- !19740 merge refs/pull/19740/head into OLK-5.10 - !19764 merge patch-1766387978 into OLK-5.10 - hisi: l3t: enable l3t with specific cpuid - !19705 [OLK-5.10]:update patches for sw64 architecture - !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct - !19372 padata: Fix pd UAF once and for all - !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation - !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS - net: atlantic: fix fragment overflow handling in RX path - !19736 locking/rwsem: Optimize down_read_trylock() under highly contended case - locking/rwsem: Optimize down_read_trylock() under highly contended case - !19724 mm/mem_reliable: use percise count during limit check - mm/mem_reliable: use percise count during limit check - !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - !19614 NFSD: Fix crash in nfsd4_read_release() - !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19673 firewire: net: fix use after free in fwnet_finish_incoming_packet() - sw64: set PTBR_SYS before accessing vmalloc area - sw64: set execute permission for virtual machine's hmcode text section - sw64: fix simd version of copy/clear_page() - sw64: fix random mmap base range - firewire: net: fix use after free in fwnet_finish_incoming_packet() - NFSD: Fix crash in nfsd4_read_release() - crypto: ccp: add ccp-mdev functionality to the ccp module. - padata: Fix pd UAF once and for all - KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access - KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer - KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests - KVM: x86: Pass emulation type to can_emulate_instruction() - KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support - KVM: SVM: Don't intercept #GP for SEV guests - swiotlb: do not zero buffer in set_memory_decrypted() - crypto: ccp - Add SEV_INIT rc error logging on init - dma-direct: always leak memory that can't be re-encrypted - dma-direct: factor out dma_set_{de,en}crypted helpers - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits - KVM: SEV-ES: fix another issue with string I/O VMGEXITs - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed - KVM: SEV-ES: keep INS functions together - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in - KVM: x86: split the two parts of emulator_pio_in - KVM: SEV-ES: clean up kvm_sev_es_ins/outs - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out - KVM: SEV-ES: rename guest_ins_data to sev_pio_data - KVM: SEV-ES: fix length of string I/O - x86/sev-es: Do not unroll string I/O for SEV-ES guests - x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs - !19833 merge patch-1766715015 into OLK-5.10 - !19911 merge patch-1767492639 into OLK-5.10 - !19635 merge refs/pull/19635/head into OLK-5.10 - !19903 merge patch-1767161454 into OLK-5.10 - !19864 merge patch-1766990471 into OLK-5.10 - !19865 merge patch-1766990523 into OLK-5.10 - mm: mem_reliable: prevent excessive direct reclaim loops - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - !19899 merge patch-1767098709 into OLK-5.10 - erofs: validate the extent length for uncompressed pclusters - !19885 merge patch-1767076771 into OLK-5.10 - !19876 merge patch-1767011340 into OLK-5.10 - scsi: qla2xxx: Clear cmds after chip reset - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - !19856 merge patch-1766976937 into OLK-5.10 - !19857 merge patch-1766976979 into OLK-5.10 - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private - virtio-net: ensure the received length does not exceed allocated size - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - tracing: Fix memory leaks in create_field_var() - !19760 merge patch-1766370959 into OLK-5.10 - !19786 merge patch-1766474397 into OLK-5.10 - !19548 merge refs/pull/19548/head into OLK-5.10 - ext4: xattr: fix null pointer deref in ext4_raw_inode() - !19739 merge refs/pull/19739/head into OLK-5.10 - !19732 merge refs/pull/19732/head into OLK-5.10 - !19719 merge refs/pull/19719/head into OLK-5.10 - bnxt_en: Fix memory corruption when FW resources change during ifdown - bnxt_en: Fix possible crash after creating sw mqprio TCs - x86/fpu: Ensure XFD state on signal delivery - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - usb: storage: Fix memory leak in USB bulk transport - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() - cpufreq: ACPI: Fix max-frequency computation - tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes - tools headers: Update tools's copy of x86/asm headers - tools headers cpufeatures: Sync with the kernel sources - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - !19798 merge OLK-5.10 into OLK-5.10 - !19972 merge patch-1767691219 into OLK-5.10 - !19974 merge patch-1767691279 into OLK-5.10 - !19973 merge patch-1767691254 into OLK-5.10 - !19713 merge refs/pull/19713/head into OLK-5.10 - !19832 merge OLK-5.10-ringbuffer into OLK-5.10 - qed: Don't collect too many protection override GRC elements - i40e: fix validation of VF state in get resources - i40e: fix input validation logic for action_meta - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() - KVM: SVM: Skip SEV cache flush if no ASIDs have been used - KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities - x86/sev: Make enc_dec_hypercall() accept a size instead of npages - mm: x86: Fix kabi breakage of pv_ops - KVM: x86: Play nice with protected guests in complete_hypercall_exit() - KVM: x86: Assume a 64-bit hypercall for guests with protected state - KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids() - KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa - x86/kvm: Add kexec support for SEV Live Migration. - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. - EFI: Introduce the new AMD Memory Encryption GUID. - mm: x86: Invoke hypercall when page encryption status is changed - x86/kvm: Add AMD SEV specific Hypercall3 - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA - KVM: SVM: fix missing sev_decommission in sev_receive_start - KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall - KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command - KVM: SVM: Add support for KVM_SEV_RECEIVE_START command - KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command - KVM: SVM: Add KVM_SEV_SEND_FINISH command - KVM: SVM: Add KVM_SEND_UPDATE_DATA command - KVM: SVM: Add KVM_SEV SEND_START command - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19047 [OLK-5.10] Fix CVE-2025-39839 - !18614 [OLK-5.10] Fix CVE-2025-39737 - !18654 [OLK-5.10] Fix CVE-2025-38705 - !18782 【OLK-5.10】fix CVE-2025-38712 - !18612 [OLK-5.10] Fix CVE-2025-38713 - !18635 [OLK-5.10] Fix CVE-2025-38714 - !18862 [OLK-5.10] Fix CVE-2025-38697 - !20058 CVE-2025-38111 - !20131 wifi: cfg80211: fix use-after-free in cmp_bss() - !20306 mm/kmemleak: move up cond_resched() call in page scanning loop - !20309 hwmon: constify pointers to hwmon_channel_info - hwmon: fix kabi of struct hwmon_channel_info - !20338 mlxsw: spectrum_router: Fix neighbour use-after-free - !20337 mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - hwmon: constify pointers to hwmon_channel_info - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - !20316 um: virtio_uml: Fix use-after-free after put_device in probe - !20114 KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc - um: virtio_uml: Fix use-after-free after put_device in probe - !20300 software node: Correct a OOB check in software_node_get_reference_args() - !20299 jfs: add sanity check for agwidth in dbMount - !20278 iavf: fix off-by-one issues in iavf_config_rss_reg() - !20277 e1000: fix OOB in e1000_tbi_should_accept() - !20285 hwmon: (ibmpex) fix use-after-free in high/low store - mm/kmemleak: move up cond_resched() call in page scanning loop - !19953 【OLK-5.10】 power_meter patchs from 6.6 - software node: Correct a OOB check in software_node_get_reference_args() - jfs: add sanity check for agwidth in dbMount - hwmon: (ibmpex) fix use-after-free in high/low store - !20269 drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !20271 KVM: x86: use array_index_nospec with indices that come from guest - !19788 ima: Handle error code returned by ima_filter_rule_match() - iavf: fix off-by-one issues in iavf_config_rss_reg() - e1000: fix OOB in e1000_tbi_should_accept() - !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver - !20203 drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - !20202 scsi: qla2xxx: Fix premature hw access after PCI error - !19728 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09 - KVM: x86: use array_index_nospec with indices that come from guest - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - RDMA/hns: Support config and query the CNP DSCP for HIP09 - !20221 Revert "RDMA/hns: Fix mismatch exception rollback" - !20195 ACPI: APEI: Handle repeated SEA error interrupts storm - !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes - Revert "RDMA/hns: Fix mismatch exception rollback" - RDMA/hns: Support drain SQ and RQ - RDMA/hns: Return actual error code instead of fixed EINVAL - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Fix RoCEv1 failure due to DSCP - !20161 cifs: fix session state check in reconnect to avoid use-after-free issue - !20050 smb: client: Fix use-after-free in cifs_fill_dirent - !19834 v2 md/raid0, raid10: Don't set discard sectors for request queue - !19816 scsi: sg: Do not sleep in atomic context - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - scsi: qla2xxx: Fix premature hw access after PCI error - ACPI: APEI: Handle repeated SEA error interrupts storm - !20150 tracing: Do not register unsupported perf events - !20163 tracing: Fix enabling of tracing on file release - !19938 net: hns3: add VLAN id validation before using - !19836 [OLK-5.10] Fixes for SEV-ES Guest Support - !20044 【openEuler-22.03-LTS-SP4】Memory copy error - !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2 - !20025 [OLK-5.10]Support SMT control on arm64. - !19922 NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - !19985 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - !19996 net: netpoll: fix incorrect refcount handling causing incorrect cleanup - !19908 drivers:misc:sdma-dae: add NULL judgement of global variables - !20026 fs/buffer: fix use-after-free when call bh_read() helper - !19962 i40e: add max boundary check for VF filters - !20103 kmemleak: Fix kmemleak false warnings - !20169 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - !20052 CVE-2024-21823 - !18962 erofs: Fix erofs_bmap error - !20016 kernfs: Fix UAF issue - !19694 ARM: fix hash_name() issue - !20048 VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - !20065 Fix CVE-2022-50737 - !20066 smb: client: fix race with concurrent opens in rename(2) - !20151 v2 Fix CVE-2025-40016 - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems - ACPI: IPMI: Add helper to wait for when SMI is selected - hwmon: (acpi_power_meter) Fix the fake power alarm reporting - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices(). - hwmon: (acpi_power_meter) Fix update the power trip points on failure - hwmon: (acpi_power_meter) Fix uninitialized variables - !20047 crypto: af_alg - Set merge to zero early in af_alg_sendmsg - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method - hwmon: (acpi_power_meter) replace open-coded kmemdup_nul - hwmon: (acpi_power_meter) Fix style issues - hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device() - hwmon: acpi_power_meter: Get rid of ACPICA message printing - ACPI: utils: Introduce acpi_evaluation_failure_warn() - ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE - hwmon: (acpi_power_meter) clean up freeing code - x86/sev: merge continuous pages into a large range when notifying range enc status changes - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - tracing: Fix enabling of tracing on file release - cifs: fix session state check in reconnect to avoid use-after-free issue - media: uvcvideo: Use heuristic to find stream entity - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Allow extra entities - tracing: Do not register unsupported perf events - wifi: cfg80211: fix use-after-free in cmp_bss() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - arm64: kdump: fix kmemleak unknown object warning when crash base is set - arm64: kdump: fix kmemleak unknown object warning - x86/sev: Use "SEV: " prefix for messages from sev.c - x86/sev: Propagate #GP if getting linear instruction address failed - smb: client: fix race with concurrent opens in rename(2) - fs/ntfs3: Add null pointer checks - fs/ntfs3: Validate buffer length while parsing index - fs/ntfs3: Validate index root when initialize NTFS security - net/mdiobus: Fix potential out-of-bounds read/write access - net: mdio: C22 is now optional, EOPNOTSUPP if not provided - dmaengine: idxd: Fix ->poll() return value - dmaengine: idxd: Fix allowing write() from different address spaces - dmaengine: idxd: Fix passing freed memory in idxd_cdev_open() - dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling - dmaengine: idxd: add per DSA wq workqueue for processing cr faults - dmaengine: idxd: add a write() method for applications to submit work - dmaengine: idxd: add a new security check to deal with a hardware erratum - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist - smb: client: Fix use-after-free in cifs_fill_dirent - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench' - x86: don't use REP_GOOD or ERMS for small memory clearing - x86: don't use REP_GOOD or ERMS for small memory copies - fs/buffer: fix use-after-free when call bh_read() helper - powerpc/kexec: Enable SMT before waking offline CPUs - cpu/SMT: Enable SMT only if a core is online - cpu/SMT: Create topology_smt_thread_allowed() - powerpc/topology: Check if a core is online - config: enable CONFIG_HOTPLUG_SMT for arm64 - arm64: Kconfig: Enable HOTPLUG_SMT - arm64: topology: Support SMT control on ACPI based system - arch_topology: Support SMT control for OF based system - cpu/SMT: Provide a default topology_is_primary_thread() - powerpc: Add HOTPLUG_SMT support - Revert "arm64: Kconfig: Enable HOTPLUG_SMT" - kernfs: Fix kabi broken in struct kernfs_root - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir(). - kernfs: fix potential NULL dereference in __kernfs_remove - kernfs: fix NULL dereferencing in kernfs_remove - kernfs: remove redundant kernfs_rwsem declaration. - kernfs: prevent early freeing of root node - kernfs: switch global kernfs_rwsem lock to per-fs lock - KVM: SVM: Make sure GHCB is mapped before updating - KVM: SVM: check CR4 changes against vcpu->arch - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests - x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]() - x86/sev: Fix error message in runtime #VC handler - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - i40e: add max boundary check for VF filters - net: hns3: add VLAN id validation before using - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled - ACPI: thermal: Move to dedicated function sysfs extra attr creation - ACPI: thermal: Use thermal_zone_device() - thermal: core: Encapsulate tz->device field - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - drivers:misc:sdma-dae: add NULL judgement of global variables - md/raid0, raid10: Don't set discard sectors for request queue - scsi: sg: Do not sleep in atomic context - ima: Handle error code returned by ima_filter_rule_match() - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - ARM: fix hash_name() fault - ARM: allow __do_kernel_fault() to report execution of memory faults - configs: enable CONFIG_MICROCODE_ZHAOXIN - x86/microcode: Add Zhaoxin cpu microcode update driver - drm/amd/pm: fix null pointer access - batman-adv: fix OOB read/write in network-coding decode - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - erofs: Fix erofs_bmap error - jfs: upper bound check of tree index in dbAllocAG - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - !20464 rcu: Protect ->defer_qs_iw_pending from data race - !20318 net: hns3: check pf tc cfg when setting vf tc - !20522 CVE-2022-50616 - !20423 use SYS_CNTVCTSS_EL0 for gettimeofday - regulator: core: Fix resolve supply lookup issue - regulator: core: Use different devices for resource allocation and DT lookup - !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO. - !19965 nvme-fc: use lock accessing port_state and rport state - !20226 leapraid: supports LeapRaid controller - !20436 fix CVE-2026-22998 - rcu: Protect ->defer_qs_iw_pending from data race - !20449 scsi/hiraid: Support New Raid feature - !20252 ntfs: set dummy blocksize to read boot_block when mounting - !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc - !20335 Fix CVE-2025-37947 - mm: Add PAGE_ALIGN_DOWN macro - soc cache: fix walk page parameter and drop incorrect check - soc cache: Fix incorrect error path of ioctl - soc cache: Fix incorrect size validation - soc cache: Enforce maintain type check - soc cache: Modify default config to compile HiSilicon SoC cache driver - !19858 [OLK-5.10] perf support for HiSilicon HIP12 - !20331 Fix CVE-2025-39835 - !20439 Fix CVE-2025-39945 - !20251 Fix CVE-2025-38480 - !20184 Fix CVE-2025-37770 - !20185 Fix CVE-2022-49829 - !20183 Fix CVE-2025-23138 - !20240 Fix CVE-2025-21981 - !20409 net: xfrm: Fix CVE-2025-40215 - !20408 net: xfrm: Fix CVE-2025-39797 - !20407 netfilter: allow exp not to be removed in nf_ct_find_expectation - !20406 bpf, sockmap: Avoid using sk_socket after free when sending - !20405 can: bcm: add locking for bcm_op runtime updates - !20404 RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent - scsi/hiraid: Support New Raid feature - !19950 【OLK-5.10】 Drivers GPU Patches from 6.6 - !20422 driver core: fix potential null-ptr-deref in device_add() - cnic: Fix use-after-free bugs in cnic_delete_task - !20421 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - !20420 usb: early: xhci-dbc: Fix a potential out-of-bound memory access - !20418 drivers: base: Free devm resources when unregistering a device - !20417 driver core: fix resource leak in device_add() - !20416 Fix CVE-2022-49309 - !20415 kernel/resource: fix kfree() of bootmem memory again - !20414 drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - !20413 of: check previous kernel's ima-kexec-buffer against memory bounds - !20412 HID: core: Harden s32ton() against conversion to 0 bits - !20411 iommu/amd: Avoid stack buffer overflow from kernel cmdline - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvmet-tcp: remove boilerplate code - !20390 drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - vdso: do cntvct workaround in the VDSO - arm64: vdso: remove two .altinstructions related symbols - arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday - arm64: alternative: patch alternatives in the vDSO - arm64: module: move find_section to header - driver core: fix potential null-ptr-deref in device_add() - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - usb: early: xhci-dbc: Fix a potential out-of-bound memory access - drivers: base: Free devm resources when unregistering a device - driver core: fix resource leak in device_add() - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() - !20383 usb: cdns3: fix random warning message when driver load - kernel/resource: fix kfree() of bootmem memory again - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - of: check previous kernel's ima-kexec-buffer against memory bounds - HID: core: Harden s32ton() against conversion to 0 bits - !19959 【OLK-5.10】Support NMI Watchdog - iommu/amd: Avoid stack buffer overflow from kernel cmdline - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfrm: Duplicate SPI Handling - netfilter: allow exp not to be removed in nf_ct_find_expectation - bpf, sockmap: Avoid using sk_socket after free when sending - can: bcm: add locking for bcm_op runtime updates - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation. - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh - watchdog/perf: Provide function for adjusting the event period - config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64 - irqchip/gic-v3: Fix one race condition due to NMI withdraw - watchdog: Fix call trace when failed to initialize sdei - watchdog: Support watchdog_sdei coexist with existing watchdogs - init: only move down lockup_detector_init() when sdei_watchdog is enabled - arm64: enable perf events based hard lockup detector - arm64: add hw_nmi_get_sample_period for preparation of lockup detector - usb: cdns3: fix random warning message when driver load - !20051 smb3: fix for slab out of bounds on mount to ksmbd - comedi: Fix use of uninitialized data in insn_rw_emulate_bits() - watch_queue: fix pipe accounting mismatch - drm/amd/pm/powerplay: Prevent division by zero - !20357 ext4: fix e4b bitmap inconsistency reports - ice: fix memory leak in aRFS after reset - drm/hisilicon/hibmc: hibmc-drm bugfix for DP - !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6 - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel - drm/hisilicon/hibmc: Add vga connector detect functions - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp - drm/hisilicon/hibmc: Add dp serdes cfg in dp process - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis - drm/hisilicon/hibmc: Restructuring the header dp_reg.h - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers - drm/ast: Implement polling for VGA and SIL164 connectors - drm/sysfs: Register "ddc" symlink later - drm/hisilicon/hibmc: add dp module in hibmc - drm/hisilicon/hibmc: refactored struct hibmc_drm_private - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers - drm/hisilicon/hibmc: add dp aux in hibmc drivers - gic: increase the arch_timer priority to avoid hardlockup - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803 - drm/scheduler: fix fence ref counting - !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology - ext4: fix e4b bitmap inconsistency reports - !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction - !20256 Fix CVE-2025-39828 - !20339 wifi: prevent A-MSDU attacks in mesh networks - wifi: prevent A-MSDU attacks in mesh networks - ksmbd: fix stream write failure - ksmbd: prevent out-of-bounds stream writes by validating *pos - xfs: do not propagate ENODATA disk errors into xattr code - net: hns3: check pf tc cfg when setting vf tc - net: hns3: support tc limit speed - net: hns3: the multi-tcs VF can be configured only when the interface is down - irqchip/gic-v3-its: Remove DevID Pool's restriction - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *' - perf: Update .gitignore file - perf stat: Enable iostat mode for x86 platforms - perf stat: Helper functions for PCIe root ports list in iostat mode - perf: Fix tt_core mismatch over PG CPU - perf iostat: Use system-wide mode if the target cpu_list is unspecified - perf arm_spe: Correct memory level for remote access - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU - Documentation: hisi-pmu: Fix of minor format error - drivers/perf: hisi: Add support for L3C PMU v3 - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - arm64: topology: Setup amu fie when cpu hotplugging - topology: Set capacity_freq_ref in all cases - arm64/amu: Use capacity_ref_freq() to set AMU ratio - cpufreq/cppc: Set the frequency used for computing the capacity - cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}() - energy_model: Use a fixed reference frequency - cpufreq/schedutil: Use a fixed reference frequency - cpufreq: Use the fixed and coherent frequency for scaling capacity - sched/topology: Add a new arch_scale_freq_ref() method - arch_topology: Introduce thermal pressure update function - riscv: export cpu/freq invariant to scheduler - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() - cpufreq: Allow drivers to advertise boost enabled - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' - openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix unused-function warning - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: ACPI: Mark boost policy as enabled when setting boost - cpufreq: ACPI: Only set boost MSRs on supported CPUs - cpufreq: ACPI: Defer setting boost MSRs - cpufreq: acpi: Remove acpi_cpufreq_cpu_ready() - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw() - Documentation: power: Add description about new callback for EM registration - arch_topology: Avoid use-after-free for scale_freq_data - cpufreq: Exit governor when failed to start old governor - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() - cpufreq: Initialize cpufreq-based frequency-invariance later - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost - cpufreq: Remove duplicate check in __cpufreq_offline() - cpufreq: Don't unregister cpufreq cooling on CPU hotplug - cpufreq: Remove the ->stop_cpu() driver callback - cpufreq: intel_pstate: Combine ->stop_cpu() and ->offline() - cpufreq: powernv: Migrate to ->exit() callback instead of ->stop_cpu() - docs/zh_CN: add cpu-freq cpu-drivers.rst translation - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() - cpufreq: CPPC: Do not return a value from populate_efficiency_class() - cpufreq: CPPC: Remove cpu_data_list - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate() - cpufreq: CPPC: Register EM based on efficiency class information - PM: EM: Change the order of arguments in the .active_power() callback - cpufreq: Add callback to register with energy model - PM: EM: Add .get_cost() callback - cpufreq: CPPC: Add per_cpu efficiency_class - cpufreq: remove useless INIT_LIST_HEAD() - ACPI: CPPC: Disable FIE if registers in PCC regions - ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate() - cpufreq: cppc: Fix invalid return value in .get() callback - cppc_cpufreq: Fix possible null pointer dereference - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn() - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus - cpufreq: CPPC: Add support for frequency invariance - arch_topology: Export arch_freq_scale and helpers - cpufreq: CPPC: Pass structure instance by reference - cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init - cpufreq: CPPC: Migrate to ->exit() callback instead of ->stop_cpu() - cppc_cpufreq: replace per-cpu data array with a list - cppc_cpufreq: expose information on frequency domains - cppc_cpufreq: clarify support for coordination types - arch_topology: Allow multiple entities to provide sched_freq_tick() callback - sched/topology,schedutil: Wrap sched domains rebuild - arch_topology: Rename freq_scale as arch_freq_scale - arm64: topology: Drop the useless update to per-cpu cycles - arm64: topology: Make AMUs work with modular cpufreq drivers - arm64: topology: Reorder init_amu_fie() a bit - arm64: topology: Avoid the have_policy check - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() - cpufreq: prevent NULL dereference in cpufreq_online() - cpufreq: CPPC: Fix wrong max_freq in policy initialization - cppc_cpufreq: simplify use of performance capabilities - cpufreq: Introduce a more generic way to set default per-policy boost flag - cpufreq: Fix re-boost issue after hotplugging a CPU - cpufreq: Support per-policy performance boost - ntfs: set dummy blocksize to read boot_block when mounting - leapraid: supports LeapRaid controller - perf mem: Count L2 HITM for c2c statistic - perf mem: Add statistics for peer snooping - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12 - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel - perf arm-spe: augment the data source type with neoverse_spe list - tools arm64: Import cputype.h - arm64: cputype: Add cputype definition for HIP12 - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface - drivers/perf: hisi: Add cacheable option for L3C PMU - perf: Remove unstable events for uncore L3C PMU - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu - perf iostat: hisi: Fix port range retrival - drivers/perf: hisi: Add support for L3C PMU v3 - drivers/perf: hisi: Refactor the event configuration of L3C PMU - drivers/perf: hisi: Extend the field of tt_core - drivers/perf: hisi: Extract the event filter check of L3C PMU - drivers/perf: hisi: Simplify the probe process of each L3C PMU version - drivers/perf: hisi: Export hisi_uncore_pmu_isr() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/perf: hisi: Add support for HiSilicon MN PMU driver - drivers/perf: hisi: Add support for HiSilicon NoC PMU - drivers/perf: hisi: Support PMUs with no interrupt - drivers/perf: hisi: Relax the event number check of v2 PMUs - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver - drivers/perf: hisi: Simplify the probe process for each DDRC version - drivers/perf: hisi: Delete redundant blank line of DDRC PMU - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier - drivers/perf: convert sysfs snprintf family to sysfs_emit - perf: hisi: Constify static struct attribute_group - perf/hisi: Constify static attribute_group structs - drivers/perf: hisi: Add a common function to retrieve topology from firmware - drivers/perf: hisi: Extract topology information to a separate structure - drivers/perf: hisi: Refactor the detection of associated CPUs - drivers/perf: hisi: Migrate to one online CPU if no associated one online - drivers/perf: hisi: Don't update the associated_cpus on CPU offline - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs - perf stat: Enable iostat mode for HiSilicon PCIe PMU - perf stat: Add struct perf_stat_aggr to perf_stat_evsel - perf stat: Display iostat headers correctly - perf stat: Don't display metric header for non-leader uncore events - perf stat: Basic support for iostat in perf - perf arm-spe: Refactor arm-spe to support operation packet type - perf arm-spe: Use SPE data source for neoverse cores - perf arm-spe: Don't set data source if it's not a memory operation - perf tools: Sync addition of PERF_MEM_SNOOPX_PEER - tools: arm64: Import sysreg.h - smb3: fix for slab out of bounds on mount to ksmbd - watchdog/perf: adapt the watchdog_perf interface for async model - watchdog/perf: add a weak function for an arch to detect if perf can use NMIs - irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed - irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked - irqchip/gic-v3: Implement FEAT_GICv3_NMI support - arm64/nmi: Add Kconfig for NMI - arm64/nmi: Add handling of superpriority interrupts as NMIs - arm64/irq: Document handling of FEAT_NMI in irqflags.h - arm64/entry: Don't call preempt_schedule_irq() with NMIs masked - arm64/nmi: Manage masking for superpriority interrupts along with DAIF - nvme-fc: use lock accessing port_state and rport state - KVM: arm64: Hide FEAT_NMI from guests - arm64/cpufeature: Detect PE support for FEAT_NMI - arm64/hyp-stub: Enable access to ALLINT - arm64/asm: Introduce assembly macros for managing ALLINT - arm64/sysreg: Add definitions for immediate versions of MSR ALLINT - arm64/booting: Document boot requirements for FEAT_NMI - irqchip/gic-v3: Fix priority mask handling - irqchip/gic-v3: Refactor ISB + EOIR at ack time - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 - soc cache: Add framework driver for HiSilicon SoC cache - !20333 phytium-tpcm-sig-8-hadler-reg-s5000c - !20767 Revert hibmc patches to fix null-ptr-deref - Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6" - Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert" - !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Code refactoring for hibmc_drm_drv - !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 & SM4 algorithm - !20666 CVE-2023-53712 - !20673 Fix CVE-2025-39957 - !20686 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20687 i40e: Fix potential invalid access when MAC list is empty - !20692 ipv6: sr: Fix MAC comparison to be constant-time - !20699 sctp: linearize cloned gso packets in sctp_rcv - !20688 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - !20698 libceph: fix potential use-after-free in have_mon_and_osd_map() - !20697 tipc: Fix use-after-free in tipc_mon_reinit_self(). - sctp: linearize cloned gso packets in sctp_rcv - libceph: fix potential use-after-free in have_mon_and_osd_map() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - ipv6: sr: Fix MAC comparison to be constant-time - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - i40e: Fix potential invalid access when MAC list is empty - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20119 Add 950 KVM feature support - !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration - !20638 ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - !20637 net/sched: sch_qfq: do not free existing class in qfq_change_class() - !20636 v2 macvlan: fix possible UAF in macvlan_forward_source() - wifi: mac80211: increase scan_ies_len for S1G - !20566 crypto: lzo - Fix compression buffer overrun - KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer - KVM: arm64: ipiv: Fix compilation warning - KVM: arm64: check if IPIV is enabled in BIOS - kvm: hisi: print error for IPIV - KVM: arm64: using kvm_vgic_global_state for ipiv - kvm: hisi: Don't allow to change mpidr in IPIv - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv - KVM: arm64: fix live migration bug of IPIv - irqchip/gic: Add HiSilicon PV SGI support - KVM: arm64: Implement PV_SGI related calls - KVM: arm64: Document PV-sgi interface - KVM: arm64: Introduce ipiv enable ioctl - arm64/config: add config to control whether enable IPIV feature - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12 - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE - kvm: hisi_virt: Register ipiv exception interrupt - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule - kvm: arm64: avoid sending multi-SGIs in IPIV - kvm: hisi_virt: Allocate VM table and save vpeid in it - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2 - KVM: arm64: fix memory leak in TLBI - KVM: arm64: Add new HiSi CPU type to support DVMBM - kvm: hisi_virt: Update TLBI broadcast feature for hip12 - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE - ARM: 9317/1: kexec: Make smp stop calls asynchronous - !20654 scsi: qla4xxx: Prevent a potential error pointer dereference - !20653 bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - !20655 mm/slub: avoid accessing metadata when pointer is invalid in object_err() - !20656 firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors - x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - mm/slub: avoid accessing metadata when pointer is invalid in object_err() - scsi: qla4xxx: Prevent a potential error pointer dereference - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - net/sched: sch_qfq: do not free existing class in qfq_change_class() - macvlan: fix possible UAF in macvlan_forward_source() - !20597 team: fix check for port enabled in team_queue_override_port_prio_changed() - !20593 CVE-2025-39744 fixup - !20465 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - !20178 v3 Fix CVE-2024-53179 - team: fix check for port enabled in team_queue_override_port_prio_changed() - rcu: Fix racy re-initialization of irq_work causing hangs - rcu: Fix rcu_read_unlock() deadloop due to IRQ work - rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs - !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts - !20428 wifi: mt76: do not run mt76u_status_worker if the device is not running - !20427 RDMA/bnxt_re: Prevent handling any completions after qp destroy - !20466 pptp: ensure minimal skb length in pptp_xmit() - !20426 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - !20574 RDMA/cm: Fix leaking the multicast GID table reference - !20573 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - !20565 Fix CVE-2023-53521 - !20521 Fix CVE-2026-23038 - RDMA/cm: Fix leaking the multicast GID table reference - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - crypto: lzo - Fix compression buffer overrun - !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() - eth: bnxt: move and rename reset helpers - x86: Resolve FPU state corruption between atomic and non-atomic contexts - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - bnxt_en: Fix potential data corruption with HW GRO/LRO - pptp: ensure minimal skb length in pptp_xmit() - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - wifi: mt76: do not run mt76u_status_worker if the device is not running - RDMA/bnxt_re: Prevent handling any completions after qp destroy - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - phytium: add tpcm sgi handler for s5000c - smb: client: fix use-after-free of signing key - cifs: missed ref-counting smb session in find - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode - crypto: ccp: Add support to switch to CSV RING_BUFFER mode - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues - openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI - crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm - crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm - !20737 pNFS: Fix a deadlock when returning a delegation during open() - !20725 tracing: Add recursion protection in kernel stack trace recording - !20746 Fix CVE-2026-22990 - !20671 arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - !20669 irqchip/gic-v3-its: Avoid truncating memory addresses - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - pNFS: Fix a deadlock when returning a delegation during open() - tracing: Add recursion protection in kernel stack trace recording - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - irqchip/gic-v3-its: Avoid truncating memory addresses - !20899 Fix CVE-2026-23216 - !20885 nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file - !20839 bpf, cpumap: Make sure kthread is running before map update returns - bpf, cpumap: Make sure kthread is running before map update returns - !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1 - !20818 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20801 ACPI/IORT: Add PMCG platform information for 162001900 - !20814 migrate: correct lock ordering for hugetlb file folios - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20800 fix CVE-2026-23054 - migrate: correct lock ordering for hugetlb file folios - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - net: hv_netvsc: reject RSS hash key programming without RX indirection table - hv_netvsc: Allocate rx indirection table size dynamically - RDMA/hns: Remove the accidentally added hns_roce_trace.h file - irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI - !21136 sched/rt: Skip currently executing CPU in rto_next_cpu() - !21131 procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21093 kexec: derive purgatory entry from symbol - !21140 ksmbd: fix use-after-free in kerberos authentication - !21132 SUNRPC: Ensure the transport backchannel association - ksmbd: fix use-after-free in kerberos authentication - sched/rt: Skip currently executing CPU in rto_next_cpu() - SUNRPC: Ensure the transport backchannel association - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21112 CVE-2024-57979 - !21111 ALSA: aloop: Fix racy access at PCM trigger - pps: Fix kabi in pps_device - pps: Fix a use-after-free - ALSA: aloop: Fix racy access at PCM trigger - kexec: derive purgatory entry from symbol - ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21072 v2 arm64/mpam: enable MPAM feature and - !20883 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - !21021 CVE-2026-23209 - arm64/mpam: fix the bitmap written during mpam device reset - arm64/mpam: only allow L3 cache MPAM device created - arm64/mpam: fix inadvertently updating after repeatedly updating - arm64/mpam: set default feedback of last_cmd_status interface as null string - !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured - !19837 KVM: Drop tlbs_dirty - !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !21014 bpf selftest cross compile fixes - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - macvlan: fix error recovery in macvlan_common_newlink() - !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - selftests/bpf: Pass target triple to get_sys_includes macro - selftests/bpf: Enable cross-building - net: hns3: hns3 driver should be initialized when VF multi tcs is configured - net: hns3: modify code of judging if SMMU DMA is enabled - !20976 support apei_page_offline_policy - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() - nvmet-tcp: don't map pages which can't come from HIGHMEM - nvmet-tcp: fix regression in data_digest calculation - nvmet-tcp: fix memory leak when performing a controller reset - !20971 Fix CVE-2026-23074 - apei/ghes: Add sysctl interface to control soft-offline page isolation - Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages" - !20887 HiSock Enhancement - net/sched: Enforce that teql can only be used as root qdisc - drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !20891 dcache: Limit the minimal number of bucket to two - !20956 CVE-2025-39967 - fbcon: Fix OOB access in font allocation - fbcon: fix integer overflow in fbcon_do_set_font - overflow: Allow mixed type arguments - nvmet-tcp: add an helper to free the cmd buffers - dcache: Limit the minimal number of bucket to two - bpf: Deprecate hisock unused helpers and orig ingress logic - bpf: Add local connect support for hisock - bpf: Add ipv4-mapped ipv6 addr support for hisock - bpf: Add target comm parse to hisock_cmd - bpf: Add multi port parse to hisock_cmd - bpf: Only deploy hisock in server - bpf: Apply BPF_HISOCK_INGRESS to hisock ingress - bpf: Add bpf_handle_ingress/egress_ptype helper function - bpf: Add bpf_set_ingress/egress_dev helper function - bpf: Add bpf_get_skb_ethhdr helper function - bpf: Add bpf_set_ingress_dst helper function - bpf: Add BPF_HISOCK_INGRESS attach type - net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - KVM: Drop tlbs_dirty - !21262 arm64/mpam: Extending MPAM features and bugfix - arm64/mpam: Allow MBMIN to be set to 0 - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit - arm64/mpam: Add quirk to shrink MATA PMG range - !21211 scsi: hisi_sas: Change the debugfs parameters dump count default value - scsi: hisi_sas: Change the debugfs parameters dump count default value - !21163 gic: Add hip09 support for HISILICON_ERRATUM_165010801 - gic: Add hip09 support for HISILICON_ERRATUM_165010801 - !19740 merge refs/pull/19740/head into OLK-5.10 - !19764 merge patch-1766387978 into OLK-5.10 - hisi: l3t: enable l3t with specific cpuid - !19705 [OLK-5.10]:update patches for sw64 architecture - !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct - !19372 padata: Fix pd UAF once and for all - !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation - !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS - net: atlantic: fix fragment overflow handling in RX path - !19736 locking/rwsem: Optimize down_read_trylock() under highly contended case - locking/rwsem: Optimize down_read_trylock() under highly contended case - !19724 mm/mem_reliable: use percise count during limit check - mm/mem_reliable: use percise count during limit check - !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - !19614 NFSD: Fix crash in nfsd4_read_release() - !