateusz Guzik) [task:390083]
  - SUNWAY: receive new boot params from firmware (Jing Li) [task:382309]
  - SUNWAY: setup stackframe at kernel entry point (Mao Minkai) [task:382309]
  - SUNWAY: save and restore CSR_WR_FREGS for SIMD libs (Mao Minkai) [task:382309]
  - SUNWAY: rename copy and set lib functions (Mao Minkai) [task:382309]
  - SUNWAY: rename copy and set lib files (Mao Minkai) [task:382309]
  - SUNWAY: choose lib at compile time (Mao Minkai) [task:382309]
  - SUNWAY: store topology and numa info by each cpu itself (Mao Minkai) [task:382309]
  - SUNWAY: work around suspend for C4 (Tang Jinyang) [task:382309]
  - SUNWAY: employ trick on regs.pc for specific exception (Zhi Tongze) [task:382309]
  - SUNWAY: fix syscall_fallback() for vdso gettimeofday (Mao Minkai) [task:382309]
  - perf/dwc_pcie: fix duplicate pci_dev devices (Yunhui Cui) [task:460280] {CVE-2025-37746}
  - perf/dwc_pcie: Qualify RAS DES VSEC Capability by Vendor, Revision (Bjorn Helgaas) [task:460280]
  - perf/dwc_pcie: Add support for Ampere SoCs (Ilkka Koskinen) [task:460280]
  - perf/dwc_pcie: Add support for QCOM vendor devices (Krishna chaitanya chundru) [task:460280]
  - perf/dwc_pcie: Always register for PCIe bus notifier (Krishna chaitanya chundru) [task:460280]
  - perf/dwc_pcie: Fix registration issue in multi PCIe controller instances (Krishna chaitanya chundru) [task:460280]
  - drivers/perf: add DesignWare PCIe PMU driver (Shuai Xue) [task:460280]
  - objtool: Silence more KCOV warnings, part 2 (Josh Poimboeuf) [task:460826]
  - objtool: Ignore end-of-section jumps for KCOV/GCOV (Josh Poimboeuf) [task:460826]
  - nvme: fixup scan failure for non-ANA multipath controllers (Hannes Reinecke) [task:460826]
  - MIPS: cm: Fix warning if MIPS_CM is disabled (Thomas Bogendoerfer) [task:460826]
  - net: dsa: mv88e6xxx: enable STU methods for 6320 family (Marek Behún) [task:460826]
  - net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family (Marek Behún) [task:460826]
  - net: dsa: mv88e6xxx: enable PVT for 6321 switch (Marek Behún) [task:460826]
  - net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family (Marek Behún) [task:460826]
  - comedi: jr3_pci: Fix synchronous deletion of timer (Ian Abbott) [task:460826]
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (Daniel Borkmann) [task:460826]
  - driver core: fix potential NULL pointer dereference in dev_uevent() (Dmitry Torokhov) [task:460826]
  - driver core: introduce device_set_driver() helper (Dmitry Torokhov) [task:460826]
  - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Dmitry Torokhov) [task:460826]
  - spi: spi-imx: Add check for spi_imx_setupxfer() (Tamura Dai) [task:460826]
  - md/raid1: Add check for missing source disk in process_checks() (Meir Elisha) [task:460826]
  - x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores (Pi Xiange) [task:460826]
  - ubsan: Fix panic from test_ubsan_out_of_bounds (Mostafa Saleh) [task:460826]
  - spi: tegra210-quad: add rate limiting and simplify timeout error message (Breno Leitao) [task:460826]
  - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Breno Leitao) [task:460826]
  - loop: aio inherit the ioprio of original request (Yunlong Xing) [task:460826]
  - riscv: Provide all alternative macros all the time (Andrew Jones) [task:460826]
  - iomap: skip unnecessary ifs_block_is_uptodate check (Gou Hao) [task:460826]
  - x86/i8253: Call clockevent_i8253_disable() with interrupts disabled (Fernando Fernandez Mancera) [task:460826]
  - scsi: pm80xx: Set phy_attached to zero when device is gone (Igor Pylypiv) [task:460826]
  - scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init() (Peter Griffin) [task:460826]
  - scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes (Xingui Yang) [task:460826]
  - ext4: make block validity check resistent to sb bh corruption (Ojaswin Mujoo) [task:460826]
  - cifs: Fix querying of WSL CHR and BLK reparse points over SMB1 (Pali Rohár) [task:460826]
  - timekeeping: Add a lockdep override in tick_freeze() (Sebastian Andrzej Siewior) [task:460826]
  - cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode (Pali Rohár) [task:460826]
  - nvmet-fc: put ref when assoc->del_work is already scheduled (Daniel Wagner) [task:460826]
  - nvmet-fc: take tgtport reference only once (Daniel Wagner) [task:460826]
  - x86/bugs: Don't fill RSB on context switch with eIBRS (Josh Poimboeuf) [task:460826]
  - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Josh Poimboeuf) [task:460826]
  - x86/bugs: Use SBPB in write_ibpb() if applicable (Josh Poimboeuf) [task:460826]
  - gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment (Andy Shevchenko) [task:460826]
  - objtool: Stop UNRET validation on UD2 (Josh Poimboeuf) [task:460826]
  - nvme: multipath: fix return value of nvme_available_path (Uday Shankar) [task:460826]
  - nvme: re-read ANA log page after ns scan completes (Hannes Reinecke) [task:460826]
  - ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls (Jean-Marc Eurin) [task:460826]
  - ACPI: EC: Set ec_no_wakeup for Lenovo Go S (Mario Limonciello) [task:460826]
  - nvme: requeue namespace scan on missed AENs (Hannes Reinecke) [task:460826]
  - xen: Change xen-acpi-processor dom0 dependency (Jason Andryuk) [task:460826]
  - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init (Gabriel Shahrouzi) [task:460826]
  - selftests: ublk: fix test_stripe_04 (Ming Lei) [task:460826]
  - KVM: s390: Don't use %pK through debug printing (Thomas Weißschuh) [task:460826]
  - KVM: s390: Don't use %pK through tracepoints (Thomas Weißschuh) [task:460826]
  - sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP (Oleg Nesterov) [task:460826]
  - io_uring: always do atomic put from iowq (Pavel Begunkov) [task:460826]
  - rtc: pcf85063: do a SW reset if POR failed (Lukas Stockmann) [task:460826]
  - 9p/net: fix improper handling of bogus negative read/write replies (Dominique Martinet) [task:460826]
  - ntb_hw_amd: Add NTB PCI ID for new gen CPU (Basavaraj Natikar) [task:460826]
  - ntb: reduce stack usage in idt_scan_mws (Arnd Bergmann) [task:460826]
  - qibfs: fix _another_ leak (Al Viro) [task:460826]
  - objtool, lkdtm: Obfuscate the do_nothing() pointer (Josh Poimboeuf) [task:460826]
  - objtool, regulator: rk808: Remove potential undefined behavior in rk806_set_mode_dcdc() (Josh Poimboeuf) [task:460826]
  - objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler() (Josh Poimboeuf) [task:460826]
  - objtool, panic: Disable SMAP in __stack_chk_fail() (Josh Poimboeuf) [task:460826]
  - objtool: Silence more KCOV warnings (Josh Poimboeuf) [task:460826]
  - thunderbolt: Scan retimers after device router has been enumerated (Mika Westerberg) [task:460826]
  - usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func (Théo Lebrun) [task:460826]
  - usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() (Chenyuan Yang) [task:460826]
  - usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running (Michal Pecio) [task:460826]
  - dmaengine: dmatest: Fix dmatest waiting less when interrupted (Vinicius Costa Gomes) [task:460826]
  - sound/virtio: Fix cancel_sync warnings on uninitialized work_structs (John Stultz) [task:460826]
  - usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield (Andy Shevchenko) [task:460826]
  - usb: dwc3: gadget: Refactor loop to avoid NULL endpoints (Andy Shevchenko) [task:460826]
  - fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size (Edward Adam Davis) [task:460826]
  - usb: host: max3421-hcd: Add missing spi_device_id table (Alexander Stein) [task:460826]
  - mailbox: pcc: Always clear the platform ack interrupt first (Sudeep Holla) [task:460826]
  - mailbox: pcc: Fix the possible race in updation of chan_in_use flag (Huisong Li) [task:460826]
  - bpf: Reject attaching fexit/fmod_ret to __noreturn functions (Yafang Shao) [task:460826]
  - bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates storage (Martin KaFai Lau) [task:460826]
  - bpf: bpftool: Setting error code in do_loader() (Sewon Nam) [task:460826]
  - s390/tty: Fix a potential memory leak bug (Haoxiang Li) [task:460826]
  - s390/sclp: Add check for get_zeroed_page() (Haoxiang Li) [task:460826]
  - parisc: PDT: Fix missing prototype warning (Yu-Chun Lin) [task:460826]
  - clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec() (Heiko Stuebner) [task:460826]
  - bpf: Fix deadlock between rcu_tasks_trace and event_mutex. (Alexei Starovoitov) [task:460826]
  - crypto: null - Use spin lock instead of mutex (Herbert Xu) [task:460826]
  - crypto: ccp - Add support for PCI device 0x1134 (Devaraj Rangasamy) [task:460826]
  - MIPS: cm: Detect CM quirks from device tree (Gregory CLEMENT) [task:460826]
  - pinctrl: renesas: rza2: Fix potential NULL pointer dereference (Chenyuan Yang) [task:460826]
  - USB: wdm: add annotation (Oliver Neukum) [task:460826]
  - USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context (Oliver Neukum) [task:460826]
  - USB: wdm: close race between wdm_open and wdm_wwan_port_stop (Oliver Neukum) [task:460826]
  - USB: wdm: handle IO errors in wdm_wwan_port_start (Oliver Neukum) [task:460826]
  - USB: VLI disk crashes if LPM is used (Oliver Neukum) [task:460826]
  - usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive (Miao Li) [task:460826]
  - usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive (Miao Li) [task:460826]
  - usb: dwc3: xilinx: Prevent spike in reset signal (Mike Looijmans) [task:460826]
  - usb: dwc3: gadget: check that event count does not exceed event buffer length (Frode Isaksen) [task:460826]
  - USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02) (Huacai Chen) [task:460826]
  - usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling (Fedor Pchelkin) [task:460826]
  - usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines (Fedor Pchelkin) [task:460826]
  - usb: chipidea: ci_hdrc_imx: fix usbmisc handling (Fedor Pchelkin) [task:460826]
  - usb: cdns3: Fix deadlock when using NCM gadget (Ralph Siemsen) [task:460826]
  - usb: xhci: Fix invalid pointer dereference in Etron workaround (Michal Pecio) [task:460826]
  - USB: serial: simple: add OWON HDS200 series oscilloscope support (Craig Hesling) [task:460826]
  - USB: serial: option: add Sierra Wireless EM9291 (Adam Xue) [task:460826]
  - USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe (Michael Ehrenreich) [task:460826]
  - serial: sifive: lock port in startup()/shutdown() callbacks (Ryo Takakura) [task:460826]
  - serial: msm: Configure correct working mode before starting earlycon (Stephan Gerhold) [task:460826]
  - misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack (Rengarajan S) [task:460826]
  - misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration (Rengarajan S) [task:460826]
  - char: misc: register chrdev region with all possible minors (Thadeu Lima de Souza Cascardo) [task:460826]
  - KVM: x86: Reset IRTE to host control if *new* route isn't postable (Sean Christopherson) [task:460826]
  - KVM: x86: Explicitly treat routing entry type changes as changes (Sean Christopherson) [task:460826]
  - mei: me: add panther lake H DID (Alexander Usyskin) [task:460826]
  - scsi: Improve CDL control (Damien Le Moal) [task:460826]
  - USB: storage: quirk for ADATA Portable HDD CH94 (Oliver Neukum) [task:460826]
  - ata: libata-scsi: Fix ata_msense_control_ata_feature() (Damien Le Moal) [task:460826]
  - ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type (Damien Le Moal) [task:460826]
  - ata: libata-scsi: Improve CDL control (Damien Le Moal) [task:460826]
  - mcb: fix a double free bug in chameleon_parse_gdd() (Haoxiang Li) [task:460826]
  - cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports (Smita Koralahalli) [task:460826]
  - KVM: SVM: Allocate IR data using atomic allocation (Sean Christopherson) [task:460826]
  - io_uring: fix 'sync' handling of io_fallback_tw() (Jens Axboe) [task:460826]
  - LoongArch: Remove a bogus reference to ZONE_DMA (Petr Tesarik) [task:460826]
  - LoongArch: Return NULL from huge_pte_offset() for invalid PMD (Ming Wang) [task:460826]
  - irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (Suzuki K Poulose) [task:460826]
  - drm/amd/display: Force full update in gpu reset (Roman Li) [task:460826]
  - drm/amd/display: Fix gpu reset in multidisplay config (Roman Li) [task:460826]
  - net: phy: microchip: force IRQ polling mode for lan88xx (Fiona Klute) [task:460826]
  - net: selftests: initialize TCP header and skb payload with zero (Oleksij Rempel) [task:460826]
  - xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() (Alexey Nepomnyashih) [task:460826]
  - crypto: atmel-sha204a - Set hwrng quality to lowest possible (Marek Behún) [task:460826]
  - virtio_console: fix missing byte order handling for cols and rows (Halil Pasic) [task:460826]
  - LoongArch: Make do_xyz() exception handlers more robust (Tiezhu Yang) [task:460826]
  - LoongArch: Make regs_irqs_disabled() more clear (Tiezhu Yang) [task:460826]
  - LoongArch: Select ARCH_USE_MEMTEST (Yuli Wang) [task:460826]
  - perf/x86: Fix non-sampling (counting) events on certain x86 platforms (Luo Gengkun) [task:460826]
  - splice: remove duplicate noinline from pipe_clear_nowait (T.J. Mercier) [task:460826]
  - iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE (Sean Christopherson) [task:460826]
  - pds_core: make wait_context part of q_info (Shannon Nelson) [task:460826]
  - pds_core: Remove unnecessary check in pds_client_adminq_cmd() (Brett Creeley) [task:460826]
  - pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result (Brett Creeley) [task:460826]
  - net: dsa: mt7530: sync driver-specific behavior of MT7531 variants (Daniel Golle) [task:460826]
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (Cong Wang) [task:460826]
  - net_sched: hfsc: Fix a UAF vulnerability in class handling (Cong Wang) [task:460826]
  - fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount() (Al Viro) [task:460826]
  - net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration (Bo-Cun Chen) [task:460826]
  - tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (Tung Nguyen) [task:460826]
  - net: phy: leds: fix memory leak (Qingfang Deng) [task:460826]
  - net: lwtunnel: disable BHs when required (Justin Iurman) [task:460826]
  - scsi: core: Clear flags for scsi_cmnd that did not complete (Anastasia Kovaleva) [task:460826]
  - btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range() (Qu Wenruo) [task:460826]
  - cpufreq: cppc: Fix invalid return value in .get() callback (Marc Zyngier) [task:460826]
  - scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort() (Chenyuan Yang) [task:460826]
  - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (Henry Martin) [task:460826]
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (Henry Martin) [task:460826]
  - cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() (Henry Martin) [task:460826]
  - dma/contiguous: avoid warning about unused size_bytes (Arnd Bergmann) [task:460826]
  - ceph: Fix incorrect flush end position calculation (David Howells) [task:460826]
  - cpufreq/sched: Explicitly synchronize limits_changed flag handling (Rafael J. Wysocki) [task:460826]
  - scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get (Tudor Ambarus) [task:460826]
  - PCI: Fix reference leak in pci_register_host_bridge() (Ma Ke) [task:460826]
  - of: resolver: Fix device node refcount leakage in of_resolve_phandles() (Zijun Hu) [task:460826]
  - of: resolver: Simplify of_resolve_phandles() using __free() (Rob Herring (Arm)) [task:460826]
  - clk: renesas: r9a07g043: Fix HP clock source for RZ/Five (Lad Prabhakar) [task:460826]
  - clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable (Claudiu Beznea) [task:460826]
  - clk: renesas: r9a07g04[34]: Use SEL_SDHI1_STS status configuration for SD1 mux (Claudiu Beznea) [task:460826]
  - clk: renesas: rzg2l: Refactor SD mux driver (Claudiu Beznea) [task:460826]
  - clk: renesas: rzg2l: Remove CPG_SDHI_DSEL from generic header (Claudiu Beznea) [task:460826]
  - clk: renesas: rzg2l: Add struct clk_hw_data (Claudiu Beznea) [task:460826]
  - clk: renesas: rzg2l: Use u32 for flag and mux_flags (Claudiu Beznea) [task:460826]
  - arm64: tegra: Remove the Orin NX/Nano suspend key (Ninad Malwade) [task:460826]
  - iio: adc: ad7768-1: Fix conversion result sign (Sergiu Cuciurean) [task:460826]
  - iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check (Jonathan Cameron) [task:460826]
  - ASoC: q6apm-dai: make use of q6apm_get_hw_pointer (Srinivas Kandagatla) [task:460826]
  - ASoC: qcom: Fix trivial code style issues (Krzysztof Kozlowski) [task:460826]
  - ASoC: qcom: lpass: Make asoc_qcom_lpass_cpu_platform_remove() return void (Uwe Kleine-König) [task:460826]
  - ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs (Srinivas Kandagatla) [task:460826]
  - ASoC: qcom: q6apm-dai: drop unused 'q6apm_dai_rtd' fields (Krzysztof Kozlowski) [task:460826]
  - net: dsa: mv88e6xxx: fix VTU methods for 6320 family (Marek Behún) [task:460826]
  - net: dsa: mv88e6xxx: fix internal PHYs for 6320 family (Marek Behún) [task:460826]
  - auxdisplay: hd44780: Fix an API misuse in hd44780.c (Haoxiang Li) [task:460826]
  - auxdisplay: hd44780: Convert to platform remove callback returning void (Uwe Kleine-König) [task:460826]
  - mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get (Tudor Ambarus) [task:460826]
  - soc: qcom: ice: introduce devm_of_qcom_ice_get (Tudor Ambarus) [task:460826]
  - media: subdev: Add v4l2_subdev_is_streaming() (Tomi Valkeinen) [task:460826]
  - media: subdev: Improve v4l2_subdev_enable/disable_streams_fallback (Tomi Valkeinen) [task:460826]
  - media: subdev: Fix use of sd->enabled_streams in call_s_stream() (Tomi Valkeinen) [task:460826]
  - tracing: Verify event formats that have "%*p.." (Steven Rostedt) [task:460826]
  - tracing: Add __print_dynamic_array() helper (Steven Rostedt) [task:460826]
  - tracing: Add __string_len() example (Steven Rostedt (Google)) [task:460826]
  - x86/mce: use is_copy_from_user() to determine copy-from-user context (Shuai Xue) [task:460826]
  - x86/extable: Remove unused fixup type EX_TYPE_COPY (Tong Tiangen) [task:460826]
  - module: sign with sha512 instead of sha1 by default (Thorsten Leemhuis) [task:460826]
  - bonding: check xdp prog when set bond mode (Wang Liang) [task:458962] {CVE-2025-22105}
  - bonding: return detailed error when loading native XDP fails (Hangbin Liu) [task:458962]
  - udmabuf: fix a buf size overflow issue during udmabuf creation (Xiaogang Chen) [task:460826]
  - ksmbd: fix use-after-free in __smb2_lease_break_noti() (Namjae Jeon) [task:460142] {CVE-2025-37777}
  - drm/virtio: Use drm_gem_plane_helper_prepare_fb() (Dongwon Kim) [task:455029]
  - drm/virtio: Don't create a context with default param if context_init is supported (Pierre-Eric Pelloux-Prayer) [task:455029]
  - drm/vmwgfx: Unreserve BO on error (Ian Forbes) [task:455027]
  - slab: ensure slab->obj_exts is clear in a newly allocated slab page (Suren Baghdasaryan) [task:460162] {CVE-2025-37774}
  - mm, slab: move prepare_slab_obj_exts_hook under CONFIG_MEM_ALLOC_PROFILING (Suren Baghdasaryan) [task:460162]
  - mm, slab: move allocation tagging code in the alloc path into a hook (Suren Baghdasaryan) [task:460162]
  - mm, slab: move slab_memcg hooks to mm/memcontrol.c (Vlastimil Babka) [task:460162]
  - mm, slab: move memcg charging to post-alloc hook (Vlastimil Babka) [task:460162]
  - slab: make __kmem_cache_create() static inline (Christian Brauner) [task:444220]
  - slab: make kmem_cache_create_usercopy() static inline (Christian Brauner) [task:444220]
  - slab: remove kmem_cache_create_rcu() (Christian Brauner) [task:444220]
  - file: port to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: create kmem_cache_create() compatibility layer (Christian Brauner) [task:444220]
  - slab: port KMEM_CACHE_USERCOPY() to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: port KMEM_CACHE() to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: remove rcu_freeptr_offset from struct kmem_cache (Christian Brauner) [task:444220]
  - slab: pass struct kmem_cache_args to do_kmem_cache_create() (Christian Brauner) [task:444220]
  - slab: pull kmem_cache_open() into do_kmem_cache_create() (Christian Brauner) [task:444220]
  - slab: pass struct kmem_cache_args to create_cache() (Christian Brauner) [task:444220]
  - slab: port kmem_cache_create_usercopy() to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: port kmem_cache_create_rcu() to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: port kmem_cache_create() to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: add struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: s/__kmem_cache_create/do_kmem_cache_create/g (Christian Brauner) [task:444220]
  - SUNWAY: dts: add Junzhang (Xu Chenjiao) [task:382309]
  - SUNWAY: lpc: work around hardware flaws (Xu Chenjiao) [task:382309]
  - SUNWAY: improve cpu bring up method (Zhi Tongze) [task:382309]
  - SUNWAY: introduce new entry framework for C4 (Wu Liliu) [task:382309]
  - SUNWAY: irq: update the initial value of nr_irqs (Zheng Chongzhen) [task:382309]
  - SUNWAY: dynamically switch between lib implementation (Mao Minkai) [task:382309]
  - SUNWAY: msi: remove redundant interrupt enables (Zheng Chongzhen) [task:382309]
  - SUNWAY: add unaligned access support for C4 new instructions (Zhi Tongze) [task:382309]
  - SUNWAY: acpi: fix missed upper bits of rcid for junzhang (Jing Li) [task:382309]
  - SUNWAY: pci: remove duplicate pcie operations (Jing Li) [task:382309]
  - udp: Deal with race between UDP socket address change and rehash (Stefano Brivio) [task:441338] {CVE-2024-57974}
  - ipv6: udp: constify 'struct net' parameter of socket lookups (Eric Dumazet) [task:441338]
  - udp: constify 'struct net' parameter of socket lookups (Eric Dumazet) [task:441338]
  - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode (Kang Yang) [task:459656] {CVE-2024-58096}
  - ax25: Remove broken autobind (Murad Masimov) [task:459548] {CVE-2025-22109}
  - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() (Vladimir Oltean) [task:459708] {CVE-2025-22107}
  - iommu/vt-d: Remove cache tags before disabling ATS (Lu Baolu) [task:459625] {CVE-2024-56669}
  - wifi: cfg80211: init wiphy_work before allocating rfkill fails (Edward Adam Davis) [task:459661] {CVE-2025-22119}
  - ext4: avoid journaling sb update on error if journal is destroying (Ojaswin Mujoo) [task:459702] {CVE-2025-22113}
  - ext4: define ext4_journal_destroy wrapper (Ojaswin Mujoo) [task:459702]
  - Bluetooth: btnxpuart: Fix kernel panic during FW release (Neeraj Sanjay Kale) [task:459942] {CVE-2025-22102}
  - jfs: add check read-only before txBeginAnon() call (Vasiliy Kovalev) [task:459938] {CVE-2024-58095}
  - vmxnet3: unregister xdp rxq info in the reset path (Sankararaman Jayaraman) [task:459703] {CVE-2025-22106}
  - bcachefs: bch2_ioctl_subvolume_destroy() fixes (Kent Overstreet) [task:459940] {CVE-2025-22019}
  - md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb (Su Yue) [task:459657] {CVE-2025-22124}
  - media: vimc: skip .s_stream() for stopped entities (Nikita Zhandarovich) [task:459568] {CVE-2025-22028}
  - jfs: reject on-disk inodes of an unsupported type (Dmitry Antipov) [task:459660] {CVE-2025-37925}
  - net: libwx: fix Tx L4 checksum (Jiawen Wu) [task:459624] {CVE-2025-22101}
  - f2fs: fix potential deadloop in prepare_compress_overwrite() (Chao Yu) [task:459706] {CVE-2025-22127}
  - md/raid10: wait barrier before returning discard request with REQ_NOWAIT (Xiao Ni) [task:459410] {CVE-2025-40325}
  - ksmbd: fix overflow in dacloffset bounds check (Norbert Szetei) [task:459562] {CVE-2025-22039}
  - smb: common: change the data type of num_aces to le16 (Namjae Jeon) [task:459562]
  - wifi: ath11k: fix RCU stall while reaping monitor destination ring (P Praneesh) [task:459546] {CVE-2024-58097}
  - dlm: prevent NPD when writing a positive value to event_done (Thadeu Lima de Souza Cascardo) [task:459658] {CVE-2025-23131}
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (Ye Bin) [task:459580] {CVE-2025-22121}
  - ext4: introduce ITAIL helper (Ye Bin) [task:459580]
  - ibmvnic: Use kernel helpers for hex dumps (Nick Child) [task:459569] {CVE-2025-22104}
  - net: fix NULL pointer dereference in l3mdev_l3_rcv (Wang Liang) [task:459407] {CVE-2025-22103}
  - jfs: add check read-only before truncation in jfs_truncate_nolock() (Vasiliy Kovalev) [task:459936] {CVE-2024-58094}
  - smb: client: fix UAF in decryption with multichannel (Paulo Alcantara) [task:460233] {CVE-2025-37750}
  - smb: client: allocate crypto only for primary server (Enzo Matsumiya) [task:460233]
  - net: stmmac: Fix accessing freed irq affinity_hint (Qingfang Deng) [task:460178] {CVE-2025-23155}
  - landlock: Add the errata interface (Mickaël Salaün)
  - Fix mmu notifiers for range-based invalidates (Piotr Jaroszynski)
  - mptcp: sockopt: fix getting freebind & transparent (Matthieu Baerts (NGI0))
  - iommufd: Fail replace if device has not been attached (Yi Liu)
  - ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model (Takashi Iwai) [task:458731]
  - drm/tests: Build KMS helpers when DRM_KUNIT_TEST_HELPERS is enabled (Karolina Stolarek) [task:458731]
  - btrfs: fix the length of reserved qgroup to free (Haisu Wang) [task:458731]
  - MIPS: ds1287: Match ds1287_set_base_clock() function types (WangYuli) [task:458731]
  - MIPS: cevt-ds1287: Add missing ds1287.h include (WangYuli) [task:458731]
  - MIPS: dec: Declare which_prom() as static (WangYuli) [task:458731]
  - xdp: Reset bpf_redirect_info before running a xdp's BPF prog. (Sebastian Andrzej Siewior) [task:458731]
  - nvmet-fc: Remove unused functions (WangYuli) [task:458731]
  - wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit (Ping-Ke Shih) [task:458731]
  - wifi: rtw89: pci: add pre_deinit to be called after probe complete (Ping-Ke Shih) [task:458731]
  - usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (GONG Ruiqi) [task:458731]
  - LoongArch: Eliminate superfluous get_numa_distances_cnt() (Yuli Wang) [task:458731]
  - powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (Nathan Lynch) [task:458731]
  - x86/split_lock: Fix the delayed detection logic (Maksim Davydov) [task:458731]
  - x86/tdx: Fix arch_safe_halt() execution for TDX VMs (Vishal Annapurve) [task:458731]
  - efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32 (Hamza Mahfooz) [task:458731]
  - misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type (Kunihiko Hayashi) [task:458731]
  - misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error (Kunihiko Hayashi) [task:458731]
  - misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (Kunihiko Hayashi) [task:458731]
  - kbuild: Add '-fno-builtin-wcslen' (Nathan Chancellor) [task:458731]
  - cpufreq: Reference count policy in cpufreq_update_limits() (Rafael J. Wysocki) [task:458731]
  - io_uring/net: fix accept multishot handling (Pavel Begunkov) [task:458731]
  - drm/i915/gvt: fix unterminated-string-initialization warning (Jani Nikula) [task:458731]
  - drm/sti: remove duplicate object names (Rolf Eike Beer) [task:458731]
  - drm/nouveau: prime: fix ttm_bo_delayed_delete oops (Chris Bainbridge) [task:458731]
  - drm/amdgpu/dma_buf: fix page_link check (Matthew Auld) [task:458731]
  - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd/pm/smu11: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd/pm/powerplay: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd/pm: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd: Handle being compiled without SI or CIK support better (Mario Limonciello) [task:458731]
  - drm/msm/a6xx: Fix stale rpmh votes from GPU (Akhil P Oommen) [task:458731]
  - drm/repaper: fix integer overflows in repeat functions (Nikita Zhandarovich) [task:458731]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR (Kan Liang) [task:458731]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX (Kan Liang) [task:458731]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR (Kan Liang) [task:458731]
  - perf/x86/intel: Allow to update user space GPRs from PEBS records (Dapeng Mi) [task:458731]
  - RDMA/cma: Fix workqueue crash in cma_netevent_work_handler (Sharath Srinivasan) [task:458731]
  - scsi: ufs: exynos: Ensure consistent phy reference counts (Peter Griffin) [task:458731]
  - scsi: megaraid_sas: Block zero-length ATA VPD inquiry (Chandrakanth Patil) [task:458731]
  - x86/boot/sev: Avoid shared GHCB page for early memory acceptance (Ard Biesheuvel) [task:458731]
  - x86/cpu/amd: Fix workaround for erratum 1054 (Sandipan Das) [task:458731]
  - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Borislav Petkov (AMD)) [task:458731]
  - virtiofs: add filesystem context source name check (Xiangsheng Hou) [task:458731]
  - tracing: Fix filter string testing (Steven Rostedt) [task:458731]
  - string: Add load_unaligned_zeropad() code path to sized_strscpy() (Peter Collingbourne) [task:458731]
  - smb3 client: fix open hardlink on deferred close file error (Chunjie Zhu) [task:458731]
  - selftests/mm: generate a temporary mountpoint for cgroup filesystem (Mark Brown) [task:458731]
  - riscv: Avoid fortify warning in syscall_get_arguments() (Nathan Chancellor) [task:458731]
  - Revert "smb: client: fix TCP timers deadlock after rmmod" (Kuniyuki Iwashima) [task:458731]
  - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Kuniyuki Iwashima) [task:458731]
  - ksmbd: fix the warning from __kernel_write_iter (Namjae Jeon) [task:458731]
  - ksmbd: Prevent integer overflow in calculation of deadtime (Denis Arefev) [task:458731]
  - ksmbd: fix use-after-free in smb_break_all_levII_oplock() (Namjae Jeon) [task:458731]
  - ksmbd: Fix dangling pointer in krb_authenticate (Sean Heelan) [task:458731]
  - ovl: don't allow datadir only (Miklos Szeredi) [task:458731]
  - mm: fix apply_to_existing_page_range() (Kirill A. Shutemov) [task:458731]
  - mm: fix filemap_get_folios_contig returning batches of identical folios (Vishal Moola (Oracle)) [task:458731]
  - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Baoquan He) [task:458731]
  - loop: LOOP_SET_FD: send uevents for partitions (Thomas Weißschuh) [task:458731]
  - loop: properly send KOBJ_CHANGED uevent for disk device (Thomas Weißschuh) [task:458731]
  - isofs: Prevent the use of too small fid (Edward Adam Davis) [task:458731]
  - i2c: cros-ec-tunnel: defer probe if parent EC is not present (Thadeu Lima de Souza Cascardo) [task:458731]
  - hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key (Vasiliy Kovalev) [task:458731]
  - crypto: caam/qi - Fix drv_ctx refcount bug (Herbert Xu) [task:458731]
  - btrfs: correctly escape subvol in btrfs_show_options() (Johannes Kimmel) [task:458731]
  - Bluetooth: vhci: Avoid needless snprintf() calls (Kees Cook) [task:458731]
  - Bluetooth: l2cap: Process valid commands in too long frame (Frédéric Danis) [task:458731]
  - ftrace: fix incorrect hash size in register_ftrace_direct() (Menglong Dong) [task:458731]
  - i2c: atr: Fix wrong include (Andy Shevchenko) [task:458731]
  - nfsd: decrease sc_count directly if fail to queue dl_recall (Li Lingfeng) [task:458731]
  - nfs: add missing selections of CONFIG_CRC32 (Eric Biggers) [task:458731]
  - asus-laptop: Fix an uninitialized variable (Denis Arefev) [task:458731]
  - ASoC: qcom: Fix sc7280 lpass potential buffer overflow (Evgeny Pimenov) [task:458731]
  - ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels (Srinivas Kandagatla) [task:458731]
  - ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate (Srinivas Kandagatla) [task:458731]
  - Revert "PCI: Avoid reset when disabled via sysfs" (Alex Williamson) [task:458731]
  - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [task:458731]
  - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS (Rafael J. Wysocki) [task:458731]
  - riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break (WangYuli) [task:458731]
  - riscv: KGDB: Do not inline arch_kgdb_breakpoint() (WangYuli) [task:458731]
  - kunit: qemu_configs: SH: Respect kunit cmdline (Thomas Weißschuh) [task:458731]
  - riscv: Properly export reserved regions in /proc/iomem (Björn Töpel) [task:458731]
  - net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings (Bo-Cun Chen) [task:458731]
  - net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for 100Mbps (Bo-Cun Chen) [task:458731]
  - net: ti: icss-iep: Fix possible NULL pointer dereference for perout request (Meghana Malladi) [task:458731]
  - net: ti: icss-iep: Add phase offset configuration for perout signal (Meghana Malladi) [task:458731]
  - net: ti: icss-iep: Add pwidth configuration for perout signal (Meghana Malladi) [task:458731]
  - ptp: ocp: fix start time alignment in ptp_ocp_signal_set (Sagi Maimon) [task:458731]
  - net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails (Vladimir Oltean) [task:458731]
  - net: dsa: free routing table on probe failure (Vladimir Oltean) [task:458731]
  - net: dsa: clean up FDB, MDB, VLAN entries on unbind (Vladimir Oltean) [task:458731]
  - net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (Vladimir Oltean) [task:458731]
  - net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered (Vladimir Oltean) [task:458731]
  - net: bridge: switchdev: do not notify new brentries as changed (Jonas Gorski) [task:458731]
  - net: b53: enable BPDU reception for management port (Jonas Gorski) [task:458731]
  - netlink: specs: rt-link: adjust mctp attribute naming (Jakub Kicinski) [task:458731]
  - netlink: specs: rt-link: add an attr layer around alt-ifname (Jakub Kicinski) [task:458731]
  - cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path (Abdun Nihaal) [task:458731]
  - ata: libata-sata: Save all fields from sense data descriptor (Niklas Cassel) [task:458731]
  - net: ethernet: ti: am65-cpsw: fix port_np reference counting (Michael Walle) [task:458731]
  - net: ethernet: ti: am65-cpsw-nuss: rename phy_node -> port_np (Alexander Sverdlin) [task:458731]
  - net: ngbe: fix memory leak in ngbe_probe() error path (Abdun Nihaal) [task:458731]
  - net: openvswitch: fix nested key length validation in the set() action (Ilya Maximets) [task:458731]
  - block: fix resource leak in blk_register_queue() error path (Zheng Qixing) [task:458731]
  - net: mctp: Set SOCK_RCU_FREE (Matt Johnston) [task:458731]
  - pds_core: fix memory leak in pdsc_debugfs_add_qcq() (Abdun Nihaal) [task:458731]
  - test suite: use %zu to print size_t (Matthew Wilcox (Oracle)) [task:458731]
  - igc: add lock preventing multiple simultaneous PTM transactions (Christopher S M Hall) [task:458731]
  - igc: cleanup PTP module if probe fails (Christopher S M Hall) [task:458731]
  - igc: handle the IGC_PTP_ENABLED flag correctly (Christopher S M Hall) [task:458731]
  - igc: move ktime snapshot into PTM retry loop (Christopher S M Hall) [task:458731]
  - igc: increase wait time before retrying PTM (Christopher S M Hall) [task:458731]
  - igc: fix PTM cycle trigger logic (Christopher S M Hall) [task:458731]
  - Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (Johannes Berg) [task:458731]
  - Bluetooth: l2cap: Check encryption key size on incoming connection (Frédéric Danis) [task:458731]
  - Bluetooth: btrtl: Prevent potential NULL dereference (Dan Carpenter) [task:458731]
  - Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address (Luiz Augusto von Dentz) [task:458731]
  - RDMA/core: Silence oversized kvmalloc() warning (Shay Drory) [task:458731]
  - ASoC: cs42l43: Reset clamp override on jack removal (Charles Keepax) [task:458731]
  - RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe() (Yue Haibing) [task:458731]
  - ovl: remove unused forward declaration (Giuseppe Scrivano) [task:458731]
  - ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() (Henry Martin) [task:458731]
  - ASoC: dwc: always enable/disable i2s irqs (Brady Norander) [task:458731]
  - md/md-bitmap: fix stats collection for external bitmaps (Zheng Qixing) [task:458731]
  - md/raid10: fix missing discard IO accounting (Yu Kuai) [task:458731]
  - scsi: iscsi: Fix missing scsi_host_put() in error path (Miaoqian Lin) [task:458731]
  - wifi: wl1251: fix memory leak in wl1251_tx_work (Abdun Nihaal) [task:458731]
  - wifi: mac80211: Purge vif txq in ieee80211_do_stop() (Remi Pommarel) [task:458731]
  - wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue() (Remi Pommarel) [task:458731]
  - wifi: at76c50x: fix use after free access in at76_disconnect (Abdun Nihaal) [task:458731]
  - scsi: hisi_sas: Enable force phy when SATA disk directly connected (Xingui Yang) [task:458731]
  - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition (Kaixin Wang) [task:458731]
  - Bluetooth: hci_uart: Fix another race during initialization (Arseniy Krasnov) [task:458731]
  - media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef noinline (Arnd Bergmann) [task:458731]
  - x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions() (Myrrh Periwinkle) [task:458731]
  - ACPI: platform-profile: Fix CFI violation when accessing sysfs files (Nathan Chancellor) [task:458731]
  - x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT (Kirill A. Shutemov) [task:458731]
  - arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Douglas Anderson) [task:458731]
  - selftests: mptcp: fix incorrect fd checks in main_loop (Cong Liu) [task:458731]
  - selftests: mptcp: close fd_in before returning in main_loop (Geliang Tang) [task:458731]
  - pinctrl: qcom: Clear latched interrupt status when changing IRQ type (Stephan Gerhold) [task:458731]
  - phy: freescale: imx8m-pcie: assert phy reset and perst in power off (Stefan Eichenberger) [task:458731]
  - PCI: Fix reference leak in pci_alloc_child_bus() (Ma Ke) [task:458731]
  - PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe() (Stanimir Varbanov) [task:458731]
  - of/irq: Fix device node refcount leakages in of_irq_init() (Zijun Hu) [task:458731]
  - of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() (Zijun Hu) [task:458731]
  - of/irq: Fix device node refcount leakages in of_irq_count() (Zijun Hu) [task:458731]
  - of/irq: Fix device node refcount leakage in API of_irq_parse_raw() (Zijun Hu) [task:458731]
  - of/irq: Fix device node refcount leakage in API of_irq_parse_one() (Zijun Hu) [task:458731]
  - ntb: use 64-bit arithmetic for the MSI doorbell mask (Fedor Pchelkin) [task:458731]
  - KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (Sean Christopherson) [task:458731]
  - KVM: x86: Explicitly zero-initialize on-stack CPUID unions (Sean Christopherson) [task:458731]
  - gve: handle overflow when reporting TX consumed descriptors (Joshua Washington) [task:458731]
  - gpio: zynq: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski) [task:458731]
  - gpio: tegra186: fix resource handling in ACPI probe path (Guixin Liu) [task:458731]
  - ftrace: Add cond_resched() to ftrace_graph_set_hash() (zhoumin) [task:458731]
  - dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg' (Krzysztof Kozlowski) [task:458731]
  - dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg' (Krzysztof Kozlowski) [task:458731]
  - dm-verity: fix prefetch-vs-suspend race (Mikulas Patocka) [task:458731]
  - dm-integrity: set ti->error on memory allocation failure (Mikulas Patocka) [task:458731]
  - dm-ebs: fix prefetch-vs-suspend race (Mikulas Patocka) [task:458731]
  - crypto: ccp - Fix check for the primary ASP device (Tom Lendacky) [task:458731]
  - clk: qcom: gdsc: Set retain_ff before moving to HW CTRL (Taniya Das) [task:458731]
  - clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code (Bryan O'Donoghue) [task:458731]
  - clk: qcom: gdsc: Release pm subdomains in reverse add order (Bryan O'Donoghue) [task:458731]
  - clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks (Ajit Pandey) [task:458731]
  - cifs: Ensure that all non-client-specific reparse points are processed by the server (Pali Rohár) [task:458731]
  - cifs: fix integer overflow in match_server() (Roman Smirnov) [task:458731]
  - cifs: avoid NULL pointer dereference in dbg call (Alexandra Diupina) [task:458731]
  - thermal/drivers/rockchip: Add missing rk3328 mapping entry (Trevor Woerner) [task:458731]
  - tracing: Do not add length to print format in synthetic events (Steven Rostedt) [task:458731]
  - x86/xen: fix balloon target initialization for PVH dom0 (Roger Pau Monne) [task:458731]
  - sctp: detect and prevent references to a freed transport in sendmsg (Ricardo Cañuelo Navarro) [task:458731]
  - mm/hugetlb: move hugetlb_sysctl_init() to the __init section (Marc Herbert) [task:458731]
  - mm/hwpoison: do not send SIGBUS to processes with recovered clean pages (Shuai Xue) [task:458731]
  - mm/userfaultfd: fix release hang over concurrent GUP (Peter Xu) [task:458731]
  - mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock (Mathieu Desnoyers) [task:458731]
  - mm/mremap: correctly handle partial mremap() of VMA starting at 0 (Lorenzo Stoakes) [task:458731]
  - mm: fix lazy mmu docs and usage (Ryan Roberts) [task:458731]
  - mm: make page_mapped_in_vma() hugetlb walk aware (Jane Chu) [task:458731]
  - mm/rmap: reject hugetlb folios in folio_make_device_exclusive() (David Hildenbrand) [task:458731]
  - sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes (Ryan Roberts) [task:458731]
  - sparc/mm: disable preemption in lazy mmu mode (Ryan Roberts) [task:458731]
  - iommufd: Fix uninitialized rc in iommufd_access_rw() (Nicolin Chen) [task:458731]
  - btrfs: zoned: fix zone finishing with missing devices (Johannes Thumshirn) [task:458731]
  - btrfs: zoned: fix zone activation with missing devices (Johannes Thumshirn) [task:458731]
  - btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers (Filipe Manana) [task:458731]
  - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() (Herve Codina) [task:458731]
  - arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string (Chen-Yu Tsai) [task:458731]
  - arm64: mm: Correct the update of max_pfn (Zhenhua Huang) [task:458731]
  - mtd: rawnand: Add status chack in r852_ready() (Wentao Liang) [task:458731]
  - mtd: inftlcore: Add error check for inftl_read_oob() (Wentao Liang) [task:458731]
  - mptcp: only inc MPJoinAckHMacFailure for HMAC failures (Matthieu Baerts (NGI0)) [task:458731]
  - mptcp: fix NULL pointer in can_accept_new_subflow (Gang Yan) [task:458731]
  - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets (T Pratham) [task:458731]
  - locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class() (Boqun Feng) [task:458731]
  - mailbox: tegra-hsp: Define dimensioning masks in SoC data (Kartik Rajput) [task:458731]
  - mfd: ene-kb3930: Fix a potential NULL pointer dereference (Chenyuan Yang) [task:458731]
  - leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs (Abel Vesa) [task:458731]
  - leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs (Abel Vesa) [task:458731]
  - jbd2: remove wrong sb->s_sequence check (Jan Kara) [task:458731]
  - i3c: Add NULL pointer check in i3c_master_queue_ibi() (Manjunatha Venkatesh) [task:458731]
  - i3c: master: svc: Use readsb helper for reading MDB (Stanley Chu) [task:458731]
  - smb311 client: fix missing tcon check when mounting with linux/posix extensions (Steve French) [task:458731]
  - soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() (Chenyuan Yang) [task:458731]
  - tpm: do not start chip while suspended (Thadeu Lima de Souza Cascardo) [task:458731]
  - udf: Fix inode_getblk() return value (Jan Kara) [task:458731]
  - vdpa/mlx5: Fix oversized null mkey longer than 32bit (Si-Wei Liu) [task:458731]
  - f2fs: fix to avoid atomicity corruption of atomic file (Yeongjin Gil) [task:458731]
  - ext4: fix off-by-one error in do_split (Artem Sadovnikov) [task:458731]
  - bus: mhi: host: Fix race between unprepare and queue_buf (Jeff Hugo) [task:458731]
  - ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path (Alexey Klimov) [task:458731]
  - ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns. (Srinivas Kandagatla) [task:458731]
  - ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment. (Srinivas Kandagatla) [task:458731]
  - ASoC: q6apm: add q6apm_get_hw_pointer helper (Srinivas Kandagatla) [task:458731]
  - io_uring/kbuf: reject zero sized provided buffers (Jens Axboe) [task:458731]
  - wifi: mac80211: fix integer overflow in hwmp_route_info_get() (Gavrilov Ilia) [task:458731]
  - wifi: mt76: Add check for devm_kstrdup() (Haoxiang Li) [task:458731]
  - clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup (Alexandre Torgue) [task:458731]
  - mtd: Replace kcalloc() with devm_kcalloc() (Jiasheng Jiang) [task:458731]
  - net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family (Marek Behún) [task:458731]
  - mtd: Add check for devm_kcalloc() (Jiasheng Jiang) [task:458731]
  - mptcp: sockopt: fix getting IPV6_V6ONLY (Matthieu Baerts (NGI0)) [task:458731]
  - media: i2c: imx219: Rectify runtime PM handling in probe and remove (Sakari Ailus) [task:458731]
  - media: venus: hfi_parser: refactor hfi packet parsing logic (Vikash Garodia) [task:458731]
  - media: venus: hfi_parser: add check to avoid out of bound access (Vikash Garodia) [task:458731]
  - media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO (Sakari Ailus) [task:458731]
  - media: i2c: ov7251: Set enable GPIO low in probe (Sakari Ailus) [task:458731]
  - media: i2c: ccs: Set the device's runtime PM status correctly in probe (Sakari Ailus) [task:458731]
  - media: i2c: ccs: Set the device's runtime PM status correctly in remove (Sakari Ailus) [task:458731]
  - media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Karina Yankevich) [task:458731]
  - media: platform: stm32: Add check for clk_enable() (Jiasheng Jiang) [task:458731]
  - media: visl: Fix ERANGE error when setting enum controls (Nicolas Dufresne) [task:458731]
  - media: streamzap: prevent processing IR data on URB failure (Murad Masimov) [task:458731]
  - tpm, tpm_tis: Fix timeout handling when waiting for TPM status (Jonathan McDowell) [task:458731]
  - mtd: rawnand: brcmnand: fix PM resume warning (Kamal Dasu) [task:458731]
  - spi: cadence-qspi: Fix probe on AM62A LP SK (Miquel Raynal) [task:458731]
  - KVM: arm64: Tear down vGIC on failed vCPU creation (Will Deacon) [task:458731]
  - arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Douglas Anderson) [task:458731]
  - arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Douglas Anderson) [task:458731]
  - arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Douglas Anderson) [task:458731]
  - arm64: cputype: Add MIDR_CORTEX_A76AE (Douglas Anderson) [task:458731]
  - xenfs/xensyms: respect hypervisor's "next" indication (Jan Beulich) [task:458731]
  - media: siano: Fix error handling in smsdvb_module_init() (Yuan Can) [task:458731]
  - media: vim2m: print device name after registering device (Matthew Majewski) [task:458731]
  - media: venus: hfi: add check to handle incorrect queue size (Vikash Garodia) [task:458731]
  - media: venus: hfi: add a check to handle OOB in sfr region (Vikash Garodia) [task:458731]
  - media: i2c: adv748x: Fix test pattern selection mask (Niklas Söderlund) [task:458731]
  - media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning (Arnd Bergmann) [task:458731]
  - media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (Jiasheng Jiang) [task:458731]
  - dt-bindings: media: st,stmipid02: correct lane-polarities maxItems (Alain Volmat) [task:458731]
  - ext4: don't treat fhandle lookup of ea_inode as FS corruption (Jann Horn) [task:458731]
  - bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags (Willem de Bruijn) [task:458731]
  - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Uwe Kleine-König) [task:458731]
  - pwm: rcar: Improve register calculation (Uwe Kleine-König) [task:458731]
  - pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() (Josh Poimboeuf) [task:458731]
  - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Jonathan McDowell) [task:458731]
  - ktest: Fix Test Failures Due to Missing LOG_FILE Directories (Ayush Jain) [task:458731]
  - tracing: probe-events: Add comments about entry data storing code (Masami Hiramatsu (Google)) [task:458731]
  - fbdev: omapfb: Add 'plane' value check (Leonid Arapov) [task:458731]
  - drm/amdgpu: grab an additional reference on the gang fence v2 (Christian König) [task:458731]
  - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Ryo Takakura) [task:458731]
  - drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() (Wentao Liang) [task:458731]
  - drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off (AngeloGioacchino Del Regno) [task:458731]
  - drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data (AngeloGioacchino Del Regno) [task:458731]
  - drm/amdkfd: debugfs hang_hws skip GPU with MES (Philip Yang) [task:458731]
  - drm/amdkfd: Fix pqm_destroy_queue race with GPU reset (Philip Yang) [task:458731]
  - drm/amdkfd: Fix mode1 reset crash issue (Philip Yang) [task:458731]
  - drm/amdkfd: clamp queue size to minimum (David Yat Sin) [task:458731]
  - drivers: base: devres: Allow to release group on device release (Lucas De Marchi) [task:458731]
  - drm/bridge: panel: forbid initializing a panel with unknown connector type (Luca Ceresoli) [task:458731]
  - drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel) (Andrew Wyatt) [task:458731]
  - drm: panel-orientation-quirks: Add new quirk for GPD Win 2 (Andrew Wyatt) [task:458731]
  - drm: panel-orientation-quirks: Add quirk for AYA NEO Slide (Andrew Wyatt) [task:458731]
  - drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB (Andrew Wyatt) [task:458731]
  - drm: panel-orientation-quirks: Add support for AYANEO 2S (Andrew Wyatt) [task:458731]
  - drm/amd/display: add workaround flag to link to force FFE preset (Brendan Tam) [task:458731]
  - drm/amd/display: Update Cursor request mode to the beginning prefetch always (Zhikai Zhai) [task:458731]
  - drm: allow encoder mode_set even when connectors change for crtc (Abhinav Kumar) [task:458731]
  - Bluetooth: qca: simplify WCN399x NVM loading (Dmitry Baryshkov) [task:458731]
  - Bluetooth: hci_uart: fix race during initialization (Arseniy Krasnov) [task:458731]
  - tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER (Gabriele Paoloni) [task:458731]
  - net: vlan: don't propagate flags on open (Stanislav Fomichev) [task:458731]
  - wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table (Icenowy Zheng) [task:458731]
  - scsi: st: Fix array overflow in st_setup() (Kai Mäkisara) [task:458731]
  - cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk (Philipp Hahn) [task:458731]
  - ext4: ignore xattrs past end (Bhupesh) [task:458731]
  - Revert "f2fs: rebuild nat_bits during umount" (Chao Yu) [task:458731]
  - ext4: protect ext4_release_dquot against freezing (Ojaswin Mujoo) [task:458731]
  - ahci: add PCI ID for Marvell 88SE9215 SATA Controller (Daniel Kral) [task:458731]
  - f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() (Chao Yu) [task:458731]
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (Manish Dharanenthiran) [task:458731]
  - net: sfp: add quirk for 2.5G OEM BX SFP (Birger Koblitz) [task:458731]
  - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode (Niklas Cassel) [task:458731]
  - jfs: add sanity check for agwidth in dbMount (Edward Adam Davis) [task:458731]
  - jfs: Prevent copying of nlink with value 0 from disk inode (Edward Adam Davis) [task:458731]
  - fs/jfs: Prevent integer overflow in AG size calculation (Rand Deeb) [task:458731]
  - fs/jfs: cast inactags to s64 to prevent potential overflow (Rand Deeb) [task:458731]
  - jfs: Fix uninit-value access of imap allocated in the diMount() function (Zhongqiu Han) [task:458731]
  - page_pool: avoid infinite loop to schedule delayed worker (Jason Xing) [task:458731]
  - net: usb: asix_devices: add FiberGecko DeviceID (Max Schulze) [task:458731]
  - scsi: target: spc: Fix RSOC parameter data header size (Chaohai Chen) [task:458731]
  - f2fs: don't retry IO for corrupted data scenario (Chao Yu) [task:458731]
  - wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process (P Praneesh) [task:458731]
  - ASoC: amd: yc: update quirk data for new Lenovo model (Syed Saba kareem) [task:458731]
  - ASoC: amd: Add DMI quirk for ACP6X mic support (keenplify) [task:458731]
  - ALSA: usb-audio: Fix CME quirk for UF series keyboards (Ricard Wanderlof) [task:458731]
  - mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves (Kaustabh Chakraborty) [task:458731]
  - media: uvcvideo: Add quirk for Actions UVC05 (Ricardo Ribalda) [task:458731]
  - ASoC: fsl_audmix: register card device depends on 'dais' property (Shengjiu Wang) [task:458731]
  - ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist (Maxim Mikityanskiy) [task:458731]
  - ALSA: hda: intel: Fix Optimus when GPU has no sound (Maxim Mikityanskiy) [task:458731]
  - HID: pidff: Fix null pointer dereference in pidff_find_fields (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add PERIODIC_SINE_ONLY quirk (Tomasz Pakuła) [task:458731]
  - HID: Add hid-universal-pidff driver and supported device ids (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add FIX_WHEEL_DIRECTION quirk (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add PERMISSIVE_CONTROL quirk (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add MISSING_PBO quirk and its detection (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add MISSING_DELAY quirk and its detection (Tomasz Pakuła) [task:458731]
  - HID: pidff: Do not send effect envelope if it's empty (Tomasz Pakuła) [task:458731]
  - HID: pidff: Convert infinite length from Linux API to PID standard (Tomasz Pakuła) [task:458731]
  - ASoC: SOF: topology: Use krealloc_array() to replace krealloc() (Zhang Heng) [task:458731]
  - zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault (Ingo Molnar) [task:458731]
  - xen/mcelog: Add __nonstring annotations for unterminated strings (Kees Cook) [task:458731]
  - arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD (Douglas Anderson) [task:458731]
  - perf: arm_pmu: Don't disable counter in armpmu_add() (Mark Rutland) [task:458731]
  - x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine (Max Grobecker) [task:458731]
  - x86/ia32: Leave NULL selector values 0~3 unchanged (Xin Li (Intel)) [task:458731]
  - x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW (Matthew Wilcox (Oracle)) [task:458731]
  - pm: cpupower: bench: Prevent NULL dereference on malloc failure (Zhongqiu Han) [task:458731]
  - umount: Allow superblock owners to force umount (Trond Myklebust) [task:458731]
  - fs: consistently deref the files table with rcu_dereference_raw() (Mateusz Guzik) [task:458731]
  - iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (Louis-Alexis Eyraud) [task:458731]
  - nft_set_pipapo: fix incorrect avx2 match of 5th field octet (Florian Westphal) [task:458731]
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung (Arnaud Lecomte) [task:458731]
  - ipv6: Align behavior across nexthops during path selection (Ido Schimmel) [task:458731]
  - net_sched: sch_sfq: move the limit validation (Octavian Purdila) [task:458731]
  - net_sched: sch_sfq: use a temporary work area for validating configuration (Octavian Purdila) [task:458731]
  - nvmet-fcloop: swap list_add_tail arguments (Daniel Wagner) [task:458731]
  - drm/i915/huc: Fix fence not released on early probe errors (Janusz Krzysztofik) [task:458731]
  - ata: sata_sx4: Add error handling in pdc20621_i2c_read() (Wentao Liang) [task:458731]
  - net: libwx: handle page_pool_dev_alloc_pages error (Chenyuan Yang) [task:458731]
  - drm/tests: probe-helper: Fix drm_display_mode memory leak (Maxime Ripard) [task:458731]
  - drm/tests: modes: Fix drm_display_mode memory leak (Maxime Ripard) [task:458731]
  - drm/tests: cmdline: Fix drm_display_mode memory leak (Maxime Ripard) [task:458731]
  - drm/tests: helpers: Create kunit helper to destroy a drm_display_mode (Maxime Ripard) [task:458731]
  - drm/tests: helpers: Fix compiler warning (Yu-Chun Lin) [task:458731]
  - drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic() (Jinjie Ruan) [task:458731]
  - drm/tests: Add helper to create mock crtc (Maxime Ripard) [task:458731]
  - drm/tests: Add helper to create mock plane (Maxime Ripard) [task:458731]
  - drm/tests: helpers: Add atomic helpers (Maxime Ripard) [task:458731]
  - drm/tests: modeset: Fix drm_display_mode memory leak (Maxime Ripard) [task:458731]
  - net: ethtool: Don't call .cleanup_data when prepare_data fails (Maxime Chevallier) [task:458731]
  - tc: Ensure we have enough buffer space when sending filter netlink notifications (Toke Høiland-Jørgensen) [task:458731]
  - net/sched: cls_api: conditional notification of events (Pedro Tammela) [task:458731]
  - rtnl: add helper to check if a notification is needed (Victor Nogueira) [task:458731]
  - rtnl: add helper to check if rtnl group has listeners (Jamal Hadi Salim) [task:458731]
  - octeontx2-pf: qos: fix VF root node parent queue index (Hariprasad Kelam) [task:458731]
  - net: tls: explicitly disallow disconnect (Jakub Kicinski) [task:458731]
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Cong Wang) [task:458731]
  - tipc: fix memory leak in tipc_link_xmit (Tung Nguyen) [task:458731]
  - objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret() (Josh Poimboeuf) [task:458731]
  - ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() (Henry Martin) [task:458731]
  - drm/i915: Disable RPG during live selftest (Badal Nilawar) [task:458731]
  - drm/i915/dg2: wait for HuC load completion before running selftests (Daniele Ceraolo Spurio) [task:458731]
  - selftests/futex: futex_waitv wouldblock test should fail (Edward Liaw) [task:458731]
  - fix missing file error in sw64 (liuyunchen) [task:382309]
  - support stackprotector in sw64 (leechm) [task:382309]
  - fix some compile error in sw64 (kylin) [task:382309]
  - SUNWAY: irq: remove unnecessary initialization (Jing Li) [task:382309]
  - SUNWAY: acpi: enable generic GSI (Jing Li) [task:382309]
  - SUNWAY: irqchip: support ACPI-based interrupt controller initialization (Jing Li) [task:382309]
  - SUNWAY: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC (Jing Li) [task:382309]
  - SUNWAY: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC (Jing Li) [task:382309]
  - SUNWAY: fix compilation warning (He Chuyue) [task:382309]
  - SUNWAY: fix kconfig selections (Mao Minkai) [task:382309]
  - SUNWAY: use a new wrap_asid hmcall when asid wraps (Mao Minkai) [task:382309]
  - SUNWAY: rewrite fpcr and swcr conversion (Mao Minkai) [task:382309]
  - SUNWAY: enable hardware denorm by default (Mao Minkai) [task:382309]
  - SUNWAY: add four-socket system support (Wu Liliu) [task:382309]
  - SUNWAY: add a new kernel parameter to override mclk (Mao Minkai) [task:382309]
  - SUNWAY: msi: fix bugs in multi-msi interrupts allocation and release (Zheng Chongzhen) [task:382309]
  - SUNWAY: pci: change pci transaction ordering rule settings (Zheng Chongzhen) [task:382309]
  - SUNWAY: irqchip: fix virtual PINTC not working properly (Jing Li) [task:382309]
  - SUNWAY: dts: improve properties for PINTC (Jing Li) [task:382309]
  - SUNWAY: dts: improve properties for LPC-INTC (Jing Li) [task:382309]
  - SUNWAY: dts: fix interrupt related properties for GPIO (Jing Li) [task:382309]
  - SUNWAY: dts: add chosen node (Jing Li) [task:382309]
  - SUNWAY: dts: fix properties for spi controller device node (Jing Li) [task:382309]
  - SUNWAY: acpi: fix coding style and typos (Jing Li) [task:382309]
  - SUNWAY: fix rd_f compatibility issue for C4 (He Chuyue) [task:382309]
  - SUNWAY: fix macro definition compilation error (Tang Jinyang) [task:382309]
  - SUNWAY: pci: fix compile error when CONFIG_ACPI=n (Jing Li) [task:382309]
  - SUNWAY: smp: suppress function setup_smp() when ACPI enabled (Jing Li) [task:382309]
  - SUNWAY: acpi: parse SW CINTC for SMP initialization (Jing Li) [task:382309]
  - SUNWAY: acpi: support MADT entry print for SW CINTC (Jing Li) [task:382309]
  - SUNWAY: acpi: add ACPI-style structures for SW CINTC (Jing Li) [task:382309]
  - SUNWAY: smp: add new structure to record rcid information (Jing Li) [task:382309]
  - SUNWAY: smp: modify function smp_rcb_init() to receive base address (Jing Li) [task:382309]
  - SUNWAY: pci: synchronize the OEM table ID of MCFG with BIOS (Jing Li) [task:382309]
  - SUNWAY: iommu: fix the bug when vfio_iommu unpin pages (Zheng Chongzhen) [task:382309]
  - SUNWAY: use rvpcr() to setup run mode (Wu Liliu) [task:382309]
  - SUNWAY: kgdb: add single-step debug support (Zhi Tongze) [task:382309]
  - SUNWAY: fix lockdep error (He Chuyue) [task:382309]
  - SUNWAY: perf: do all event checks in sw64_pmu_event_init() (He Chuyue) [task:382309]
  - SUNWAY: numa: fix compile error when CONFIG_ACPI_NUMA=n (Jing Li) [task:382309]
  - SUNWAY: pci: export some pci functions (Jing Li) [task:382309]
  - SUNWAY: uapi: fix a compile error for headers_install (Gu Zitao) [task:382309]
  - SUNWAY: perf: hide hardware performance events in guest os (He Chuyue) [task:382309]
  - SUNWAY: fix hugepage support (Wu Liliu) [task:382309]
  - SUNWAY: extern vdso_start and vdso_end as char[] (Mao Minkai) [task:382309]
  - SUNWAY: remove useless current_policy (Tang Jinyang) [task:382309]
  - SUNWAY: add arch-specific SYM_END definition (Gu Zitao) [task:382309]
  - SUNWAY: add vfio support (liuyunchen) [task:382309]
  - SUNWAY: add usb support (liuyunchen) [task:382309]
  - SUNWAY: add platform drivers (liuyunchen) [task:382309]
  - SUNWAY: add gpio support (liuyunchen) [task:382309]
  - SUNWAY: add misc drivers (liuyunchen) [task:382309]
  - SUNWAY: add hwmon driver (liuyunchen) [task:382309]
  - SUNWAY: add mfd driver support (liuyunchen) [task:382309]
  - SUNWAY: add iommu support (liuyunchen) [task:382309]
  - SUNWAY: add firmware support (liuyunchen) [task:382309]
  - SUNWAY: add pci bus support (liuyunchen) [task:382309]
  - SUNWAY: add acpi support (liuyunchen) [task:382309]
  - SUNWAY: add i2c bus driver support (liuyunchen) [task:382309]
  - SUNWAY: add irq controller support (liuyunchen) [task:382309]
  - SUNWAY: add cpufreq driver support (liuyunchen) [task:382309]
  - SUNWAY: add clocksource support (liuyunchen) [task:382309]
  - SUNWAY: add spi support (liuyunchen) [task:382309]
  - SUNWAY: add rtc support (liuyunchen) [task:382309]
  - SUNWAY: add 8250 serial support (liuyunchen) [task:382309]
  - SUNWAY: add perf support (Mao Minkai) [task:382309]
  - SUNWAY: add build infrastructure (Mao Minkai) [task:382309]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.2.v2505
changelog:
  - CCUSR: scsi/ccusr: avoid CCore RAID card exceptions caused by I/O (Zeng Fu) [task:456510]
  - Add JIT_ALWAYS_ON config to Loongarch (Feng Yang) [bug:353232]
  - Revert "fs: protect backing files with rcu" (Zhou Yuhang) [bug:354726]
  - Revert "fs: add file_ref" (Zhou Yuhang) [bug:354726]
  - Revert "fs: port files to file_ref" (Zhou Yuhang) [bug:354726]
  - virtcca/vgic: Fix the issue where QEMU fails to load the image. (Hao Ge) [task:369181]
  - OPENEULER: Bug fix: Resolve the issue of host hard lockup (Hao Ge) [task:369181]
  - OPENEULER: VirtCCA: The cvm removes the vcpu binding limit. (gongchangsui) [task:369181]
  - OPENEULER: VirtCCA: Improve nfs workqueue bind method (gongchangsui) [task:369181]
  - OPENEULER: VirtCCA: Intercept the situation where devices with both NVM adn CVM passthrough under same PCIe root port (gongchangsui) [task:369181]
  - OPENEULER: VirtCCA: an interface to retrieve the TMI version is added (gongchangsui) [task:369181]
  - OPENEULER: VirtCCA: cvm support UEFI boot (gongchangsui) [task:369181]
  - OPENEULER: virtCCA Feature: remove unused interfaces and add cpumask check (panhengchang) [task:369181]
  - OPENEULER: virtcca feature : security rectification (yangxiangkai) [task:369181]
  - iommu/arm-smmu-v3: Retire disable_bypass parameter (Robin Murphy) [task:369181]
  - OPENEULER: virtcca bugfix: correct array copy for hpre_addr (liupingwei) [task:369181]
  - OPENEULER: virtcca feature : disable swiotlb for passthrough device (panhengchang) [task:369181]
  - OPENEULER: virtcca feature : force vring alloc use dma api (panhengchang) [task:369181]
  - OPENEULER: virtcca feature: enable unmap swiotlb buffer to save iotlb cvm memory (panhengchang) [task:369181]
  - OPENEULER: virtcca feature : SM Cryptographic Aacceleration. (liupingwei) [task:369181]
  - OPENEULER: virtcca feature : transfer smmu_vmid (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature : GPU supports maximum 1G page table mapping. (yangxiangkai) [task:369181]
  - OPENEULER: virtcca bugfix: compile warning clean (yangxiangkai) [task:369181]
  - OPENEULER: virtcca bugfix: clear device msi address (yangxiangkai) [task:369181]
  - OPENEULER: virtcca bugfix: compile warning clean (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: msi place modify (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: fix msi iova map (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: extract the function to the virtcca_coda.c file (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: virtcca feature: read or write msi forwarding to the secure world (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: read or write bar space forwarding to the secure world (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: read or write config space forwarding to secure world (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: activate confidential vm to set security device s_s2ttbr (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: set device security properties (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: secure device page fault (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: vfio driver dma map (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: bind the kvm handle of cvm with smmu domain (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: vfio attach the device list to secure world (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: fix warnings (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: secure smmu doc (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: secure smmu init (yangxiangkai) [task:369183]
  - OPENEULER: virtcca bugfix: compile warning clean (yangxiangkai) [task:369181]
  - OPENEULER: cvm_tsi: add support virtcca attestation (chenzheng) [task:369181]
  - OPENEULER: gicv3: add lpi support for cvm guest (Jingxian He) [task:369181]
  - OPENEULER: mm: enable swiotlb alloc for cvm share mem (Jingxian He) [task:369181]
  - OPENEULER: pmu: enable pmu phys irq inject for cvm (Jingxian He) [task:369181]
  - OPENEULER: kvm: add virtcca cvm host feature (Jingxian He) [task:369181]
  - OPENEULER: kvm: add new kvm_type for cvm (Ju Fu) [task:369181]
  - sockmap: Fix crash issue caused by the uninitialized skb->sockmap (Yun Lu) [task:466225]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.3.v2505
changelog:
  - sched/deadline: Fix schedstats vs deadline servers (Huang Shijie) [task:354674]
  - EULER: sched/sysctl: Add CFTYPE_NOT_ON_ROOT for qos_level (Wang Tao) [task:467360]
  - EULER: sched/qos: Fix qos throttling in SMT expelled (Liu Kai) [task:467360]
  - EULER: sched: fixed offline group hung task issue under high load scenarios (Liu Kai) [task:467360]
  - EULER: sched/fair: Fix qos_timer deadlock when cpuhp offline (Wenyu Huang) [task:467360]
  - EULER: sched: Introduce qos smt expeller for co-location (Guan Jing) [task:467360]
  - EULER: sched/fair: Add cmdline nosmtexpell (Guan Jing) [task:467360]
  - EULER: sched/fair: Introduce QOS_SMT_EXPELL priority reversion mechanism (Guan Jing) [task:467360]
  - EULER: sched/fair: Start tracking qos_offline tasks count in cfs_rq (Guan Jing) [task:467360]
  - EULER: sched: Add tracepoint for qos smt expeller (Guan Jing) [task:467360]
  - EULER: sched: Add statistics for qos smt expeller (Guan Jing) [task:467360]
  - EULER: sched: Implement the function of qos smt expeller (Guan Jing) [task:467360]
  - EULER: sched: Introduce priority load balance for qos scheduler (Song Zhang) [task:467360]
  - config: Enable qos scheduler config (liwanwu) [task:467360]
  - EULER: sched: Introduce handle priority reversion mechanism (Zhang Qiao) [task:467360]
  - EULER: sched: Support kill boost for offline task (Zhang Qiao) [task:467360]
  - EULER: sched: Throttle qos cfs_rq when current cpu is running online task (Zhang Qiao) [task:467360]
  - EULER: sched: Introduce qos scheduler for co-location (Zhang Qiao) [task:467360]
  - sched/syscall: Make __setscheduler_params non-static (liwanwu) [task:467360]
  - filemap: move prefaulting out of hot write path (Dave Hansen) [task:456354]
  - arch/arm64: Add a 5000C series SOC_ID_PS23064 processing (liyouhong) [bug:347952]
  - kernel.spec: Fixing an extra abi package in packaging. (lihaofeng) [task:470205]
  - entry: Inline syscall_exit_to_user_mode() (Charlie Jenkins) [task:456354]
  - LoongArch: entry: Migrate ret_from_fork() to C (Charlie Jenkins) [task:456354]
  - riscv: entry: Split ret_from_fork() into user and kernel (Charlie Jenkins) [task:456354]
  - riscv: entry: Convert ret_from_fork() to C (Charlie Jenkins) [task:456354]
  - treewide: context_tracking: Rename CONTEXT_* into CT_STATE_* (Valentin Schneider) [task:456354]
  - fs: port files to file_ref (Christian Brauner) [task:444220]
  - fs: add file_ref (Christian Brauner) [task:444220]
  - fs: protect backing files with rcu (Christian Brauner) [task:444220]
  - fs: remove f_version (Christian Brauner) [bug:354726]
  - pipe: use f_pipe (Christian Brauner) [bug:354726]
  - fs: add f_pipe (Christian Brauner) [bug:354726]
  - ubifs: store cookie in private data (Christian Brauner) [bug:354726]
  - ufs: store cookie in private data (Christian Brauner) [bug:354726]
  - udf: store cookie in private data (Christian Brauner) [bug:354726]
  - proc: store cookie in private data (Christian Brauner) [bug:354726]
  - ocfs2: store cookie in private data (Christian Brauner) [bug:354726]
  - input: remove f_version abuse (Christian Brauner) [bug:354726]
  - ext4: store cookie in private data (Christian Brauner) [bug:354726]
  - ext2: store cookie in private data (Christian Brauner) [bug:354726]
  - affs: store cookie in private data (Christian Brauner) [bug:354726]
  - fs: add generic_llseek_cookie() (Christian Brauner) [bug:354726]
  - fs: use must_set_pos() (Christian Brauner) [bug:354726]
  - fs: add must_set_pos() (Christian Brauner) [bug:354726]
  - fs: add vfs_setpos_cookie() (Christian Brauner) [bug:354726]
  - s390: remove unused f_version (Christian Brauner) [bug:354726]
  - ceph: remove unused f_version (Christian Brauner) [bug:354726]
  - adi: remove unused f_version (Christian Brauner) [bug:354726]
  - include: linux: Inline the topology_get_cpu_scale function (Can Peng) [task:443191]
  - OPENEULER: mm/oom_kill: fix NULL pointer dereference in memcg_print_bad_task() (Jinjiang Tu) [task:467362]
  - memcg: enable CONFIG_MEMCG_OOM_PRIORITY by default (lihongfu) [task:467362]
  - OPENEULER: memcg: Add sysctl memcg_qos_enable (Jing Xiangfeng) [task:467362]
  - OPENEULER: memcg: support priority for oom (Jing Xiangfeng) [task:467362]
  - config: enable CONFIG_MEMCG_V1_RECLAIM and CONFIG_CGROUP_V1_KILL (lihongfu) [task:467362]
  - OPENEULER: memcg: introduce per-memcg reclaim interface (Lu Jialin) [task:467362]
  - OPENEULER: memcg: export high_async_ratio to userland (Lu Jialin) [task:467362]
  - OPENEULER: memcg: enable memcg async reclaim (Lu Jialin) [task:467362]
  - OPENEULER: memcg: Export memory.events{local} from cgroupv2 to cgroupv1 (Lu Jialin) [task:467362]
  - OPENEULER: memcg: Export memcg.{min/low/high} from cgroupv2 to cgroupv1 (Lu Jialin) [task:467362]
  - OPENEULER: cgroup: Export cgroup.kill from cgroupv2 to cgroupv1 (Lu Jialin) [task:467362]
  - Revert "configs/arm64: open some virtcca config" (Hao Ge) [task:369181]
  - configs/arm64: open some virtcca config (Hao Ge) [task:369181]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.4.v2505
changelog:
  - ksaf: keep server code consistent with desktop (penghuaihe) [task:470513]
  - ksaf: realize ksaf_d_path interface (penghuaihe) [task:392829]
  - configs/arm64: open some virtcca config (Hao Ge) [task:369181]
  - arm64: add PHYTIUM series into spectre_v4 safe list (hehuiwen) [bug:353746]
  - arm64: add PHYTIUM into spectre_v2 safe list (Jackie Liu) [bug:353746]
  - LeapIoRaid: Update verion to 1.02.02.00 (tanzheng) [task:462896]
  - memcg: fix compile error on biv_defconfig (lihongfu) [task:472699]
  - fs: place f_ref to 3rd cache line in struct file to resolve false sharing (Pan Deng) [task:456354]
  - LoongArch: tpm: Add a driver for Loongson TPM device (Qunqin Zhao) [task:466348]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.5.v2505
changelog:
  - spec: Add Module.kabi_loongarch64 to kernel source package (Jiangshan Yi) [task:443413]
  - kabi: Add kabi extended symvers for x86_64 and aarch64 (Jiangshan Yi) [task:443413]
  - kabi: initialize kabi list and symvers for x86_64 and aarch64 (Jiangshan Yi) [task:443413]
  - loongarch/kabi: Add kabi extended whitelist for loongarch (lifangxu) [task:482379]
  - loongarch/kabi: Add kabi whitelist for loongarch (lifangxu) [task:482379]
  - kabi: reserve space for struct kernel_param_ops (Wang Yan) [task:467006]
  - kabi: reserve space for struct uts_namespace (Wang Yan) [task:467006]
  - kabi: reserve space for kthread and workqueue (Wang Yan) [task:467006]
  - kabi: include/msi: reserve space for msi expansion (lifangxu) [task:448261]
  - arm64: config: enable CONFIG_COMPAT (pengyu) [bug:364829]
  - arm64/cputype: Remove the redundant cputype (Riwen Lu) [task:453488, task:472129]
  - PHYTIUM: arm/arm64: Bugfix the CPU MPIDR definition of phytium FTC303 core (Wang Yinfeng) [task:453488, task:472129]
  - OPENEULER: 3snic: use sssnic as kernel driver name (weiwei1) [bug:361125]
  - OPENEULER: improve 3SNIC 910/920/930 NIC driver (weiwei1) [bug:361125]
  - PCI/VGA: add change boot vga device support v2 (Shixiong Ou) [task:347429]
  - tcp/dccp: Add another way to allocate local ports in bind() (luoxuanqiang) [task:452905]
  - PHYTIUM: spi: phytium: Fix SPI IRQ panic on boot issue (Liu Dalin) [bug:367933]
  - PHYTIUM: spi: phytium: Bugfix phytium_spi_irq panic on boot (Peng Min) [bug:367933]
  - perf/x86/zhaoxin: Fix instructions error by missing fixedctr member (tanze) [bug:365143]
  - kabi: pad anon_vma for kabi (Qingshuang Fu) [task:461339]
  - kernel.spec: Fixing compiling 64k page size kernel has compilation issues (lihaofeng) [task:472819]
  - x86: Implement Hygon's LMC to support both SSE2 and AVX2 (Can Peng) [bug:358867]
  - config: open FS_ENCRYPTION on x86 (chengang) [bug:364375, bug:347118]
  - drm/ast: use DRM_GEM_SHMEM_DRIVER_OPS_NO_MAP_SGT (Shixiong Ou) [task:449981]
  - drm/shmem-helper: Import dmabuf without mapping its sg_table (Shixiong Ou) [task:449981]
  - PHYTIUM: PCI: Add ACS quirk for phytium root and switch ports (Xiao Cong) [task:477923]
  - iommu: make ft2500 iommu domain IDENTITY by default (Zheng Tan) [bug:353158]
  - locking: The Zhaoxin NUMA lock is disabled by default (Can Peng) [task:468935]
  - HYGON: optimize TDM driver code logic to avoid warning (chench) [bug:346920]
  - LOONGSON: LoongArch: 2K3000 GMAC support. (wanghongliang) [task:474031]
  - HYGON: crypto: ccp: add "tdm_guard" as kernel and module parameter (niuyongwen) [bug:358365]
  - LOONGSON: LoongArch: megaraid: Add udelay to avoid data error caused by dma sequence (zhangtianyang) [task:469297]
  - LOONGSON: LoongArch: nvme: Add udelay to avoid data error caused by dma sequence (Juxin Gao) [task:469297]
  - LOONGSON: LoongArch: Add pwm driver support. (Juxin Gao) [task:469297]
  - LOONGSON: LoongArch: support CONFIG_SCHED_MC (wanghongliang) [task:469297]
  - LOONGSON: LoongArch: CONFIG_NR_CPUS expanded to 2048 (Juxin Gao) [task:469297]
  - Maintainer: update KYLIN-MAINTAINERS (huhai)
  - Maintainer: update KYLIN-MAINTAINERS (huhai)
  - kabi: kvm: reserve some space for kABI (Qingshuang Fu) [task:461337]
  - kabi: pad the free_area struct (Qingshuang Fu) [task:461339]
  - kabi: pad the deferred_split queue for the kabi checker (Qingshuang Fu) [task:461339]
  - kabi: hide capture_control from kabi checker (Qingshuang Fu) [task:461339]
  - kabi: net: reserve some space for kABI (Qingshuang Fu) [task:461337]
  - kabi: bpf: reserve some space for kABI (Qingshuang Fu) [task:461337]
  - kabi: pad the page_frag_cache for the kabi (Qingshuang Fu) [task:461339]
  - kabi: pad mmu_notifier functions for kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the memory_failure_stats for kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the kmem_cache structure (Qingshuang Fu) [task:461339]
  - kabi: pad the folio_batch struct (Qingshuang Fu) [task:461339]
  - kabi: pad the zone structures for kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the wait_page_queue for the kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the lru_gen functions for kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the tlbflush_unmap_batch struct for the KABI (Qingshuang Fu) [task:461339]
  - kabi: pad the swap_cluster_info structure for KABI (Qingshuang Fu) [task:461339]
  - kabi: pad the shrink_control structure for kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the percpu structures (Qingshuang Fu) [task:461339]
  - kabi: reserve space for RCU (Wang Yan) [task:461338]
  - kabi: reserve space for device model (Wang Yan) [task:461338]
  - kabi: reserve space for tty subsystem (Wang Yan) [task:461338]
  - kabi: reserve space for encryption algorithm framework (Wang Yan) [task:461338]
  - kabi: reserve space for rt_mutex_waiter (Wang Yan) [task:461338]
  - kabi: reserve space for workqueue (Wang Yan) [task:461338]
  - kabi: reserve space for watchdog device drivers (Wang Yan) [task:461338]
  - kabi: reserve space for tracking and debugging (Wang Yan) [task:461338]
  - kabi: reserve space for sunrpc (Wang Yan) [task:461338]
  - kabi: reserve space for module_sect_attr (Wang Yan) [task:461338]
  - kabi: reserve space for keys/keyrings (Wang Yan) [task:461338]
  - kabi: reserve space for iommu_iotlb_gather (Wang Yan) [task:461338]
  - kabi: reserve space for I2C subsystem (Wang Yan) [task:461338]
  - kabi: reserve space for fwnode_handle (Wang Yan) [task:461338]
  - kabi: reserve space for terminal mechanism (Wang Yan) [task:461338]
  - kabi: reserve space for task_delay_info (Wang Yan) [task:461338]
  - kabi: reserve space for cpuidle (Wang Yan) [task:461338]
  - kabi: reserve space for linux_binprm (Wang Yan) [task:461338]
  - kabi: reserve space for PCI subsystem (Wang Yan) [task:461338]
  - kabi: reserve space for process management and scheduling (Wang Yan) [task:461338]
  - kabi: time: Add kabi reserve time (lihaofeng) [task:461336]
  - kabi: mm: Add kabi reserve memory management (lihaofeng) [task:461336]
  - kabi: power: Add kabi reserve energy management (lihaofeng) [task:461336]
  - kabi: vfs: File system and vfs add kabi reserve (lihaofeng) [task:461336]
  - kabi: scsi: Add kabi reserve (lihaofeng) [task:461336]
  - kabi: block: Add kabi reserve (lihaofeng) [task:461336]
  - ACPI: PPTT: Fix processor subtable walk (Jeremy Linton) [bug:363349]
  - mm/codetag: clear tags before swap (David Wang)
  - mm/codetag: swap tags when migrate pages (David Wang)
  - filemap_alloc: warp filemap_alloc_folio_node function with alloc_hooks (Jackie Liu)