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19673 firewire: net: fix use after free in fwnet_finish_incoming_packet() - sw64: set PTBR_SYS before accessing vmalloc area - sw64: set execute permission for virtual machine's hmcode text section - sw64: fix simd version of copy/clear_page() - sw64: fix random mmap base range - firewire: net: fix use after free in fwnet_finish_incoming_packet() - NFSD: Fix crash in nfsd4_read_release() - crypto: ccp: add ccp-mdev functionality to the ccp module. - padata: Fix pd UAF once and for all - KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access - KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer - KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests - KVM: x86: Pass emulation type to can_emulate_instruction() - KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support - KVM: SVM: Don't intercept #GP for SEV guests - swiotlb: do not zero buffer in set_memory_decrypted() - crypto: ccp - Add SEV_INIT rc error logging on init - dma-direct: always leak memory that can't be re-encrypted - dma-direct: factor out dma_set_{de,en}crypted helpers - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits - KVM: SEV-ES: fix another issue with string I/O VMGEXITs - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed - KVM: SEV-ES: keep INS functions together - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in - KVM: x86: split the two parts of emulator_pio_in - KVM: SEV-ES: clean up kvm_sev_es_ins/outs - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out - KVM: SEV-ES: rename guest_ins_data to sev_pio_data - KVM: SEV-ES: fix length of string I/O - x86/sev-es: Do not unroll string I/O for SEV-ES guests - x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs - !19833 merge patch-1766715015 into OLK-5.10 - !19911 merge patch-1767492639 into OLK-5.10 - !19635 merge refs/pull/19635/head into OLK-5.10 - !19903 merge patch-1767161454 into OLK-5.10 - !19864 merge patch-1766990471 into OLK-5.10 - !19865 merge patch-1766990523 into OLK-5.10 - mm: mem_reliable: prevent excessive direct reclaim loops - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - !19899 merge patch-1767098709 into OLK-5.10 - erofs: validate the extent length for uncompressed pclusters - !19885 merge patch-1767076771 into OLK-5.10 - !19876 merge patch-1767011340 into OLK-5.10 - scsi: qla2xxx: Clear cmds after chip reset - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - !19856 merge patch-1766976937 into OLK-5.10 - !19857 merge patch-1766976979 into OLK-5.10 - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private - virtio-net: ensure the received length does not exceed allocated size - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - tracing: Fix memory leaks in create_field_var() - !19760 merge patch-1766370959 into OLK-5.10 - !19786 merge patch-1766474397 into OLK-5.10 - !19548 merge refs/pull/19548/head into OLK-5.10 - ext4: xattr: fix null pointer deref in ext4_raw_inode() - !19739 merge refs/pull/19739/head into OLK-5.10 - !19732 merge refs/pull/19732/head into OLK-5.10 - !19719 merge refs/pull/19719/head into OLK-5.10 - bnxt_en: Fix memory corruption when FW resources change during ifdown - bnxt_en: Fix possible crash after creating sw mqprio TCs - x86/fpu: Ensure XFD state on signal delivery - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - usb: storage: Fix memory leak in USB bulk transport - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() - cpufreq: ACPI: Fix max-frequency computation - tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes - tools headers: Update tools's copy of x86/asm headers - tools headers cpufeatures: Sync with the kernel sources - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - !19798 merge OLK-5.10 into OLK-5.10 - !19972 merge patch-1767691219 into OLK-5.10 - !19974 merge patch-1767691279 into OLK-5.10 - !19973 merge patch-1767691254 into OLK-5.10 - !19713 merge refs/pull/19713/head into OLK-5.10 - !19832 merge OLK-5.10-ringbuffer into OLK-5.10 - qed: Don't collect too many protection override GRC elements - i40e: fix validation of VF state in get resources - i40e: fix input validation logic for action_meta - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() - KVM: SVM: Skip SEV cache flush if no ASIDs have been used - KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities - x86/sev: Make enc_dec_hypercall() accept a size instead of npages - mm: x86: Fix kabi breakage of pv_ops - KVM: x86: Play nice with protected guests in complete_hypercall_exit() - KVM: x86: Assume a 64-bit hypercall for guests with protected state - KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids() - KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa - x86/kvm: Add kexec support for SEV Live Migration. - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. - EFI: Introduce the new AMD Memory Encryption GUID. - mm: x86: Invoke hypercall when page encryption status is changed - x86/kvm: Add AMD SEV specific Hypercall3 - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA - KVM: SVM: fix missing sev_decommission in sev_receive_start - KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall - KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command - KVM: SVM: Add support for KVM_SEV_RECEIVE_START command - KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command - KVM: SVM: Add KVM_SEV_SEND_FINISH command - KVM: SVM: Add KVM_SEND_UPDATE_DATA command - KVM: SVM: Add KVM_SEV SEND_START command - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19047 [OLK-5.10] Fix CVE-2025-39839 - !18614 [OLK-5.10] Fix CVE-2025-39737 - !18654 [OLK-5.10] Fix CVE-2025-38705 - !18782 【OLK-5.10】fix CVE-2025-38712 - !18612 [OLK-5.10] Fix CVE-2025-38713 - !18635 [OLK-5.10] Fix CVE-2025-38714 - !18862 [OLK-5.10] Fix CVE-2025-38697 - !20058 CVE-2025-38111 - !20131 wifi: cfg80211: fix use-after-free in cmp_bss() - !20306 mm/kmemleak: move up cond_resched() call in page scanning loop - !20309 hwmon: constify pointers to hwmon_channel_info - hwmon: fix kabi of struct hwmon_channel_info - !20338 mlxsw: spectrum_router: Fix neighbour use-after-free - !20337 mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - hwmon: constify pointers to hwmon_channel_info - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - !20316 um: virtio_uml: Fix use-after-free after put_device in probe - !20114 KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc - um: virtio_uml: Fix use-after-free after put_device in probe - !20300 software node: Correct a OOB check in software_node_get_reference_args() - !20299 jfs: add sanity check for agwidth in dbMount - !20278 iavf: fix off-by-one issues in iavf_config_rss_reg() - !20277 e1000: fix OOB in e1000_tbi_should_accept() - !20285 hwmon: (ibmpex) fix use-after-free in high/low store - mm/kmemleak: move up cond_resched() call in page scanning loop - !19953 【OLK-5.10】 power_meter patchs from 6.6 - software node: Correct a OOB check in software_node_get_reference_args() - jfs: add sanity check for agwidth in dbMount - hwmon: (ibmpex) fix use-after-free in high/low store - !20269 drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !20271 KVM: x86: use array_index_nospec with indices that come from guest - !19788 ima: Handle error code returned by ima_filter_rule_match() - iavf: fix off-by-one issues in iavf_config_rss_reg() - e1000: fix OOB in e1000_tbi_should_accept() - !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver - !20203 drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - !20202 scsi: qla2xxx: Fix premature hw access after PCI error - !19728 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09 - KVM: x86: use array_index_nospec with indices that come from guest - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - RDMA/hns: Support config and query the CNP DSCP for HIP09 - !20221 Revert "RDMA/hns: Fix mismatch exception rollback" - !20195 ACPI: APEI: Handle repeated SEA error interrupts storm - !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes - Revert "RDMA/hns: Fix mismatch exception rollback" - RDMA/hns: Support drain SQ and RQ - RDMA/hns: Return actual error code instead of fixed EINVAL - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Fix RoCEv1 failure due to DSCP - !20161 cifs: fix session state check in reconnect to avoid use-after-free issue - !20050 smb: client: Fix use-after-free in cifs_fill_dirent - !19834 v2 md/raid0, raid10: Don't set discard sectors for request queue - !19816 scsi: sg: Do not sleep in atomic context - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - scsi: qla2xxx: Fix premature hw access after PCI error - ACPI: APEI: Handle repeated SEA error interrupts storm - !20150 tracing: Do not register unsupported perf events - !20163 tracing: Fix enabling of tracing on file release - !19938 net: hns3: add VLAN id validation before using - !19836 [OLK-5.10] Fixes for SEV-ES Guest Support - !20044 【openEuler-22.03-LTS-SP4】Memory copy error - !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2 - !20025 [OLK-5.10]Support SMT control on arm64. - !19922 NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - !19985 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - !19996 net: netpoll: fix incorrect refcount handling causing incorrect cleanup - !19908 drivers:misc:sdma-dae: add NULL judgement of global variables - !20026 fs/buffer: fix use-after-free when call bh_read() helper - !19962 i40e: add max boundary check for VF filters - !20103 kmemleak: Fix kmemleak false warnings - !20169 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - !20052 CVE-2024-21823 - !18962 erofs: Fix erofs_bmap error - !20016 kernfs: Fix UAF issue - !19694 ARM: fix hash_name() issue - !20048 VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - !20065 Fix CVE-2022-50737 - !20066 smb: client: fix race with concurrent opens in rename(2) - !20151 v2 Fix CVE-2025-40016 - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems - ACPI: IPMI: Add helper to wait for when SMI is selected - hwmon: (acpi_power_meter) Fix the fake power alarm reporting - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices(). - hwmon: (acpi_power_meter) Fix update the power trip points on failure - hwmon: (acpi_power_meter) Fix uninitialized variables - !20047 crypto: af_alg - Set merge to zero early in af_alg_sendmsg - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method - hwmon: (acpi_power_meter) replace open-coded kmemdup_nul - hwmon: (acpi_power_meter) Fix style issues - hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device() - hwmon: acpi_power_meter: Get rid of ACPICA message printing - ACPI: utils: Introduce acpi_evaluation_failure_warn() - ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE - hwmon: (acpi_power_meter) clean up freeing code - x86/sev: merge continuous pages into a large range when notifying range enc status changes - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - tracing: Fix enabling of tracing on file release - cifs: fix session state check in reconnect to avoid use-after-free issue - media: uvcvideo: Use heuristic to find stream entity - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Allow extra entities - tracing: Do not register unsupported perf events - wifi: cfg80211: fix use-after-free in cmp_bss() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - arm64: kdump: fix kmemleak unknown object warning when crash base is set - arm64: kdump: fix kmemleak unknown object warning - x86/sev: Use "SEV: " prefix for messages from sev.c - x86/sev: Propagate #GP if getting linear instruction address failed - smb: client: fix race with concurrent opens in rename(2) - fs/ntfs3: Add null pointer checks - fs/ntfs3: Validate buffer length while parsing index - fs/ntfs3: Validate index root when initialize NTFS security - net/mdiobus: Fix potential out-of-bounds read/write access - net: mdio: C22 is now optional, EOPNOTSUPP if not provided - dmaengine: idxd: Fix ->poll() return value - dmaengine: idxd: Fix allowing write() from different address spaces - dmaengine: idxd: Fix passing freed memory in idxd_cdev_open() - dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling - dmaengine: idxd: add per DSA wq workqueue for processing cr faults - dmaengine: idxd: add a write() method for applications to submit work - dmaengine: idxd: add a new security check to deal with a hardware erratum - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist - smb: client: Fix use-after-free in cifs_fill_dirent - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench' - x86: don't use REP_GOOD or ERMS for small memory clearing - x86: don't use REP_GOOD or ERMS for small memory copies - fs/buffer: fix use-after-free when call bh_read() helper - powerpc/kexec: Enable SMT before waking offline CPUs - cpu/SMT: Enable SMT only if a core is online - cpu/SMT: Create topology_smt_thread_allowed() - powerpc/topology: Check if a core is online - config: enable CONFIG_HOTPLUG_SMT for arm64 - arm64: Kconfig: Enable HOTPLUG_SMT - arm64: topology: Support SMT control on ACPI based system - arch_topology: Support SMT control for OF based system - cpu/SMT: Provide a default topology_is_primary_thread() - powerpc: Add HOTPLUG_SMT support - Revert "arm64: Kconfig: Enable HOTPLUG_SMT" - kernfs: Fix kabi broken in struct kernfs_root - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir(). - kernfs: fix potential NULL dereference in __kernfs_remove - kernfs: fix NULL dereferencing in kernfs_remove - kernfs: remove redundant kernfs_rwsem declaration. - kernfs: prevent early freeing of root node - kernfs: switch global kernfs_rwsem lock to per-fs lock - KVM: SVM: Make sure GHCB is mapped before updating - KVM: SVM: check CR4 changes against vcpu->arch - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests - x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]() - x86/sev: Fix error message in runtime #VC handler - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - i40e: add max boundary check for VF filters - net: hns3: add VLAN id validation before using - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled - ACPI: thermal: Move to dedicated function sysfs extra attr creation - ACPI: thermal: Use thermal_zone_device() - thermal: core: Encapsulate tz->device field - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - drivers:misc:sdma-dae: add NULL judgement of global variables - md/raid0, raid10: Don't set discard sectors for request queue - scsi: sg: Do not sleep in atomic context - ima: Handle error code returned by ima_filter_rule_match() - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - ARM: fix hash_name() fault - ARM: allow __do_kernel_fault() to report execution of memory faults - configs: enable CONFIG_MICROCODE_ZHAOXIN - x86/microcode: Add Zhaoxin cpu microcode update driver - drm/amd/pm: fix null pointer access - batman-adv: fix OOB read/write in network-coding decode - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - erofs: Fix erofs_bmap error - jfs: upper bound check of tree index in dbAllocAG - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - !20464 rcu: Protect ->defer_qs_iw_pending from data race - !20318 net: hns3: check pf tc cfg when setting vf tc - !20522 CVE-2022-50616 - !20423 use SYS_CNTVCTSS_EL0 for gettimeofday - regulator: core: Fix resolve supply lookup issue - regulator: core: Use different devices for resource allocation and DT lookup - !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO. - !19965 nvme-fc: use lock accessing port_state and rport state - !20226 leapraid: supports LeapRaid controller - !20436 fix CVE-2026-22998 - rcu: Protect ->defer_qs_iw_pending from data race - !20449 scsi/hiraid: Support New Raid feature - !20252 ntfs: set dummy blocksize to read boot_block when mounting - !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc - !20335 Fix CVE-2025-37947 - mm: Add PAGE_ALIGN_DOWN macro - soc cache: fix walk page parameter and drop incorrect check - soc cache: Fix incorrect error path of ioctl - soc cache: Fix incorrect size validation - soc cache: Enforce maintain type check - soc cache: Modify default config to compile HiSilicon SoC cache driver - !19858 [OLK-5.10] perf support for HiSilicon HIP12 - !20331 Fix CVE-2025-39835 - !20439 Fix CVE-2025-39945 - !20251 Fix CVE-2025-38480 - !20184 Fix CVE-2025-37770 - !20185 Fix CVE-2022-49829 - !20183 Fix CVE-2025-23138 - !20240 Fix CVE-2025-21981 - !20409 net: xfrm: Fix CVE-2025-40215 - !20408 net: xfrm: Fix CVE-2025-39797 - !20407 netfilter: allow exp not to be removed in nf_ct_find_expectation - !20406 bpf, sockmap: Avoid using sk_socket after free when sending - !20405 can: bcm: add locking for bcm_op runtime updates - !20404 RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent - scsi/hiraid: Support New Raid feature - !19950 【OLK-5.10】 Drivers GPU Patches from 6.6 - !20422 driver core: fix potential null-ptr-deref in device_add() - cnic: Fix use-after-free bugs in cnic_delete_task - !20421 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - !20420 usb: early: xhci-dbc: Fix a potential out-of-bound memory access - !20418 drivers: base: Free devm resources when unregistering a device - !20417 driver core: fix resource leak in device_add() - !20416 Fix CVE-2022-49309 - !20415 kernel/resource: fix kfree() of bootmem memory again - !20414 drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - !20413 of: check previous kernel's ima-kexec-buffer against memory bounds - !20412 HID: core: Harden s32ton() against conversion to 0 bits - !20411 iommu/amd: Avoid stack buffer overflow from kernel cmdline - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvmet-tcp: remove boilerplate code - !20390 drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - vdso: do cntvct workaround in the VDSO - arm64: vdso: remove two .altinstructions related symbols - arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday - arm64: alternative: patch alternatives in the vDSO - arm64: module: move find_section to header - driver core: fix potential null-ptr-deref in device_add() - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - usb: early: xhci-dbc: Fix a potential out-of-bound memory access - drivers: base: Free devm resources when unregistering a device - driver core: fix resource leak in device_add() - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() - !20383 usb: cdns3: fix random warning message when driver load - kernel/resource: fix kfree() of bootmem memory again - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - of: check previous kernel's ima-kexec-buffer against memory bounds - HID: core: Harden s32ton() against conversion to 0 bits - !19959 【OLK-5.10】Support NMI Watchdog - iommu/amd: Avoid stack buffer overflow from kernel cmdline - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfrm: Duplicate SPI Handling - netfilter: allow exp not to be removed in nf_ct_find_expectation - bpf, sockmap: Avoid using sk_socket after free when sending - can: bcm: add locking for bcm_op runtime updates - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation. - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh - watchdog/perf: Provide function for adjusting the event period - config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64 - irqchip/gic-v3: Fix one race condition due to NMI withdraw - watchdog: Fix call trace when failed to initialize sdei - watchdog: Support watchdog_sdei coexist with existing watchdogs - init: only move down lockup_detector_init() when sdei_watchdog is enabled - arm64: enable perf events based hard lockup detector - arm64: add hw_nmi_get_sample_period for preparation of lockup detector - usb: cdns3: fix random warning message when driver load - !20051 smb3: fix for slab out of bounds on mount to ksmbd - comedi: Fix use of uninitialized data in insn_rw_emulate_bits() - watch_queue: fix pipe accounting mismatch - drm/amd/pm/powerplay: Prevent division by zero - !20357 ext4: fix e4b bitmap inconsistency reports - ice: fix memory leak in aRFS after reset - drm/hisilicon/hibmc: hibmc-drm bugfix for DP - !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6 - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel - drm/hisilicon/hibmc: Add vga connector detect functions - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp - drm/hisilicon/hibmc: Add dp serdes cfg in dp process - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis - drm/hisilicon/hibmc: Restructuring the header dp_reg.h - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers - drm/ast: Implement polling for VGA and SIL164 connectors - drm/sysfs: Register "ddc" symlink later - drm/hisilicon/hibmc: add dp module in hibmc - drm/hisilicon/hibmc: refactored struct hibmc_drm_private - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers - drm/hisilicon/hibmc: add dp aux in hibmc drivers - gic: increase the arch_timer priority to avoid hardlockup - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803 - drm/scheduler: fix fence ref counting - !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology - ext4: fix e4b bitmap inconsistency reports - !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction - !20256 Fix CVE-2025-39828 - !20339 wifi: prevent A-MSDU attacks in mesh networks - wifi: prevent A-MSDU attacks in mesh networks - ksmbd: fix stream write failure - ksmbd: prevent out-of-bounds stream writes by validating *pos - xfs: do not propagate ENODATA disk errors into xattr code - net: hns3: check pf tc cfg when setting vf tc - net: hns3: support tc limit speed - net: hns3: the multi-tcs VF can be configured only when the interface is down - irqchip/gic-v3-its: Remove DevID Pool's restriction - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *' - perf: Update .gitignore file - perf stat: Enable iostat mode for x86 platforms - perf stat: Helper functions for PCIe root ports list in iostat mode - perf: Fix tt_core mismatch over PG CPU - perf iostat: Use system-wide mode if the target cpu_list is unspecified - perf arm_spe: Correct memory level for remote access - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU - Documentation: hisi-pmu: Fix of minor format error - drivers/perf: hisi: Add support for L3C PMU v3 - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - arm64: topology: Setup amu fie when cpu hotplugging - topology: Set capacity_freq_ref in all cases - arm64/amu: Use capacity_ref_freq() to set AMU ratio - cpufreq/cppc: Set the frequency used for computing the capacity - cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}() - energy_model: Use a fixed reference frequency - cpufreq/schedutil: Use a fixed reference frequency - cpufreq: Use the fixed and coherent frequency for scaling capacity - sched/topology: Add a new arch_scale_freq_ref() method - arch_topology: Introduce thermal pressure update function - riscv: export cpu/freq invariant to scheduler - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() - cpufreq: Allow drivers to advertise boost enabled - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' - openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix unused-function warning - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: ACPI: Mark boost policy as enabled when setting boost - cpufreq: ACPI: Only set boost MSRs on supported CPUs - cpufreq: ACPI: Defer setting boost MSRs - cpufreq: acpi: Remove acpi_cpufreq_cpu_ready() - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw() - Documentation: power: Add description about new callback for EM registration - arch_topology: Avoid use-after-free for scale_freq_data - cpufreq: Exit governor when failed to start old governor - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() - cpufreq: Initialize cpufreq-based frequency-invariance later - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost - cpufreq: Remove duplicate check in __cpufreq_offline() - cpufreq: Don't unregister cpufreq cooling on CPU hotplug - cpufreq: Remove the ->stop_cpu() driver callback - cpufreq: intel_pstate: Combine ->stop_cpu() and ->offline() - cpufreq: powernv: Migrate to ->exit() callback instead of ->stop_cpu() - docs/zh_CN: add cpu-freq cpu-drivers.rst translation - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() - cpufreq: CPPC: Do not return a value from populate_efficiency_class() - cpufreq: CPPC: Remove cpu_data_list - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate() - cpufreq: CPPC: Register EM based on efficiency class information - PM: EM: Change the order of arguments in the .active_power() callback - cpufreq: Add callback to register with energy model - PM: EM: Add .get_cost() callback - cpufreq: CPPC: Add per_cpu efficiency_class - cpufreq: remove useless INIT_LIST_HEAD() - ACPI: CPPC: Disable FIE if registers in PCC regions - ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate() - cpufreq: cppc: Fix invalid return value in .get() callback - cppc_cpufreq: Fix possible null pointer dereference - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn() - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus - cpufreq: CPPC: Add support for frequency invariance - arch_topology: Export arch_freq_scale and helpers - cpufreq: CPPC: Pass structure instance by reference - cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init - cpufreq: CPPC: Migrate to ->exit() callback instead of ->stop_cpu() - cppc_cpufreq: replace per-cpu data array with a list - cppc_cpufreq: expose information on frequency domains - cppc_cpufreq: clarify support for coordination types - arch_topology: Allow multiple entities to provide sched_freq_tick() callback - sched/topology,schedutil: Wrap sched domains rebuild - arch_topology: Rename freq_scale as arch_freq_scale - arm64: topology: Drop the useless update to per-cpu cycles - arm64: topology: Make AMUs work with modular cpufreq drivers - arm64: topology: Reorder init_amu_fie() a bit - arm64: topology: Avoid the have_policy check - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() - cpufreq: prevent NULL dereference in cpufreq_online() - cpufreq: CPPC: Fix wrong max_freq in policy initialization - cppc_cpufreq: simplify use of performance capabilities - cpufreq: Introduce a more generic way to set default per-policy boost flag - cpufreq: Fix re-boost issue after hotplugging a CPU - cpufreq: Support per-policy performance boost - ntfs: set dummy blocksize to read boot_block when mounting - leapraid: supports LeapRaid controller - perf mem: Count L2 HITM for c2c statistic - perf mem: Add statistics for peer snooping - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12 - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel - perf arm-spe: augment the data source type with neoverse_spe list - tools arm64: Import cputype.h - arm64: cputype: Add cputype definition for HIP12 - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface - drivers/perf: hisi: Add cacheable option for L3C PMU - perf: Remove unstable events for uncore L3C PMU - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu - perf iostat: hisi: Fix port range retrival - drivers/perf: hisi: Add support for L3C PMU v3 - drivers/perf: hisi: Refactor the event configuration of L3C PMU - drivers/perf: hisi: Extend the field of tt_core - drivers/perf: hisi: Extract the event filter check of L3C PMU - drivers/perf: hisi: Simplify the probe process of each L3C PMU version - drivers/perf: hisi: Export hisi_uncore_pmu_isr() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/perf: hisi: Add support for HiSilicon MN PMU driver - drivers/perf: hisi: Add support for HiSilicon NoC PMU - drivers/perf: hisi: Support PMUs with no interrupt - drivers/perf: hisi: Relax the event number check of v2 PMUs - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver - drivers/perf: hisi: Simplify the probe process for each DDRC version - drivers/perf: hisi: Delete redundant blank line of DDRC PMU - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier - drivers/perf: convert sysfs snprintf family to sysfs_emit - perf: hisi: Constify static struct attribute_group - perf/hisi: Constify static attribute_group structs - drivers/perf: hisi: Add a common function to retrieve topology from firmware - drivers/perf: hisi: Extract topology information to a separate structure - drivers/perf: hisi: Refactor the detection of associated CPUs - drivers/perf: hisi: Migrate to one online CPU if no associated one online - drivers/perf: hisi: Don't update the associated_cpus on CPU offline - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs - perf stat: Enable iostat mode for HiSilicon PCIe PMU - perf stat: Add struct perf_stat_aggr to perf_stat_evsel - perf stat: Display iostat headers correctly - perf stat: Don't display metric header for non-leader uncore events - perf stat: Basic support for iostat in perf - perf arm-spe: Refactor arm-spe to support operation packet type - perf arm-spe: Use SPE data source for neoverse cores - perf arm-spe: Don't set data source if it's not a memory operation - perf tools: Sync addition of PERF_MEM_SNOOPX_PEER - tools: arm64: Import sysreg.h - smb3: fix for slab out of bounds on mount to ksmbd - watchdog/perf: adapt the watchdog_perf interface for async model - watchdog/perf: add a weak function for an arch to detect if perf can use NMIs - irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed - irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked - irqchip/gic-v3: Implement FEAT_GICv3_NMI support - arm64/nmi: Add Kconfig for NMI - arm64/nmi: Add handling of superpriority interrupts as NMIs - arm64/irq: Document handling of FEAT_NMI in irqflags.h - arm64/entry: Don't call preempt_schedule_irq() with NMIs masked - arm64/nmi: Manage masking for superpriority interrupts along with DAIF - nvme-fc: use lock accessing port_state and rport state - KVM: arm64: Hide FEAT_NMI from guests - arm64/cpufeature: Detect PE support for FEAT_NMI - arm64/hyp-stub: Enable access to ALLINT - arm64/asm: Introduce assembly macros for managing ALLINT - arm64/sysreg: Add definitions for immediate versions of MSR ALLINT - arm64/booting: Document boot requirements for FEAT_NMI - irqchip/gic-v3: Fix priority mask handling - irqchip/gic-v3: Refactor ISB + EOIR at ack time - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 - soc cache: Add framework driver for HiSilicon SoC cache - !20333 phytium-tpcm-sig-8-hadler-reg-s5000c - !20767 Revert hibmc patches to fix null-ptr-deref - Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6" - Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert" - !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Code refactoring for hibmc_drm_drv - !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 & SM4 algorithm - !20666 CVE-2023-53712 - !20673 Fix CVE-2025-39957 - !20686 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20687 i40e: Fix potential invalid access when MAC list is empty - !20692 ipv6: sr: Fix MAC comparison to be constant-time - !20699 sctp: linearize cloned gso packets in sctp_rcv - !20688 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - !20698 libceph: fix potential use-after-free in have_mon_and_osd_map() - !20697 tipc: Fix use-after-free in tipc_mon_reinit_self(). - sctp: linearize cloned gso packets in sctp_rcv - libceph: fix potential use-after-free in have_mon_and_osd_map() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - ipv6: sr: Fix MAC comparison to be constant-time - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - i40e: Fix potential invalid access when MAC list is empty - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20119 Add 950 KVM feature support - !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration - !20638 ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - !20637 net/sched: sch_qfq: do not free existing class in qfq_change_class() - !20636 v2 macvlan: fix possible UAF in macvlan_forward_source() - wifi: mac80211: increase scan_ies_len for S1G - !20566 crypto: lzo - Fix compression buffer overrun - KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer - KVM: arm64: ipiv: Fix compilation warning - KVM: arm64: check if IPIV is enabled in BIOS - kvm: hisi: print error for IPIV - KVM: arm64: using kvm_vgic_global_state for ipiv - kvm: hisi: Don't allow to change mpidr in IPIv - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv - KVM: arm64: fix live migration bug of IPIv - irqchip/gic: Add HiSilicon PV SGI support - KVM: arm64: Implement PV_SGI related calls - KVM: arm64: Document PV-sgi interface - KVM: arm64: Introduce ipiv enable ioctl - arm64/config: add config to control whether enable IPIV feature - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12 - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE - kvm: hisi_virt: Register ipiv exception interrupt - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule - kvm: arm64: avoid sending multi-SGIs in IPIV - kvm: hisi_virt: Allocate VM table and save vpeid in it - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2 - KVM: arm64: fix memory leak in TLBI - KVM: arm64: Add new HiSi CPU type to support DVMBM - kvm: hisi_virt: Update TLBI broadcast feature for hip12 - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE - ARM: 9317/1: kexec: Make smp stop calls asynchronous - !20654 scsi: qla4xxx: Prevent a potential error pointer dereference - !20653 bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - !20655 mm/slub: avoid accessing metadata when pointer is invalid in object_err() - !20656 firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors - x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - mm/slub: avoid accessing metadata when pointer is invalid in object_err() - scsi: qla4xxx: Prevent a potential error pointer dereference - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - net/sched: sch_qfq: do not free existing class in qfq_change_class() - macvlan: fix possible UAF in macvlan_forward_source() - !20597 team: fix check for port enabled in team_queue_override_port_prio_changed() - !20593 CVE-2025-39744 fixup - !20465 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - !20178 v3 Fix CVE-2024-53179 - team: fix check for port enabled in team_queue_override_port_prio_changed() - rcu: Fix racy re-initialization of irq_work causing hangs - rcu: Fix rcu_read_unlock() deadloop due to IRQ work - rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs - !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts - !20428 wifi: mt76: do not run mt76u_status_worker if the device is not running - !20427 RDMA/bnxt_re: Prevent handling any completions after qp destroy - !20466 pptp: ensure minimal skb length in pptp_xmit() - !20426 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - !20574 RDMA/cm: Fix leaking the multicast GID table reference - !20573 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - !20565 Fix CVE-2023-53521 - !20521 Fix CVE-2026-23038 - RDMA/cm: Fix leaking the multicast GID table reference - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - crypto: lzo - Fix compression buffer overrun - !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() - eth: bnxt: move and rename reset helpers - x86: Resolve FPU state corruption between atomic and non-atomic contexts - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - bnxt_en: Fix potential data corruption with HW GRO/LRO - pptp: ensure minimal skb length in pptp_xmit() - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - wifi: mt76: do not run mt76u_status_worker if the device is not running - RDMA/bnxt_re: Prevent handling any completions after qp destroy - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - phytium: add tpcm sgi handler for s5000c - smb: client: fix use-after-free of signing key - cifs: missed ref-counting smb session in find - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode - crypto: ccp: Add support to switch to CSV RING_BUFFER mode - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues - openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI - crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm - crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm - !20737 pNFS: Fix a deadlock when returning a delegation during open() - !20725 tracing: Add recursion protection in kernel stack trace recording - !20746 Fix CVE-2026-22990 - !20671 arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - !20669 irqchip/gic-v3-its: Avoid truncating memory addresses - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - pNFS: Fix a deadlock when returning a delegation during open() - tracing: Add recursion protection in kernel stack trace recording - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - irqchip/gic-v3-its: Avoid truncating memory addresses - !20899 Fix CVE-2026-23216 - !20885 nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file - !20839 bpf, cpumap: Make sure kthread is running before map update returns - bpf, cpumap: Make sure kthread is running before map update returns - !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1 - !20818 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20801 ACPI/IORT: Add PMCG platform information for 162001900 - !20814 migrate: correct lock ordering for hugetlb file folios - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20800 fix CVE-2026-23054 - migrate: correct lock ordering for hugetlb file folios - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - net: hv_netvsc: reject RSS hash key programming without RX indirection table - hv_netvsc: Allocate rx indirection table size dynamically - RDMA/hns: Remove the accidentally added hns_roce_trace.h file - irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI - !21136 sched/rt: Skip currently executing CPU in rto_next_cpu() - !21131 procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21093 kexec: derive purgatory entry from symbol - !21140 ksmbd: fix use-after-free in kerberos authentication - !21132 SUNRPC: Ensure the transport backchannel association - ksmbd: fix use-after-free in kerberos authentication - sched/rt: Skip currently executing CPU in rto_next_cpu() - SUNRPC: Ensure the transport backchannel association - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21112 CVE-2024-57979 - !21111 ALSA: aloop: Fix racy access at PCM trigger - pps: Fix kabi in pps_device - pps: Fix a use-after-free - ALSA: aloop: Fix racy access at PCM trigger - kexec: derive purgatory entry from symbol - ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21072 v2 arm64/mpam: enable MPAM feature and - !20883 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - !21021 CVE-2026-23209 - arm64/mpam: fix the bitmap written during mpam device reset - arm64/mpam: only allow L3 cache MPAM device created - arm64/mpam: fix inadvertently updating after repeatedly updating - arm64/mpam: set default feedback of last_cmd_status interface as null string - !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured - !19837 KVM: Drop tlbs_dirty - !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !21014 bpf selftest cross compile fixes - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - macvlan: fix error recovery in macvlan_common_newlink() - !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - selftests/bpf: Pass target triple to get_sys_includes macro - selftests/bpf: Enable cross-building - net: hns3: hns3 driver should be initialized when VF multi tcs is configured - net: hns3: modify code of judging if SMMU DMA is enabled - !20976 support apei_page_offline_policy - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() - nvmet-tcp: don't map pages which can't come from HIGHMEM - nvmet-tcp: fix regression in data_digest calculation - nvmet-tcp: fix memory leak when performing a controller reset - !20971 Fix CVE-2026-23074 - apei/ghes: Add sysctl interface to control soft-offline page isolation - Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages" - !20887 HiSock Enhancement - net/sched: Enforce that teql can only be used as root qdisc - drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !20891 dcache: Limit the minimal number of bucket to two - !20956 CVE-2025-39967 - fbcon: Fix OOB access in font allocation - fbcon: fix integer overflow in fbcon_do_set_font - overflow: Allow mixed type arguments - nvmet-tcp: add an helper to free the cmd buffers - dcache: Limit the minimal number of bucket to two - bpf: Deprecate hisock unused helpers and orig ingress logic - bpf: Add local connect support for hisock - bpf: Add ipv4-mapped ipv6 addr support for hisock - bpf: Add target comm parse to hisock_cmd - bpf: Add multi port parse to hisock_cmd - bpf: Only deploy hisock in server - bpf: Apply BPF_HISOCK_INGRESS to hisock ingress - bpf: Add bpf_handle_ingress/egress_ptype helper function - bpf: Add bpf_set_ingress/egress_dev helper function - bpf: Add bpf_get_skb_ethhdr helper function - bpf: Add bpf_set_ingress_dst helper function - bpf: Add BPF_HISOCK_INGRESS attach type - net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - KVM: Drop tlbs_dirty - !21262 arm64/mpam: Extending MPAM features and bugfix - arm64/mpam: Allow MBMIN to be set to 0 - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit - arm64/mpam: Add quirk to shrink MATA PMG range - !21211 scsi: hisi_sas: Change the debugfs parameters dump count default value - scsi: hisi_sas: Change the debugfs parameters dump count default value - !21163 gic: Add hip09 support for HISILICON_ERRATUM_165010801 - gic: Add hip09 support for HISILICON_ERRATUM_165010801 - !19740 merge refs/pull/19740/head into OLK-5.10 - !19764 merge patch-1766387978 into OLK-5.10 - hisi: l3t: enable l3t with specific cpuid - !19705 [OLK-5.10]:update patches for sw64 architecture - !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct - !19372 padata: Fix pd UAF once and for all - !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation - !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS - net: atlantic: fix fragment overflow handling in RX path - !19736 locking/rwsem: Optimize down_read_trylock() under highly contended case - locking/rwsem: Optimize down_read_trylock() under highly contended case - !19724 mm/mem_reliable: use percise count during limit check - mm/mem_reliable: use percise count during limit check - !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - !19614 NFSD: Fix crash in nfsd4_read_release() - !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19673 firewire: net: fix use after free in fwnet_finish_incoming_packet() - sw64: set PTBR_SYS before accessing vmalloc area - sw64: set execute permission for virtual machine's hmcode text section - sw64: fix simd version of copy/clear_page() - sw64: fix random mmap base range - firewire: net: fix use after free in fwnet_finish_incoming_packet() - NFSD: Fix crash in nfsd4_read_release() - crypto: ccp: add ccp-mdev functionality to the ccp module. - padata: Fix pd UAF once and for all - KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access - KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer - KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests - KVM: x86: Pass emulation type to can_emulate_instruction() - KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support - KVM: SVM: Don't intercept #GP for SEV guests - swiotlb: do not zero buffer in set_memory_decrypted() - crypto: ccp - Add SEV_INIT rc error logging on init - dma-direct: always leak memory that can't be re-encrypted - dma-direct: factor out dma_set_{de,en}crypted helpers - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits - KVM: SEV-ES: fix another issue with string I/O VMGEXITs - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed - KVM: SEV-ES: keep INS functions together - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in - KVM: x86: split the two parts of emulator_pio_in - KVM: SEV-ES: clean up kvm_sev_es_ins/outs - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out - KVM: SEV-ES: rename guest_ins_data to sev_pio_data - KVM: SEV-ES: fix length of string I/O - x86/sev-es: Do not unroll string I/O for SEV-ES guests - x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs - !19833 merge patch-1766715015 into OLK-5.10 - !19911 merge patch-1767492639 into OLK-5.10 - !19635 merge refs/pull/19635/head into OLK-5.10 - !19903 merge patch-1767161454 into OLK-5.10 - !19864 merge patch-1766990471 into OLK-5.10 - !19865 merge patch-1766990523 into OLK-5.10 - mm: mem_reliable: prevent excessive direct reclaim loops - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - !19899 merge patch-1767098709 into OLK-5.10 - erofs: validate the extent length for uncompressed pclusters - !19885 merge patch-1767076771 into OLK-5.10 - !19876 merge patch-1767011340 into OLK-5.10 - scsi: qla2xxx: Clear cmds after chip reset - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - !19856 merge patch-1766976937 into OLK-5.10 - !19857 merge patch-1766976979 into OLK-5.10 - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private - virtio-net: ensure the received length does not exceed allocated size - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - tracing: Fix memory leaks in create_field_var() - !19760 merge patch-1766370959 into OLK-5.10 - !19786 merge patch-1766474397 into OLK-5.10 - !19548 merge refs/pull/19548/head into OLK-5.10 - ext4: xattr: fix null pointer deref in ext4_raw_inode() - !19739 merge refs/pull/19739/head into OLK-5.10 - !19732 merge refs/pull/19732/head into OLK-5.10 - !19719 merge refs/pull/19719/head into OLK-5.10 - bnxt_en: Fix memory corruption when FW resources change during ifdown - bnxt_en: Fix possible crash after creating sw mqprio TCs - x86/fpu: Ensure XFD state on signal delivery - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - usb: storage: Fix memory leak in USB bulk transport - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() - cpufreq: ACPI: Fix max-frequency computation - tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes - tools headers: Update tools's copy of x86/asm headers - tools headers cpufeatures: Sync with the kernel sources - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - !19798 merge OLK-5.10 into OLK-5.10 - !19972 merge patch-1767691219 into OLK-5.10 - !19974 merge patch-1767691279 into OLK-5.10 - !19973 merge patch-1767691254 into OLK-5.10 - !19713 merge refs/pull/19713/head into OLK-5.10 - !19832 merge OLK-5.10-ringbuffer into OLK-5.10 - qed: Don't collect too many protection override GRC elements - i40e: fix validation of VF state in get resources - i40e: fix input validation logic for action_meta - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() - KVM: SVM: Skip SEV cache flush if no ASIDs have been used - KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities - x86/sev: Make enc_dec_hypercall() accept a size instead of npages - mm: x86: Fix kabi breakage of pv_ops - KVM: x86: Play nice with protected guests in complete_hypercall_exit() - KVM: x86: Assume a 64-bit hypercall for guests with protected state - KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids() - KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa - x86/kvm: Add kexec support for SEV Live Migration. - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. - EFI: Introduce the new AMD Memory Encryption GUID. - mm: x86: Invoke hypercall when page encryption status is changed - x86/kvm: Add AMD SEV specific Hypercall3 - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA - KVM: SVM: fix missing sev_decommission in sev_receive_start - KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall - KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command - KVM: SVM: Add support for KVM_SEV_RECEIVE_START command - KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command - KVM: SVM: Add KVM_SEV_SEND_FINISH command - KVM: SVM: Add KVM_SEND_UPDATE_DATA command - KVM: SVM: Add KVM_SEV SEND_START command - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19047 [OLK-5.10] Fix CVE-2025-39839 - !18614 [OLK-5.10] Fix CVE-2025-39737 - !18654 [OLK-5.10] Fix CVE-2025-38705 - !18782 【OLK-5.10】fix CVE-2025-38712 - !18612 [OLK-5.10] Fix CVE-2025-38713 - !18635 [OLK-5.10] Fix CVE-2025-38714 - !18862 [OLK-5.10] Fix CVE-2025-38697 - !20058 CVE-2025-38111 - !20131 wifi: cfg80211: fix use-after-free in cmp_bss() - !20306 mm/kmemleak: move up cond_resched() call in page scanning loop - !20309 hwmon: constify pointers to hwmon_channel_info - hwmon: fix kabi of struct hwmon_channel_info - !20338 mlxsw: spectrum_router: Fix neighbour use-after-free - !20337 mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - hwmon: constify pointers to hwmon_channel_info - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - !20316 um: virtio_uml: Fix use-after-free after put_device in probe - !20114 KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc - um: virtio_uml: Fix use-after-free after put_device in probe - !20300 software node: Correct a OOB check in software_node_get_reference_args() - !20299 jfs: add sanity check for agwidth in dbMount - !20278 iavf: fix off-by-one issues in iavf_config_rss_reg() - !20277 e1000: fix OOB in e1000_tbi_should_accept() - !20285 hwmon: (ibmpex) fix use-after-free in high/low store - mm/kmemleak: move up cond_resched() call in page scanning loop - !19953 【OLK-5.10】 power_meter patchs from 6.6 - software node: Correct a OOB check in software_node_get_reference_args() - jfs: add sanity check for agwidth in dbMount - hwmon: (ibmpex) fix use-after-free in high/low store - !20269 drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !20271 KVM: x86: use array_index_nospec with indices that come from guest - !19788 ima: Handle error code returned by ima_filter_rule_match() - iavf: fix off-by-one issues in iavf_config_rss_reg() - e1000: fix OOB in e1000_tbi_should_accept() - !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver - !20203 drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - !20202 scsi: qla2xxx: Fix premature hw access after PCI error - !19728 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09 - KVM: x86: use array_index_nospec with indices that come from guest - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - RDMA/hns: Support config and query the CNP DSCP for HIP09 - !20221 Revert "RDMA/hns: Fix mismatch exception rollback" - !20195 ACPI: APEI: Handle repeated SEA error interrupts storm - !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes - Revert "RDMA/hns: Fix mismatch exception rollback" - RDMA/hns: Support drain SQ and RQ - RDMA/hns: Return actual error code instead of fixed EINVAL - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Fix RoCEv1 failure due to DSCP - !20161 cifs: fix session state check in reconnect to avoid use-after-free issue - !20050 smb: client: Fix use-after-free in cifs_fill_dirent - !19834 v2 md/raid0, raid10: Don't set discard sectors for request queue - !19816 scsi: sg: Do not sleep in atomic context - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - scsi: qla2xxx: Fix premature hw access after PCI error - ACPI: APEI: Handle repeated SEA error interrupts storm - !20150 tracing: Do not register unsupported perf events - !20163 tracing: Fix enabling of tracing on file release - !19938 net: hns3: add VLAN id validation before using - !19836 [OLK-5.10] Fixes for SEV-ES Guest Support - !20044 【openEuler-22.03-LTS-SP4】Memory copy error - !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2 - !20025 [OLK-5.10]Support SMT control on arm64. - !19922 NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - !19985 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - !19996 net: netpoll: fix incorrect refcount handling causing incorrect cleanup - !19908 drivers:misc:sdma-dae: add NULL judgement of global variables - !20026 fs/buffer: fix use-after-free when call bh_read() helper - !19962 i40e: add max boundary check for VF filters - !20103 kmemleak: Fix kmemleak false warnings - !20169 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - !20052 CVE-2024-21823 - !18962 erofs: Fix erofs_bmap error - !20016 kernfs: Fix UAF issue - !19694 ARM: fix hash_name() issue - !20048 VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - !20065 Fix CVE-2022-50737 - !20066 smb: client: fix race with concurrent opens in rename(2) - !20151 v2 Fix CVE-2025-40016 - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems - ACPI: IPMI: Add helper to wait for when SMI is selected - hwmon: (acpi_power_meter) Fix the fake power alarm reporting - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices(). - hwmon: (acpi_power_meter) Fix update the power trip points on failure - hwmon: (acpi_power_meter) Fix uninitialized variables - !20047 crypto: af_alg - Set merge to zero early in af_alg_sendmsg - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method - hwmon: (acpi_power_meter) replace open-coded kmemdup_nul - hwmon: (acpi_power_meter) Fix style issues - hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device() - hwmon: acpi_power_meter: Get rid of ACPICA message printing - ACPI: utils: Introduce acpi_evaluation_failure_warn() - ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE - hwmon: (acpi_power_meter) clean up freeing code - x86/sev: merge continuous pages into a large range when notifying range enc status changes - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - tracing: Fix enabling of tracing on file release - cifs: fix session state check in reconnect to avoid use-after-free issue - media: uvcvideo: Use heuristic to find stream entity - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Allow extra entities - tracing: Do not register unsupported perf events - wifi: cfg80211: fix use-after-free in cmp_bss() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - arm64: kdump: fix kmemleak unknown object warning when crash base is set - arm64: kdump: fix kmemleak unknown object warning - x86/sev: Use "SEV: " prefix for messages from sev.c - x86/sev: Propagate #GP if getting linear instruction address failed - smb: client: fix race with concurrent opens in rename(2) - fs/ntfs3: Add null pointer checks - fs/ntfs3: Validate buffer length while parsing index - fs/ntfs3: Validate index root when initialize NTFS security - net/mdiobus: Fix potential out-of-bounds read/write access - net: mdio: C22 is now optional, EOPNOTSUPP if not provided - dmaengine: idxd: Fix ->poll() return value - dmaengine: idxd: Fix allowing write() from different address spaces - dmaengine: idxd: Fix passing freed memory in idxd_cdev_open() - dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling - dmaengine: idxd: add per DSA wq workqueue for processing cr faults - dmaengine: idxd: add a write() method for applications to submit work - dmaengine: idxd: add a new security check to deal with a hardware erratum - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist - smb: client: Fix use-after-free in cifs_fill_dirent - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench' - x86: don't use REP_GOOD or ERMS for small memory clearing - x86: don't use REP_GOOD or ERMS for small memory copies - fs/buffer: fix use-after-free when call bh_read() helper - powerpc/kexec: Enable SMT before waking offline CPUs - cpu/SMT: Enable SMT only if a core is online - cpu/SMT: Create topology_smt_thread_allowed() - powerpc/topology: Check if a core is online - config: enable CONFIG_HOTPLUG_SMT for arm64 - arm64: Kconfig: Enable HOTPLUG_SMT - arm64: topology: Support SMT control on ACPI based system - arch_topology: Support SMT control for OF based system - cpu/SMT: Provide a default topology_is_primary_thread() - powerpc: Add HOTPLUG_SMT support - Revert "arm64: Kconfig: Enable HOTPLUG_SMT" - kernfs: Fix kabi broken in struct kernfs_root - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir(). - kernfs: fix potential NULL dereference in __kernfs_remove - kernfs: fix NULL dereferencing in kernfs_remove - kernfs: remove redundant kernfs_rwsem declaration. - kernfs: prevent early freeing of root node - kernfs: switch global kernfs_rwsem lock to per-fs lock - KVM: SVM: Make sure GHCB is mapped before updating - KVM: SVM: check CR4 changes against vcpu->arch - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests - x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]() - x86/sev: Fix error message in runtime #VC handler - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - i40e: add max boundary check for VF filters - net: hns3: add VLAN id validation before using - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled - ACPI: thermal: Move to dedicated function sysfs extra attr creation - ACPI: thermal: Use thermal_zone_device() - thermal: core: Encapsulate tz->device field - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - drivers:misc:sdma-dae: add NULL judgement of global variables - md/raid0, raid10: Don't set discard sectors for request queue - scsi: sg: Do not sleep in atomic context - ima: Handle error code returned by ima_filter_rule_match() - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - ARM: fix hash_name() fault - ARM: allow __do_kernel_fault() to report execution of memory faults - configs: enable CONFIG_MICROCODE_ZHAOXIN - x86/microcode: Add Zhaoxin cpu microcode update driver - drm/amd/pm: fix null pointer access - batman-adv: fix OOB read/write in network-coding decode - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - erofs: Fix erofs_bmap error - jfs: upper bound check of tree index in dbAllocAG - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - !20464 rcu: Protect ->defer_qs_iw_pending from data race - !20318 net: hns3: check pf tc cfg when setting vf tc - !20522 CVE-2022-50616 - !20423 use SYS_CNTVCTSS_EL0 for gettimeofday - regulator: core: Fix resolve supply lookup issue - regulator: core: Use different devices for resource allocation and DT lookup - !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO. - !19965 nvme-fc: use lock accessing port_state and rport state - !20226 leapraid: supports LeapRaid controller - !20436 fix CVE-2026-22998 - rcu: Protect ->defer_qs_iw_pending from data race - !20449 scsi/hiraid: Support New Raid feature - !20252 ntfs: set dummy blocksize to read boot_block when mounting - !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc - !20335 Fix CVE-2025-37947 - mm: Add PAGE_ALIGN_DOWN macro - soc cache: fix walk page parameter and drop incorrect check - soc cache: Fix incorrect error path of ioctl - soc cache: Fix incorrect size validation - soc cache: Enforce maintain type check - soc cache: Modify default config to compile HiSilicon SoC cache driver - !19858 [OLK-5.10] perf support for HiSilicon HIP12 - !20331 Fix CVE-2025-39835 - !20439 Fix CVE-2025-39945 - !20251 Fix CVE-2025-38480 - !20184 Fix CVE-2025-37770 - !20185 Fix CVE-2022-49829 - !20183 Fix CVE-2025-23138 - !20240 Fix CVE-2025-21981 - !20409 net: xfrm: Fix CVE-2025-40215 - !20408 net: xfrm: Fix CVE-2025-39797 - !20407 netfilter: allow exp not to be removed in nf_ct_find_expectation - !20406 bpf, sockmap: Avoid using sk_socket after free when sending - !20405 can: bcm: add locking for bcm_op runtime updates - !20404 RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent - scsi/hiraid: Support New Raid feature - !19950 【OLK-5.10】 Drivers GPU Patches from 6.6 - !20422 driver core: fix potential null-ptr-deref in device_add() - cnic: Fix use-after-free bugs in cnic_delete_task - !20421 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - !20420 usb: early: xhci-dbc: Fix a potential out-of-bound memory access - !20418 drivers: base: Free devm resources when unregistering a device - !20417 driver core: fix resource leak in device_add() - !20416 Fix CVE-2022-49309 - !20415 kernel/resource: fix kfree() of bootmem memory again - !20414 drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - !20413 of: check previous kernel's ima-kexec-buffer against memory bounds - !20412 HID: core: Harden s32ton() against conversion to 0 bits - !20411 iommu/amd: Avoid stack buffer overflow from kernel cmdline - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvmet-tcp: remove boilerplate code - !20390 drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - vdso: do cntvct workaround in the VDSO - arm64: vdso: remove two .altinstructions related symbols - arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday - arm64: alternative: patch alternatives in the vDSO - arm64: module: move find_section to header - driver core: fix potential null-ptr-deref in device_add() - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - usb: early: xhci-dbc: Fix a potential out-of-bound memory access - drivers: base: Free devm resources when unregistering a device - driver core: fix resource leak in device_add() - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() - !20383 usb: cdns3: fix random warning message when driver load - kernel/resource: fix kfree() of bootmem memory again - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - of: check previous kernel's ima-kexec-buffer against memory bounds - HID: core: Harden s32ton() against conversion to 0 bits - !19959 【OLK-5.10】Support NMI Watchdog - iommu/amd: Avoid stack buffer overflow from kernel cmdline - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfrm: Duplicate SPI Handling - netfilter: allow exp not to be removed in nf_ct_find_expectation - bpf, sockmap: Avoid using sk_socket after free when sending - can: bcm: add locking for bcm_op runtime updates - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation. - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh - watchdog/perf: Provide function for adjusting the event period - config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64 - irqchip/gic-v3: Fix one race condition due to NMI withdraw - watchdog: Fix call trace when failed to initialize sdei - watchdog: Support watchdog_sdei coexist with existing watchdogs - init: only move down lockup_detector_init() when sdei_watchdog is enabled - arm64: enable perf events based hard lockup detector - arm64: add hw_nmi_get_sample_period for preparation of lockup detector - usb: cdns3: fix random warning message when driver load - !20051 smb3: fix for slab out of bounds on mount to ksmbd - comedi: Fix use of uninitialized data in insn_rw_emulate_bits() - watch_queue: fix pipe accounting mismatch - drm/amd/pm/powerplay: Prevent division by zero - !20357 ext4: fix e4b bitmap inconsistency reports - ice: fix memory leak in aRFS after reset - drm/hisilicon/hibmc: hibmc-drm bugfix for DP - !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6 - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel - drm/hisilicon/hibmc: Add vga connector detect functions - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp - drm/hisilicon/hibmc: Add dp serdes cfg in dp process - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis - drm/hisilicon/hibmc: Restructuring the header dp_reg.h - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers - drm/ast: Implement polling for VGA and SIL164 connectors - drm/sysfs: Register "ddc" symlink later - drm/hisilicon/hibmc: add dp module in hibmc - drm/hisilicon/hibmc: refactored struct hibmc_drm_private - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers - drm/hisilicon/hibmc: add dp aux in hibmc drivers - gic: increase the arch_timer priority to avoid hardlockup - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803 - drm/scheduler: fix fence ref counting - !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology - ext4: fix e4b bitmap inconsistency reports - !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction - !20256 Fix CVE-2025-39828 - !20339 wifi: prevent A-MSDU attacks in mesh networks - wifi: prevent A-MSDU attacks in mesh networks - ksmbd: fix stream write failure - ksmbd: prevent out-of-bounds stream writes by validating *pos - xfs: do not propagate ENODATA disk errors into xattr code - net: hns3: check pf tc cfg when setting vf tc - net: hns3: support tc limit speed - net: hns3: the multi-tcs VF can be configured only when the interface is down - irqchip/gic-v3-its: Remove DevID Pool's restriction - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *' - perf: Update .gitignore file - perf stat: Enable iostat mode for x86 platforms - perf stat: Helper functions for PCIe root ports list in iostat mode - perf: Fix tt_core mismatch over PG CPU - perf iostat: Use system-wide mode if the target cpu_list is unspecified - perf arm_spe: Correct memory level for remote access - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU - Documentation: hisi-pmu: Fix of minor format error - drivers/perf: hisi: Add support for L3C PMU v3 - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - arm64: topology: Setup amu fie when cpu hotplugging - topology: Set capacity_freq_ref in all cases - arm64/amu: Use capacity_ref_freq() to set AMU ratio - cpufreq/cppc: Set the frequency used for computing the capacity - cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}() - energy_model: Use a fixed reference frequency - cpufreq/schedutil: Use a fixed reference frequency - cpufreq: Use the fixed and coherent frequency for scaling capacity - sched/topology: Add a new arch_scale_freq_ref() method - arch_topology: Introduce thermal pressure update function - riscv: export cpu/freq invariant to scheduler - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() - cpufreq: Allow drivers to advertise boost enabled - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' - openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix unused-function warning - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: ACPI: Mark boost policy as enabled when setting boost - cpufreq: ACPI: Only set boost MSRs on supported CPUs - cpufreq: ACPI: Defer setting boost MSRs - cpufreq: acpi: Remove acpi_cpufreq_cpu_ready() - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw() - Documentation: power: Add description about new callback for EM registration - arch_topology: Avoid use-after-free for scale_freq_data - cpufreq: Exit governor when failed to start old governor - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() - cpufreq: Initialize cpufreq-based frequency-invariance later - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost - cpufreq: Remove duplicate check in __cpufreq_offline() - cpufreq: Don't unregister cpufreq cooling on CPU hotplug - cpufreq: Remove the ->stop_cpu() driver callback - cpufreq: intel_pstate: Combine ->stop_cpu() and ->offline() - cpufreq: powernv: Migrate to ->exit() callback instead of ->stop_cpu() - docs/zh_CN: add cpu-freq cpu-drivers.rst translation - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() - cpufreq: CPPC: Do not return a value from populate_efficiency_class() - cpufreq: CPPC: Remove cpu_data_list - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate() - cpufreq: CPPC: Register EM based on efficiency class information - PM: EM: Change the order of arguments in the .active_power() callback - cpufreq: Add callback to register with energy model - PM: EM: Add .get_cost() callback - cpufreq: CPPC: Add per_cpu efficiency_class - cpufreq: remove useless INIT_LIST_HEAD() - ACPI: CPPC: Disable FIE if registers in PCC regions - ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate() - cpufreq: cppc: Fix invalid return value in .get() callback - cppc_cpufreq: Fix possible null pointer dereference - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn() - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus - cpufreq: CPPC: Add support for frequency invariance - arch_topology: Export arch_freq_scale and helpers - cpufreq: CPPC: Pass structure instance by reference - cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init - cpufreq: CPPC: Migrate to ->exit() callback instead of ->stop_cpu() - cppc_cpufreq: replace per-cpu data array with a list - cppc_cpufreq: expose information on frequency domains - cppc_cpufreq: clarify support for coordination types - arch_topology: Allow multiple entities to provide sched_freq_tick() callback - sched/topology,schedutil: Wrap sched domains rebuild - arch_topology: Rename freq_scale as arch_freq_scale - arm64: topology: Drop the useless update to per-cpu cycles - arm64: topology: Make AMUs work with modular cpufreq drivers - arm64: topology: Reorder init_amu_fie() a bit - arm64: topology: Avoid the have_policy check - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() - cpufreq: prevent NULL dereference in cpufreq_online() - cpufreq: CPPC: Fix wrong max_freq in policy initialization - cppc_cpufreq: simplify use of performance capabilities - cpufreq: Introduce a more generic way to set default per-policy boost flag - cpufreq: Fix re-boost issue after hotplugging a CPU - cpufreq: Support per-policy performance boost - ntfs: set dummy blocksize to read boot_block when mounting - leapraid: supports LeapRaid controller - perf mem: Count L2 HITM for c2c statistic - perf mem: Add statistics for peer snooping - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12 - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel - perf arm-spe: augment the data source type with neoverse_spe list - tools arm64: Import cputype.h - arm64: cputype: Add cputype definition for HIP12 - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface - drivers/perf: hisi: Add cacheable option for L3C PMU - perf: Remove unstable events for uncore L3C PMU - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu - perf iostat: hisi: Fix port range retrival - drivers/perf: hisi: Add support for L3C PMU v3 - drivers/perf: hisi: Refactor the event configuration of L3C PMU - drivers/perf: hisi: Extend the field of tt_core - drivers/perf: hisi: Extract the event filter check of L3C PMU - drivers/perf: hisi: Simplify the probe process of each L3C PMU version - drivers/perf: hisi: Export hisi_uncore_pmu_isr() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/perf: hisi: Add support for HiSilicon MN PMU driver - drivers/perf: hisi: Add support for HiSilicon NoC PMU - drivers/perf: hisi: Support PMUs with no interrupt - drivers/perf: hisi: Relax the event number check of v2 PMUs - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver - drivers/perf: hisi: Simplify the probe process for each DDRC version - drivers/perf: hisi: Delete redundant blank line of DDRC PMU - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier - drivers/perf: convert sysfs snprintf family to sysfs_emit - perf: hisi: Constify static struct attribute_group - perf/hisi: Constify static attribute_group structs - drivers/perf: hisi: Add a common function to retrieve topology from firmware - drivers/perf: hisi: Extract topology information to a separate structure - drivers/perf: hisi: Refactor the detection of associated CPUs - drivers/perf: hisi: Migrate to one online CPU if no associated one online - drivers/perf: hisi: Don't update the associated_cpus on CPU offline - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs - perf stat: Enable iostat mode for HiSilicon PCIe PMU - perf stat: Add struct perf_stat_aggr to perf_stat_evsel - perf stat: Display iostat headers correctly - perf stat: Don't display metric header for non-leader uncore events - perf stat: Basic support for iostat in perf - perf arm-spe: Refactor arm-spe to support operation packet type - perf arm-spe: Use SPE data source for neoverse cores - perf arm-spe: Don't set data source if it's not a memory operation - perf tools: Sync addition of PERF_MEM_SNOOPX_PEER - tools: arm64: Import sysreg.h - smb3: fix for slab out of bounds on mount to ksmbd - watchdog/perf: adapt the watchdog_perf interface for async model - watchdog/perf: add a weak function for an arch to detect if perf can use NMIs - irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed - irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked - irqchip/gic-v3: Implement FEAT_GICv3_NMI support - arm64/nmi: Add Kconfig for NMI - arm64/nmi: Add handling of superpriority interrupts as NMIs - arm64/irq: Document handling of FEAT_NMI in irqflags.h - arm64/entry: Don't call preempt_schedule_irq() with NMIs masked - arm64/nmi: Manage masking for superpriority interrupts along with DAIF - nvme-fc: use lock accessing port_state and rport state - KVM: arm64: Hide FEAT_NMI from guests - arm64/cpufeature: Detect PE support for FEAT_NMI - arm64/hyp-stub: Enable access to ALLINT - arm64/asm: Introduce assembly macros for managing ALLINT - arm64/sysreg: Add definitions for immediate versions of MSR ALLINT - arm64/booting: Document boot requirements for FEAT_NMI - irqchip/gic-v3: Fix priority mask handling - irqchip/gic-v3: Refactor ISB + EOIR at ack time - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 - soc cache: Add framework driver for HiSilicon SoC cache - !20333 phytium-tpcm-sig-8-hadler-reg-s5000c - !20767 Revert hibmc patches to fix null-ptr-deref - Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6" - Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert" - !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Code refactoring for hibmc_drm_drv - !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 & SM4 algorithm - !20666 CVE-2023-53712 - !20673 Fix CVE-2025-39957 - !20686 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20687 i40e: Fix potential invalid access when MAC list is empty - !20692 ipv6: sr: Fix MAC comparison to be constant-time - !20699 sctp: linearize cloned gso packets in sctp_rcv - !20688 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - !20698 libceph: fix potential use-after-free in have_mon_and_osd_map() - !20697 tipc: Fix use-after-free in tipc_mon_reinit_self(). - sctp: linearize cloned gso packets in sctp_rcv - libceph: fix potential use-after-free in have_mon_and_osd_map() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - ipv6: sr: Fix MAC comparison to be constant-time - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - i40e: Fix potential invalid access when MAC list is empty - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20119 Add 950 KVM feature support - !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration - !20638 ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - !20637 net/sched: sch_qfq: do not free existing class in qfq_change_class() - !20636 v2 macvlan: fix possible UAF in macvlan_forward_source() - wifi: mac80211: increase scan_ies_len for S1G - !20566 crypto: lzo - Fix compression buffer overrun - KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer - KVM: arm64: ipiv: Fix compilation warning - KVM: arm64: check if IPIV is enabled in BIOS - kvm: hisi: print error for IPIV - KVM: arm64: using kvm_vgic_global_state for ipiv - kvm: hisi: Don't allow to change mpidr in IPIv - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv - KVM: arm64: fix live migration bug of IPIv - irqchip/gic: Add HiSilicon PV SGI support - KVM: arm64: Implement PV_SGI related calls - KVM: arm64: Document PV-sgi interface - KVM: arm64: Introduce ipiv enable ioctl - arm64/config: add config to control whether enable IPIV feature - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12 - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE - kvm: hisi_virt: Register ipiv exception interrupt - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule - kvm: arm64: avoid sending multi-SGIs in IPIV - kvm: hisi_virt: Allocate VM table and save vpeid in it - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2 - KVM: arm64: fix memory leak in TLBI - KVM: arm64: Add new HiSi CPU type to support DVMBM - kvm: hisi_virt: Update TLBI broadcast feature for hip12 - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE - ARM: 9317/1: kexec: Make smp stop calls asynchronous - !20654 scsi: qla4xxx: Prevent a potential error pointer dereference - !20653 bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - !20655 mm/slub: avoid accessing metadata when pointer is invalid in object_err() - !20656 firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors - x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - mm/slub: avoid accessing metadata when pointer is invalid in object_err() - scsi: qla4xxx: Prevent a potential error pointer dereference - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - net/sched: sch_qfq: do not free existing class in qfq_change_class() - macvlan: fix possible UAF in macvlan_forward_source() - !20597 team: fix check for port enabled in team_queue_override_port_prio_changed() - !20593 CVE-2025-39744 fixup - !20465 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - !20178 v3 Fix CVE-2024-53179 - team: fix check for port enabled in team_queue_override_port_prio_changed() - rcu: Fix racy re-initialization of irq_work causing hangs - rcu: Fix rcu_read_unlock() deadloop due to IRQ work - rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs - !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts - !20428 wifi: mt76: do not run mt76u_status_worker if the device is not running - !20427 RDMA/bnxt_re: Prevent handling any completions after qp destroy - !20466 pptp: ensure minimal skb length in pptp_xmit() - !20426 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - !20574 RDMA/cm: Fix leaking the multicast GID table reference - !20573 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - !20565 Fix CVE-2023-53521 - !20521 Fix CVE-2026-23038 - RDMA/cm: Fix leaking the multicast GID table reference - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - crypto: lzo - Fix compression buffer overrun - !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() - eth: bnxt: move and rename reset helpers - x86: Resolve FPU state corruption between atomic and non-atomic contexts - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - bnxt_en: Fix potential data corruption with HW GRO/LRO - pptp: ensure minimal skb length in pptp_xmit() - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - wifi: mt76: do not run mt76u_status_worker if the device is not running - RDMA/bnxt_re: Prevent handling any completions after qp destroy - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - phytium: add tpcm sgi handler for s5000c - smb: client: fix use-after-free of signing key - cifs: missed ref-counting smb session in find - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode - crypto: ccp: Add support to switch to CSV RING_BUFFER mode - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues - openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI - crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm - crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm - !20737 pNFS: Fix a deadlock when returning a delegation during open() - !20725 tracing: Add recursion protection in kernel stack trace recording - !20746 Fix CVE-2026-22990 - !20671 arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - !20669 irqchip/gic-v3-its: Avoid truncating memory addresses - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - pNFS: Fix a deadlock when returning a delegation during open() - tracing: Add recursion protection in kernel stack trace recording - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - irqchip/gic-v3-its: Avoid truncating memory addresses - !20899 Fix CVE-2026-23216 - !20885 nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file - !20839 bpf, cpumap: Make sure kthread is running before map update returns - bpf, cpumap: Make sure kthread is running before map update returns - !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1 - !20818 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20801 ACPI/IORT: Add PMCG platform information for 162001900 - !20814 migrate: correct lock ordering for hugetlb file folios - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20800 fix CVE-2026-23054 - migrate: correct lock ordering for hugetlb file folios - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - net: hv_netvsc: reject RSS hash key programming without RX indirection table - hv_netvsc: Allocate rx indirection table size dynamically - RDMA/hns: Remove the accidentally added hns_roce_trace.h file - irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI - !21136 sched/rt: Skip currently executing CPU in rto_next_cpu() - !21131 procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21093 kexec: derive purgatory entry from symbol - !21140 ksmbd: fix use-after-free in kerberos authentication - !21132 SUNRPC: Ensure the transport backchannel association - ksmbd: fix use-after-free in kerberos authentication - sched/rt: Skip currently executing CPU in rto_next_cpu() - SUNRPC: Ensure the transport backchannel association - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21112 CVE-2024-57979 - !21111 ALSA: aloop: Fix racy access at PCM trigger - pps: Fix kabi in pps_device - pps: Fix a use-after-free - ALSA: aloop: Fix racy access at PCM trigger - kexec: derive purgatory entry from symbol - ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21072 v2 arm64/mpam: enable MPAM feature and - !20883 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - !21021 CVE-2026-23209 - arm64/mpam: fix the bitmap written during mpam device reset - arm64/mpam: only allow L3 cache MPAM device created - arm64/mpam: fix inadvertently updating after repeatedly updating - arm64/mpam: set default feedback of last_cmd_status interface as null string - !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured - !19837 KVM: Drop tlbs_dirty - !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !21014 bpf selftest cross compile fixes - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - macvlan: fix error recovery in macvlan_common_newlink() - !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - selftests/bpf: Pass target triple to get_sys_includes macro - selftests/bpf: Enable cross-building - net: hns3: hns3 driver should be initialized when VF multi tcs is configured - net: hns3: modify code of judging if SMMU DMA is enabled - !20976 support apei_page_offline_policy - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() - nvmet-tcp: don't map pages which can't come from HIGHMEM - nvmet-tcp: fix regression in data_digest calculation - nvmet-tcp: fix memory leak when performing a controller reset - !20971 Fix CVE-2026-23074 - apei/ghes: Add sysctl interface to control soft-offline page isolation - Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages" - !20887 HiSock Enhancement - net/sched: Enforce that teql can only be used as root qdisc - drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !20891 dcache: Limit the minimal number of bucket to two - !20956 CVE-2025-39967 - fbcon: Fix OOB access in font allocation - fbcon: fix integer overflow in fbcon_do_set_font - overflow: Allow mixed type arguments - nvmet-tcp: add an helper to free the cmd buffers - dcache: Limit the minimal number of bucket to two - bpf: Deprecate hisock unused helpers and orig ingress logic - bpf: Add local connect support for hisock - bpf: Add ipv4-mapped ipv6 addr support for hisock - bpf: Add target comm parse to hisock_cmd - bpf: Add multi port parse to hisock_cmd - bpf: Only deploy hisock in server - bpf: Apply BPF_HISOCK_INGRESS to hisock ingress - bpf: Add bpf_handle_ingress/egress_ptype helper function - bpf: Add bpf_set_ingress/egress_dev helper function - bpf: Add bpf_get_skb_ethhdr helper function - bpf: Add bpf_set_ingress_dst helper function - bpf: Add BPF_HISOCK_INGRESS attach type - net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - KVM: Drop tlbs_dirty - !21262 arm64/mpam: Extending MPAM features and bugfix - arm64/mpam: Allow MBMIN to be set to 0 - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit - arm64/mpam: Add quirk to shrink MATA PMG range - !21211 scsi: hisi_sas: Change the debugfs parameters dump count default value - scsi: hisi_sas: Change the debugfs parameters dump count default value - !21163 gic: Add hip09 support for HISILICON_ERRATUM_165010801 - gic: Add hip09 support for HISILICON_ERRATUM_165010801 - !19740 merge refs/pull/19740/head into OLK-5.10 - !19764 merge patch-1766387978 into OLK-5.10 - hisi: l3t: enable l3t with specific cpuid - !19705 [OLK-5.10]:update patches for sw64 architecture - !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct - !19372 padata: Fix pd UAF once and for all - !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation - !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS - net: atlantic: fix fragment overflow handling in RX path - !19736 locking/rwsem: Optimize down_read_trylock() under highly contended case - locking/rwsem: Optimize down_read_trylock() under highly contended case - !19724 mm/mem_reliable: use percise count during limit check - mm/mem_reliable: use percise count during limit check - !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - !19614 NFSD: Fix crash in nfsd4_read_release() - !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19673 firewire: net: fix use after free in fwnet_finish_incoming_packet() - sw64: set PTBR_SYS before accessing vmalloc area - sw64: set execute permission for virtual machine's hmcode text section - sw64: fix simd version of copy/clear_page() - sw64: fix random mmap base range - firewire: net: fix use after free in fwnet_finish_incoming_packet() - NFSD: Fix crash in nfsd4_read_release() - crypto: ccp: add ccp-mdev functionality to the ccp module. - padata: Fix pd UAF once and for all - KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access - KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer - KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests - KVM: x86: Pass emulation type to can_emulate_instruction() - KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support - KVM: SVM: Don't intercept #GP for SEV guests - swiotlb: do not zero buffer in set_memory_decrypted() - crypto: ccp - Add SEV_INIT rc error logging on init - dma-direct: always leak memory that can't be re-encrypted - dma-direct: factor out dma_set_{de,en}crypted helpers - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits - KVM: SEV-ES: fix another issue with string I/O VMGEXITs - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed - KVM: SEV-ES: keep INS functions together - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in - KVM: x86: split the two parts of emulator_pio_in - KVM: SEV-ES: clean up kvm_sev_es_ins/outs - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out - KVM: SEV-ES: rename guest_ins_data to sev_pio_data - KVM: SEV-ES: fix length of string I/O - x86/sev-es: Do not unroll string I/O for SEV-ES guests - x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs - !19833 merge patch-1766715015 into OLK-5.10 - !19911 merge patch-1767492639 into OLK-5.10 - !19635 merge refs/pull/19635/head into OLK-5.10 - !19903 merge patch-1767161454 into OLK-5.10 - !19864 merge patch-1766990471 into OLK-5.10 - !19865 merge patch-1766990523 into OLK-5.10 - mm: mem_reliable: prevent excessive direct reclaim loops - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - !19899 merge patch-1767098709 into OLK-5.10 - erofs: validate the extent length for uncompressed pclusters - !19885 merge patch-1767076771 into OLK-5.10 - !19876 merge patch-1767011340 into OLK-5.10 - scsi: qla2xxx: Clear cmds after chip reset - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - !19856 merge patch-1766976937 into OLK-5.10 - !19857 merge patch-1766976979 into OLK-5.10 - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private - virtio-net: ensure the received length does not exceed allocated size - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - tracing: Fix memory leaks in create_field_var() - !19760 merge patch-1766370959 into OLK-5.10 - !19786 merge patch-1766474397 into OLK-5.10 - !19548 merge refs/pull/19548/head into OLK-5.10 - ext4: xattr: fix null pointer deref in ext4_raw_inode() - !19739 merge refs/pull/19739/head into OLK-5.10 - !19732 merge refs/pull/19732/head into OLK-5.10 - !19719 merge refs/pull/19719/head into OLK-5.10 - bnxt_en: Fix memory corruption when FW resources change during ifdown - bnxt_en: Fix possible crash after creating sw mqprio TCs - x86/fpu: Ensure XFD state on signal delivery - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - usb: storage: Fix memory leak in USB bulk transport - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() - cpufreq: ACPI: Fix max-frequency computation - tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes - tools headers: Update tools's copy of x86/asm headers - tools headers cpufeatures: Sync with the kernel sources - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - !19798 merge OLK-5.10 into OLK-5.10 - !19972 merge patch-1767691219 into OLK-5.10 - !19974 merge patch-1767691279 into OLK-5.10 - !19973 merge patch-1767691254 into OLK-5.10 - !19713 merge refs/pull/19713/head into OLK-5.10 - !19832 merge OLK-5.10-ringbuffer into OLK-5.10 - qed: Don't collect too many protection override GRC elements - i40e: fix validation of VF state in get resources - i40e: fix input validation logic for action_meta - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() - KVM: SVM: Skip SEV cache flush if no ASIDs have been used - KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities - x86/sev: Make enc_dec_hypercall() accept a size instead of npages - mm: x86: Fix kabi breakage of pv_ops - KVM: x86: Play nice with protected guests in complete_hypercall_exit() - KVM: x86: Assume a 64-bit hypercall for guests with protected state - KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids() - KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa - x86/kvm: Add kexec support for SEV Live Migration. - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. - EFI: Introduce the new AMD Memory Encryption GUID. - mm: x86: Invoke hypercall when page encryption status is changed - x86/kvm: Add AMD SEV specific Hypercall3 - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA - KVM: SVM: fix missing sev_decommission in sev_receive_start - KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall - KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command - KVM: SVM: Add support for KVM_SEV_RECEIVE_START command - KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command - KVM: SVM: Add KVM_SEV_SEND_FINISH command - KVM: SVM: Add KVM_SEND_UPDATE_DATA command - KVM: SVM: Add KVM_SEV SEND_START command - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19047 [OLK-5.10] Fix CVE-2025-39839 - !18614 [OLK-5.10] Fix CVE-2025-39737 - !18654 [OLK-5.10] Fix CVE-2025-38705 - !18782 【OLK-5.10】fix CVE-2025-38712 - !18612 [OLK-5.10] Fix CVE-2025-38713 - !18635 [OLK-5.10] Fix CVE-2025-38714 - !18862 [OLK-5.10] Fix CVE-2025-38697 - !20058 CVE-2025-38111 - !20131 wifi: cfg80211: fix use-after-free in cmp_bss() - !20306 mm/kmemleak: move up cond_resched() call in page scanning loop - !20309 hwmon: constify pointers to hwmon_channel_info - hwmon: fix kabi of struct hwmon_channel_info - !20338 mlxsw: spectrum_router: Fix neighbour use-after-free - !20337 mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - hwmon: constify pointers to hwmon_channel_info - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - !20316 um: virtio_uml: Fix use-after-free after put_device in probe - !20114 KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc - um: virtio_uml: Fix use-after-free after put_device in probe - !20300 software node: Correct a OOB check in software_node_get_reference_args() - !20299 jfs: add sanity check for agwidth in dbMount - !20278 iavf: fix off-by-one issues in iavf_config_rss_reg() - !20277 e1000: fix OOB in e1000_tbi_should_accept() - !20285 hwmon: (ibmpex) fix use-after-free in high/low store - mm/kmemleak: move up cond_resched() call in page scanning loop - !19953 【OLK-5.10】 power_meter patchs from 6.6 - software node: Correct a OOB check in software_node_get_reference_args() - jfs: add sanity check for agwidth in dbMount - hwmon: (ibmpex) fix use-after-free in high/low store - !20269 drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !20271 KVM: x86: use array_index_nospec with indices that come from guest - !19788 ima: Handle error code returned by ima_filter_rule_match() - iavf: fix off-by-one issues in iavf_config_rss_reg() - e1000: fix OOB in e1000_tbi_should_accept() - !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver - !20203 drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - !20202 scsi: qla2xxx: Fix premature hw access after PCI error - !19728 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09 - KVM: x86: use array_index_nospec with indices that come from guest - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - RDMA/hns: Support config and query the CNP DSCP for HIP09 - !20221 Revert "RDMA/hns: Fix mismatch exception rollback" - !20195 ACPI: APEI: Handle repeated SEA error interrupts storm - !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes - Revert "RDMA/hns: Fix mismatch exception rollback" - RDMA/hns: Support drain SQ and RQ - RDMA/hns: Return actual error code instead of fixed EINVAL - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Fix RoCEv1 failure due to DSCP - !20161 cifs: fix session state check in reconnect to avoid use-after-free issue - !20050 smb: client: Fix use-after-free in cifs_fill_dirent - !19834 v2 md/raid0, raid10: Don't set discard sectors for request queue - !19816 scsi: sg: Do not sleep in atomic context - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - scsi: qla2xxx: Fix premature hw access after PCI error - ACPI: APEI: Handle repeated SEA error interrupts storm - !20150 tracing: Do not register unsupported perf events - !20163 tracing: Fix enabling of tracing on file release - !19938 net: hns3: add VLAN id validation before using - !19836 [OLK-5.10] Fixes for SEV-ES Guest Support - !20044 【openEuler-22.03-LTS-SP4】Memory copy error - !