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.6.v2505
changelog:
  - LOONGSON: LoongArch: loongarch/kvm: fix pch pic spinlock dead lock (Xianglai Li) [bug:346647]
  - LOONGSON: LoongArch: sync kvm head file from upstream (Xianglai Li) [task:482361]
  - LOONGSON: LoongArch: fix migrate issue (Song Gao) [task:482361]
  - LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset() (Tianyang Zhang) [bug:368017]
  - loongarch: config: enable CONFIG_COMPAT (pengyu) [bug:371643]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.7.v2505
changelog:
  - fs: export some overlayfs interface (penghuaihe) [task:392829]
  - tpm: tpm_tis: Adapt spi tcm2 card ZIC0603 to x86 (wudandan) [task:220240]
  - loongarch: disable CONFIG_DM_VDO (zhanggenjian) [bug:363685]
  - Revert "EULER: scheduler: Create SDTL_SKIP flag to skip topology level" (liwanwu) [task:485185]
  - Revert "EULER: scheduler: Add runtime knob sysctl_sched_cluster" (liwanwu) [task:485185]
  - Revert "EULER: scheduler: Add boot time enabling/disabling of cluster scheduling" (liwanwu) [task:485185]
  - Revert "EULER: scheduler: Disable cluster scheduling by default" (liwanwu) [task:485185]
  - gitmessage: update template for git commit message (Jiangshan Yi) [task:488923]
  - EULER: scheduler: Disable cluster scheduling by default (Yicong Yang) [task:485185]
  - EULER: scheduler: Add boot time enabling/disabling of cluster scheduling (Tim Chen) [task:485185]
  - EULER: scheduler: Add runtime knob sysctl_sched_cluster (Tim Chen) [task:485185]
  - EULER: scheduler: Create SDTL_SKIP flag to skip topology level (Tim Chen) [task:485185]
  - nvmet: remove old function prototype (Maurizio Lombardi) [bug:289269]
  - nvmet: Fix crash when a namespace is disabled (Hannes Reinecke) [bug:289269]
  - nvmet-loop: avoid using mutex in IO hotpath (Nilay Shroff) [bug:289269]
  - nvmet: support reservation feature (Guixin Liu) [bug:289269]
  - nvme: add reservation command's defines (Guixin Liu) [bug:289269]
  - nvme: host: fix double-free of struct nvme_id_ns in ns_update_nuse() (Shin'ichiro Kawasaki) [bug:289269]
  - nvme: add csi, ms and nuse to sysfs (Daniel Wagner) [bug:289269]
  - nvme: rename ns attribute group (Daniel Wagner) [bug:289269]
  - nvme: refactor ns info helpers (Daniel Wagner) [bug:289269]
  - nvme: move ns id info to struct nvme_ns_head (Daniel Wagner) [bug:289269]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.9.v2505
changelog:
  - sched/qos:fix logic error in check_qos_validation interface (luoliang) [task:546033]
  - interactive_mark: fix sleeping lock usage in get_interactive_weight() (Jackie Liu) [task:514261]
  - kernel/interactive_mark.c: Fix debug_lock warn on interactive_hlist_lock (pengyu) [task:422481]
  - kabi: add kysec kabi white list (penghuaihe) [task:543735]
  - security/ksaf: fix kabi broken problem (zhubing) [bug:429581]
  - sched/qos: Refactor QoS scheduler (gonglinkai) [task:514359]
  - OPENEULER: drivers: update Yunsilicon driver to version 2406_rc16 (Tian Xin) [bug:382245]
  - config: enable CONFIG_PCNET32 (zhulei) [bug:386187, task:514853]
  - RDMA/mlx5: Ensure created mkeys always have a populated rb_key (Jason Gunthorpe) [task:442359]
  - mm/codetag: move tag retrieval back upfront in __free_pages() (David Wang) [task:510759]
  - mm: avoid extra mem_alloc_profiling_enabled() checks (Suren Baghdasaryan) [task:510759]
  - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (Ranjan Kumar) [task:462591] {CVE-2025-37861}
  - scsi: mpi3mr: Support for Segmented Hardware Trace buffer (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Avoid reply queue full condition (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Fix pending I/O counter (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Update consumer index of reply queues after every 100 replies (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Return complete ioc_status for ioctl commands (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Prevent PCI writes from driver during PCI error recovery (Sumit Saxena) [task:462591]
  - scsi: mpi3mr: Support PCI Error Recovery callback handlers (Sumit Saxena) [task:462591]
  - scsi: mpi3mr: Add ioctl support for HDB (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Trigger support (Ranjan Kumar) [task:462591]
  - scsi: pmcraid: Add missing scsi_device_put() in pmcraid_eh_target_reset_handler() (Hannes Reinecke) [task:462591]
  - scsi: megaraid: Fix up debug message in megaraid_abort_and_reset() (Hannes Reinecke) [task:462591]
  - scsi: aic79xx: Fix up NULL command in ahd_done() (Hannes Reinecke) [task:462591]
  - scsi: message: fusion: Initialize return value in mptfc_bus_reset() (Hannes Reinecke) [task:462591]
  - scsi: mpi3mr: Split off bus_reset function from host_reset (Hannes Reinecke) [task:462591]
  - scsi: pmcraid: Select device in pmcraid_eh_target_reset_handler() (Hannes Reinecke) [task:462591]
  - scsi: pmcraid: Select device in pmcraid_eh_bus_reset_handler() (Hannes Reinecke) [task:462591]
  - scsi: qla1280: Separate out host reset function from qla1280_error_action() (Hannes Reinecke) [task:462591]
  - scsi: sym53c8xx_2: Rework reset handling (Hannes Reinecke) [task:462591]
  - scsi: sym53c8xx_2: Split off bus reset from host reset (Hannes Reinecke) [task:462591]
  - scsi: ips: Do not try to abort command from host reset (Hannes Reinecke) [task:462591]
  - scsi: megaraid: Pass in NULL scb for host reset (Hannes Reinecke) [task:462591]
  - scsi: ibmvfc: Open-code reset loop for target reset (Hannes Reinecke) [task:462591]
  - scsi: aic79xx: Do not reference SCSI command when resetting device (Hannes Reinecke) [task:462591]
  - scsi: aic79xx: Make BUILD_SCSIID() a function (Hannes Reinecke) [task:462591]
  - scsi: aic7xxx: Do not reference SCSI command when resetting device (Hannes Reinecke) [task:462591]
  - scsi: aic7xxx: Make BUILD_SCSIID() a function (Hannes Reinecke) [task:462591]
  - scsi: bnx2fc: Do not rely on a SCSI command for LUN or target reset (Hannes Reinecke) [task:462591]
  - scsi: qedf: Use FC rport as argument for qedf_initiate_tmf() (Hannes Reinecke) [task:462591]
  - scsi: message: fusion: Open-code mptfc_block_error_handler() for bus reset (Hannes Reinecke) [task:462591]
  - scsi: message: fusion: Correct definitions for mptscsih_dev_reset() (Hannes Reinecke) [task:462591]
  - scsi: message: fusion: Simplify mptfc_block_error_handler() (Hannes Reinecke) [task:462591]
  - net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (Vladimir Oltean) [task:466574] {CVE-2025-37945}
  - net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend() (Vladimir Oltean) [task:466574]
  - net: phy: phy_device: fix PHY WOL enabled, PM failed to suspend (Youwan Wang) [bug:352220, bug:352226, bug:355329]
  - cgroup/misc: Introduce misc.events.local (Xiu Jianfeng) [task:451666]
  - mm, slab: clean up slab->obj_exts always (Zhenhua Huang) [task:466594] {CVE-2025-37908}
  - alloc_tag: uninline code gated by mem_alloc_profiling_key in slab allocator (Suren Baghdasaryan) [task:466594]
  - mm: remove CONFIG_MEMCG_KMEM (Johannes Weiner) [task:466594]
  - memcg: remove the lockdep assert from __mod_objcg_mlstate() (Sebastian Andrzej Siewior) [task:466594]
  - memcg: simple cleanup of stats update functions (Shakeel Butt) [task:466594]
  - sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash (Omar Sandoval) [task:462014] {CVE-2025-37821}
  - add ksaf_check_usb_storage_ro hook to set sd write protect flag (Wang Yan) [bug:377825, bug:378285, bug:378369]
  - security/ksaf: add ksaf_check_usb_storage_ro hook (zhubing) [bug:377825, bug:378285, bug:378369]
  - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Pablo Neira Ayuso) [task:491889] {CVE-2025-38201}
  - netfilter: nf_tables: missing objects with no memcg accounting (Pablo Neira Ayuso) [task:491889]
  - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [task:491889]
  - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [task:491889]
  - netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR (Florian Westphal) [task:491889]
  - ethtool: fail closed if we can't get max channel used in indirection tables (Jakub Kicinski) [task:368345] {CVE-2024-46834}
  - IB/mlx5: Fix potential deadlock in MR deregistration (Or Har-Toov) [task:505905] {CVE-2025-38373}
  - RDMA/mlx5: Fix a race for DMABUF MR which can lead to CQE with error (Yishai Hadas) [task:505905]
  - RDMA/mlx5: Fix a WARN during dereg_mr for DM type (Yishai Hadas) [task:448830] {CVE-2025-21888}
  - net: stmmac: enable HW-accelerated VLAN stripping for gmac4 only (Furong Xu) [task:491211]
  - net: stmmac: Fix EST offset for dwmac 5.10 (Kurt Kanzenbach) [task:491211]
  - net: stmmac: make sure that ptp_rate is not 0 before configuring EST (Alexis Lothoré) [task:491211] {CVE-2025-38125}
  - net: stmmac: Refactor EST implementation (Rohan G Thomas) [task:491211]
  - net: stmmac: xgmac: EST interrupts handling (Rohan G Thomas) [task:491211]
  - net: stmmac: Add support for HW-accelerated VLAN stripping (Gan, Yi Fang) [task:491211]
  - net: stmmac: reduce dma ring display code duplication (Baruch Siach) [task:491211]
  - net: stmmac: remove extra newline from descriptors display (Baruch Siach) [task:491211]
  - mm/vmalloc: fix data race in show_numa_info() (Jeongjun Park) [task:505891] {CVE-2025-38383}
  - nvme-tcp: sanitize request list handling (Hannes Reinecke) [task:495931] {CVE-2025-38264}
  - llist: add interface to check if a node is on a list. (NeilBrown) [task:495931]
  - PHYTIUM: Add hotplug and hotreset workaround patch for phytium SoCs (liyouhong) [task:472129]
  - PHYTIUM: iommu: smmuv3: Not print information of SMMU 0x10 event (Xiao Cong) [task:472129]
  - Added 5000C and 5000C_E interfaces (liyouhong) [task:472129]
  - mptcp: make fallback action and fallback decision atomic (Paolo Abeni) [task:507077] {CVE-2025-38491}
  - drm/amdgpu: Add basic validation for RAS header (Lijo Lazar) [task:505911] {CVE-2025-38426}
  - ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers (Peter Ujfalusi) [task:448829] {CVE-2025-21870}
  - ASoC: SOF: Intel: hda-dai: add support for dspless mode beyond HDAudio (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: Intel: lnl: Do not use LNL specific wrappers in DSPless mode (Peter Ujfalusi) [task:448829]
  - ASoC: SOF: Intel: hda-dai-ops: add SoundWire dspless mode (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: Intel: hda-dai-ops: use dai_type (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: topology: Parse DAI type token for dspless mode (Ranjani Sridharan) [task:448829]
  - ASoC: SOF: Intel: start SoundWire links earlier for LNL+ devices (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: topology: dynamically allocate and store DAI widget->private (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: Intel: hda-dai: remove dspless special case (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: ipc4-topology: allow chain_dma for all supported DAIs (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: ipc4-pcm: fix dma_id for CHAIN_DMA capture (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: ipc4: store number of playback/capture streams (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: Intel: hda-dai-ops: enable chain_dma for ALH (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: Intel: hda: add 'is_chain_dma_supported' callback (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: ops: add new 'is_chain_dma_supported' callback (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: ipc4-topology: change chain_dma handling in dai_config (Pierre-Louis Bossart) [task:448829]
  - drm/amd/display: Check dce_hwseq before dereferencing it (Alex Hung) [task:505929] {CVE-2025-38361}
  - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Dong Chenchen) [task:494275] {CVE-2025-38129}
  - drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer (Srinivasan Shanmugam) [task:376435] {CVE-2024-49918}
  - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (David Hildenbrand) [task:444592] {CVE-2025-21861}
  - mm: migrate_device: use more folio in migrate_device_finalize() (Kefeng Wang) [task:444592]
  - Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken (Pedro Nishiyama) [task:491387] {CVE-2025-38099}
  - Bluetooth: Add quirk for broken READ_VOICE_SETTING (Pedro Nishiyama) [task:491387]
  - perf/x86/intel: Fix crash in icl_update_topdown_event() (Kan Liang) [task:497749] {CVE-2025-38322}
  - espintcp: fix skb leaks (Sabrina Dubroca) [task:482005] {CVE-2025-38057}
  - PM: EM: Fix potential division-by-zero error in em_compute_costs() (Yaxiong Tian) [task:497301] {CVE-2025-38297}
  - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Pablo Neira Ayuso) [task:491667] {CVE-2025-38162}
  - jfs: Fix null-ptr-deref in jfs_ioc_trim (Dylan Wolff) [task:491953] {CVE-2025-38203}
  - exfat: fix double free in delayed_free (Namjae Jeon) [task:491873] {CVE-2025-38206}
  - jfs: fix array-index-out-of-bounds read in add_missing_indices (Aditya Dutt) [task:491905] {CVE-2025-38204}
  - f2fs: fix to bail out in get_new_segment() (Chao Yu) [task:497325] {CVE-2025-38333}
  - f2fs: clean up new_curseg() (Chao Yu) [task:497325]
  - f2fs: fix to handle segment allocation failure correctly (Chao Yu) [task:497325]
  - bridge: mcast: Fix use-after-free during router port configuration (Ido Schimmel) [task:495949] {CVE-2025-38248}
  - btrfs: exit after state insertion failure at btrfs_convert_extent_bit() (Filipe Manana) [task:497321] {CVE-2025-38269}
  - btrfs: rename err to ret in convert_extent_bit() (Anand Jain) [task:497321]
  - btrfs: enhance extent_io_tree error reports (David Sterba) [task:497321]
  - btrfs: make extent state merges more efficient during insertions (Filipe Manana) [task:497321]
  - sync-stable: Change the default Cc stable branch target (Jackie Liu)
  - alloc_tag: skip pgalloc_tag_swap if profiling is disabled (Suren Baghdasaryan) [task:510759]
  - wifi: iwlwifi: don't warn when if there is a FW error (Miri Korenblit) [task:491311] {CVE-2025-38096}
  - media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (Wentao Liang) [task:494929] {CVE-2025-38237}
  - sched/rt: Fix race in push_rt_task (Harshit Agarwal) [task:491955] {CVE-2025-38234}
  - ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (Bard Liao) [task:441316] {CVE-2024-58012}
  - drm/amdgpu: csa unmap use uninterruptible lock (Philip Yang) [task:481993] {CVE-2025-38011}
  - perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq (Adrian Hunter) [task:482163] {CVE-2025-38055}
  - clk: sunxi-ng: h616: Reparent GPU clock during frequency changes (Philippe Simons) [task:482123] {CVE-2025-38041}
  - clk: sunxi-ng: h616: Reparent CPU clock during frequency changes (Andre Przywara) [task:482123]
  - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator (Tejun Heo) [task:482029] {CVE-2025-38012}
  - x86/Kconfig: make CFI_AUTO_DEFAULT depend on !RUST or Rust >= 1.88 (Paweł Anikiel) [task:481877] {CVE-2025-38033}
  - x86/alternatives: Make FineIBT mode Kconfig selectable (Kees Cook) [task:481877]
  - rseq: Fix segfault on registration when rseq_cs is non-zero (Michael Jeanson) [task:482245] {CVE-2025-38067}
  - rseq: Update kernel fields in lockstep with CONFIG_DEBUG_RSEQ=y (Michael Jeanson) [task:482245]
  - rseq: Fix rseq registration with CONFIG_DEBUG_RSEQ (Michael Jeanson) [task:482245]
  - rseq: Fix rseq unregistration regression (Mathieu Desnoyers) [task:482245]
  - rseq: Validate read-only fields under DEBUG_RSEQ config (Mathieu Desnoyers) [task:482245]
  - wifi: ath12k: Avoid memory leak while enabling statistics (P Praneesh) [task:460148] {CVE-2025-37743}
  - wifi: ath12k: Refactor the monitor Rx parser handler argument (Karthikeyan Periyasamy) [task:460148]
  - iio: light: opt3001: fix deadlock due to concurrent flag access (Luca Ceresoli) [task:466236] {CVE-2025-37968}
  - cgroup/misc: Introduce misc.peak (Xiu Jianfeng) [task:451667]
  - btrfs: adjust subpage bit start based on sectorsize (Josef Bacik) [task:466619] {CVE-2025-37931}
  - HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX (Tomasz Pakuła) [task:466581] {CVE-2025-37942}
  - mm/memory_hotplug: fix call folio_test_large with tail page in do_migrate_range (Jinjiang Tu) [task:461947]
  - mm/vmscan: don't try to reclaim hwpoison folio (Jinjiang Tu) [task:461947] {CVE-2025-37834}
  - mm/hwpoison: introduce folio_contain_hwpoisoned_page() helper (Jinjiang Tu) [task:461947]
  - mm: memory-hotplug: check folio ref count first in do_migrate_range (Ma Wupeng) [task:461947]
  - mm: memory-failure: update ttu flag inside unmap_poisoned_folio (Ma Wupeng) [task:461947]
  - mm: memory_hotplug: unify Huge/LRU/non-LRU movable folio isolation (Kefeng Wang) [task:461947]
  - mm: migrate: add isolate_folio_to_list() (Kefeng Wang) [task:461947]
  - mm: memory_hotplug: check hwpoisoned page firstly in do_migrate_range() (Kefeng Wang) [task:461947]
  - mm: memory-failure: add unmap_poisoned_folio() (Kefeng Wang) [task:461947]
  - mm: memory_hotplug: remove head variable in do_migrate_range() (Kefeng Wang) [task:461947]
  - mm/memory-failure: correct comment in me_swapcache_dirty (Miaohe Lin) [task:461947]
  - mm/memory-failure: remove obsolete comment in kill_proc() (Miaohe Lin) [task:461947]
  - mm/memory-failure: fix comment of get_hwpoison_page() (Miaohe Lin) [task:461947]
  - mm/memory-failure: move some function declarations into internal.h (Miaohe Lin) [task:461947]
  - mm/memory-failure: remove obsolete comment in unpoison_memory() (Miaohe Lin) [task:461947]
  - mm/memory-failure: use helper macro task_pid_nr() (Miaohe Lin) [task:461947]
  - mm/memory-failure: don't export hwpoison_filter() when !CONFIG_HWPOISON_INJECT (Miaohe Lin) [task:461947]
  - mm/memory-failure: remove confusing initialization to count (Miaohe Lin) [task:461947]
  - mm/memory-failure: remove unneeded empty string (Miaohe Lin) [task:461947]
  - mm/memory-failure: save some page_folio() calls (Miaohe Lin) [task:461947]
  - mm/memory-failure: add macro GET_PAGE_MAX_RETRY_NUM (Miaohe Lin) [task:461947]
  - mm/memory-failure: remove MF_MSG_SLAB (Miaohe Lin) [task:461947]
  - mm/memory-failure: simplify put_ref_page() (Miaohe Lin) [task:461947]
  - mm/memory-failure: pass the folio to collect_procs_ksm() (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: use folio functions throughout collect_procs() (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: add some folio conversions to unpoison_memory (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: convert hwpoison_user_mappings to take a folio (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: convert memory_failure() to use a folio (Matthew Wilcox (Oracle)) [task:461947]
  - mm: convert hugetlb_page_mapping_lock_write to folio (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: convert shake_page() to shake_folio() (Matthew Wilcox (Oracle)) [task:461947]
  - mm: make page_mapped_in_vma conditional on CONFIG_MEMORY_FAILURE (Matthew Wilcox (Oracle)) [task:461947]
  - mm: return the address from page_mapped_in_vma() (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: pass addr to __add_to_kill() (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: remove fsdax_pgoff argument from __add_to_kill (Matthew Wilcox (Oracle)) [task:461947]
  - mm: rename vma_pgoff_address back to vma_address (Matthew Wilcox (Oracle)) [task:461947]
  - mm: remove vma_address() (Matthew Wilcox (Oracle)) [task:461947]
  - mm: correct page_mapped_in_vma() for large folios (Matthew Wilcox (Oracle)) [task:461947]
  - mm: remove invalidate_inode_page() (Matthew Wilcox (Oracle)) [task:461947]
  - mm: convert isolate_page() to mf_isolate_folio() (Matthew Wilcox (Oracle)) [task:461947]
  - mm: convert soft_offline_in_use_page() to use a folio (Matthew Wilcox (Oracle)) [task:461947]
  - mm: use mapping_evict_folio() in truncate_error_page() (Matthew Wilcox (Oracle)) [task:461947]
  - mm: convert __do_fault() to use a folio (Matthew Wilcox (Oracle)) [task:461947]
  - mm: make mapping_evict_folio() the preferred way to evict clean folios (Matthew Wilcox (Oracle)) [task:461947]
  - wifi: ath11k: update channel list in reg notifier instead reg worker (Wen Gong) [task:460079] {CVE-2025-23133}
  - fs/9p: fix NULL pointer dereference on mkdir (Christian Schoenebeck) [task:459142] {CVE-2025-22070}
  - ksmbd: fix use-after-free in ksmbd_session_rpc_open (Namjae Jeon) [task:466583] {CVE-2025-37926}
  - ksmbd: use __GFP_RETRY_MAYFAIL (Namjae Jeon) [task:466583]
  - ksmbd: add support for supplementary groups (Namjae Jeon) [task:466583]
  - ksmbd: Use struct_size() to improve smb_direct_rdma_xmit() (Thorsten Blum) [task:466583]
  - ksmbd: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET) [task:466583]
  - ksmbd: fix use-after-free in session logoff (Sean Heelan) [task:466589] {CVE-2025-37899}
  - mm/slab: fix warning caused by duplicate kmem_cache creation in kmem_buckets_create (Koichiro Den) [task:461208] {CVE-2024-53065}
  - mm/huge_memory: fix dereferencing invalid pmd migration entry (Gavin Guo) [task:466416] {CVE-2025-37958}
  - memblock: Accept allocated memory before use in memblock_double_array() (Tom Lendacky) [task:466578] {CVE-2025-37960}
  - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (Mikhail Lobanov) [task:466248] {CVE-2025-37957}
  - KVM: SVM: Update SEV-ES shutdown intercepts with more metadata (Peter Gonda) [task:466248]
  - iommu: Fix two issues in iommu_copy_struct_from_user() (Nicolin Chen) [task:466414] {CVE-2025-37900}
  - sfc: fix NULL dereferences in ef100_process_design_param() (Edward Cree) [task:459000] {CVE-2025-37860}
  - net: mctp: unshare packets when reassembling (Matt Johnston) [task:450249] {CVE-2025-21972}
  - btrfs: harden block_group::bg_list against list_del() races (Boris Burkov) [task:462585] {CVE-2025-37856}
  - afs: Fix lock recursion (David Howells) [task:392645] {CVE-2024-53090}
  - sctp: add mutual exclusion in proc_sctp_do_udp_port() (Eric Dumazet) [task:459006] {CVE-2025-22062}
  - bnxt_en: Mask the bd_cnt field in the TX BD properly (Michael Chan) [task:458946] {CVE-2025-22108}
  - btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (Boris Burkov) [task:458898] {CVE-2025-22115}
  - mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in split_large_buddy() (David Hildenbrand) [task:421055] {CVE-2024-57881}
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Ranjan Kumar) [task:429483] {CVE-2024-57804}
  - scsi: mpi3mr: Avoid MAX_PAGE_ORDER WARNING for buffer allocations (Shin'ichiro Kawasaki) [task:429483]
  - scsi: mpi3mr: Add missing spin_lock_init() for mrioc->trigger_lock (Shin'ichiro Kawasaki) [task:429483]
  - scsi: mpi3mr: HDB allocation and posting for hardware and firmware buffers (Ranjan Kumar) [task:429483]
  - scsi: mpi3mr: Driver version update to 8.8.1.0.50 (Ranjan Kumar) [task:429483]
  - scsi: mpi3mr: Update MPI Headers to revision 31 (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Debug ability improvements (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Set the WriteSame Divert Capability in the IOCInit MPI Request (Ranjan Kumar) [task:429483]
  - scsi: mpi3mr: Clear ioctl blocking flag for an unresponsive controller (Ranjan Kumar) [task:429483]
  - scsi: mpi3mr: Set MPI request flags appropriately (Ranjan Kumar) [task:429483]
  - scsi: mpi3mr: Block devices are not removed even when VDs are offlined (Ranjan Kumar) [task:429483]
  - scsi: mpi3mr: Replace deprecated strncpy() with assignments (Justin Stitt) [task:429483]
  - scsi: mpi3mr: Reduce stack usage in mpi3mr_refresh_sas_ports() (Arnd Bergmann) [task:429483]
  - scsi: mpi3mr: Fix mpi3mr_fw.c kernel-doc warnings (Randy Dunlap) [task:429483]
  - scsi: mpi3mr: Fix printk() format strings (Arnd Bergmann) [task:429483]
  - scsi: mpi3mr: Update driver version to 8.5.1.0.0 (Chandrakanth patil) [task:429483]
  - scsi: mpi3mr: Support for preallocation of SGL BSG data buffers part-3 (Chandrakanth patil) [task:429483]
  - scsi: mpi3mr: Support for preallocation of SGL BSG data buffers part-2 (Chandrakanth patil) [task:462591]
  - scsi: mpi3mr: Support for preallocation of SGL BSG data buffers part-1 (Chandrakanth patil) [task:429483]
  - scsi: mpi3mr: Fetch correct device dev handle for status reply descriptor (Chandrakanth patil) [task:429483]
  - scsi: mpi3mr: driver version upgrade to 8.5.0.0.50 (Sumit Saxena) [task:429483]
  - scsi: mpi3mr: Add support for status reply descriptor (Sumit Saxena) [task:429483]
  - scsi: mpi3mr: Increase maximum number of PHYs to 64 from 32 (Sumit Saxena) [task:429483]
  - drm/amd/display: prevent hang on link training fail (Brendan Tam) [task:462408] {CVE-2025-37870}
  - net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads (Jonathan Currier) [task:461948] {CVE-2025-37833}
  - net: txgbe: fix memory leak in txgbe_probe() error path (Abdun Nihaal) [task:462854] {CVE-2025-37872}
  - objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq() (Josh Poimboeuf) [task:458971] {CVE-2025-40014}
  - ksmbd: fix null pointer dereference in alloc_preauth_hash() (Namjae Jeon) [task:459701] {CVE-2025-22037}
  - RDMA/mlx5: Fix cache entry update on dereg error (Michael Guralnik) [task:442359]
  - RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (Yishai Hadas) [task:442359] {CVE-2025-21732}
  - RDMA/mlx5: Fix MR cache temp entries cleanup (Michael Guralnik) [task:442359]
  - RDMA/mlx5: Fix counter update on MR cache mkey creation (Michael Guralnik) [task:442359]
  - RDMA/mlx5: Drop redundant work canceling from clean_keys() (Michael Guralnik) [task:442359]
  - RDMA/mlx5: Change check for cacheable mkeys (Or Har-Toov) [task:442359]
  - RDMA/mlx5: Implement mkeys management via LIFO queue (Shay Drory) [task:442359]
  - spi: fsl-qspi: Fix double cleanup in probe error path (Kevin Hao) [task:462583]
  - spi: fsl-qspi: use devm function instead of driver remove (Han Xu) [task:462583] {CVE-2025-37842}
  - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. (Kuniyuki Iwashima) [task:458897] {CVE-2025-22111}
  - net_sched: drr: Fix double list add in class with netem as child qdisc (Victor Nogueira) [task:463929]
  - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV (Srinivasan Shanmugam) [task:458999] {CVE-2025-38104}
  - bpf: Fix kmemleak warning for percpu hashmap (Yonghong Song) [task:461956] {CVE-2025-37807}
  - bpf: Fix bpf_get_smp_processor_id() on !CONFIG_SMP (Andrea Righi) [task:461956]
  - bpf: fix UML x86_64 compile failure (Maciej Żenczykowski) [task:461956]
  - bpf: save extended inner map info for percpu array maps as well (Andrii Nakryiko) [task:461956]
  - bpf: Fix JIT of is_mov_percpu_addr instruction. (Alexei Starovoitov) [task:461956]
  - bpf: handle CONFIG_SMP=n configuration in x86 BPF JIT (Andrii Nakryiko) [task:461956]
  - bpf: inline bpf_map_lookup_elem() helper for PERCPU_HASH map (Andrii Nakryiko) [task:461956]
  - bpf: inline bpf_map_lookup_elem() for PERCPU_ARRAY maps (Andrii Nakryiko) [task:461956]
  - bpf: inline bpf_get_smp_processor_id() helper (Andrii Nakryiko) [task:461956]
  - bpf: add special internal-only MOV instruction to resolve per-CPU addrs (Andrii Nakryiko) [task:461956]
  - arm64: mops: Do not dereference src reg for a set operation (Keir Fraser) [task:462561] {CVE-2025-37846}
  - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (David Thompson) [task:462578] {CVE-2025-37866}
  - fs/ntfs3: Keep write operations atomic (Lizhi Xu) [task:461953] {CVE-2025-37806}
  - fs/ntfs3: Separete common code for file_read/write iter/splice (Konstantin Komarov) [task:461953]
  - fs/ntfs3: Use function file_inode to get inode from file (Konstantin Komarov) [task:461953]
  - mei: vsc: Fix fortify-panic caused by invalid counted_by() use (Hans de Goede) [task:462071] {CVE-2025-37816}
  - scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer() (Chenyuan Yang) [task:461957] {CVE-2025-37826}
  - scsi: ufs: mcq: Use ufshcd_mcq_req_to_hwq() to simplify updating hwq (ChanWoo Lee) [task:461957]
  - accel/ivpu: Fix PM related deadlocks in MS IOCTLs (Jacek Lawrynowicz) [task:462563] {CVE-2025-37848}
  - accel/ivpu: Fix deadlock in ivpu_ms_cleanup() (Jacek Lawrynowicz) [task:462593] {CVE-2025-37847}
  - kernel/dma: Fix the kabi issue (liyouhong) [task:522789]
  - PHYTIUM: pswiotlb: Check if min_align_mask of dma is valid (liyouhong) [task:457982]
  - PHYTIUM: pswiotlb: Pass dma direction to pswiotlb straightly (liyouhong) [task:457982]
  - kernel/dma: Add the dma-pswiotlb intermediate translation layer (liyouhong) [task:435962]
  - PHYTIUM: pswiotlb: Fix kernel panic when the dma phy address is DMA_MAPPING_ERROR (Cui Chao) [task:435962]
  - PHYTIUM: pswiotlb: Add bypass rules of pswiotlb for specific application scenes (liyouhong) [task:435962]
  - PHYTIUM: pswiotlb: Avoid releasing memory repeatedly for coherent dma memory free (Cui Chao) [task:435962]
  - PHYTIUM: pswiotlb: Add support for PS24080 (liyouhong) [task:435962]
  - PHYTIUM: pswiotlb: Adapt for coherent dma memory allocation bypass SMMU (Cui Chao) [task:435962]
  - REDHAT: spec: Fix internal "File listed twice" errors (Prarit Bhargava) [task:506475]
  - REDHAT: spec: enable dependencies generation (Prarit Bhargava) [task:504405]
  - PHYTIUM: mmu_notifiers: Add a new callback in __flush_tlb_range (Haofeng Li) [task:482839, task:514853]
  - PHYTIUM: ras: phytium: Identify and report Phytium custom errors (Haofeng Li) [task:482839, task:514853]
  - PHYTIUM: gpio:phytium: Add driver version messages (Li Yuze) [task:453481, task:482839, task:514853]
  - PHYTIUM: gpio:phytium: Unable and clear irq before register (Li Yuze) [task:453481, task:482839, task:514853]
  - PHYTIUM: gpio: phytium: Improve gpio set affinity logic (Li Yuze) [task:453481, task:482839, task:514853]
  - gpio: gpio-phytium-sgpio: Add Phytium SGPIO driver (Chen Baozi) [task:194813, task:482839, task:514853]
  - PHYTIUM: qspi: phytium: Slove the capacity register configured error issue (Peng Min) [task:453481, task:482839, task:514853]
  - PHYTIUM: qspi: phytium: Capacity register can't be configured without flash node (Peng Min) [task:453481, task:482839, task:514853]
  - PHYTIUM: qspi: phytium: Fix the cmd_port register incorrectly configured issue (Peng Min) [task:453481, task:482839, task:514853]
  - PHYTIUM: qspi: phytium: Dynamically get the clock in the ACPI table (Peng Min) [task:453481, task:482839, task:514853]
  - PHYTIUM: qspi: phytium: Adapt flash different capacity based on CPU MPIDR (Peng Min) [task:453481, task:482839, task:514853]
  - PHYTIUM: UEFI mode acpi table support for qspi/spi driver (Wang Hanmo) [task:453481, task:482839, task:514853]
  - PHYTIUM: qspi: Add QSPI driver version description (Peng Min) [task:453481, task:482839, task:514853]
  - PHYTIUM: i2c-2.0:phytium: Fixed the bug of combining two interrupts. (Wu Jinyong) [task:453481, task:482939, task:514853]
  - PHYTIUM: i2c-v2: Modify the data transfer method (Wu Jinyong) [task:453481, task:482839, task:514853]
  - PHYTIUM: i2c_v2: Add support for phytium i2c-v2 driver (Wu Jinyong) [task:453481, task:482839, task:514853]
  - crypto: algif_hash - fix double free in hash_accept (Ivan Pravdin) [task:482127] {CVE-2025-38079}
  - crypto: lzo - Fix compression buffer overrun (Herbert Xu) [task:476205, task:482097] {CVE-2025-38068}
  - virtgpu: don't reset on shutdown (Michael S. Tsirkin) [task:482143]
  - virtio: break and reset virtio devices on device_shutdown() (Michael S. Tsirkin) [task:482143] {CVE-2025-38064}
  - eventpoll: don't decrement ep refcount while still holding the ep mutex (Linus Torvalds) [task:502303] {CVE-2025-38349}
  - livepatch/test_module: Fix compilation errors on ARM (wudandan) [task:425656]
  - EULER: scheduler: Disable cluster scheduling by default (Yicong Yang) [task:485185]
  - EULER: scheduler: Add boot time enabling/disabling of cluster scheduling (Tim Chen) [task:485185]
  - EULER: scheduler: Add runtime knob sysctl_sched_cluster (Tim Chen) [task:485185]
  - EULER: scheduler: Create SDTL_SKIP flag to skip topology level (Tim Chen) [task:485185]
  - loongarch/config: Enable randomize_kstack_offset_default (lifangxu) [task:502241]
  - LoongArch: Remove STACK_FRAME_NON_STANDARD(do_syscall) (Tiezhu Yang) [task:502241]
  - LoongArch: Add RANDOMIZE_KSTACK_OFFSET support (Jinjie Ruan) [task:502241]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.10.v2505
changelog:
  - REDHAT: rpmbuild: Remove stale .tmp_versions code and comments (Prarit Bhargava) [task:557881]
  - REDHAT: BuildRequires: lld for build with selftests for x86 (Jan Stancek) [task:557337]
  - net: fix kabi broken problem (xiaolinkui) [task:556049]
  - sched/qos:fix QOS validation logic in sched_setscheduler() (fangqiurong) [task:556331]
  - bpf: fix kabi broken problem (chenyuan) [task:556365]
  - net: fix kabi broken problem. (renpanpan) [task:556055]
  - enable auto_bind_blkcg_memcg in generic_defconfig for x86 and arm64 (wangsong) [task:527359]
  - OPENEULER: cgroup_writeback: bind blkcg and memcg (wangyigen) [task:527359]
  - enable cgroup1_writeback in generic_defconfig for x86 and arm64 (wangsong) [task:527359]
  - OPENEULER: cgroup_writeback: fix deadlock in cgroup1_writeback (Chen Ridong) [task:527359]
  - OPENEULER: cgroup: support cgroup writeback on cgroupv1 (chenridong) [task:527359]
  - OPENEULER: cgroup: factor out __cgroup_get_from_id() for cgroup v1 (Lu Jialin) [task:527359]
  - KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state (Mark Rutland) [task:459154] {CVE-2025-22013}
  - sched/qos: Introduce multiple qos level (link) [task:514359]
  - sched/ext: Fix invalid task state transitions on class switch (Andrea Righi) [task:530287] {CVE-2025-39780}
  - sched/ext: Fix scx vs sched_delayed (Peter Zijlstra) [task:530287]
  - sched: Pass correct scheduling policy to __setscheduler_class (Aboorva Devarajan) [task:530287]
  - bpf: Do not include stack ptr register in precision backtracking bookkeeping (Yonghong Song) [task:497309] {CVE-2025-38279}
  - fs: fix is_mnt_ns_file() (Miklos Szeredi) [task:548039]
  - inotify: Fix possible deadlock in fsnotify_destroy_mark (Lizhi Xu) [task:551249]
  - HYGON: arch: Use hlt instead of mwait in cpuidle (zenghongling) [bug:426023]
  - OPENEULER: locking/osq_lock: Avoid false sharing in optimistic_spin_node (Zeng Heng) [task:464565, task:551411]
  - net/sched: sch_qfq: Fix null-deref in agg_dequeue (Xiang Mei) [task:547995] {CVE-2025-40083}
  - readahead: Fix null-ptr-deref in page_cache_ra_unbounded (zhangguodong) [task:533283]
  - fix build kylin security err (mengdehui) [task:546003, task:546001]
  - KVM: arm64: Prevent access to vCPU events before init (Oliver Upton) [task:547765] {CVE-2025-40102}
  - bcache: code cleanup in __bch_bucket_alloc_set() (Coly Li) [task:547435]
  - bcache: call force_wake_up_gc() if necessary in check_should_bypass() (Coly Li) [task:547435]
  - bcache: allow allocator to invalidate bucket in gc (Dongsheng Yang) [task:547435]
  - iommu/vt-d: Disallow dirty tracking if incoherent page walk (Lu Baolu) [task:546613] {CVE-2025-40058}
  - coresight: Fix incorrect handling for return value of devm_kzalloc (Lin Yujun) [task:546805] {CVE-2025-40059}
  - LoongArch: drivers/irqchip: Disable pci_irq_limit when using avec interrupt controller (Juxin Gao) [task:396165]
  - LOONGSON: LoongArch: prevent LS7A Bus Master clearing on kexec (Ming Wang) [task:396165]
  - LOONGSON: LoongArch: limit min pci msi-x/msi vector number when request more than 32 vectors (Juxin Gao) [task:396165]
  - LOONGSON: PCI: irq: Add early_param pci_irq_limit to limit pci irq numbers (Juxin Gao) [task:396165]
  - ALSA: seq: oss: Send fragmented SysEx messages immediately (Takashi Iwai) [task:429534] {CVE-2024-57893}
  - bpf: Forget ranges when refining tnum after JSET (Paul Chaignon) [task:530315] {CVE-2025-39748}
  - netfilter: ctnetlink: remove refcounting in expectation dumpers (Florian Westphal) [task:530227] {CVE-2025-39764}
  - wifi: ath10k: shutdown driver when hardware is unreliable (Kang Yang) [task:530243] {CVE-2025-39746}
  - wifi: ath10k: replace ENOTSUPP with EOPNOTSUPP (Karthikeyan Periyasamy) [task:530243]
  - driver/tpm: fix NULL err when creat vtpm (mengdehui) [task:519155]
  - kalert: Add macros to simplify event report (Huiwen He) [task:470213]
  - kalert: add eBPF kfunc bpf_kalert_report_event (Huiwen He) [task:470213]
  - kalert: add some new types and bitmap-based event list subscription (Huiwen He) [task:470213]
  - kalert: optimize fault event dispatch logic (Huiwen He) [task:470213]
  - kalert: add subscribe kernel fault events support (Huiwen He) [task:470213]
  - kalert: add get kalert channel runtime status support (Huiwen He) [task:470213]
  - kalert: modify kalert_send_reply to accept a prepared skb (Huiwen He) [task:470213]
  - kalert: add set kalert channel parameter support (Huiwen He) [task:470213]
  - kalert: introduce doit mechanism and support nlattr policy (Huiwen He) [task:470213]
  - kalert: Introduce netlink_rcv_skb to handle recv messages (Huiwen He) [task:470213]
  - ksaf: add ksaf_do_exit hook (penghuaihe) [bug:387419]
  - RDMA/hns: Fix double destruction of rsv_qp (wenglianfa) [task:520743] {CVE-2025-38582}
  - Loongarch: Adjust SHMLBA to PAGE_SIZE and use generic SHMLBA (zhangtianyang) [task:528621]
  - parse_longname(): strrchr() expects NUL-terminated string (Al Viro) [task:523423] {CVE-2025-38660}
  - ZHAOXIN: perf/zhaoxin/uncore: Enhance uncore support and fix related bugs (leoliu-oc) [task:527471]
  - KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs (Ewan Hai) [task:527471]
  - wifi: ath12k: Fix memory leak due to multiple rx_stats allocation (Sidhanta Sahu) [task:491947] {CVE-2025-38199}
  - drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities (Peter Shkenev) [task:527977] {CVE-2025-39707}
  - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() (Baochen Qiang) [task:527987] {CVE-2025-39732}
  - wifi: ath11k: mac: fix struct ieee80211_sband_iftype_data handling (Kalle Valo) [task:527987]
  - ext4: Make sure BH_New bit is cleared in ->write_end handler (Jan Kara) [task:527387]
  - userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry (Suren Baghdasaryan) [task:527587] {CVE-2025-38686}
  - gfs2: Validate i_depth for exhash directories (Andrew Price) [task:527583] {CVE-2025-38710}
  - gfs2: Improve gfs2_consist_inode() usage (Andrew Price) [task:527583]
  - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (Zqiang) [task:527575] {CVE-2025-38704}
  - rcu/nocb: Use kthread parking instead of ad-hoc implementation (Frederic Weisbecker) [task:527575]
  - rcu/nocb: Fix segcblist state machine stale comments about timers (Frederic Weisbecker) [task:527575]
  - rcu/nocb: Fix segcblist state machine comments about bypass (Frederic Weisbecker) [task:527575]
  - rcu/nocb: Re-arrange call_rcu() NOCB specific code (Frederic Weisbecker) [task:527575]
  - rcu/nocb: Remove needless LOAD-ACQUIRE (Frederic Weisbecker) [task:527575]
  - nilfs2: do not force clear folio if buffer is referenced (Ryusuke Konishi) [task:440428] {CVE-2025-21722}
  - docs: add KYLIN version range checking macros documentation (Jackie Liu)
  - Revert "selftests: mptcp: join: disable get and dump addr checks" (Gang Yan) [task:525537]
  - iommu/amd: Avoid stack buffer overflow from kernel cmdline (Kees Cook) [task:524419] {CVE-2025-38676}
  - xen: fix UAF in dmabuf_exp_from_pages() (Al Viro) [task:520551] {CVE-2025-38595}
  - bpf: Reject narrower access to pointer ctx fields (Paul Chaignon) [task:520583] {CVE-2025-38591}
  - HID: core: Harden s32ton() against conversion to 0 bits (Alan Stern) [task:520575] {CVE-2025-38556}
  - HID: stop exporting hid_snto32() (Dmitry Torokhov) [task:520575]
  - HID: simplify snto32() (Dmitry Torokhov) [task:520575]
  - eventpoll: Fix semi-unbounded recursion (Jann Horn) [task:520569] {CVE-2025-38614}
  - iio: common: st_sensors: Fix use of uninitialize device structs (Maud Spierings) [task:520121] {CVE-2025-38531}
  - iio: st_sensors: relax WhoAmI check in st_sensors_verify_id() (Kaustabh Chakraborty) [task:520121]
  - KVM: Allow CPU to reschedule while setting per-page memory attributes (Liam Merwick) [task:520115] {CVE-2025-38506}
  - coresight: change coresight_device lock type to raw_spinlock_t (Yeoreum Yun) [task:491391] {CVE-2025-38132}
  - bnxt_en: Fix memory corruption when FW resources change during ifdown (Sreekanth Reddy) [task:532161] {CVE-2025-39810}
  - bnxt_en: Fix possible crash after creating sw mqprio TCs (Michael Chan) [task:532161]
  - crypto: x86/aegis - Add missing error checks (Eric Biggers) [task:530263] {CVE-2025-39789}
  - crypto: x86/aegis - Fix sleeping when disallowed on PREEMPT_RT (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - remove unneeded RETs (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - remove unneeded FRAME_BEGIN and FRAME_END (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - take advantage of block-aligned len (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - optimize partial block handling using SSE4.1 (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - improve assembly function prototypes (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - optimize length block preparation using SSE4.1 (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - don't bother with special code for aligned data (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - eliminate some indirect calls (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - remove no-op init and exit functions (Eric Biggers) [task:530263]
  - security/ksaf: add ksaf hook on usb_deauthorized_device (zhubing) [task:528675]
  - md: make rdev_addable usable for rcu mode (Yang Erkun) [task:523635] {CVE-2025-38621}
  - fs/proc/task_mmu: check p->vec_buf for NULL (Jakub Acs) [task:543785] {CVE-2025-40009}
  - net/smc: fix warning in smc_rx_splice() when calling get_page() (Sidraya Jayagond) [task:543787] {CVE-2025-40012}
  - kydima/build: fix build waring for copy_from_user (mengdehui) [task:537689]
  - mm: swap: check for stable address space before operating on the VMA (Charan Teja Kalla) [task:542815] {CVE-2025-39992}
  - wifi: rtl8xxxu: mark thread_exit() as __noreturn (Jackie Liu) [task:510759]
  - can: j1939: implement NETDEV_UNREGISTER notification handler (Tetsuo Handa) [task:540235] {CVE-2025-39925}
  - net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (Eric Dumazet) [task:540197] {CVE-2025-39900}
  - mm/userfaultfd: fix kmap_local LIFO ordering for CONFIG_HIGHPTE (Sasha Levin) [task:539893] {CVE-2025-39899}
  - dm-stripe: fix a possible integer overflow (Mikulas Patocka) [task:538939] {CVE-2025-39940}
  - dm-stripe: limit chunk_sectors to the stripe size (John Garry) [task:538939]
  - dm: stop using blk_limits_io_{min,opt} (Christoph Hellwig) [task:538939]
  - dm-verity: provide dma_alignment limit in io_hints (Eric Biggers) [task:538939]
  - procfs: fix a locking bug in a vmcore_add_device_dump() error path (Bart Van Assche) [task:451697]
  - virtio-mem: support CONFIG_PROC_VMCORE_DEVICE_RAM (David Hildenbrand) [task:451697]
  - virtio-mem: remember usable region size (David Hildenbrand) [task:451697]
  - virtio-mem: mark device ready before registering callbacks in kdump mode (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: introduce PROC_VMCORE_DEVICE_RAM to detect device RAM ranges in 2nd kernel (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: factor out freeing a list of vmcore ranges (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: factor out allocating a vmcore range and adding it to a list (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: move vmcore definitions out of kcore.h (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: prefix all pr_* with "vmcore:" (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: disallow vmcore modifications while the vmcore is open (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: replace vmcoredd_mutex by vmcore_mutex (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: convert vmcore_cb_lock into vmcore_mutex (David Hildenbrand) [task:451697]
  - net/tcp: Fix socket memory leak in TCP-AO failure handling for IPv6 (Christoph Paasch) [task:534345] {CVE-2025-39852}
  - net: macb: fix unregister_netdev call order in macb_remove() (luoguangfei) [task:532217] {CVE-2025-39805}
  - net: macb: Convert tasklet API to new bottom half workqueue mechanism (Allen Pais) [task:532217]
  - HYGON: cpu IBRS mitigates hardware vulnerabilities (zhangjun) [task:516399]
  - HYGON: cpu IBPB command flushes all BTB branches (zhangjun) [task:516399]
  - HYGON: crypto: ccp: fix The high priority queue changes cmd_id of the queued elements (xiongmengbiao) [task:516399]
  - HYGON: crypto: ccp: support psp generic ringbuffer (xiongmengbiao) [task:516399]
  - HYGON: crypto: ccp: Remove vpsp's dependency on sev module (xiongmengbiao) [task:516399]
  - HYGON: crypto: ccp: add new pci device id for D3 (chench) [task:516399]
  - mISDN: hfcpci: Fix warning when deleting uninitialized timer (Vladimir Riabchun) [task:532231] {CVE-2025-39833}
  - sched/fair: Fix frequency selection for non-invariant case (Vincent Guittot) [task:525135]
  - panic: implement nmi_panic_self_stop function for KunPeng 920 (liqiang01) [task:515025]
  - wifi: prevent A-MSDU attacks in mesh networks (Mathy Vanhoef) [task:502609]
  - ptp: Add a upper bound on max_vclocks (I Viswanath) [task:546801] {CVE-2025-40057}
  - ptp: prevent possible ABBA deadlock in ptp_clock_freerun() (Jeongjun Park) [task:546801]
  - vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (Ido Schimmel) [task:534331] {CVE-2025-39851}
  - net: vxlan: make vxlan_snoop() return drop reasons (Menglong Dong) [task:534331]
  - net: vxlan: add skb drop reasons to vxlan_rcv() (Menglong Dong) [task:534331]
  - net: tunnel: add pskb_inet_may_pull_reason() helper (Menglong Dong) [task:534331]
  - net: skb: add pskb_network_may_pull_reason() helper (Menglong Dong) [task:534331]
  - vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann) [task:534331]
  - Revert "vxlan: Fix regression when dropping packets due to invalid src addresses" (xiaolinkui) [task:534331]
  - LoongArch: Add debugfs entries to switch SFB/TSO state (Huacai Chen) [task:516389]
  - padata: Fix pd UAF once and for all (Herbert Xu) [task:520537] {CVE-2025-38584}
  - ZHAOXIN: x86/microcode: Add Zhaoxin cpu microcode update driver (Lyle Li) [task:527471, bug:408427]
  - x86/microcode: Consolidate the loader enablement checking (Borislav Petkov (AMD)) [task:464978]
  - OPENEULER: Improve virtCCA CVM vtimer irq inject method. (yxk) [task:533209]
  - OPENEULER: Add poll method for nfs for virtCCA CVM. (hjx_gitff) [task:533209]
  - OPENEULER: Add dynamic wfx trap method for virtCCA CVM. (hjx_gitff) [task:533209]
  - OPENEULER: Add IPI direct inject method for virtCCA CVM. (yxk) [task:533209]
  - PHYTIUM: mtd: Fix issues with standard descriptions (Wang Hanmo) [task:453481, task:521167]
  - skbuff: Add MSG_MORE flag to optimize tcp large packet transmission (Feng Yang) [task:531623]
  - net/sched: Fix backlog accounting in qdisc_dequeue_internal (William Liu) [task:527995] {CVE-2025-39677}
  - net_sched: Flush gso_skb list too during ->change() (Cong Wang) [task:467324, task:527995]
  - bpf: abort verification if env->cur_state->loop_entry != NULL (Eduard Zingerman) [task:481875]
  - bpf: don't do clean_live_states when state->loop_entry->branches > 0 (Eduard Zingerman) [task:476205, task:481875]
  - selftests/bpf: test correct loop_entry update in copy_verifier_state (Eduard Zingerman) [task:481875]
  - bpf: copy_verifier_state() should copy 'loop_entry' field (Eduard Zingerman) [task:481875] {CVE-2025-38060}
  - net: allow small head cache usage with large MAX_SKB_FRAGS values (Paolo Abeni) [task:448808] {CVE-2025-21868}
  - OPENEULER: drivers/iommu: Fix the initialization failure issue of the iommu module (Xianglai Li) [task:515409]
  - LOONGSON: LoongArch: KVM: Enhance the robustness of extioi (Xianglai Li) [task:515411]
  - LOONGSON: LoongArch: KVM: Solve the problem of starting up the upstream qemu (Song Gao) [task:515411]
  - LOONGSON: LoongArch: KVM: Fix the extioi simulation error (Xianglai Li) [task:515411]
  - Remove sensitive words (lihaofeng) [task:524131]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.12.v2505
changelog:
  - OPENEULER: irqchip: gic-v3: Collection table support muti pages (wangwudi) [task:551457]
  - LoongArch/config: Enable eMMC and Codec ES8323 Support. (lifangxu) [task:570975]
  - LOONGSON: LoongArch: 2K3000: pci scan: Limit the scope of pci scan without fun0. (wanghongliang) [task:570975]
  - LOONGSON: Revert "LoongArch: megaraid: Add udelay to avoid data error caused by dma sequence" (lifangxu) [task:570975]
  - ASoC: codec: sma1307: Fix memory corruption in sma1307_setting_loaded() (Dan Carpenter) [task:570975]
  - ASoC: sma1307: Fix error handling in sma1307_setting_loaded() (Dan Carpenter) [task:570975]
  - ASoC: sma1307: Add NULL check in sma1307_setting_loaded() (Chenyuan Yang) [task:570975]
  - ASoC: sma1307: Use SOC_SINGLE_EXT() helper macro (Charles Keepax) [task:570975]
  - ASoC: Drop explicit initialization of struct i2c_device_id::driver_data to 0 (Uwe Kleine-König) [task:570975]
  - ASoC: sma1307: fix uninitialized variable refence (Arnd Bergmann) [task:570975]
  - ASoC: sma1307: Fix invalid logical judgement (Tang Bin) [task:570975]
  - ASoC: sma1307: Add driver for Iron Device SMA1307 (Kiseok Jo) [task:570975]
  - ASoC: dt-bindings: irondevice,sma1307: Add initial DT (Kiseok Jo) [task:570975]
  - ASoC: cs42l84: Remove unused including <linux/version.h> (Jiapeng Chong) [task:570975]
  - ASoC: cs42l84: remove incorrect of_match_ptr() (Arnd Bergmann) [task:570975]
  - ASoC: dapm: fix bounds checker error in dapm_widget_list_create (Aleksei Vetrov) [task:570975]
  - ASoC: dt-bindings: Add CS42L84 codec (Martin Povišer) [task:570975]
  - ASoC: cs42l84: leverage ring sense IRQs to correctly detect headsets (James Calligeros) [task:570975]
  - ASoC: cs42l84: Add new codec driver (Martin Povišer) [task:570975]
  - ASoC: codecs: fix error code in ntp8835_i2c_probe() (Harshit Mogalapalli) [task:570975]
  - ASoC: codecs: Remove unneeded semicolon (Yang Li) [task:570975]
  - ASoC: codecs: Add NeoFidelity NTP8835 codec (Igor Prusov) [task:570975]
  - ASoC: dt-bindings: Add NeoFidelity NTP8835 (Igor Prusov) [task:570975]
  - ASoC: codecs: Add NeoFidelity NTP8918 codec (Igor Prusov) [task:570975]
  - ASoC: dt-bindings: Add NeoFidelity NTP8918 (Igor Prusov) [task:570975]
  - ASoC: codecs: Add NeoFidelity Firmware helpers (Igor Prusov) [task:570975]
  - ASoC: codecs: Fix error check in es8323_i2c_probe (Tang Bin) [task:570975]
  - ASoC: dt-bindings: Add Loongson I2S controller (Binbin Zhou) [task:570975]
  - ASoC: codecs: Add uda1342 codec driver (Binbin Zhou) [task:570975]
  - ASoC: dt-bindings: Add NXP uda1342 Codec (Binbin Zhou) [task:570975]
  - ASoC: codecs: Add support for ES8323 (Binbin Zhou) [task:570975]
  - ASoC: dt-bindings: Add Everest ES8323 Codec (Binbin Zhou) [task:570975]
  - ASoC: es8311: dt-bindings: add everest es8311 codec (Matteo Martelli) [task:570975]
  - ASoC: codecs: es8311: add everest es8311 codec support (Matteo Martelli) [task:570975]
  - cpufreq: loongson3-acpi-cpufreq: Adaptation for 3C6000 (wudandan) [bug:457391]
  - LoongArch: Mask all interrupts during kexec/kdump (Huacai Chen) [task:570975]
  - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 (Ming Wang) [task:570975]
  - cpu/hotplug: Fix kabi change in enum cpuhp_state (lifangxu) [task:570975]
  - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads (Xianglai Li) [task:570975]
  - genirq/kexec: Prevent redundant IRQ masking by checking state before shutdown (Eliav Farber) [task:570975]
  - kexec: Consolidate machine_kexec_mask_interrupts() implementation (Eliav Farber) [task:570975]
  - LoongArch: For all possible CPUs setup logical-physical CPU mapping (Huacai Chen) [task:570975]
  - LoongArch: Enable ACPI BGRT handling (Bibo Mao) [task:570975]
  - LoongArch: Always enumerate MADT and setup logical-physical CPU mapping (Huacai Chen) [task:570975]
  - mmc: loongson2: Unify the function prefixes for loongson2_mmc_pdata (Binbin Zhou) [task:570975]
  - mmc: loongson2: Fix error code in loongson2_mmc_resource_request() (Dan Carpenter) [task:570975]
  - mmc: loongson2: prevent integer overflow in ret variable (Sergio Perez Gonzalez) [task:570975]
  - mmc: loongson2: Add Loongson-2K2000 SD/SDIO/eMMC controller driver (Binbin Zhou) [task:570975]
  - dt-bindings: mmc: loongson,ls2k0500-mmc: Add compatible for Loongson-2K2000 (Binbin Zhou) [task:570975]
  - mmc: select REGMAP_MMIO with MMC_LOONGSON2 (Mikko Rapeli) [task:570975]
  - mmc: wmt-sdmmc: fix compile test default (Johan Hovold) [task:570975]
  - mmc: add COMPILE_TEST to multiple drivers (Mikko Rapeli) [task:570975]
  - mmc: loongson2: Add Loongson-2K SD/SDIO controller driver (Binbin Zhou) [task:570975]
  - dt-bindings: mmc: Add Loongson-2K SD/SDIO/eMMC controller binding (Binbin Zhou) [task:570975]
  - LOONGSON: LoongArch: pci/quirks: 2k3000: set discrete GPU as default boot device if present (Tianrui Zhao) [task:570975]
  - LOONGSON: LoongArch: pci/quirks: ls7a2000: fix pm transition of devices under pcie port (Zhao Qunqin) [task:570975]
  - HYGON: x86/cpufeatures: Rename X86_FEATURE_SM{3,4} to X86_FEATURE_HYGON_SM{3,4} (hanliyang) [task:542911]
  - HYGON: x86: mm: Fix objtool warning about bool noinstr csv3_active() (hanliyang) [task:542911]
  - OPENEULER: crypto: hisilicon/trng - support tfms sharing the device (Weili Qian) [task:573539]
  - OPENEULER: crypto: hisilicon/trng - use DEFINE_MUTEX() and LIST_HEAD() (Weili Qian) [task:573539]
  - mm: fix arithmetic for max_prop_frac when setting max_ratio (Jingbo Xu) [task:573571]
  - mm: fix arithmetic for bdi min_ratio (Jingbo Xu) [task:573571]
  - task_work: Fix NMI race condition (Peter Zijlstra) [task:573553]
  - mm/memcontrol: add oom.group on cgroup-v1 (cuiyudong) [task:527359]
  - Add kaslr support for SUNWAY (liuyunchen) [task:564183]
  - OPENEULER: virtcca: Add missing includes for DECLARE_PER_CPU (baogen shang) [task:558853]
  - HYGON: x86/csv: Add function to get free size of CSV3 CMA (NiZhiguang) [task:542911]
  - HYGON: crypto: ccp: Fix the update decision logic when upgrading Hygon CSV firmware (NiZhiguang) [task:542911]
  - HYGON: KVM: SVM: CSV is unsupported if both the firmware with a build ID < 1878 and SME is not in use (hanliyang) [task:542911]
  - HYGON: KVM: SVM: The ASID range available for CSV2 guests vary across different firmware (hanliyang) [task:542911]
  - HYGON: Revert "mm/cma: add API to enable concurrent allocation from the CMA" (Ge Yang) [task:542911]
  - HYGON: Revert "x86/mm: CSV allows CMA allocation concurrently" (Ge Yang) [task:542911]
  - HYGON: Revert "KVM: SEV: Pin SEV guest memory out of CMA area" (Ge Yang) [task:542911]
  - HYGON: KVM: SVM: CSV: fix CSV3 launch failures because of concurrent longterm pin (yangge) [task:542911]
  - HYGON: crypto: ccp: Get api version again when update Hygon CSV firmware at runtime (hanliyang) [task:542911]
  - HYGON: KVM: SVM: CSV: Fix the vm_size even if CSV3 feature is unsupported on Hygon CPUs (hanliyang) [task:542911]
  - ext4: fix incorrect punch max_end (Zhang Yi) [task:550691]
  - ext4: fix out of bounds punch offset (Zhang Yi) [task:527381, task:550691] {CVE-2025-38221}
  - ext4: refactor ext4_punch_hole() (Zhang Yi) [task:550691]
  - ext4: don't write back data before punch hole in nojournal mode (Zhang Yi) [task:476205, task:550691]
  - ext4: remove writable userspace mappings before truncating page cache (Zhang Yi) [task:476205, task:550691]
  - ext4: passing block allocation information to ext4_es_insert_extent() (Zhang Yi) [task:550691]
  - ext4: factor out ext4_map_create_blocks() to allocate new blocks (Zhang Yi) [task:485149, task:550691]
  - OPENEULER: iommu/arm-smmu-v3: Reducing the CMD_SYNC times (Zhang Zekun) [task:550683]
  - gfs2: Fix unlikely race in gdlm_put_lock (Andreas Gruenbacher) [task:566421] {CVE-2025-40242}
  - gfs2: Unlock fewer glocks on unmount (Andreas Gruenbacher) [task:566421]
  - security/ksaf: add usb deauthorize and authorize interface (zhubing) [bug:405011]
  - OPENEULER: arm-smmu-v3: add 'HIP10C' for 162100602 errata (Hongye Lin) [task:550687]
  - OPENEULER: iommu/arm-smmu-v3: Fix the compile warning (Zhang Zekun) [task:550685]
  - OPENEULER: iommu/arm-smmu-v3: Change the style to identify the the hisi_platform (Zhang Zekun) [task:550681]
  - x86/CPU/AMD: Add X86_FEATURE_ZEN6 (Yazen Ghannam) [task:551755]
  - x86/cpufeatures: Free up unused feature bits (Sohil Mehta) [task:551755]
  - x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range (Perry Yuan) [task:551755]
  - x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range (Wenkuan Wang) [task:551755]
  - x86/CPU/AMD: Add more models to X86_FEATURE_ZEN5 (Mario Limonciello) [task:551755]
  - x86/CPU/AMD: Add X86_FEATURE_ZEN5 (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Drop now unused CPU erratum checking function (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Get rid of amd_erratum_1485[] (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Get rid of amd_erratum_400[] (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Get rid of amd_erratum_383[] (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Rename init_amd_zn() to init_amd_zen_common() (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Call the spectral chicken in the Zen2 init function (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function (Borislav Petkov (AMD)) [task:551755]
  - Fix the issue with the description of the changelog body (Qingshuang Fu) [task:560729]
  - smb: client: validate change notify buffer before copy (Joshua Rogers) [task:557347]
  - kernel version changelog generation and normalization script (Qingshuang Fu) [task:543713]
  - mm: kmem: add lockdep assertion to obj_cgroup_memcg (Muchun Song) [task:553143]
  - memcg: replace memcg ID idr with xarray (Shakeel Butt) [task:553143]
  - task_stack: uninline stack_not_used (Pasha Tatashin) [task:553143]
  - vmstat: kernel stack usage histogram (Pasha Tatashin) [task:553143]
  - memcg: increase the valid index range for memcg stats (Shakeel Butt) [task:553143]
  - mm: kmem: remove mem_cgroup_from_obj() (Muchun Song) [task:553143]
  - Documentation/cgroup-v2: clarify that zswap.writeback is ignored if zswap is disabled (Mike Yuan) [task:553143]
  - selftests: test_zswap: add test for hierarchical zswap.writeback (Mike Yuan) [task:553143]
  - selftests: cgroup: add tests to verify the zswap writeback path (Usama Arif) [task:553143]
  - mm/memcontrol: respect zswap.writeback setting from parent cg too (Mike Yuan) [task:553143]
  - mm: memcg: adjust the warning when seq_buf overflows (Xiu Jianfeng) [task:553143]
  - mm: memcg: remove redundant seq_buf_has_overflowed() (Xiu Jianfeng) [task:553143]
  - mm: memcontrol: add VM_BUG_ON_FOLIO() to catch lru folio in mem_cgroup_migrate() (Baolin Wang) [task:553143]
  - mm: zswap: rename is_zswap_enabled() to zswap_is_enabled() (Yosry Ahmed) [task:553143]
  - mm: memcontrol: remove page_memcg() (Kefeng Wang) [task:553143]
  - mm: memcg: make alloc_mem_cgroup_per_node_info() return bool (Xiu Jianfeng) [task:553143]
  - mm: list_lru: remove unused macro list_lru_init_key() (Haifeng Xu) [task:553143]
  - mm: list_lru: disable memcg_aware when cgroup.memory is set to "nokmem" (Haifeng Xu) [task:553143]
  - mm: memcg: don't periodically flush stats when memcg is disabled (T.J. Mercier) [task:553143]
  - mm: memcontrol: don't throttle dying tasks on memory.high (Johannes Weiner) [task:553143]
  - wifi: Add the NULL pointer check in 8852cu (ligongwei) [bug:439747]
  - OPENEULER: cpu/SMT: recover global num_threads after disable smt switch fail (Bowen You) [task:551731]
  - bonding: avoid send_ns_work UAF when toggling ns_probe_active (pengyu) [task:558047]
  - configs: Disable CPU mitigations for the biv kernel (Can Peng) [task:526685]
  - mm: don't try THP alignment for FS without get_unmapped_area (Kefeng Wang) [task:560261]
  - mm: respect mmap hint address when aligning for THP (Kalesh Singh) [task:560261]
  - mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes (Vlastimil Babka) [task:560261]
  - LoongArch: Workaround of the address calculation on iommu (Li Jun) [bug:457413]
  - OPENEULER: iommu/loongarch: fix potential hung task when error occurred (Hongchen Zhang) [task:562101]
  - LoongArch: add iommu support (Guopeng Zhang) [task:562101]
  - ext4: disambiguate the return value of ext4_dio_write_end_io() (Jinliang Zheng) [task:551735]
  - ext4: dax: keep orphan list before truncate overflow allocated blocks (yangerkun) [task:551735]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.13.v2505
changelog:
  - sched/core: Guard sched_change_qos_group call with CONFIG_CGROUP_SCHED (Qingshuang Fu) [task:604801]
  - Revert "mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()" (Haofeng.Li) [task:603671]
  - Revert "tools: Restore built-in rules for subdirectory tool compilation" (Riwen Lu) [task:603673]
  - HYGON: crypto: ccp: ensure kvm_bind_vtkm is only executed once for csv guest (xiongmengbiao) [task:585007]
  - HYGON: KVM: SVM: CSV: Return 0 at the beginning of csv_guest_hygon_coco_extension() for non-CSV3 VMs (hanliyang) [task:585007]
  - OPENEULER: sched/core: Add sched_change_qos_group() in sched_cgroup_fork() (Wang Tao) [task:550675]
  - net: tcp: add tcp no delay ack function (Chenguang Zhao) [task:546453]
  - crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (Lukas Wunner) [task:502609, task:466580]
  - KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (Sean Christopherson) [task:567291] {CVE-2025-40274}
  - KVM: guest_memfd: Remove RCU-protected attribute from slot->gmem.file (Yan Zhao) [task:567291]
  - blk-throttle: fix throtl_data leak during disk release (Yu Kuai) [task:555269]
  - blk-throttle: fix access race during throttle policy activation (Han Guangjiang) [task:555269] {CVE-2025-40147}
  - mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc() (Uladzislau Rezki (Sony)) [task:540443] {CVE-2025-39910}
  - sched/qos: only check cfs tasks in sched_qos_offline_wait (liwanwu) [task:579595]
  - arm64/mm: Drop setting PTE_TYPE_PAGE in pte_mkcont() (Anshuman Khandual) [task:505365]
  - arm64/mm: Re-organize arch_make_huge_pte() (Anshuman Khandual) [task:505365]
  - PCI/AER: Fix NULL pointer access by aer_info (Vernon Yang) [task:573049] {CVE-2025-68309}
  - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (Raphael Pinsonneault-Thibeault) [task:567353] {CVE-2025-40283}
  - PHYTIUM: drm/phytium: Bugfix lane count parameter can't be set problem (WangHao) [task:563605]
  - PHYTIUM: drm/phytium: Read EDID in BMC mode (WangHao) [task:563605]
  - tools: Restore built-in rules for subdirectory tool compilation (Riwen Lu) [task:443119]
  - ANOLIS: x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs (Xiaochen Shen) [task:573587]
  - net: netpoll: fix incorrect refcount handling causing incorrect cleanup (Breno Leitao) [task:573173] {CVE-2025-68245}
  - crypto: rng - Ensure set_ent is always present (Herbert Xu) [task:553505] {CVE-2025-40109}
  - crypto: af_alg - Set merge to zero early in af_alg_sendmsg (Herbert Xu) [task:540405] {CVE-2025-39931}
  - LOONGSON: drm/loongson: use old version of ast driver for LoongArch platform (Shixiong Ou) [bug:496795, bug:496425]
  - functionfs: fix the open/removal races (Al Viro) [task:589071] {CVE-2025-71074}
  - functionfs, gadgetfs: use simple_recursive_removal() (Al Viro) [task:589071]
  - usb: gadget: functionfs: Wait for fences before enqueueing DMABUF (Paul Cercueil) [task:589071]
  - usb: gadget: functionfs: Fix inverted DMA fence direction (Paul Cercueil) [task:589071]
  - Documentation: usb: Document FunctionFS DMABUF API (Paul Cercueil) [task:589071]
  - usb: gadget: functionfs: Add DMABUF import interface (Paul Cercueil) [task:589071]
  - usb: gadget: functionfs: Factorize wait-for-endpoint code (Paul Cercueil) [task:589071]
  - usb: gadget: Support already-mapped DMA SGs (Paul Cercueil) [task:589071]
  - ublk: fix deadlock when reading partition table (Ming Lei) [task:589351] {CVE-2025-68823}
  - keys/trusted_keys: fix handle passed to tpm_buf_append_name during unseal (Srish Srinivasan) [task:590217]
  - tpm2-sessions: Fix out of range indexing in name_size (Jarkko Sakkinen) [task:590217] {CVE-2025-68792}
  - tpm: Mask TPM RC in tpm2_start_auth_session() (Jarkko Sakkinen) [task:590217]
  - Adapt to the new version of Jenkins' changelog (Qingshuang Fu) [task:591019]
  - HYGON: EDAC/amd64: The width of hash value is 2 bits for Hygon family 18h model 6h processors (allenli) [task:584695]
  - HYGON: x86/tsc: TSC adjust Backport x86 TSC adjust patch (allenli) [task:584695]
  - HYGON: EDAC/amd64: Bug fix for EDAC to correct the address translation on hygon family 18h model 4h (allenli) [task:584695]
  - PHYTIUM: pswiotlb: Adapt to the IOMMU DMA API upgraded by IOMMUFD (Cao Guanghui) [bug:477893]
  - PHYTIUM: pswiotlb: Adapt to the function iommu_pgsize() exported by EXPORT_SYMBOL_GPL() (Cao Guanghui) [bug:477893]
  - kalert: add periodic heartbeat work for subscriber cleanup (Huiwen He) [task:526009]
  - kalert: Rate limit BPF event reporting (Huiwen He) [task:526009]
  - kalert: Add KUnit tests (Huiwen He) [task:526009]
  - kalert: Add rate-limiting support for event reporting (Huiwen He) [task:526009]
  - kalert: Support Memory and PCIe RAS event reporting (Zheng Tan) [task:526009]
  - kalert: drop debug print in kfunc init path (Huiwen He) [task:526009]
  - ANOLIS: mm: use __GFP_MEMALLOC in vmemmap_alloc_block (Xu Yu) [task:590821]
  - NFS: Fix a deadlock involving nfs_release_folio() (Trond Myklebust) [task:590809]
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for all Crucial BX SSD1 models (Niklas Cassel)
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for Crucial CT240BX500SSD1 (Niklas Cassel)
  - exit: Sleep at TASK_IDLE when waiting for application core dump (Paul E. McKenney) [task:591267]
  - ksaf: fix argv UAF in ksaf_run_cmd (penghuaihe) [bug:407083]
  - LoongArch: drivers/pwm: export symbol for pwm_add_table (Tianrui Zhao) [task:577685]
  - sched: Temporarily disable the DELAY_DEQUEUE scheduling feature (Bing Huang) [task:587045]
  - HYGON: perf/x86/uncore: Correct the L3 PMU config for Hygon processors (Wenhui Fan) [task:586595]
  - REDHAT: spec: speed up "cp -r" when it overwrites existing files. (Denys Vlasenko) [task:556803]
  - REDHAT: kernel.spec: avoid keeping two copies of vmlinux (Ondrej Mosnacek) [task:556803]
  - REDHAT: kernel.spec: Force remove tmp file (Prarit Bhargava) [task:556803]
  - REDHAT: kernel.spec: remove some temporary files early (Ondrej Mosnacek) [task:556803]
  - REDHAT: kernel.spec: Parallelize compression (Prarit Bhargava) [task:556803]
  - REDHAT: kernel.spec: fix standalone tools build (Jan Stancek) [task:556803]
  - REDHAT: kernel.spec: Use RPM_BUILD_NCPUS (Prarit Bhargava) [task:556803]
  - REDHAT: kernel.spec: Remove unnecessary output from pathfix.py (Prarit Bhargava) [task:556803]
  - dmaengine: stm32: dmamux: fix device leak on route allocation (Johan Hovold) [task:592311] {CVE-2025-71186}
  - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() (Zilin Guan) [task:592301] {CVE-2026-23038}
  - null_blk: fix kmemleak by releasing references to fault configfs items (Nilay Shroff) [task:592309] {CVE-2026-23032}
  - gve: defer interrupt enabling until NAPI registration (Ankit Garg) [task:589035] {CVE-2025-71156}
  - gve: Avoid rescheduling napi if on wrong cpu (Shailend Chand) [task:589035]
  - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts (Tetsuo Handa) [task:590799] {CVE-2026-22997}
  - binfmt_misc: restore write access before closing files opened by open_exec() (Zilin Guan) [task:573213] {CVE-2025-68239}
  - macvlan: fix possible UAF in macvlan_forward_source() (Eric Dumazet) [task:590131] {CVE-2026-23001}
  - MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits (Gregory CLEMENT) [task:589963] {CVE-2025-71109}
  - ipv6: Fix use-after-free in inet6_addr_del(). (Kuniyuki Iwashima) [task:590053] {CVE-2026-23010}
  - ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT (Jiayuan Chen) [task:589527] {CVE-2025-71080}
  - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Eric Dumazet) [task:589961] {CVE-2026-23004}
  - ipv4: ip_gre: make ipgre_header() robust (Eric Dumazet) [task:589547] {CVE-2026-23011}
  - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Sean Christopherson) [task:589343] {CVE-2026-23005}
  - dmaengine: idxd: fix device leaks on compat bind and unbind (Johan Hovold) [task:589349] {CVE-2025-71163}
  - shmem: fix recovery on rename failures (Al Viro) [task:589347] {CVE-2025-71072}
  - KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (Sean Christopherson) [task:589405] {CVE-2025-68810}
  - ASoC: tlv320adcx140: fix null pointer (Emil Svendsen) [task:589073] {CVE-2026-23006}
  - net/sched: sch_qfq: do not free existing class in qfq_change_class() (Eric Dumazet) [task:588975] {CVE-2026-22999}
  - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (Eric Dumazet) [task:589037] {CVE-2026-23003}
  - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (Boris Burkov) [task:576291] {CVE-2025-68358}
  - crypto: starfive - Correctly handle return of sg_nents_for_len (Haotian Zhang) [task:580343] {CVE-2025-68763}
  - backlight: led-bl: Add devlink to supplier LEDs (Luca Ceresoli) [task:580341] {CVE-2025-68758}
  - ALSA: firewire-motu: add bounds check in put_user loop for DSP events (Junrui Luo) [task:580345] {CVE-2025-68753}
  - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() (Abdun Nihaal) [task:580427] {CVE-2025-68759}
  - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (Trond Myklebust) [task:580523] {CVE-2025-68764}
  - block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock (Mohamed Khalfella) [task:580409] {CVE-2025-68756}
  - mm/memfd: fix information leak in hugetlb folios (Deepanshu Kartikey) [task:573271] {CVE-2025-68292}
  - platform/x86/amd/pmc: Add support for Van Gogh SoC (Antheas Kapenekakis) [task:575899] {CVE-2025-68334}
  - platform/x86/amd/pmc: Notify user when platform does not support s0ix transition (Shyam Sundar S K) [task:575899]
  - jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (Ye Bin) [task:576301] {CVE-2025-68337}
  - bpf: Do not let BPF test infra emit invalid GSO types to stack (Daniel Borkmann) [task:577033] {CVE-2025-68725}
  - bpf: Fix invalid prog->stats access when update_effective_progs fails (Pu Lehui) [task:577043] {CVE-2025-68742}
  - bpf: Improve program stats run-time calculation (Jose Fernandez) [task:577043]
  - md: fix rcu protection in md_wakeup_thread (Yun Zhou) [task:576843] {CVE-2025-68374}
  - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex (sparkhuang) [task:576755] {CVE-2025-68354}
  - bpf: Check skb->transport_header is set in bpf_skb_check_mtu (Martin KaFai Lau) [task:576851] {CVE-2025-68363}
  - nbd: defer config unlock in nbd_genl_connect (Zheng Qixing) [task:576883] {CVE-2025-68366}
  - fs/ntfs3: Initialize allocated memory before use (Bartlomiej Kubik) [task:576911] {CVE-2025-68365}
  - nbd: defer config put in recv_work (Zheng Qixing) [task:576921] {CVE-2025-68372}
  - ima: Handle error code returned by ima_filter_rule_match() (Zhao Yipeng) [task:576917] {CVE-2025-68740}
  - coresight: ETR: Fix ETR buffer use-after-free issue (Xiaoqi Zhuang) [task:576629] {CVE-2025-68376}
  - ntfs3: Fix uninit buffer allocated by __getname() (Sidharth Seela) [task:577035] {CVE-2025-68727}
  - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() (Dmitry Antipov) [task:576289] {CVE-2025-68364}
  - wifi: ath11k: fix peer HE MCS assignment (Baochen Qiang) [task:576519] {CVE-2025-68380}
  - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (Junrui Luo) [task:576521] {CVE-2025-68347}
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (Jonathan Curley) [task:576577] {CVE-2025-68349}
  - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (Thorsten Blum) [task:576567] {CVE-2025-68724}
  - bpf: Free special fields when update [lru_,]percpu_hash maps (Leon Hwang) [task:576547] {CVE-2025-68744}
  - iomap: allocate s_dio_done_wq for async reads as well (Christoph Hellwig) [task:576565] {CVE-2025-68357}
  - ntfs3: fix uninit memory after failed mi_read in mi_format_new (Raphael Pinsonneault-Thibeault) [task:576585] {CVE-2025-68728}
  - sched_ext: Fix possible deadlock in the deferred_irq_workfn() (Zqiang) [task:576589] {CVE-2025-68333}
  - sched_ext: Take NUMA node into account when allocating per-CPU cpumasks (Li RongQing) [task:576589]
  - scsi: qla2xxx: Fix improper freeing of purex item (Zilin Guan) [task:576601] {CVE-2025-68741}
  - gpu: host1x: Fix race in syncpt alloc/free (Mainak Sen) [task:576571] {CVE-2025-68732}
  - scsi: smartpqi: Fix device resources accessed after device removal (Mike McGowen) [task:576711] {CVE-2025-68371}
  - ALSA: dice: fix buffer overflow in detect_stream_formats() (Junrui Luo) [task:576229] {CVE-2025-68346}
  - comedi: multiq3: sanitize config options in multiq3_attach() (Nikita Zhandarovich) [task:573265] {CVE-2025-68258}
  - RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (Zhu Yanjun) [task:576735] {CVE-2025-68379}
  - ALSA: wavefront: Fix integer overflow in sample size validation (Junrui Luo) [task:576613] {CVE-2025-68344}
  - ALSA: wavefront: Use standard print API (Takashi Iwai) [task:576613]
  - scsi: qla2xxx: Clear cmds after chip reset (Tony Battersby) [task:576985] {CVE-2025-68745}
  - wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() (Seungjin Bae) [task:576937] {CVE-2025-68362}
  - drm/amdgpu: fix gpu page fault after hibernation on PF passthrough (Samuel Zhang) [task:573273] {CVE-2025-68230}
  - drm/amdgpu: Initialize VF partition mode (Lijo Lazar) [task:573273]
  - drm/amdgpu: Restore partition mode after reset (Lijo Lazar) [task:573273]
  - drm/amdgpu: fix nullptr err of vm_handle_moved (Heng Zhou) [task:569749] {CVE-2025-40339}
  - drm/amdgpu: update mappings not managed by KFD (Felix Kuehling) [task:569749]
  - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() (Guangshuo Li) [task:573767] {CVE-2025-68190}
  - drm/amdgpu: fix wrong sizeof argument (Samasth Norway Ananda) [task:573767]
  - drm/amdgpu: check PS, WS index (Alexander Richards) [task:573767]
  - sched_ext: Fix unsafe locking in the scx_dump_state() (Zqiang) [task:573829] {CVE-2025-68202}
  - codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for slabobj_ext (Hao Ge) [task:573833] {CVE-2025-68199}
  - perf/x86/intel: Fix KASAN global-out-of-bounds warning (Dapeng Mi) [task:573253] {CVE-2025-40359}
  - nvme: fix admin request_queue lifetime (Keith Busch) [task:573275] {CVE-2025-68265}
  - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock (Robert McClinton) [task:573405] {CVE-2025-68223}
  - drm/radeon: Cleanup radeon/radeon_fence.c (Srinivasan Shanmugam) [task:573405]
  - tty: serial: ip22zilog: Use platform device for probing (Thomas Bogendoerfer) [task:573223] {CVE-2025-68311}
  - ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (Alexey Nepomnyashih) [task:573201] {CVE-2025-68261}
  - KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced (Omar Sandoval) [task:573255] {CVE-2025-68259}
  - comedi: check device's attached status in compat ioctls (Nikita Zhandarovich) [task:573039] {CVE-2025-68257}
  - netfilter: nft_ct: add seqadj extension for natted connections (Andrii Melnychenko) [task:573043] {CVE-2025-68206}
  - arm64: mte: Do not warn if the page is already tagged in copy_highpage() (Catalin Marinas) [task:572647] {CVE-2025-40353}
  - f2fs: fix to detect potential corrupted nid in free_nid_list (Chao Yu) [task:572643] {CVE-2025-68315}
  - ext4: refresh inline data size before write operations (Deepanshu Kartikey) [task:572651] {CVE-2025-68264}
  - drm/amdkfd: Fix mmap write lock not release (Philip Yang) [task:569841] {CVE-2025-40332}
  - drm/amdgpu: Fix the race condition for draining retry fault (Emily Deng) [task:569841]
  - drm/amdgpu: Fix missing drain retry fault the last entry (Emily Deng) [task:569841]
  - drm/amdkfd: Don't drain ih1 for APU (Yifan Zhang) [task:569841]
  - drm/amdkfd: Change kfd/svm page fault drain handling (Xiaogang Chen) [task:569841]
  - genirq/irq_sim: Initialize work context pointers properly (Gyeyoung Baek) [task:553497] {CVE-2025-38408}
  - 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN (Oleg Nesterov) [task:569899] {CVE-2025-40305}
  - 9p/trans_fd: mark concurrent read and writes to p9_conn->err (Ignacio Encinas) [task:569899]
  - 9p/trans_fd: avoid sending req to a cancelled conn (Sishuai Gong) [task:569899]
  - drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM (Christian König) [task:567269] {CVE-2025-40289}
  - drm/amdgpu: Show vram vendor only if available (Lijo Lazar) [task:567269]
  - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() (Yuhao Jiang) [task:559713] {CVE-2025-40211}
  - ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT (Sebastian Andrzej Siewior) [task:555767] {CVE-2025-40142}
  - net: phylink: add lock for serializing concurrent pl->phydev writes with resolver (Vladimir Oltean) [task:540067] {CVE-2025-39905}
  - net: kcm: Fix race condition in kcm_unattach() (Sven Stegemann) [task:527571] {CVE-2025-38717}
  - crypto: ccp - Fix crash when rebind ccp device for ccp.ko (Mengbiao Xiong) [task:585007] {CVE-2025-38581}
  - HYGON: crypto: ccp: optimize PSP driver code logic to reduce modifications to native code (chench) [task:585007]
  - HYGON: crypto: ccp: support vtkm live migration (xiongmengbiao) [task:585007]
  - HYGON: x86: mm: support to dec and enc userspace pages (yangwencheng) [task:585007]
  - KVM: SEV: Use long-term pin when registering encrypted memory regions (Ge Yang) [task:586007]
  - mm/cma: using per-CMA locks to improve concurrent allocation performance (Ge Yang) [task:586007]
  - mm: compaction: use the proper flag to determine watermarks (yangge) [task:586007]
  - mm/hugetlb: wait for hugetlb folios to be freed (Ge Yang) [task:586007]
  - mm/hugetlb: remove unnecessary holding of hugetlb_lock (Ge Yang) [task:586007]
  - mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios (Ge Yang) [task:586007]
  - mm: replace free hugepage folios after migration (yangge) [task:586007]
  - HYGON: crypto: ccp: Remove the unused variables from hct shared structure. (Xiangyu Xu) [task:585007]
  - HYGON: crypto: ccp: Add write operation support to the node file use of MDEV devices. (Yabin Li) [task:585007]
  - HYGON: crypto: ccp: When executing the madvise function, the starting address vm_start of the pre allocated vma changes. (Yabin Li) [task:585007]
  - HYGON: crypto: ccp: The new library file libhct.so can be compatible with hct.ko modules in versions 0.5 and earlier. (Yabin Li) [task:585007]
  - HYGON: crypto: ccp: Replacing random values with a combination of pasid and time values as the userid of VQ. (Yabin Li) [task:585007]
  - HYGON: crypto: ccp: Sharing CCP resources between host and virtual machines. (Yabin Li) [task:585007]
  - HYGON: crypto: ccp: Adding a file node that identifies whether the MDEV device is being used. (Yabin Li) [task:585007]
  - HYGON: fix errors and warnings when running checkpatch.pl (Yabin Li) [task:585007]
  - HYGON: crypto: ccp: Support 1024 processes simutaneously in the hct-mdev mode. (Yabin Li) [task:585007]
  - HYGON: KVM: SVM: CSV: Add KVM_CSV3_LAUNCH_FINISH_EX command (hanliyang) [task:585007]
  - HYGON: crypto: ccp: Introduce CSV_EXT_CSV3_LFINISH_EX extension flag (hanliyang) [task:585007]
  - HYGON: crypto: ccp: Define CSV3 LAUNCH_FINISH_EX command id (hanliyang) [task:585007]
  - efi/libstub: Add get_event_log() support for CC platforms (Kuppuswamy Sathyanarayanan) [task:585007]
  - efi/libstub: Measure into CC protocol if TCG2 protocol is absent (Ard Biesheuvel) [task:585007]
  - efi/libstub: Add Confidential Computing (CC) measurement typedefs (Kuppuswamy Sathyanarayanan) [task:585007]
  - efi/tpm: Use symbolic GUID name from spec for final events table (Ard Biesheuvel) [task:585007]
  - efi/libstub: Use TPM event typedefs from the TCG PC Client spec (Ard Biesheuvel) [task:585007]
  - HYGON: virt: csv-guest: Add support for extended attestation aware request in the CSV3 guest (hanliyang) [task:586007]
  - HYGON: virt: csv-guest: Implement CSV RTMR ioctl interfaces (hanliyang) [task:586007]
  - HYGON: virt: csv-guest: Introduce CSV RTMR uapi interface (hanliyang) [task:586007]
  - HYGON: x86/csv: Introduce RTMR interfaces (hanliyang) [task:586007]
  - HYGON: KVM: SVM: CSV: Support inject secret to Hygon CSV3 guest (hanliyang) [task:586007]
  - HYGON: KVM: SVM: CSV: Support issue non-4K aligned CSV3_CMD_LAUNCH_ENCRYPT_DATA and more than once (hanliyang) [task:585007]
  - HYGON: KVM: SVM: CSV: Provide KVM_CSV3_SET_GUEST_PRIVATE_MEMORY ioctl interface (hanliyang) [task:585007]
  - HYGON: KVM: SVM: CSV: Provide KVM_CAP_HYGON_COCO_EXT interface (hanliyang) [task:585007]
  - HYGON: crypto: ccp: Provide csv_get_extension_info() to present extensions of newer CSV firmware (hanliyang) [task:585007]
  - HYGON: KVM: SVM: CSV: Ensure all the GPRs and some non-GPRs are synced before LAUNCH_ENCRYPT_VMCB (hanliyang) [task:585007]
  - HYGON: virt/csv-guest: Provide interface for request of CSV3 attestation report (hanliyang) [task:585007]
  - HYGON: x86/csv: Add support for CSV3 ATTESTATION secure call (hanliyang) [task:585007]
  - HYGON: x86/csv: Define ATTESTATION secure call command (hanliyang) [task:585007]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.14.v2505
changelog:
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [task:622625]
  - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [task:622625]
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [task:622625]
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Taeyang Lee) [task:593631] {CVE-2026-23060}
  - crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers) [task:622625]
  - crypto: algif_aead - snapshot IV for async AEAD requests (Douya Le) [task:622625]
  - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [task:622625] {CVE-2026-31431}
  - crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers) [task:622625]
  - crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers) [task:622625]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.15.v2505
changelog:
  - xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [task:626683] {CVE-2026-43284}
  - seg6: separate dst_cache for input and output paths in seg6 lwtunnel (Andrea Mayer) [task:618851] {CVE-2026-31668}
  - net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (Jakub Kicinski) [task:440770] {CVE-2025-21768}