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2 - !20025 [OLK-5.10]Support SMT control on arm64. - !19922 NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - !19985 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - !19996 net: netpoll: fix incorrect refcount handling causing incorrect cleanup - !19908 drivers:misc:sdma-dae: add NULL judgement of global variables - !20026 fs/buffer: fix use-after-free when call bh_read() helper - !19962 i40e: add max boundary check for VF filters - !20103 kmemleak: Fix kmemleak false warnings - !20169 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - !20052 CVE-2024-21823 - !18962 erofs: Fix erofs_bmap error - !20016 kernfs: Fix UAF issue - !19694 ARM: fix hash_name() issue - !20048 VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - !20065 Fix CVE-2022-50737 - !20066 smb: client: fix race with concurrent opens in rename(2) - !20151 v2 Fix CVE-2025-40016 - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems - ACPI: IPMI: Add helper to wait for when SMI is selected - hwmon: (acpi_power_meter) Fix the fake power alarm reporting - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices(). - hwmon: (acpi_power_meter) Fix update the power trip points on failure - hwmon: (acpi_power_meter) Fix uninitialized variables - !20047 crypto: af_alg - Set merge to zero early in af_alg_sendmsg - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method - hwmon: (acpi_power_meter) replace open-coded kmemdup_nul - hwmon: (acpi_power_meter) Fix style issues - hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device() - hwmon: acpi_power_meter: Get rid of ACPICA message printing - ACPI: utils: Introduce acpi_evaluation_failure_warn() - ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE - hwmon: (acpi_power_meter) clean up freeing code - x86/sev: merge continuous pages into a large range when notifying range enc status changes - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - tracing: Fix enabling of tracing on file release - cifs: fix session state check in reconnect to avoid use-after-free issue - media: uvcvideo: Use heuristic to find stream entity - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Allow extra entities - tracing: Do not register unsupported perf events - wifi: cfg80211: fix use-after-free in cmp_bss() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - arm64: kdump: fix kmemleak unknown object warning when crash base is set - arm64: kdump: fix kmemleak unknown object warning - x86/sev: Use "SEV: " prefix for messages from sev.c - x86/sev: Propagate #GP if getting linear instruction address failed - smb: client: fix race with concurrent opens in rename(2) - fs/ntfs3: Add null pointer checks - fs/ntfs3: Validate buffer length while parsing index - fs/ntfs3: Validate index root when initialize NTFS security - net/mdiobus: Fix potential out-of-bounds read/write access - net: mdio: C22 is now optional, EOPNOTSUPP if not provided - dmaengine: idxd: Fix ->poll() return value - dmaengine: idxd: Fix allowing write() from different address spaces - dmaengine: idxd: Fix passing freed memory in idxd_cdev_open() - dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling - dmaengine: idxd: add per DSA wq workqueue for processing cr faults - dmaengine: idxd: add a write() method for applications to submit work - dmaengine: idxd: add a new security check to deal with a hardware erratum - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist - smb: client: Fix use-after-free in cifs_fill_dirent - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench' - x86: don't use REP_GOOD or ERMS for small memory clearing - x86: don't use REP_GOOD or ERMS for small memory copies - fs/buffer: fix use-after-free when call bh_read() helper - powerpc/kexec: Enable SMT before waking offline CPUs - cpu/SMT: Enable SMT only if a core is online - cpu/SMT: Create topology_smt_thread_allowed() - powerpc/topology: Check if a core is online - config: enable CONFIG_HOTPLUG_SMT for arm64 - arm64: Kconfig: Enable HOTPLUG_SMT - arm64: topology: Support SMT control on ACPI based system - arch_topology: Support SMT control for OF based system - cpu/SMT: Provide a default topology_is_primary_thread() - powerpc: Add HOTPLUG_SMT support - Revert "arm64: Kconfig: Enable HOTPLUG_SMT" - kernfs: Fix kabi broken in struct kernfs_root - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir(). - kernfs: fix potential NULL dereference in __kernfs_remove - kernfs: fix NULL dereferencing in kernfs_remove - kernfs: remove redundant kernfs_rwsem declaration. - kernfs: prevent early freeing of root node - kernfs: switch global kernfs_rwsem lock to per-fs lock - KVM: SVM: Make sure GHCB is mapped before updating - KVM: SVM: check CR4 changes against vcpu->arch - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests - x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]() - x86/sev: Fix error message in runtime #VC handler - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - i40e: add max boundary check for VF filters - net: hns3: add VLAN id validation before using - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled - ACPI: thermal: Move to dedicated function sysfs extra attr creation - ACPI: thermal: Use thermal_zone_device() - thermal: core: Encapsulate tz->device field - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - drivers:misc:sdma-dae: add NULL judgement of global variables - md/raid0, raid10: Don't set discard sectors for request queue - scsi: sg: Do not sleep in atomic context - ima: Handle error code returned by ima_filter_rule_match() - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - ARM: fix hash_name() fault - ARM: allow __do_kernel_fault() to report execution of memory faults - configs: enable CONFIG_MICROCODE_ZHAOXIN - x86/microcode: Add Zhaoxin cpu microcode update driver - drm/amd/pm: fix null pointer access - batman-adv: fix OOB read/write in network-coding decode - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - erofs: Fix erofs_bmap error - jfs: upper bound check of tree index in dbAllocAG - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - !20464 rcu: Protect ->defer_qs_iw_pending from data race - !20318 net: hns3: check pf tc cfg when setting vf tc - !20522 CVE-2022-50616 - !20423 use SYS_CNTVCTSS_EL0 for gettimeofday - regulator: core: Fix resolve supply lookup issue - regulator: core: Use different devices for resource allocation and DT lookup - !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO. - !19965 nvme-fc: use lock accessing port_state and rport state - !20226 leapraid: supports LeapRaid controller - !20436 fix CVE-2026-22998 - rcu: Protect ->defer_qs_iw_pending from data race - !20449 scsi/hiraid: Support New Raid feature - !20252 ntfs: set dummy blocksize to read boot_block when mounting - !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc - !20335 Fix CVE-2025-37947 - mm: Add PAGE_ALIGN_DOWN macro - soc cache: fix walk page parameter and drop incorrect check - soc cache: Fix incorrect error path of ioctl - soc cache: Fix incorrect size validation - soc cache: Enforce maintain type check - soc cache: Modify default config to compile HiSilicon SoC cache driver - !19858 [OLK-5.10] perf support for HiSilicon HIP12 - !20331 Fix CVE-2025-39835 - !20439 Fix CVE-2025-39945 - !20251 Fix CVE-2025-38480 - !20184 Fix CVE-2025-37770 - !20185 Fix CVE-2022-49829 - !20183 Fix CVE-2025-23138 - !20240 Fix CVE-2025-21981 - !20409 net: xfrm: Fix CVE-2025-40215 - !20408 net: xfrm: Fix CVE-2025-39797 - !20407 netfilter: allow exp not to be removed in nf_ct_find_expectation - !20406 bpf, sockmap: Avoid using sk_socket after free when sending - !20405 can: bcm: add locking for bcm_op runtime updates - !20404 RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent - scsi/hiraid: Support New Raid feature - !19950 【OLK-5.10】 Drivers GPU Patches from 6.6 - !20422 driver core: fix potential null-ptr-deref in device_add() - cnic: Fix use-after-free bugs in cnic_delete_task - !20421 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - !20420 usb: early: xhci-dbc: Fix a potential out-of-bound memory access - !20418 drivers: base: Free devm resources when unregistering a device - !20417 driver core: fix resource leak in device_add() - !20416 Fix CVE-2022-49309 - !20415 kernel/resource: fix kfree() of bootmem memory again - !20414 drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - !20413 of: check previous kernel's ima-kexec-buffer against memory bounds - !20412 HID: core: Harden s32ton() against conversion to 0 bits - !20411 iommu/amd: Avoid stack buffer overflow from kernel cmdline - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvmet-tcp: remove boilerplate code - !20390 drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - vdso: do cntvct workaround in the VDSO - arm64: vdso: remove two .altinstructions related symbols - arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday - arm64: alternative: patch alternatives in the vDSO - arm64: module: move find_section to header - driver core: fix potential null-ptr-deref in device_add() - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - usb: early: xhci-dbc: Fix a potential out-of-bound memory access - drivers: base: Free devm resources when unregistering a device - driver core: fix resource leak in device_add() - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() - !20383 usb: cdns3: fix random warning message when driver load - kernel/resource: fix kfree() of bootmem memory again - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - of: check previous kernel's ima-kexec-buffer against memory bounds - HID: core: Harden s32ton() against conversion to 0 bits - !19959 【OLK-5.10】Support NMI Watchdog - iommu/amd: Avoid stack buffer overflow from kernel cmdline - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfrm: Duplicate SPI Handling - netfilter: allow exp not to be removed in nf_ct_find_expectation - bpf, sockmap: Avoid using sk_socket after free when sending - can: bcm: add locking for bcm_op runtime updates - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation. - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh - watchdog/perf: Provide function for adjusting the event period - config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64 - irqchip/gic-v3: Fix one race condition due to NMI withdraw - watchdog: Fix call trace when failed to initialize sdei - watchdog: Support watchdog_sdei coexist with existing watchdogs - init: only move down lockup_detector_init() when sdei_watchdog is enabled - arm64: enable perf events based hard lockup detector - arm64: add hw_nmi_get_sample_period for preparation of lockup detector - usb: cdns3: fix random warning message when driver load - !20051 smb3: fix for slab out of bounds on mount to ksmbd - comedi: Fix use of uninitialized data in insn_rw_emulate_bits() - watch_queue: fix pipe accounting mismatch - drm/amd/pm/powerplay: Prevent division by zero - !20357 ext4: fix e4b bitmap inconsistency reports - ice: fix memory leak in aRFS after reset - drm/hisilicon/hibmc: hibmc-drm bugfix for DP - !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6 - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel - drm/hisilicon/hibmc: Add vga connector detect functions - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp - drm/hisilicon/hibmc: Add dp serdes cfg in dp process - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis - drm/hisilicon/hibmc: Restructuring the header dp_reg.h - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers - drm/ast: Implement polling for VGA and SIL164 connectors - drm/sysfs: Register "ddc" symlink later - drm/hisilicon/hibmc: add dp module in hibmc - drm/hisilicon/hibmc: refactored struct hibmc_drm_private - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers - drm/hisilicon/hibmc: add dp aux in hibmc drivers - gic: increase the arch_timer priority to avoid hardlockup - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803 - drm/scheduler: fix fence ref counting - !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology - ext4: fix e4b bitmap inconsistency reports - !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction - !20256 Fix CVE-2025-39828 - !20339 wifi: prevent A-MSDU attacks in mesh networks - wifi: prevent A-MSDU attacks in mesh networks - ksmbd: fix stream write failure - ksmbd: prevent out-of-bounds stream writes by validating *pos - xfs: do not propagate ENODATA disk errors into xattr code - net: hns3: check pf tc cfg when setting vf tc - net: hns3: support tc limit speed - net: hns3: the multi-tcs VF can be configured only when the interface is down - irqchip/gic-v3-its: Remove DevID Pool's restriction - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *' - perf: Update .gitignore file - perf stat: Enable iostat mode for x86 platforms - perf stat: Helper functions for PCIe root ports list in iostat mode - perf: Fix tt_core mismatch over PG CPU - perf iostat: Use system-wide mode if the target cpu_list is unspecified - perf arm_spe: Correct memory level for remote access - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU - Documentation: hisi-pmu: Fix of minor format error - drivers/perf: hisi: Add support for L3C PMU v3 - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - arm64: topology: Setup amu fie when cpu hotplugging - topology: Set capacity_freq_ref in all cases - arm64/amu: Use capacity_ref_freq() to set AMU ratio - cpufreq/cppc: Set the frequency used for computing the capacity - cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}() - energy_model: Use a fixed reference frequency - cpufreq/schedutil: Use a fixed reference frequency - cpufreq: Use the fixed and coherent frequency for scaling capacity - sched/topology: Add a new arch_scale_freq_ref() method - arch_topology: Introduce thermal pressure update function - riscv: export cpu/freq invariant to scheduler - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() - cpufreq: Allow drivers to advertise boost enabled - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' - openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix unused-function warning - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: ACPI: Mark boost policy as enabled when setting boost - cpufreq: ACPI: Only set boost MSRs on supported CPUs - cpufreq: ACPI: Defer setting boost MSRs - cpufreq: acpi: Remove acpi_cpufreq_cpu_ready() - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw() - Documentation: power: Add description about new callback for EM registration - arch_topology: Avoid use-after-free for scale_freq_data - cpufreq: Exit governor when failed to start old governor - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() - cpufreq: Initialize cpufreq-based frequency-invariance later - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost - cpufreq: Remove duplicate check in __cpufreq_offline() - cpufreq: Don't unregister cpufreq cooling on CPU hotplug - cpufreq: Remove the ->stop_cpu() driver callback - cpufreq: intel_pstate: Combine ->stop_cpu() and ->offline() - cpufreq: powernv: Migrate to ->exit() callback instead of ->stop_cpu() - docs/zh_CN: add cpu-freq cpu-drivers.rst translation - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() - cpufreq: CPPC: Do not return a value from populate_efficiency_class() - cpufreq: CPPC: Remove cpu_data_list - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate() - cpufreq: CPPC: Register EM based on efficiency class information - PM: EM: Change the order of arguments in the .active_power() callback - cpufreq: Add callback to register with energy model - PM: EM: Add .get_cost() callback - cpufreq: CPPC: Add per_cpu efficiency_class - cpufreq: remove useless INIT_LIST_HEAD() - ACPI: CPPC: Disable FIE if registers in PCC regions - ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate() - cpufreq: cppc: Fix invalid return value in .get() callback - cppc_cpufreq: Fix possible null pointer dereference - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn() - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus - cpufreq: CPPC: Add support for frequency invariance - arch_topology: Export arch_freq_scale and helpers - cpufreq: CPPC: Pass structure instance by reference - cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init - cpufreq: CPPC: Migrate to ->exit() callback instead of ->stop_cpu() - cppc_cpufreq: replace per-cpu data array with a list - cppc_cpufreq: expose information on frequency domains - cppc_cpufreq: clarify support for coordination types - arch_topology: Allow multiple entities to provide sched_freq_tick() callback - sched/topology,schedutil: Wrap sched domains rebuild - arch_topology: Rename freq_scale as arch_freq_scale - arm64: topology: Drop the useless update to per-cpu cycles - arm64: topology: Make AMUs work with modular cpufreq drivers - arm64: topology: Reorder init_amu_fie() a bit - arm64: topology: Avoid the have_policy check - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() - cpufreq: prevent NULL dereference in cpufreq_online() - cpufreq: CPPC: Fix wrong max_freq in policy initialization - cppc_cpufreq: simplify use of performance capabilities - cpufreq: Introduce a more generic way to set default per-policy boost flag - cpufreq: Fix re-boost issue after hotplugging a CPU - cpufreq: Support per-policy performance boost - ntfs: set dummy blocksize to read boot_block when mounting - leapraid: supports LeapRaid controller - perf mem: Count L2 HITM for c2c statistic - perf mem: Add statistics for peer snooping - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12 - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel - perf arm-spe: augment the data source type with neoverse_spe list - tools arm64: Import cputype.h - arm64: cputype: Add cputype definition for HIP12 - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface - drivers/perf: hisi: Add cacheable option for L3C PMU - perf: Remove unstable events for uncore L3C PMU - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu - perf iostat: hisi: Fix port range retrival - drivers/perf: hisi: Add support for L3C PMU v3 - drivers/perf: hisi: Refactor the event configuration of L3C PMU - drivers/perf: hisi: Extend the field of tt_core - drivers/perf: hisi: Extract the event filter check of L3C PMU - drivers/perf: hisi: Simplify the probe process of each L3C PMU version - drivers/perf: hisi: Export hisi_uncore_pmu_isr() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/perf: hisi: Add support for HiSilicon MN PMU driver - drivers/perf: hisi: Add support for HiSilicon NoC PMU - drivers/perf: hisi: Support PMUs with no interrupt - drivers/perf: hisi: Relax the event number check of v2 PMUs - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver - drivers/perf: hisi: Simplify the probe process for each DDRC version - drivers/perf: hisi: Delete redundant blank line of DDRC PMU - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier - drivers/perf: convert sysfs snprintf family to sysfs_emit - perf: hisi: Constify static struct attribute_group - perf/hisi: Constify static attribute_group structs - drivers/perf: hisi: Add a common function to retrieve topology from firmware - drivers/perf: hisi: Extract topology information to a separate structure - drivers/perf: hisi: Refactor the detection of associated CPUs - drivers/perf: hisi: Migrate to one online CPU if no associated one online - drivers/perf: hisi: Don't update the associated_cpus on CPU offline - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs - perf stat: Enable iostat mode for HiSilicon PCIe PMU - perf stat: Add struct perf_stat_aggr to perf_stat_evsel - perf stat: Display iostat headers correctly - perf stat: Don't display metric header for non-leader uncore events - perf stat: Basic support for iostat in perf - perf arm-spe: Refactor arm-spe to support operation packet type - perf arm-spe: Use SPE data source for neoverse cores - perf arm-spe: Don't set data source if it's not a memory operation - perf tools: Sync addition of PERF_MEM_SNOOPX_PEER - tools: arm64: Import sysreg.h - smb3: fix for slab out of bounds on mount to ksmbd - watchdog/perf: adapt the watchdog_perf interface for async model - watchdog/perf: add a weak function for an arch to detect if perf can use NMIs - irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed - irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked - irqchip/gic-v3: Implement FEAT_GICv3_NMI support - arm64/nmi: Add Kconfig for NMI - arm64/nmi: Add handling of superpriority interrupts as NMIs - arm64/irq: Document handling of FEAT_NMI in irqflags.h - arm64/entry: Don't call preempt_schedule_irq() with NMIs masked - arm64/nmi: Manage masking for superpriority interrupts along with DAIF - nvme-fc: use lock accessing port_state and rport state - KVM: arm64: Hide FEAT_NMI from guests - arm64/cpufeature: Detect PE support for FEAT_NMI - arm64/hyp-stub: Enable access to ALLINT - arm64/asm: Introduce assembly macros for managing ALLINT - arm64/sysreg: Add definitions for immediate versions of MSR ALLINT - arm64/booting: Document boot requirements for FEAT_NMI - irqchip/gic-v3: Fix priority mask handling - irqchip/gic-v3: Refactor ISB + EOIR at ack time - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 - soc cache: Add framework driver for HiSilicon SoC cache - !20333 phytium-tpcm-sig-8-hadler-reg-s5000c - !20767 Revert hibmc patches to fix null-ptr-deref - Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6" - Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert" - !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Code refactoring for hibmc_drm_drv - !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 & SM4 algorithm - !20666 CVE-2023-53712 - !20673 Fix CVE-2025-39957 - !20686 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20687 i40e: Fix potential invalid access when MAC list is empty - !20692 ipv6: sr: Fix MAC comparison to be constant-time - !20699 sctp: linearize cloned gso packets in sctp_rcv - !20688 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - !20698 libceph: fix potential use-after-free in have_mon_and_osd_map() - !20697 tipc: Fix use-after-free in tipc_mon_reinit_self(). - sctp: linearize cloned gso packets in sctp_rcv - libceph: fix potential use-after-free in have_mon_and_osd_map() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - ipv6: sr: Fix MAC comparison to be constant-time - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - i40e: Fix potential invalid access when MAC list is empty - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20119 Add 950 KVM feature support - !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration - !20638 ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - !20637 net/sched: sch_qfq: do not free existing class in qfq_change_class() - !20636 v2 macvlan: fix possible UAF in macvlan_forward_source() - wifi: mac80211: increase scan_ies_len for S1G - !20566 crypto: lzo - Fix compression buffer overrun - KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer - KVM: arm64: ipiv: Fix compilation warning - KVM: arm64: check if IPIV is enabled in BIOS - kvm: hisi: print error for IPIV - KVM: arm64: using kvm_vgic_global_state for ipiv - kvm: hisi: Don't allow to change mpidr in IPIv - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv - KVM: arm64: fix live migration bug of IPIv - irqchip/gic: Add HiSilicon PV SGI support - KVM: arm64: Implement PV_SGI related calls - KVM: arm64: Document PV-sgi interface - KVM: arm64: Introduce ipiv enable ioctl - arm64/config: add config to control whether enable IPIV feature - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12 - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE - kvm: hisi_virt: Register ipiv exception interrupt - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule - kvm: arm64: avoid sending multi-SGIs in IPIV - kvm: hisi_virt: Allocate VM table and save vpeid in it - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2 - KVM: arm64: fix memory leak in TLBI - KVM: arm64: Add new HiSi CPU type to support DVMBM - kvm: hisi_virt: Update TLBI broadcast feature for hip12 - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE - ARM: 9317/1: kexec: Make smp stop calls asynchronous - !20654 scsi: qla4xxx: Prevent a potential error pointer dereference - !20653 bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - !20655 mm/slub: avoid accessing metadata when pointer is invalid in object_err() - !20656 firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors - x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - mm/slub: avoid accessing metadata when pointer is invalid in object_err() - scsi: qla4xxx: Prevent a potential error pointer dereference - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - net/sched: sch_qfq: do not free existing class in qfq_change_class() - macvlan: fix possible UAF in macvlan_forward_source() - !20597 team: fix check for port enabled in team_queue_override_port_prio_changed() - !20593 CVE-2025-39744 fixup - !20465 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - !20178 v3 Fix CVE-2024-53179 - team: fix check for port enabled in team_queue_override_port_prio_changed() - rcu: Fix racy re-initialization of irq_work causing hangs - rcu: Fix rcu_read_unlock() deadloop due to IRQ work - rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs - !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts - !20428 wifi: mt76: do not run mt76u_status_worker if the device is not running - !20427 RDMA/bnxt_re: Prevent handling any completions after qp destroy - !20466 pptp: ensure minimal skb length in pptp_xmit() - !20426 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - !20574 RDMA/cm: Fix leaking the multicast GID table reference - !20573 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - !20565 Fix CVE-2023-53521 - !20521 Fix CVE-2026-23038 - RDMA/cm: Fix leaking the multicast GID table reference - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - crypto: lzo - Fix compression buffer overrun - !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() - eth: bnxt: move and rename reset helpers - x86: Resolve FPU state corruption between atomic and non-atomic contexts - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - bnxt_en: Fix potential data corruption with HW GRO/LRO - pptp: ensure minimal skb length in pptp_xmit() - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - wifi: mt76: do not run mt76u_status_worker if the device is not running - RDMA/bnxt_re: Prevent handling any completions after qp destroy - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - phytium: add tpcm sgi handler for s5000c - smb: client: fix use-after-free of signing key - cifs: missed ref-counting smb session in find - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode - crypto: ccp: Add support to switch to CSV RING_BUFFER mode - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues - openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI - crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm - crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm - !20737 pNFS: Fix a deadlock when returning a delegation during open() - !20725 tracing: Add recursion protection in kernel stack trace recording - !20746 Fix CVE-2026-22990 - !20671 arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - !20669 irqchip/gic-v3-its: Avoid truncating memory addresses - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - pNFS: Fix a deadlock when returning a delegation during open() - tracing: Add recursion protection in kernel stack trace recording - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - irqchip/gic-v3-its: Avoid truncating memory addresses - !20899 Fix CVE-2026-23216 - !20885 nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file - !20839 bpf, cpumap: Make sure kthread is running before map update returns - bpf, cpumap: Make sure kthread is running before map update returns - !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1 - !20818 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20801 ACPI/IORT: Add PMCG platform information for 162001900 - !20814 migrate: correct lock ordering for hugetlb file folios - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20800 fix CVE-2026-23054 - migrate: correct lock ordering for hugetlb file folios - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - net: hv_netvsc: reject RSS hash key programming without RX indirection table - hv_netvsc: Allocate rx indirection table size dynamically - RDMA/hns: Remove the accidentally added hns_roce_trace.h file - irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI - !21136 sched/rt: Skip currently executing CPU in rto_next_cpu() - !21131 procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21093 kexec: derive purgatory entry from symbol - !21140 ksmbd: fix use-after-free in kerberos authentication - !21132 SUNRPC: Ensure the transport backchannel association - ksmbd: fix use-after-free in kerberos authentication - sched/rt: Skip currently executing CPU in rto_next_cpu() - SUNRPC: Ensure the transport backchannel association - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21112 CVE-2024-57979 - !21111 ALSA: aloop: Fix racy access at PCM trigger - pps: Fix kabi in pps_device - pps: Fix a use-after-free - ALSA: aloop: Fix racy access at PCM trigger - kexec: derive purgatory entry from symbol - ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21072 v2 arm64/mpam: enable MPAM feature and - !20883 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - !21021 CVE-2026-23209 - arm64/mpam: fix the bitmap written during mpam device reset - arm64/mpam: only allow L3 cache MPAM device created - arm64/mpam: fix inadvertently updating after repeatedly updating - arm64/mpam: set default feedback of last_cmd_status interface as null string - !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured - !19837 KVM: Drop tlbs_dirty - !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !21014 bpf selftest cross compile fixes - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - macvlan: fix error recovery in macvlan_common_newlink() - !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - selftests/bpf: Pass target triple to get_sys_includes macro - selftests/bpf: Enable cross-building - net: hns3: hns3 driver should be initialized when VF multi tcs is configured - net: hns3: modify code of judging if SMMU DMA is enabled - !20976 support apei_page_offline_policy - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() - nvmet-tcp: don't map pages which can't come from HIGHMEM - nvmet-tcp: fix regression in data_digest calculation - nvmet-tcp: fix memory leak when performing a controller reset - !20971 Fix CVE-2026-23074 - apei/ghes: Add sysctl interface to control soft-offline page isolation - Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages" - !20887 HiSock Enhancement - net/sched: Enforce that teql can only be used as root qdisc - drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !20891 dcache: Limit the minimal number of bucket to two - !20956 CVE-2025-39967 - fbcon: Fix OOB access in font allocation - fbcon: fix integer overflow in fbcon_do_set_font - overflow: Allow mixed type arguments - nvmet-tcp: add an helper to free the cmd buffers - dcache: Limit the minimal number of bucket to two - bpf: Deprecate hisock unused helpers and orig ingress logic - bpf: Add local connect support for hisock - bpf: Add ipv4-mapped ipv6 addr support for hisock - bpf: Add target comm parse to hisock_cmd - bpf: Add multi port parse to hisock_cmd - bpf: Only deploy hisock in server - bpf: Apply BPF_HISOCK_INGRESS to hisock ingress - bpf: Add bpf_handle_ingress/egress_ptype helper function - bpf: Add bpf_set_ingress/egress_dev helper function - bpf: Add bpf_get_skb_ethhdr helper function - bpf: Add bpf_set_ingress_dst helper function - bpf: Add BPF_HISOCK_INGRESS attach type - net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - KVM: Drop tlbs_dirty - !21262 arm64/mpam: Extending MPAM features and bugfix - arm64/mpam: Allow MBMIN to be set to 0 - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit - arm64/mpam: Add quirk to shrink MATA PMG range - !21211 scsi: hisi_sas: Change the debugfs parameters dump count default value - scsi: hisi_sas: Change the debugfs parameters dump count default value - !21163 gic: Add hip09 support for HISILICON_ERRATUM_165010801 - gic: Add hip09 support for HISILICON_ERRATUM_165010801 - !19740 merge refs/pull/19740/head into OLK-5.10 - !19764 merge patch-1766387978 into OLK-5.10 - hisi: l3t: enable l3t with specific cpuid - !19705 [OLK-5.10]:update patches for sw64 architecture - !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct - !19372 padata: Fix pd UAF once and for all - !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation - !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS - net: atlantic: fix fragment overflow handling in RX path - !19736 locking/rwsem: Optimize down_read_trylock() under highly contended case - locking/rwsem: Optimize down_read_trylock() under highly contended case - !19724 mm/mem_reliable: use percise count during limit check - mm/mem_reliable: use percise count during limit check - !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - !19614 NFSD: Fix crash in nfsd4_read_release() - !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19673 firewire: net: fix use after free in fwnet_finish_incoming_packet() - sw64: set PTBR_SYS before accessing vmalloc area - sw64: set execute permission for virtual machine's hmcode text section - sw64: fix simd version of copy/clear_page() - sw64: fix random mmap base range - firewire: net: fix use after free in fwnet_finish_incoming_packet() - NFSD: Fix crash in nfsd4_read_release() - crypto: ccp: add ccp-mdev functionality to the ccp module. - padata: Fix pd UAF once and for all - KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access - KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer - KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests - KVM: x86: Pass emulation type to can_emulate_instruction() - KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support - KVM: SVM: Don't intercept #GP for SEV guests - swiotlb: do not zero buffer in set_memory_decrypted() - crypto: ccp - Add SEV_INIT rc error logging on init - dma-direct: always leak memory that can't be re-encrypted - dma-direct: factor out dma_set_{de,en}crypted helpers - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits - KVM: SEV-ES: fix another issue with string I/O VMGEXITs - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed - KVM: SEV-ES: keep INS functions together - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in - KVM: x86: split the two parts of emulator_pio_in - KVM: SEV-ES: clean up kvm_sev_es_ins/outs - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out - KVM: SEV-ES: rename guest_ins_data to sev_pio_data - KVM: SEV-ES: fix length of string I/O - x86/sev-es: Do not unroll string I/O for SEV-ES guests - x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs - !19833 merge patch-1766715015 into OLK-5.10 - !19911 merge patch-1767492639 into OLK-5.10 - !19635 merge refs/pull/19635/head into OLK-5.10 - !19903 merge patch-1767161454 into OLK-5.10 - !19864 merge patch-1766990471 into OLK-5.10 - !19865 merge patch-1766990523 into OLK-5.10 - mm: mem_reliable: prevent excessive direct reclaim loops - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - !19899 merge patch-1767098709 into OLK-5.10 - erofs: validate the extent length for uncompressed pclusters - !19885 merge patch-1767076771 into OLK-5.10 - !19876 merge patch-1767011340 into OLK-5.10 - scsi: qla2xxx: Clear cmds after chip reset - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - !19856 merge patch-1766976937 into OLK-5.10 - !19857 merge patch-1766976979 into OLK-5.10 - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private - virtio-net: ensure the received length does not exceed allocated size - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - tracing: Fix memory leaks in create_field_var() - !19760 merge patch-1766370959 into OLK-5.10 - !19786 merge patch-1766474397 into OLK-5.10 - !19548 merge refs/pull/19548/head into OLK-5.10 - ext4: xattr: fix null pointer deref in ext4_raw_inode() - !19739 merge refs/pull/19739/head into OLK-5.10 - !19732 merge refs/pull/19732/head into OLK-5.10 - !19719 merge refs/pull/19719/head into OLK-5.10 - bnxt_en: Fix memory corruption when FW resources change during ifdown - bnxt_en: Fix possible crash after creating sw mqprio TCs - x86/fpu: Ensure XFD state on signal delivery - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - usb: storage: Fix memory leak in USB bulk transport - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() - cpufreq: ACPI: Fix max-frequency computation - tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes - tools headers: Update tools's copy of x86/asm headers - tools headers cpufeatures: Sync with the kernel sources - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - !19798 merge OLK-5.10 into OLK-5.10 - !19972 merge patch-1767691219 into OLK-5.10 - !19974 merge patch-1767691279 into OLK-5.10 - !19973 merge patch-1767691254 into OLK-5.10 - !19713 merge refs/pull/19713/head into OLK-5.10 - !19832 merge OLK-5.10-ringbuffer into OLK-5.10 - qed: Don't collect too many protection override GRC elements - i40e: fix validation of VF state in get resources - i40e: fix input validation logic for action_meta - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() - KVM: SVM: Skip SEV cache flush if no ASIDs have been used - KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities - x86/sev: Make enc_dec_hypercall() accept a size instead of npages - mm: x86: Fix kabi breakage of pv_ops - KVM: x86: Play nice with protected guests in complete_hypercall_exit() - KVM: x86: Assume a 64-bit hypercall for guests with protected state - KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids() - KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa - x86/kvm: Add kexec support for SEV Live Migration. - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. - EFI: Introduce the new AMD Memory Encryption GUID. - mm: x86: Invoke hypercall when page encryption status is changed - x86/kvm: Add AMD SEV specific Hypercall3 - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA - KVM: SVM: fix missing sev_decommission in sev_receive_start - KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall - KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command - KVM: SVM: Add support for KVM_SEV_RECEIVE_START command - KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command - KVM: SVM: Add KVM_SEV_SEND_FINISH command - KVM: SVM: Add KVM_SEND_UPDATE_DATA command - KVM: SVM: Add KVM_SEV SEND_START command - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19047 [OLK-5.10] Fix CVE-2025-39839 - !18614 [OLK-5.10] Fix CVE-2025-39737 - !18654 [OLK-5.10] Fix CVE-2025-38705 - !18782 【OLK-5.10】fix CVE-2025-38712 - !18612 [OLK-5.10] Fix CVE-2025-38713 - !18635 [OLK-5.10] Fix CVE-2025-38714 - !18862 [OLK-5.10] Fix CVE-2025-38697 - !20058 CVE-2025-38111 - !20131 wifi: cfg80211: fix use-after-free in cmp_bss() - !20306 mm/kmemleak: move up cond_resched() call in page scanning loop - !20309 hwmon: constify pointers to hwmon_channel_info - hwmon: fix kabi of struct hwmon_channel_info - !20338 mlxsw: spectrum_router: Fix neighbour use-after-free - !20337 mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - hwmon: constify pointers to hwmon_channel_info - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - !20316 um: virtio_uml: Fix use-after-free after put_device in probe - !20114 KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc - um: virtio_uml: Fix use-after-free after put_device in probe - !20300 software node: Correct a OOB check in software_node_get_reference_args() - !20299 jfs: add sanity check for agwidth in dbMount - !20278 iavf: fix off-by-one issues in iavf_config_rss_reg() - !20277 e1000: fix OOB in e1000_tbi_should_accept() - !20285 hwmon: (ibmpex) fix use-after-free in high/low store - mm/kmemleak: move up cond_resched() call in page scanning loop - !19953 【OLK-5.10】 power_meter patchs from 6.6 - software node: Correct a OOB check in software_node_get_reference_args() - jfs: add sanity check for agwidth in dbMount - hwmon: (ibmpex) fix use-after-free in high/low store - !20269 drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !20271 KVM: x86: use array_index_nospec with indices that come from guest - !19788 ima: Handle error code returned by ima_filter_rule_match() - iavf: fix off-by-one issues in iavf_config_rss_reg() - e1000: fix OOB in e1000_tbi_should_accept() - !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver - !20203 drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - !20202 scsi: qla2xxx: Fix premature hw access after PCI error - !19728 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09 - KVM: x86: use array_index_nospec with indices that come from guest - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - RDMA/hns: Support config and query the CNP DSCP for HIP09 - !20221 Revert "RDMA/hns: Fix mismatch exception rollback" - !20195 ACPI: APEI: Handle repeated SEA error interrupts storm - !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes - Revert "RDMA/hns: Fix mismatch exception rollback" - RDMA/hns: Support drain SQ and RQ - RDMA/hns: Return actual error code instead of fixed EINVAL - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Fix RoCEv1 failure due to DSCP - !20161 cifs: fix session state check in reconnect to avoid use-after-free issue - !20050 smb: client: Fix use-after-free in cifs_fill_dirent - !19834 v2 md/raid0, raid10: Don't set discard sectors for request queue - !19816 scsi: sg: Do not sleep in atomic context - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - scsi: qla2xxx: Fix premature hw access after PCI error - ACPI: APEI: Handle repeated SEA error interrupts storm - !20150 tracing: Do not register unsupported perf events - !20163 tracing: Fix enabling of tracing on file release - !19938 net: hns3: add VLAN id validation before using - !19836 [OLK-5.10] Fixes for SEV-ES Guest Support - !20044 【openEuler-22.03-LTS-SP4】Memory copy error - !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2 - !20025 [OLK-5.10]Support SMT control on arm64. - !19922 NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - !19985 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - !19996 net: netpoll: fix incorrect refcount handling causing incorrect cleanup - !19908 drivers:misc:sdma-dae: add NULL judgement of global variables - !20026 fs/buffer: fix use-after-free when call bh_read() helper - !19962 i40e: add max boundary check for VF filters - !20103 kmemleak: Fix kmemleak false warnings - !20169 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - !20052 CVE-2024-21823 - !18962 erofs: Fix erofs_bmap error - !20016 kernfs: Fix UAF issue - !19694 ARM: fix hash_name() issue - !20048 VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - !20065 Fix CVE-2022-50737 - !20066 smb: client: fix race with concurrent opens in rename(2) - !20151 v2 Fix CVE-2025-40016 - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems - ACPI: IPMI: Add helper to wait for when SMI is selected - hwmon: (acpi_power_meter) Fix the fake power alarm reporting - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices(). - hwmon: (acpi_power_meter) Fix update the power trip points on failure - hwmon: (acpi_power_meter) Fix uninitialized variables - !20047 crypto: af_alg - Set merge to zero early in af_alg_sendmsg - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method - hwmon: (acpi_power_meter) replace open-coded kmemdup_nul - hwmon: (acpi_power_meter) Fix style issues - hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device() - hwmon: acpi_power_meter: Get rid of ACPICA message printing - ACPI: utils: Introduce acpi_evaluation_failure_warn() - ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE - hwmon: (acpi_power_meter) clean up freeing code - x86/sev: merge continuous pages into a large range when notifying range enc status changes - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - tracing: Fix enabling of tracing on file release - cifs: fix session state check in reconnect to avoid use-after-free issue - media: uvcvideo: Use heuristic to find stream entity - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Allow extra entities - tracing: Do not register unsupported perf events - wifi: cfg80211: fix use-after-free in cmp_bss() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - arm64: kdump: fix kmemleak unknown object warning when crash base is set - arm64: kdump: fix kmemleak unknown object warning - x86/sev: Use "SEV: " prefix for messages from sev.c - x86/sev: Propagate #GP if getting linear instruction address failed - smb: client: fix race with concurrent opens in rename(2) - fs/ntfs3: Add null pointer checks - fs/ntfs3: Validate buffer length while parsing index - fs/ntfs3: Validate index root when initialize NTFS security - net/mdiobus: Fix potential out-of-bounds read/write access - net: mdio: C22 is now optional, EOPNOTSUPP if not provided - dmaengine: idxd: Fix ->poll() return value - dmaengine: idxd: Fix allowing write() from different address spaces - dmaengine: idxd: Fix passing freed memory in idxd_cdev_open() - dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling - dmaengine: idxd: add per DSA wq workqueue for processing cr faults - dmaengine: idxd: add a write() method for applications to submit work - dmaengine: idxd: add a new security check to deal with a hardware erratum - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist - smb: client: Fix use-after-free in cifs_fill_dirent - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench' - x86: don't use REP_GOOD or ERMS for small memory clearing - x86: don't use REP_GOOD or ERMS for small memory copies - fs/buffer: fix use-after-free when call bh_read() helper - powerpc/kexec: Enable SMT before waking offline CPUs - cpu/SMT: Enable SMT only if a core is online - cpu/SMT: Create topology_smt_thread_allowed() - powerpc/topology: Check if a core is online - config: enable CONFIG_HOTPLUG_SMT for arm64 - arm64: Kconfig: Enable HOTPLUG_SMT - arm64: topology: Support SMT control on ACPI based system - arch_topology: Support SMT control for OF based system - cpu/SMT: Provide a default topology_is_primary_thread() - powerpc: Add HOTPLUG_SMT support - Revert "arm64: Kconfig: Enable HOTPLUG_SMT" - kernfs: Fix kabi broken in struct kernfs_root - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir(). - kernfs: fix potential NULL dereference in __kernfs_remove - kernfs: fix NULL dereferencing in kernfs_remove - kernfs: remove redundant kernfs_rwsem declaration. - kernfs: prevent early freeing of root node - kernfs: switch global kernfs_rwsem lock to per-fs lock - KVM: SVM: Make sure GHCB is mapped before updating - KVM: SVM: check CR4 changes against vcpu->arch - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests - x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]() - x86/sev: Fix error message in runtime #VC handler - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - i40e: add max boundary check for VF filters - net: hns3: add VLAN id validation before using - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled - ACPI: thermal: Move to dedicated function sysfs extra attr creation - ACPI: thermal: Use thermal_zone_device() - thermal: core: Encapsulate tz->device field - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - drivers:misc:sdma-dae: add NULL judgement of global variables - md/raid0, raid10: Don't set discard sectors for request queue - scsi: sg: Do not sleep in atomic context - ima: Handle error code returned by ima_filter_rule_match() - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - ARM: fix hash_name() fault - ARM: allow __do_kernel_fault() to report execution of memory faults - configs: enable CONFIG_MICROCODE_ZHAOXIN - x86/microcode: Add Zhaoxin cpu microcode update driver - drm/amd/pm: fix null pointer access - batman-adv: fix OOB read/write in network-coding decode - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - erofs: Fix erofs_bmap error - jfs: upper bound check of tree index in dbAllocAG - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - !20464 rcu: Protect ->defer_qs_iw_pending from data race - !20318 net: hns3: check pf tc cfg when setting vf tc - !20522 CVE-2022-50616 - !20423 use SYS_CNTVCTSS_EL0 for gettimeofday - regulator: core: Fix resolve supply lookup issue - regulator: core: Use different devices for resource allocation and DT lookup - !