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.16.v2505
changelog:
  - MAILLIST: net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [task:629903] {CVE-2026-46300}
  - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [task:626685] {CVE-2026-43500}
  - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [task:626685]
  - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (David Howells) [task:626685]
  - rxrpc: only handle RESPONSE during service challenge (Wang Jie) [task:622807]
  - rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [task:626685]
  - rxrpc: Fix rxkad crypto unalignment handling (David Howells) [task:626685]
  - rxrpc: Fix memory leaks in rxkad_verify_response() (David Howells) [task:626685]
  - rxrpc: Fix CPU time starvation in I/O thread (David Howells) [task:626685]
  - rxrpc: Parse received packets before dealing with timeouts (David Howells) [task:626685]
  - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (David Howells) [task:618851]
  - rxrpc: reject undecryptable rxkad response tickets (Yuqi Xu) [task:618851]
  - rxrpc: Fix data-race warning and potential load/store tearing (David Howells) [task:609645]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.v2505
changelog:
  - arm64: config: enable bnx2fc driver (xiaolinkui) [bug:348721]
  - x86/config: Disable CONFIG_COMPILE_TEST (Super User) [task:460841]
  - kalert: fix a redundant message problem when report event of ALL (Huiwen He) [task:339643]
  - loongarch: configs: Enable kalert feature (Huiwen He) [bug:350573]
  - Revert "LOONGSON: drm/loongson: use old version of ast driver for LoongArch platform" (Li ZhiGang) [bug:350717]
  - Revert "LOONGSON: drm/loongson: To replace the drm_ast driver with the drm_ast_loongson driver" (Li ZhiGang) [bug:350717]
  - kabi: drm/ttm: Add kabi reserve in ttm_tt.h (Qingshuang Fu) [task:457490]
  - kabi: drm/ttm: Add kabi reserve in ttm_resource.h (Qingshuang Fu) [task:457490]
  - kabi: drm/ttm: Add kabi reserve in ttm_bo.h (Qingshuang Fu) [task:457490]
  - kabi: drm: Add kabi reserve in drm_syncobj.h (Qingshuang Fu) [task:457490]
  - kabi: drm: Add kabi reserve in drm_plane.h (Qingshuang Fu) [task:457490]
  - kabi: drm: Add kabi reserve in drm_modeset_lock.h (Qingshuang Fu) [task:457490]
  - kabi: drm: Add kabi reserve in drm_mode_config.h (Qingshuang Fu) [task:457490]
  - kabi: drm: Add kabi reserve in drm_gpu_scheduler.h (Qingshuang Fu) [task:457490]
  - kabi: cgroup: add more reserve kabi (Qingshuang Fu) [task:457490]
  - kabi: seq_file: KABI reservation for seq_file (Qingshuang Fu) [task:457490]
  - kabi: statx: KABI reservation for kstat (Qingshuang Fu) [task:457490]
  - kabi: ima: KABI reservation for IMA (Qingshuang Fu) [task:457490]
  - kabi: kabi reserver space for i2c (Qingshuang Fu) [task:457490]
  - kabi: reserve space for uprobes.h (Qingshuang Fu) [task:457490]
  - kabi: Reserve space for fwnode.h (Qingshuang Fu) [task:457490]
  - kabi: Add reserve space for sched structures (Qingshuang Fu) [task:457490]
  - kabi: net: reserve space for net related structure (Qingshuang Fu) [task:457490]
  - kabi: reserve space for internal.h (Qingshuang Fu) [task:457490]
  - kabi: reserve space for perf_event.h (Qingshuang Fu) [task:457490]
  - kabi: net: reserve space for xdp subsystem related structure (Qingshuang Fu) [task:457490]
  - kabi: reserve space for struct acpi_device and acpi_scan_handler (Qingshuang Fu) [task:457490]
  - kabi: reserve space for struct rate_sample (Qingshuang Fu) [task:457490]