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO. - !19965 nvme-fc: use lock accessing port_state and rport state - !20226 leapraid: supports LeapRaid controller - !20436 fix CVE-2026-22998 - rcu: Protect ->defer_qs_iw_pending from data race - !20449 scsi/hiraid: Support New Raid feature - !20252 ntfs: set dummy blocksize to read boot_block when mounting - !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc - !20335 Fix CVE-2025-37947 - mm: Add PAGE_ALIGN_DOWN macro - soc cache: fix walk page parameter and drop incorrect check - soc cache: Fix incorrect error path of ioctl - soc cache: Fix incorrect size validation - soc cache: Enforce maintain type check - soc cache: Modify default config to compile HiSilicon SoC cache driver - !19858 [OLK-5.10] perf support for HiSilicon HIP12 - !20331 Fix CVE-2025-39835 - !20439 Fix CVE-2025-39945 - !20251 Fix CVE-2025-38480 - !20184 Fix CVE-2025-37770 - !20185 Fix CVE-2022-49829 - !20183 Fix CVE-2025-23138 - !20240 Fix CVE-2025-21981 - !20409 net: xfrm: Fix CVE-2025-40215 - !20408 net: xfrm: Fix CVE-2025-39797 - !20407 netfilter: allow exp not to be removed in nf_ct_find_expectation - !20406 bpf, sockmap: Avoid using sk_socket after free when sending - !20405 can: bcm: add locking for bcm_op runtime updates - !20404 RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent - scsi/hiraid: Support New Raid feature - !19950 【OLK-5.10】 Drivers GPU Patches from 6.6 - !20422 driver core: fix potential null-ptr-deref in device_add() - cnic: Fix use-after-free bugs in cnic_delete_task - !20421 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - !20420 usb: early: xhci-dbc: Fix a potential out-of-bound memory access - !20418 drivers: base: Free devm resources when unregistering a device - !20417 driver core: fix resource leak in device_add() - !20416 Fix CVE-2022-49309 - !20415 kernel/resource: fix kfree() of bootmem memory again - !20414 drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - !20413 of: check previous kernel's ima-kexec-buffer against memory bounds - !20412 HID: core: Harden s32ton() against conversion to 0 bits - !20411 iommu/amd: Avoid stack buffer overflow from kernel cmdline - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvmet-tcp: remove boilerplate code - !20390 drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - vdso: do cntvct workaround in the VDSO - arm64: vdso: remove two .altinstructions related symbols - arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday - arm64: alternative: patch alternatives in the vDSO - arm64: module: move find_section to header - driver core: fix potential null-ptr-deref in device_add() - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - usb: early: xhci-dbc: Fix a potential out-of-bound memory access - drivers: base: Free devm resources when unregistering a device - driver core: fix resource leak in device_add() - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() - !20383 usb: cdns3: fix random warning message when driver load - kernel/resource: fix kfree() of bootmem memory again - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - of: check previous kernel's ima-kexec-buffer against memory bounds - HID: core: Harden s32ton() against conversion to 0 bits - !19959 【OLK-5.10】Support NMI Watchdog - iommu/amd: Avoid stack buffer overflow from kernel cmdline - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfrm: Duplicate SPI Handling - netfilter: allow exp not to be removed in nf_ct_find_expectation - bpf, sockmap: Avoid using sk_socket after free when sending - can: bcm: add locking for bcm_op runtime updates - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation. - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh - watchdog/perf: Provide function for adjusting the event period - config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64 - irqchip/gic-v3: Fix one race condition due to NMI withdraw - watchdog: Fix call trace when failed to initialize sdei - watchdog: Support watchdog_sdei coexist with existing watchdogs - init: only move down lockup_detector_init() when sdei_watchdog is enabled - arm64: enable perf events based hard lockup detector - arm64: add hw_nmi_get_sample_period for preparation of lockup detector - usb: cdns3: fix random warning message when driver load - !20051 smb3: fix for slab out of bounds on mount to ksmbd - comedi: Fix use of uninitialized data in insn_rw_emulate_bits() - watch_queue: fix pipe accounting mismatch - drm/amd/pm/powerplay: Prevent division by zero - !20357 ext4: fix e4b bitmap inconsistency reports - ice: fix memory leak in aRFS after reset - drm/hisilicon/hibmc: hibmc-drm bugfix for DP - !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6 - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel - drm/hisilicon/hibmc: Add vga connector detect functions - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp - drm/hisilicon/hibmc: Add dp serdes cfg in dp process - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis - drm/hisilicon/hibmc: Restructuring the header dp_reg.h - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers - drm/ast: Implement polling for VGA and SIL164 connectors - drm/sysfs: Register "ddc" symlink later - drm/hisilicon/hibmc: add dp module in hibmc - drm/hisilicon/hibmc: refactored struct hibmc_drm_private - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers - drm/hisilicon/hibmc: add dp aux in hibmc drivers - gic: increase the arch_timer priority to avoid hardlockup - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803 - drm/scheduler: fix fence ref counting - !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology - ext4: fix e4b bitmap inconsistency reports - !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction - !20256 Fix CVE-2025-39828 - !20339 wifi: prevent A-MSDU attacks in mesh networks - wifi: prevent A-MSDU attacks in mesh networks - ksmbd: fix stream write failure - ksmbd: prevent out-of-bounds stream writes by validating *pos - xfs: do not propagate ENODATA disk errors into xattr code - net: hns3: check pf tc cfg when setting vf tc - net: hns3: support tc limit speed - net: hns3: the multi-tcs VF can be configured only when the interface is down - irqchip/gic-v3-its: Remove DevID Pool's restriction - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *' - perf: Update .gitignore file - perf stat: Enable iostat mode for x86 platforms - perf stat: Helper functions for PCIe root ports list in iostat mode - perf: Fix tt_core mismatch over PG CPU - perf iostat: Use system-wide mode if the target cpu_list is unspecified - perf arm_spe: Correct memory level for remote access - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU - Documentation: hisi-pmu: Fix of minor format error - drivers/perf: hisi: Add support for L3C PMU v3 - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - arm64: topology: Setup amu fie when cpu hotplugging - topology: Set capacity_freq_ref in all cases - arm64/amu: Use capacity_ref_freq() to set AMU ratio - cpufreq/cppc: Set the frequency used for computing the capacity - cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}() - energy_model: Use a fixed reference frequency - cpufreq/schedutil: Use a fixed reference frequency - cpufreq: Use the fixed and coherent frequency for scaling capacity - sched/topology: Add a new arch_scale_freq_ref() method - arch_topology: Introduce thermal pressure update function - riscv: export cpu/freq invariant to scheduler - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() - cpufreq: Allow drivers to advertise boost enabled - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' - openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix unused-function warning - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: ACPI: Mark boost policy as enabled when setting boost - cpufreq: ACPI: Only set boost MSRs on supported CPUs - cpufreq: ACPI: Defer setting boost MSRs - cpufreq: acpi: Remove acpi_cpufreq_cpu_ready() - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw() - Documentation: power: Add description about new callback for EM registration - arch_topology: Avoid use-after-free for scale_freq_data - cpufreq: Exit governor when failed to start old governor - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() - cpufreq: Initialize cpufreq-based frequency-invariance later - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost - cpufreq: Remove duplicate check in __cpufreq_offline() - cpufreq: Don't unregister cpufreq cooling on CPU hotplug - cpufreq: Remove the ->stop_cpu() driver callback - cpufreq: intel_pstate: Combine ->stop_cpu() and ->offline() - cpufreq: powernv: Migrate to ->exit() callback instead of ->stop_cpu() - docs/zh_CN: add cpu-freq cpu-drivers.rst translation - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() - cpufreq: CPPC: Do not return a value from populate_efficiency_class() - cpufreq: CPPC: Remove cpu_data_list - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate() - cpufreq: CPPC: Register EM based on efficiency class information - PM: EM: Change the order of arguments in the .active_power() callback - cpufreq: Add callback to register with energy model - PM: EM: Add .get_cost() callback - cpufreq: CPPC: Add per_cpu efficiency_class - cpufreq: remove useless INIT_LIST_HEAD() - ACPI: CPPC: Disable FIE if registers in PCC regions - ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate() - cpufreq: cppc: Fix invalid return value in .get() callback - cppc_cpufreq: Fix possible null pointer dereference - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn() - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus - cpufreq: CPPC: Add support for frequency invariance - arch_topology: Export arch_freq_scale and helpers - cpufreq: CPPC: Pass structure instance by reference - cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init - cpufreq: CPPC: Migrate to ->exit() callback instead of ->stop_cpu() - cppc_cpufreq: replace per-cpu data array with a list - cppc_cpufreq: expose information on frequency domains - cppc_cpufreq: clarify support for coordination types - arch_topology: Allow multiple entities to provide sched_freq_tick() callback - sched/topology,schedutil: Wrap sched domains rebuild - arch_topology: Rename freq_scale as arch_freq_scale - arm64: topology: Drop the useless update to per-cpu cycles - arm64: topology: Make AMUs work with modular cpufreq drivers - arm64: topology: Reorder init_amu_fie() a bit - arm64: topology: Avoid the have_policy check - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() - cpufreq: prevent NULL dereference in cpufreq_online() - cpufreq: CPPC: Fix wrong max_freq in policy initialization - cppc_cpufreq: simplify use of performance capabilities - cpufreq: Introduce a more generic way to set default per-policy boost flag - cpufreq: Fix re-boost issue after hotplugging a CPU - cpufreq: Support per-policy performance boost - ntfs: set dummy blocksize to read boot_block when mounting - leapraid: supports LeapRaid controller - perf mem: Count L2 HITM for c2c statistic - perf mem: Add statistics for peer snooping - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12 - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel - perf arm-spe: augment the data source type with neoverse_spe list - tools arm64: Import cputype.h - arm64: cputype: Add cputype definition for HIP12 - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface - drivers/perf: hisi: Add cacheable option for L3C PMU - perf: Remove unstable events for uncore L3C PMU - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu - perf iostat: hisi: Fix port range retrival - drivers/perf: hisi: Add support for L3C PMU v3 - drivers/perf: hisi: Refactor the event configuration of L3C PMU - drivers/perf: hisi: Extend the field of tt_core - drivers/perf: hisi: Extract the event filter check of L3C PMU - drivers/perf: hisi: Simplify the probe process of each L3C PMU version - drivers/perf: hisi: Export hisi_uncore_pmu_isr() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/perf: hisi: Add support for HiSilicon MN PMU driver - drivers/perf: hisi: Add support for HiSilicon NoC PMU - drivers/perf: hisi: Support PMUs with no interrupt - drivers/perf: hisi: Relax the event number check of v2 PMUs - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver - drivers/perf: hisi: Simplify the probe process for each DDRC version - drivers/perf: hisi: Delete redundant blank line of DDRC PMU - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier - drivers/perf: convert sysfs snprintf family to sysfs_emit - perf: hisi: Constify static struct attribute_group - perf/hisi: Constify static attribute_group structs - drivers/perf: hisi: Add a common function to retrieve topology from firmware - drivers/perf: hisi: Extract topology information to a separate structure - drivers/perf: hisi: Refactor the detection of associated CPUs - drivers/perf: hisi: Migrate to one online CPU if no associated one online - drivers/perf: hisi: Don't update the associated_cpus on CPU offline - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs - perf stat: Enable iostat mode for HiSilicon PCIe PMU - perf stat: Add struct perf_stat_aggr to perf_stat_evsel - perf stat: Display iostat headers correctly - perf stat: Don't display metric header for non-leader uncore events - perf stat: Basic support for iostat in perf - perf arm-spe: Refactor arm-spe to support operation packet type - perf arm-spe: Use SPE data source for neoverse cores - perf arm-spe: Don't set data source if it's not a memory operation - perf tools: Sync addition of PERF_MEM_SNOOPX_PEER - tools: arm64: Import sysreg.h - smb3: fix for slab out of bounds on mount to ksmbd - watchdog/perf: adapt the watchdog_perf interface for async model - watchdog/perf: add a weak function for an arch to detect if perf can use NMIs - irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed - irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked - irqchip/gic-v3: Implement FEAT_GICv3_NMI support - arm64/nmi: Add Kconfig for NMI - arm64/nmi: Add handling of superpriority interrupts as NMIs - arm64/irq: Document handling of FEAT_NMI in irqflags.h - arm64/entry: Don't call preempt_schedule_irq() with NMIs masked - arm64/nmi: Manage masking for superpriority interrupts along with DAIF - nvme-fc: use lock accessing port_state and rport state - KVM: arm64: Hide FEAT_NMI from guests - arm64/cpufeature: Detect PE support for FEAT_NMI - arm64/hyp-stub: Enable access to ALLINT - arm64/asm: Introduce assembly macros for managing ALLINT - arm64/sysreg: Add definitions for immediate versions of MSR ALLINT - arm64/booting: Document boot requirements for FEAT_NMI - irqchip/gic-v3: Fix priority mask handling - irqchip/gic-v3: Refactor ISB + EOIR at ack time - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 - soc cache: Add framework driver for HiSilicon SoC cache - !20333 phytium-tpcm-sig-8-hadler-reg-s5000c - !20767 Revert hibmc patches to fix null-ptr-deref - Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6" - Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert" - !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Code refactoring for hibmc_drm_drv - !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 & SM4 algorithm - !20666 CVE-2023-53712 - !20673 Fix CVE-2025-39957 - !20686 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20687 i40e: Fix potential invalid access when MAC list is empty - !20692 ipv6: sr: Fix MAC comparison to be constant-time - !20699 sctp: linearize cloned gso packets in sctp_rcv - !20688 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - !20698 libceph: fix potential use-after-free in have_mon_and_osd_map() - !20697 tipc: Fix use-after-free in tipc_mon_reinit_self(). - sctp: linearize cloned gso packets in sctp_rcv - libceph: fix potential use-after-free in have_mon_and_osd_map() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - ipv6: sr: Fix MAC comparison to be constant-time - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - i40e: Fix potential invalid access when MAC list is empty - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20119 Add 950 KVM feature support - !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration - !20638 ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - !20637 net/sched: sch_qfq: do not free existing class in qfq_change_class() - !20636 v2 macvlan: fix possible UAF in macvlan_forward_source() - wifi: mac80211: increase scan_ies_len for S1G - !20566 crypto: lzo - Fix compression buffer overrun - KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer - KVM: arm64: ipiv: Fix compilation warning - KVM: arm64: check if IPIV is enabled in BIOS - kvm: hisi: print error for IPIV - KVM: arm64: using kvm_vgic_global_state for ipiv - kvm: hisi: Don't allow to change mpidr in IPIv - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv - KVM: arm64: fix live migration bug of IPIv - irqchip/gic: Add HiSilicon PV SGI support - KVM: arm64: Implement PV_SGI related calls - KVM: arm64: Document PV-sgi interface - KVM: arm64: Introduce ipiv enable ioctl - arm64/config: add config to control whether enable IPIV feature - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12 - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE - kvm: hisi_virt: Register ipiv exception interrupt - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule - kvm: arm64: avoid sending multi-SGIs in IPIV - kvm: hisi_virt: Allocate VM table and save vpeid in it - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2 - KVM: arm64: fix memory leak in TLBI - KVM: arm64: Add new HiSi CPU type to support DVMBM - kvm: hisi_virt: Update TLBI broadcast feature for hip12 - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE - ARM: 9317/1: kexec: Make smp stop calls asynchronous - !20654 scsi: qla4xxx: Prevent a potential error pointer dereference - !20653 bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - !20655 mm/slub: avoid accessing metadata when pointer is invalid in object_err() - !20656 firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors - x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - mm/slub: avoid accessing metadata when pointer is invalid in object_err() - scsi: qla4xxx: Prevent a potential error pointer dereference - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - net/sched: sch_qfq: do not free existing class in qfq_change_class() - macvlan: fix possible UAF in macvlan_forward_source() - !20597 team: fix check for port enabled in team_queue_override_port_prio_changed() - !20593 CVE-2025-39744 fixup - !20465 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - !20178 v3 Fix CVE-2024-53179 - team: fix check for port enabled in team_queue_override_port_prio_changed() - rcu: Fix racy re-initialization of irq_work causing hangs - rcu: Fix rcu_read_unlock() deadloop due to IRQ work - rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs - !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts - !20428 wifi: mt76: do not run mt76u_status_worker if the device is not running - !20427 RDMA/bnxt_re: Prevent handling any completions after qp destroy - !20466 pptp: ensure minimal skb length in pptp_xmit() - !20426 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - !20574 RDMA/cm: Fix leaking the multicast GID table reference - !20573 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - !20565 Fix CVE-2023-53521 - !20521 Fix CVE-2026-23038 - RDMA/cm: Fix leaking the multicast GID table reference - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - crypto: lzo - Fix compression buffer overrun - !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() - eth: bnxt: move and rename reset helpers - x86: Resolve FPU state corruption between atomic and non-atomic contexts - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - bnxt_en: Fix potential data corruption with HW GRO/LRO - pptp: ensure minimal skb length in pptp_xmit() - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - wifi: mt76: do not run mt76u_status_worker if the device is not running - RDMA/bnxt_re: Prevent handling any completions after qp destroy - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - phytium: add tpcm sgi handler for s5000c - smb: client: fix use-after-free of signing key - cifs: missed ref-counting smb session in find - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode - crypto: ccp: Add support to switch to CSV RING_BUFFER mode - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues - openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI - crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm - crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm - !20737 pNFS: Fix a deadlock when returning a delegation during open() - !20725 tracing: Add recursion protection in kernel stack trace recording - !20746 Fix CVE-2026-22990 - !20671 arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - !20669 irqchip/gic-v3-its: Avoid truncating memory addresses - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - pNFS: Fix a deadlock when returning a delegation during open() - tracing: Add recursion protection in kernel stack trace recording - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - irqchip/gic-v3-its: Avoid truncating memory addresses - !20899 Fix CVE-2026-23216 - !20885 nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file - !20839 bpf, cpumap: Make sure kthread is running before map update returns - bpf, cpumap: Make sure kthread is running before map update returns - !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1 - !20818 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20801 ACPI/IORT: Add PMCG platform information for 162001900 - !20814 migrate: correct lock ordering for hugetlb file folios - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20800 fix CVE-2026-23054 - migrate: correct lock ordering for hugetlb file folios - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - net: hv_netvsc: reject RSS hash key programming without RX indirection table - hv_netvsc: Allocate rx indirection table size dynamically - RDMA/hns: Remove the accidentally added hns_roce_trace.h file - irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI - !21136 sched/rt: Skip currently executing CPU in rto_next_cpu() - !21131 procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21093 kexec: derive purgatory entry from symbol - !21140 ksmbd: fix use-after-free in kerberos authentication - !21132 SUNRPC: Ensure the transport backchannel association - ksmbd: fix use-after-free in kerberos authentication - sched/rt: Skip currently executing CPU in rto_next_cpu() - SUNRPC: Ensure the transport backchannel association - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21112 CVE-2024-57979 - !21111 ALSA: aloop: Fix racy access at PCM trigger - pps: Fix kabi in pps_device - pps: Fix a use-after-free - ALSA: aloop: Fix racy access at PCM trigger - kexec: derive purgatory entry from symbol - ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21072 v2 arm64/mpam: enable MPAM feature and - !20883 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - !21021 CVE-2026-23209 - arm64/mpam: fix the bitmap written during mpam device reset - arm64/mpam: only allow L3 cache MPAM device created - arm64/mpam: fix inadvertently updating after repeatedly updating - arm64/mpam: set default feedback of last_cmd_status interface as null string - !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured - !19837 KVM: Drop tlbs_dirty - !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !21014 bpf selftest cross compile fixes - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - macvlan: fix error recovery in macvlan_common_newlink() - !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - selftests/bpf: Pass target triple to get_sys_includes macro - selftests/bpf: Enable cross-building - net: hns3: hns3 driver should be initialized when VF multi tcs is configured - net: hns3: modify code of judging if SMMU DMA is enabled - !20976 support apei_page_offline_policy - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() - nvmet-tcp: don't map pages which can't come from HIGHMEM - nvmet-tcp: fix regression in data_digest calculation - nvmet-tcp: fix memory leak when performing a controller reset - !20971 Fix CVE-2026-23074 - apei/ghes: Add sysctl interface to control soft-offline page isolation - Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages" - !20887 HiSock Enhancement - net/sched: Enforce that teql can only be used as root qdisc - drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !20891 dcache: Limit the minimal number of bucket to two - !20956 CVE-2025-39967 - fbcon: Fix OOB access in font allocation - fbcon: fix integer overflow in fbcon_do_set_font - overflow: Allow mixed type arguments - nvmet-tcp: add an helper to free the cmd buffers - dcache: Limit the minimal number of bucket to two - bpf: Deprecate hisock unused helpers and orig ingress logic - bpf: Add local connect support for hisock - bpf: Add ipv4-mapped ipv6 addr support for hisock - bpf: Add target comm parse to hisock_cmd - bpf: Add multi port parse to hisock_cmd - bpf: Only deploy hisock in server - bpf: Apply BPF_HISOCK_INGRESS to hisock ingress - bpf: Add bpf_handle_ingress/egress_ptype helper function - bpf: Add bpf_set_ingress/egress_dev helper function - bpf: Add bpf_get_skb_ethhdr helper function - bpf: Add bpf_set_ingress_dst helper function - bpf: Add BPF_HISOCK_INGRESS attach type - net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - KVM: Drop tlbs_dirty - !21262 arm64/mpam: Extending MPAM features and bugfix - arm64/mpam: Allow MBMIN to be set to 0 - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit - arm64/mpam: Add quirk to shrink MATA PMG range - !21211 scsi: hisi_sas: Change the debugfs parameters dump count default value - scsi: hisi_sas: Change the debugfs parameters dump count default value - !21163 gic: Add hip09 support for HISILICON_ERRATUM_165010801 - gic: Add hip09 support for HISILICON_ERRATUM_165010801 - !19740 merge refs/pull/19740/head into OLK-5.10 - !19764 merge patch-1766387978 into OLK-5.10 - hisi: l3t: enable l3t with specific cpuid - !19705 [OLK-5.10]:update patches for sw64 architecture - !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct - !19372 padata: Fix pd UAF once and for all - !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation - !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS - net: atlantic: fix fragment overflow handling in RX path - !19736 locking/rwsem: Optimize down_read_trylock() under highly contended case - locking/rwsem: Optimize down_read_trylock() under highly contended case - !19724 mm/mem_reliable: use percise count during limit check - mm/mem_reliable: use percise count during limit check - !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - !19614 NFSD: Fix crash in nfsd4_read_release() - !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19673 firewire: net: fix use after free in fwnet_finish_incoming_packet() - sw64: set PTBR_SYS before accessing vmalloc area - sw64: set execute permission for virtual machine's hmcode text section - sw64: fix simd version of copy/clear_page() - sw64: fix random mmap base range - firewire: net: fix use after free in fwnet_finish_incoming_packet() - NFSD: Fix crash in nfsd4_read_release() - crypto: ccp: add ccp-mdev functionality to the ccp module. - padata: Fix pd UAF once and for all - KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access - KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer - KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests - KVM: x86: Pass emulation type to can_emulate_instruction() - KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support - KVM: SVM: Don't intercept #GP for SEV guests - swiotlb: do not zero buffer in set_memory_decrypted() - crypto: ccp - Add SEV_INIT rc error logging on init - dma-direct: always leak memory that can't be re-encrypted - dma-direct: factor out dma_set_{de,en}crypted helpers - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits - KVM: SEV-ES: fix another issue with string I/O VMGEXITs - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed - KVM: SEV-ES: keep INS functions together - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in - KVM: x86: split the two parts of emulator_pio_in - KVM: SEV-ES: clean up kvm_sev_es_ins/outs - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out - KVM: SEV-ES: rename guest_ins_data to sev_pio_data - KVM: SEV-ES: fix length of string I/O - x86/sev-es: Do not unroll string I/O for SEV-ES guests - x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs - !19833 merge patch-1766715015 into OLK-5.10 - !19911 merge patch-1767492639 into OLK-5.10 - !19635 merge refs/pull/19635/head into OLK-5.10 - !19903 merge patch-1767161454 into OLK-5.10 - !19864 merge patch-1766990471 into OLK-5.10 - !19865 merge patch-1766990523 into OLK-5.10 - mm: mem_reliable: prevent excessive direct reclaim loops - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - !19899 merge patch-1767098709 into OLK-5.10 - erofs: validate the extent length for uncompressed pclusters - !19885 merge patch-1767076771 into OLK-5.10 - !19876 merge patch-1767011340 into OLK-5.10 - scsi: qla2xxx: Clear cmds after chip reset - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - !19856 merge patch-1766976937 into OLK-5.10 - !19857 merge patch-1766976979 into OLK-5.10 - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private - virtio-net: ensure the received length does not exceed allocated size - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - tracing: Fix memory leaks in create_field_var() - !19760 merge patch-1766370959 into OLK-5.10 - !19786 merge patch-1766474397 into OLK-5.10 - !19548 merge refs/pull/19548/head into OLK-5.10 - ext4: xattr: fix null pointer deref in ext4_raw_inode() - !19739 merge refs/pull/19739/head into OLK-5.10 - !19732 merge refs/pull/19732/head into OLK-5.10 - !19719 merge refs/pull/19719/head into OLK-5.10 - bnxt_en: Fix memory corruption when FW resources change during ifdown - bnxt_en: Fix possible crash after creating sw mqprio TCs - x86/fpu: Ensure XFD state on signal delivery - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - usb: storage: Fix memory leak in USB bulk transport - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() - cpufreq: ACPI: Fix max-frequency computation - tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes - tools headers: Update tools's copy of x86/asm headers - tools headers cpufeatures: Sync with the kernel sources - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - !19798 merge OLK-5.10 into OLK-5.10 - !19972 merge patch-1767691219 into OLK-5.10 - !19974 merge patch-1767691279 into OLK-5.10 - !19973 merge patch-1767691254 into OLK-5.10 - !19713 merge refs/pull/19713/head into OLK-5.10 - !19832 merge OLK-5.10-ringbuffer into OLK-5.10 - qed: Don't collect too many protection override GRC elements - i40e: fix validation of VF state in get resources - i40e: fix input validation logic for action_meta - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() - KVM: SVM: Skip SEV cache flush if no ASIDs have been used - KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities - x86/sev: Make enc_dec_hypercall() accept a size instead of npages - mm: x86: Fix kabi breakage of pv_ops - KVM: x86: Play nice with protected guests in complete_hypercall_exit() - KVM: x86: Assume a 64-bit hypercall for guests with protected state - KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids() - KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa - x86/kvm: Add kexec support for SEV Live Migration. - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. - EFI: Introduce the new AMD Memory Encryption GUID. - mm: x86: Invoke hypercall when page encryption status is changed - x86/kvm: Add AMD SEV specific Hypercall3 - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA - KVM: SVM: fix missing sev_decommission in sev_receive_start - KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall - KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command - KVM: SVM: Add support for KVM_SEV_RECEIVE_START command - KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command - KVM: SVM: Add KVM_SEV_SEND_FINISH command - KVM: SVM: Add KVM_SEND_UPDATE_DATA command - KVM: SVM: Add KVM_SEV SEND_START command - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19047 [OLK-5.10] Fix CVE-2025-39839 - !18614 [OLK-5.10] Fix CVE-2025-39737 - !18654 [OLK-5.10] Fix CVE-2025-38705 - !18782 【OLK-5.10】fix CVE-2025-38712 - !18612 [OLK-5.10] Fix CVE-2025-38713 - !18635 [OLK-5.10] Fix CVE-2025-38714 - !18862 [OLK-5.10] Fix CVE-2025-38697 - !20058 CVE-2025-38111 - !20131 wifi: cfg80211: fix use-after-free in cmp_bss() - !20306 mm/kmemleak: move up cond_resched() call in page scanning loop - !20309 hwmon: constify pointers to hwmon_channel_info - hwmon: fix kabi of struct hwmon_channel_info - !20338 mlxsw: spectrum_router: Fix neighbour use-after-free - !20337 mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - hwmon: constify pointers to hwmon_channel_info - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - !20316 um: virtio_uml: Fix use-after-free after put_device in probe - !20114 KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc - um: virtio_uml: Fix use-after-free after put_device in probe - !20300 software node: Correct a OOB check in software_node_get_reference_args() - !20299 jfs: add sanity check for agwidth in dbMount - !20278 iavf: fix off-by-one issues in iavf_config_rss_reg() - !20277 e1000: fix OOB in e1000_tbi_should_accept() - !20285 hwmon: (ibmpex) fix use-after-free in high/low store - mm/kmemleak: move up cond_resched() call in page scanning loop - !19953 【OLK-5.10】 power_meter patchs from 6.6 - software node: Correct a OOB check in software_node_get_reference_args() - jfs: add sanity check for agwidth in dbMount - hwmon: (ibmpex) fix use-after-free in high/low store - !20269 drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !20271 KVM: x86: use array_index_nospec with indices that come from guest - !19788 ima: Handle error code returned by ima_filter_rule_match() - iavf: fix off-by-one issues in iavf_config_rss_reg() - e1000: fix OOB in e1000_tbi_should_accept() - !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver - !20203 drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - !20202 scsi: qla2xxx: Fix premature hw access after PCI error - !19728 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09 - KVM: x86: use array_index_nospec with indices that come from guest - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - RDMA/hns: Support config and query the CNP DSCP for HIP09 - !20221 Revert "RDMA/hns: Fix mismatch exception rollback" - !20195 ACPI: APEI: Handle repeated SEA error interrupts storm - !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes - Revert "RDMA/hns: Fix mismatch exception rollback" - RDMA/hns: Support drain SQ and RQ - RDMA/hns: Return actual error code instead of fixed EINVAL - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Fix RoCEv1 failure due to DSCP - !20161 cifs: fix session state check in reconnect to avoid use-after-free issue - !20050 smb: client: Fix use-after-free in cifs_fill_dirent - !19834 v2 md/raid0, raid10: Don't set discard sectors for request queue - !19816 scsi: sg: Do not sleep in atomic context - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - scsi: qla2xxx: Fix premature hw access after PCI error - ACPI: APEI: Handle repeated SEA error interrupts storm - !20150 tracing: Do not register unsupported perf events - !20163 tracing: Fix enabling of tracing on file release - !19938 net: hns3: add VLAN id validation before using - !19836 [OLK-5.10] Fixes for SEV-ES Guest Support - !20044 【openEuler-22.03-LTS-SP4】Memory copy error - !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2 - !20025 [OLK-5.10]Support SMT control on arm64. - !19922 NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - !19985 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - !19996 net: netpoll: fix incorrect refcount handling causing incorrect cleanup - !19908 drivers:misc:sdma-dae: add NULL judgement of global variables - !20026 fs/buffer: fix use-after-free when call bh_read() helper - !19962 i40e: add max boundary check for VF filters - !20103 kmemleak: Fix kmemleak false warnings - !20169 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - !20052 CVE-2024-21823 - !18962 erofs: Fix erofs_bmap error - !20016 kernfs: Fix UAF issue - !19694 ARM: fix hash_name() issue - !20048 VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - !20065 Fix CVE-2022-50737 - !20066 smb: client: fix race with concurrent opens in rename(2) - !20151 v2 Fix CVE-2025-40016 - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems - ACPI: IPMI: Add helper to wait for when SMI is selected - hwmon: (acpi_power_meter) Fix the fake power alarm reporting - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices(). - hwmon: (acpi_power_meter) Fix update the power trip points on failure - hwmon: (acpi_power_meter) Fix uninitialized variables - !20047 crypto: af_alg - Set merge to zero early in af_alg_sendmsg - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method - hwmon: (acpi_power_meter) replace open-coded kmemdup_nul - hwmon: (acpi_power_meter) Fix style issues - hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device() - hwmon: acpi_power_meter: Get rid of ACPICA message printing - ACPI: utils: Introduce acpi_evaluation_failure_warn() - ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE - hwmon: (acpi_power_meter) clean up freeing code - x86/sev: merge continuous pages into a large range when notifying range enc status changes - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - tracing: Fix enabling of tracing on file release - cifs: fix session state check in reconnect to avoid use-after-free issue - media: uvcvideo: Use heuristic to find stream entity - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Allow extra entities - tracing: Do not register unsupported perf events - wifi: cfg80211: fix use-after-free in cmp_bss() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - arm64: kdump: fix kmemleak unknown object warning when crash base is set - arm64: kdump: fix kmemleak unknown object warning - x86/sev: Use "SEV: " prefix for messages from sev.c - x86/sev: Propagate #GP if getting linear instruction address failed - smb: client: fix race with concurrent opens in rename(2) - fs/ntfs3: Add null pointer checks - fs/ntfs3: Validate buffer length while parsing index - fs/ntfs3: Validate index root when initialize NTFS security - net/mdiobus: Fix potential out-of-bounds read/write access - net: mdio: C22 is now optional, EOPNOTSUPP if not provided - dmaengine: idxd: Fix ->poll() return value - dmaengine: idxd: Fix allowing write() from different address spaces - dmaengine: idxd: Fix passing freed memory in idxd_cdev_open() - dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling - dmaengine: idxd: add per DSA wq workqueue for processing cr faults - dmaengine: idxd: add a write() method for applications to submit work - dmaengine: idxd: add a new security check to deal with a hardware erratum - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist - smb: client: Fix use-after-free in cifs_fill_dirent - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench' - x86: don't use REP_GOOD or ERMS for small memory clearing - x86: don't use REP_GOOD or ERMS for small memory copies - fs/buffer: fix use-after-free when call bh_read() helper - powerpc/kexec: Enable SMT before waking offline CPUs - cpu/SMT: Enable SMT only if a core is online - cpu/SMT: Create topology_smt_thread_allowed() - powerpc/topology: Check if a core is online - config: enable CONFIG_HOTPLUG_SMT for arm64 - arm64: Kconfig: Enable HOTPLUG_SMT - arm64: topology: Support SMT control on ACPI based system - arch_topology: Support SMT control for OF based system - cpu/SMT: Provide a default topology_is_primary_thread() - powerpc: Add HOTPLUG_SMT support - Revert "arm64: Kconfig: Enable HOTPLUG_SMT" - kernfs: Fix kabi broken in struct kernfs_root - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir(). - kernfs: fix potential NULL dereference in __kernfs_remove - kernfs: fix NULL dereferencing in kernfs_remove - kernfs: remove redundant kernfs_rwsem declaration. - kernfs: prevent early freeing of root node - kernfs: switch global kernfs_rwsem lock to per-fs lock - KVM: SVM: Make sure GHCB is mapped before updating - KVM: SVM: check CR4 changes against vcpu->arch - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests - x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]() - x86/sev: Fix error message in runtime #VC handler - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - i40e: add max boundary check for VF filters - net: hns3: add VLAN id validation before using - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled - ACPI: thermal: Move to dedicated function sysfs extra attr creation - ACPI: thermal: Use thermal_zone_device() - thermal: core: Encapsulate tz->device field - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - drivers:misc:sdma-dae: add NULL judgement of global variables - md/raid0, raid10: Don't set discard sectors for request queue - scsi: sg: Do not sleep in atomic context - ima: Handle error code returned by ima_filter_rule_match() - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - ARM: fix hash_name() fault - ARM: allow __do_kernel_fault() to report execution of memory faults - configs: enable CONFIG_MICROCODE_ZHAOXIN - x86/microcode: Add Zhaoxin cpu microcode update driver - drm/amd/pm: fix null pointer access - batman-adv: fix OOB read/write in network-coding decode - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - erofs: Fix erofs_bmap error - jfs: upper bound check of tree index in dbAllocAG - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - !20464 rcu: Protect ->defer_qs_iw_pending from data race - !20318 net: hns3: check pf tc cfg when setting vf tc - !20522 CVE-2022-50616 - !20423 use SYS_CNTVCTSS_EL0 for gettimeofday - regulator: core: Fix resolve supply lookup issue - regulator: core: Use different devices for resource allocation and DT lookup - !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO. - !19965 nvme-fc: use lock accessing port_state and rport state - !20226 leapraid: supports LeapRaid controller - !20436 fix CVE-2026-22998 - rcu: Protect ->defer_qs_iw_pending from data race - !20449 scsi/hiraid: Support New Raid feature - !20252 ntfs: set dummy blocksize to read boot_block when mounting - !