author: wangjie<wangjie294@huawei.com> -1.0.7-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Synchronize patches from community
         Verbose-CLI-start-pulling-Shared-Brotli.patch
         Ensure-decompression-consumes-all-input.patch
         fix-MSVC-configuration-and-c++-compilation-fails.patch
         fix-executable-mode-of-decode-js.patch
         Fix-include-for-EMCC-build.patch
         Add-an-option-to-avoid-building-shared-libraries.patch
         Disable-PIC-in-EMCC-mode.patch
         Add-missing-const-to-a-couple-of-kConstants.patch
         Move-TZCNT-and-BSR-intrinsics-and-add-MSVC-versions.patch


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: jianmin <jianmin@iscas.ac.cn> - 1.34.1-5
changelog:
  - Type:cve
  - CVE:CVE-2024-3727 CVE-2024-24791
  - SUG:NA
  - DESC: fix CVE-2024-3727 and Rebuild to fix CVE-2024-24791


author: liuxu <liuxu156@huawei.com> - 1:1.36.1-6
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: sunhai<sunhai10@huawei.com> - 1.17.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:cairo_truetype_reverse_cmap detected memory leaks
         fix read memory access
         fix call get_unaligned_be32 heap buffer overflow
         fix heap buffer overflow in cairo_cff_parse_charstring


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1.18.0-2
changelog:
  - Type:CVE
  - ID:CVE-2025-50422
  - SUG:NA
  - DESC:Fix a NULL access in active_edges_to_traps()
         Add unlikely() to test for x == INT32_MAX for the NULL reference


author: lizhipeng <lizhipeng@kylinos.cn> - 2:18.2.2-5.p04
changelog:
  - Type: cves
  - ID:   [BUG#559491]
  - SUG:  NA
  - DESC: fix CVE-2025-52555、CVE-2024-47866 ceph-fuse coredump


author: xuyujun <xuyujun@kylinos.com.cn> -1.0.0-3.skl3.ft.ns7_4.se.05
changelog:
  - Type: update
  - ID: [Task#90054]
  - SUG:NA
  - DESC: 设置策略接口由kysec-utils实现
  - 	  add patch: chpolicy-20220527.patch


author: wanghao <wanghao2@kylinos.com.cn> -1.0.0-3.skl3.se.06
changelog:
  - Type: bugfix
  - ID: [BUG#142670]
  - SUG:NA
  - DESC: 使用chpolicy切换策略，强制重启后，策略切换失败
  -         add patch: chpolicy-fix-selinux-error-after-force-reboot.patch


author: wanghao <wanghao2@kylinos.com.cn> -1.0.0-3.skl3.se.08
changelog:
  - Type: bugfix
  - ID: [BUG#177892]
  - SUG:NA
  - DESC: 修改帮助信息描述
  -	  add patch: chpolicy-modify-help-information.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 1.0.0-3.skl3.se.10
changelog:
  - Type:update
  - ID:[BUG#191506]
  - SUG:NA
  - DESC:处理bug191506，兼容policy.33
  - add patch: chpolicy-fix-bug191506-compatible-se33.patch


author: chengang <chengang@kylinos.cn> - 1.0.0-3.skl3.se.12
changelog:
  - Type: update
  - ID: [TASK#375187] 代码覆盖率提升
  - SUG: NA
  - DESC: 代码覆盖率提升
  -      chpolicy-add-unit-test.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.0-3.skl3.se.13
changelog:
  - Type: update
  - ID: [TASK#422677]
  - SUG: NA
  - DESC: 解决安全热点问题 增加license声明
  -      chpolicy-add-unit-test.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 2.0.0-01
changelog:
  - Type: update
  - ID: [TASK#381843]
  - SUG: NA
  - DESC: 解决执行chpolcy命令时由单元覆盖率提示信息
  -      chpolicy-fix-gcda-tip-msg.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 43.1-2.p03
changelog:
  - Type: update
  - ID: [TASK#601767]
  - SUG: NA
  - DESC: fix(annotationsDerived):Align region naming conventions with
          standard formulations


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable use-dns for secondary nics
         Make duplicate route add succeed
         Fix predictable interface rename issue


author: dongyuzhen <dongyuzhen@h-partners.com> - 23.4.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(net): klibc ipconfig PROTO compatibility
         fix(openstack): Fix bond mac_address


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:chore: set recursive=False for ensure_dir if parent path is "/"
         test(openstack): Test bond mac address
         fix: Ensure properties for bonded interfaces are properly translated


author: lijunwei <lijunwei@kylinos.cn> - 23.4.1-11.p01
changelog:
  - Type: Update
  - ID:   [TASK#425200]
  - SUG:  NA
  - DESC: Backport v11-2409 Kylin's patch to Support KylinOS


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.27.9-5
changelog:
  - Support 
    /usr/bin/cmake --build "aarch64-kylin-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/builddir/build/BUILDROOT/cmake-3.27.9-8.ky11.aarch64" /usr/bin/cmake --install "aarch64-kylin-linux-gnu".


author: fuanan <fuanan3@h-partners.com> - 3.27.9-6
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.27.9-5
changelog:
  - Support 
    /usr/bin/cmake --build "aarch64-kylin-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/builddir/build/BUILDROOT/cmake-3.27.9-8.p01.ky11.aarch64" /usr/bin/cmake --install "aarch64-kylin-linux-gnu".


author: wangqiang <wangqiang1@kylinos.cn> - 3.27.9-8.p01
changelog:
  - Type:bugfix
  - ID:[task#648199]
  - SUG:NA
  - DESC:Backport patch to enabling libarchive secure path checks in extract_tar


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.27.9-5
changelog:
  - Support 
    /usr/bin/cmake --build "x86_64-kylin-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/builddir/build/BUILDROOT/cmake-3.27.9-8.ky11.x86_64" /usr/bin/cmake --install "x86_64-kylin-linux-gnu".


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.27.9-5
changelog:
  - Support 
    /usr/bin/cmake --build "x86_64-kylin-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/builddir/build/BUILDROOT/cmake-3.27.9-8.p01.ky11.x86_64" /usr/bin/cmake --install "x86_64-kylin-linux-gnu".


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove incorrect provides cockpit-machines and cockpit-machines-ovirt
          remove require libvirt and libvirt-client


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4.p01
changelog:
  - Type:update
  - ID:[TASK#424801]
  - SUG:NA
  - DESC: 1. enable pcp packages for cockpit
          2. add Patch: 0001-part1-support-and-add-zh_CN-translate-for-playground.patch
             add Patch: 0002-part2-support-and-add-zh_CN-translate-for-playground.patch
             Translate: and add zh_CN translate support for module playground
          3. add Patch: 0001-fix-zh_CN-translation-issue-of-storage-module.patch
             zh_CN translate for storaged module
          4. add Patch: 0001-kylin-fix-zh_CN-translation-issue-of-autoupdates.patch
             fix zh_CN translate of autoupdates
          5. add Patch: 0001-fix-wrong-invalid-format-error-when-setting-datetime.patch
             fix wrong invalid format error when setting datetime


author: wangshuo <wangshuo@kylinos.cn> - 309-4.p02
changelog:
  - Type:CVE
  - ID:CVE-2026-4802 KVE-2026-0415
  - SUG:NA
  - DESC:Fix CVE-2026-4802 KVE-2026-0415, sanitize value to prevent command injection


author: wangshuo <wangshuo@kylinos.cn> - 309-4.p03
changelog:
  - Type:bugfix
  - ID:[BUG#278203][BUG#603479]
  - SUG:NA
  - DESC: Fix the regression issue of "Invalid date format" caused by the build process


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1m-13.p03
changelog:
  - Type:update
  - ID:TASK#630021
  - SUG:NA
  - DESC:fix CVE-2025-9230,CVE-2025-69418,CVE-2026-22796,CVE-2026-22795,
  	   CVE-2025-69419,CVE-2025-68160,CVE-2025-69421,CVE-2025-69420,
             CVE-2026-28387,CVE-2026-28388,CVE-2026-28389,CVE-2026-28390


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1m-13.p04
changelog:
  - Type:bugfix
  - ID:BUG#618649
  - SUG:NA
  - DESC:fix CVE-2026-45447, CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, 
             CVE-2026-42766


author: weiyucheng<weiyucheng@kylinos.cn> - 1.7.23-1.p03
changelog:
  - Type:cves
  - ID:CVE-2024-25621
       CVE-2025-64329
  - SUG:NA
  - DESC:upgrade to 1.7.23-1.p03
         fix CVE-2024-25621 CVE-2025-64329
         optimized the spec file


author: huyubiao <huyubiao@huawei.com> - 9.4-9
changelog:
  - fix alias sm3sum not working on bash
    delete redundant backport-chmod-fix-exit-status-when-ignoring-symlinks.patch


author: huyubiao <huyubiao@huawei.com> - 9.4-10
changelog:
  - sync patches from community
  - add backport-pinky-fix-string-size-calculation.patch
        backport-cksum-consistently-validate-length-attributes.patch
        backport-timeout-fix-race-where-we-might-kill-arbitrary-proce.patch
        backport-timeout-fix-narrow-race-in-failing-to-kill-processes.patch
        backport-maint-basenc-consistently-check-buffer-bounds-when-e.patch
        backport-putenv-Don-t-crash-upon-out-of-memory.patch
        backport-head-off_t-not-uintmax_t-for-file-offset.patch
        backport-shuf-avoid-integer-overflow-on-huge-inputs.patch
        backport-shuf-fix-randomness-bug.patch


author: hugel <gengqihu2@h-partners.com> - 9.4-12
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: pengxu <pengxu@kylinos.cn> - 12.3.1-62.p01
changelog:
  - Type: bugfix
  - ID: [TASK#424661]
  - SUG:  NA
  - DESC:  Add kylin patches.

           author: zhaojingyu <zhaojingyu@kylinos.cn>
           Support for zhaoxin.
           0001-support-for-zhaoxin.patch

           author: wangqiang <wangqiang1@kylinos.cn>
           Support for hygon3/4 processor series.
           kylin-gcc-add-support-for-hygon3-4-processor-series.patch

           author: pengxu <pengxu@kylinos.cn>
           Support for accelerating stream.
           kylin-gcc-add-support-for-accelerating-stream.patch

           author: pengxu <pengxu@kylinos.cn>
           Support optimization of set fpnm.
           kylin-gcc-Add-optimization-of-set-fpnm.patch

           author: wangqiang <wangqiang1@kylinos.cn>
           Support phytium s5000 processor.
           kylin-gcc-Add-support-for-phytium-s5000c-processor.patch

           author: pengxu <pengxu@kylinos.cn>
           Add pie option for g++-mapper-server.
           kylin-gcc-add-pie-option-for-g++-mapper-server.patch


author: pengxu <pengxu@kylinos.cn> - 12.3.1-62.p02
changelog:
  - Type: bugfix
  - ID: [TASK#465014]
  - SUG:  NA
  - DESC: Add support for hygon arch dhyana and dharma.
          Fix bugs of stream when use -ftree-parallelize-loops=24 option.


author: pengxu <pengxu@kylinos.cn> - 12.3.1-62.p03
changelog:
  - Type: update
  - ID: [TASK#558547]
  - SUG:  NA
  - DESC: Add support for Phytium ftc86x cpu,fix aarch64 -mcpu=native shows null


author: shaojiansong <shaojiansong@kylinos.cn> - 8.0.4-3
changelog:
  - Fix lack of loongarch64 and sw_64 patch files in src.rpm package which is build from any platform.


author: zhangzikang <zhangzikang@kylinos.cn> - 8.0.4-10.p01
changelog:
  - Type:bugfix
  - ID:BUG#340534
  - SUG:NA
  - DESC:Fix NR_CPUS for loongarch64, resolve crash parsing vmcore file error


author: xinghe <xinghe2@h-partners.com> - 4.18.5-2
changelog:
  - Type:cves
  - ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
  - SUG:NA
  - DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670


author: liyunqing <liyunqing@kylinos.cn> - 4.19.3-6.p02
changelog:
  - Type:cves
  - ID:TASK#594565 TASK#594587 TASK#595621 TASK#595973 CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408
  - SUG:NA
  - DESC:fix CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408


author: peijiankang <peijiankang@kylinos.cn> - 1:2.4.7-6.se.02.p02
changelog:
  - Type: bugfix
  - ID:   [TASK#604487]
  - SUG:  NA
  - DESC: sync from version 1:2.4.7-6.se.01.p02 to fix CVE-2025-58436 CVE-2025-61915
          Unified source code support for x86_64 aarch64 loongarch64 and sw_64 architectures


author: peijiankang <peijiankang@kylinos.cn> - 1:2.4.7-6.se.02.p03
changelog:
  - Type: cves
  - ID  : CVE-2026-39316 CVE-2026-39314 CVE-2026-34979 CVE-2026-34980 CVE-2026-34978 CVE-2026-34990 CVE-2026-27447 CVE-2026-41079
  - SUG : NA
  - DESC: fix CVE-2026-39316 CVE-2026-39314 CVE-2026-34979 CVE-2026-34980 CVE-2026-34978 CVE-2026-34990 CVE-2026-27447 CVE-2026-41079


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: tenglei <tenglei@kylinos.cn> - 8.4.0-14.p02
changelog:
  - Type:bugfix
  - ID:385935
  - SUG:NA
  - DESC: add configure options '--enable-ares' to support feature '-dns-servers'


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 8.4.0-14.p03
changelog:
  - Type:rebuild
  - ID:[BUG#385935]
  - SUG:NA
  - DESC: rebuild for svr25-update with secure_compile_enabled = True


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix readdir issues
         h3: fix query of concurrent streams
         noproxy: fix the IPV6 network mask pattern match
         krb5_gssapi: fix memory leak on error path
         openldap: fix memory-leak in error path
         conn: fix hostname move on connection reuse 
         pop3: fix CAPA response termination detection
         libssh: properly free sftp_attributes
         openssl: fix a potential memory leak of params.cert


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:urlapi: avoid null deref if setting blank host to url
         urlapi: skip appending NULL pointer query


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-26
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224


author: gaoyukun <gaoyukun@kylinos.cn> - 8.4.0-26.p01
changelog:
  - Type:update
  - ID:[TASK#554071]
  - SUG:NA
  - DESC: add configure options '--enable-ares' to support feature '-dns-servers'


author: lifeifei <lifeifei@kylinos.cn> - 8.4.0-26.p02
changelog:
  - Type:bugfix
  - ID:[Bug#507747]
  - SUG:NA
  - DESC:add configure options '--enable-websockets' to support feature 'websocket'


author: liyunqing <liyunqing@kylinos.cn> - 8.4.0-26.p04
changelog:
  - Type: CVEs
  - ID: [TASK#560183] [TASK#560185] [TASK#560189] [TASK#560193] [TASK#560195]
  - SUG: NA
  - DESC: fix CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168


author: hongjinghao <hongjinghao@huawei.com> - 1:1.14.8-3
changelog:
  - sync patch from upstream
  	backport-bus-Don-t-crash-if-bus_context_create_client_policy-.patch
  	backport-bus-When-failing-to-reload-client-policy-continue-it.patch
  	backport-test-Add-a-targeted-test-for-_dbus_unix_groups_from_.patch
  	backport-userdb-Add-proper-error-reporting-when-getting-group.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 1:1.14.8-3.p01
changelog:
  - Type:update
  - ID:[TASK#424801]
  - SUG:NA
  - DESC: add 0001-adjusting-maximum-number-of-connections-for-per-user.patch
          Adjust the maximum number of connections for dbus users, fix the issue of insufficient connections


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 1:1.14.8-3.p02
changelog:
  - Type:update
  - ID:[TASK#619873]
  - SUG:NA
  - DESC: Add precise control and limits for dbus, enhance the security of dbus


author: yuanchao <1050706328@qq.com> - 8:2.03.21-13
changelog:
  - support clang build:
    - fix function undeclared in libdm-common.c and dev-cache.c
    - fix changelog to be in descending chronological order


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-4
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:delete report url added by other upstream patch to keep pace with DHCP


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: renmingshuai <renmingshuai@huawei.com> - 2.89-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.90-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         cache: Fix potential NULL deref in arcane situations.
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         allow binding mac with ip6


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.90-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix bounds checking in check_ia()
         Fix SEGV in Dbus code
         More fixes for DHCP ops in Dbus when DHCP not configured


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.90-8
changelog:
  - Type:CVE
  - CVE:CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893 CVE-2026-5172
  - SUG:NA
  - DESC:Fix NSEC bitmap parsing infinite loop
         Verify rdlen field in RRSIG packets
         Fix buffer overflow in helper.c with large CLIDs
         Fix broken client subnet validation
         Fix buffer overflow vulnerability in extract_addresses()


author: wangkai <13474090681@163.com> - 1:2.3.20-4
changelog:
  - Fix CVE-2025-59031, CVE-2025-59032, CVE-2026-27855, CVE-2026-27856,
    CVE-2026-27857, CVE-2026-27858, CVE-2026-27859, CVE-2026-0394


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.03
changelog:
  - Type: bugfix
  - ID: [BUG#242191][TASK#337083] 
  - SUG: NA
  - DESC: 修复strict 模式 selinux打标问题以及3adm未开启问题
  -       dracut-fix-switch-strict-3adm-disable.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.04
changelog:
  - Type: bugfix
  - ID: [BUG#244069]
  - SUG: NA
  - DESC: v11内核不支持中文,将打标脚本中输出的中文替换成英文
  -       relabel-script-add-en-translation.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.05
changelog:
  - Type: bugfix
  - ID: [BUG#249291]
  - SUG: NA
  - DESC: selinux-loadpolicy.sh脚本中增加对selinux目录恢复标记动作
  -       dracut-seloadpolicy-add-restore-selinux-dir-action.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.06
changelog:
  - Type: bugfix
  - ID: [BUG#249879][BUG#249601]
  - SUG: NA
  - DESC: 三员开启时,audit目录及日志文件dac权限不正确
  -       dracut-fix-audit-log-owner-when-enable-3adm.patch


author: andy <liuyang01@kylinos.cn> - 059-6.p02.se.07
changelog:
  - Type: bugfix
  - ID: [BUG#252025]
  - SUG: NA
  - DESC: open-iscsi 已经不再支持及维护iscsiuio工具, 将其相关代码移除
  -       0001-remove-iscsi-related-code-since-it-is-no-longer-main.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.08
changelog:
  - Type: update
  - ID: [TASK#379845]
  - SUG: NA
  - DESC: 适配ksaf框架改动
  -       dracut-compatible-ksaf.patch


author: andy lau <liuyang01@kylinos.cn> - 059-11.p01.se.08
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC: [backport] backport update stream fix zfcp_rules
          [backport] add backport-fix-dracut-install-copy-xattr-when-use-clone-ioctl.patch
          [backport] fix(dracut-install): copy mode when use clone ioctl
          [backport] add backport-feat-dracut-init.sh-give-force-add-precedence-over-o.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p01.se.09
changelog:
  - Type: update
  - ID: [BUG#328705][BUG#335827]
  - SUG: NA
  - DESC: 解决kysec增加自保护后,initrd中初始化三权配置错误问题,defualt 模式 ksyec为permissive
  -       dracut-fix-3adm-settings.patch
  -       dracut-fix-initrd-set-kysec-status-error.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p01.se.10
changelog:
  - Type: update
  - ID: [BUG#372101]
  - SUG: NA
  - DESC: 解决在未加载selinux时 修改passwd文件后 se标记未unlabeled_t的问题
  -       dracut-fix-passwd-selinux-context-is-unlabel.patch


author: yueyuankun <yueyuankun@kylinos.cn> -0.59-6.p03.se.10
changelog:
  - Type:bugfix
  - ID:[TASK#577533]
  - SUG:NA
  - DESC: fix(kernel-modules-extra): remove stray \ before /


author: tiandongdong <tiandongdong@kylinos.cn> -0.59-6.p03.se.11
changelog:
  - Type:update
  - ID:[TASK#595939]
  - SUG:NA
  - DESC: 兼容sdk优化reset_selinux_config文件路径的变更
  -       dracut-compatible-sdk-optimize.patch


author: tiandongdong <tiandongdong@kylinos.cn> -0.59-6.p03.se.12
changelog:
  - Type:update
  - ID:[BUG#492893]
  - SUG:NA
  - DESC: 98relabel去除对kysec-init命令的依赖
  -       dracut-98relabel-remove-kysec-init-require.patch


author: Qin Fandong <qinfandong@kylinos.cn> -0.59-6.p04.se.12
changelog:
  - Type:update
  - ID:[TASK#596741]
  - SUG:NA
  - DESC: fix(dracut-util): do not call `strcmp` if the `value` argument is NULL
  -       0001-fix-dracut-util-do-not-call-strcmp-if-the-value-argu.patch


author: Xiaotian Wu <wuxiaotian@loongson.cn> - 202308-17
changelog:
  - Update LoongArch virtual machine
  - 0080-Platform-Loongson-Remove-minimium-memory-size-limita.patch
  - 0081-Platform-Loongson-Modify-loongarch-uefi-firmware-siz.patch
  - 0082-fixup-fdt-parse-error.patch


author: lijunwei <lijunwei@kylinos.cn> - 202308-17.p01
changelog:
  - Type: Update
  - ID:   [TASK#425200]
  - SUG:  NA
  - DESC: Backport v11-2409 Kylin's patch to support sata cdrom


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202308-17.p02
changelog:
  - Type: Update
  - ID:   [BUG#332197]
  - SUG:  NA
  - DESC: Fix loongarch64 0082-fixup-fdt-parse-error.patch error


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202308-17.p03
changelog:
  - Type: Update
  - ID:   [TASK#442231]
  - SUG:  NA
  - DESC: Fix CVE-2024-13176/CVE-2024-4741/CVE-2024-9143