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc - !20335 Fix CVE-2025-37947 - mm: Add PAGE_ALIGN_DOWN macro - soc cache: fix walk page parameter and drop incorrect check - soc cache: Fix incorrect error path of ioctl - soc cache: Fix incorrect size validation - soc cache: Enforce maintain type check - soc cache: Modify default config to compile HiSilicon SoC cache driver - !19858 [OLK-5.10] perf support for HiSilicon HIP12 - !20331 Fix CVE-2025-39835 - !20439 Fix CVE-2025-39945 - !20251 Fix CVE-2025-38480 - !20184 Fix CVE-2025-37770 - !20185 Fix CVE-2022-49829 - !20183 Fix CVE-2025-23138 - !20240 Fix CVE-2025-21981 - !20409 net: xfrm: Fix CVE-2025-40215 - !20408 net: xfrm: Fix CVE-2025-39797 - !20407 netfilter: allow exp not to be removed in nf_ct_find_expectation - !20406 bpf, sockmap: Avoid using sk_socket after free when sending - !20405 can: bcm: add locking for bcm_op runtime updates - !20404 RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent - scsi/hiraid: Support New Raid feature - !19950 【OLK-5.10】 Drivers GPU Patches from 6.6 - !20422 driver core: fix potential null-ptr-deref in device_add() - cnic: Fix use-after-free bugs in cnic_delete_task - !20421 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - !20420 usb: early: xhci-dbc: Fix a potential out-of-bound memory access - !20418 drivers: base: Free devm resources when unregistering a device - !20417 driver core: fix resource leak in device_add() - !20416 Fix CVE-2022-49309 - !20415 kernel/resource: fix kfree() of bootmem memory again - !20414 drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - !20413 of: check previous kernel's ima-kexec-buffer against memory bounds - !20412 HID: core: Harden s32ton() against conversion to 0 bits - !20411 iommu/amd: Avoid stack buffer overflow from kernel cmdline - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvmet-tcp: remove boilerplate code - !20390 drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - vdso: do cntvct workaround in the VDSO - arm64: vdso: remove two .altinstructions related symbols - arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday - arm64: alternative: patch alternatives in the vDSO - arm64: module: move find_section to header - driver core: fix potential null-ptr-deref in device_add() - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - usb: early: xhci-dbc: Fix a potential out-of-bound memory access - drivers: base: Free devm resources when unregistering a device - driver core: fix resource leak in device_add() - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() - !20383 usb: cdns3: fix random warning message when driver load - kernel/resource: fix kfree() of bootmem memory again - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - of: check previous kernel's ima-kexec-buffer against memory bounds - HID: core: Harden s32ton() against conversion to 0 bits - !19959 【OLK-5.10】Support NMI Watchdog - iommu/amd: Avoid stack buffer overflow from kernel cmdline - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfrm: Duplicate SPI Handling - netfilter: allow exp not to be removed in nf_ct_find_expectation - bpf, sockmap: Avoid using sk_socket after free when sending - can: bcm: add locking for bcm_op runtime updates - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation. - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh - watchdog/perf: Provide function for adjusting the event period - config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64 - irqchip/gic-v3: Fix one race condition due to NMI withdraw - watchdog: Fix call trace when failed to initialize sdei - watchdog: Support watchdog_sdei coexist with existing watchdogs - init: only move down lockup_detector_init() when sdei_watchdog is enabled - arm64: enable perf events based hard lockup detector - arm64: add hw_nmi_get_sample_period for preparation of lockup detector - usb: cdns3: fix random warning message when driver load - !20051 smb3: fix for slab out of bounds on mount to ksmbd - comedi: Fix use of uninitialized data in insn_rw_emulate_bits() - watch_queue: fix pipe accounting mismatch - drm/amd/pm/powerplay: Prevent division by zero - !20357 ext4: fix e4b bitmap inconsistency reports - ice: fix memory leak in aRFS after reset - drm/hisilicon/hibmc: hibmc-drm bugfix for DP - !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6 - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel - drm/hisilicon/hibmc: Add vga connector detect functions - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp - drm/hisilicon/hibmc: Add dp serdes cfg in dp process - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis - drm/hisilicon/hibmc: Restructuring the header dp_reg.h - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers - drm/ast: Implement polling for VGA and SIL164 connectors - drm/sysfs: Register "ddc" symlink later - drm/hisilicon/hibmc: add dp module in hibmc - drm/hisilicon/hibmc: refactored struct hibmc_drm_private - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers - drm/hisilicon/hibmc: add dp aux in hibmc drivers - gic: increase the arch_timer priority to avoid hardlockup - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803 - drm/scheduler: fix fence ref counting - !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology - ext4: fix e4b bitmap inconsistency reports - !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction - !20256 Fix CVE-2025-39828 - !20339 wifi: prevent A-MSDU attacks in mesh networks - wifi: prevent A-MSDU attacks in mesh networks - ksmbd: fix stream write failure - ksmbd: prevent out-of-bounds stream writes by validating *pos - xfs: do not propagate ENODATA disk errors into xattr code - net: hns3: check pf tc cfg when setting vf tc - net: hns3: support tc limit speed - net: hns3: the multi-tcs VF can be configured only when the interface is down - irqchip/gic-v3-its: Remove DevID Pool's restriction - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *' - perf: Update .gitignore file - perf stat: Enable iostat mode for x86 platforms - perf stat: Helper functions for PCIe root ports list in iostat mode - perf: Fix tt_core mismatch over PG CPU - perf iostat: Use system-wide mode if the target cpu_list is unspecified - perf arm_spe: Correct memory level for remote access - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU - Documentation: hisi-pmu: Fix of minor format error - drivers/perf: hisi: Add support for L3C PMU v3 - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - arm64: topology: Setup amu fie when cpu hotplugging - topology: Set capacity_freq_ref in all cases - arm64/amu: Use capacity_ref_freq() to set AMU ratio - cpufreq/cppc: Set the frequency used for computing the capacity - cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}() - energy_model: Use a fixed reference frequency - cpufreq/schedutil: Use a fixed reference frequency - cpufreq: Use the fixed and coherent frequency for scaling capacity - sched/topology: Add a new arch_scale_freq_ref() method - arch_topology: Introduce thermal pressure update function - riscv: export cpu/freq invariant to scheduler - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() - cpufreq: Allow drivers to advertise boost enabled - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' - openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix unused-function warning - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: ACPI: Mark boost policy as enabled when setting boost - cpufreq: ACPI: Only set boost MSRs on supported CPUs - cpufreq: ACPI: Defer setting boost MSRs - cpufreq: acpi: Remove acpi_cpufreq_cpu_ready() - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw() - Documentation: power: Add description about new callback for EM registration - arch_topology: Avoid use-after-free for scale_freq_data - cpufreq: Exit governor when failed to start old governor - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() - cpufreq: Initialize cpufreq-based frequency-invariance later - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost - cpufreq: Remove duplicate check in __cpufreq_offline() - cpufreq: Don't unregister cpufreq cooling on CPU hotplug - cpufreq: Remove the ->stop_cpu() driver callback - cpufreq: intel_pstate: Combine ->stop_cpu() and ->offline() - cpufreq: powernv: Migrate to ->exit() callback instead of ->stop_cpu() - docs/zh_CN: add cpu-freq cpu-drivers.rst translation - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() - cpufreq: CPPC: Do not return a value from populate_efficiency_class() - cpufreq: CPPC: Remove cpu_data_list - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate() - cpufreq: CPPC: Register EM based on efficiency class information - PM: EM: Change the order of arguments in the .active_power() callback - cpufreq: Add callback to register with energy model - PM: EM: Add .get_cost() callback - cpufreq: CPPC: Add per_cpu efficiency_class - cpufreq: remove useless INIT_LIST_HEAD() - ACPI: CPPC: Disable FIE if registers in PCC regions - ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate() - cpufreq: cppc: Fix invalid return value in .get() callback - cppc_cpufreq: Fix possible null pointer dereference - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn() - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus - cpufreq: CPPC: Add support for frequency invariance - arch_topology: Export arch_freq_scale and helpers - cpufreq: CPPC: Pass structure instance by reference - cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init - cpufreq: CPPC: Migrate to ->exit() callback instead of ->stop_cpu() - cppc_cpufreq: replace per-cpu data array with a list - cppc_cpufreq: expose information on frequency domains - cppc_cpufreq: clarify support for coordination types - arch_topology: Allow multiple entities to provide sched_freq_tick() callback - sched/topology,schedutil: Wrap sched domains rebuild - arch_topology: Rename freq_scale as arch_freq_scale - arm64: topology: Drop the useless update to per-cpu cycles - arm64: topology: Make AMUs work with modular cpufreq drivers - arm64: topology: Reorder init_amu_fie() a bit - arm64: topology: Avoid the have_policy check - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() - cpufreq: prevent NULL dereference in cpufreq_online() - cpufreq: CPPC: Fix wrong max_freq in policy initialization - cppc_cpufreq: simplify use of performance capabilities - cpufreq: Introduce a more generic way to set default per-policy boost flag - cpufreq: Fix re-boost issue after hotplugging a CPU - cpufreq: Support per-policy performance boost - ntfs: set dummy blocksize to read boot_block when mounting - leapraid: supports LeapRaid controller - perf mem: Count L2 HITM for c2c statistic - perf mem: Add statistics for peer snooping - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12 - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel - perf arm-spe: augment the data source type with neoverse_spe list - tools arm64: Import cputype.h - arm64: cputype: Add cputype definition for HIP12 - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface - drivers/perf: hisi: Add cacheable option for L3C PMU - perf: Remove unstable events for uncore L3C PMU - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu - perf iostat: hisi: Fix port range retrival - drivers/perf: hisi: Add support for L3C PMU v3 - drivers/perf: hisi: Refactor the event configuration of L3C PMU - drivers/perf: hisi: Extend the field of tt_core - drivers/perf: hisi: Extract the event filter check of L3C PMU - drivers/perf: hisi: Simplify the probe process of each L3C PMU version - drivers/perf: hisi: Export hisi_uncore_pmu_isr() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/perf: hisi: Add support for HiSilicon MN PMU driver - drivers/perf: hisi: Add support for HiSilicon NoC PMU - drivers/perf: hisi: Support PMUs with no interrupt - drivers/perf: hisi: Relax the event number check of v2 PMUs - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver - drivers/perf: hisi: Simplify the probe process for each DDRC version - drivers/perf: hisi: Delete redundant blank line of DDRC PMU - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier - drivers/perf: convert sysfs snprintf family to sysfs_emit - perf: hisi: Constify static struct attribute_group - perf/hisi: Constify static attribute_group structs - drivers/perf: hisi: Add a common function to retrieve topology from firmware - drivers/perf: hisi: Extract topology information to a separate structure - drivers/perf: hisi: Refactor the detection of associated CPUs - drivers/perf: hisi: Migrate to one online CPU if no associated one online - drivers/perf: hisi: Don't update the associated_cpus on CPU offline - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs - perf stat: Enable iostat mode for HiSilicon PCIe PMU - perf stat: Add struct perf_stat_aggr to perf_stat_evsel - perf stat: Display iostat headers correctly - perf stat: Don't display metric header for non-leader uncore events - perf stat: Basic support for iostat in perf - perf arm-spe: Refactor arm-spe to support operation packet type - perf arm-spe: Use SPE data source for neoverse cores - perf arm-spe: Don't set data source if it's not a memory operation - perf tools: Sync addition of PERF_MEM_SNOOPX_PEER - tools: arm64: Import sysreg.h - smb3: fix for slab out of bounds on mount to ksmbd - watchdog/perf: adapt the watchdog_perf interface for async model - watchdog/perf: add a weak function for an arch to detect if perf can use NMIs - irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed - irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked - irqchip/gic-v3: Implement FEAT_GICv3_NMI support - arm64/nmi: Add Kconfig for NMI - arm64/nmi: Add handling of superpriority interrupts as NMIs - arm64/irq: Document handling of FEAT_NMI in irqflags.h - arm64/entry: Don't call preempt_schedule_irq() with NMIs masked - arm64/nmi: Manage masking for superpriority interrupts along with DAIF - nvme-fc: use lock accessing port_state and rport state - KVM: arm64: Hide FEAT_NMI from guests - arm64/cpufeature: Detect PE support for FEAT_NMI - arm64/hyp-stub: Enable access to ALLINT - arm64/asm: Introduce assembly macros for managing ALLINT - arm64/sysreg: Add definitions for immediate versions of MSR ALLINT - arm64/booting: Document boot requirements for FEAT_NMI - irqchip/gic-v3: Fix priority mask handling - irqchip/gic-v3: Refactor ISB + EOIR at ack time - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 - soc cache: Add framework driver for HiSilicon SoC cache - !20333 phytium-tpcm-sig-8-hadler-reg-s5000c - !20767 Revert hibmc patches to fix null-ptr-deref - Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6" - Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert" - !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Code refactoring for hibmc_drm_drv - !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 & SM4 algorithm - !20666 CVE-2023-53712 - !20673 Fix CVE-2025-39957 - !20686 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20687 i40e: Fix potential invalid access when MAC list is empty - !20692 ipv6: sr: Fix MAC comparison to be constant-time - !20699 sctp: linearize cloned gso packets in sctp_rcv - !20688 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - !20698 libceph: fix potential use-after-free in have_mon_and_osd_map() - !20697 tipc: Fix use-after-free in tipc_mon_reinit_self(). - sctp: linearize cloned gso packets in sctp_rcv - libceph: fix potential use-after-free in have_mon_and_osd_map() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - ipv6: sr: Fix MAC comparison to be constant-time - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - i40e: Fix potential invalid access when MAC list is empty - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20119 Add 950 KVM feature support - !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration - !20638 ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - !20637 net/sched: sch_qfq: do not free existing class in qfq_change_class() - !20636 v2 macvlan: fix possible UAF in macvlan_forward_source() - wifi: mac80211: increase scan_ies_len for S1G - !20566 crypto: lzo - Fix compression buffer overrun - KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer - KVM: arm64: ipiv: Fix compilation warning - KVM: arm64: check if IPIV is enabled in BIOS - kvm: hisi: print error for IPIV - KVM: arm64: using kvm_vgic_global_state for ipiv - kvm: hisi: Don't allow to change mpidr in IPIv - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv - KVM: arm64: fix live migration bug of IPIv - irqchip/gic: Add HiSilicon PV SGI support - KVM: arm64: Implement PV_SGI related calls - KVM: arm64: Document PV-sgi interface - KVM: arm64: Introduce ipiv enable ioctl - arm64/config: add config to control whether enable IPIV feature - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12 - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE - kvm: hisi_virt: Register ipiv exception interrupt - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule - kvm: arm64: avoid sending multi-SGIs in IPIV - kvm: hisi_virt: Allocate VM table and save vpeid in it - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2 - KVM: arm64: fix memory leak in TLBI - KVM: arm64: Add new HiSi CPU type to support DVMBM - kvm: hisi_virt: Update TLBI broadcast feature for hip12 - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE - ARM: 9317/1: kexec: Make smp stop calls asynchronous - !20654 scsi: qla4xxx: Prevent a potential error pointer dereference - !20653 bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - !20655 mm/slub: avoid accessing metadata when pointer is invalid in object_err() - !20656 firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors - x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - mm/slub: avoid accessing metadata when pointer is invalid in object_err() - scsi: qla4xxx: Prevent a potential error pointer dereference - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - net/sched: sch_qfq: do not free existing class in qfq_change_class() - macvlan: fix possible UAF in macvlan_forward_source() - !20597 team: fix check for port enabled in team_queue_override_port_prio_changed() - !20593 CVE-2025-39744 fixup - !20465 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - !20178 v3 Fix CVE-2024-53179 - team: fix check for port enabled in team_queue_override_port_prio_changed() - rcu: Fix racy re-initialization of irq_work causing hangs - rcu: Fix rcu_read_unlock() deadloop due to IRQ work - rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs - !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts - !20428 wifi: mt76: do not run mt76u_status_worker if the device is not running - !20427 RDMA/bnxt_re: Prevent handling any completions after qp destroy - !20466 pptp: ensure minimal skb length in pptp_xmit() - !20426 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - !20574 RDMA/cm: Fix leaking the multicast GID table reference - !20573 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - !20565 Fix CVE-2023-53521 - !20521 Fix CVE-2026-23038 - RDMA/cm: Fix leaking the multicast GID table reference - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - crypto: lzo - Fix compression buffer overrun - !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() - eth: bnxt: move and rename reset helpers - x86: Resolve FPU state corruption between atomic and non-atomic contexts - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - bnxt_en: Fix potential data corruption with HW GRO/LRO - pptp: ensure minimal skb length in pptp_xmit() - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - wifi: mt76: do not run mt76u_status_worker if the device is not running - RDMA/bnxt_re: Prevent handling any completions after qp destroy - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - phytium: add tpcm sgi handler for s5000c - smb: client: fix use-after-free of signing key - cifs: missed ref-counting smb session in find - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode - crypto: ccp: Add support to switch to CSV RING_BUFFER mode - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues - openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI - crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm - crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm - !20737 pNFS: Fix a deadlock when returning a delegation during open() - !20725 tracing: Add recursion protection in kernel stack trace recording - !20746 Fix CVE-2026-22990 - !20671 arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - !20669 irqchip/gic-v3-its: Avoid truncating memory addresses - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - pNFS: Fix a deadlock when returning a delegation during open() - tracing: Add recursion protection in kernel stack trace recording - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - irqchip/gic-v3-its: Avoid truncating memory addresses - !20899 Fix CVE-2026-23216 - !20885 nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file - !20839 bpf, cpumap: Make sure kthread is running before map update returns - bpf, cpumap: Make sure kthread is running before map update returns - !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1 - !20818 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20801 ACPI/IORT: Add PMCG platform information for 162001900 - !20814 migrate: correct lock ordering for hugetlb file folios - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20800 fix CVE-2026-23054 - migrate: correct lock ordering for hugetlb file folios - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - net: hv_netvsc: reject RSS hash key programming without RX indirection table - hv_netvsc: Allocate rx indirection table size dynamically - RDMA/hns: Remove the accidentally added hns_roce_trace.h file - irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI - !21136 sched/rt: Skip currently executing CPU in rto_next_cpu() - !21131 procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21093 kexec: derive purgatory entry from symbol - !21140 ksmbd: fix use-after-free in kerberos authentication - !21132 SUNRPC: Ensure the transport backchannel association - ksmbd: fix use-after-free in kerberos authentication - sched/rt: Skip currently executing CPU in rto_next_cpu() - SUNRPC: Ensure the transport backchannel association - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21112 CVE-2024-57979 - !21111 ALSA: aloop: Fix racy access at PCM trigger - pps: Fix kabi in pps_device - pps: Fix a use-after-free - ALSA: aloop: Fix racy access at PCM trigger - kexec: derive purgatory entry from symbol - ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21072 v2 arm64/mpam: enable MPAM feature and - !20883 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - !21021 CVE-2026-23209 - arm64/mpam: fix the bitmap written during mpam device reset - arm64/mpam: only allow L3 cache MPAM device created - arm64/mpam: fix inadvertently updating after repeatedly updating - arm64/mpam: set default feedback of last_cmd_status interface as null string - !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured - !19837 KVM: Drop tlbs_dirty - !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !21014 bpf selftest cross compile fixes - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - macvlan: fix error recovery in macvlan_common_newlink() - !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - selftests/bpf: Pass target triple to get_sys_includes macro - selftests/bpf: Enable cross-building - net: hns3: hns3 driver should be initialized when VF multi tcs is configured - net: hns3: modify code of judging if SMMU DMA is enabled - !20976 support apei_page_offline_policy - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() - nvmet-tcp: don't map pages which can't come from HIGHMEM - nvmet-tcp: fix regression in data_digest calculation - nvmet-tcp: fix memory leak when performing a controller reset - !20971 Fix CVE-2026-23074 - apei/ghes: Add sysctl interface to control soft-offline page isolation - Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages" - !20887 HiSock Enhancement - net/sched: Enforce that teql can only be used as root qdisc - drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !20891 dcache: Limit the minimal number of bucket to two - !20956 CVE-2025-39967 - fbcon: Fix OOB access in font allocation - fbcon: fix integer overflow in fbcon_do_set_font - overflow: Allow mixed type arguments - nvmet-tcp: add an helper to free the cmd buffers - dcache: Limit the minimal number of bucket to two - bpf: Deprecate hisock unused helpers and orig ingress logic - bpf: Add local connect support for hisock - bpf: Add ipv4-mapped ipv6 addr support for hisock - bpf: Add target comm parse to hisock_cmd - bpf: Add multi port parse to hisock_cmd - bpf: Only deploy hisock in server - bpf: Apply BPF_HISOCK_INGRESS to hisock ingress - bpf: Add bpf_handle_ingress/egress_ptype helper function - bpf: Add bpf_set_ingress/egress_dev helper function - bpf: Add bpf_get_skb_ethhdr helper function - bpf: Add bpf_set_ingress_dst helper function - bpf: Add BPF_HISOCK_INGRESS attach type - net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - KVM: Drop tlbs_dirty - !21262 arm64/mpam: Extending MPAM features and bugfix - arm64/mpam: Allow MBMIN to be set to 0 - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit - arm64/mpam: Add quirk to shrink MATA PMG range - !21211 scsi: hisi_sas: Change the debugfs parameters dump count default value - scsi: hisi_sas: Change the debugfs parameters dump count default value - !21163 gic: Add hip09 support for HISILICON_ERRATUM_165010801 - gic: Add hip09 support for HISILICON_ERRATUM_165010801 - !19740 merge refs/pull/19740/head into OLK-5.10 - !19764 merge patch-1766387978 into OLK-5.10 - hisi: l3t: enable l3t with specific cpuid - !19705 [OLK-5.10]:update patches for sw64 architecture - !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct - !19372 padata: Fix pd UAF once and for all - !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation - !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS - net: atlantic: fix fragment overflow handling in RX path - !19736 locking/rwsem: Optimize down_read_trylock() under highly contended case - locking/rwsem: Optimize down_read_trylock() under highly contended case - !19724 mm/mem_reliable: use percise count during limit check - mm/mem_reliable: use percise count during limit check - !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - !19614 NFSD: Fix crash in nfsd4_read_release() - !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19673 firewire: net: fix use after free in fwnet_finish_incoming_packet() - sw64: set PTBR_SYS before accessing vmalloc area - sw64: set execute permission for virtual machine's hmcode text section - sw64: fix simd version of copy/clear_page() - sw64: fix random mmap base range - firewire: net: fix use after free in fwnet_finish_incoming_packet() - NFSD: Fix crash in nfsd4_read_release() - crypto: ccp: add ccp-mdev functionality to the ccp module. - padata: Fix pd UAF once and for all - KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access - KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer - KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests - KVM: x86: Pass emulation type to can_emulate_instruction() - KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support - KVM: SVM: Don't intercept #GP for SEV guests - swiotlb: do not zero buffer in set_memory_decrypted() - crypto: ccp - Add SEV_INIT rc error logging on init - dma-direct: always leak memory that can't be re-encrypted - dma-direct: factor out dma_set_{de,en}crypted helpers - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits - KVM: SEV-ES: fix another issue with string I/O VMGEXITs - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed - KVM: SEV-ES: keep INS functions together - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in - KVM: x86: split the two parts of emulator_pio_in - KVM: SEV-ES: clean up kvm_sev_es_ins/outs - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out - KVM: SEV-ES: rename guest_ins_data to sev_pio_data - KVM: SEV-ES: fix length of string I/O - x86/sev-es: Do not unroll string I/O for SEV-ES guests - x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs - !19833 merge patch-1766715015 into OLK-5.10 - !19911 merge patch-1767492639 into OLK-5.10 - !19635 merge refs/pull/19635/head into OLK-5.10 - !19903 merge patch-1767161454 into OLK-5.10 - !19864 merge patch-1766990471 into OLK-5.10 - !19865 merge patch-1766990523 into OLK-5.10 - mm: mem_reliable: prevent excessive direct reclaim loops - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - !19899 merge patch-1767098709 into OLK-5.10 - erofs: validate the extent length for uncompressed pclusters - !19885 merge patch-1767076771 into OLK-5.10 - !19876 merge patch-1767011340 into OLK-5.10 - scsi: qla2xxx: Clear cmds after chip reset - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - !19856 merge patch-1766976937 into OLK-5.10 - !19857 merge patch-1766976979 into OLK-5.10 - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private - virtio-net: ensure the received length does not exceed allocated size - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - tracing: Fix memory leaks in create_field_var() - !19760 merge patch-1766370959 into OLK-5.10 - !19786 merge patch-1766474397 into OLK-5.10 - !19548 merge refs/pull/19548/head into OLK-5.10 - ext4: xattr: fix null pointer deref in ext4_raw_inode() - !19739 merge refs/pull/19739/head into OLK-5.10 - !19732 merge refs/pull/19732/head into OLK-5.10 - !19719 merge refs/pull/19719/head into OLK-5.10 - bnxt_en: Fix memory corruption when FW resources change during ifdown - bnxt_en: Fix possible crash after creating sw mqprio TCs - x86/fpu: Ensure XFD state on signal delivery - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - usb: storage: Fix memory leak in USB bulk transport - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() - cpufreq: ACPI: Fix max-frequency computation - tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes - tools headers: Update tools's copy of x86/asm headers - tools headers cpufeatures: Sync with the kernel sources - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - !19798 merge OLK-5.10 into OLK-5.10 - !19972 merge patch-1767691219 into OLK-5.10 - !19974 merge patch-1767691279 into OLK-5.10 - !19973 merge patch-1767691254 into OLK-5.10 - !19713 merge refs/pull/19713/head into OLK-5.10 - !19832 merge OLK-5.10-ringbuffer into OLK-5.10 - qed: Don't collect too many protection override GRC elements - i40e: fix validation of VF state in get resources - i40e: fix input validation logic for action_meta - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() - KVM: SVM: Skip SEV cache flush if no ASIDs have been used - KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities - x86/sev: Make enc_dec_hypercall() accept a size instead of npages - mm: x86: Fix kabi breakage of pv_ops - KVM: x86: Play nice with protected guests in complete_hypercall_exit() - KVM: x86: Assume a 64-bit hypercall for guests with protected state - KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids() - KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa - x86/kvm: Add kexec support for SEV Live Migration. - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. - EFI: Introduce the new AMD Memory Encryption GUID. - mm: x86: Invoke hypercall when page encryption status is changed - x86/kvm: Add AMD SEV specific Hypercall3 - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA - KVM: SVM: fix missing sev_decommission in sev_receive_start - KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall - KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command - KVM: SVM: Add support for KVM_SEV_RECEIVE_START command - KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command - KVM: SVM: Add KVM_SEV_SEND_FINISH command - KVM: SVM: Add KVM_SEND_UPDATE_DATA command - KVM: SVM: Add KVM_SEV SEND_START command - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19047 [OLK-5.10] Fix CVE-2025-39839 - !18614 [OLK-5.10] Fix CVE-2025-39737 - !18654 [OLK-5.10] Fix CVE-2025-38705 - !18782 【OLK-5.10】fix CVE-2025-38712 - !18612 [OLK-5.10] Fix CVE-2025-38713 - !18635 [OLK-5.10] Fix CVE-2025-38714 - !18862 [OLK-5.10] Fix CVE-2025-38697 - !20058 CVE-2025-38111 - !20131 wifi: cfg80211: fix use-after-free in cmp_bss() - !20306 mm/kmemleak: move up cond_resched() call in page scanning loop - !20309 hwmon: constify pointers to hwmon_channel_info - hwmon: fix kabi of struct hwmon_channel_info - !20338 mlxsw: spectrum_router: Fix neighbour use-after-free - !20337 mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - hwmon: constify pointers to hwmon_channel_info - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - !20316 um: virtio_uml: Fix use-after-free after put_device in probe - !20114 KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc - um: virtio_uml: Fix use-after-free after put_device in probe - !20300 software node: Correct a OOB check in software_node_get_reference_args() - !20299 jfs: add sanity check for agwidth in dbMount - !20278 iavf: fix off-by-one issues in iavf_config_rss_reg() - !20277 e1000: fix OOB in e1000_tbi_should_accept() - !20285 hwmon: (ibmpex) fix use-after-free in high/low store - mm/kmemleak: move up cond_resched() call in page scanning loop - !19953 【OLK-5.10】 power_meter patchs from 6.6 - software node: Correct a OOB check in software_node_get_reference_args() - jfs: add sanity check for agwidth in dbMount - hwmon: (ibmpex) fix use-after-free in high/low store - !20269 drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !20271 KVM: x86: use array_index_nospec with indices that come from guest - !19788 ima: Handle error code returned by ima_filter_rule_match() - iavf: fix off-by-one issues in iavf_config_rss_reg() - e1000: fix OOB in e1000_tbi_should_accept() - !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver - !20203 drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - !20202 scsi: qla2xxx: Fix premature hw access after PCI error - !19728 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09 - KVM: x86: use array_index_nospec with indices that come from guest - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - RDMA/hns: Support config and query the CNP DSCP for HIP09 - !20221 Revert "RDMA/hns: Fix mismatch exception rollback" - !20195 ACPI: APEI: Handle repeated SEA error interrupts storm - !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes - Revert "RDMA/hns: Fix mismatch exception rollback" - RDMA/hns: Support drain SQ and RQ - RDMA/hns: Return actual error code instead of fixed EINVAL - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Fix RoCEv1 failure due to DSCP - !20161 cifs: fix session state check in reconnect to avoid use-after-free issue - !20050 smb: client: Fix use-after-free in cifs_fill_dirent - !19834 v2 md/raid0, raid10: Don't set discard sectors for request queue - !19816 scsi: sg: Do not sleep in atomic context - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - scsi: qla2xxx: Fix premature hw access after PCI error - ACPI: APEI: Handle repeated SEA error interrupts storm - !20150 tracing: Do not register unsupported perf events - !20163 tracing: Fix enabling of tracing on file release - !19938 net: hns3: add VLAN id validation before using - !19836 [OLK-5.10] Fixes for SEV-ES Guest Support - !20044 【openEuler-22.03-LTS-SP4】Memory copy error - !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2 - !20025 [OLK-5.10]Support SMT control on arm64. - !19922 NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - !19985 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - !19996 net: netpoll: fix incorrect refcount handling causing incorrect cleanup - !19908 drivers:misc:sdma-dae: add NULL judgement of global variables - !20026 fs/buffer: fix use-after-free when call bh_read() helper - !19962 i40e: add max boundary check for VF filters - !20103 kmemleak: Fix kmemleak false warnings - !20169 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - !20052 CVE-2024-21823 - !18962 erofs: Fix erofs_bmap error - !20016 kernfs: Fix UAF issue - !19694 ARM: fix hash_name() issue - !20048 VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - !20065 Fix CVE-2022-50737 - !20066 smb: client: fix race with concurrent opens in rename(2) - !20151 v2 Fix CVE-2025-40016 - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems - ACPI: IPMI: Add helper to wait for when SMI is selected - hwmon: (acpi_power_meter) Fix the fake power alarm reporting - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices(). - hwmon: (acpi_power_meter) Fix update the power trip points on failure - hwmon: (acpi_power_meter) Fix uninitialized variables - !20047 crypto: af_alg - Set merge to zero early in af_alg_sendmsg - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method - hwmon: (acpi_power_meter) replace open-coded kmemdup_nul - hwmon: (acpi_power_meter) Fix style issues - hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device() - hwmon: acpi_power_meter: Get rid of ACPICA message printing - ACPI: utils: Introduce acpi_evaluation_failure_warn() - ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE - hwmon: (acpi_power_meter) clean up freeing code - x86/sev: merge continuous pages into a large range when notifying range enc status changes - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - tracing: Fix enabling of tracing on file release - cifs: fix session state check in reconnect to avoid use-after-free issue - media: uvcvideo: Use heuristic to find stream entity - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Allow extra entities - tracing: Do not register unsupported perf events - wifi: cfg80211: fix use-after-free in cmp_bss() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - arm64: kdump: fix kmemleak unknown object warning when crash base is set - arm64: kdump: fix kmemleak unknown object warning - x86/sev: Use "SEV: " prefix for messages from sev.c - x86/sev: Propagate #GP if getting linear instruction address failed - smb: client: fix race with concurrent opens in rename(2) - fs/ntfs3: Add null pointer checks - fs/ntfs3: Validate buffer length while parsing index - fs/ntfs3: Validate index root when initialize NTFS security - net/mdiobus: Fix potential out-of-bounds read/write access - net: mdio: C22 is now optional, EOPNOTSUPP if not provided - dmaengine: idxd: Fix ->poll() return value - dmaengine: idxd: Fix allowing write() from different address spaces - dmaengine: idxd: Fix passing freed memory in idxd_cdev_open() - dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling - dmaengine: idxd: add per DSA wq workqueue for processing cr faults - dmaengine: idxd: add a write() method for applications to submit work - dmaengine: idxd: add a new security check to deal with a hardware erratum - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist - smb: client: Fix use-after-free in cifs_fill_dirent - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench' - x86: don't use REP_GOOD or ERMS for small memory clearing - x86: don't use REP_GOOD or ERMS for small memory copies - fs/buffer: fix use-after-free when call bh_read() helper - powerpc/kexec: Enable SMT before waking offline CPUs - cpu/SMT: Enable SMT only if a core is online - cpu/SMT: Create topology_smt_thread_allowed() - powerpc/topology: Check if a core is online - config: enable CONFIG_HOTPLUG_SMT for arm64 - arm64: Kconfig: Enable HOTPLUG_SMT - arm64: topology: Support SMT control on ACPI based system - arch_topology: Support SMT control for OF based system - cpu/SMT: Provide a default topology_is_primary_thread() - powerpc: Add HOTPLUG_SMT support - Revert "arm64: Kconfig: Enable HOTPLUG_SMT" - kernfs: Fix kabi broken in struct kernfs_root - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir(). - kernfs: fix potential NULL dereference in __kernfs_remove - kernfs: fix NULL dereferencing in kernfs_remove - kernfs: remove redundant kernfs_rwsem declaration. - kernfs: prevent early freeing of root node - kernfs: switch global kernfs_rwsem lock to per-fs lock - KVM: SVM: Make sure GHCB is mapped before updating - KVM: SVM: check CR4 changes against vcpu->arch - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests - x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]() - x86/sev: Fix error message in runtime #VC handler - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - i40e: add max boundary check for VF filters - net: hns3: add VLAN id validation before using - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled - ACPI: thermal: Move to dedicated function sysfs extra attr creation - ACPI: thermal: Use thermal_zone_device() - thermal: core: Encapsulate tz->device field - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - drivers:misc:sdma-dae: add NULL judgement of global variables - md/raid0, raid10: Don't set discard sectors for request queue - scsi: sg: Do not sleep in atomic context - ima: Handle error code returned by ima_filter_rule_match() - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - ARM: fix hash_name() fault - ARM: allow __do_kernel_fault() to report execution of memory faults - configs: enable CONFIG_MICROCODE_ZHAOXIN - x86/microcode: Add Zhaoxin cpu microcode update driver - drm/amd/pm: fix null pointer access - batman-adv: fix OOB read/write in network-coding decode - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - erofs: Fix erofs_bmap error - jfs: upper bound check of tree index in dbAllocAG - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - !20464 rcu: Protect ->defer_qs_iw_pending from data race - !20318 net: hns3: check pf tc cfg when setting vf tc - !20522 CVE-2022-50616 - !20423 use SYS_CNTVCTSS_EL0 for gettimeofday - regulator: core: Fix resolve supply lookup issue - regulator: core: Use different devices for resource allocation and DT lookup - !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO. - !19965 nvme-fc: use lock accessing port_state and rport state - !20226 leapraid: supports LeapRaid controller - !20436 fix CVE-2026-22998 - rcu: Protect ->defer_qs_iw_pending from data race - !20449 scsi/hiraid: Support New Raid feature - !20252 ntfs: set dummy blocksize to read boot_block when mounting - !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc - !20335 Fix CVE-2025-37947 - mm: Add PAGE_ALIGN_DOWN macro - soc cache: fix walk page parameter and drop incorrect check - soc cache: Fix incorrect error path of ioctl - soc cache: Fix incorrect size validation - soc cache: Enforce maintain type check - soc cache: Modify default config to compile HiSilicon SoC cache driver - !19858 [OLK-5.10] perf support for HiSilicon HIP12 - !20331 Fix CVE-2025-39835 - !20439 Fix CVE-2025-39945 - !20251 Fix CVE-2025-38480 - !20184 Fix CVE-2025-37770 - !20185 Fix CVE-2022-49829 - !20183 Fix CVE-2025-23138 - !20240 Fix CVE-2025-21981 - !20409 net: xfrm: Fix CVE-2025-40215 - !20408 net: xfrm: Fix CVE-2025-39797 - !20407 netfilter: allow exp not to be removed in nf_ct_find_expectation - !20406 bpf, sockmap: Avoid using sk_socket after free when sending - !20405 can: bcm: add locking for bcm_op runtime updates - !20404 RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent - scsi/hiraid: Support New Raid feature - !19950 【OLK-5.10】 Drivers GPU Patches from 6.6 - !20422 driver core: fix potential null-ptr-deref in device_add() - cnic: Fix use-after-free bugs in cnic_delete_task - !20421 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - !20420 usb: early: xhci-dbc: Fix a potential out-of-bound memory access - !20418 drivers: base: Free devm resources when unregistering a device - !20417 driver core: fix resource leak in device_add() - !20416 Fix CVE-2022-49309 - !20415 kernel/resource: fix kfree() of bootmem memory again - !20414 drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - !20413 of: check previous kernel's ima-kexec-buffer against memory bounds - !20412 HID: core: Harden s32ton() against conversion to 0 bits - !20411 iommu/amd: Avoid stack buffer overflow from kernel cmdline - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvmet-tcp: remove boilerplate code - !20390 drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - vdso: do cntvct workaround in the VDSO - arm64: vdso: remove two .altinstructions related symbols - arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday - arm64: alternative: patch alternatives in the vDSO - arm64: module: move find_section to header - driver core: fix potential null-ptr-deref in device_add() - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - usb: early: xhci-dbc: Fix a potential out-of-bound memory access - drivers: base: Free devm resources when unregistering a device - driver core: fix resource leak in device_add() - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() - !20383 usb: cdns3: fix random warning message when driver load - kernel/resource: fix kfree() of bootmem memory again - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - of: check previous kernel's ima-kexec-buffer against memory bounds - HID: core: Harden s32ton() against conversion to 0 bits - !19959 【OLK-5.10】Support NMI Watchdog - iommu/amd: Avoid stack buffer overflow from kernel cmdline - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfrm: Duplicate SPI Handling - netfilter: allow exp not to be removed in nf_ct_find_expectation - bpf, sockmap: Avoid using sk_socket after free when sending - can: bcm: add locking for bcm_op runtime updates - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation. - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh - watchdog/perf: Provide function for adjusting the event period - config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64 - irqchip/gic-v3: Fix one race condition due to NMI withdraw - watchdog: Fix call trace when failed to initialize sdei - watchdog: Support watchdog_sdei coexist with existing watchdogs - init: only move down lockup_detector_init() when sdei_watchdog is enabled - arm64: enable perf events based hard lockup detector - arm64: add hw_nmi_get_sample_period for preparation of lockup detector - usb: cdns3: fix random warning message when driver load - !20051 smb3: fix for slab out of bounds on mount to ksmbd - comedi: Fix use of uninitialized data in insn_rw_emulate_bits() - watch_queue: fix pipe accounting mismatch - drm/amd/pm/powerplay: Prevent division by zero - !20357 ext4: fix e4b bitmap inconsistency reports - ice: fix memory leak in aRFS after reset - drm/hisilicon/hibmc: hibmc-drm bugfix for DP - !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6 - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel - drm/hisilicon/hibmc: Add vga connector detect functions - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp - drm/hisilicon/hibmc: Add dp serdes cfg in dp process - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis - drm/hisilicon/hibmc: Restructuring the header dp_reg.h - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers - drm/ast: Implement polling for VGA and SIL164 connectors - drm/sysfs: Register "ddc" symlink later - drm/hisilicon/hibmc: add dp module in hibmc - drm/hisilicon/hibmc: refactored struct hibmc_drm_private - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers - drm/hisilicon/hibmc: add dp aux in hibmc drivers - gic: increase the arch_timer priority to avoid hardlockup - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803 - drm/scheduler: fix fence ref counting - !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology - ext4: fix e4b bitmap inconsistency reports - !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction - !20256 Fix CVE-2025-39828 - !20339 wifi: prevent A-MSDU attacks in mesh networks - wifi: prevent A-MSDU attacks in mesh networks - ksmbd: fix stream write failure - ksmbd: prevent out-of-bounds stream writes by validating *pos - xfs: do not propagate ENODATA disk errors into xattr code - net: hns3: check pf tc cfg when setting vf tc - net: hns3: support tc limit speed - net: hns3: the multi-tcs VF can be configured only when the interface is down - irqchip/gic-v3-its: Remove DevID Pool's restriction - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *' - perf: Update .gitignore file - perf stat: Enable iostat mode for x86 platforms - perf stat: Helper functions for PCIe root ports list in iostat mode - perf: Fix tt_core mismatch over PG CPU - perf iostat: Use system-wide mode if the target cpu_list is unspecified - perf arm_spe: Correct memory level for remote access - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU - Documentation: hisi-pmu: Fix of minor format error - drivers/perf: hisi: Add support for L3C PMU v3 - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - arm64: topology: Setup amu fie when cpu hotplugging - topology: Set capacity_freq_ref in all cases - arm64/amu: Use capacity_ref_freq() to set AMU ratio - cpufreq/cppc: Set the frequency used for computing the capacity - cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}() - energy_model: Use a fixed reference frequency - cpufreq/schedutil: Use a fixed reference frequency - cpufreq: Use the fixed and coherent frequency for scaling capacity - sched/topology: Add a new arch_scale_freq_ref() method - arch_topology: Introduce thermal pressure update function - riscv: export cpu/freq invariant to scheduler - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() - cpufreq: Allow drivers to advertise boost enabled - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' - openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix unused-function warning - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: ACPI: Mark boost policy as enabled when setting boost - cpufreq: ACPI: Only set boost MSRs on supported CPUs - cpufreq: ACPI: Defer setting boost MSRs - cpufreq: acpi: Remove acpi_cpufreq_cpu_ready() - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw() - Documentation: power: Add description about new callback for EM registration - arch_topology: Avoid use-after-free for scale_freq_data - cpufreq: Exit governor when failed to start old governor - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() - cpufreq: Initialize cpufreq-based frequency-invariance later - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost - cpufreq: Remove duplicate check in __cpufreq_offline() - cpufreq: Don't unregister cpufreq cooling on CPU hotplug - cpufreq: Remove the ->stop_cpu() driver callback - cpufreq: intel_pstate: Combine ->stop_cpu() and ->offline() - cpufreq: powernv: Migrate to ->exit() callback instead of ->stop_cpu() - docs/zh_CN: add cpu-freq cpu-drivers.rst translation - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() - cpufreq: CPPC: Do not return a value from populate_efficiency_class() - cpufreq: CPPC: Remove cpu_data_list - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate() - cpufreq: CPPC: Register EM based on efficiency class information - PM: EM: Change the order of arguments in the .active_power() callback - cpufreq: Add callback to register with energy model - PM: EM: Add .get_cost() callback - cpufreq: CPPC: Add per_cpu efficiency_class - cpufreq: remove useless INIT_LIST_HEAD() - ACPI: CPPC: Disable FIE if registers in PCC regions - ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate() - cpufreq: cppc: Fix invalid return value in .get() callback - cppc_cpufreq: Fix possible null pointer dereference - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn() - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus - cpufreq: CPPC: Add support for frequency invariance - arch_topology: Export arch_freq_scale and helpers - cpufreq: CPPC: Pass structure instance by reference - cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init - cpufreq: CPPC: Migrate to ->exit() callback instead of ->stop_cpu() - cppc_cpufreq: replace per-cpu data array with a list - cppc_cpufreq: expose information on frequency domains - cppc_cpufreq: clarify support for coordination types - arch_topology: Allow multiple entities to provide sched_freq_tick() callback - sched/topology,schedutil: Wrap sched domains rebuild - arch_topology: Rename freq_scale as arch_freq_scale - arm64: topology: Drop the useless update to per-cpu cycles - arm64: topology: Make AMUs work with modular cpufreq drivers - arm64: topology: Reorder init_amu_fie() a bit - arm64: topology: Avoid the have_policy check - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() - cpufreq: prevent NULL dereference in cpufreq_online() - cpufreq: CPPC: Fix wrong max_freq in policy initialization - cppc_cpufreq: simplify use of performance capabilities - cpufreq: Introduce a more generic way to set default per-policy boost flag - cpufreq: Fix re-boost issue after hotplugging a CPU - cpufreq: Support per-policy performance boost - ntfs: set dummy blocksize to read boot_block when mounting - leapraid: supports LeapRaid controller - perf mem: Count L2 HITM for c2c statistic - perf mem: Add statistics for peer snooping - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12 - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel - perf arm-spe: augment the data source type with neoverse_spe list - tools arm64: Import cputype.h - arm64: cputype: Add cputype definition for HIP12 - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface - drivers/perf: hisi: Add cacheable option for L3C PMU - perf: Remove unstable events for uncore L3C PMU - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu - perf iostat: hisi: Fix port range retrival - drivers/perf: hisi: Add support for L3C PMU v3 - drivers/perf: hisi: Refactor the event configuration of L3C PMU - drivers/perf: hisi: Extend the field of tt_core - drivers/perf: hisi: Extract the event filter check of L3C PMU - drivers/perf: hisi: Simplify the probe process of each L3C PMU version - drivers/perf: hisi: Export hisi_uncore_pmu_isr() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/perf: hisi: Add support for HiSilicon MN PMU driver - drivers/perf: hisi: Add support for HiSilicon NoC PMU - drivers/perf: hisi: Support PMUs with no interrupt - drivers/perf: hisi: Relax the event number check of v2 PMUs - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver - drivers/perf: hisi: Simplify the probe process for each DDRC version - drivers/perf: hisi: Delete redundant blank line of DDRC PMU - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier - drivers/perf: convert sysfs snprintf family to sysfs_emit - perf: hisi: Constify static struct attribute_group - perf/hisi: Constify static attribute_group structs - drivers/perf: hisi: Add a common function to retrieve topology from firmware - drivers/perf: hisi: Extract topology information to a separate structure - drivers/perf: hisi: Refactor the detection of associated CPUs - drivers/perf: hisi: Migrate to one online CPU if no associated one online - drivers/perf: hisi: Don't update the associated_cpus on CPU offline - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs - perf stat: Enable iostat mode for HiSilicon PCIe PMU - perf stat: Add struct perf_stat_aggr to perf_stat_evsel - perf stat: Display iostat headers correctly - perf stat: Don't display metric header for non-leader uncore events - perf stat: Basic support for iostat in perf - perf arm-spe: Refactor arm-spe to support operation packet type - perf arm-spe: Use SPE data source for neoverse cores - perf arm-spe: Don't set data source if it's not a memory operation - perf tools: Sync addition of PERF_MEM_SNOOPX_PEER - tools: arm64: Import sysreg.h - smb3: fix for slab out of bounds on mount to ksmbd - watchdog/perf: adapt the watchdog_perf interface for async model - watchdog/perf: add a weak function for an arch to detect if perf can use NMIs - irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed - irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked - irqchip/gic-v3: Implement FEAT_GICv3_NMI support - arm64/nmi: Add Kconfig for NMI - arm64/nmi: Add handling of superpriority interrupts as NMIs - arm64/irq: Document handling of FEAT_NMI in irqflags.h - arm64/entry: Don't call preempt_schedule_irq() with NMIs masked - arm64/nmi: Manage masking for superpriority interrupts along with DAIF - nvme-fc: use lock accessing port_state and rport state - KVM: arm64: Hide FEAT_NMI from guests - arm64/cpufeature: Detect PE support for FEAT_NMI - arm64/hyp-stub: Enable access to ALLINT - arm64/asm: Introduce assembly macros for managing ALLINT - arm64/sysreg: Add definitions for immediate versions of MSR ALLINT - arm64/booting: Document boot requirements for FEAT_NMI - irqchip/gic-v3: Fix priority mask handling - irqchip/gic-v3: Refactor ISB + EOIR at ack time - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 - soc cache: Add framework driver for HiSilicon SoC cache - !20333 phytium-tpcm-sig-8-hadler-reg-s5000c - !20767 Revert hibmc patches to fix null-ptr-deref - Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6" - Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert" - !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Code refactoring for hibmc_drm_drv - !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 & SM4 algorithm - !20666 CVE-2023-53712 - !20673 Fix CVE-2025-39957 - !20686 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20687 i40e: Fix potential invalid access when MAC list is empty - !20692 ipv6: sr: Fix MAC comparison to be constant-time - !20699 sctp: linearize cloned gso packets in sctp_rcv - !20688 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - !20698 libceph: fix potential use-after-free in have_mon_and_osd_map() - !20697 tipc: Fix use-after-free in tipc_mon_reinit_self(). - sctp: linearize cloned gso packets in sctp_rcv - libceph: fix potential use-after-free in have_mon_and_osd_map() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - ipv6: sr: Fix MAC comparison to be constant-time - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - i40e: Fix potential invalid access when MAC list is empty - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20119 Add 950 KVM feature support - !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration - !20638 ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - !20637 net/sched: sch_qfq: do not free existing class in qfq_change_class() - !20636 v2 macvlan: fix possible UAF in macvlan_forward_source() - wifi: mac80211: increase scan_ies_len for S1G - !20566 crypto: lzo - Fix compression buffer overrun - KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer - KVM: arm64: ipiv: Fix compilation warning - KVM: arm64: check if IPIV is enabled in BIOS - kvm: hisi: print error for IPIV - KVM: arm64: using kvm_vgic_global_state for ipiv - kvm: hisi: Don't allow to change mpidr in IPIv - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv - KVM: arm64: fix live migration bug of IPIv - irqchip/gic: Add HiSilicon PV SGI support - KVM: arm64: Implement PV_SGI related calls - KVM: arm64: Document PV-sgi interface - KVM: arm64: Introduce ipiv enable ioctl - arm64/config: add config to control whether enable IPIV feature - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12 - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE - kvm: hisi_virt: Register ipiv exception interrupt - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule - kvm: arm64: avoid sending multi-SGIs in IPIV - kvm: hisi_virt: Allocate VM table and save vpeid in it - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2 - KVM: arm64: fix memory leak in TLBI - KVM: arm64: Add new HiSi CPU type to support DVMBM - kvm: hisi_virt: Update TLBI broadcast feature for hip12 - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE - ARM: 9317/1: kexec: Make smp stop calls asynchronous - !20654 scsi: qla4xxx: Prevent a potential error pointer dereference - !20653 bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - !20655 mm/slub: avoid accessing metadata when pointer is invalid in object_err() - !20656 firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors - x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - mm/slub: avoid accessing metadata when pointer is invalid in object_err() - scsi: qla4xxx: Prevent a potential error pointer dereference - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - net/sched: sch_qfq: do not free existing class in qfq_change_class() - macvlan: fix possible UAF in macvlan_forward_source() - !20597 team: fix check for port enabled in team_queue_override_port_prio_changed() - !20593 CVE-2025-39744 fixup - !20465 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - !20178 v3 Fix CVE-2024-53179 - team: fix check for port enabled in team_queue_override_port_prio_changed() - rcu: Fix racy re-initialization of irq_work causing hangs - rcu: Fix rcu_read_unlock() deadloop due to IRQ work - rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs - !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts - !20428 wifi: mt76: do not run mt76u_status_worker if the device is not running - !20427 RDMA/bnxt_re: Prevent handling any completions after qp destroy - !20466 pptp: ensure minimal skb length in pptp_xmit() - !20426 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - !20574 RDMA/cm: Fix leaking the multicast GID table reference - !20573 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - !20565 Fix CVE-2023-53521 - !20521 Fix CVE-2026-23038 - RDMA/cm: Fix leaking the multicast GID table reference - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - crypto: lzo - Fix compression buffer overrun - !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() - eth: bnxt: move and rename reset helpers - x86: Resolve FPU state corruption between atomic and non-atomic contexts - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - bnxt_en: Fix potential data corruption with HW GRO/LRO - pptp: ensure minimal skb length in pptp_xmit() - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - wifi: mt76: do not run mt76u_status_worker if the device is not running - RDMA/bnxt_re: Prevent handling any completions after qp destroy - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - phytium: add tpcm sgi handler for s5000c - smb: client: fix use-after-free of signing key - cifs: missed ref-counting smb session in find - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode - crypto: ccp: Add support to switch to CSV RING_BUFFER mode - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues - openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI - crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm - crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm - !20737 pNFS: Fix a deadlock when returning a delegation during open() - !20725 tracing: Add recursion protection in kernel stack trace recording - !20746 Fix CVE-2026-22990 - !20671 arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - !20669 irqchip/gic-v3-its: Avoid truncating memory addresses - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - pNFS: Fix a deadlock when returning a delegation during open() - tracing: Add recursion protection in kernel stack trace recording - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - irqchip/gic-v3-its: Avoid truncating memory addresses - !20899 Fix CVE-2026-23216 - !20885 nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file - !20839 bpf, cpumap: Make sure kthread is running before map update returns - bpf, cpumap: Make sure kthread is running before map update returns - !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1 - !20818 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20801 ACPI/IORT: Add PMCG platform information for 162001900 - !20814 migrate: correct lock ordering for hugetlb file folios - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20800 fix CVE-2026-23054 - migrate: correct lock ordering for hugetlb file folios - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - net: hv_netvsc: reject RSS hash key programming without RX indirection table - hv_netvsc: Allocate rx indirection table size dynamically - RDMA/hns: Remove the accidentally added hns_roce_trace.h file - irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI - !21136 sched/rt: Skip currently executing CPU in rto_next_cpu() - !21131 procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21093 kexec: derive purgatory entry from symbol - !21140 ksmbd: fix use-after-free in kerberos authentication - !21132 SUNRPC: Ensure the transport backchannel association - ksmbd: fix use-after-free in kerberos authentication - sched/rt: Skip currently executing CPU in rto_next_cpu() - SUNRPC: Ensure the transport backchannel association - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21112 CVE-2024-57979 - !21111 ALSA: aloop: Fix racy access at PCM trigger - pps: Fix kabi in pps_device - pps: Fix a use-after-free - ALSA: aloop: Fix racy access at PCM trigger - kexec: derive purgatory entry from symbol - ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21072 v2 arm64/mpam: enable MPAM feature and - !20883 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - !21021 CVE-2026-23209 - arm64/mpam: fix the bitmap written during mpam device reset - arm64/mpam: only allow L3 cache MPAM device created - arm64/mpam: fix inadvertently updating after repeatedly updating - arm64/mpam: set default feedback of last_cmd_status interface as null string - !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured - !19837 KVM: Drop tlbs_dirty - !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !21014 bpf selftest cross compile fixes - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - macvlan: fix error recovery in macvlan_common_newlink() - !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - selftests/bpf: Pass target triple to get_sys_includes macro - selftests/bpf: Enable cross-building - net: hns3: hns3 driver should be initialized when VF multi tcs is configured - net: hns3: modify code of judging if SMMU DMA is enabled - !20976 support apei_page_offline_policy - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() - nvmet-tcp: don't map pages which can't come from HIGHMEM - nvmet-tcp: fix regression in data_digest calculation - nvmet-tcp: fix memory leak when performing a controller reset - !20971 Fix CVE-2026-23074 - apei/ghes: Add sysctl interface to control soft-offline page isolation - Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages" - !20887 HiSock Enhancement - net/sched: Enforce that teql can only be used as root qdisc - drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !20891 dcache: Limit the minimal number of bucket to two - !20956 CVE-2025-39967 - fbcon: Fix OOB access in font allocation - fbcon: fix integer overflow in fbcon_do_set_font - overflow: Allow mixed type arguments - nvmet-tcp: add an helper to free the cmd buffers - dcache: Limit the minimal number of bucket to two - bpf: Deprecate hisock unused helpers and orig ingress logic - bpf: Add local connect support for hisock - bpf: Add ipv4-mapped ipv6 addr support for hisock - bpf: Add target comm parse to hisock_cmd - bpf: Add multi port parse to hisock_cmd - bpf: Only deploy hisock in server - bpf: Apply BPF_HISOCK_INGRESS to hisock ingress - bpf: Add bpf_handle_ingress/egress_ptype helper function - bpf: Add bpf_set_ingress/egress_dev helper function - bpf: Add bpf_get_skb_ethhdr helper function - bpf: Add bpf_set_ingress_dst helper function - bpf: Add BPF_HISOCK_INGRESS attach type - net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - KVM: Drop tlbs_dirty - !21262 arm64/mpam: Extending MPAM features and bugfix - arm64/mpam: Allow MBMIN to be set to 0 - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit - arm64/mpam: Add quirk to shrink MATA PMG range - !21211 scsi: hisi_sas: Change the debugfs parameters dump count default value - scsi: hisi_sas: Change the debugfs parameters dump count default value - !21163 gic: Add hip09 support for HISILICON_ERRATUM_165010801 - gic: Add hip09 support for HISILICON_ERRATUM_165010801 - !19740 merge refs/pull/19740/head into OLK-5.10 - !19764 merge patch-1766387978 into OLK-5.10 - hisi: l3t: enable l3t with specific cpuid - !19705 [OLK-5.10]:update patches for sw64 architecture - !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct - !19372 padata: Fix pd UAF once and for all - !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation - !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS - net: atlantic: fix fragment overflow handling in RX path - !19736 locking/rwsem: Optimize down_read_trylock() under highly contended case - locking/rwsem: Optimize down_read_trylock() under highly contended case - !19724 mm/mem_reliable: use percise count during limit check - mm/mem_reliable: use percise count during limit check - !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - !19614 NFSD: Fix crash in nfsd4_read_release() - !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19673 firewire: net: fix use after free in fwnet_finish_incoming_packet() - sw64: set PTBR_SYS before accessing vmalloc area - sw64: set execute permission for virtual machine's hmcode text section - sw64: fix simd version of copy/clear_page() - sw64: fix random mmap base range - firewire: net: fix use after free in fwnet_finish_incoming_packet() - NFSD: Fix crash in nfsd4_read_release() - crypto: ccp: add ccp-mdev functionality to the ccp module. - padata: Fix pd UAF once and for all - KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access - KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer - KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests - KVM: x86: Pass emulation type to can_emulate_instruction() - KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support - KVM: SVM: Don't intercept #GP for SEV guests - swiotlb: do not zero buffer in set_memory_decrypted() - crypto: ccp - Add SEV_INIT rc error logging on init - dma-direct: always leak memory that can't be re-encrypted - dma-direct: factor out dma_set_{de,en}crypted helpers - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits - KVM: SEV-ES: fix another issue with string I/O VMGEXITs - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed - KVM: SEV-ES: keep INS functions together - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in - KVM: x86: split the two parts of emulator_pio_in - KVM: SEV-ES: clean up kvm_sev_es_ins/outs - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out - KVM: SEV-ES: rename guest_ins_data to sev_pio_data - KVM: SEV-ES: fix length of string I/O - x86/sev-es: Do not unroll string I/O for SEV-ES guests - x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs - !19833 merge patch-1766715015 into OLK-5.10 - !19911 merge patch-1767492639 into OLK-5.10 - !19635 merge refs/pull/19635/head into OLK-5.10 - !19903 merge patch-1767161454 into OLK-5.10 - !19864 merge patch-1766990471 into OLK-5.10 - !19865 merge patch-1766990523 into OLK-5.10 - mm: mem_reliable: prevent excessive direct reclaim loops - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - !19899 merge patch-1767098709 into OLK-5.10 - erofs: validate the extent length for uncompressed pclusters - !19885 merge patch-1767076771 into OLK-5.10 - !19876 merge patch-1767011340 into OLK-5.10 - scsi: qla2xxx: Clear cmds after chip reset - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - !19856 merge patch-1766976937 into OLK-5.10 - !19857 merge patch-1766976979 into OLK-5.10 - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private - virtio-net: ensure the received length does not exceed allocated size - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - tracing: Fix memory leaks in create_field_var() - !19760 merge patch-1766370959 into OLK-5.10 - !19786 merge patch-1766474397 into OLK-5.10 - !19548 merge refs/pull/19548/head into OLK-5.10 - ext4: xattr: fix null pointer deref in ext4_raw_inode() - !19739 merge refs/pull/19739/head into OLK-5.10 - !19732 merge refs/pull/19732/head into OLK-5.10 - !19719 merge refs/pull/19719/head into OLK-5.10 - bnxt_en: Fix memory corruption when FW resources change during ifdown - bnxt_en: Fix possible crash after creating sw mqprio TCs - x86/fpu: Ensure XFD state on signal delivery - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - usb: storage: Fix memory leak in USB bulk transport - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() - cpufreq: ACPI: Fix max-frequency computation - tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes - tools headers: Update tools's copy of x86/asm headers - tools headers cpufeatures: Sync with the kernel sources - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - !19798 merge OLK-5.10 into OLK-5.10 - !19972 merge patch-1767691219 into OLK-5.10 - !19974 merge patch-1767691279 into OLK-5.10 - !19973 merge patch-1767691254 into OLK-5.10 - !19713 merge refs/pull/19713/head into OLK-5.10 - !19832 merge OLK-5.10-ringbuffer into OLK-5.10 - qed: Don't collect too many protection override GRC elements - i40e: fix validation of VF state in get resources - i40e: fix input validation logic for action_meta - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() - KVM: SVM: Skip SEV cache flush if no ASIDs have been used - KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities - x86/sev: Make enc_dec_hypercall() accept a size instead of npages - mm: x86: Fix kabi breakage of pv_ops - KVM: x86: Play nice with protected guests in complete_hypercall_exit() - KVM: x86: Assume a 64-bit hypercall for guests with protected state - KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids() - KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa - x86/kvm: Add kexec support for SEV Live Migration. - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. - EFI: Introduce the new AMD Memory Encryption GUID. - mm: x86: Invoke hypercall when page encryption status is changed - x86/kvm: Add AMD SEV specific Hypercall3 - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA - KVM: SVM: fix missing sev_decommission in sev_receive_start - KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall - KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command - KVM: SVM: Add support for KVM_SEV_RECEIVE_START command - KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command - KVM: SVM: Add KVM_SEV_SEND_FINISH command - KVM: SVM: Add KVM_SEND_UPDATE_DATA command - KVM: SVM: Add KVM_SEV SEND_START command - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19047 [OLK-5.10] Fix CVE-2025-39839 - !18614 [OLK-5.10] Fix CVE-2025-39737 - !18654 [OLK-5.10] Fix CVE-2025-38705 - !18782 【OLK-5.10】fix CVE-2025-38712 - !18612 [OLK-5.10] Fix CVE-2025-38713 - !18635 [OLK-5.10] Fix CVE-2025-38714 - !18862 [OLK-5.10] Fix CVE-2025-38697 - !20058 CVE-2025-38111 - !20131 wifi: cfg80211: fix use-after-free in cmp_bss() - !20306 mm/kmemleak: move up cond_resched() call in page scanning loop - !20309 hwmon: constify pointers to hwmon_channel_info - hwmon: fix kabi of struct hwmon_channel_info - !20338 mlxsw: spectrum_router: Fix neighbour use-after-free - !20337 mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - hwmon: constify pointers to hwmon_channel_info - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - !20316 um: virtio_uml: Fix use-after-free after put_device in probe - !20114 KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc - um: virtio_uml: Fix use-after-free after put_device in probe - !20300 software node: Correct a OOB check in software_node_get_reference_args() - !20299 jfs: add sanity check for agwidth in dbMount - !20278 iavf: fix off-by-one issues in iavf_config_rss_reg() - !20277 e1000: fix OOB in e1000_tbi_should_accept() - !20285 hwmon: (ibmpex) fix use-after-free in high/low store - mm/kmemleak: move up cond_resched() call in page scanning loop - !19953 【OLK-5.10】 power_meter patchs from 6.6 - software node: Correct a OOB check in software_node_get_reference_args() - jfs: add sanity check for agwidth in dbMount - hwmon: (ibmpex) fix use-after-free in high/low store - !20269 drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !20271 KVM: x86: use array_index_nospec with indices that come from guest - !19788 ima: Handle error code returned by ima_filter_rule_match() - iavf: fix off-by-one issues in iavf_config_rss_reg() - e1000: fix OOB in e1000_tbi_should_accept() - !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver - !20203 drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - !20202 scsi: qla2xxx: Fix premature hw access after PCI error - !19728 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09 - KVM: x86: use array_index_nospec with indices that come from guest - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - RDMA/hns: Support config and query the CNP DSCP for HIP09 - !20221 Revert "RDMA/hns: Fix mismatch exception rollback" - !20195 ACPI: APEI: Handle repeated SEA error interrupts storm - !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes - Revert "RDMA/hns: Fix mismatch exception rollback" - RDMA/hns: Support drain SQ and RQ - RDMA/hns: Return actual error code instead of fixed EINVAL - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Fix RoCEv1 failure due to DSCP - !20161 cifs: fix session state check in reconnect to avoid use-after-free issue - !20050 smb: client: Fix use-after-free in cifs_fill_dirent - !19834 v2 md/raid0, raid10: Don't set discard sectors for request queue - !19816 scsi: sg: Do not sleep in atomic context - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - scsi: qla2xxx: Fix premature hw access after PCI error - ACPI: APEI: Handle repeated SEA error interrupts storm - !20150 tracing: Do not register unsupported perf events - !20163 tracing: Fix enabling of tracing on file release - !19938 net: hns3: add VLAN id validation before using - !19836 [OLK-5.10] Fixes for SEV-ES Guest Support - !20044 【openEuler-22.03-LTS-SP4】Memory copy error - !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2 - !20025 [OLK-5.10]Support SMT control on arm64. - !19922 NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - !19985 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - !19996 net: netpoll: fix incorrect refcount handling causing incorrect cleanup - !19908 drivers:misc:sdma-dae: add NULL judgement of global variables - !20026 fs/buffer: fix use-after-free when call bh_read() helper - !19962 i40e: add max boundary check for VF filters - !20103 kmemleak: Fix kmemleak false warnings - !20169 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - !20052 CVE-2024-21823 - !18962 erofs: Fix erofs_bmap error - !20016 kernfs: Fix UAF issue - !19694 ARM: fix hash_name() issue - !20048 VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - !20065 Fix CVE-2022-50737 - !20066 smb: client: fix race with concurrent opens in rename(2) - !20151 v2 Fix CVE-2025-40016 - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems - ACPI: IPMI: Add helper to wait for when SMI is selected - hwmon: (acpi_power_meter) Fix the fake power alarm reporting - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices(). - hwmon: (acpi_power_meter) Fix update the power trip points on failure - hwmon: (acpi_power_meter) Fix uninitialized variables - !20047 crypto: af_alg - Set merge to zero early in af_alg_sendmsg - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method - hwmon: (acpi_power_meter) replace open-coded kmemdup_nul - hwmon: (acpi_power_meter) Fix style issues - hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device() - hwmon: acpi_power_meter: Get rid of ACPICA message printing - ACPI: utils: Introduce acpi_evaluation_failure_warn() - ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE - hwmon: (acpi_power_meter) clean up freeing code - x86/sev: merge continuous pages into a large range when notifying range enc status changes - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - tracing: Fix enabling of tracing on file release - cifs: fix session state check in reconnect to avoid use-after-free issue - media: uvcvideo: Use heuristic to find stream entity - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Allow extra entities - tracing: Do not register unsupported perf events - wifi: cfg80211: fix use-after-free in cmp_bss() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - arm64: kdump: fix kmemleak unknown object warning when crash base is set - arm64: kdump: fix kmemleak unknown object warning - x86/sev: Use "SEV: " prefix for messages from sev.c - x86/sev: Propagate #GP if getting linear instruction address failed - smb: client: fix race with concurrent opens in rename(2) - fs/ntfs3: Add null pointer checks - fs/ntfs3: Validate buffer length while parsing index - fs/ntfs3: Validate index root when initialize NTFS security - net/mdiobus: Fix potential out-of-bounds read/write access - net: mdio: C22 is now optional, EOPNOTSUPP if not provided - dmaengine: idxd: Fix ->poll() return value - dmaengine: idxd: Fix allowing write() from different address spaces - dmaengine: idxd: Fix passing freed memory in idxd_cdev_open() - dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling - dmaengine: idxd: add per DSA wq workqueue for processing cr faults - dmaengine: idxd: add a write() method for applications to submit work - dmaengine: idxd: add a new security check to deal with a hardware erratum - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist - smb: client: Fix use-after-free in cifs_fill_dirent - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench' - x86: don't use REP_GOOD or ERMS for small memory clearing - x86: don't use REP_GOOD or ERMS for small memory copies - fs/buffer: fix use-after-free when call bh_read() helper - powerpc/kexec: Enable SMT before waking offline CPUs - cpu/SMT: Enable SMT only if a core is online - cpu/SMT: Create topology_smt_thread_allowed() - powerpc/topology: Check if a core is online - config: enable CONFIG_HOTPLUG_SMT for arm64 - arm64: Kconfig: Enable HOTPLUG_SMT - arm64: topology: Support SMT control on ACPI based system - arch_topology: Support SMT control for OF based system - cpu/SMT: Provide a default topology_is_primary_thread() - powerpc: Add HOTPLUG_SMT support - Revert "arm64: Kconfig: Enable HOTPLUG_SMT" - kernfs: Fix kabi broken in struct kernfs_root - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir(). - kernfs: fix potential NULL dereference in __kernfs_remove - kernfs: fix NULL dereferencing in kernfs_remove - kernfs: remove redundant kernfs_rwsem declaration. - kernfs: prevent early freeing of root node - kernfs: switch global kernfs_rwsem lock to per-fs lock - KVM: SVM: Make sure GHCB is mapped before updating - KVM: SVM: check CR4 changes against vcpu->arch - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests - x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]() - x86/sev: Fix error message in runtime #VC handler - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - i40e: add max boundary check for VF filters - net: hns3: add VLAN id validation before using - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled - ACPI: thermal: Move to dedicated function sysfs extra attr creation - ACPI: thermal: Use thermal_zone_device() - thermal: core: Encapsulate tz->device field - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - drivers:misc:sdma-dae: add NULL judgement of global variables - md/raid0, raid10: Don't set discard sectors for request queue - scsi: sg: Do not sleep in atomic context - ima: Handle error code returned by ima_filter_rule_match() - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - ARM: fix hash_name() fault - ARM: allow __do_kernel_fault() to report execution of memory faults - configs: enable CONFIG_MICROCODE_ZHAOXIN - x86/microcode: Add Zhaoxin cpu microcode update driver - drm/amd/pm: fix null pointer access - batman-adv: fix OOB read/write in network-coding decode - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - erofs: Fix erofs_bmap error - jfs: upper bound check of tree index in dbAllocAG - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - !20464 rcu: Protect ->defer_qs_iw_pending from data race - !20318 net: hns3: check pf tc cfg when setting vf tc - !20522 CVE-2022-50616 - !20423 use SYS_CNTVCTSS_EL0 for gettimeofday - regulator: core: Fix resolve supply lookup issue - regulator: core: Use different devices for resource allocation and DT lookup - !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO. - !19965 nvme-fc: use lock accessing port_state and rport state - !20226 leapraid: supports LeapRaid controller - !20436 fix CVE-2026-22998 - rcu: Protect ->defer_qs_iw_pending from data race - !20449 scsi/hiraid: Support New Raid feature - !20252 ntfs: set dummy blocksize to read boot_block when mounting - !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc - !20335 Fix CVE-2025-37947 - mm: Add PAGE_ALIGN_DOWN macro - soc cache: fix walk page parameter and drop incorrect check - soc cache: Fix incorrect error path of ioctl - soc cache: Fix incorrect size validation - soc cache: Enforce maintain type check - soc cache: Modify default config to compile HiSilicon SoC cache driver - !19858 [OLK-5.10] perf support for HiSilicon HIP12 - !20331 Fix CVE-2025-39835 - !20439 Fix CVE-2025-39945 - !20251 Fix CVE-2025-38480 - !20184 Fix CVE-2025-37770 - !20185 Fix CVE-2022-49829 - !20183 Fix CVE-2025-23138 - !20240 Fix CVE-2025-21981 - !20409 net: xfrm: Fix CVE-2025-40215 - !20408 net: xfrm: Fix CVE-2025-39797 - !20407 netfilter: allow exp not to be removed in nf_ct_find_expectation - !20406 bpf, sockmap: Avoid using sk_socket after free when sending - !20405 can: bcm: add locking for bcm_op runtime updates - !20404 RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent - scsi/hiraid: Support New Raid feature - !19950 【OLK-5.10】 Drivers GPU Patches from 6.6 - !20422 driver core: fix potential null-ptr-deref in device_add() - cnic: Fix use-after-free bugs in cnic_delete_task - !20421 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - !20420 usb: early: xhci-dbc: Fix a potential out-of-bound memory access - !20418 drivers: base: Free devm resources when unregistering a device - !20417 driver core: fix resource leak in device_add() - !20416 Fix CVE-2022-49309 - !20415 kernel/resource: fix kfree() of bootmem memory again - !20414 drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - !20413 of: check previous kernel's ima-kexec-buffer against memory bounds - !20412 HID: core: Harden s32ton() against conversion to 0 bits - !20411 iommu/amd: Avoid stack buffer overflow from kernel cmdline - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvmet-tcp: remove boilerplate code - !20390 drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - vdso: do cntvct workaround in the VDSO - arm64: vdso: remove two .altinstructions related symbols - arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday - arm64: alternative: patch alternatives in the vDSO - arm64: module: move find_section to header - driver core: fix potential null-ptr-deref in device_add() - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - usb: early: xhci-dbc: Fix a potential out-of-bound memory access - drivers: base: Free devm resources when unregistering a device - driver core: fix resource leak in device_add() - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() - !20383 usb: cdns3: fix random warning message when driver load - kernel/resource: fix kfree() of bootmem memory again - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - of: check previous kernel's ima-kexec-buffer against memory bounds - HID: core: Harden s32ton() against conversion to 0 bits - !19959 【OLK-5.10】Support NMI Watchdog - iommu/amd: Avoid stack buffer overflow from kernel cmdline - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfrm: Duplicate SPI Handling - netfilter: allow exp not to be removed in nf_ct_find_expectation - bpf, sockmap: Avoid using sk_socket after free when sending - can: bcm: add locking for bcm_op runtime updates - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation. - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh - watchdog/perf: Provide function for adjusting the event period - config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64 - irqchip/gic-v3: Fix one race condition due to NMI withdraw - watchdog: Fix call trace when failed to initialize sdei - watchdog: Support watchdog_sdei coexist with existing watchdogs - init: only move down lockup_detector_init() when sdei_watchdog is enabled - arm64: enable perf events based hard lockup detector - arm64: add hw_nmi_get_sample_period for preparation of lockup detector - usb: cdns3: fix random warning message when driver load - !20051 smb3: fix for slab out of bounds on mount to ksmbd - comedi: Fix use of uninitialized data in insn_rw_emulate_bits() - watch_queue: fix pipe accounting mismatch - drm/amd/pm/powerplay: Prevent division by zero - !20357 ext4: fix e4b bitmap inconsistency reports - ice: fix memory leak in aRFS after reset - drm/hisilicon/hibmc: hibmc-drm bugfix for DP - !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6 - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel - drm/hisilicon/hibmc: Add vga connector detect functions - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp - drm/hisilicon/hibmc: Add dp serdes cfg in dp process - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis - drm/hisilicon/hibmc: Restructuring the header dp_reg.h - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers - drm/ast: Implement polling for VGA and SIL164 connectors - drm/sysfs: Register "ddc" symlink later - drm/hisilicon/hibmc: add dp module in hibmc - drm/hisilicon/hibmc: refactored struct hibmc_drm_private - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers - drm/hisilicon/hibmc: add dp aux in hibmc drivers - gic: increase the arch_timer priority to avoid hardlockup - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803 - drm/scheduler: fix fence ref counting - !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology - ext4: fix e4b bitmap inconsistency reports - !