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202308-17.p10
changelog:
  - Type: cves
  - ID:   CVE-2026-22795,CVE-2026-22796,CVE-2025-69421,CVE-2025-69420,CVE-2025-68160,CVE-2025-69418,CVE-2025-69419
  - SUG:  NA
  - DESC: Fix CVE-2026-22795,CVE-2026-22796,CVE-2025-69421,CVE-2025-69420,
  	CVE-2025-68160,CVE-2025-69418,CVE-2025-69419


author: lijunwei <lijunwei@kylinos.cn> - 202308-17.p13
changelog:
  - Type: cves
  - ID:   [BUG#603875][BUG#603873][BUG#603871][BUG#603869][BUG#603867]
  - SUG:  NA
  - DESC: CVE-2026-28388、CVE-2026-28389、CVE-2026-28387、CVE-2026-28390、CVE-2026-31789


author: lijunwei <lijunwei@kylinos.cn> - 202308-17.p14
changelog:
  - Type: cves
  - ID:   [BUG#618695][BUG#618685][BUG#618669][BUG#618661][BUG#618633][BUG#618629]
  - SUG:  NA
  - DESC: CVE-2026-34182、CVE-2026-34180、CVE-2026-45445
          CVE-2026-7383、CVE-2026-9076、CVE-2026-42770


author: lvxiangcong <lvxiangcong@kylinos.cn> - 3.4.14-16
changelog:
  - Type:CVES
  - ID:CVE-2024-24791 CVE-2023-45288 CVE-2024-24783 CVE-2024-24785 CVE-2023-45290
       CVE-2023-39326
  - SUG:NA
  - DESC:Batch fix cves through rebuild


author: fly_fzc <2385803914@qq.com> - 2.5.0-22
changelog:
  - fix CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-56406 CVE-2026-56407
        CVE-2026-56408 CVE-2026-56409 CVE-2026-56410 CVE-2026-56411 CVE-2026-56412


author: dongjiao <dongjiao@kylinos.cn> - 1.2.2-9.p03
changelog:
  - Type: update
  - ID: [Task#542787]
  - SUG: NA
  - DESC: Add 0003-Add-secure-encryption-policy.patch. 
          Add sw_64 to BuildArch in spec file.


author: wuzhaomin <wuzhaomin@kylinos.cn> - 2.0.0-1
changelog:
  - Type: update
  - ID: [Task#553593]
  - SUG: NA
  - DESC: Add support for intelligent optimization of MySQL scenarios.


author: lilu <lilu@kylinos.cn> - 2.0.0-1.p01
changelog:
  - Type: update
  - ID: [Task#553965]
  - SUG: NA
  - DESC: Add CPU-intensive scenario recommendation parameters


author: sunliqiang <sunliqiang@kylinos.cn> - 2.0.0-1.p03
changelog:
  - Type: update
  - ID: [Task#554005]
  - SUG: NA
  - DESC: Add IO-intensive scenario recommendation parameters and bugfix


author: dongjiao <dongjiao@kylinos.cn> - 2.0.0-1.p04
changelog:
  - Type: update
  - ID: [Task#554101]
  - SUG: NA
  - DESC: Add net-intensive scenario recommendation parameters and bugfix


author: dongjiao <dongjiao@kylinos.cn> - 2.0.0-1.p05
changelog:
  - Type: bugfix
  - ID: [BUG#492041]
  - SUG: NA
  - DESC: fix disk-check not exist bug, delete unsafe code.


author: lilu <lilu@kylinos.cn> - 2.0.0-1.p06
changelog:
  - Type: bugfix
  - ID: [BUG#499297][BUG#499765]
  - SUG: NA
  - DESC: Fix the abnormal bug in parameter generation for CPU-intensive scenarios
          Modify the output level of the net log


author: lilu <lilu@kylinos.cn> - 2.0.0-1.p08
changelog:
  - Type: bugfix
  - ID: [Task#638335][Task#638337][Task#638339]
  - SUG: NA
  - DESC: Fix KVE-2026-05157, KVE-2026-05158, KVE-2026-05159
  	Fix the help display function for the repair subcommand


author: Tangsha <tangsha@kylinos.cn> - 6.1.1-24.p01
changelog:
  - Type: cves
  - ID: [BUG#582111] [BUG#582033] [BUG#582017] [BUG#581861] [BUG#581543] [BUG#581409] [BUG#567943] [BUG#567939] [BUG#567937] 
  - SUG: NA
  - DESC: Fix CVE-2026-40962,CVE-2026-30997,CVE-2025-9951


author: chenyanpanHW <chenyanpan@huawei.com> - 5.39-6
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-file-localmagic.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-Prevent-incorrect-result-for-nbytes-2GB-which-needs-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:chore nftables add delete table helper
         fix nftables always flush main table on start


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload related ko when stopping firewalld service
         To reduce unnecessary loading of ebtables-related kernel modules
         fix(nm): release NM client after a timeout


author: lifeifei <lifeifei@kylinos.cn> - 1.2.6-7.p01
changelog:
  - Type:bugfix
  - ID:TASK#424653
  - SUG:NA
  - DESC:split package firewall-config、firewalld-filesystem,reduce main package installation dependencies;
         fix firewall-cmd execution failed when firewalld stopped[BUG#238862];
         add fix-patch:
         firewalld-0.6.6-kylin-add-cockpit.patch
         firewalld-0.6.6-kylin-fix-bug48533.patch


author: baizhonggui <baizhonggui@huawei.com> - 1.6.2-5
changelog:
  - Fix building error: configure: error: no acceptable C compiler found in $PATH
  - Add gcc in BuildRequires


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: wangkai <13474090681@163.com> - 2:2.11.8-3
changelog:
  - Fix CVE-2026-26955, CVE-2026-26965, CVE-2026-31806, CVE-2026-31883, CVE-2026-31885,
    CVE-2026-33984, CVE-2026-33983


author: wangkai <13474090681@163.com> - 2:2.11.8-5
changelog:
  - Fix CVE-2026-25942, CVE-2026-25952, CVE-2026-25953, CVE-2026-25954, CVE-2026-27951,
    CVE-2026-29774, CVE-2026-29775, CVE-2026-31884, CVE-2026-33985


author: Qin Fandong <qinfandong@kylinos.cn> - 1.8.17-7.p01
changelog:
  - Type: bugfix
  - ID: BUG#382697
  - SUG: NA
  - DESC: 1. Remove build requires protobuf and disable plugin logitech-bulkcontroller
             which to upgrade the firmware on Logitech Video Collaboration products.
          2. Update distro info


author: Qin Fandong <qinfandong@kylinos.cn> - 1.8.17-8.p03
changelog:
  - Type: bugfix
  - ID: BUG#626401
  - SUG: NA
  - DESC: 1. Remove build requires protobuf and disable plugin logitech-bulkcontroller
             which to upgrade the firmware on Logitech Video Collaboration products.
          2. Update distro info


author: yinbin <yinbin8@huawei.com> - 1.0.2-77
changelog:
  - openGauss: support kernel connnect
  - xdp: support stack bind numa
  - CFG: fix xdp iface check error
  - fix build error in 2003SP4
  - cfg: show dpdk args after dpdk_adjust_args
  - fix free null pointer when no matching device is found
  - update test/unitest/ltran/ltran_param_test.c.
  - Fix the wrong spelling description in the notes and logs
  - LWIP: adjust position of shutdown in callback of connect
  - fix socket of control thread is overwirtten due to another primary process start


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: liuchao <liuchao173@huawei.com> - 14.1-1
changelog:
  - upgrade GDB version to 14.1:
    - GDB no longer support AiX 4.x, 5.x and 6.x. The minimum version supported is AiX 7.1.
    - GDB/MI version 1 support has been removed
    - Initial built-in support for Debugger Adapter Protocol (DAP)
    - GDB now recognizes the NO_COLOR environment variable
    - Initial support for integer types larger than 64 bits
    - Breakpoints can now be inferior-specific
    - New convenience function "$_shell", to execute a shell command and return its result.
    - Python support
    - Support for enabling or disabling individual remote target features
    - New 'no-history' stop reason
    - Support for inferior-specific breakpoints
    - The bkpt tuple, which appears in breakpoint-created notifications, and in the result of the -break-insert command can now include an optional 'inferior' field for both the main breakpoint, and each location, when the breakpoint is inferior-specific.
    - Trying to create a thread-specific breakpoint using a non-existent thread ID now results in an error
    - New "simple-values-ref-types" -list-feature value indicating how the --simple-values option in various commands take reference types into account.
    - Initial support for Scalable Matrix Extension (SME) and for Scalable Matrix Extension 2 (SME2)
    - The 'org.gnu.gdb.aarch64.pauth' Pointer Authentication feature is now deprecated in favor of the 'org.gnu.gdb.aarch64.pauth_v2' feature string
    - Support for the Ada 2022 target name symbol ('@')
    - Support for the The Ada 2022 'Enum_Rep and 'Enum_Val attributes
    - The 'list' command now accepts '.' as an argument, telling GDB to print the location around the point of execution within the current frame
    - New '%V' output format for printf and dprintf commands.
    - The printf command now limits the size of strings fetched from the inferior to the value of the 'max-value-size' setting.
    - Support for extending at configure time the default value of the 'debug-file-directory' GDB parameter via the new --additional-debug-dirs=PATHs configure option.
    - New command "info main"
    - New command "set tui mouse-events [on|off]" (on by default)
    - New command "set always-read-ctf on|off" (off by default)
    - Various new debug and maitenance commands


author: wangqiang <wangqiang1@kylinos.cn> - 14.1-2.p02
changelog:
  - Type: update
  - ID: [TASK#424649]
  - SUG: NA
  - DESC: modify gdb-help package's license GFDL to GFDL-1.3-or-later


author: lijian1 <lijian1@kylinos.cn> - 14.1-2.p03
changelog:
  - Type: bugfix
  - ID: [Bug#382413]
  - SUG: NA
  - DESC: Modify loongarch64 general registers layout for gdbserver-init process.


author: lijian1 <lijian1@kylinos.cn> - 14.1-2.p04
changelog:
  - Type: cves
  - ID: [Bug#542705]
  - SUG: NA
  - DESC: fix cves:
  	CVE-2025-7546:  Fix BFD bfd_elf_set_group_contents bounds validation for malformed ELF section groups to prevent out-of-bounds writes.
  	CVE-2025-11082: Fix BFD ELF parsing heap overflow with crafted inputs.
  	CVE-2025-11494: Fix BFD/ELF input-validation bug causing memory corruption/crash.
  	CVE-2025-11083: Fix BFD ELF section-header handling heap overflow.
  	CVE-2025-11412: Fix BFD/ELF out-of-bounds access on malformed files.
  	CVE-2025-11840: Fix ld diagnostic NULL deref/OOB read leading to linker crash.
  	CVE-2026-4647:  Fix BFD XCOFF relocation OOB read leading to crash when loading crafted XCO.
  	CVE-2026-6846: heap buffer overflow in BFD XCOFF linking.


author: yaoxin <yao_xin001@hoperun.com> - 0.4.50-1
changelog:
  - Update to 0.4.50:
  - Core:
    * Better Gobject Introspection annotation coverage.
    * Improved error handling for gegl chain processing.
    * Added accessors for pad meta-data, to be able to show names and descriptions in UIs.
    * GeglColor: more lax parameters for g_arapm_values_cmp
    * exr-save: store 16bpc files as half, fixing gimp#10778
    * ff-load, ff-save: fix build with FFmpeg 7
    * dither: do processing in linear when all levels==2


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: houhongxun <houhongxun@kylinos.cn> - 2:2.99.10-2.p02
changelog:
  - Type: cves
  - ID  : [TASK#489699]
  - SUG : NA
  - DESC: fix CVE-2022-32990 CVE-2025-48797 CVE-2025-48798 CVE-2025-5473


author: houhongxun <houhongxun@kylinos.cn> - 2:2.99.10-2.p03
changelog:
  - Type: cves
  - ID  : [TASK#554869]
  - SUG : NA
  - DESC: fix CVE-2025-6035 CVE-2025-10922 CVE-2025-10934


author: houhongxun <houhongxun@kylinos.cn> - 2:2.99.10-2.p04
changelog:
  - Type: cves
  - ID  : [TASK#580833]
  - SUG : NA
  - DESC: fix CVE-2025-14422 CVE-2025-14424 CVE-2025-14425


author: Qin Fandong <qinfandong@kylinos.cn> - 2:3.0.2-14.p01
changelog:
  - Type: update
  - ID: [BUG#556757]
  - SUG: NA
  - DESC: Add meson option no-splash
          Update bug url


author: fuanan <fuanan3@h-partners.com> - 2.43.0-4
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.43.0-7
changelog:
  - Type:CVE
  - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
  - SUG:NA
  - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386


author: fuanan <fuanan3@h-partners.com> - 2.43.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix malformed patch:
         backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch


author: fuanan <fuanan3@h-partners.com> - 2.43.0-9
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.43.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch
         config.mak.uname: set CSPRNG_METHOD to getrandom on Linux


author: yanglu <yanglu72@h-partners.com> - 2.78.0-1
changelog:
  - update glib-networking version to 2.78.0:
    - disable PKCS#11 tests when GNuTLS is built without PKCS#11 support
    - fix connection tests on 32-bit systems with 64-bit time_t
    - updated translations


author: zhangzikang <zhangzikang@kylinos.cn> - 2.78.3-3
changelog:
  - backport patch:
      backport-gdbusmessage-Clean-the-cached-arg0-when-setting-the-message-body.patch
      backport-gsocketclient-Fix-a-use-after-free-in-g_socket_client_connected_callback.patch
      backport-gcontextspecificgroup-Wait-until-stop_func-is-done.patch
      backport-gresources-fix-memory-leak-from-libelf.patch


author: wuxiaolei <wuxiaolei@kylinos.cn> -2.78.3-8.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC: sync changes from kylin previous version:
          Mov gio-launch-desktop from devel to main rpm (BUG#296979)


author: litenglong <litenglong@kylinos.cn> - 2.38-47.p01
changelog:
  - Type:update
  - ID:[Task#424805]
  - SUG:NA
  - DESC:
         author:  lipengyu <lipengyu@kylinos.cn>
         improve memset perf and add strstr-avx2
         10004--Improve-large-memset-perf-with-non-temporal-stores.patch
         10005-add-strstr-avx2.patch

         author: litenglong <litenglong@kylinos.cn>
         Add tcache_count and stack_cache_size dynamic
         10003-add-dynamic-tunable-for-tcache_count-and-stack-cache.patch

         author: lipengyu <lipengyu@kylinos.cn>
         Optimizing memcpy for KH-40000 and KX-7000-Zhaox
         10002-x86-Optimizing-memcpy-for-KH-40000-and-KX-7000-Zhaox.patch

         author: yueyaoqiang <yueyaoqiang@kylinos.cn>
         backport from sp4,add multi gl support and fix localesdata countryname
         10000-kylin-add-multi-gl-support-for-glibc.patch
         10001-Kylin_fix_localesdata_countryname-2.38-29.patch


author: litenglong <litenglong@kylinos.cn> - 2.38-47.p03
changelog:
  - Type:bugfix
  - ID:[Task#432639]
  - SUG:NA
  - DESC: fix rust compile problem by modify tcache_count counting bug.


author: wuxiaolei <wuxiaolei@kylinos.cn> -2.38-47.p07
changelog:
  - Type:bugfix
  - ID:[BUG#371909]
  - SUG:NA
  - DESC: zh_TW: update locale title and territory descriptors


author: litenglong <litenglong@kylinos.cn> - 2.38-47.p12
changelog:
  - Type:update
  - ID:[Task#550987]
  - SUG:NA
  - DESC: x86: Disable AVX Fast Unaligned Load on Hygon 1/2/3


author: litenglong <litenglong@kylinos.cn> - 2.38-47.p14
changelog:
  - Type:update
  - ID:[Task#553637]
  - SUG:NA
  - DESC: malloc: tcache modify static variable to thread local.


author: panzhe <panzhe@kylinos.cn> - 2.38-47.p15
changelog:
  - Type:update
  - ID:[Task#588463]
  - SUG:NA
  - DESC:
    - memalign: reinstate alignment overflow check (CVE-2026-0861)
    - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)


author: litenglong <litenglong@kylinos.cn> - 2.38-47.p17
changelog:
  - Type:update
  - ID:[Task#595081]
  - SUG:NA
  - DESC: posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281)


author: litenglong <litenglong@kylinos.cn> - 2.38-47.p18
changelog:
  - Type:cves
  - ID:[Bug#572701]
  - SUG:NA
  - DESC: Use pending character state in IBM1390, IBM1399 character sets (CVE-2026-4046)
  - Document CVE-2026-4046


author: chenyanpanHW <chenyanpan@huawei.com> - 1.3.5-4
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/gnome-abrt-1.4.2-update-zh_HK-translations.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git-core


author: peijiankang <peijiankang@kylinos.cn> - 1.4.2-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#385923]
  - SUG:  NA
  - DESC: add gnome-abrt-1.4.2-update-zh_HK-translations.patch


author: xuraoqing <xuraoqing@huawei.com> - 3.8.2-1
changelog:
  - update to 3.8.2
  - some API and ABI modifications, see NEWS for details
  - New option --attime to specify current time
  - libgnutls: Add a mechanism to control whether to enforce extended master secret (RFC 7627)
  - libgnutls: Add additional PBKDF limit checks in FIPS mode as defined in SP 800-132
  - libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to %GNUTLS_NO_DEFAULT_EXTENSIONS.
  - libgnutls: Add support for RFC 9258 external PSK importer.
  - libgnutls: ClientHello extensions are randomized by default,
               To make fingerprinting harder, TLS extensions in ClientHello messages are shuffled.
  - gnutls-cli: New option --starttls-name.
  - libgnutls: transparent KTLS support is extended to FreeBSD kernel.
  - libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452).
  - libgnutls: Add API functions to perform ECDH and DH key agreement.
  - libgnutls: Fix timing side-channel inside RSA-PSK key exchange(CVE-2023-5981).


author: songjuntao <songjuntao@kylinos.cn> - 3.8.2-4.p01
changelog:
  - Type: update
  - ID: TASK#223527
  - SUG: NA
  - DESC: add certtool generate cert and tls1.3 protocol smx algorithm support


author: zhangzikang <zhangzikang@kylinos.cn> - 3.8.2-4.p02
changelog:
  - Type: update
  - ID: [TASK#372985]
  - SUG: NA
  - DESC: Fix gnutlsxx.h file, add set_credentials and db_check_entry functions.
          Supply follow symbols to solve the API/ABI compatibility issue:
            _ZNK6gnutls14server_session14db_check_entryER14gnutls_datum_t
            _ZN6gnutls7session15set_credentialsERNS_11credentialsE


author: jiaocong <jiaocong@kylinos.cn> - 3.8.2-4.p07
changelog:
  - Type:cves
  - ID:[BUG#560111]
  - SUG:NA
  - DESC:backport upstream patch,fix CVE-2026-33845,CVE-2026-33846,CVE-2026-3833,CVE-2026-42009,CVE-2026-42010,CVE-2026-42013,CVE-2026-42014,CVE-2026-42015,CVE-2026-5260,CVE-2026-5419


author: jiaocong <jiaocong@kylinos.cn> - 3.8.2-4.p08
changelog:
  - Type:cves
  - ID:[BUG#542697]
  - SUG:NA
  - DESC:backport upstream patch,fix CVE-2025-32988,CVE-2025-32989,CVE-2025-32990,CVE-2025-6395


author: wangshuo <wangshuo@kylinos.cn> - 1.21.4-29
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:crypto/tls: fix Config.Time in tests using expired certificates


author: Vanient <xiadanni1@huawei.com> - 1.21.4-30
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: allow update of system stack bounds on callback from C thread


author: songliyang <songliyang@kylinos.cn> - 1.21.4-37.p01
changelog:
  - Type: update
  - ID:   [TASK#524047]
  - SUG:  NA
  - DESC: Upgrade to 1.21.4-37 and backport kylin patches


author: huzhangying <huzhangying@huawei.com> - 1.21.4-38
changelog:
  - Type:CVE
  - CVE:CVE-2025-58183,CVE-2025-58185, CVE-2025-58188, CVE-2025-58189, CVE-2025-61724
  - SUG:NA
  - DESC:fix CVE-2025-58183,CVE-2025-58185, CVE-2025-58188, CVE-2025-58189, CVE-2025-61724


author: songliyang <songliyang@kylinos.cn> - 1.21.4-40.p01
changelog:
  - Type: update
  - ID:   [TASK#524047]
  - SUG:  NA
  - DESC: 1.Upgrade to fix CVE-2025-58183 CVE-2025-58185 CVE-2025-61724 CVE-2025-58187 CVE-2025-61723 CVE-2025-47912 CVE-2025-58186 CVE-2025-58189 CVE-2025-58188
          2.Backport kylin patches to fix bugs and support more features


author: huzhangying <huzhangying@huawei.com> - 1.21.4-43
changelog:
  - Type:CVE
  - CVE:fix CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61728,CVE-2025-68121,CVE-2025-61723
  - SUG:NA
  - DESC:fix CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61728,CVE-2025-68121,CVE-2025-61723


author: huzhangying <huzhangying@huawei.com> - 1.21.4-44
changelog:
  - Type:CVE
  - CVE:CVE-2026-27139,CVE-2026-27142,CVE-2026-25679
  - SUG:NA
  - DESC:fix CVE-2026-27139,CVE-2026-27142,CVE-2026-25679


author: songliyang <songliyang@kylinos.cn> - 1.21.4-44.p01
changelog:
  - Type: updates
  - ID:   [TASK#573427] [TASK#610533]
  - SUG:  NA
  - DESC: 1.Upgrade to fix CVE-2025-47912 CVE-2025-58186 CVE-2025-61727 CVE-2025-61729
            CVE-2025-61732 CVE-2025-68119 CVE-2025-61731 CVE-2025-61728 CVE-2025-61726 CVE-2025-68121
          2.Backport kylin patches to fix bugs and support more features
          3.Fix missing patches errors on sw_64 and modify patch numbers


author: huzhangying <huzhangying@huawei.com> - 1.21.4-45
changelog:
  - Type:CVE
  - CVE:CVE-2026-27143,CVE-2026-27144,CVE-2026-32288,CVE-2026-27140
  - SUG:NA
  - DESC:fix CVE-2026-27143,CVE-2026-27144,CVE-2026-32288,CVE-2026-27140


author: songliyang <songliyang@kylinos.cn> - 1.21.4-45.p01
changelog:
  - Type: updates
  - ID:   [BUG#568023] [BUG#568019] [BUG#568021] [BUG#570383]
  - SUG:  NA
  - DESC: 1.Upgrade to fix CVE-2026-27143,CVE-2026-27144,CVE-2026-32288,CVE-2026-27140
          2.Backport kylin patches to fix bugs and support more features
          3.Fix missing patches errors on sw_64 and modify patch numbers


author: panxiaohe <panxh.life@foxmail.com> - 3.7-5
changelog:
  - grep: Don't limit jitstack_max to INT_MAX
  - grep: speed up, fix bad-UTF8 check with -P
  - grep: fix minor -P memory leak


author: andy lau <liuyang01@kylinos.cn> - 1:2.12-31.se.05.p01
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC: [backport] fix bug about petitboot doesn't ignore EFI entries for ppc64le
          [backport] Inherit 'Add BLS Support' patch from grub-2.06
          [backport] 10_linux: fix missing "ro" in kernel boot parameters Disable LTO
          [backport] use confidential computing provisioned secrets for disk decryption
          [backport] commands/efi/tpm: Re-enable measurements on confidential computing platforms
          [backport] revert sohpgo's modify-efi_max_usable-addr.patch
          [backport] commands/legacycfg: Avoid closing file twice
          [backport] fix not verifying grub.cfg when loading it


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.12-31.se.05.p02
changelog:
  - Type:update
  - ID:TAKS#435953
  - SUG:NA
  - DESC:Remove the kylin_tpm.mod module and unused code in the trusted boot mode.


author: Qin Fandong <qinfandong@kylinos.cn> - 1:2.12-31.se.05.p03
changelog:
  - Type:Update
  - ID:TASK#457741
  - SUG:NA
  - DESC:i386: Check for cpuid family when flush cache only on VIA CPUs


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.12-21.se.06.p05
changelog:
  - Type:bugfix
  - ID:BUG#352094
  - SUG:NA
  - DESC:Cancel the interception prompt during startup when an abnormal configuration file is detected


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.12-31.se.07.p06
changelog:
  - Type:Update
  - ID:BUG#357087
  - SUG:NA
  - DESC:trust boot revise the prompt for scenarios where the TCM device not found


author: Qin Fandong <qinfandong@kylinos.cn> - 1:2.12-31.se.07.p07
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-54770,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload
         net/net: Unregister net_set_vlan command on unload


author: Funda Wang <fundawang@yeah.net> - 1:2.12-40
changelog:
  - requirement
  - CVE:NA
  - SUG:NA
  - DESC: Disable the .package_note awfulness
  - DESC: drop duplicate list of locale files


author: yueyuankun <yueyuankun@kylinos.cn> - 1:2.12-41.p01
changelog:
  - Type:bugfix
  - ID:TASK#533221
  - SUG:NA
  - DESC:secure boot: support National Security and RSA
         loongarch64 :3C5000L boot with grub2 EFI
         loongarch64 :support large initramfs loading and startup
         i386: check for cpuid family when flush cache only on VIA CPUs
         add KYLIN_ROOT_USE_UUID, use UUID in this case


author: yueyuankun <yueyuankun@kylinos.cn> - 1:2.12-41:2.12-41.p02.se.01
changelog:
  - Type:update
  - ID:TASK#544091
  - SUG:NA
  - DESC:SW64: Enable GRUB EFI build support for sw_64 architecture in grub.macros


author: Qin Fandong <qinfandong@kylinos.cn> - 1:2.12-41.p05.se.02
changelog:
  - Type: CVE
  - ID: [BUG#603853]
  - CVE: CVE-2025-61663, CVE-2025-61664
  - SUG: NA
  - DESC: fix CVE-2025-61663, CVE-2025-61664


author: Qin Fandong <qinfandong@kylinos.cn> - 1:2.12-41.p06.se.02
changelog:
  - Type: update
  - ID: [TASK#648189] [TASK#648191]
  - SUG: NA
  - DESC: fix(trust_measurefiles): allocate correct struct size, not pointer size
          fix(tpm_efi): pass correct command buffer length to SM3_process


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.18.4-1
changelog:
  - Upgrade to 1.18.4
  - Delete Adapt-to-backwards-incompatible-change-in-GUN.patch whose target
    patch file doesn't exist in this version 1.18.4
  - Add gstreamer-inspect-rpm-format.patch
  - Use meson rebuild


author: lizhengde <lizhengde@xfusion.com> - 1.16.2-14
changelog:
  - Type:CVE
  - CVE:CVE-2026-53702
  - SUG:NA
  - DESC:Stack buffer overflow in GStreamer H.265 parser. Fix incorrect loop bound.


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.18.4-1
changelog:
  - Upgrade to 1.18.4
  - Delete Adapt-to-backwards-incompatible-change-in-GUN.patch whose target
    patch file doesn't exist in this version 1.18.4
  - Use meson rebuild


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.20.3-3
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47599,CVE-2024-47613,CVE-2024-47775
    CVE-2024-47776,CVE-2024-47777,CVE-2024-47778,CVE-2024-47774
    CVE-2024-47540,CVE-2024-47602,CVE-2024-47601,CVE-2024-47603
    CVE-2024-47834,CVE-2024-47537,CVE-2024-47597,CVE-2024-47543
    CVE-2024-47596,CVE-2024-47539,CVE-2024-47546,CVE-2024-47598


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 3.24.41-2.p01
changelog:
  - Type: bugfix
  - ID: [BUG#344842]
  - SUG:  NA
  - DESC:  fix traditional chinese translation of credits and licenses


author: litianhao <litianhao@kylinos.cn> - 1.50.2-7.se.01
changelog:
  - Type: update
  - ID: [TASK#226811] 合入安全套件功能
  - SUG: NA
  - DESC: 合入sm设备管控补丁
  -       gvfs-add-sm-devctl.patch


author: huayadong<huayadong@kylinos.cn> - 1.50.2-7.p01.se.01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: remove BuildRequires: libsmbclient-devel Provides: gvfs-smb


author: huayadong<huayadong@kylinos.cn> - 1.50.2-7.se.01.p02
changelog:
  - Type: update
  - ID  : [TASK#422649]
  - SUG : NA
  - DESC: add BuildRequires: libsmbclient-devel Provides: gvfs-smb


author: xinghe <xinghe2@h-partners.com> - 2.9.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yanglu <yanglu72@h-partners.com> - 2.9.5-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:queues:Do not use pendconn_grab_from_px
         queues:Make sure we call process_srv_queue when leaving
         queue:Make process_srv_queue return the number of streams


author: xinghe <xinghe2@h-partners.com> - 2.9.5-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         server/addr: fix tune.events.max-events-at-once event miss and leak


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.58-2
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: zhangyaqi <zhagnyaqi@kylinos.cn> - 2.4.58-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:allocate a heap buffer if the configured size is greater than the stack-allocated buffer.


author: chengyechun <chengyechun1@huawei.com> - 2.4.58-6
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: xingwei <xingwei14@h-partners.com> - 2.4.58-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: yanglu <yanglu72@h-partners.com> - 2.4.58-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: lifeifei <lifeifei@kylinos.cn> - 2.4.58-10.p01
changelog:
  - Type:bugfix
  - ID:[Task#500427]
  - SUG:NA
  - DESC: Add kylin support and fix htcacheclean.service start error.
          fix index.html for kylin.
  	fix CVE-2024-38472 and CVE-2024-40898.


author: tangce <tangce1@h-partners.com> - 2.4.58-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: gaoyukun <gaoyukun@kylinos.cn> - 2.4.58-12.p01
changelog:
  - Type:bugfix
  - ID:[Task#542709]
  - SUG:NA
  - DESC: Add kylin support and fix htcacheclean.service start error.
          fix index.html for kylin.
          fix CVE-2024-38472 and CVE-2024-40898.


author: tangce <tangce1@h-partners.com> - 2.4.58-14
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - SUG:NA
  - DESC:fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: tangce <tangce1@h-partners.com> - 2.4.58-15
changelog:
  - Type:CVE
  - CVE:CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032
  - SUG:NA
  - DESC:fix CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 2.4.58-15.p01
changelog:
  - Type:bugfix
  - ID:[Task#542709]
  - SUG:NA
  - DESC: Backport 2.4.58-12.p01 and p02 patches:
           Add kylin support and fix htcacheclean.service start error.
           Fix index.html for kylin.
           Fix CVE-2024-38472 and CVE-2024-40898.


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 2.4.58-15.p02
changelog:
  - Type:cves
  - ID:CVE-2026-49975 CVE-2026-29167 CVE-2026-42535 CVE-2026-44631
  - SUG:NA
  - DESC:fix CVE-2026-49975 CVE-2026-29167 CVE-2026-42535 CVE-2026-44631


author: wuxiaolei <wuxiaolei@kylinos.cn> - 74.1-4.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC: sync changes from kylin previous version:
          Modify license information (TASK#425438)


author: herengui <herengui@uniontech.com> - 1.7.3-11
changelog:
  - Fix: fix issue that change language in deepin-control-center cannot affect the fcitx
  - Bug: #I47HF0


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 20221126-8.p02
changelog:
  - Type:update
  - ID:[TASK#633779]
  - SUG:NA
  - DESC:Fix null pointer dereference risk when accessing ai_family after address lookup failure


author: chenyanpanHW <chenyanpan@huawei.com> - 4.5.0-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-Modify-sensitive-information-fields.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-BUG-285059-Revise-the-expression-of-more-sensitive-w.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-fix-traditional-chinese-manchu-name.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: wuxiaolei <wuxiaolei@kylinos.cn> - 4.15.0-1.p03
changelog:
  - Type: bugfix
  - ID: [BUG#587457]
  - SUG: NA
  - DESC: Fix Traditional Chinese translation of Manchu language name


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.462.b08-0
changelog:
  - update to 8u462
  - deleted 8026976-ECParameters-Point-does-not-match-field-size.patch
  - deleted 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.462.b08-1
changelog:
  - deleted 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add Fix-tests-for-OS-with-64k-page-size.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.462.b08-4.p01
changelog:
  - Type: update
  - ID:   [TASK#520393]
  - SUG:  NA
  - DESC: openjdk-1.8.0.462 GA release with kylin support


author: Benshuai5D <benshuai5d@163.com> -1:1.8.0.462.b08-5
changelog:
  - add 8287432-C2-assert-tn-in-0-__null-failed-must-have-li.patch
  - add 8210389-C2-assert-n-outcnt-0-C-top-n-n-is_Proj-faile.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.472.b08-0
changelog:
  - update to 8u472
  - add 8268366-C1-Incorrect-calculation-of-has_fpu_register.patch
  - deleted 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified add-missing-test-case.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.472.b08-2.p01
changelog:
  - Type: update
  - ID:   [TASK#573629]
  - SUG:  NA
  - DESC: openjdk-1.8.0.472 GA release with kylin support


author: zhaosaisai <zhaosaisai@kylinos.cn> -1:1.8.0.482.b08-7.p01
changelog:
  - Type: update
  - ID:   [TASK#598989]
  - SUG:  NA
  - DESC: openjdk-1.8.0.482 GA release with kylin support


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.28.6-0
changelog:
  - update to 11.0.28+6(GA)
  - delete 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch


author: songliyang <songiyang@kylinos.cn> - 1:11.0.28.6-1.p01
changelog:
  - Type: update
  - ID:   [TASK#520393]
  - SUG:  NA
  - DESC: openjdk-11.0.28.6 GA release with kylin support


author: songliyang <songiyang@kylinos.cn> - 1:11.0.29.7-1.p01
changelog:
  - Type: update
  - ID:   [TASK#573629]
  - SUG:  NA
  - DESC: openjdk-11.0.29.7 GA release with kylin support


author: DXwangg <wangjiawei80@huawei.com> -1:11.0.29.7-0
changelog:
  - update to 11.0.29+7(GA)
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch
  - add Enable-optimizations-upon-detecting-Phytium-CPU.patch


author: douyiwang <douyiwang@huawei.com> -1:11.0.29.7-2
changelog:
  - add fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch to fix CVE-2025-66293


author: zhaosaisai <zhaosaisai@kylinos.cn> - 1:11.0.30.7-4.p01
changelog:
  - Type: update
  - ID:   [TASK#598989]
  - SUG:  NA
  - DESC: openjdk-11.0.30.7 GA release with kylin support


author: wulongyao <wulongyao1@huawei.com> - 1:17.0.16.8-0
changelog:
  - update to 17.0.16
  - modified Apply-TBI-to-ZGC-of-JDK17.patch
  - delete 8314236-Overflow-in-Collections.rotate.patch
  - modified puyuan-jdk17.0.9-patch.patch
  - modified 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modified Backport-Important-Fixed-Issues.patch
  - delete 8352716-tz-Update-Timezone-Data-to-2025b.patch


author: songliyang <songliyang@kylinos.cn> - 1:17.0.16.8-2.p01
changelog:
  - Type: update
  - ID:   [TASK#520393]
  - SUG:  NA
  - DESC: openjdk-17.0.16.8 GA release with kylin support


author: songliyang <songliyang@kylinos.cn> - 1:17.0.17.10-1.p01
changelog:
  - Type: update
  - ID:   [TASK#573629]
  - SUG:  NA
  - DESC: openjdk-17.0.17.10 GA release with kylin support


author: benshuai5d <benshuai5d@163.com> 1:17.0.17.10-0
changelog:
  - update to 17.0.17
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify Huawei-fix-potential-build-fail-in-jbolt.patch
  - add Backport-of-8340547-Starting-many-threads-can-delay-safepoints.patch


author: BenShuai5D <benshuai5d@163.com> 1:17.0.18.8-0
changelog:
  - upgrade to 17.0.18
  - modify Backport-Important-Fixed-Issues.patch
  - modify downgrade-the-glibc-symver-of-memcpy.patch
  - modify puyuan-jdk17.0.9-patch.patch
  - modify add-version-txt.patch
  - modify jdk17-Add-KAE-provider.patch
  - add huawei-Fix-KAEProvider-SM2-Code.patch


author: zhaosaisai <zhaosaisai@kylinos.cn> - 1:17.0.18.8-8.p01
changelog:
  - Type: update
  - ID:   [TASK#598989]
  - SUG:  NA
  - DESC: openjdk-17.0.18.8 GA release with kylin support
          add patch kylin-fix-loongarch-ldc-error.patch


author: zhaosaisai <zhaosaisai@kylinos.cn> - 1:21.0.10.7-10.p01
changelog:
  - Type: update
  - ID:   [TASK#598989]
  - SUG:  NA
  - DESC: openjdk-21.0.10.7 GA release with Loongarch64 support


author: Dingli Zhang <dingli@iscas.ac.cn> - 1:21.0.7.6-4
changelog:
  - add Backport-JDK-8352673-RISC-V-Vector-can-t-be-turned-o.patch
  - add Backport-JDK-8355878-RISC-V-jdk-incubator-vector-Dou.patch


author: Benshuai5D <benshuai5d@163.com> - 1:21.0.7.6-6
changelog:
  - add Backport-JDK-7036144-GZIPInputStream-readTrailer-use.patch
  - add Backport-JDK-8314236-Overflow-in-Collections.rotate.patch
  - add Backport-JDK-8340532-C2-assert-is_OuterStripMinedLoo.patch
  - add huawei-fix-arm32-build-fail-undefined-reference-_Copy_conjo.patch


author: Benshuai5D <benshuai5d@163.com> - 1:21.0.8.9-0
changelog:
  - update to jdk21.0.8-ga
  - delete 8334780-Crash-assert-h_array_list.not_null-failed-in.patch
  - delete Backport-JDK-8328107-Shenandoah-C2-TestVerifyLoopOpt.patch
  - delete Backport-JDK-8333805-Replaying-compilation-with-null.patch
  - delete Backport-JDK-8338010-WB_IsFrameDeoptimized-miss-Reso.patch
  - delete 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - delete Backport-JDK-8314236-Overflow-in-Collections.rotate.patch
  - modify huawei-Add-KAE-zip-feature.patch


author: Benshuai5D <benshuai5d@163.com> - 1:21.0.9.10-0
changelog:
  - update to jdk21.0.9-ga
  - delete Backport-JDK-8339460-CDS-error-when-module-is-locate.patch
  - delete Backport-JDK-7036144-GZIPInputStream-readTrailer-use.patch
  - modify huawei-Add-KAE-zip-feature.patch
  - add huawei-posix_spawn-clock_gettime-clock_getres-__cxa_thread_.patch


author: yaoxin <1024769339@qq.com> - 1.8.0-4
changelog:
  - Fix CVE-2026-40612,CVE-2026-41256,CVE-2026-41257,CVE-2026-43894,
    CVE-2026-43895,CVE-2026-43896 and CVE-2026-44777


author: lipengyu <lipengyu@kylinos.cn> - 1.7.22-4.p01
changelog:
  - Type:update
  - ID: [TASK#500817]
  - SUG:NA
  - DESC:delete sensitive words 
         add require base64coder


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.19.v2505
changelog:
  - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta) [task:642737] {CVE-2026-46331}


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.20.v2505
changelog:
  - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Christian Brauner) [task:636701] {CVE-2026-46242}
  - eventpoll: move epi_fget() up (Christian Brauner) [task:636701]
  - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Christian Brauner) [task:636701]
  - eventpoll: kill __ep_remove() (Christian Brauner) [task:636701]
  - eventpoll: split __ep_remove() (Christian Brauner) [task:636701]
  - eventpoll: use hlist_is_singular_node() in __ep_remove() (Christian Brauner) [task:636701]
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [task:634999] {CVE-2026-46300}
  - net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [task:634641] {CVE-2026-43503}
  - Revert "MAILLIST: net: skbuff: propagate shared-frag marker through frag-transfer helpers" (Yun Lu) [task:634999, task:634641]
  - bonding: Fix kabi change in struct header_ops (Wang Yan) [task:634933]
  - bonding: prevent potential infinite loop in bond_header_parse() (Eric Dumazet) [task:623005]
  - bonding: fix type confusion in bond_setup_by_slave() (Jiayuan Chen) [task:623005] {CVE-2026-43456}


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.21.v2505
changelog:
  - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [task:649409] {CVE-2026-53359}
  - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Sean Christopherson) [task:632813]
  - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [task:651189]
  - rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [task:632813] {CVE-2026-43499}


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.22.v2505
changelog:
  - xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong) [task:657877] {CVE-2026-64600}
  - xfs: enable CoW for realtime data (Darrick J. Wong) [task:657877]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.23.v2505
changelog:
  - Revert "arm64: Add support for TSV110 Spectre-BHB mitigation" (Can Peng) [task:659597, bug:653883]
  - arm64: Expose the end of the linear map in PHYSMEM_END (D Scott Phillips) [task:655641]
  - xfs: fix off-by-one error in fsmap's end_daddr usage (Darrick J. Wong) [bug:655095]
  - xfs: Fix missing interval for missing_owner in xfs fsmap (Zizhi Wo) [bug:655095]
  - sw64: defconfig: enable memcg qos level option (liuyunchen) [bug:654987]
  - mptcp: fix the timeout in addr retransmit (YANGANG) [bug:649905]
  - Revert "kalert: Introduce netlink_rcv_skb to handle recv messages" (Huiwen He) [bug:649415, bug:646955]
  - Revert "kalert: introduce doit mechanism and support nlattr policy" (Huiwen He) [bug:649415, bug:646955]
  - Revert "kalert: add set kalert channel parameter support" (Huiwen He) [bug:649415, bug:646955]
  - Revert "kalert: modify kalert_send_reply to accept a prepared skb" (Huiwen He) [bug:649415, bug:646955]
  - Revert "kalert: add get kalert channel runtime status support" (Huiwen He) [bug:649415, bug:646955]
  - Revert "kalert: add subscribe kernel fault events support" (Huiwen He) [bug:649415, bug:646955]
  - Revert "kalert: optimize fault event dispatch logic" (Huiwen He) [bug:649415, bug:646955]
  - Revert "kalert: add some new types and bitmap-based event list subscription" (Huiwen He) [bug:649415, bug:646955]
  - Revert "kalert: add eBPF kfunc bpf_kalert_report_event" (Huiwen He) [bug:649415, bug:646955]
  - Revert "kalert: Add macros to simplify event report" (Huiwen He) [bug:649415, bug:646955]
  - Revert "kalert: drop debug print in kfunc init path" (Huiwen He) [bug:649415, bug:646955]
  - Revert "kalert: Support Memory and PCIe RAS event reporting" (Huiwen He) [bug:649415, bug:646955]
  - Revert "kalert: Add rate-limiting support for event reporting" (Huiwen He) [bug:649415, bug:646955]
  - Revert "kalert: Add KUnit tests" (Huiwen He) [bug:649415, bug:646955]
  - Revert "kalert: Rate limit BPF event reporting" (Huiwen He) [bug:649415, bug:646955]
  - Revert "kalert: add periodic heartbeat work for subscriber cleanup" (Huiwen He) [bug:649415, bug:646955]
  - Revert "kalert: move INIT_WORK to connection initialization" (Huiwen He) [bug:649415, bug:646955]
  - Revert "kalert: implement unsubscribe handler" (Huiwen He) [bug:649415, bug:646955]
  - Revert "kalert: optimize heartbeat for proactive subscriber cleanup" (Huiwen He) [bug:649415, bug:646955]
  - Revert "kalert: limit maximum subscribers to 2048" (Huiwen He) [bug:649415, bug:646955]
  - Revert "kalert: fix RAS event reporting ID mismatch" (Huiwen He) [bug:649415, bug:646955]
  - PCI: skip config-space polling in pcie_flr() to avoid CPU stall (liuyunchen) [bug:609519]
  - configs : enable vhost_ioctl (liuyunchen) [bug:607161]
  - configs: enable FS_POSIX_ACL (liuyunchen) [task:653921]
  - apparmor: Fix & Optimize table creation from possibly unaligned memory (Helge Deller) [task:635315] {CVE-2026-45893}
  - locking/spinlock/debug: Fix data-race in do_raw_write_lock (Alexander Sverdlin) [task:642543]
  - ext4: drop extent cache after doing PARTIAL_VALID1 zeroout (Zhang Yi) [task:609645]
  - ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 (Zhang Yi) [task:609645]
  - ext4: subdivide EXT4_EXT_DATA_VALID1 (Zhang Yi) [task:609645]
  - ext4: don't cache extent during splitting extent (Zhang Yi) [task:600375]
  - netfilter: nf_conncount: increase the connection clean up limit to 64 (Fernando Fernandez Mancera) [task:636307] {CVE-2026-45860}
  - netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH (Fernando Fernandez Mancera) [task:636307]
  - Input: alps - fix use-after-free bugs caused by dev3_register_work (Duoming Zhou) [task:590069] {CVE-2025-68822}
  - ext4: save unnecessary indentation in ext4_ext_create_new_leaf() (Baokun Li) [task:649815]
  - ext4: make some fast commit functions reuse extents path (Baokun Li) [task:649815]
  - ext4: refactor ext4_swap_extents() to reuse extents path (Baokun Li) [task:649815]
  - ext4: get rid of ppath in convert_initialized_extent() (Baokun Li) [task:649815]
  - ext4: get rid of ppath in ext4_ext_handle_unwritten_extents() (Baokun Li) [task:649815]
  - ext4: get rid of ppath in ext4_ext_convert_to_initialized() (Baokun Li) [task:649815]
  - ext4: get rid of ppath in ext4_convert_unwritten_extents_endio() (Baokun Li) [task:649815]
  - ext4: get rid of ppath in ext4_split_convert_extents() (Baokun Li) [task:649815]
  - ext4: get rid of ppath in ext4_split_extent() (Baokun Li) [task:649815]
  - ext4: get rid of ppath in ext4_force_split_extent_at() (Baokun Li) [task:649815]
  - ext4: get rid of ppath in ext4_split_extent_at() (Baokun Li) [task:649815]
  - ext4: get rid of ppath in get_ext_path() (Baokun Li) [task:649815]
  - ext4: add new ext4_ext_path_brelse() helper (Baokun Li) [task:649815]
  - usb: gadget: f_fs: fix MODULE_IMPORT_NS build error (Haofeng Li) [task:645181]
  - Revert "net: macb: Convert tasklet API to new bottom half workqueue mechanism" (Haofeng Li) [task:645181]
  - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [task:640235] {CVE-2026-46324}
  - mm: add missing KCSAN exclusivity checks for page->flags reads (Hui Zhu) [task:639759]
  - bpf: Fix tcx/netkit detach permissions when prog fd isn't given (Guillaume Gonnet) [task:636361] {CVE-2026-45932}
  - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Li Zhijian) [task:640239] {CVE-2026-46325}
  - minmax: make generic MIN() and MAX() macros available everywhere (Linus Torvalds) [task:640239, task:538655]
  - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Benjamin Cheng) [task:636013, task:632813]
  - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Benjamin Cheng) [task:636013, task:632813]
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Benjamin Cheng) [task:635887] {CVE-2026-46204}
  - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (David Rosca) [task:635887]
  - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Benjamin Cheng) [task:632813]
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Benjamin Cheng) [task:635845] {CVE-2026-46199}
  - net/sched: act_api: use RCU with deferred freeing for action lifecycle (Jamal Hadi Salim) [task:646211] {CVE-2026-53264}
  - rcu: Fix rcu_read_unlock() deadloop due to softirq (Yao Kai) [task:635337] {CVE-2026-45957}
  - sched_ext: Don't warn on NULL cgrp_moving_from in scx_cgroup_move_task() (Tejun Heo) [task:647961] {CVE-2026-53328}
  - ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (Linmao Li) [bug:505241]
  - mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list (Jinjiang Tu) [bug:384799, task:645801]
  - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Michal Kosiorek) [task:635943] {CVE-2026-46116}
  - audit: Fix data races of skb_queue_len() readers on audit_queue (Chi Wang) [task:641401]
  - config: Enable team module configuration (zhulei) [bug:448057]
  - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (Mingyu Wang) [task:639711] {CVE-2026-46275}
  - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (Jonathan Rissanen) [task:639711]
  - io_uring/kbuf: check if target buffer list is still legacy on recycle (Jens Axboe) [task:627855] {CVE-2026-43366}
  - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Kuniyuki Iwashima) [task:554251] {CVE-2025-40168}
  - wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (Tamizh Chelvam Raja) [task:553457] {CVE-2025-38605}
  - bonding: do not set usable_slaves for broadcast mode (Hangbin Liu) [task:540607]
  - bonding: fix use-after-free due to enslave fail after slave array update (Nikolay Aleksandrov) [task:540607] {CVE-2026-23171}
  - net: bonding: update the slave array for broadcast mode (Tonghao Zhang) [task:540607]
  - wifi: mac80211: check tdls flag in ieee80211_tdls_oper (Deepanshu Kartikey) [task:624641] {CVE-2026-43052}
  - af_unix: Don't leave consecutive consumed OOB skbs. (Kuniyuki Iwashima) [task:493613] {CVE-2025-38236}
  - net: stmmac: Prevent NULL deref when RX memory exhausted (Sam Edwards) [task:635941] {CVE-2026-46110}
  - net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() (Russell King (Oracle)) [task:635941]
  - net: stmmac: avoid shadowing global buf_sz (Russell King (Oracle)) [task:635941]
  - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (Chaitanya Kulkarni) [task:632813] {CVE-2026-46304}
  - isofs: validate Rock Ridge CE continuation extent against volume size (Michael Bommarito) [task:632813] {CVE-2026-46303}
  - wifi: mt76: mt7921: fix a potential clc buffer length underflow (Leon Yen) [task:632813] {CVE-2026-46136}
  - ext4: fix ext4_mb_mark_diskspace_used() argument mismatch (Brian Foster) [task:612881]
  - ext4: fix dirtyclusters double decrement on fs shutdown (Brian Foster) [task:609645] {CVE-2026-45920}
  - fbcon: Avoid OOB font access if console rotation fails (Thomas Zimmermann) [task:632813] {CVE-2026-46191}
  - scsi: bfa: Double-free fix (jackysliu) [task:525135] {CVE-2025-38699}
  - bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (Weiming Shi) [task:635413] {CVE-2026-45839}
  - iommu/vt-d: Clear Present bit before tearing down PASID entry (Lu Baolu) [task:635117] {CVE-2026-45894}
  - media: mtk-jpeg: cancel workqueue on release for supported platforms only (Louis-Alexis Eyraud) [task:651189]
  - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Greg Kroah-Hartman) [task:624609] {CVE-2026-31729}
  - ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref (Yang Erkun)
  - sctp: diag: reject stale associations in dump_one path (Zhao Zhang) [task:643813] {CVE-2026-52917}
  - sctp: Hold sock lock while iterating over address list (Stefan Wiehler) [task:561765]
  - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Jenny Guanni Qu) [task:609645] {CVE-2026-43453}
  - RDMA/hns: Fix unlocked call to hns_roce_qp_remove() (Jason Gunthorpe) [task:632813] {CVE-2026-46112}
  - RDMA/hns: Fix WQ_MEM_RECLAIM warning (Chengchang Tang) [task:600375] {CVE-2026-46265}
  - RDMA/rxe: Reject unknown opcodes before ICRC processing (Michael Bommarito) [task:632813] {CVE-2026-46133}
  - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (Yi Liu) [task:600375] {CVE-2026-45856}
  - tap: free page on error paths in tap_get_user_xdp() (Weiming Shi) [task:640233] {CVE-2026-46320}
  - mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() (Tudor Ambarus) [task:632813] {CVE-2026-46190}
  - iommu/vt-d: Flush cache for PASID table before using it (Dmytro Maluka) [task:600375] {CVE-2026-45862}
  - netfilter: nft_inner: Fix IPv6 inner_thoff desync (Yizhou Zhao) [task:637359] {CVE-2026-46244}
  - lib: test_hmm: evict device pages on file close to avoid use-after-free (Alistair Popple) [task:632813] {CVE-2026-46280}
  - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown (Dipayaan Roy) [task:609645] {CVE-2026-23454}
  - lib/scatterlist: fix length calculations in extract_kvec_to_sg (Christian A. Ehrhardt) [task:632813] {CVE-2026-46289}
  - ipv4: icmp: validate reply type before using icmp_pointers (Ruide Cao) [task:632813] {CVE-2026-46037}
  - RDMA/rxe: Fix double free in rxe_srq_from_init (Jiasheng Jiang) [task:600375] {CVE-2026-45852}
  - netfilter: nft_tunnel: fix use-after-free on object destroy (Tristan Madani) [task:643813] {CVE-2026-53212}
  - wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task (Marek Szyprowski) [task:632813] {CVE-2026-46180}
  - net: qrtr: ns: Fix use-after-free in driver remove() (Manivannan Sadhasivam) [task:632813] {CVE-2026-46047}
  - ipvs: clear the svc scheduler ptr early on edit (Julian Anastasov) [task:643813] {CVE-2026-53270}
  - xfrm: espintcp: do not reuse an in-progress partial send (Wyatt Feng) [task:643813] {CVE-2026-52935}
  - drm/amdkfd: validate SVM ioctl nattr against buffer size (Alysa Liu) [task:632813] {CVE-2026-46197}
  - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (Hyunwoo Kim) [task:609645] {CVE-2026-43450}
  - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() (Jason Gunthorpe) [task:632813] {CVE-2026-46178}
  - tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi) [task:640245] {CVE-2026-46321}
  - flow_dissector: do not dissect PPPoE PFC frames (Qingfang Deng) [task:632813] {CVE-2026-46306}
  - dm: fix a buffer overflow in ioctl processing (Mikulas Patocka) [task:632813] {CVE-2026-46294}
  - net/sched: act_ct: Only release RCU read lock after ct_ft (Jamal Hadi Salim) [task:637359] {CVE-2026-46319}
  - drm/amdgpu: Add bounds checking to ib_{get,set}_value (Benjamin Cheng) [task:632813] {CVE-2026-46218}
  - Bluetooth: hci_conn: fix potential UAF in create_big_sync (David Carlier) [task:632813] {CVE-2026-46111}
  - media: mtk-jpeg: fix use-after-free in release path due to uncancelled work (Fan Wu) [task:632813] {CVE-2026-46011}
  - vsock: fix buffer size clamping order (Norbert Szetei) [task:632813] {CVE-2026-46234}
  - net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen) [task:643813] {CVE-2026-52943}
  - io_uring/poll: fix signed comparison in io_poll_get_ownership() (Longxuan Yu) [task:632813] {CVE-2026-52933}
  - RDMA/rxe: Fix race condition in QP timer handlers (Li Zhijian) [task:600375] {CVE-2026-45910}
  - atm: lec: fix use-after-free in sock_def_readable() (Deepanshu Kartikey) [task:615913] {CVE-2026-43050}
  - X.509: Fix out-of-bounds access when parsing extensions (Lukas Wunner) [task:618851] {CVE-2026-31430}
  - md/raid5: validate payload size before accessing journal metadata (Junrui Luo) [task:632813] {CVE-2026-46070}
  - apparmor: fix rlimit for posix cpu timers (John Johansen) [task:600375] {CVE-2026-46328}
  - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Michael Bommarito) [task:632813] {CVE-2026-46114}
  - libceph: Fix slab-out-of-bounds access in auth message processing (Raphael Zimmer) [task:632813] {CVE-2026-46119}
  - ocfs2: fix out-of-bounds write in ocfs2_write_end_inline (Joseph Qi) [task:622807] {CVE-2026-43075}
  - block: add pgmap check to biovec_phys_mergeable (Naman Jain) [task:632813] {CVE-2026-46115}
  - wifi: mac80211: remove station if connection prep fails (Johannes Berg) [task:632813] {CVE-2026-46125}
  - bpf: Preserve id of register in sync_linked_regs() (Puranjay Mohan) [task:635141] {CVE-2026-45933}
  - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Florian Westphal) [task:636315] {CVE-2026-45859}
  - media: amphion: Fix race between m2m job_abort and device_run (Ming Qian) [task:632813] {CVE-2026-46058}
  - Bluetooth: serialize accept_q access (Jiexun Wang) [task:637359] {CVE-2026-52918}
  - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (Safa Karakuş) [task:637359]
  - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (Yochai Eisenrich) [task:615913] {CVE-2026-43040}
  - smb: client: use kzalloc to zero-initialize security descriptor buffer (Bjoern Doebel) [task:632813] {CVE-2026-46139}
  - sctp: purge outqueue on stale COOKIE-ECHO handling (Xin Long) [task:643813] {CVE-2026-52924}
  - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [task:637359] {CVE-2026-46323}
  - ipmi: Add limits to event and receive message requests (Corey Minyard) [task:632813] {CVE-2026-46177}
  - RDMA/mana: Validate rx_hash_key_len (Jason Gunthorpe) [task:637359] {CVE-2026-46145}
  - pstore/ram: fix buffer overflow in persistent_ram_save_old() (Sai Ritvik Tanksalkar) [task:600375] {CVE-2026-46253}
  - netfilter: nft_ct: drop pending enqueued packets on removal (Pablo Neira Ayuso) [task:609645] {CVE-2026-43060}
  - gve: Fix stats report corruption on queue count change (Debarghya Kundu) [task:595741] {CVE-2026-23262}
  - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (Jamal Hadi Salim) [task:582447] {CVE-2025-71066}
  - netfilter: xt_policy: fix strict mode inbound policy matching (Jiexun Wang) [task:637359] {CVE-2026-52920}
  - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (hkbinbin) [task:632813] {CVE-2026-46043}
  - thermal: core: Fix thermal zone governor cleanup issues (Rafael J. Wysocki) [task:632813] {CVE-2026-46021}
  - rxrpc: Fix re-decryption of RESPONSE packets (David Howells) [task:632813] {CVE-2026-45988}
  - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check (Greg Kroah-Hartman) [task:632813] {CVE-2026-46006}
  - libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() (Raphael Zimmer) [task:632813] {CVE-2026-46024}
  - tcp: call sk_data_ready() after listener migration (Zhenzhong Wu) [task:632813] {CVE-2026-46015}
  - netfilter: nf_log: validate MAC header was set before dumping it (Xiang Mei) [task:643813] {CVE-2026-52942}
  - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Kevin Cheng) [task:635059] {CVE-2026-46076}
  - net/smc: avoid early lgr access in smc_clc_wait_msg (Ruijie Li) [task:632813] {CVE-2026-46027}
  - btrfs: fix block_group_tree dirty_list corruption (Boris Burkov) [task:600375] {CVE-2026-46251}
  - smb/client: fix out-of-bounds read in smb2_compound_op() (Zisen Ye) [task:632813] {CVE-2026-46155}
  - fanotify: fix false positive on permission events (Miklos Szeredi) [task:632813] {CVE-2026-46150}
  - ALSA: ctxfi: Fix missing SPDIFI1 index handling (Takashi Iwai) [task:615913] {CVE-2026-31776}
  - bpf: Fix bpf_xdp_store_bytes proto for read-only arg (Paul Chaignon) [task:600375] {CVE-2026-45886}
  - iommu/vt-d: Clear Present bit before tearing down context entry (Lu Baolu) [task:635073] {CVE-2026-45944}
  - Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt (Luiz Augusto von Dentz) [task:632813] {CVE-2026-46138}
  - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (Jinliang Zheng) [task:600375] {CVE-2026-46259}
  - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (Greg Kroah-Hartman) [task:632813] {CVE-2026-46149}
  - ublk: Validate SQE128 flag before accessing the cmd (Govindarajulu Varadarajan) [task:600375] {CVE-2026-45962}
  - ip6_gre: Use cached t->net in ip6erspan_changelink(). (Maoyi Xie) [task:632813] {CVE-2026-46120}
  - tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi) [task:640237] {CVE-2026-46322}
  - Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() (Lukas Johannes Möller) [task:609645] {CVE-2026-43062}
  - net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (Kai Zen) [task:632813] {CVE-2026-46132}
  - btrfs: fix EEXIST abort due to non-consecutive gaps in chunk allocation (Boris Burkov) [task:635151] {CVE-2026-45934}
  - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing (Anderson Nascimento) [task:622807] {CVE-2026-31696}
  - ipc: limit next_id allocation to the valid ID range (Linpu Yu) [task:643813] {CVE-2026-52923}
  - net: strparser: fix skb_head leak in strp_abort_strp() (Luxiao Xu) [task:632813] {CVE-2026-46102}
  - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (Fredric Cover) [task:622807] {CVE-2026-43112}
  - nvme: fix memory allocation in nvme_pr_read_keys() (Sungwoo Kim) [task:609645] {CVE-2026-23244}
  - nvme: reject invalid pr_read_keys() num_keys values (Stefan Hajnoczi) [task:609645]
  - ALSA: caiaq: Don't abort when no input device is available (Takashi Iwai) [task:632813]
  - ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path (Takashi Iwai) [task:632813]
  - ALSA: caiaq: Handle probe errors properly (Takashi Iwai) [task:628809] {CVE-2026-46004}
  - ext4: guard against EA inode refcount underflow in xattr update (Ahmet Eray Karadag) [task:554287] {CVE-2025-40190}
  - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (Srinivasan Shanmugam) [task:636349, task:600375] {CVE-2026-45878}
  - drm/amdkfd: fix debug watchpoints for logical devices (Jonathan Kim) [task:636349, task:600375]
  - mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Kuniyuki Iwashima) [task:554199] {CVE-2025-40133}
  - mptcp: Call dst_release() in mptcp_active_enable(). (Kuniyuki Iwashima) [task:554199]
  - mm/vmalloc: take vmap_purge_lock in shrinker (Uladzislau Rezki (Sony)) [task:635143] {CVE-2026-46093}
  - vmalloc: use for_each_vmap_node() in purge-vmap-area (Uladzislau Rezki (Sony)) [task:635143]
  - vmalloc: switch to for_each_vmap_node() helper (Uladzislau Rezki (Sony)) [task:635143]
  - vmalloc: add for_each_vmap_node() helper (Uladzislau Rezki (Sony)) [task:635143]
  - configs: complete vdpa configs (liuyunchen) [bug:607161]
  - OPENEULER: livepatch: support for super-long symbol repositioning (wudandan) [task:636573]
  - xen/privcmd: unregister xenstore notifier on module exit (GuoHan Zhao) [task:622715]
  - security/secureboot: add signature to kernel for sw_64 (penghuaihe) [task:577175]
  - smc: Fix use-after-free in __pnet_find_base_ndev(). (Kuniyuki Iwashima) [task:546573] {CVE-2025-40064}
  - KVM: X86: Fix array_index_nospec protection in __pv_send_ipi (Anel Orazgaliyeva) [task:532349]
  - xen/privcmd: restrict usage in unprivileged domU (Juergen Gross) [task:609645]
  - xen: privcmd: Add support for ioeventfd (Viresh Kumar) [task:522091]
  - KVM: x86: use array_index_nospec with indices that come from guest (Thijs Raymakers) [task:527693]
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [task:595741]
  - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Eric Dumazet) [task:600375]
  - macvlan: fix error recovery in macvlan_common_newlink() (Eric Dumazet) [task:595741]
  - net: atm: fix /proc/net/atm/lec handling (Eric Dumazet) [task:491983] {CVE-2025-38180}
  - arm64/fpsimd: signal: Fix restoration of SVE context (Mark Rutland) [task:595243]
  - arm64/fpsimd: signal: Consistently read FPSIMD context (Mark Rutland) [task:595243]
  - arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state (Mark Rutland) [task:595243]
  - scsi: qla2xxx: Fix bsg_done() causing double free (Anil Gurumurthy) [task:595983]
  - smb3: fix for slab out of bounds on mount to ksmbd (Steve French) [task:525135]
  - netlink: avoid infinite retry looping in netlink_unicast() (Fedor Pchelkin) [task:525135]
  - netlink: make sure we allow at least one dump skb (Jakub Kicinski) [task:502609]
  - netlink: Fix rmem check in netlink_broadcast_deliver(). (Kuniyuki Iwashima) [task:502609]
  - netlink: Fix wraparounds of sk->sk_rmem_alloc. (Kuniyuki Iwashima) [task:502609] {CVE-2025-38465}
  - i40e: add validation for ring_len param (Lukasz Czapnik) [task:542881] {CVE-2025-39973}
  - i40e: increase max descriptors for XL710 (Justin Bronder) [task:542881]
  - net/sched: cls_u32: use skb_header_pointer_careful() (Eric Dumazet) [task:597119] {CVE-2026-23204}
  - net: add skb_header_pointer_careful() helper (Eric Dumazet) [task:597119]
  - config: Enable huawei hibifur and hiroce3 driver (zhulei) [task:600171]
  - net/hiroce3: Fix the hiroce3 driver build error (zhulei) [task:600171]
  - OPENEULER: net/hinic3: Synchronize new NIC features and bug fixes (fuguiming) [task:600171]
  - OPENEULER: net/hibifur: Add Huawei Intelligent Network Card Driver:hibifur (Zhang Zhenghao) [task:600171]
  - OPENEULER: net/hinic3: Support new RX feature (zhuyikai) [task:600171]
  - OPENEULER: net/hinic3: Support new TX feature (zhuyikai) [task:600171]
  - OPENEULER: net/hinic3: Support New SDK and NIC features (zhuyikai) [task:600171]
  - OPENEULER: net/hinic3: fix version showed in ethtool (Shi Jing) [task:600171]
  - OPENEULER: net/hiroce3: Use IS_ERR() to check the return value of kthread_run() (Xiongfeng Wang) [task:600171]
  - OPENEULER: net/hiroce3: Fix allmodconfig build frame size error (Shuai Wu) [task:600171]
  - OPENEULER: net/hiroce3: Fix vf init and common user permissions issue (Shuai Wu) [task:600171]
  - OPENEULER: net/hiroce3: Fix allmodconfig build error (Shuai Wu) [task:600171]
  - OPENEULER: infiniband/hiroce3: Add Huawei Intelligent Network Card RDMA Driver (Shuai Wu) [task:600171]
  - OPENEULER: net/hinic3: Add the CQM on which the RDMA depends (Shuai Wu) [task:600171]
  - RDMA/siw: Remove direct link to net_device (Bernard Metzler) [task:425042]
  - RDMA/mlx5: Use IB set_netdev and get_netdev functions (Chiara Meiohas) [task:425042]
  - Remove the second param in scx_ops_enable for mistaking (Bing Huang) [task:645615]
  - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Inseo An) [task:600375]
  - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer (zhidao su) [task:627905]
  - sched_ext: Fix starvation of scx_enable() under fair-class saturation (Tejun Heo) [task:627905] {CVE-2026-43392}
  - net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler (Pavitra Jha) [task:633143] {CVE-2026-43495}
  - linkdata: only compile linkdata driver for 64bit (zhulei) [task:574271, task:638973]
  - LINKDATA: Supports Linkdata ethernet Controllers (liujie_answer) [task:551111, task:638973]
  - LINKDATA: sxe: Remove the sxe network card driver (zhulei) [task:638973]
  - Revert "LINKDATA: sxe: Add the sxevf driver" (zhulei) [task:638973]
  - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Eric Dumazet) [task:600375] {CVE-2026-46266}
  - netdevsim: fix a race issue related to the operation on bpf_bound_progs list (Yun Lu) [task:597227, task:583035] {CVE-2026-23126}
  - Revert "net/smc: Introduce TCP ULP support" (D. Wythe) [task:640243] {CVE-2026-46330}
  - net/smc: fix general protection fault in __smc_diag_dump (Wang Liang) [task:640243]
  - smc: Fix various oops due to inet_sock type confusion. (Kuniyuki Iwashima) [task:640243]
  - smc: Fix lockdep false-positive for IPPROTO_SMC. (Kuniyuki Iwashima) [task:640243]
  - net/smc: do not leave a dangling sk pointer in __smc_create() (Eric Dumazet) [task:581445]
  - net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMC (D. Wythe) [task:640243]
  - net/smc: prevent NULL pointer dereference in txopt_get (Jeongjun Park) [task:640243]
  - net/smc: prevent UAF in inet_create() (D. Wythe) [task:581445]
  - net/smc: Introduce IPPROTO_SMC (D. Wythe) [task:581445]
  - net/smc: expose smc proto operations (D. Wythe) [task:581445]
  - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (Pauli Virtanen) [task:624613] {CVE-2026-43019}
  - Bluetooth: hci_conn: Use __counted_by() and avoid -Wfamnae warning (Gustavo A. R. Silva) [task:624613]
  - overflow: Introduce __DEFINE_FLEX for having no initializer (Kees Cook) [task:560269]
  - overflow: Fix direct struct member initialization in _DEFINE_FLEX() (Gustavo A. R. Silva) [task:560269]
  - overflow: Add STACK_FLEX_ARRAY_SIZE() helper (Gustavo A. R. Silva) [task:560269]
  - overflow: Clarify expectations for getting DEFINE_FLEX variable sizes (Kees Cook) [task:560269]
  - overflow: Change DEFINE_FLEX to take __counted_by member (Kees Cook) [task:560269]
  - ice: make ice_vsi_cfg_txq() static (Maciej Fijalkowski) [task:560269]
  - ice: make ice_vsi_cfg_rxq() static (Maciej Fijalkowski) [task:560269]
  - ice: make use of DEFINE_FLEX() in ice_switch.c (Przemek Kitszel) [task:560269]
  - ice: make use of DEFINE_FLEX() for struct ice_aqc_dis_txq_item (Przemek Kitszel) [task:560269]
  - ice: make use of DEFINE_FLEX() for struct ice_aqc_add_tx_qgrp (Przemek Kitszel) [task:560269]
  - ice: make use of DEFINE_FLEX() in ice_ddp.c (Przemek Kitszel) [task:560269]
  - ice: drop two params of ice_aq_move_sched_elems() (Przemek Kitszel) [task:560269]
  - ice: ice_sched_remove_elems: replace 1 elem array param by u32 (Przemek Kitszel) [task:560269]
  - overflow: add DEFINE_FLEX() for on-stack allocs (Przemek Kitszel) [task:560269]
  - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work (Tejun Heo) [task:630773] {CVE-2026-43482}
  - mm: read page_type using READ_ONCE (David Hildenbrand) [task:602393]
  - dm-thin: fix metadata refcount underflow (Mikulas Patocka) [task:632813, task:635969] {CVE-2026-46107}
  - scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (Tony Battersby) [task:582447, task:461368]
  - btrfs: fix missing last_unlink_trans update when removing a directory (Filipe Manana) [task:635859] {CVE-2026-46160}
  - migrate: correct lock ordering for hugetlb file folios (Matthew Wilcox (Oracle)) [task:593797] {CVE-2026-23097}
  - isofs: validate block number from NFS file handle in isofs_export_iget (Michael Bommarito) [task:632813] {CVE-2026-46124}
  - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (Luiz Augusto von Dentz) [task:622347] {CVE-2026-31511}
  - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (Wang Tao) [task:627911] {CVE-2026-43059}
  - Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (Pauli Virtanen) [task:627911]
  - i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (Adrian Hunter) [task:627933] {CVE-2026-43353}
  - ALSA: aloop: Fix peer runtime UAF during format-change stop (Cássio Gabriel) [task:635373] {CVE-2026-46090}
  - nvmet-tcp: fix race between ICReq handling and queue teardown (Chaitanya Kulkarni) [task:635987] {CVE-2026-46135}
  - ALSA: mixer: oss: Add card disconnect checkpoints (Takashi Iwai) [task:626435] {CVE-2026-43126}
  - ntfs: ->d_compare() must not block (Al Viro) [task:626357] {CVE-2026-43245}
  - slip: bound decode() reads against the compressed packet length (Weiming Shi) [task:636341] {CVE-2026-45843}
  - ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger (Takashi Iwai) [task:635877] {CVE-2026-46157}
  - ALSA: pcm: Use guard() for PCM stream locks (Takashi Iwai) [task:635877]
  - openvswitch: cap upcall PID array size and pre-size vport replies (Weiming Shi) [task:635049] {CVE-2026-45840}
  - i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue (Adrian Hunter) [task:627835] {CVE-2026-43352}
  - regulator: doc: add missing documentation for init_cb (Jerome Brunet) [task:632761]
  - regulator: core: add callback to perform runtime init (Jerome Brunet) [task:632761]
  - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Stefan Metzmacher) [task:622519] {CVE-2026-31536}
  - Fix compile error from qos/prio_lb.h for allnoconfig (Bing Huang) [task:630315]
  - wifi: mac80211_hwsim: support HE 40 MHz in 2.4 GHz band (Miri Korenblit) [task:633021]
  - pwm: loongson: Fix LOONGSON_PWM_FREQ_DEFAULT (Xi Ruoyao) [task:632445]
  - pwm: loongson: Fix an error code in probe() (Dan Carpenter) [task:632445]
  - pwm: loongson: Fix u32 overflow in waveform calculation (Uwe Kleine-König) [task:632445]
  - MAILLIST: net/rds: reset op_nents when zerocopy page pin fails (Allison Henderson) [task:632491]
  - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure (Lee Jones) [task:624549] {CVE-2026-43049}
  - HID: logitech-hidpp: Move g920_get_config() to just before hidpp_ff_init() (Hans de Goede) [task:624549]
  - HID: logitech-hidpp: Remove wtp_get_config() call from probe() (Hans de Goede) [task:624549]
  - media: v4l2-mem2mem: Add a kref to the v4l2_m2m_dev structure (Nicolas Dufresne) [task:628907]
  - ksmbd: fix signededness bug in smb_direct_prepare_negotiation() (Nicholas Carlini) [task:626439] {CVE-2026-43185}
  - kabi: initialize kabi list and symvers for sunway (liuyunchen) [task:630535]
  - configs : add vdpa support (liuyunchen) [bug:607161]
  - configs : enable BSD_PROCESS_ACCT (liuyunchen) [bug:611927]
  - SUNWAY: remove some unsuitable junzhang version check (Gao Chen) [bug:593575]
  - SUNWAY: fix the compilation error when CONFIG_DEBUG_VIRTUAL is enabled (Gu Yuchen) [bug:593575]
  - SUNWAY: add support for batched TLB flushing during unmap (Jinyu Tang) [bug:593575]
  - SUNWAY: fix the parameter passing logic of memblock_mark_nomap (Gu Yuchen) [bug:593575]
  - SUNWAY: add HUGE_VMAP support for c4 (Jinyu Tang) [bug:593575]
  - SUNWAY: define get_cycles macro (Gu Yuchen) [bug:593575]
  - SUNWAY: cpuidle: refine C6 state stability (Wang Yicheng) [bug:593575]
  - SUNWAY: add barriers and tlb flush for set_atc (Gao Chen) [bug:593575]
  - SUNWAY: adapt kernel page table for kdump (Gao Chen) [bug:593575]
  - SUNWAY: adapt kernel page table for memory hotplug (Gu Yuchen) [bug:593575]
  - SUNWAY: adapt kernel page table for S4 (Gao Chen) [bug:593575]
  - SUNWAY: set PTBR_SYS before accessing vmalloc area (Gu Yuchen) [bug:593575]
  - SUNWAY: set execute permission for virtual machine's hmcode text section (Gu Yuchen) [bug:593575]
  - SUNWAY: adjust the marking and definitions of some kernel mapping functions (Gu Yuchen) [bug:593575]
  - SUNWAY: move non-boot core's kernel page table enabling logic to hmcode (Gu Yuchen) [bug:593575]
  - SUNWAY: use ioremap to map IO address (Lei Yilong) [bug:593575]
  - SUNWAY: map legacy I/O to K segment (Gao Chen) [bug:593575]
  - SUNWAY: setup early_ioremap (Gao Chen) [bug:593575]
  - SUNWAY: reset ATC for kvm (Gao Chen) [bug:593575]
  - SUNWAY: setup mapping for efi_mm (Gao Chen) [bug:593575]
  - SUNWAY: modify codes with fixmap (Gao Chen) [bug:593575]
  - SUNWAY: map the early and the final page table (Gao Chen) [bug:593575]
  - SUNWAY: fix an inappropriate lock in __set_memory (Gao Chen) [bug:593575]
  - SUNWAY: set protection for kernel page table (Gao Chen) [bug:593575]
  - SUNWAY: enable kernel page table (Gao Chen) [bug:593575]
  - SUNWAY: use ioremap to map IO address in functions like __get_cpu_nums() (Gu Yuchen) [bug:593575]
  - SUNWAY: add fixmap support (Gao Chen) [bug:593575]
  - SUNWAY: add memb before/after atomic (Gao Chen) [bug:593575]
  - SUNWAY: add EDAC support with dynamic node and MC detection (He Chuyue) [bug:593575]
  - SUNWAY: fix: getcpu passed a null pointer error (Wu Liliu) [bug:593575]
  - SUNWAY: iommu: refactor iommu v2 initialization (Jing Li) [bug:593575]
  - SUNWAY: cache: fix shared_cpu_map when PPTT is invalid (Jing Li) [bug:593575]
  - SUNWAY: add alternative runtime patching (Gu Yuchen) [bug:593575]
  - SUNWAY: pci: fix IO_BASE if numa_off (Xu Yiwei) [bug:593575]
  - SUNWAY: use ioremap to map spaces for cpufreq and S3 (Gao Chen) [bug:593575]
  - SUNWAY: pci: add sunway pci controller for Command Completed errata (Xu Yiwei) [bug:593575]
  - SUNWAY: add definitions for kernel-required CPU capabilities (Gu Yuchen) [bug:593575]
  - SUNWAY: remove unnecessary register handling in sample/ftrace (Gu Yuchen) [bug:593575]
  - SUNWAY: fix random mmap base range (Gu Zitao) [bug:593575]
  - SUNWAY: pci: remove redundant debug control (Shao Zhiyu) [bug:593575]
  - SUNWAY: fix the condition for enabling hw_una_enabled (Gao Chen) [bug:593575]
  - SUNWAY: efi: fix compile error when CONFIG_EFI=n (Jing Li) [bug:593575]
  - SUNWAY: powercap: fix misuse of an uninitialized temporary variable (Jing Li) [bug:593575]
  - SUNWAY: powercap: increase the interval of polling mode (Jing Li) [bug:593575]
  - SUNWAY: powercap: fix Kconfig dependency for SW64_POWERCAP (Jing Li) [bug:593575]
  - SUNWAY: powercap: avoid checking meaningless target freq (Jing Li) [bug:593575]
  - SUNWAY: smp: fix unaligned access before trap_init() (Jing Li) [bug:593575]
  - SUNWAY: irqchip: update effective affinity for INTx (Xu Yiwei) [bug:593575]
  - SUNWAY: msi: fix affinity change of managed irq (Xu Yiwei) [bug:593575]
  - SUNWAY: use orig_r0 as syscall nr (Mao Minkai) [bug:593575]
  - SUNWAY: fix unresolved reference error when close pci (Gu Yuchen) [bug:593575]
  - SUNWAY: kvm: add the C4 kvm_regs structure to uapi kvm.h (Min Fanlei) [bug:593575]
  - SUNWAY: fix for userspace asking for syscall(-1) (Gu Zitao) [bug:593575]
  - SUNWAY: ptrace: fix system call success/failure check in PEEKUSR (Gu Yuchen) [bug:593575]
  - SUNWAY: kvm: introduce pmd_thp_or_huge for PMD hugepage checking (Min Fanlei) [bug:593575]
  - SUNWAY: add cross-page check in software unaligned write handling (Wang Yicheng) [bug:593575]
  - SUNWAY: ptrace: fail system calls on invalid address access in PEEKUSR (Gu Yuchen) [bug:593575]
  - SUNWAY: ptrace: fix a bug in return value handling in PEEKUSR AND POKEUSR (Gu Yuchen) [bug:593575]
  - SUNWAY: Add support for get_cpuid_str function (He Chuyue) [bug:593575]
  - SUNWAY: kvm: use read/write spin lock for KVM MMU (Min Fanlei) [bug:593575]
  - SUNWAY: ptrace: return -EIO in invalid PEEKUSR/POKEUSR requests (Gu Yuchen) [bug:593575]
  - SUNWAY: kvm: fix missing kvm_unregister_perf_callbacks (Min Fanlei) [bug:593575]
  - SUNWAY: kvm: fix compile error of kvm.ko (Min Fanlei) [bug:593575]
  - SUNWAY: kvm: remove the duplicated Kconfig selection of KVM (Min Fanlei) [bug:593575]
  - SUNWAY: cpuidle: add dedicated driver (Wang Yicheng) [bug:593575]
  - SUNWAY: add SUNWAY support for io_uring_zerocopy_tx (Cui Mingrui) [bug:593575]
  - SUNWAY: crypto: implement crc32 assembly optimization (Xu Yiwei) [bug:593575]
  - SUNWAY: efi: remove meaningless code from asm/efi.h (Jing Li) [bug:593575]
  - SUNWAY: fix incorrect macro definitions for sw64 in bpf_tracing.h (Gu Yuchen) [bug:593575]
  - SUNWAY: cpufreq: using PLL0 to provide clock for idle cores (Jing Li) [bug:593575]
  - SUNWAY: kvm: save the virtual address of irqs_pending in vcpucb (Lei Yilong) [bug:593575]
  - SUNWAY: kvm: fix undefined error with ftrace disabled (Yu Jiayi) [bug:593575]
  - SUNWAY: kvm: enable dirty log gradually in small chunks for core4 (Min Fanlei) [bug:593575]
  - SUNWAY: fix guest kdump function (Lei Yilong) [bug:593575]
  - SUNWAY: revert ioremap() to __va() in ioport_map() (Gao Chen) [bug:585493]
  - configs: enable Memory Cgroup Options (liuyunchen) [bug:590707]
  - configs: enable vfio and cachefiles for sunway. (liuyunchen) [task:625837, bug:587445]
  - configs/klas: enable CONFIG_SCSI_BFA_FC (Cao Guanghui) [bug:587581]
  - xfrm: prevent policy_hthresh.work from racing with netns teardown (Minwoo Ra) [task:623237] {CVE-2026-31516}
  - espintcp: Fix race condition in espintcp_close() (Hyunwoo Kim) [task:603763] {CVE-2026-23239}
  - workqueue: Use POOL_BH instead of WQ_BH when checking pool flags (Breno Leitao) [task:603763]
  - workqueue, irq_work: Build fix for !CONFIG_IRQ_WORK (Tejun Heo)
  - workqueue: Fix queue_work_on() with BH workqueues (Tejun Heo)
  - OPENEULER: workqueue: Fix kabi broken of enum WORK_OFFQ_POOL_SHIFT (Qi Xi) [task:603763]
  - workqueue: Fix UBSAN 'subtraction overflow' error in shift_and_mask() (Will Deacon)
  - workqueue: Implement disable/enable for (delayed) work items (Tejun Heo)
  - workqueue: Preserve OFFQ bits in cancel[_sync] paths (Tejun Heo)
  - workqueue: Implement BH workqueues to eventually replace tasklets (Tejun Heo)
  - workqueue: Factor out init_cpu_worker_pool() (Tejun Heo)
  - workqueue: make wq_subsys const (Ricardo B. Marliere)
  - tools/workqueue/wq_dump.py: Add node_nr/max_active dump (Tejun Heo)
  - tools/workqueue/wq_dump.py: Clean up code and drop duplicate information (Tejun Heo)
  - tools/workqueue: Add rescuers printing to wq_dump.py (Juri Lelli)
  - workqueue: Make @flags handling consistent across set_work_data() and friends (Tejun Heo)
  - workqueue: Remove clear_work_data() (Tejun Heo)
  - workqueue: Factor out work_grab_pending() from __cancel_work_sync() (Tejun Heo)
  - workqueue: Clean up enum work_bits and related constants (Tejun Heo)
  - workqueue: Introduce work_cancel_flags (Tejun Heo)
  - workqueue: Use variable name irq_flags for saving local irq flags (Tejun Heo)
  - workqueue: Reorganize flush and cancel[_sync] functions (Tejun Heo)
  - workqueue: Rename __cancel_work_timer() to __cancel_timer_sync() (Tejun Heo)
  - workqueue: Use rcu_read_lock_any_held() instead of rcu_read_lock_held() (Tejun Heo)
  - workqueue: Cosmetic changes (Tejun Heo)
  - workqueue: Avoid premature init of wq->node_nr_active[].max (Tejun Heo)
  - workqueue: The default node_nr_active should have its max set to max_active (Tejun Heo)
  - workqueue: Fix divide error in wq_update_node_max_active() (Lai Jiangshan)
  - workqueue: Fix pwq->nr_in_flight corruption in try_to_grab_pending() (Tejun Heo)
  - workqueue: rust: sync with `WORK_CPU_UNBOUND` change (Miguel Ojeda)
  - workqueue: Shorten events_freezable_power_efficient name (Audra Mitchell)
  - workqueue: Don't call cpumask_test_cpu() with -1 CPU in wq_update_node_max_active() (Tejun Heo)
  - workqueue: Implement system-wide nr_active enforcement for unbound workqueues (Tejun Heo)
  - workqueue: Introduce struct wq_node_nr_active (Tejun Heo)
  - workqueue: Move pwq_dec_nr_in_flight() to the end of work item handling (Tejun Heo)
  - workqueue: RCU protect wq->dfl_pwq and implement accessors for it (Tejun Heo)
  - workqueue: Make wq_adjust_max_active() round-robin pwqs while activating (Tejun Heo)
  - workqueue: Move nr_active handling into helpers (Tejun Heo)
  - workqueue: Move pwq->max_active to wq->max_active (Tejun Heo)
  - workqueue.c: Increase workqueue name length (Audra Mitchell)
  - workqueue: Break up enum definitions and give names to the types (Tejun Heo)
  - workqueue: Drop unnecessary kick_pool() in create_worker() (Tejun Heo)
  - workqueue: Replace pwq_activate_inactive_work() with [__]pwq_activate_work() (Tejun Heo)
  - workqueue: Factor out pwq_is_empty() (Tejun Heo)
  - driver core: bus: constantify subsys_register() calls (Greg Kroah-Hartman) [task:482381]
  - selftests: hsr: Add test for VLAN (MD Danish Anwar) [task:534197]
  - net: ti: icssg-prueth: Add VLAN support for HSR mode (Ravi Gunasekaran) [task:534197]
  - net: hsr: Add VLAN support (WingMan Kwok) [task:534197]
  - io-wq: check that the predecessor is hashed in io_wq_remove_pending() (Nicholas Carlini) [task:637359] {CVE-2026-46274}
  - mptcp: pm: ADD_ADDR rtx: free sk if last (Matthieu Baerts (NGI0)) [task:636019] {CVE-2026-46170}
  - mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (Matthieu Baerts (NGI0)) [task:636019]
  - mptcp: pm: ADD_ADDR rtx: fix potential data-race (Matthieu Baerts (NGI0)) [task:636019]
  - mptcp: disable add_addr retransmission when timeout is 0 (Geliang Tang) [task:525135]
  - mptcp: remove duplicate sk_reset_timer call (Geliang Tang) [task:525135]
  - KVM: x86: Use scratch field in MMIO fragment to hold small write values (Sean Christopherson) [task:623111] {CVE-2026-31588}
  - Fix compile error from smt_expel for allnoconfig (Bing Huang) [task:634239]
  - apparmor: validate DFA start states are in bounds in unpack_pdb (Massimiliano Pellizzer) [task:606243] {CVE-2026-23269}
  - net: ioam6: fix OOB and missing lock (Justin Iurman) [task:626425] {CVE-2026-43083}
  - ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() (Eric Dumazet) [task:626163] {CVE-2026-43101}
  - wifi: rtw89: pci: validate release report content before using for RTL8922DE (Ping-Ke Shih) [task:626265] {CVE-2026-43176}
  - xfrm: state: fix out-of-bounds read during lookup (Florian Westphal) [task:440697] {CVE-2024-57982}
  - net: dsa: properly keep track of conduit reference (Vladimir Oltean) [task:588999] {CVE-2025-71152}
  - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Jason Gunthorpe) [task:635999] {CVE-2026-46181}
  - refcount: provide ops for cases when object's memory can be reused (Suren Baghdasaryan) [task:635999]
  - ubsan: Reintroduce signed overflow sanitizer (Kees Cook) [task:635999]
  - gfs2: Prevent recursive memory reclaim (Andreas Gruenbacher) [task:576943] {CVE-2025-68356}
  - xfs: remove xfs_attr_leaf_hasname (Christoph Hellwig) [task:626299] {CVE-2026-43153}
  - xfs: remove bp->b_error check in xfs_attr3_root_inactive (Long Li) [task:624697]
  - xfs: add an explicit owner field to xfs_da_args (Darrick J. Wong) [task:624697]
  - efivarfs: fix error propagation in efivar_entry_get() (Kohei Enju) [task:595243]
  - RDMA/siw: Fix potential NULL pointer dereference in header processing (YunJe Shin) [task:600375]
  - hwmon: (pmbus/core) Protect regulator operations with mutex (Guenter Roeck) [task:623161] {CVE-2026-31486}
  - hwmon: (pmbus/core) Declare regulator notification function as void (Guenter Roeck) [task:623161]
  - hwmon: (pmbus/core) improve handling of write protected regulators (Jerome Brunet) [task:623161]
  - hwmon: (pmbus/core) allow drivers to override WRITE_PROTECT (Jerome Brunet) [task:623161]
  - hwmon: (pmbus) add documentation for existing flags (Jerome Brunet) [task:623161]
  - hwmon: pmbus: Implement generic bus access delay (Patrick Rudolph) [task:623161]
  - hwmon: (pmbus/core) Add helper macro to define single pmbus regulator (Saravanan Sekar) [task:623161]
  - ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (Zhang Yi) [task:636011] {CVE-2026-45985}
  - net: use dst_dev_rcu() in sk_setup_caps() (Eric Dumazet) [task:554291] {CVE-2025-40170}
  - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Eric Dumazet) [task:554291]
  - ipv6: use RCU in ip6_output() (Eric Dumazet) [task:554307] {CVE-2025-40158}
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (Kuniyuki Iwashima) [task:554307]
  - ipv6: use RCU in ip6_xmit() (Eric Dumazet) [task:554265] {CVE-2025-40135}
  - ipv4: start using dst_dev_rcu() (Eric Dumazet) [task:554265]
  - tcp_metrics: use dst_dev_net_rcu() (Eric Dumazet) [task:554265]
  - net: dst: introduce dst->dev_rcu (Eric Dumazet) [task:554265]
  - net: Add locking to protect skb->dev access in ip_output (Sharath Chandra Vurukala) [task:554265]
  - net: dst: add four helpers to annotate data-races around dst->dev (Eric Dumazet) [task:554265]
  - Revert "driver core: enforce device_lock for driver_match_device()" (Wang Yan) [task:635683]
  - iommu/amd: serialize sequence allocation under concurrent TLB invalidations (Ankit Soni) [task:632813, task:637425]
  - iommu/amd: Use atomic64_inc_return() in iommu.c (Uros Bizjak) [task:632813, task:637425]
  - wifi: iwlwifi: fix 22000 series SMEM parsing (Johannes Berg) [task:626465] {CVE-2026-43172}
  - wifi: iwlwifi: allow IWL_FW_CHECK() with just a string (Johannes Berg) [task:626465]
  - ocfs2: validate inline data i_size during inode read (Deepanshu Kartikey) [task:622807] {CVE-2026-43076}
  - ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() (Dmitry Antipov) [task:622807]
  - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() (Filipe Manana) [task:634933]
  - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() (Goldwyn Rodrigues) [task:622807] {CVE-2026-43117}
  - 9p/xen: protect xen_9pfs_front_free against concurrent calls (Stefano Stabellini) [task:626507] {CVE-2026-43249}
  - 9p/net: xen: fix false positive printf format overflow warning (Dominique Martinet) [task:626507]
  - iommu/amd: move wait_on_sem() out of spinlock (Ankit Soni) [task:600375] {CVE-2026-43253}
  - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (YunJe Shin) [task:595741]
  - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() (Kwok Kin Ming) [task:595741]
  - nfsd: provide locking for v4_end_grace (NeilBrown) [task:587391]
  - mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (Joonwon Kang) [task:626235] {CVE-2026-43281}
  - rcu: Fix racy re-initialization of irq_work causing hangs (Frederic Weisbecker) [task:525135]
  - rcu: Fix rcu_read_unlock() deadloop due to IRQ work (Joel Fernandes) [task:525135]
  - rcu: Protect ->defer_qs_iw_pending from data race (Paul E. McKenney) [task:525135]
  - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [task:609645]
  - smb: client: validate dacloffset before building DACL pointers (Michael Bommarito) [task:635959] {CVE-2026-46195}
  - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Prathyushi Nangia) [task:635821] {CVE-2026-46174}
  - mm/hugetlb: fix hugetlb_pmd_shared() (David Hildenbrand (Red Hat)) [task:593731] {CVE-2026-23100}
  - LoongArch: Explicitly specify code model in Makefile (Huacai Chen) [task:467324, task:626153]
  - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xiang Mei) [task:613769] {CVE-2026-31419}
  - ext4: fix error pointer dereference in ext4_mb_load_buddy_gfp() (Dan Carpenter) [task:637425]
  - ext4: fix e4b bitmap inconsistency reports (Yongjian Sun) [task:609645] {CVE-2026-45942}
  - ext4: convert bd_buddy_page to bd_buddy_folio (Matthew Wilcox (Oracle)) [task:609645]
  - ext4: convert bd_bitmap_page to bd_bitmap_folio (Matthew Wilcox (Oracle)) [task:609645]
  - xfrm: ah: account for ESN high bits in async callbacks (Michael Bommarito) [task:632813] {CVE-2026-46193}
  - net: ipv6: stop checking crypto_ahash_alignmask (Eric Biggers) [task:632813]
  - net: ipv4: stop checking crypto_ahash_alignmask (Eric Biggers) [task:632813]
  - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (Kohei Enju) [task:623019] {CVE-2026-31505}
  - wifi: mac80211: drop stray 'static' from fast-RX rx_result (Catherine) [task:632813] {CVE-2026-46152}
  - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (Ben Morris) [task:632813] {CVE-2026-46227}
  - dm mirror: fix integer overflow in create_dirty_log() (Junrui Luo) [task:632813] {CVE-2026-46023}
  - ceph: only d_add() negative dentries when they are unhashed (Max Kellermann) [task:632813] {CVE-2026-46052}
  - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (Jason Gunthorpe) [task:632813] {CVE-2026-46189}
  - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (Hangbin Liu) [task:600375] {CVE-2026-45970}
  - ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (Yilin Zhu) [task:632813] {CVE-2026-46172}
  - net: qrtr: ns: Limit the maximum server registration per node (Manivannan Sadhasivam) [task:632813] {CVE-2026-43491}
  - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai) [task:632813] {CVE-2026-46209}
  - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (Junrui Luo) [task:632813] {CVE-2026-46176}
  - crypto: authencesn - reject short ahash digests during instance creation (Yucheng Lu) [task:632813] {CVE-2026-46033}
  - exit: prevent preemption of oopsing TASK_DEAD task (Jann Horn) [task:632813] {CVE-2026-46173}
  - gfs2: Fix slab-use-after-free in qd_put (Andreas Gruenbacher) [task:635417] {CVE-2026-45861}
  - vsock/virtio: fix accept queue count leak on transport mismatch (Dudu Lu) [task:632813] {CVE-2026-46214}
  - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (Shuvam Pandey) [task:632813] {CVE-2026-46056}
  - smb/client: fix out-of-bounds read in symlink_data() (Zisen Ye) [task:632813] {CVE-2026-46185}
  - Bluetooth: MGMT: Fix possible UAFs (Luiz Augusto von Dentz) [task:542823] {CVE-2025-39981}
  - Bluetooth: hci_sync: fix set_local_name race condition (Pavel Shpakovskiy) [task:527693]
  - Bluetooth: MGMT: set_mesh: update LE scan interval and window (Christian Eggers) [task:497669]
  - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (Roman Smirnov) [task:542823]
  - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (Dr. David Alan Gilbert) [task:482699]
  - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (Edward Adam Davis) [task:491397]
  - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (Luiz Augusto von Dentz) [task:491397] {CVE-2025-38117}
  - iio: gyro: mpu3050: Move iio_device_register() to correct location (Ethan Tidmore) [task:624537] {CVE-2026-31761}
  - iio: gyro: mpu3050: Fix incorrect free_irq() variable (Ethan Tidmore) [task:624537]
  - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Ankit Garg) [task:609259] {CVE-2026-23386}
  - RDMA/irdma: Fix double free related to rereg_user_mr (Jacob Moroni) [task:626487] {CVE-2026-43120}
  - RDMA/irdma: Add support to re-register a memory region (Sindhu Devale) [task:626487]
  - media: mediatek: vcodec: fix use-after-free in encoder release path (Fan Wu) [task:622905, task:622807, task:626555] {CVE-2026-31584}
  - media: mediatek: vcodec: Use spinlock for context list protection lock (Chen-Yu Tsai) [task:622905, task:582447]
  - net/sched: act_ife: Fix metalist update behavior (Jamal Hadi Salim) [task:609267] {CVE-2026-23378}
  - bpf: Fix oob access in cgroup local storage (Daniel Borkmann) [task:520127] {CVE-2025-38502}
  - bpf: Move cgroup iterator helpers to bpf.h (Daniel Borkmann) [task:520127]
  - bpf: Add cookie object to bpf maps (Daniel Borkmann) [task:520127]
  - bpf: Call the missed kfree() when there is no special field in btf (Hou Tao) [task:520127]
  - bpf: Call the missed btf_record_free() when map creation fails (Hou Tao) [task:520127]
  - MAINTAINERS: remove inactive maintainers (Haofeng.Li) [task:636057]
  - mptcp: fix slab-use-after-free in __inet_lookup_established (Jiayuan Chen) [task:623277] {CVE-2026-31669}
  - team: fix header_ops type confusion with non-Ethernet ports (Jiayuan Chen) [task:623005] {CVE-2026-31502}
  - net: team: rename team to team_core for linking (Hangbin Liu) [task:623005]
  - usb: class: cdc-wdm: fix reordering issue in read code path (Oliver Neukum) [task:609645] {CVE-2026-43427}
  - usb: cdc-wdm: avoid setting WDM_READ for ZLP-s (Robert Hodaszi) [task:493613]
  - xfs: fix undersized l_iclog_roundoff values (Darrick J. Wong) [task:609645] {CVE-2026-43365}
  - usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() (Mario Peter) [task:626181] {CVE-2026-43250}
  - usb: chipidea: udc: create bounce buffer for problem sglist entries if possible (Xu Yang) [task:626181]
  - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Pengpeng Hou) [task:615913] {CVE-2026-43341}
  - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (Sunday Clement) [task:600375] {CVE-2026-43206}
  - libceph: Use u32 for non-negative values in ceph_monmap_decode() (Raphael Zimmer) [task:609645] {CVE-2026-43405}
  - drm/i915: Fix potential overflow of shmem scatterlist length (Janusz Krzysztofik) [task:609645] {CVE-2026-43368}
  - mm/page_alloc: clear page->private in free_pages_prepare() (Mikhail Gavrilov) [task:627885] {CVE-2026-43303}
  - xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (Jiayuan Chen) [task:600375] {CVE-2026-43139}
  - bpf: Fix use-after-free in arena_vm_close on fork (Alexei Starovoitov) {CVE-2026-45837}
  - atm: fore200e: fix use-after-free in tasklets during device removal (Duoming Zhou) [task:600375] {CVE-2026-43203}
  - xprtrdma: Decrement re_receiving on the early exit paths (Eric Badger) [task:609645] {CVE-2026-43469}
  - nfsd: never defer requests during idmap lookup (Anthony Iliopoulos) [task:600375] {CVE-2026-45983}
  - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode (Ziyi Guo) [task:600375] {CVE-2026-43180}
  - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [task:622807] {CVE-2026-43114}
  - scsi: qla2xxx: Completely fix fcport double free (Vladimir Riabchun) [task:627869] {CVE-2026-43414}
  - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check (Tobi Gaertner) [task:609645] {CVE-2026-23448}
  - net: bridge: use a stable FDB dst snapshot in RCU readers (Zhengchuan Liang) [task:632813] {CVE-2026-46086}
  - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Andrea Mayer) [task:632813] {CVE-2026-46099}
  - nvdimm/bus: Fix potential use after free in asynchronous initialization (Ira Weiny) [task:609645] {CVE-2026-31399}
  - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ (Luiz Augusto von Dentz) [task:600375] {CVE-2026-43134}
  - Bluetooth: L2CAP: Fix not checking l2cap_chan security level (Luiz Augusto von Dentz) [task:476205]
  - netconsole: avoid OOB reads, msg is not nul-terminated (Jakub Kicinski) [task:626173] {CVE-2026-43197}
  - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Gal Pressman) [task:609645] {CVE-2026-43466}
  - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() (Raphael Zimmer) [task:609645] {CVE-2026-43407}
  - smb: client: fix in-place encryption corruption in SMB2_write() (Bharath SM) [task:609645] {CVE-2026-43362}
  - smb: client: prevent races in ->query_interfaces() (Henrique Carvalho) [task:600375] {CVE-2026-43239}
  - media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() (Alper Ak) [task:600375] {CVE-2026-43256}
  - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Greg Kroah-Hartman) [task:632813] {CVE-2026-43501}
  - octeontx2-af: Workaround SQM/PSE stalls by disabling sticky (Geetha sowjanya) [task:600375] {CVE-2026-43296}
  - media: verisilicon: AV1: Fix tile info buffer size (Benjamin Gaignard) [task:600375] {CVE-2026-43222}
  - net/tcp-md5: Fix MAC comparison to be constant-time (Eric Biggers) [task:609645] {CVE-2026-43383}
  - net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled (Ricardo B. Marlière) [task:609645] {CVE-2026-43441}
  - udf: fix partition descriptor append bookkeeping (Seohyeon Maeng) [task:632813] {CVE-2026-45991}
  - wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (Daniel Hodges) [task:632813] {CVE-2026-46069}
  - PCI: Fix pci_slot_trylock() error handling (Jinhui Guo) [task:600375] {CVE-2026-43211}
  - net: consume xmit errors of GSO frames (Jakub Kicinski) [task:600375] {CVE-2026-43194}
  - drm/amdgpu: Fix use-after-free race in VM acquire (Alysa Liu) [task:609645] {CVE-2026-43370}
  - libceph: prevent potential out-of-bounds reads in process_message_header() (Ilya Dryomov) [task:609645] {CVE-2026-43406}
  - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (Yosry Ahmed) [task:600375] {CVE-2026-43133}
  - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE (John Garry) [task:600375] {CVE-2026-43212}
  - net/tcp-ao: Fix MAC comparison to be constant-time (Eric Biggers) [task:628009] {CVE-2026-43384}
  - media: mtk-mdp: Fix error handling in probe function (Haoxiang Li) [task:600375] {CVE-2026-43207}
  - gfs2: Fix use-after-free in iomap inline data write path (Deepanshu Kartikey) [task:600375] {CVE-2026-45984}
  - gfs2: Add metapath_dibh helper (Andreas Gruenbacher) [task:600375]
  - ASoC: soc-core: flush delayed work before removing DAIs and widgets (matteo.cotifava) [task:609645] {CVE-2026-43459}
  - netfilter: x_tables: guard option walkers against 1-byte tail reads (David Dull) [task:609645] {CVE-2026-43452}
  - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (Mehul Rao) [task:609645] {CVE-2026-43437}
  - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [task:600375] {CVE-2026-43304}
  - smb: client: validate the whole DACL before rewriting it in cifsacl (Michael Bommarito) [task:624507] {CVE-2026-31709}
  - smb: client: require a full NFS mode SID before reading mode bits (Michael Bommarito) [task:624507]
  - cifs: add validation check for the fields in smb_aces (Namjae Jeon) [task:624507]
  - bpf: Fix incorrect pruning due to atomic fetch precision tracking (Daniel Borkmann) [task:624533] {CVE-2026-43009}
  - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Shivank Garg) [task:614027] {CVE-2025-38396}
  - add a string-to-qstr constructor (Al Viro) [task:614027]
  - file: prepare for new helper (Christian Brauner) [task:614027]
  - d_alloc_pseudo(): move setting ->d_op there from the (sole) caller (Al Viro) [task:614027]
  - module: Provide EXPORT_SYMBOL_GPL_FOR_MODULES() helper (Peter Zijlstra) [task:614027]
  - io_uring/net: commit partial buffers on retry (Jens Axboe) [task:613985] {CVE-2025-38730}
  - tcp: fix potential race in tcp_v6_syn_recv_sock() (Eric Dumazet) [task:626237] {CVE-2026-43198}
  - OPENEULER: net: hns3: using the num_tqps in the vf driver to apply for resources (Peiyang Wang) [task:589009, task:551747] {CVE-2025-71064}
  - wifi: ath12k: fix invalid access to memory (Sarika Sharma) [task:553451] {CVE-2025-38292}
  - wifi: ath12k: remove hal_desc_sz from hw params (Raj Kumar Bhagat) [task:553451]
  - wifi: ath12k: split hal_ops to support RX TLVs word mask compaction (Raj Kumar Bhagat) [task:553451]
  - ext4: validate p_idx bounds in ext4_ext_correct_indexes (Tejas Bharambe) [task:623239] {CVE-2026-31449}
  - ext4: prevent partial update of the extents path (Baokun Li)
  - ext4: refactor ext4_ext_rm_idx() to index 'path' (Baokun Li)
  - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Pablo Neira Ayuso) [task:624591]
  - netfilter: ctnetlink: ignore explicit helper on new expectations (Pablo Neira Ayuso) [task:624591] {CVE-2026-43025}
  - netfilter: nf_conntrack_expect: store netns and zone in expectation (Pablo Neira Ayuso) [task:624591]
  - sched_ext: Remove redundant css_put() in scx_cgroup_init() (Cheng-Yang Chou) [task:627833] {CVE-2026-43438}
  - wifi: rtw89: pci: validate sequence number of TX release report (Ping-Ke Shih) [task:626293] {CVE-2026-43213}
  - RDMA/mana_ib: Disable RX steering on RSS QP destroy (Long Li) [task:635169] {CVE-2026-46084}
  - cifs: Fix busy dentry used after unmounting (Zhihao Cheng) [task:635435]
  - Bluetooth: HIDP: serialise l2cap_unregister_user via hidp_session_sem (Michael Bommarito) [task:635435]
  - mm: reinstate ability to map write-sealed memfd mappings read-only (Lorenzo Stoakes) [task:525135, task:635435]
  - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (Henrique Carvalho) [task:634933, task:635435]
  - usb: ulpi: fix memory leak on ulpi_register() error paths (Felix Gu) [task:628809, task:635435]
  - bcache: fix uninitialized closure object (Mingzhe Zou) [task:623065, task:635435]
  - openvswitch: vport: fix self-deadlock on release of tunnel ports (Ilya Maximets) [task:628809, task:635435]
  - cifs: open files should not hold ref on superblock (Shyam Prasad N) [task:609645, task:635435]
  - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() (Weiming Shi) [task:612463] {CVE-2026-31426}
  - octeontx2-af: CGX: fix bitmap leaks (Bo Sun) [task:600375] {CVE-2026-43157}
  - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (Sungwoo Kim) [task:609645] {CVE-2026-43449}
  - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (Cen Zhang) [task:612463] {CVE-2026-31500}
  - Bluetooth: hci_sync: Remove remaining dependencies of hci_request (Luiz Augusto von Dentz) [task:612463]
  - Bluetooth: Remove 3 repeated macro definitions (Zijun Hu) [task:612463]
  - ext4: reject mount if bigalloc with s_first_data_block != 0 (Helen Koike) [task:612463] {CVE-2026-31447}
  - vhost: move vdpa group bound check to vhost_vdpa (Eugenio Pérez) [task:626197] {CVE-2026-43248}
  - HID: roccat: fix use-after-free in roccat_report_event (Benoît Sevens) [task:622807] {CVE-2026-43111}
  - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() (Alexey Velichayshiy) [task:615913] {CVE-2026-31779}
  - eventpoll: defer struct eventpoll free to RCU grace period (Nicholas Carlini) [task:622807] {CVE-2026-43074}
  - can: raw: fix ro->uniq use-after-free in raw_rcv() (Samuel Page) [task:622807] {CVE-2026-31532}
  - ipv4: icmp: fix null-ptr-deref in icmp_build_probe() (Yiqi Sun) [task:622807] {CVE-2026-43099}
  - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (Oliver Hartkopp) [task:612463] {CVE-2026-31474}
  - ALSA: caiaq: fix stack out-of-bounds read in init_card (Berk Cem Goksel) [task:615913] {CVE-2026-31778}
  - ocfs2: fix possible deadlock between unlink and dio_end_io_write (Joseph Qi) [task:622807] {CVE-2026-31598}
  - xfs: delete attr leaf freemap entries when empty (Darrick J. Wong) [task:600375] {CVE-2026-43187}
  - cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() (Davidlohr Bueso) [task:609123] {CVE-2026-23327}
  - cxl/mbox: Add Clear Log mailbox command (Srinivasulu Thanneeru) [task:609123]
  - cxl/mbox: Add Get Log Capabilities and Get Supported Logs Sub-List commands (Srinivasulu Thanneeru) [task:609123]
  - cxl: Add Support for Get Timestamp (Davidlohr Bueso) [task:609123]
  - nfnetlink_osf: validate individual option lengths in fingerprints (Weiming Shi) [task:609645] {CVE-2026-23397}
  - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' (Arseniy Krasnov) [task:520785] {CVE-2025-38593}
  - Bluetooth: hci_core, hci_sync: cleanup struct discovery_state (Dmitry Antipov) [task:520785]
  - Bluetooth: hci_core: Remove le_restart_scan work (Luiz Augusto von Dentz) [task:520785]
  - net: usb: pegasus: enable basic endpoint checking (Ziyi Guo) [task:600375] {CVE-2026-43156}
  - bpf: Fix regsafe() for pointers to packet (Alexei Starovoitov) [task:615913] {CVE-2026-43030}
  - wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() (Bitterblue Smith) [task:626327] {CVE-2025-71273}
  - wifi: rtw88: debugfs: support multiple adapters debugging (Ping-Ke Shih) [task:626327]
  - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (Sean Christopherson) [task:622807] {CVE-2026-31698}
  - ALSA: ctxfi: Fix potential OOB access in audio mixer handling (Takashi Iwai) [task:593607] {CVE-2026-23076}
  - HID: prodikeys: Check presence of pm->input_ep82 (Günther Noack) [task:600375] {CVE-2026-43251}
  - smb: client: fix OOB reads parsing symlink error response (Greg Kroah-Hartman) [task:622623] {CVE-2026-31613}
  - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Greg Kroah-Hartman) [task:622807] {CVE-2026-31614}
  - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (Sean Christopherson) [task:622807] {CVE-2026-31699}
  - fuse: reject oversized dirents in page cache (Samuel Page) [task:622807] {CVE-2026-31694}
  - xfrm: hold dev ref until after transport_finish NF_HOOK (Qi Tang) [task:622889] {CVE-2026-31663}
  - xfrm: hold device only for the asynchronous decryption (Jianbo Liu) [task:622889]
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup (Qi Tang) [task:615913] {CVE-2026-43027}
  - netfilter: nft_ct: fix use-after-free in timeout object destroy (Tuan Do) [task:618851] {CVE-2026-31665}
  - md/bitmap: fix GPF in write_page caused by resize race (Jack Wang) [task:600375] {CVE-2026-43163}
  - netfilter: nf_tables: release flowtable after rcu grace period on error (Pablo Neira Ayuso) [task:609645] {CVE-2026-23392}
  - xfrm_user: fix info leak in build_mapping() (Greg Kroah-Hartman) [task:622807] {CVE-2026-43089}
  - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (Vasiliy Kovalev) [task:600375] {CVE-2026-43214}
  - Bluetooth: HIDP: Fix possible UAF (Luiz Augusto von Dentz) [task:609645] {CVE-2026-23462}
  - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust (Huacai Chen) [task:622957] {CVE-2026-31558}
  - perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (Peter Zijlstra) [task:606597] {CVE-2026-23271}
  - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (Benoît Sevens) [task:615913] {CVE-2026-43051}
  - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (xietangxin) [task:612463] {CVE-2026-31469}
  - af_unix: read UNIX_DIAG_VFS data under unix_state_lock (Jiexun Wang) [task:622807] {CVE-2026-31673}
  - driver core: enforce device_lock for driver_match_device() (Gui-Dong Han) [task:595983] {CVE-2026-31688}
  - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (Yuchan Nam) [task:612463] {CVE-2026-31473}
  - netfilter: xt_tcpmss: check remaining length before reading optlen (Florian Westphal) [task:600375] {CVE-2026-43190}
  - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Peddolla Harshavardhan Reddy) [task:609645] {CVE-2026-31548}
  - Squashfs: check metadata block offset is within range (Phillip Lougher) [task:609645] {CVE-2026-23388}
  - ceph: supply snapshot context in ceph_zero_partial_object() (ethanwu) [task:600375] {CVE-2026-43273}
  - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (Qanux) [task:600375] {CVE-2026-43186}
  - Bluetooth: hci_event: move wake reason storage into validated event handlers (Oleh Konko) [task:624619] {CVE-2026-31771}
  - spi: fix use-after-free on controller registration failure (Johan Hovold) [task:609645] {CVE-2026-31389}
  - Input: uinput - fix circular locking dependency with ff-core (Mikhail Gavrilov) [task:618851] {CVE-2026-31667}
  - smb: client: fix use-after-free in cifs_oplock_break (Wang Zhaolong) [task:506705] {CVE-2025-38527}
  - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (Tuo Li) [task:623173] {CVE-2026-31436}
  - ext4: convert inline data to extents when truncate exceeds inline size (Deepanshu Kartikey) [task:612463] {CVE-2026-31452}
  - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Muhammad Alifa Ramdhan) [task:618851] {CVE-2026-31533}
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Eric Dumazet) [task:615913] {CVE-2026-43037}
  - net: mana: fix use-after-free in add_adev() error path (Guangshuo Li) [task:615913] {CVE-2026-43056}
  - netfilter: ip6t_eui64: reject invalid MAC header for all packets (Zhengchuan Liang) [task:622807] {CVE-2026-31685}
  - openvswitch: defer tunnel netdev_put to RCU release (Yang Yang) [task:612463] {CVE-2026-31678}
  - netfilter: bpf: defer hook memory release until rcu readers are done (Florian Westphal) [task:609645] {CVE-2026-23412}
  - smb: client: fix krb5 mount with username option (Paulo Alcantara) [task:609645] {CVE-2026-31392}
  - bonding: limit BOND_MODE_8023AD to Ethernet devices (Eric Dumazet) [task:593609] {CVE-2026-23099}
  - rxrpc: proc: size address buffers for %pISpc output (Pengpeng Hou) [task:623279] {CVE-2026-31630}
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Eric Dumazet) [task:615913] {CVE-2026-43038}
  - perf/arm-cmn: Reject unsupported hardware configurations (Robin Murphy) [task:600375] {CVE-2026-43150}
  - xen/privcmd: fix double free via VMA splitting (Juergen Gross) [task:624717] {CVE-2026-31787}
  - bcache: fix cached_dev.sb_bio use-after-free and crash (Mingzhe Zou) [task:622807] {CVE-2026-31580}
  - vsock: Ignore signal/timeout on connect() if already established (Michal Luczaj) [task:564603] {CVE-2025-40248}
  - net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (Ruitong Liu) [task:600375] {CVE-2026-43238}
  - net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich) [task:612463] {CVE-2026-31504}
  - Bluetooth: SCO: fix race conditions in sco_sock_connect() (Cen Zhang) [task:615913] {CVE-2026-43023}
  - xdp: produce a warning when calculated tailroom is negative (Larysa Zaremba) [task:609645] {CVE-2026-23343}
  - xdp: use modulo operation to calculate XDP frag tailroom (Larysa Zaremba) [task:609645]
  - netfilter: ctnetlink: ensure safe access to master conntrack (Pablo Neira Ayuso) [task:626475] {CVE-2026-43116}
  - Bluetooth: SMP: derive legacy responder STK authentication from MITM state (Oleh Konko) [task:615913] {CVE-2026-31773}
  - bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing (Fuad Tabba) [task:609211] {CVE-2026-23383}
  - rxrpc: Only put the call ref if one was acquired (Douya Le) [task:618851] {CVE-2026-31638}
  - usbip: validate number_of_packets in usbip_pack_ret_submit() (Nathan Rebello) [task:622807] {CVE-2026-31607}
  - usb: ulpi: fix double free in ulpi_register_interface() error path (Guangshuo Li) [task:615913] {CVE-2026-31759}
  - usb: usbtmc: Flush anchored URBs in usbtmc_release (Heitor Alves de Siqueira) [task:615913] {CVE-2026-31758}
  - xsk: tighten UMEM headroom validation to account for tailroom and min frame (Maciej Fijalkowski) [task:622807] {CVE-2026-43093}
  - cifs: some missing initializations on replay (Shyam Prasad N) [task:600375] {CVE-2026-31693}
  - drm/amd/display: Do not skip unrelated mode changes in DSC validation (Yussuf Khalil) [task:623193] {CVE-2026-31488}
  - xfs: stop reclaim before pushing AIL during unmount (Yuto Ohnuki) [task:612463] {CVE-2026-31455}
  - bpf: Fix stack-out-of-bounds write in devmap (Kohei Enju) [task:609007] {CVE-2026-23359}
  - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt (Pauli Virtanen) [task:615913] {CVE-2026-43018}
  - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN (Jenny Guanni Qu) [task:612463] {CVE-2026-31525}
  - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (Breno Leitao) [task:622807] {CVE-2026-31586}
  - net/sched: teql: Fix double-free in teql_master_xmit (Jamal Hadi Salim) [task:609645] {CVE-2026-23449}
  - EFI/CPER: don't dump the entire memory region (Mauro Carvalho Chehab) [task:600375] {CVE-2026-43171}
  - nvmet: move async event work off nvmet-wq (Chaitanya Kulkarni) [task:622731] {CVE-2026-31557}
  - xfs: save ailp before dropping the AIL lock in push callbacks (Yuto Ohnuki) [task:612463] {CVE-2026-31454}
  - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Jianbo Liu) [task:626513] {CVE-2026-43199}
  - RDMA/efa: Fix possible deadlock (Ethan Tidmore) [task:623069]
  - RDMA/efa: Fix use of completion ctx after free (Yonatan Nachum) [task:623069] {CVE-2026-31493}
  - RDMA/efa: Improve admin completion context state machine (Yonatan Nachum) [task:623069]
  - RDMA/efa: Check stored completion CTX command ID with received one (Yonatan Nachum) [task:623069]
  - RDMA: Use %pe format specifier for error pointers (Leon Romanovsky) [task:623069]
  - RDMA/efa: Extend admin timeout error print (Michael Margolin) [task:623069]
  - APEI/GHES: ensure that won't go past CPER allocated record (Mauro Carvalho Chehab) [task:600375] {CVE-2026-43277}
  - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access (Lukas Johannes Möller) [task:609645] {CVE-2026-31393}
  - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (Srinivasan Shanmugam) [task:612463] {CVE-2026-31566}
  - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (Michael Bommarito) [task:622807] {CVE-2026-31708}
  - arm64: Add support for TSV110 Spectre-BHB mitigation (Jinqian Yang) [task:600375] {CVE-2026-43261}
  - can: gw: fix OOB heap access in cgw_csum_crc8_rel() (Ali Norouzi) [task:612463] {CVE-2026-31570}
  - bridge: br_nd_send: linearize skb before parsing ND options (Yang Yang) [task:615913] {CVE-2026-31682}
  - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Herbert Xu) [task:632493] {CVE-2026-43493}
  - bridge: cfm: Fix race condition in peer_mep deletion (Hyunwoo Kim) [task:609257] {CVE-2026-23393}
  - ALSA: usb-audio: Add sanity check for OOB writes at silencing (Takashi Iwai) [task:600375] {CVE-2026-43279}
  - bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). (Kuniyuki Iwashima) {CVE-2026-43016}
  - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Vahagn Vardanian) [task:600375] {CVE-2026-43233}
  - net/sched: sch_netem: fix out-of-bounds access in packet corruption (Yucheng Lu) [task:615913] {CVE-2026-31675}
  - fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Kuniyuki Iwashima) [task:593627] {CVE-2026-23083}
  - Buffer overflow in drivers/xen/sys-hypervisor.c (Juergen Gross) [task:624843] {CVE-2026-31786}
  - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Coiby Xu) [task:561765] {CVE-2025-68183}
  - media: v4l2-async: Fix error handling on steps after finding a match (Sakari Ailus) [task:600375] {CVE-2026-43189}
  - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (Berk Cem Goksel) [task:593557] {CVE-2026-23089}
  - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Hyunwoo Kim) [task:609645] {CVE-2026-23458}
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Yuan Tan) [task:606589] {CVE-2026-23274}
  - Bluetooth: MGMT: validate LTK enc_size on load (Keenan Dong) [task:615913] {CVE-2026-43020}
  - mfd: core: Add locking around 'mfd_of_node_list' (Douglas Anderson) [task:600375] {CVE-2026-43143}
  - cifs: Fix locking usage for tcon fields (Shyam Prasad N) [task:600375] {CVE-2026-43215}
  - net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() (Bingquan Chen) [task:622807] {CVE-2026-31700}
  - mm: resolve faulty mmap_region() error path behaviour (Lorenzo Stoakes) [task:396805] {CVE-2024-53096}
  - xfs: fix freemap adjustments when adding xattrs to leaf blocks (Darrick J. Wong) [task:600375] {CVE-2026-43158}
  - wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration (Ariel Silver) [task:606425] {CVE-2026-23246}
  - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() (Lorenzo Bianconi) [task:609645] {CVE-2026-23315}
  - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (Sebastian Brzezinka) [task:618851] {CVE-2026-31656}
  - openvswitch: validate MPLS set/set_masked payload length (Yang Yang) [task:612463] {CVE-2026-31679}
  - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (Chuck Lever) [task:609645] {CVE-2026-31403}
  - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Xiang Mei) [task:622807] {CVE-2026-43085}
  - wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free (Alexander Popov) [task:615913] {CVE-2026-31695}
  - ALSA: 6fire: fix use-after-free on disconnect (Berk Cem Goksel) [task:622807] {CVE-2026-31581}
  - HID: magicmouse: Do not crash on missing msc->input (Günther Noack) [task:600375] {CVE-2026-43140}
  - ALSA: usb-audio: Use correct version for UAC3 header validation (Jun Seo) [task:609645] {CVE-2026-23318}
  - x86: shadow stacks: proper error handling for mmap lock (Linus Torvalds) [task:626257] {CVE-2026-43109}
  - HID: multitouch: Check to ensure report responses match the request (Lee Jones) [task:615913] {CVE-2026-43047}
  - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer (Qi Tang) [task:612463] {CVE-2026-31507}
  - pstore: ram_core: fix incorrect success return when vmap() fails (Ruipeng Qi) [task:600375] {CVE-2026-43124}
  - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (Jiayuan Chen) [task:609645] {CVE-2026-23450}
  - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [task:606591] {CVE-2026-23278}
  - ALSA: ctxfi: Limit PTP to a single page (Harin Lee) [task:622807] {CVE-2026-31602}
  - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [task:615913] {CVE-2026-43028}
  - wifi: brcmfmac: validate bsscfg indices in IF events (Pengpeng Hou) [task:622807] {CVE-2026-43110}
  - HID: core: Mitigate potential OOB by removing bogus memset() (Lee Jones) [task:624663] {CVE-2026-43048}
  - HID: core: Add printk_ratelimited variants to hid_warn() etc (Vicki Pfau) [task:624663]
  - clsact: Fix use-after-free in init/destroy rollback asymmetry (Daniel Borkmann) [task:609645] {CVE-2026-23413}
  - RDMA/umem: Fix double dma_buf_unpin in failure path (Jacob Moroni) [task:600375] {CVE-2026-43128}
  - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (Sean Christopherson) [task:622807] {CVE-2026-31697}
  - ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY (Tejas Bharambe) [task:622807] {CVE-2026-31597}
  - xfrm: Wait for RCU readers during policy netns exit (Steffen Klassert) [task:622807] {CVE-2026-43091}
  - dm: clear cloned request bio pointer when last clone bio completes (Michael Liang) [task:600375] {CVE-2026-43278}
  - ASoC: sma1307: fix double free of devm_kzalloc() memory (Guangshuo Li) [task:623015] {CVE-2026-31475}
  - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (Oleh Konko) [task:618851] {CVE-2026-31662}
  - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Jenny Guanni Qu) [task:609645] {CVE-2026-23456}
  - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Lukas Johannes Möller) [task:609645] {CVE-2026-23457}
  - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ (Luiz Augusto von Dentz) [task:609645] {CVE-2026-23395}
  - net: ipv6: flowlabel: defer exclusive option free until RCU teardown (Zhengchuan Liang) [task:615913] {CVE-2026-31680}
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (Shaurya Rane) [task:609645] {CVE-2026-23461}
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Ren Wei) [task:612463] {CVE-2026-31674}
  - net: stmmac: fix integer underflow in chain mode (Tyllis Xu) [task:618851] {CVE-2026-31649}
  - Bluetooth: hci_sync: annotate data-races around hdev->req_status (Cen Zhang) [task:626297] {CVE-2026-43119}
  - Bluetooth: hci_sync: Move handling of interleave_scan (Luiz Augusto von Dentz) [task:626297]
  - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check (Tobi Gaertner) [task:609645] {CVE-2026-23447}
  - EFI/CPER: don't go past the ARM processor CPER record buffer (Mauro Carvalho Chehab) [task:600375] {CVE-2026-43266}
  - futex: Require sys_futex_requeue() to have identical flags (Peter Zijlstra) [task:622903] {CVE-2026-31554}
  - configs: add edac_support for sunway (liuyunchen) [bug:585193]
  - configs: complete sunway generic_defconfig (liuyunchen) [task:625785, bug:551671]
  - sunway/config: enable balloon config (Hao Ge) [bug:585423]
  - sunway/config: Enable APPARMOR security module (wangchi) [bug:570881]
  - mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc() (Uladzislau Rezki (Sony)) [task:540443] {CVE-2025-39910}
  - kasan: avoid sleepable page allocation from atomic context (Alexander Gordeev) [task:540443]
  - OPENEULER: drm/hisilicon/hibmc: fix KVM is not displaying when GRUB VGA is on (Baihan Li) [task:540647, task:625887]
  - OPENEULER: drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior (Baihan Li) [task:540647, task:625887]
  - drm/hisilicon/hibmc: fix dp and vga cannot show together (Baihan Li) [task:625887]
  - drm/hisilicon/hibmc: fix rare monitors cannot display problem (Baihan Li) [task:625887]
  - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local (Baihan Li) [task:625887]
  - drm/hisilicon/hibmc: fix the i2c device resource leak when vdac init failed (Baihan Li) [task:625887]
  - drm/hisilicon/hibmc: Add vga connector detect functions (Baihan Li) [task:625887]
  - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD (Baihan Li) [task:625887]
  - drm/hisilicon/hibmc: fix the hibmc loaded failed bug (Baihan Li) [task:525135, task:625887]
  - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers (Douglas Anderson) [task:502643, task:625887]
  - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER (Arnd Bergmann) [task:490895, task:625887]
  - drm/hibmc: Drop dependency on ARM64 (Thomas Zimmermann) [task:490895, task:625887]
  - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature (Baihan Li) [task:490895, task:625887]
  - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file (Baihan Li) [task:490895, task:625887]
  - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel (Baihan Li) [task:490895, task:625887]
  - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp (Baihan Li) [task:490895, task:625887]
  - drm/hisilicon/hibmc: Add dp serdes cfg in dp process (Baihan Li) [task:490895, task:625887]
  - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis (Baihan Li) [task:490895, task:625887]
  - drm/hisilicon/hibmc: Restructuring the header dp_reg.h (Baihan Li) [task:490895, task:625887]
  - drm/hisilicon/hibmc: add dp module in hibmc (Baihan Li) [task:490895, task:625887]
  - drm/hisilicon/hibmc: refactored struct hibmc_drm_private (Baihan Li) [task:490895, task:625887]
  - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver (Baihan Li) [task:490895, task:625887]
  - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers (Baihan Li) [task:490895, task:625887]
  - drm/hisilicon/hibmc: add dp aux in hibmc drivers (Baihan Li) [task:490895, task:625887]
  - drm/hisilicon: Remove unused delarations (Zhang Zekun) [task:490895, task:625887]
  - drm/hisilicon/hibmc: convert to struct drm_edid (Jani Nikula) [task:490895, task:625887]
  - drm/ast: Implement polling for VGA and SIL164 connectors (Thomas Zimmermann) [task:490895]
  - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (Sravan Kumar Gundu) [task:525135]
  - drbd: add missing kref_get in handle_write_conflicts (Sarah Newman) [task:525135]
  - ipc: fix to protect IPCS lookups using RCU (Jeongjun Park) [task:486465]
  - fs/buffer: fix use-after-free when call bh_read() helper (Ye Bin) [task:525135]
  - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton) [task:609645]
  - scsi: megaraid_sas: Fix invalid node index (Chen Yu) [task:493613]
  - ACPI: HED: Always initialize before evged (Xiaofei Tan) [task:476205, task:625889]
  - octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (Duoming Zhou) [task:536679]
  - cnic: Fix use-after-free bugs in cnic_delete_task (Duoming Zhou) [task:536679]
  - kernfs: Fix UAF in polling when open file is released (Chen Ridong) [task:534401]
  - libceph: fix invalid accesses to ceph_connection_v1_info (Ilya Dryomov) [task:534401]
  - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (Michal Schmidt) [task:534401]
  - team: fix check for port enabled in team_queue_override_port_prio_changed() (Jiri Pirko) [task:582447]
  - mptcp: fix race condition in mptcp_schedule_work() (Eric Dumazet) [task:564603]
  - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED (Jason Gunthorpe) [task:582447]
  - svcrdma: bound check rq_pages index in inline path (Joshua Rogers) [task:582447]
  - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (Andrew Fasano) [task:595741]
  - Bluetooth: btusb: revert use of devm_kzalloc in btusb (Raphael Pinsonneault-Thibeault) [task:582447]
  - ALSA: scarlett2: Fix buffer overflow in config retrieval (Samasth Norway Ananda) [task:594541]
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [task:595741]
  - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" (Anshumali Gaur) [task:582447]
  - mm/page_alloc: prevent pcp corruption with SMP=n (Vlastimil Babka) [task:594541]
  - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Kuniyuki Iwashima) [task:543279]
  - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Kuniyuki Iwashima) [task:536679]
  - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (Koichiro Den) [task:609645]
  - smb: client: fix use-after-free in crypt_message when using async crypto (Wang Zhaolong) [task:506705]
  - tls: fix handling of zero-length records on the rx_list (Jakub Kicinski) [task:525135]
  - HID: core: do not bypass hid_hw_raw_request (Benjamin Tissoires) [task:506705]
  - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (Takashi Iwai) [task:561765]
  - wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation (Veerendranath Jakkam) [task:464978]
  - HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (Qasim Ijaz) [task:527693]
  - tipc: Fix use-after-free in tipc_conn_close(). (Kuniyuki Iwashima) [task:502609]
  - Bluetooth: vhci: Prevent use-after-free by removing debugfs files early (Ivan Pravdin) [task:529089]
  - netfilter: xt_CT: drop pending enqueued packets on template removal (Pablo Neira Ayuso) [task:609645]
  - scsi: lpfc: Fix buffer free/clear order in deferred receive path (John Evans) [task:529089]
  - net/mlx5: Fix ECVF vports unload on shutdown flow (Amir Tzin) [task:482699]
  - net: openvswitch: Fix the dead loop of MPLS parse (Faicker Mo) [task:482699]
  - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (Zhu Yanjun) [task:467324]
  - i40e: remove read access to debugfs files (Jacob Keller) [task:540051] {CVE-2025-39901}
  - can: bcm: fix locking for bcm_op runtime updates (Oliver Hartkopp) [task:609645]
  - can: bcm: add locking for bcm_op runtime updates (Oliver Hartkopp) [task:476205]
  - RDMA/umad: Reject negative data_len in ib_umad_write (YunJe Shin) [task:600375]
  - virtio-net: ensure the received length does not exceed allocated size (Bui Quang Minh) [task:497669]
  - usb: core: config: Prevent OOB read in SS endpoint companion parsing (Xinyu Liu) [task:525135]
  - media: venus: Fix OOB read due to missing payload bound check (Vedang Nagar) [task:525135]
  - ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Dan Carpenter) [task:502609]
  - net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices (Rengarajan S) [task:486465]
  - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (Ilia Gavrilov) [task:561765]
  - squashfs: fix memory leak in squashfs_fill_super (Phillip Lougher) [task:525135]
  - Squashfs: check return result of sb_min_blocksize (Phillip Lougher) [task:482699]
  - xfrm: interface: fix use-after-free after changing collect_md xfrm interface (Eyal Birger) [task:510799]
  - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (Albin Babu Varghese) [task:561765]
  - Bluetooth: ISO: Fix possible UAF on iso_conn_free (Luiz Augusto von Dentz) [task:542185]
  - media: venus: Add a check for packet size after reading from shared memory (Vedang Nagar) [task:525135]
  - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (Youngjun Lee) [task:493613]
  - tracing: Limit access to parser->buffer when trace_get_user failed (Pu Lehui) [task:525135]
  - tracing: Remove unneeded goto out logic (Steven Rostedt) [task:525135]
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (Li Nan) [task:527693]
  - software node: Correct a OOB check in software_node_get_reference_args() (Zijun Hu) [task:486465]
  - libceph: make decode_pool() more resilient against corrupted osdmaps (Ilya Dryomov) [task:582447]
  - mptcp: plug races between subflow fail and subflow creation (Paolo Abeni) [task:510799]
  - wifi: ath12k: Decrement TID on RX peer frag setup error handling (Karthikeyan Kathirvel) [task:525135]
  - rpl: Fix use-after-free in rpl_do_srh_inline(). (Kuniyuki Iwashima) [task:506705]
  - drm/i915/gt: Fix timeline left held on VMA alloc error (Janusz Krzysztofik) [task:497669]
  - tls: Purge async_hold in tls_decrypt_async_wait() (Chuck Lever) [task:612463]
  - tls: wait for pending async decryptions if tls_strp_msg_hold fails (Sabrina Dubroca) [task:545719]
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [task:482699]
  - net/mdiobus: Fix potential out-of-bounds read/write access (Jakub Raczynski) [task:482699]
  - net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect (Oleksij Rempel) [task:497669]
  - wifi: ath12k: Correct tid cleanup when tid setup fails (Sarika Sharma) [task:525135]
  - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (Kuniyuki Iwashima) [task:529089]
  - fbdev: bitblit: bound-check glyph index in bit_putcs* (Junjie Cao) [task:561765]
  - vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic) [task:517535]
  - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (Massimiliano Pellizzer) [task:609645]
  - apparmor: fix race between freeing data and fs accessing it (John Johansen) [task:609645]
  - apparmor: fix race on rawdata dereference (John Johansen) [task:609645]
  - apparmor: fix unprivileged local user can do privileged policy management (John Johansen) [task:609645]
  - atm: clip: Fix infinite recursive call of clip_push(). (Kuniyuki Iwashima) [task:502609]
  - apparmor: Fix double free of ns_name in aa_replace_profiles() (John Johansen) [task:609645]
  - bpf: Avoid __bpf_prog_ret0_warn when jit fails (KaFai Wan) [task:482699]
  - bpf, sockmap: Avoid using sk_socket after free when sending (Jiayuan Chen) [task:482699]
  - btrfs: do not allow relocation of partially dropped subvolumes (Qu Wenruo) [task:525135]
  - i40e: Fix potential invalid access when MAC list is empty (Zhen Ni) [task:529089]
  - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Dan Carpenter) [task:525135]
  - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Takashi Iwai) [task:525135]
  - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() (Tengda Wu) [task:486465]
  - media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls (Hans de Goede) [task:525135]
  - iommufd: Prevent ALIGN() overflow (Jason Gunthorpe) [task:525135]
  - fbcon: Make sure modelist not set on unregistered console (Kees Cook) [task:486465]
  - wifi: mwifiex: Initialize the chan_stats array to zero (Qianfeng Rong) [task:529089]
  - wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() (Daniil Dulov) [task:609645]
  - ACPI: pfr_update: Fix the driver update version check (Chen Yu) [task:525135]
  - net/smc: fix UAF on smcsk after smc_listen_out() (D. Wythe) [task:525135]
  - apparmor: fix side-effect bug in match_char() macro usage (Massimiliano Pellizzer) [task:609645]
  - mm/damon/sysfs: fix use-after-free in state_show() (Stanislav Fort) [task:534401]
  - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work (Duoming Zhou) [task:529089]
  - bus: mhi: host: Detect events pointing to unexpected TREs (Youssef Samir) [task:525135]
  - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. (Kuniyuki Iwashima) [task:534401]
  - ftrace: Also allocate and copy hash for reading of filter files (Steven Rostedt) [task:525135]
  - ftrace: Fix UAF when lookup kallsym after ftrace disabled (Ye Bin) [task:486465]
  - fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() (Max Kellermann) [task:486465]
  - coresight: prevent deactivate active config while enabling the config (Yeoreum Yun) [task:482699]
  - net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (Alexey Kodanev) [task:486465]
  - net: microchip: lan743x: Reduce PTP timeout on HW failure (Rengarajan S) [task:486465]
  - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (Terry Junge) [task:482699]
  - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (Ido Schimmel) [task:582447]
  - e1000: fix OOB in e1000_tbi_should_accept() (Guangshuo Li) [task:582447]
  - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (Trond Myklebust) [task:517535]
  - EDAC/skx_common: Fix general protection fault (Qiuxu Zhuo) [task:482699]
  - ublk: santizize the arguments from userspace when adding a device (Ronnie Sahlberg) [task:486465]
  - mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (Ido Schimmel) [task:467324]
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (Kuniyuki Iwashima) [task:497669]
  - wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request (Kees Cook) [task:467324]
  - Bluetooth: MGMT: Fix sparse errors (Luiz Augusto von Dentz) [task:482699]
  - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (Luiz Augusto von Dentz) [task:482699]
  - wifi: ath9k_htc: Abort software beacon handling if disabled (Toke Høiland-Jørgensen) [task:482699]
  - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). (Kuniyuki Iwashima) [task:493613]
  - net: atm: add lec_mutex (Eric Dumazet) [task:486465]
  - net/sched: fix use-after-free in taprio_dev_notifier (Hyunwoo Kim) [task:486465]
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (Alexey Kodanev) [task:482699]
  - nbd: fix uaf in nbd_genl_connect() error path (Zheng Qixing) [task:502609]
  - platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() (Vladimir Moskovkin) [task:476205]
  - ASoC: codecs: wcd9335: Fix missing free of regulator supplies (Krzysztof Kozlowski) [task:493613]
  - ASoC: codec: wcd9335: Convert to GPIO descriptors (Peng Fan) [task:493613]
  - ASoC: codecs: wcd9335: Handle nicer probe deferral and simplify with dev_err_probe() (Krzysztof Kozlowski) [task:493613]
  - vsock/vmci: Clear the vmci transport packet properly when initializing it (HarshaVardhana S A) [task:497669]
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Shin'ichiro Kawasaki) [task:486465]
  - net/sched: act_gate: snapshot parameters with RCU on replace (Paul Moses) [task:609645]
  - drm/vmwgfx: Return the correct value in vmw_translate_ptr functions (Ian Forbes) [task:609645]
  - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Miaohe Lin) [task:534401]
  - tls: always refresh the queue when reading sock (Jakub Kicinski) [task:506705]
  - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Youngjun Lee) [task:525135]
  - libceph: prevent potential out-of-bounds reads in handle_auth_done() (ziming zhang) [task:587391]
  - LoongArch: Enable exception fixup for specific ADE subcode (Chenghao Duan) [task:605943] {CVE-2025-71270}
  - OPENEULER: ipmi: Add HiSilicon IPMI Page Soft Offline driver (Wanhan He) [task:604183]
  - OPENEULER: apei/ghes: Add sysctl interface to control soft-offline page isolation (Qi Xi) [task:604183]
  - PHYTIUM: pswiotlb: Bypass pswiotlb when the device NUMA node is invalid (Cao Guanghui) [task:596471]
  - virt: tdx-guest: Fix handling of host controlled 'quote' buffer length (Zubin Mithra) [task:623055] {CVE-2026-31470}
  - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (Ian Forbes) [task:561765]
  - fbcon: Fix OOB access in font allocation (Thomas Zimmermann) [task:538655]
  - fbcon: fix integer overflow in fbcon_do_set_font (Samasth Norway Ananda) [task:538655]
  - x86/vmware: Fix hypercall clobbers (Josh Poimboeuf) [task:596649] {CVE-2026-23215}
  - x86/vmware: Add TDX hypercall support (Alexey Makhalov) [task:596649]
  - x86/vmware: Remove legacy VMWARE_HYPERCALL* macros (Alexey Makhalov) [task:596649]
  - x86/vmware: Correct macro names (Alexey Makhalov) [task:596649]
  - x86/vmware: Use VMware hypercall API (Alexey Makhalov) [task:596649]
  - drm/vmwgfx: Use VMware hypercall API (Alexey Makhalov) [task:596649]
  - input/vmmouse: Use VMware hypercall API (Alexey Makhalov) [task:596649]
  - ptp/vmware: Use VMware hypercall API (Alexey Makhalov) [task:596649]
  - x86/vmware: Introduce VMware hypercall API (Alexey Makhalov) [task:596649]
  - arch/sw_64: Enable Livepatch Support for SW64 (wudandan) [task:620619]
  - PCI: Fix NULL dereference in SR-IOV VF creation error path (Shay Drory) [task:596475, task:607547]
  - ZHAOXIN: perf/zhaoxin/uncore: Enhance uncore support and fix related bugs (lifangxu) [task:536049, task:607547]
  - ZHAOXIN: cpufreq: Add CPU frequency policy change notification support (leoliu-oc) [task:596475, task:607547]
  - ZHAOXIN: hwmon: zhaoxin-cputemp: Update for KX-8000 (leoliu-oc) [task:596475, task:607547]
  - ZHAOXIN: PCI: dpc: Increase pciehp waiting time for DPC recovery (leoliu-oc) [task:596475, task:607547]
  - PCI: pciehp: Ignore belated Presence Detect Changed caused by DPC (Lukas Wunner) [task:596475, task:607547]
  - PCI: pciehp: Ignore Link Down/Up caused by Secondary Bus Reset (Lukas Wunner) [task:596475, task:607547]
  - PCI: pciehp: Ignore Presence Detect Changed caused by DPC (Lukas Wunner) [task:596475, task:607547]
  - PCI: pciehp: Avoid unnecessary device replacement check (Lukas Wunner) [task:596475, task:607547]
  - PCI: Make pci_destroy_dev() concurrent safe (Keith Busch) [task:596475, task:607547]
  - PCI: pciehp: Detect device replacement during system sleep (Lukas Wunner) [task:596475, task:607547]
  - ZHAOXIN: apei/ghes: Add Zhaoxin platform support for ghes_edac (leoliu-oc) [task:596475, task:607547]
  - efi/cper: Print correctable AER information (Yazen Ghannam) [task:596475, task:607547]
  - ZHAOXIN: efi/cper: Add Zhaoxin mem error decode for KH-50000 (leoliu-oc) [task:596475, task:607547]
  - ZHAOXIN: efi/cper: Add Zhaoxin cache error decode (leoliu-oc) [task:596475, task:607547]
  - ZHAOXIN: efi/cper: Add Zhaoxin micro-architectural error decode (leoliu-oc) [task:596475, task:607547]
  - ZHAOXIN: efi/cper: Add Zhaoxin non standard cper error decode (leoliu-oc) [task:596475, task:607547]
  - ZHAOXIN: efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000 (leoliu-oc) [task:596475, task:607547]
  - ZHAOXIN: efi: cper: Add Zhaoxin/Centaur ZDI/ZPI error decode (leoliu-oc) [task:536049, task:607547]
  - ZHAOXIN: x86/microcode: Serialize cpu startup for Zhaoxin cpu during early microcode updates (Lyle Li) [task:557663, task:607547]
  - ZHAOXIN: x86/hpet: Set dynamic IRQ feature for HPET for KH-50000 (leoliu-oc) [task:549125, task:607547]
  - ZHAOXIN: ACPI: processor: idle: Set timer broadcast state on C3 for KH-50000 (leoliu-oc) [task:549125, task:607547]
  - ZHAOXIN: Add platform-specific quirks for ZX-200 device (leoliu-oc) [task:549125, task:607547]
  - ZHAOXIN: xhci: Limit the RESET_ON_RESUME quirk on device 0x9203 (leoliu-oc) [task:536049, task:607547]
  - usb: xhci: quirk for data loss in ISOC transfers (Raju Rangoju) [task:497669, task:607547]
  - mtk-sd: reset host->mrq on prepare_data() error (Sergey Senozhatsky) [task:497669]
  - mtk-sd: Prevent memory corruption from DMA map failure (Masami Hiramatsu (Google)) [task:497669]
  - ext4: fix use-after-free in update_super_work when racing with umount (Jiayuan Chen) [task:612463]
  - net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (Jakub Raczynski) [task:482699]
  - phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode (Wayne Chang) [task:506705]
  - ext4: publish jinode after initialization (Li Chen) [task:615913]
  - pptp: fix pptp_xmit() error path (Eric Dumazet) [task:517535]
  - pptp: ensure minimal skb length in pptp_xmit() (Eric Dumazet) [task:517535]
  - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (Jiayuan Chen) [task:600375]
  - smb: client: fix potential UAF in smb2_close_cached_fid() (Henrique Carvalho) [task:561765]
  - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (Takashi Iwai) [task:542185]
  - fs/proc: fix uaf in proc_readdir_de() (Wei Yang) [task:561765]
  - perf/core: Prevent VMA split of buffer mappings (Thomas Gleixner) [task:517535]
  - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (Cen Zhang) [task:561765]
  - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Aditya Garg) [task:594541]
  - RDMA/irdma: avoid invalid read in irdma_net_event (Michal Schmidt) [task:582447]
  - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (Hyunwoo Kim) [task:612463]
  - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [task:525135]
  - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (Luiz Augusto von Dentz) [task:538655]
  - xfs: avoid dereferencing log items after push callbacks (Yuto Ohnuki) [task:612463]
  - i40e: fix idx validation in config queues msg (Lukasz Czapnik) [task:538655]
  - ipv6: reject malicious packets in ipv6_gso_segment() (Eric Dumazet) [task:517535]
  - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (Yue Haibing) [task:506705]
  - smb: client: Fix use-after-free in cifs_fill_dirent (Wang Zhaolong) [task:476205]
  - btrfs: qgroup: fix race between quota disable and quota rescan ioctl (Filipe Manana) [task:525135]
  - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Tvrtko Ursulin) [task:545719]
  - md/raid1: Fix stack memory use after return in raid1_reshape (Wang Jinchao) [task:502609]
  - libceph: fix potential use-after-free in have_mon_and_osd_map() (Ilya Dryomov) [task:567175]
  - sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [task:517535]
  - Bluetooth: hci_event: validate skb length for unknown CC opcode (Raphael Pinsonneault-Thibeault) [task:561765]
  - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (Maher Azzouzi) [task:517535]
  - tls: handle data disappearing from under the TLS ULP (Jakub Kicinski) [task:525135]
  - xfs: do not propagate ENODATA disk errors into xattr code (Eric Sandeen) [task:527693]
  - HID: asus: fix UAF via HID_CLAIMED_INPUT validation (Qasim Ijaz) [task:527693]
  - fs: writeback: fix use-after-free in __mark_inode_dirty() (Jiufei Xue) [task:529089]
  - arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() (Ada Couprie Diaz) [task:510799]
  - net: hns3: add VLAN id validation before using (Jian Shen) [task:573561]
  - regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods (Manivannan Sadhasivam) [task:497669]
  - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Jenny Guanni Qu) [task:609645]
  - perf/core: Exit early on perf_mmap() fail (Thomas Gleixner) [task:517535]
  - scsi: sg: Do not sleep in atomic context (Bart Van Assche) [task:564603]
  - ipv6: sr: Fix MAC comparison to be constant-time (Eric Biggers) [task:525135]
  - net_sched: red: fix a race in __red_change() (Eric Dumazet) [task:482699]
  - net: atlantic: fix fragment overflow handling in RX path (Jiefeng Zhang) [task:567175]
  - pNFS: Fix a deadlock when returning a delegation during open() (Trond Myklebust) [task:609645]
  - proc: fix type confusion in pde_set_flags() (wangzijie) [task:534401]
  - proc: fix missing pde_set_flags() for net proc files (wangzijie) [task:529089]
  - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (wangzijie) [task:517535]
  - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify (Wupeng Ma) [task:482699]
  - net: rose: convert 'use' field to refcount_t (Takamitsu Iwai) [task:527693]
  - net: rose: split remove and free operations in rose_remove_neigh() (Takamitsu Iwai) [task:527693]
  - netfilter: nf_conntrack_expect: use expect->helper (Pablo Neira Ayuso) [task:615913]
  - netfilter: nf_conntrack_expect: honor expectation helper field (Pablo Neira Ayuso) [task:615913]
  - ext4: avoid infinite loops caused by residual data (Edward Adam Davis) [task:612463]
  - ext4: get rid of ppath in ext4_ext_insert_extent() (Baokun Li)
  - ext4: get rid of ppath in ext4_ext_create_new_leaf() (Baokun Li)
  - ext4: get rid of ppath in ext4_find_extent() (Baokun Li)
  - sctp: avoid NULL dereference when chunk data buffer is missing (Alexey Simakov) [task:547259]
  - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). (Kuniyuki Iwashima) [task:527693]
  - atm: Revert atm_account_tx() if copy_from_iter_full() fails. (Kuniyuki Iwashima) [task:486465]
  - atm: atmtcp: Free invalid length skb in atmtcp_c_send(). (Kuniyuki Iwashima) [task:486465]
  - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [task:538655]
  - xfrm: Duplicate SPI Handling (Aakash Kumar S) [task:525135]
  - wifi: cfg80211: fix use-after-free in cmp_bss() (Dmitry Antipov) [task:529089]
  - wifi: cfg80211: sme: store capped length in __cfg80211_connect_result() (Dan Carpenter) [task:582447]
  - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (Dan Carpenter) [task:529089]
  - net_sched: ets: Fix double list add in class with netem as child qdisc (Victor Nogueira) [task:463929]
  - net: tipc: fix refcount warning in tipc_aead_encrypt (Charalampos Mitrodimas) [task:482699]
  - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (Wang Liang) [task:476205]
  - sctp: linearize cloned gso packets in sctp_rcv (Xin Long) [task:525135]
  - dm-bufio: don't schedule in atomic context (LongPing Wei) [task:463929]
  - fbdev: fix potential buffer overflow in do_register_framebuffer() (Yongzhen Zhang) [task:525135]
  - fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var (Murad Masimov) [task:486465]
  - drm/amd/display: Fix slab-use-after-free in hdcp (Chris Bainbridge) [task:463929]
  - drm/amd/display: Add scoped mutexes for amdgpu_dm_dhcp (Mario Limonciello) [task:463929]
  - tracing: Fix compilation warning on arm32 (Pan Taixi) [task:482699]
  - tracing: Fix oob write in trace_seq_to_buffer() (Jeongjun Park) [task:463929]
  - vxlan: vnifilter: Fix unlocked deletion of default FDB entry (Ido Schimmel) [task:463929]
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (Pavel Paklov) [task:463929]
  - iommu: disable SVA when CONFIG_X86 is set (Lu Baolu) [task:582447]
  - ALSA: ump: Fix buffer overflow at UMP SysEx message conversion (Takashi Iwai) [task:463929]
  - wifi: mt76: mt7915: fix list corruption after hardware restart (Felix Fietkau) [task:534349] {CVE-2025-39862}
  - net/sched: ets: use old 'nbands' while purging unused classes (Davide Caratti) [task:525135]
  - net_sched: sch_ets: implement lockless ets_dump() (Eric Dumazet) [task:525135]
  - net/sched: Always pass notifications when child class becomes empty (Lion Ackermann) [task:497669]
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Cong Wang) [task:476205]
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Victor Nogueira) [task:463929]
  - net_sched: ets: fix a race in ets_qdisc_change() (Eric Dumazet) [task:482699]
  - sch_ets: make est_qlen_notify() idempotent (Cong Wang) [task:463929]
  - dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using (Yi Sun) [task:493613]
  - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Zhu Yanjun) [task:481809] {CVE-2025-38022}
  - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Xiang Mei) [task:573825] {CVE-2025-68325}
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (William Liu) [task:525135]
  - MAILLIST: fpga: dfl-afu-region: Add overflow checks for region size and offset (Sangsup Lee) [task:478285] {CVE-2023-26242}
  - KVM: arm64: Get rid of __kvm_get_mdcr_el2() and related warts (Oliver Upton) [task:594237]
  - arm64: Fix usage of new shifted MDCR_EL2 values (James Clark) [task:594237]
  - arm64: sysreg: Migrate MDCR_EL2 definition to table (Oliver Upton) [task:594237]
  - KVM: arm64: Abstract set/clear of CPTR_EL2 bits behind helper (Fuad Tabba) [task:594237]
  - KVM: arm64: debug: fix kernel-doc warnings (Randy Dunlap) [task:594237]
  - arm: perf/kvm: Use GENMASK for ARMV8_PMU_PMCR_N (James Clark) [task:490891, task:594237]
  - PHYTIUM: pswiotlb: Fix a issue of member variable force not being initialized (Cao Guanghui) [task:563611]
  - PHYTIUM: pswiotlb: Move platform-identification to cpu errata (Cao Guanghui) [task:563611]
  - PHYTIUM: pswiotlb: Move PCI-related changes to the PCI quirks (Cao Guanghui) [task:563611]
  - PHYTIUM: pswiotlb: Optimized variable types and removed unused header files (Cao Guanghui) [task:563611]
  - sched/qos: Fix __setscheduler_class() argument type mismatch (luoliang) [task:614409]
  - bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim (Lang Xu) {CVE-2026-23319}
  - bpf: export bpf_link_inc_not_zero. (Kui-Feng Lee) [task:501509]
  - bpf: Check the helper function is valid in get_helper_proto (Jiri Olsa) [task:542883] {CVE-2025-39990}
  - bpf: add a get_helper_proto() utility function (Eduard Zingerman) [task:542883]
  - bpf: improve error message for unsupported helper (Mykyta Yatsenko) [task:542883]
  - xhci: fix memory leak regression when freeing xhci vdev devices depth first (Mathias Nyman) [task:534401, task:607547]
  - usb: xhci: Fix slot_id resource race conflict (Weitao Wang) [task:525135, task:607547]
  - ZHAOXIN: hwmon: zhaoxin-cputemp: Update for KH-50000 (leoliu-oc) [task:536049, task:607547]
  - ZHAOXIN: ata: ahci: Fix Zhaoxin SATA LED quirk for KH-50000 (leoliu-oc) [task:536049, task:607547]
  - ZHAOXIN: pinctrl: Zhaoxin: Add KH-50000 support (leoliu-oc) [task:536049, task:607547]
  - ZHAOXIN: pinctrl: Update GPIO pinctrl driver for stability and reliability (leoliu-oc) [task:457760, task:607547]
  - ZHAOXIN: x86/split_lock: Add support for Zhaoxin (leoliu-oc) [task:536049, task:607547]
  - x86/split_lock: Simplify reenabling (Maksim Davydov) [task:536049, task:607547]
  - x86/split_lock: Fix the delayed detection logic (Maksim Davydov) [task:530263, task:607547]
  - x86/bus_lock: Add support for AMD (Ravi Bangoria) [task:536049, task:607547]
  - x86/split_lock: Move Split and Bus lock code to a dedicated file (Ravi Bangoria) [task:536049, task:607547]
  - ZHAOXIN: Revert "x86/split_lock: Fix the delayed detection logic" (leoliu-oc) [task:536049, task:607547]
  - ZHAOXIN: KVM: x86: Introduce support for Zhaoxin PAUSEOPT instruction (leoliu-oc) [task:607547]
  - ZHAOXIN: x86/delay: add support for Zhaoxin PAUSEOPT instruction (leoliu-oc) [task:491591, task:607547]
  - Revert "ZHAOXIN: KVM: x86: Introduce support for Zhaoxin ZXPAUSE instruction" (liweishi) [task:491591, task:607547]
  - ZHAOXIN: crypto: sm4 - Refactor mode handling and optimize performance (leoliu-oc) [task:536049, task:607547]
  - ZHAOXIN: crypto: Fix compiling error with i386_defconfig in the SM4 driver (jindongyang) [task:476601, task:607547]
  - ZHAOXIN: crypto: Optimize the assembly code in the SM4 driver (leoliu-oc) [task:476601, task:607547]
  - crypto: Remove unused variable iv in zhaoxin sm4 (jindongyang) [task:474205, task:607547]
  - ZHAOXIN: crypto: sm4 - Refactor mode handling and optimize performance (leoliu-oc) [task:465625, task:607547]
  - ZHAOXIN: crypto: sm3 - Refactor code and harden security (leoliu-oc) [task:465625, task:607547]
  - ZHAOXIN: PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist (leoliu-oc) [task:465625, task:607547]
  - ZHAOXIN: ALSA: HDA: Add Zhaoxin HDMI Controller and Codec support (leoliu-oc) [task:465625, task:607547]
  - ZHAOXIN: ALSA: HDA: Roll back the old version for consistency with the mainline (leoliu-oc) [task:465625, task:607547]
  - ZHAOXIN: PCI: Supplement ACS quirk for more Zhaoxin Root Ports (leoliu-oc) [task:465625, task:607547]
  - ZHAOXIN: Optimize VIA CPU Temp Monitoring During Suspend/Resume (leoliu-oc) [task:536049, task:607547]
  - ZHAOXIN: PCI: Fix PCIe unplug Enumeration Long Blocking Issue (leoliu-oc) [task:536049, task:607547]
  - mm: thp: deny THP for files on anonymous inodes (Deepanshu Kartikey) [task:608979] {CVE-2026-23375}
  - LoongArch: Replace seq_printf() with seq_puts() for simple strings (George Guo) [task:555987]
  - LoongArch: Add 128-bit atomic cmpxchg support (George Guo) [task:555987]
  - LoongArch: Add detection for SC.Q support (George Guo) [task:555987]
  - LoongArch: Select HAVE_CMPXCHG_LOCAL in Kconfig (Huacai Chen) [task:555987]
  - LoongArch: Only use SC.Q when supported by the assembler (Thomas Weißschuh) [task:555987]
  - LoongArch: Complete CPUCFG registers definition (Huacai Chen) [task:555987]
  - LoongArch: BPF: Make error handling robust in arch_prepare_bpf_trampoline() (Hengqi Chen) [task:555987]
  - LoongArch: BPF: Make trampoline size stable (Hengqi Chen) [task:555987]
  - LoongArch: BPF: Don't align trampoline size (Hengqi Chen) [task:555987]
  - LoongArch: BPF: Remove duplicated bpf_flush_icache() (Hengqi Chen) [task:555987]
  - LoongArch: BPF: Remove duplicated flags check (Hengqi Chen) [task:555987]
  - LoongArch: BPF: Fix uninitialized symbol 'retval_off' (Huacai Chen) [task:555987]
  - LoongArch: BPF: Optimize sign-extention mov instructions (Tiezhu Yang) [task:555987]
  - LoongArch: Add irq_work support via self IPIs (Huacai Chen) [task:555987]
  - LoongArch: BPF: Fix the tailcall hierarchy (Haoran Jiang) [task:519917]
  - LoongArch: BPF: Fix jump offset calculation in tailcall (Haoran Jiang) [task:519917]
  - LoongArch: BPF: Add struct ops support for trampoline (Tiezhu Yang) [task:519401]
  - LoongArch: BPF: Add basic bpf trampoline support (Chenghao Duan) [task:519401]
  - LoongArch: BPF: Add dynamic code modification support (Chenghao Duan) [task:519401]
  - LoongArch: BPF: Rename and refactor validate_code() (Chenghao Duan) [task:519401]
  - LoongArch: Add larch_insn_gen_{beq,bne} helpers (Chenghao Duan) [task:519401]
  - LoongArch: enable CONFIG_LEDS_GPIO (wanghongliang) [task:605031]
  - ANOLIS: x86/csv: Allocate memory cyclically from different csv_cma (Wang Yan) [task:594243]
  - md-cluster: fix no recovery job when adding/re-adding a disk (Heming Zhao) [task:613175]
  - md-cluster: fix hanging issue while a new disk adding (Heming Zhao) [task:613175]
  - md/raid0: don't free conf on raid0_run failure (Christoph Hellwig) [task:613175]
  - md: add check for sleepers in md_wakeup_thread() (Florian-Ewald Mueller) [task:613175]
  - md/raid1: fix choose next idle in read_balance() (Yu Kuai) [task:613175]
  - md/raid1: record nonrot rdevs while adding/removing rdevs to conf (Yu Kuai) [task:613175]
  - md/raid1: factor out helpers to add rdev to conf (Yu Kuai) [task:613175]
  - md: sync blockdev before stopping raid or setting readonly (Li Nan) [task:613175]
  - md: factor out a helper to sync mddev (Li Nan) [task:613175]
  - md: return directly before setting did_set_md_closing (Li Nan) [task:613175]
  - md: get rdev->mddev with READ_ONCE() (Li Lingfeng) [task:613175]
  - Add MAP_PEER_SHARED in SUNWAY (liuyunchen) [task:609357]
  - block: change blk_mq_add_to_batch() third argument type to bool (Shin'ichiro Kawasaki) [bug:521953]
  - skip policy check for virtualized environments (liuyunchen) [bug:521073]
  - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Pablo Neira Ayuso) [task:606585] {CVE-2026-23272}
  - kernel: Remove signal hacks for vhost_tasks (Mike Christie) [task:513401]
  - ksmbd: add chann_lock to protect ksmbd_chann_list xarray (Namjae Jeon) [task:596721] {CVE-2026-23226}
  - ksmbd: check return value of xa_store() in krb5_authenticate (Namjae Jeon) [task:596721]
  - smb: server: smb2pdu: check return value of xa_store() (Salah Triki) [task:596721]
  - selftests/net: calibrate txtimestamp (Willem de Bruijn) [task:613189]
  - OPENEULER: sunrpc: fix NULL pointer dereference in rpcb_register_inet6 and rpcb_register_inet4 (zhaoyonghao) [task:612091]
  - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [task:614703] {CVE-2026-31407}
  - ANOLIS: x86/mm: csv: Increase the maximum value of `csv_mem_percentage` from 80 to 95 (Zhiguang Ni) [task:594241]
  - tracing: Fix enabling of tracing on file release (Steven Rostedt) [task:613165]
  - OPENEULER: PCI: Fix NVMe link speed downgrade to 2.5GT/s during hotplug (Jinhui Guo) [task:612093]
  - ext4: initialize superblock fields in the kballoc-test.c kunit tests (Zhang Yi) [task:551425]
  - OPENEULER: dcache: Limit the minimal number of bucket to two (Zhihao Cheng) [task:612095]
  - sunrpc: fix race in cache cleanup causing stale nextcheck time (Long Li) [task:612089]
  - mm: remove unnecessary calls to lru_add_drain (Rik van Riel) [task:573689]
  - netfilter: nf_nat: undo erroneous tcp edemux lookup after port clash (Florian Westphal) [task:589629]
  - HYGON: cpu vulnerabilities: support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS (zhangjun) [task:594245]
  - clocksource: Reduce watchdog readout delay limit to prevent false positives (Thomas Gleixner) [task:609085]
  - clocksource: Set cs_watchdog_read() checks based on .uncertainty_margin (Paul E. McKenney) [task:609085]
  - tpm: Fix incorrect TCM branch handling in tpm_buf_fill_hmac_session (Wang Yan) [task:590217]
  - LoongArch: stmmac: fix mdc too high issues. (wanghongliang) [task:605031]
  - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE (wudandan) [task:605031]
  - kalert: fix RAS event reporting ID mismatch (Huiwen He) [bug:509037]
  - kalert: limit maximum subscribers to 2048 (Huiwen He) [task:526009]
  - kalert: optimize heartbeat for proactive subscriber cleanup (Huiwen He) [task:526009]
  - kalert: implement unsubscribe handler (Huiwen He) [task:526009]
  - kalert: move INIT_WORK to connection initialization (Huiwen He) [task:526009]
  - VOLANS: vrcdrv: update vrcdrv RAID card driver to version 2.0-b2599-gf365215 (Cao Guanghui) [task:577915]
  - OPENice: fix unaligned access in ice_create_lag_recipe (Michal Schmidt) [task:603565]
  - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (Victor Nogueira) [task:606435] {CVE-2026-23270}
  - rtl8192FU: fix compile error due to wireless stack change (Yi Cong) [task:605713]
  - selftests/bpf: Add selftests for the invocation of bpf_lwt_xmit_push_encap (Feng Yang) [task:584649]
  - bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap (Feng Yang) [task:584649]
  - ALSA: usb-audio: Use the right limit for PCM OOB check (Takashi Iwai) [task:597001]
  - ALSA: usb-audio: Prevent excessive number of frames (Edward Adam Davis) [task:597001] {CVE-2026-23208}
  - ALSA: usb-audio: Use guard() for spin locks (Takashi Iwai) [task:597001]
  - mm/khugepaged: use KMEM_CACHE() (Wei Yang) [task:594223]
  - mm/ksm: cleanup mm_slot_entry() invocation (Wei Yang) [task:594223]
  - mm/khugepaged: remove definition of struct khugepaged_mm_slot (Wei Yang) [task:594223]
  - mm/ksm: get mm_slot by mm_slot_entry() when slot is !NULL (Wei Yang) [task:594223]
  - mm/khugepaged: use list_xxx() helper to improve readability (Wei Yang) [task:594223]
  - mm/khugepaged: fix comment for default scan sleep duration (wang lian) [task:594223]
  - ALSA: aloop: Fix racy access at PCM trigger (Takashi Iwai) [task:597107] {CVE-2026-23191}
  - ALSA: aloop: Introduce a function to get if access is interleaved mode (Chancel Liu) [task:597107]
  - ALSA: aloop: Add control element for getting the access mode (Ivan Orlov) [task:597107]
  - ALSA: aloop: Add support for the non-interleaved access mode (Ivan Orlov) [task:597107]
  - r8169: add support for RTL8168M (Heiner Kallweit) [bug:495805]
  - crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode (Thorsten Blum) [task:597121] {CVE-2025-71231}
  - wifi: rsi: Fix memory corruption due to not set vif driver data size (Marek Vasut) [task:593625] {CVE-2026-23073}
  - ANOLIS: sched/fair: Clear ->h_load_next when unregistering cgroup (Peng Wang) [task:590819]
  - mucse: fix compilation error (xiaolinkui) [task:587923, bug:531265]
  - net: mucse: fix compilation errors (xiaolinkui) [task:587923, bug:531265]
  - MUCSE: rnpvf: update Mucse rnpvf driver support (Yibo Dong) [task:544271, bug:531265]
  - MUCSE: rnpm: update Mucse rnpm PCIe driver support (Yibo Dong) [task:544271, bug:531265]
  - MUCSE: rnpgbevf: update Mucse rnpgbevf driver support (Yibo Dong) [task:544271, bug:531265]
  - MUCSE: rnpgbe: update Mucse rnpgbe PCIe driver support (Yibo Dong) [task:544271, bug:531265]
  - MUCSE: rnp: update Mucse rnp PCIe driver support (Yibo Dong) [task:544271, bug:531265]
  - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [task:622807] {CVE-2026-43077}
  - nvme: unblock ctrl state transition for firmware update (Daniel Wagner) [task:464978, bug:504821]
  - mm/memcontrol: fix format specifier for oom_group_kill (Jackie Liu)
  - dma/phytium: pswiotlb: fix printk format warning (Jackie Liu)
  - net/packet: fix a race in packet_set_ring() and packet_notifier() (Quang Le) [task:517535] {CVE-2025-38617}
  - Unbreak 'make tools/*' for user-space targets (Linus Torvalds) [task:547259]
  - sunway/config: Modify sunway configure. (liuyunchen) [bug:480863]
  - SUNWAY: fix mmap_base exceeding Java assertion address (Gu Yuchen) [task:597783]
  - Adjust the loading order of the RTC driver (liuyunchen) [bug:483945]
  - iommu: Remove iommu_probe_finalize from sunway (liuyunchen) [task:582109]
  - kysec: Change connector into y to support proc_events (liuyunchen) [bug:477055]
  - Add tracing_syscall support for sunway (liuyunchen) [task:564421]
  - kexec: remove machine_kexec_mask_interrupts from sw64 (liuyunchen) [task:580545]
  - SUNWAY: ebpf: port arch_prepare_bpf_trampoline() (Jinyu Tang) [task:568203]
  - SUNWAY: rethook: fix a bug in rethook_trampoline (Gu Yuchen) [task:568203]
  - Add missing macro EM_SW_64 (liuyunchen) [task:564421]
  - Revert "SUNWAY: perf: fix compilation error" (liuyunchen) [task:564427]
  - Add the macro COMPILE_OFFSETS to sw_64 (liuyunchen) [task:564421]
  - KVM: Fix memory failure on sunway (liuyunchen) [task:556081]
  - SUNWAY: ioremap: fix an overflow in pci_remap_cfgspace (Gao Chen) [task:525815]
  - SUNWAY: emulator: add shutdown and restart functions (Deng Xiaoyun) [task:525815]
  - SUNWAY: fix bad address error for vfio (Yu Jiayi) [task:525815]
  - Enable kdump and solve compile error on SUNWAY (liuyunchen) [task:546619]
  - SUNWAY: ftrace: add HAVE_DYNAMIC_FTRACE_WITH_ARGS support (Gu Yuchen) [task:525815]
  - SUNWAY: use wait/complete for smp boot (Mao Minkai) [task:525815]
  - SUNWAY: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC (He Chuyue) [task:525815]
  - SUNWAY: delete useless I/O access in VM and emulator (Yu Jiayi) [task:525815]
  - SUNWAY: kvm: fix perf kvm support (Min Fanlei) [task:525815]
  - SUNWAY: Kconfig: enable HAS_IOPORT by default (Zheng Chongzhen) [task:525815]
  - SUNWAY: pci: remove zx200 dma mask reset (Zheng Chongzhen) [task:525815]
  - SUNWAY: fix for executing syscall(-1) (Gu Zitao) [task:525815]
  - SUNWAY: acpi: select HAVE_ACPI_APEI when ACPI is set (Jing Li) [task:525815]
  - SUNWAY: pci: add base address of devmn (Jing Li) [task:525815]
  - SUNWAY: irqchip: update effective affinity for PINTC (Jing Li) [task:525815]
  - SUNWAY: irqchip: add support for PINTC on all NUMA nodes (Jing Li) [task:525815]
  - SUNWAY: cpufreq: optimize the granularity of cpufreq (Jing Li) [task:525815]
  - SUNWAY: ftrace: restore the register storing direct call address (Gu Yuchen) [task:525815]
  - SUNWAY: kvm: fix undefined compile issues for kvm module (Yu Jiayi) [task:525815]
  - SUNWAY: pintc: fix guest pintc init (Lei Yilong) [task:525815]
  - SUNWAY: set module region to the 2GB space below vmalloc area (Gu Yuchen) [task:525815]
  - SUNWAY: sort arch/sw64/Kconfig (Gao Chen) [task:525815]
  - SUNWAY: disable EFFICIENT_UNALIGNED_ACCESS for C3B (Gao Chen) [task:525815]
  - SUNWAY: optimize unaligned access (Gao Chen) [task:525815]
  - SUNWAY: ftrace: Add direct call trampoline samples support (Gu Yuchen) [task:525815]
  - SUNWAY: ftrace: Add direct call support (Gu Yuchen) [task:525815]
  - SUNWAY: ftrace: No need to save original function's temporary registers (Gu Yuchen) [task:525815]
  - SUNWAY: perf: fix perf test 'import perf' in python failed (He Chuyue) [task:525815]
  - SUNWAY: add support for function error injection (Gu Yuchen) [task:525815]
  - SUNWAY: add sw64 rethook implementation (Gu Yuchen) [task:525815]
  - SUNWAY: emit fixed-length instructions for BPF_PSEUDO_FUNC (Gu Yuchen) [task:525815]
  - SUNWAY: ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (xiedongliang) [task:525815]
  - SUNWAY: mm: adjust userspace memory layout (Changwei Miao) [task:525815]
  - SUNWAY: cpufreq: fix the frequency returned by cpufreq_driver->get() (Jing Li) [task:525815]
  - SUNWAY: remove redundant qspinlock.h from Kbuild (Gu Zitao) [task:525815]
  - SUNWAY: ioremap: map some IO space with ioremap (Gao Chen) [task:525815]
  - SUNWAY: ioremap: support generic ioremap for C4 (Gao Chen) [task:525815]
  - SUNWAY: kprobe on ftrace: fix bug in restoring regs (Gu Yuchen) [task:525815]
  - SUNWAY: qspinlock: add CNA support for sw64 (Gu Zitao) [task:525815]
  - SUNWAY: qspinlock: add PARAVIRT SPINLOCK support for sw64 (Gu Zitao) [task:525815]
  - SUNWAY: move syscall handling to sys_sw64.c (Mao Minkai) [task:525815]
  - SUNWAY: fix printing issue when using kprobe on ftrace (Gu Yuchen) [task:525815]
  - SUNWAY: add powercap driver (Jing Li) [task:525815]
  - SUNWAY: clocksource: fix the issue of clockevents not being notified (Jing Li) [task:525815]
  - SUNWAY: modify the interface for firmware to pass the running mode (Jing Li) [task:525815]
  - SUNWAY: fix shared_cpu_map of L3 Cache (Gao Chen) [task:525815]
  - SUNWAY: fix SWVM_IRQS undeclared when enabling HIBERNATION (Yu Jiayi) [task:525815]
  - SUNWAY: kvm: optimize the compatibility of guest interrupt (Yu Jiayi) [task:525815]
  - SUNWAY: kvm: optimize the implementation of guest interrupt (Lei Yilong) [task:525815]
  - SUNWAY: cpufreq: fix for emulator that do not support cpufreq (Jing Li) [task:525815]
  - Fix panic caused by btrfs in SUNWAY (liuyunchen) [task:551791]
  - Support samba needed filesystem (liuyunchen) [bug:428477]
  - SUNWAY: cpufreq: refactor cpufreq related code (Jing Li) [task:525815]
  - SUNWAY: msi: clear residual vector irq mapping when free irqs (Zheng Chongzhen) [task:525815]
  - SUNWAY: msi: fix guest msi interrupt handling (Lei Yilong) [task:525815]
  - SUNWAY: msi: modify msi migration strategy (Zheng Chongzhen) [task:525815]
  - SUNWAY: msi: clear the residual vector_irq information of cpu (Lei Yilong) [task:525815]
  - SUNWAY: ftrace: add notrace attribute to memset&memcpy (Gao Chen) [task:525815]
  - SUNWAY: ftrace: fix bug in restoring regs (Gao Chen) [task:525815]
  - SUNWAY: cpufreq: remove some meaningless code (Jing Li) [task:525815]
  - SUNWAY: cpufreq: move cpufreq notifier to its user (Jing Li) [task:525815]
  - SUNWAY: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c (Jing Li) [task:525815]
  - SUNWAY: cpufreq: remove debugfs code (Jing Li) [task:525815]
  - SUNWAY: pci: fix piu data allocation failure issue (Zheng Chongzhen) [task:525815]
  - SUNWAY: fix an error in BPF exception handling (Gu Yuchen) [task:525815]
  - SUNWAY: modify CPU autoplug initialization process (Zhi Tongze) [task:525815]
  - SUNWAY: msi: fix irq affinity setting during migration (Zheng Chongzhen) [task:525815]
  - SUNWAY: fix specific performance counter error (He Chuyue) [task:525815]
  - SUNWAY: enable all HW PMUs for max sampling period events (Mao Minkai) [task:525815]
  - SUNWAY: update exclusive counter handling (Mao Minkai) [task:525815]
  - SUNWAY: fix perf event L1I cache write support (Mao Minkai) [task:525815]
  - SUNWAY: locking/atomic: make atomic*_{cmp,}xchg optional (Gu Yuchen) [task:525815]
  - SUNWAY: kexec: add support for crashkernel=size[KMG] (Gu Zitao) [task:525815]
  - SUNWAY: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig (Deng Xiaoyun) [task:525815]
  - SUNWAY: ftrace: save&restore more stack frame in ftrace_caller (Gao Chen) [task:525815]
  - SUNWAY: enable -fsw-unalign-byte for new subarchs (Mao Minkai) [task:525815]
  - SUNWAY: reduce jump instructions in entUna (Mao Minkai) [task:525815]
  - SUNWAY: simplify GP handling for entUna (Mao Minkai) [task:525815]
  - SUNWAY: fix secondary_cpu_start for CORE3B (Gao Chen) [task:525815]
  - SUNWAY: reimplement cmpxchg and xchg (Wu Liliu) [task:525815]
  - SUNWAY: change condition of some cflags (Mao Minkai) [task:525815]
  - SUNWAY: put cpu_set_node() in init text (Mao Minkai) [task:525815]
  - SUNWAY: make sw64_(read/write)_csr always inline (Mao Minkai) [task:525815]
  - SUNWAY: compile divide.S for c3b only (Mao Minkai) [task:525815]
  - SUNWAY: vdso: add support for time namespaces (Gu Yuchen) [task:525815]
  - SUNWAY: rename PT_REGS_SP to PT_REGS_R30 (Mao Minkai) [task:525815]
  - SUNWAY: modify parameters of the exception functions (Wu Liliu) [task:525815]
  - SUNWAY: kvm: modify parameters of the exception functions (Lei Yilong) [task:525815]
  - SUNWAY/vdso: Support mremap() for vDSO (Wang Yuanheng) [task:525815]
  - SUNWAY/kvm: fix a bug for starting CORE3 VM (Xu Linqin) [task:525815]
  - SUNWAY: fix nmi_exit error in CORE3B (Wu Liliu) [task:525815]
  - SUNWAY: ftrace: fix atomicity bugs in ftrace (Gao Chen) [task:525815]
  - SUNWAY: fix copy_oldmem_page according to upstream (Gu Zitao) [task:525815]
  - SUNWAY: fix nmi_enter error in CORE3B (Wu Liliu) [task:525815]
  - SUNWAY: add a 1ms delay before CPU offline (Xu Yiwei) [task:525815]
  - SUNWAY: topology: discard topology information from PPTT (Jing Li) [task:525815]
  - SUNWAY: pci: fix secondary bus reset issue (Zheng Chongzhen) [task:525815]
  - SUNWAY: flush TLB after modifying ptbr_sys (Zhi Tongze) [task:525815]
  - SUNWAY: fix an error when running no main() program (Gu Zitao) [task:525815]
  - SUNWAY: perf: fix compilation error (He Chuyue) [task:557997]
  - SUNWAY: cache: fix cache ID is not unique when ACPI disabled (Jing Li) [task:525815]
  - SUNWAY: ftrace: implement ftrace_modify_call (Gao Chen) [task:525815]
  - SUNWAY: kvm: fix incorrect vm_flags in vmem_mmap() (Chen Wang) [task:525815]
  - SUNWAY: cpu: give preference to CPU information from SMBIOS (Jing Li) [task:525815]
  - SUNWAY: irqchip: use sunway as vendor prefix in device tree (Jing Li) [task:525815]
  - SUNWAY: irqchip: use pr_fmt instead of prefix string macro (Jing Li) [task:525815]
  - SUNWAY: numa: decrease CONFIG_NODES_SHIFT to 3 (Jing Li) [task:525815]
  - SUNWAY: acpi: suppress meaningless error log when acpi=off (Jing Li) [task:525815]
  - SUNWAY: emulator: refactor shutdown and restart functions (Jing Li) [task:525815]
  - perf jitdump: Add SW64 support (He Chuyue) [task:525815]
  - SUNWAY: emulator: add shutdown and restart functions (Deng Xiaoyun) [task:525815]
  - SUNWAY: emulator: fix the multi-core boot issue (Deng Xiaoyun) [task:525815]
  - SUNWAY: kvm: add CONFIG_ARCH_VCPU_STAT to Kconfig (Deng Xiaoyun) [task:525815]
  - SUNWAY: acpi: add support for ACPI S3 (Jing Li) [task:525815]
  - SUNWAY: iommu: restore iommu_map/unmap callbacks (Xu Yiwei) [task:525815]
  - SUNWAY: iommu: work around lazy translation initialization (Xu Yiwei) [task:525815]
  - SUNWAY: iommu: adjust def_domain_type (Xu Yiwei) [task:525815]
  - SUNWAY: iommu: fix iommu_v1 capability (Xu Yiwei) [task:525815]
  - SUNWAY: fix iommu commandline parameter (Xu Yiwei) [task:525815]
  - SUNWAY: iommu: remove unnecessary locking in map/unmap_pages (Yan Bo) [task:525815]
  - SUNWAY: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error (Wu Liliu) [task:525815]
  - SUNWAY: fix kprobe function (Wu Liliu) [task:525815]
  - SUNWAY: perf: fix specific performance events can be sampled (He Chuyue) [task:525815]
  - SUNWAY: bpf: optimize some instructions (Gao Chen) [task:525815]
  - SUNWAY: bpf: fix XADD32 and XADD64 (Gao Chen) [task:525815]
  - SUNWAY: iommu: mark hose->iommu_enable as true before probing on iommu_v1 (Xu Yiwei) [task:525815]
  - SUNWAY: kexec: fix a bug in menuconfig (Gao Chen) [task:525815]
  - SUNWAY: kexec: fix a compilation error (Gao Chen) [task:525815]
  - SUNWAY: iommu: mark hose->iommu_enable as true before probing (Xu Yiwei) [task:525815]
  - SUNWAY: iommu: fix work around of iommu interrupt remapping capability (Xu Yiwei) [task:525815]
  - SUNWAY: iommu: fix def_domain_type callback (Xu Yiwei) [task:525815]
  - SUNWAY: iommu: introduce PCI device check before iommu probing (Xu Yiwei) [task:525815]
  - libbpf: add SUNWAY support (Mao Minkai) [task:525815]
  - SUNWAY: rename mmap protection_map (Mao Minkai) [task:525815]
  - SUNWAY: ptrace: add NT_SW64_SYSTEM_CALL regset (Mao Minkai) [task:525815]
  - SUNWAY: bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs (Mao Minkai) [task:525815]
  - SUNWAY: bpf: add BPF_NOSPEC jit (Mao Minkai) [task:525815]
  - SUNWAY: rename _PFN_BITS to __PFN_BITS (Mao Minkai) [task:525815]
  - SUNWAY: kvm: declare KVM_CAP_SET_GUEST_DEBUG (Deng Xiaoyun) [task:525815]
  - SUNWAY: implementing VDSO with generic code (Gu Yuchen) [task:525815]
  - SUNWAY: irqchip: fix irq_enable/disable callback for MCU controller (Jing Li) [task:525815]
  - SUNWAY: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd() (Min Fanlei) [task:525815]
  - SUNWAY: acpi: support reset and S5 (Jing Li) [task:525815]
  - SUNWAY: kvm: use vma_lookup() instead of find_vma_intersection() (Lei Yilong) [task:525815]
  - SUNWAY: refactor reset routines with new API (Jing Li) [task:525815]
  - SUNWAY: kvm: remove unused kvm_arch_flush_remote_tlbs_memslot() (Min Fanlei) [task:525815]
  - usb: Fix PM handling on ZX-200 usb controller (liuyunchen) [bug:340843]
  - drm: fix compile error of arise on SUNWAY (liuyunchen) [task:205667]
  - irq: rename sunway intx interrupts (liuyunchen) [task:205667]
  - SUNWAY: irqchip: remove fallback after kzalloc_node() (Xu Yiwei) [task:382309]
  - SUNWAY: irqchip: improve intx implementation (Xu Yiwei) [task:382309]
  - SUNWAY: pci: remove function fix_jm585_reset() (Jing Li) [task:382309]
  - SUNWAY: show CPU feature UNA in /proc/cpuinfo (Mao Minkai) [task:382309]
  - SUNWAY: fix the error of cpufreq update (Zhi Tongze) [task:382309]
  - SUNWAY: fix compilation issues on match.c (Gu Yuchen) [task:382309]
  - SUNWAY: mm: fix PFN of PMDs for 512M hugepage (Wang Yuanheng) [task:382309]
  - SUNWAY: kvm: fix an error when unmapping 512M hugepages (Lei Yilong) [task:382309]
  - SUNWAY: modify sys_pfh_ops (Mao Minkai) [task:382309]
  - SUNWAY: fix set_huge_pte_at for C4 (Mao Minkai) [task:382309]
  - SUNWAY: add the missed clear_flush() (Gao Chen) [task:382309]
  - SUNWAY: fix compilation issues (Wang Yicheng) [task:382309]
  - SUNWAY: add arch_hugetlb_valid_size for C4 (Mao Minkai) [task:382309]
  - SUNWAY: kvm: adjust interrupt priority for guest (Xu Linqin) [task:382309]
  - SUNWAY: compatible with suspend implementation (Wu Liliu) [task:382309]
  - SUNWAY: add junzhang_v1/2/3_key (Wu Liliu) [task:382309]
  - SUNWAY: fix numa setup when acpi is disabled (Mao Minkai) [task:382309]
  - SUNWAY: fix setup_mem_size() (Mao Minkai) [task:382309]
  - SUNWAY: fix the register bug in do_entUna (Gu Yuchen) [task:382309]
  - SUNWAY: add unaligned access handling code for SIMD in kernel mode (5.10) (Gu Yuchen) [task:382309]
  - SUNWAY: select different MUX to read cpu frequency (Zhi Tongze) [task:382309]
  - SUNWAY: lpc: fix ast2400 driver error for C4 (Xu Chenjiao) [task:382309]
  - SUNWAY: improve lib performance for new archs (Mao Minkai) [task:382309]
  - SUNWAY: remove unnecessary parameter passing (Gu Zitao) [task:382309]
  - SUNWAY: add __vdso_getcpu support (Wu Liliu) [task:382309]
  - SUNWAY: kexec: fix kernel crashdump bugs (Gu Zitao) [task:382309]
  - SUNWAY: bpf: fix BPF_CALL address (Mao Minkai) [task:382309]
  - SUNWAY: fix irq work (Mao Minkai) [task:382309]
  - SUNWAY: reset the CSR:PTBR_USR (Gao Chen) [task:382309]
  - SUNWAY: kvm: add KVM_CAP_READONLY_MEM support (Chen Wang) [task:382309]
  - SUNWAY: pci: fix incorrect pointer of struct pci_controller (Jing Li) [task:382309]
  - SUNWAY: perf: add core4 pmu support (He Chuyue) [task:382309]
  - SUNWAY: mm: support fdt memory reservation (Jing Li) [task:382309]
  - SUNWAY: provide a cleaner raw_smp_processor_id() (Mao Minkai) [task:382309]
  - SUNWAY: remove deprecated annotation in irq.h (Xu Yiwei) [task:382309]
  - SUNWAY: introduce a fine-grained intx mask/unmask system (Xu Yiwei) [task:382309]
  - SUNWAY: move handle_intx() into pci-intx handle (Xu Yiwei) [task:382309]
  - SUNWAY: iommu: fix NULL hose check (Xu Yiwei) [task:382309]
  - SUNWAY: fix judgements about legacy pci support (Deng Xiaoyun) [task:382309]
  - SUNWAY: cache: fix shared_cpu_map of cacheinfo (Jing Li) [task:382309]
  - SUNWAY: cpu: refactor cpuinfo related code (Jing Li) [task:382309]
  - SUNWAY: cache: refactor cacheinfo related code (Jing Li) [task:382309]
  - SUNWAY: cpu: move cpu related code to the newly created cpu.c (Jing Li) [task:382309]
  - SUNWAY: irqchip: add version 3 for PINTC (Jing Li) [task:382309]
  - SUNWAY: fix null pointer issue when CONFIG_BUILTIN_DTB=y (Jing Li) [task:382309]
  - SUNWAY: acpi: suppress log of function acpi_numa_x2apic_affinity_init() (Jing Li) [task:382309]
  - SUNWAY: clk: further fix the clock frequency of SPI and I2C (Jing Li) [task:382309]
  - SUNWAY: smp: fix function fdt_setup_smp() (Jing Li) [task:382309]
  - Revert "SUNWAY: fdt: map physical node ID to logical node ID" (Jing Li) [task:382309]
  - SUNWAY: pci: remove legacy io reservation (Zhou Xuemei) [task:382309]
  - SUNWAY: fix LPC legacy IO space on chip junzhang and junzhang_v2 (Xu Yiwei) [task:382309]
  - SUNWAY: mm: remove legacy memory detection for JunZhang platform (Jing Li) [task:382309]
  - SUNWAY: iommu: improve iommu initialization (Xu Yiwei) [task:382309]
  - SUNWAY: clk: fix the clock frequency of SPI and I2C (Jing Li) [task:382309]
  - SUNWAY: fix a bug in huge_pte_offset() (Gao Chen) [task:382309]
  - SUNWAY: pci: rename some functions (Jing Li) [task:382309]
  - SUNWAY: pci: support PCIe controller driver based on device tree (Jing Li) [task:382309]
  - SUNWAY: kvm: enable ring-based dirty page tracking (Min Fanlei) [task:382309]
  - SUNWAY: kvm: fix invalid memslot flags checking during dirty logging (Min Fanlei) [task:382309]
  - SUNWAY: pciehp: fix compile error when CONFIG_PCIE_DPC=y (Xu Chenjiao) [task:382309]
  - SUNWAY: kvm: don't retrieve memory slot again in page fault handler (Min Fanlei) [task:382309]
  - SUNWAY: kexec: remove code for compatibility with builtin DTB (Jing Li) [task:382309]
  - SUNWAY: smp: allow NR_CPUS less than the number detected by firmware (Jing Li) [task:382309]
  - SUNWAY: fix C4 INTx configuration (Xu Yiwei) [task:382309]
  - SUNWAY: pci: fix compile error when CONFIG_PCI_MSI=n (Jing Li) [task:382309]
  - SUNWAY: pci: fix unable to get node ID when numa_off is set (Jing Li) [task:382309]
  - SUNWAY: add uapi reg.h (Mao Minkai) [task:382309]
  - SUNWAY: pciehp: remove useless code (Xu Chenjiao) [task:382309]
  - SUNWAY: kvm: resolve a compile warning (Gao Chen) [task:382309]
  - SUNWAY: pciehp: update code (Xu Chenjiao) [task:382309]
  - SUNWAY: kvm: fix mmio GPA for C4 (Wang Yuanheng) [task:382309]
  - SUNWAY: handle null MSI irq in guest os (Lei Yilong) [task:382309]
  - SUNWAY: kvm: fix the handling when the live migration fails (Min Fanlei) [task:382309]
  - SUNWAY: kvm: fix NULL poniter access in kvm_arch_prepare_memory_region (Min Fanlei) [task:382309]
  - SUNWAY: kvm: fix link error with CONFIG_KVM=m (Min Fanlei) [task:382309]
  - SUNWAY: kvm: support up to 256 vCPUs for C4 (Deng Xiaoyun) [task:382309]
  - SUNWAY: kvm: fix inconsistent vcpucb of C4 (Min Fanlei) [task:382309]
  - SUNWAY: kvm: implement kvm_arch_set_irq_inatomic() (Xu Linqin) [task:382309]
  - SUNWAY: fix guest send ipi target (Deng Xiaoyun) [task:382309]
  - SUNWAY: kvm: fix bug when vcpu disable irq (Lei Yilong) [task:382309]
  - SUNWAY: kvm: remove some unused codes (Wang Yuanheng) [task:382309]
  - SUNWAY: kvm: fix size of struct kvm_regs for C3B (Wang Yuanheng) [task:382309]
  - SUNWAY: redesign struct kvm_regs for C4 (Wang Yuanheng) [task:382309]
  - SUNWAY: kvm: delete memory hotplug codes for CORE3B (Min Fanlei) [task:382309]
  - SUNWAY: fix guest memory and cpu hotplug function (Lei Yilong) [task:382309]
  - SUNWAY: remove sw64_io related functions (Jing Li) [task:382309]
  - SUNWAY: dts: support online-capable property for cpu device node (Jing Li) [task:382309]
  - SUNWAY: platform: add misc platform driver (Jing Li) [task:382309]
  - SUNWAY: add missing c4 legacy power management code (Wang Yuanheng) [task:382309]
  - SUNWAY: kvm: scale up the range of target vcpu parsed by hypervisor (Zhang Yi) [task:382309]
  - SUNWAY: add basic frequency scaling support for JunZhang (Zhi Tongze) [task:382309]
  - SUNWAY: kvm: fix return value of vmem_mmap (Du Yilong) [task:382309]
  - SUNWAY: kvm: add trace kvm function (Hang Yiyi) [task:382309]
  - SUNWAY: kvm: acpi: match sunway_ged by acpi method (Min Fanlei) [task:382309]
  - SUNWAY: add dependency for sunway-ged driver (Lei Yilong) [task:382309]
  - SUNWAY: fix compile error with CONFIG_SUNWAY_GED=m (Lei Yilong) [task:382309]
  - SUNWAY: remove unused sunway_memory_get_meminfo() (Lei Yilong) [task:382309]
  - SUNWAY: Kconfig: activate ARCH_KEEP_MEMBLOCK (Lei Yilong) [task:382309]
  - SUNWAY: add cpu hotplug support for C4 guest (Lei Yilong) [task:382309]
  - SUNWAY: kvm: add numa support for memory hotplug (Lei Yilong) [task:382309]
  - SUNWAY: fix rc resource setup (Zheng Chongzhen) [task:382309]
  - SUNWAY: fix commit ce1985e5c3208 (Gao Chen) [task:382309]
  - SUNWAY: 6.6 update: sunway_pciehp_reset_slot() (Gao Chen) [task:382309]
  - SUNWAY: bypass sunway pcie hotplug driver in non-physical scenario (Chen Wang) [task:382309]
  - SUNWAY: seperate IRQ_MSI configs for sub-architectures (Xu Yiwei) [task:382309]
  - SUNWAY: handle null MSI irq (Xu Yiwei) [task:382309]
  - SUNWAY: fix a compilation warning (Zheng Chongzhen) [task:382309]
  - SUNWAY: fix a base address of msiaddr register (Zheng Chongzhen) [task:382309]
  - SUNWAY: fix some S3 CSRs problems for C4 (Zheng Chongzhen) [task:382309]
  - SUNWAY: fix io resource remapping (Zheng Chongzhen) [task:382309]
  - SUNWAY: fix pci resource assignment bug (Zheng Chongzhen) [task:382309]
  - only compile sw64.c in sw64 (liuyunchen) [task:382309]
  - SUNWAY: 6.6 io.h fixup (Mao Minkai) [task:382309]
  - SUNWAY: iommu: support SW64 IOMMU on 6.6 kernel (Xu Yiwei) [task:382309]
  - SUNWAY: fdt: map physical node ID to logical node ID (Deng Xiaoyun) [task:382309]
  - SUNWAY: fix regs.pc on single-step with ptrace (Zhi Tongze) [task:382309]
  - SUNWAY: modify some interrupt target core to logic 0 core (Zheng Chongzhen) [task:382309]
  - SUNWAY: fix sw64_is_fake_mcount() of recordmcount (Hang Xiaoqian) [task:382309]
  - SUNWAY: numa: support NUMA initialization based on device tree (Jing Li) [task:382309]
  - SUNWAY: smp: support SMP initialization based on device tree (Jing Li) [task:382309]
  - SUNWAY: dtb: disable built-in DTB for junzhang (Jing Li) [task:382309]
  - SUNWAY: kconfig: set default y for GPIO if ACPI enabled (Jing Li) [task:382309]
  - SUNWAY: fix a bug in gpio-sunway.c (Gao Chen) [task:382309]
  - SUNWAY: pci: use readq/writeq to read/write RC and PIU IO registers (Zheng Chongzhen) [task:382309]
  - SUNWAY: pciehp: add pcie hotplug driver support for C4 (Xu Chenjiao) [task:382309]
  - SUNWAY: remove redundant intx code (Xu Yiwei) [task:382309]
  - SUNWAY: irq: support interrupt for virtual GPIO (Jing Li) [task:382309]
  - SUNWAY: acpi: enable ACPI by default (Jing Li) [task:382309]
  - SUNWAY: mm: fix mem=xxx command line invalid in some cases (Jing Li) [task:382309]
  - SUNWAY: use generic page_is_ram() (Jing Li) [task:382309]
  - SUNWAY: mm: take memory information from firmware (Jing Li) [task:382309]
  - SUNWAY: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y (Xu Chenjiao) [task:382309]
  - SUNWAY: fix typo in gpio-sunway (Xu Yiwei) [task:382309]
  - SUNWAY: fix compile warning of handle_pci_msi_interrupt (Lei Yilong) [task:382309]
  - SUNWAY: fix usage of __add_memory() in sunway-ged driver (Lei Yilong) [task:382309]
  - SUNWAY: change FORCE_MAX_ZONEORDER default value (Lei Yilong) [task:382309]
  - SUNWAY: perf: fix event check order (He Chuyue) [task:382309]
  - SUNWAY: wrap frequency workaround into standalone functions (He Sheng) [task:382309]
  - SUNWAY: remove redudant save_ktp (Wu Liliu) [task:382309]
  - SUNWAY: fix compile warning of smp_callin() (He Chuyue) [task:382309]
  - SUNWAY: distribute intx interrupts by hose (Xu Yiwei) [task:382309]
  - SUNWAY: acpi: remove constraint that cid of boot core must be zero (Jing Li) [task:382309]
  - SUNWAY: pci: get register base address from firmware (Jing Li) [task:382309]
  - SUNWAY: fix compile warning of do_entUna() (He Chuyue) [task:382309]
  - SUNWAY: fix save_ktp compatibility for C3 (Wu Liliu) [task:382309]
  - SUNWAY: add syscall pfh_ops (Mao Minkai) [task:382309]
  - SUNWAY: fix broken rdfpcr() (Mao Minkai) [task:382309]
  - SUNWAY: force kernel stack to be 16 bytes aligned (Mao Minkai) [task:382309]
  - SUNWAY: match platform device by acpi method (Xu Yiwei) [task:382309]
  - SUNWAY: spi: update spi controller driver (Xu Chenjiao) [task:382309]
  - SUNWAY: add -fno-sw-unalign-byte to cflags for C4 (Wu Liliu) [task:382309]
  - SUNWAY: define cpu_relax() as imb() (Mao Minkai) [task:382309]
  - SUNWAY: fix the .endm in hibernate_asm.S (Wu Liliu) [task:382309]
  - SUNWAY: fix compile error of efi.systab (Jing Li) [task:382309]
  - SUNWAY: pci: adjust the maximum number of RC per node (Jing Li) [task:382309]
  - SUNWAY: get mclk and external clk from firmware (Jing Li) [task:382309]
  - SUNWAY: fix compile error of MMSIZE (Jing Li) [task:382309]
  - SUNWAY: acpi: disable ACPI for xuelang (Jing Li) [task:382309]
  - SUNWAY: ahci: disable parallel bus scan (Zhou Xuemei) [task:382309]
  - SUNWAY: redesign run mode setup method (Wang Yuanheng) [task:382309]
  - SUNWAY: rename static key and related simd libraries (He Sheng) [task:382309]
  - SUNWAY: fix secondary cpu bring up bug (Wang Yuanheng) [task:382309]
  - SUNWAY: improve the verification logic of DTB (Jing Li) [task:382309]
  - Add basic build infrastructure for SUNWAY (liuyunchen) [task:464565]
  - rv: Use strings in da monitors tracepoints (Gabriele Monaco) [task:553379] {CVE-2025-38636}
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Takashi Iwai) [task:525135] {CVE-2025-38729}
  - drm/phytium: Change the drm driver name for pe220x (YuDa) [task:555735]