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction - !20256 Fix CVE-2025-39828 - !20339 wifi: prevent A-MSDU attacks in mesh networks - wifi: prevent A-MSDU attacks in mesh networks - ksmbd: fix stream write failure - ksmbd: prevent out-of-bounds stream writes by validating *pos - xfs: do not propagate ENODATA disk errors into xattr code - net: hns3: check pf tc cfg when setting vf tc - net: hns3: support tc limit speed - net: hns3: the multi-tcs VF can be configured only when the interface is down - irqchip/gic-v3-its: Remove DevID Pool's restriction - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *' - perf: Update .gitignore file - perf stat: Enable iostat mode for x86 platforms - perf stat: Helper functions for PCIe root ports list in iostat mode - perf: Fix tt_core mismatch over PG CPU - perf iostat: Use system-wide mode if the target cpu_list is unspecified - perf arm_spe: Correct memory level for remote access - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU - Documentation: hisi-pmu: Fix of minor format error - drivers/perf: hisi: Add support for L3C PMU v3 - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - arm64: topology: Setup amu fie when cpu hotplugging - topology: Set capacity_freq_ref in all cases - arm64/amu: Use capacity_ref_freq() to set AMU ratio - cpufreq/cppc: Set the frequency used for computing the capacity - cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}() - energy_model: Use a fixed reference frequency - cpufreq/schedutil: Use a fixed reference frequency - cpufreq: Use the fixed and coherent frequency for scaling capacity - sched/topology: Add a new arch_scale_freq_ref() method - arch_topology: Introduce thermal pressure update function - riscv: export cpu/freq invariant to scheduler - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() - cpufreq: Allow drivers to advertise boost enabled - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' - openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix unused-function warning - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: ACPI: Mark boost policy as enabled when setting boost - cpufreq: ACPI: Only set boost MSRs on supported CPUs - cpufreq: ACPI: Defer setting boost MSRs - cpufreq: acpi: Remove acpi_cpufreq_cpu_ready() - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw() - Documentation: power: Add description about new callback for EM registration - arch_topology: Avoid use-after-free for scale_freq_data - cpufreq: Exit governor when failed to start old governor - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() - cpufreq: Initialize cpufreq-based frequency-invariance later - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost - cpufreq: Remove duplicate check in __cpufreq_offline() - cpufreq: Don't unregister cpufreq cooling on CPU hotplug - cpufreq: Remove the ->stop_cpu() driver callback - cpufreq: intel_pstate: Combine ->stop_cpu() and ->offline() - cpufreq: powernv: Migrate to ->exit() callback instead of ->stop_cpu() - docs/zh_CN: add cpu-freq cpu-drivers.rst translation - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() - cpufreq: CPPC: Do not return a value from populate_efficiency_class() - cpufreq: CPPC: Remove cpu_data_list - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate() - cpufreq: CPPC: Register EM based on efficiency class information - PM: EM: Change the order of arguments in the .active_power() callback - cpufreq: Add callback to register with energy model - PM: EM: Add .get_cost() callback - cpufreq: CPPC: Add per_cpu efficiency_class - cpufreq: remove useless INIT_LIST_HEAD() - ACPI: CPPC: Disable FIE if registers in PCC regions - ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate() - cpufreq: cppc: Fix invalid return value in .get() callback - cppc_cpufreq: Fix possible null pointer dereference - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn() - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus - cpufreq: CPPC: Add support for frequency invariance - arch_topology: Export arch_freq_scale and helpers - cpufreq: CPPC: Pass structure instance by reference - cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init - cpufreq: CPPC: Migrate to ->exit() callback instead of ->stop_cpu() - cppc_cpufreq: replace per-cpu data array with a list - cppc_cpufreq: expose information on frequency domains - cppc_cpufreq: clarify support for coordination types - arch_topology: Allow multiple entities to provide sched_freq_tick() callback - sched/topology,schedutil: Wrap sched domains rebuild - arch_topology: Rename freq_scale as arch_freq_scale - arm64: topology: Drop the useless update to per-cpu cycles - arm64: topology: Make AMUs work with modular cpufreq drivers - arm64: topology: Reorder init_amu_fie() a bit - arm64: topology: Avoid the have_policy check - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() - cpufreq: prevent NULL dereference in cpufreq_online() - cpufreq: CPPC: Fix wrong max_freq in policy initialization - cppc_cpufreq: simplify use of performance capabilities - cpufreq: Introduce a more generic way to set default per-policy boost flag - cpufreq: Fix re-boost issue after hotplugging a CPU - cpufreq: Support per-policy performance boost - ntfs: set dummy blocksize to read boot_block when mounting - leapraid: supports LeapRaid controller - perf mem: Count L2 HITM for c2c statistic - perf mem: Add statistics for peer snooping - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12 - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel - perf arm-spe: augment the data source type with neoverse_spe list - tools arm64: Import cputype.h - arm64: cputype: Add cputype definition for HIP12 - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface - drivers/perf: hisi: Add cacheable option for L3C PMU - perf: Remove unstable events for uncore L3C PMU - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu - perf iostat: hisi: Fix port range retrival - drivers/perf: hisi: Add support for L3C PMU v3 - drivers/perf: hisi: Refactor the event configuration of L3C PMU - drivers/perf: hisi: Extend the field of tt_core - drivers/perf: hisi: Extract the event filter check of L3C PMU - drivers/perf: hisi: Simplify the probe process of each L3C PMU version - drivers/perf: hisi: Export hisi_uncore_pmu_isr() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/perf: hisi: Add support for HiSilicon MN PMU driver - drivers/perf: hisi: Add support for HiSilicon NoC PMU - drivers/perf: hisi: Support PMUs with no interrupt - drivers/perf: hisi: Relax the event number check of v2 PMUs - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver - drivers/perf: hisi: Simplify the probe process for each DDRC version - drivers/perf: hisi: Delete redundant blank line of DDRC PMU - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier - drivers/perf: convert sysfs snprintf family to sysfs_emit - perf: hisi: Constify static struct attribute_group - perf/hisi: Constify static attribute_group structs - drivers/perf: hisi: Add a common function to retrieve topology from firmware - drivers/perf: hisi: Extract topology information to a separate structure - drivers/perf: hisi: Refactor the detection of associated CPUs - drivers/perf: hisi: Migrate to one online CPU if no associated one online - drivers/perf: hisi: Don't update the associated_cpus on CPU offline - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs - perf stat: Enable iostat mode for HiSilicon PCIe PMU - perf stat: Add struct perf_stat_aggr to perf_stat_evsel - perf stat: Display iostat headers correctly - perf stat: Don't display metric header for non-leader uncore events - perf stat: Basic support for iostat in perf - perf arm-spe: Refactor arm-spe to support operation packet type - perf arm-spe: Use SPE data source for neoverse cores - perf arm-spe: Don't set data source if it's not a memory operation - perf tools: Sync addition of PERF_MEM_SNOOPX_PEER - tools: arm64: Import sysreg.h - smb3: fix for slab out of bounds on mount to ksmbd - watchdog/perf: adapt the watchdog_perf interface for async model - watchdog/perf: add a weak function for an arch to detect if perf can use NMIs - irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed - irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked - irqchip/gic-v3: Implement FEAT_GICv3_NMI support - arm64/nmi: Add Kconfig for NMI - arm64/nmi: Add handling of superpriority interrupts as NMIs - arm64/irq: Document handling of FEAT_NMI in irqflags.h - arm64/entry: Don't call preempt_schedule_irq() with NMIs masked - arm64/nmi: Manage masking for superpriority interrupts along with DAIF - nvme-fc: use lock accessing port_state and rport state - KVM: arm64: Hide FEAT_NMI from guests - arm64/cpufeature: Detect PE support for FEAT_NMI - arm64/hyp-stub: Enable access to ALLINT - arm64/asm: Introduce assembly macros for managing ALLINT - arm64/sysreg: Add definitions for immediate versions of MSR ALLINT - arm64/booting: Document boot requirements for FEAT_NMI - irqchip/gic-v3: Fix priority mask handling - irqchip/gic-v3: Refactor ISB + EOIR at ack time - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 - soc cache: Add framework driver for HiSilicon SoC cache - !20333 phytium-tpcm-sig-8-hadler-reg-s5000c - !20767 Revert hibmc patches to fix null-ptr-deref - Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6" - Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert" - !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Code refactoring for hibmc_drm_drv - !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 & SM4 algorithm - !20666 CVE-2023-53712 - !20673 Fix CVE-2025-39957 - !20686 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20687 i40e: Fix potential invalid access when MAC list is empty - !20692 ipv6: sr: Fix MAC comparison to be constant-time - !20699 sctp: linearize cloned gso packets in sctp_rcv - !20688 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - !20698 libceph: fix potential use-after-free in have_mon_and_osd_map() - !20697 tipc: Fix use-after-free in tipc_mon_reinit_self(). - sctp: linearize cloned gso packets in sctp_rcv - libceph: fix potential use-after-free in have_mon_and_osd_map() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - ipv6: sr: Fix MAC comparison to be constant-time - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - i40e: Fix potential invalid access when MAC list is empty - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20119 Add 950 KVM feature support - !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration - !20638 ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - !20637 net/sched: sch_qfq: do not free existing class in qfq_change_class() - !20636 v2 macvlan: fix possible UAF in macvlan_forward_source() - wifi: mac80211: increase scan_ies_len for S1G - !20566 crypto: lzo - Fix compression buffer overrun - KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer - KVM: arm64: ipiv: Fix compilation warning - KVM: arm64: check if IPIV is enabled in BIOS - kvm: hisi: print error for IPIV - KVM: arm64: using kvm_vgic_global_state for ipiv - kvm: hisi: Don't allow to change mpidr in IPIv - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv - KVM: arm64: fix live migration bug of IPIv - irqchip/gic: Add HiSilicon PV SGI support - KVM: arm64: Implement PV_SGI related calls - KVM: arm64: Document PV-sgi interface - KVM: arm64: Introduce ipiv enable ioctl - arm64/config: add config to control whether enable IPIV feature - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12 - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE - kvm: hisi_virt: Register ipiv exception interrupt - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule - kvm: arm64: avoid sending multi-SGIs in IPIV - kvm: hisi_virt: Allocate VM table and save vpeid in it - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2 - KVM: arm64: fix memory leak in TLBI - KVM: arm64: Add new HiSi CPU type to support DVMBM - kvm: hisi_virt: Update TLBI broadcast feature for hip12 - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE - ARM: 9317/1: kexec: Make smp stop calls asynchronous - !20654 scsi: qla4xxx: Prevent a potential error pointer dereference - !20653 bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - !20655 mm/slub: avoid accessing metadata when pointer is invalid in object_err() - !20656 firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors - x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - mm/slub: avoid accessing metadata when pointer is invalid in object_err() - scsi: qla4xxx: Prevent a potential error pointer dereference - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - net/sched: sch_qfq: do not free existing class in qfq_change_class() - macvlan: fix possible UAF in macvlan_forward_source() - !20597 team: fix check for port enabled in team_queue_override_port_prio_changed() - !20593 CVE-2025-39744 fixup - !20465 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - !20178 v3 Fix CVE-2024-53179 - team: fix check for port enabled in team_queue_override_port_prio_changed() - rcu: Fix racy re-initialization of irq_work causing hangs - rcu: Fix rcu_read_unlock() deadloop due to IRQ work - rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs - !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts - !20428 wifi: mt76: do not run mt76u_status_worker if the device is not running - !20427 RDMA/bnxt_re: Prevent handling any completions after qp destroy - !20466 pptp: ensure minimal skb length in pptp_xmit() - !20426 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - !20574 RDMA/cm: Fix leaking the multicast GID table reference - !20573 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - !20565 Fix CVE-2023-53521 - !20521 Fix CVE-2026-23038 - RDMA/cm: Fix leaking the multicast GID table reference - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - crypto: lzo - Fix compression buffer overrun - !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() - eth: bnxt: move and rename reset helpers - x86: Resolve FPU state corruption between atomic and non-atomic contexts - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - bnxt_en: Fix potential data corruption with HW GRO/LRO - pptp: ensure minimal skb length in pptp_xmit() - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - wifi: mt76: do not run mt76u_status_worker if the device is not running - RDMA/bnxt_re: Prevent handling any completions after qp destroy - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - phytium: add tpcm sgi handler for s5000c - smb: client: fix use-after-free of signing key - cifs: missed ref-counting smb session in find - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode - crypto: ccp: Add support to switch to CSV RING_BUFFER mode - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues - openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI - crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm - crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm - !20737 pNFS: Fix a deadlock when returning a delegation during open() - !20725 tracing: Add recursion protection in kernel stack trace recording - !20746 Fix CVE-2026-22990 - !20671 arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - !20669 irqchip/gic-v3-its: Avoid truncating memory addresses - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - pNFS: Fix a deadlock when returning a delegation during open() - tracing: Add recursion protection in kernel stack trace recording - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - irqchip/gic-v3-its: Avoid truncating memory addresses - !20899 Fix CVE-2026-23216 - !20885 nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file - !20839 bpf, cpumap: Make sure kthread is running before map update returns - bpf, cpumap: Make sure kthread is running before map update returns - !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1 - !20818 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20801 ACPI/IORT: Add PMCG platform information for 162001900 - !20814 migrate: correct lock ordering for hugetlb file folios - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20800 fix CVE-2026-23054 - migrate: correct lock ordering for hugetlb file folios - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - net: hv_netvsc: reject RSS hash key programming without RX indirection table - hv_netvsc: Allocate rx indirection table size dynamically - RDMA/hns: Remove the accidentally added hns_roce_trace.h file - irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI - !21136 sched/rt: Skip currently executing CPU in rto_next_cpu() - !21131 procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21093 kexec: derive purgatory entry from symbol - !21140 ksmbd: fix use-after-free in kerberos authentication - !21132 SUNRPC: Ensure the transport backchannel association - ksmbd: fix use-after-free in kerberos authentication - sched/rt: Skip currently executing CPU in rto_next_cpu() - SUNRPC: Ensure the transport backchannel association - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21112 CVE-2024-57979 - !21111 ALSA: aloop: Fix racy access at PCM trigger - pps: Fix kabi in pps_device - pps: Fix a use-after-free - ALSA: aloop: Fix racy access at PCM trigger - kexec: derive purgatory entry from symbol - ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21072 v2 arm64/mpam: enable MPAM feature and - !20883 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - !21021 CVE-2026-23209 - arm64/mpam: fix the bitmap written during mpam device reset - arm64/mpam: only allow L3 cache MPAM device created - arm64/mpam: fix inadvertently updating after repeatedly updating - arm64/mpam: set default feedback of last_cmd_status interface as null string - !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured - !19837 KVM: Drop tlbs_dirty - !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !21014 bpf selftest cross compile fixes - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - macvlan: fix error recovery in macvlan_common_newlink() - !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - selftests/bpf: Pass target triple to get_sys_includes macro - selftests/bpf: Enable cross-building - net: hns3: hns3 driver should be initialized when VF multi tcs is configured - net: hns3: modify code of judging if SMMU DMA is enabled - !20976 support apei_page_offline_policy - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() - nvmet-tcp: don't map pages which can't come from HIGHMEM - nvmet-tcp: fix regression in data_digest calculation - nvmet-tcp: fix memory leak when performing a controller reset - !20971 Fix CVE-2026-23074 - apei/ghes: Add sysctl interface to control soft-offline page isolation - Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages" - !20887 HiSock Enhancement - net/sched: Enforce that teql can only be used as root qdisc - drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !20891 dcache: Limit the minimal number of bucket to two - !20956 CVE-2025-39967 - fbcon: Fix OOB access in font allocation - fbcon: fix integer overflow in fbcon_do_set_font - overflow: Allow mixed type arguments - nvmet-tcp: add an helper to free the cmd buffers - dcache: Limit the minimal number of bucket to two - bpf: Deprecate hisock unused helpers and orig ingress logic - bpf: Add local connect support for hisock - bpf: Add ipv4-mapped ipv6 addr support for hisock - bpf: Add target comm parse to hisock_cmd - bpf: Add multi port parse to hisock_cmd - bpf: Only deploy hisock in server - bpf: Apply BPF_HISOCK_INGRESS to hisock ingress - bpf: Add bpf_handle_ingress/egress_ptype helper function - bpf: Add bpf_set_ingress/egress_dev helper function - bpf: Add bpf_get_skb_ethhdr helper function - bpf: Add bpf_set_ingress_dst helper function - bpf: Add BPF_HISOCK_INGRESS attach type - net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - KVM: Drop tlbs_dirty - !21262 arm64/mpam: Extending MPAM features and bugfix - arm64/mpam: Allow MBMIN to be set to 0 - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit - arm64/mpam: Add quirk to shrink MATA PMG range - !21211 scsi: hisi_sas: Change the debugfs parameters dump count default value - scsi: hisi_sas: Change the debugfs parameters dump count default value - !21163 gic: Add hip09 support for HISILICON_ERRATUM_165010801 - gic: Add hip09 support for HISILICON_ERRATUM_165010801 - !19740 merge refs/pull/19740/head into OLK-5.10 - !19764 merge patch-1766387978 into OLK-5.10 - hisi: l3t: enable l3t with specific cpuid - !19705 [OLK-5.10]:update patches for sw64 architecture - !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct - !19372 padata: Fix pd UAF once and for all - !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation - !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS - net: atlantic: fix fragment overflow handling in RX path - !19736 locking/rwsem: Optimize down_read_trylock() under highly contended case - locking/rwsem: Optimize down_read_trylock() under highly contended case - !19724 mm/mem_reliable: use percise count during limit check - mm/mem_reliable: use percise count during limit check - !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - !19614 NFSD: Fix crash in nfsd4_read_release() - !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19673 firewire: net: fix use after free in fwnet_finish_incoming_packet() - sw64: set PTBR_SYS before accessing vmalloc area - sw64: set execute permission for virtual machine's hmcode text section - sw64: fix simd version of copy/clear_page() - sw64: fix random mmap base range - firewire: net: fix use after free in fwnet_finish_incoming_packet() - NFSD: Fix crash in nfsd4_read_release() - crypto: ccp: add ccp-mdev functionality to the ccp module. - padata: Fix pd UAF once and for all - KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access - KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer - KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests - KVM: x86: Pass emulation type to can_emulate_instruction() - KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support - KVM: SVM: Don't intercept #GP for SEV guests - swiotlb: do not zero buffer in set_memory_decrypted() - crypto: ccp - Add SEV_INIT rc error logging on init - dma-direct: always leak memory that can't be re-encrypted - dma-direct: factor out dma_set_{de,en}crypted helpers - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits - KVM: SEV-ES: fix another issue with string I/O VMGEXITs - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed - KVM: SEV-ES: keep INS functions together - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in - KVM: x86: split the two parts of emulator_pio_in - KVM: SEV-ES: clean up kvm_sev_es_ins/outs - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out - KVM: SEV-ES: rename guest_ins_data to sev_pio_data - KVM: SEV-ES: fix length of string I/O - x86/sev-es: Do not unroll string I/O for SEV-ES guests - x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs - !19833 merge patch-1766715015 into OLK-5.10 - !19911 merge patch-1767492639 into OLK-5.10 - !19635 merge refs/pull/19635/head into OLK-5.10 - !19903 merge patch-1767161454 into OLK-5.10 - !19864 merge patch-1766990471 into OLK-5.10 - !19865 merge patch-1766990523 into OLK-5.10 - mm: mem_reliable: prevent excessive direct reclaim loops - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - !19899 merge patch-1767098709 into OLK-5.10 - erofs: validate the extent length for uncompressed pclusters - !19885 merge patch-1767076771 into OLK-5.10 - !19876 merge patch-1767011340 into OLK-5.10 - scsi: qla2xxx: Clear cmds after chip reset - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - !19856 merge patch-1766976937 into OLK-5.10 - !19857 merge patch-1766976979 into OLK-5.10 - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private - virtio-net: ensure the received length does not exceed allocated size - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - tracing: Fix memory leaks in create_field_var() - !19760 merge patch-1766370959 into OLK-5.10 - !19786 merge patch-1766474397 into OLK-5.10 - !19548 merge refs/pull/19548/head into OLK-5.10 - ext4: xattr: fix null pointer deref in ext4_raw_inode() - !19739 merge refs/pull/19739/head into OLK-5.10 - !19732 merge refs/pull/19732/head into OLK-5.10 - !19719 merge refs/pull/19719/head into OLK-5.10 - bnxt_en: Fix memory corruption when FW resources change during ifdown - bnxt_en: Fix possible crash after creating sw mqprio TCs - x86/fpu: Ensure XFD state on signal delivery - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - usb: storage: Fix memory leak in USB bulk transport - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() - cpufreq: ACPI: Fix max-frequency computation - tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes - tools headers: Update tools's copy of x86/asm headers - tools headers cpufeatures: Sync with the kernel sources - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - !19798 merge OLK-5.10 into OLK-5.10 - !19972 merge patch-1767691219 into OLK-5.10 - !19974 merge patch-1767691279 into OLK-5.10 - !19973 merge patch-1767691254 into OLK-5.10 - !19713 merge refs/pull/19713/head into OLK-5.10 - !19832 merge OLK-5.10-ringbuffer into OLK-5.10 - qed: Don't collect too many protection override GRC elements - i40e: fix validation of VF state in get resources - i40e: fix input validation logic for action_meta - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() - KVM: SVM: Skip SEV cache flush if no ASIDs have been used - KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities - x86/sev: Make enc_dec_hypercall() accept a size instead of npages - mm: x86: Fix kabi breakage of pv_ops - KVM: x86: Play nice with protected guests in complete_hypercall_exit() - KVM: x86: Assume a 64-bit hypercall for guests with protected state - KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids() - KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa - x86/kvm: Add kexec support for SEV Live Migration. - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. - EFI: Introduce the new AMD Memory Encryption GUID. - mm: x86: Invoke hypercall when page encryption status is changed - x86/kvm: Add AMD SEV specific Hypercall3 - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA - KVM: SVM: fix missing sev_decommission in sev_receive_start - KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall - KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command - KVM: SVM: Add support for KVM_SEV_RECEIVE_START command - KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command - KVM: SVM: Add KVM_SEV_SEND_FINISH command - KVM: SVM: Add KVM_SEND_UPDATE_DATA command - KVM: SVM: Add KVM_SEV SEND_START command - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19047 [OLK-5.10] Fix CVE-2025-39839 - !18614 [OLK-5.10] Fix CVE-2025-39737 - !18654 [OLK-5.10] Fix CVE-2025-38705 - !18782 【OLK-5.10】fix CVE-2025-38712 - !18612 [OLK-5.10] Fix CVE-2025-38713 - !18635 [OLK-5.10] Fix CVE-2025-38714 - !18862 [OLK-5.10] Fix CVE-2025-38697 - !20058 CVE-2025-38111 - !20131 wifi: cfg80211: fix use-after-free in cmp_bss() - !20306 mm/kmemleak: move up cond_resched() call in page scanning loop - !20309 hwmon: constify pointers to hwmon_channel_info - hwmon: fix kabi of struct hwmon_channel_info - !20338 mlxsw: spectrum_router: Fix neighbour use-after-free - !20337 mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - hwmon: constify pointers to hwmon_channel_info - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - !20316 um: virtio_uml: Fix use-after-free after put_device in probe - !20114 KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc - um: virtio_uml: Fix use-after-free after put_device in probe - !20300 software node: Correct a OOB check in software_node_get_reference_args() - !20299 jfs: add sanity check for agwidth in dbMount - !20278 iavf: fix off-by-one issues in iavf_config_rss_reg() - !20277 e1000: fix OOB in e1000_tbi_should_accept() - !20285 hwmon: (ibmpex) fix use-after-free in high/low store - mm/kmemleak: move up cond_resched() call in page scanning loop - !19953 【OLK-5.10】 power_meter patchs from 6.6 - software node: Correct a OOB check in software_node_get_reference_args() - jfs: add sanity check for agwidth in dbMount - hwmon: (ibmpex) fix use-after-free in high/low store - !20269 drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !20271 KVM: x86: use array_index_nospec with indices that come from guest - !19788 ima: Handle error code returned by ima_filter_rule_match() - iavf: fix off-by-one issues in iavf_config_rss_reg() - e1000: fix OOB in e1000_tbi_should_accept() - !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver - !20203 drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - !20202 scsi: qla2xxx: Fix premature hw access after PCI error - !19728 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09 - KVM: x86: use array_index_nospec with indices that come from guest - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - RDMA/hns: Support config and query the CNP DSCP for HIP09 - !20221 Revert "RDMA/hns: Fix mismatch exception rollback" - !20195 ACPI: APEI: Handle repeated SEA error interrupts storm - !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes - Revert "RDMA/hns: Fix mismatch exception rollback" - RDMA/hns: Support drain SQ and RQ - RDMA/hns: Return actual error code instead of fixed EINVAL - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Fix RoCEv1 failure due to DSCP - !20161 cifs: fix session state check in reconnect to avoid use-after-free issue - !20050 smb: client: Fix use-after-free in cifs_fill_dirent - !19834 v2 md/raid0, raid10: Don't set discard sectors for request queue - !19816 scsi: sg: Do not sleep in atomic context - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - scsi: qla2xxx: Fix premature hw access after PCI error - ACPI: APEI: Handle repeated SEA error interrupts storm - !20150 tracing: Do not register unsupported perf events - !20163 tracing: Fix enabling of tracing on file release - !19938 net: hns3: add VLAN id validation before using - !19836 [OLK-5.10] Fixes for SEV-ES Guest Support - !20044 【openEuler-22.03-LTS-SP4】Memory copy error - !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2 - !20025 [OLK-5.10]Support SMT control on arm64. - !19922 NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - !19985 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - !19996 net: netpoll: fix incorrect refcount handling causing incorrect cleanup - !19908 drivers:misc:sdma-dae: add NULL judgement of global variables - !20026 fs/buffer: fix use-after-free when call bh_read() helper - !19962 i40e: add max boundary check for VF filters - !20103 kmemleak: Fix kmemleak false warnings - !20169 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - !20052 CVE-2024-21823 - !18962 erofs: Fix erofs_bmap error - !20016 kernfs: Fix UAF issue - !19694 ARM: fix hash_name() issue - !20048 VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - !20065 Fix CVE-2022-50737 - !20066 smb: client: fix race with concurrent opens in rename(2) - !20151 v2 Fix CVE-2025-40016 - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems - ACPI: IPMI: Add helper to wait for when SMI is selected - hwmon: (acpi_power_meter) Fix the fake power alarm reporting - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices(). - hwmon: (acpi_power_meter) Fix update the power trip points on failure - hwmon: (acpi_power_meter) Fix uninitialized variables - !20047 crypto: af_alg - Set merge to zero early in af_alg_sendmsg - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method - hwmon: (acpi_power_meter) replace open-coded kmemdup_nul - hwmon: (acpi_power_meter) Fix style issues - hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device() - hwmon: acpi_power_meter: Get rid of ACPICA message printing - ACPI: utils: Introduce acpi_evaluation_failure_warn() - ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE - hwmon: (acpi_power_meter) clean up freeing code - x86/sev: merge continuous pages into a large range when notifying range enc status changes - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - tracing: Fix enabling of tracing on file release - cifs: fix session state check in reconnect to avoid use-after-free issue - media: uvcvideo: Use heuristic to find stream entity - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Allow extra entities - tracing: Do not register unsupported perf events - wifi: cfg80211: fix use-after-free in cmp_bss() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - arm64: kdump: fix kmemleak unknown object warning when crash base is set - arm64: kdump: fix kmemleak unknown object warning - x86/sev: Use "SEV: " prefix for messages from sev.c - x86/sev: Propagate #GP if getting linear instruction address failed - smb: client: fix race with concurrent opens in rename(2) - fs/ntfs3: Add null pointer checks - fs/ntfs3: Validate buffer length while parsing index - fs/ntfs3: Validate index root when initialize NTFS security - net/mdiobus: Fix potential out-of-bounds read/write access - net: mdio: C22 is now optional, EOPNOTSUPP if not provided - dmaengine: idxd: Fix ->poll() return value - dmaengine: idxd: Fix allowing write() from different address spaces - dmaengine: idxd: Fix passing freed memory in idxd_cdev_open() - dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling - dmaengine: idxd: add per DSA wq workqueue for processing cr faults - dmaengine: idxd: add a write() method for applications to submit work - dmaengine: idxd: add a new security check to deal with a hardware erratum - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist - smb: client: Fix use-after-free in cifs_fill_dirent - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench' - x86: don't use REP_GOOD or ERMS for small memory clearing - x86: don't use REP_GOOD or ERMS for small memory copies - fs/buffer: fix use-after-free when call bh_read() helper - powerpc/kexec: Enable SMT before waking offline CPUs - cpu/SMT: Enable SMT only if a core is online - cpu/SMT: Create topology_smt_thread_allowed() - powerpc/topology: Check if a core is online - config: enable CONFIG_HOTPLUG_SMT for arm64 - arm64: Kconfig: Enable HOTPLUG_SMT - arm64: topology: Support SMT control on ACPI based system - arch_topology: Support SMT control for OF based system - cpu/SMT: Provide a default topology_is_primary_thread() - powerpc: Add HOTPLUG_SMT support - Revert "arm64: Kconfig: Enable HOTPLUG_SMT" - kernfs: Fix kabi broken in struct kernfs_root - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir(). - kernfs: fix potential NULL dereference in __kernfs_remove - kernfs: fix NULL dereferencing in kernfs_remove - kernfs: remove redundant kernfs_rwsem declaration. - kernfs: prevent early freeing of root node - kernfs: switch global kernfs_rwsem lock to per-fs lock - KVM: SVM: Make sure GHCB is mapped before updating - KVM: SVM: check CR4 changes against vcpu->arch - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests - x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]() - x86/sev: Fix error message in runtime #VC handler - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - i40e: add max boundary check for VF filters - net: hns3: add VLAN id validation before using - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled - ACPI: thermal: Move to dedicated function sysfs extra attr creation - ACPI: thermal: Use thermal_zone_device() - thermal: core: Encapsulate tz->device field - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - drivers:misc:sdma-dae: add NULL judgement of global variables - md/raid0, raid10: Don't set discard sectors for request queue - scsi: sg: Do not sleep in atomic context - ima: Handle error code returned by ima_filter_rule_match() - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - ARM: fix hash_name() fault - ARM: allow __do_kernel_fault() to report execution of memory faults - configs: enable CONFIG_MICROCODE_ZHAOXIN - x86/microcode: Add Zhaoxin cpu microcode update driver - drm/amd/pm: fix null pointer access - batman-adv: fix OOB read/write in network-coding decode - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - erofs: Fix erofs_bmap error - jfs: upper bound check of tree index in dbAllocAG - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - !20464 rcu: Protect ->defer_qs_iw_pending from data race - !20318 net: hns3: check pf tc cfg when setting vf tc - !20522 CVE-2022-50616 - !20423 use SYS_CNTVCTSS_EL0 for gettimeofday - regulator: core: Fix resolve supply lookup issue - regulator: core: Use different devices for resource allocation and DT lookup - !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO. - !19965 nvme-fc: use lock accessing port_state and rport state - !20226 leapraid: supports LeapRaid controller - !20436 fix CVE-2026-22998 - rcu: Protect ->defer_qs_iw_pending from data race - !20449 scsi/hiraid: Support New Raid feature - !20252 ntfs: set dummy blocksize to read boot_block when mounting - !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc - !20335 Fix CVE-2025-37947 - mm: Add PAGE_ALIGN_DOWN macro - soc cache: fix walk page parameter and drop incorrect check - soc cache: Fix incorrect error path of ioctl - soc cache: Fix incorrect size validation - soc cache: Enforce maintain type check - soc cache: Modify default config to compile HiSilicon SoC cache driver - !19858 [OLK-5.10] perf support for HiSilicon HIP12 - !20331 Fix CVE-2025-39835 - !20439 Fix CVE-2025-39945 - !20251 Fix CVE-2025-38480 - !20184 Fix CVE-2025-37770 - !20185 Fix CVE-2022-49829 - !20183 Fix CVE-2025-23138 - !20240 Fix CVE-2025-21981 - !20409 net: xfrm: Fix CVE-2025-40215 - !20408 net: xfrm: Fix CVE-2025-39797 - !20407 netfilter: allow exp not to be removed in nf_ct_find_expectation - !20406 bpf, sockmap: Avoid using sk_socket after free when sending - !20405 can: bcm: add locking for bcm_op runtime updates - !20404 RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent - scsi/hiraid: Support New Raid feature - !19950 【OLK-5.10】 Drivers GPU Patches from 6.6 - !20422 driver core: fix potential null-ptr-deref in device_add() - cnic: Fix use-after-free bugs in cnic_delete_task - !20421 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - !20420 usb: early: xhci-dbc: Fix a potential out-of-bound memory access - !20418 drivers: base: Free devm resources when unregistering a device - !20417 driver core: fix resource leak in device_add() - !20416 Fix CVE-2022-49309 - !20415 kernel/resource: fix kfree() of bootmem memory again - !20414 drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - !20413 of: check previous kernel's ima-kexec-buffer against memory bounds - !20412 HID: core: Harden s32ton() against conversion to 0 bits - !20411 iommu/amd: Avoid stack buffer overflow from kernel cmdline - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvmet-tcp: remove boilerplate code - !20390 drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - vdso: do cntvct workaround in the VDSO - arm64: vdso: remove two .altinstructions related symbols - arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday - arm64: alternative: patch alternatives in the vDSO - arm64: module: move find_section to header - driver core: fix potential null-ptr-deref in device_add() - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - usb: early: xhci-dbc: Fix a potential out-of-bound memory access - drivers: base: Free devm resources when unregistering a device - driver core: fix resource leak in device_add() - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() - !20383 usb: cdns3: fix random warning message when driver load - kernel/resource: fix kfree() of bootmem memory again - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - of: check previous kernel's ima-kexec-buffer against memory bounds - HID: core: Harden s32ton() against conversion to 0 bits - !19959 【OLK-5.10】Support NMI Watchdog - iommu/amd: Avoid stack buffer overflow from kernel cmdline - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfrm: Duplicate SPI Handling - netfilter: allow exp not to be removed in nf_ct_find_expectation - bpf, sockmap: Avoid using sk_socket after free when sending - can: bcm: add locking for bcm_op runtime updates - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation. - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh - watchdog/perf: Provide function for adjusting the event period - config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64 - irqchip/gic-v3: Fix one race condition due to NMI withdraw - watchdog: Fix call trace when failed to initialize sdei - watchdog: Support watchdog_sdei coexist with existing watchdogs - init: only move down lockup_detector_init() when sdei_watchdog is enabled - arm64: enable perf events based hard lockup detector - arm64: add hw_nmi_get_sample_period for preparation of lockup detector - usb: cdns3: fix random warning message when driver load - !20051 smb3: fix for slab out of bounds on mount to ksmbd - comedi: Fix use of uninitialized data in insn_rw_emulate_bits() - watch_queue: fix pipe accounting mismatch - drm/amd/pm/powerplay: Prevent division by zero - !20357 ext4: fix e4b bitmap inconsistency reports - ice: fix memory leak in aRFS after reset - drm/hisilicon/hibmc: hibmc-drm bugfix for DP - !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6 - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel - drm/hisilicon/hibmc: Add vga connector detect functions - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp - drm/hisilicon/hibmc: Add dp serdes cfg in dp process - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis - drm/hisilicon/hibmc: Restructuring the header dp_reg.h - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers - drm/ast: Implement polling for VGA and SIL164 connectors - drm/sysfs: Register "ddc" symlink later - drm/hisilicon/hibmc: add dp module in hibmc - drm/hisilicon/hibmc: refactored struct hibmc_drm_private - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers - drm/hisilicon/hibmc: add dp aux in hibmc drivers - gic: increase the arch_timer priority to avoid hardlockup - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803 - drm/scheduler: fix fence ref counting - !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology - ext4: fix e4b bitmap inconsistency reports - !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction - !20256 Fix CVE-2025-39828 - !20339 wifi: prevent A-MSDU attacks in mesh networks - wifi: prevent A-MSDU attacks in mesh networks - ksmbd: fix stream write failure - ksmbd: prevent out-of-bounds stream writes by validating *pos - xfs: do not propagate ENODATA disk errors into xattr code - net: hns3: check pf tc cfg when setting vf tc - net: hns3: support tc limit speed - net: hns3: the multi-tcs VF can be configured only when the interface is down - irqchip/gic-v3-its: Remove DevID Pool's restriction - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *' - perf: Update .gitignore file - perf stat: Enable iostat mode for x86 platforms - perf stat: Helper functions for PCIe root ports list in iostat mode - perf: Fix tt_core mismatch over PG CPU - perf iostat: Use system-wide mode if the target cpu_list is unspecified - perf arm_spe: Correct memory level for remote access - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU - Documentation: hisi-pmu: Fix of minor format error - drivers/perf: hisi: Add support for L3C PMU v3 - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - arm64: topology: Setup amu fie when cpu hotplugging - topology: Set capacity_freq_ref in all cases - arm64/amu: Use capacity_ref_freq() to set AMU ratio - cpufreq/cppc: Set the frequency used for computing the capacity - cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}() - energy_model: Use a fixed reference frequency - cpufreq/schedutil: Use a fixed reference frequency - cpufreq: Use the fixed and coherent frequency for scaling capacity - sched/topology: Add a new arch_scale_freq_ref() method - arch_topology: Introduce thermal pressure update function - riscv: export cpu/freq invariant to scheduler - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() - cpufreq: Allow drivers to advertise boost enabled - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' - openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix unused-function warning - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: ACPI: Mark boost policy as enabled when setting boost - cpufreq: ACPI: Only set boost MSRs on supported CPUs - cpufreq: ACPI: Defer setting boost MSRs - cpufreq: acpi: Remove acpi_cpufreq_cpu_ready() - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw() - Documentation: power: Add description about new callback for EM registration - arch_topology: Avoid use-after-free for scale_freq_data - cpufreq: Exit governor when failed to start old governor - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() - cpufreq: Initialize cpufreq-based frequency-invariance later - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost - cpufreq: Remove duplicate check in __cpufreq_offline() - cpufreq: Don't unregister cpufreq cooling on CPU hotplug - cpufreq: Remove the ->stop_cpu() driver callback - cpufreq: intel_pstate: Combine ->stop_cpu() and ->offline() - cpufreq: powernv: Migrate to ->exit() callback instead of ->stop_cpu() - docs/zh_CN: add cpu-freq cpu-drivers.rst translation - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() - cpufreq: CPPC: Do not return a value from populate_efficiency_class() - cpufreq: CPPC: Remove cpu_data_list - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate() - cpufreq: CPPC: Register EM based on efficiency class information - PM: EM: Change the order of arguments in the .active_power() callback - cpufreq: Add callback to register with energy model - PM: EM: Add .get_cost() callback - cpufreq: CPPC: Add per_cpu efficiency_class - cpufreq: remove useless INIT_LIST_HEAD() - ACPI: CPPC: Disable FIE if registers in PCC regions - ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate() - cpufreq: cppc: Fix invalid return value in .get() callback - cppc_cpufreq: Fix possible null pointer dereference - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn() - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus - cpufreq: CPPC: Add support for frequency invariance - arch_topology: Export arch_freq_scale and helpers - cpufreq: CPPC: Pass structure instance by reference - cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init - cpufreq: CPPC: Migrate to ->exit() callback instead of ->stop_cpu() - cppc_cpufreq: replace per-cpu data array with a list - cppc_cpufreq: expose information on frequency domains - cppc_cpufreq: clarify support for coordination types - arch_topology: Allow multiple entities to provide sched_freq_tick() callback - sched/topology,schedutil: Wrap sched domains rebuild - arch_topology: Rename freq_scale as arch_freq_scale - arm64: topology: Drop the useless update to per-cpu cycles - arm64: topology: Make AMUs work with modular cpufreq drivers - arm64: topology: Reorder init_amu_fie() a bit - arm64: topology: Avoid the have_policy check - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() - cpufreq: prevent NULL dereference in cpufreq_online() - cpufreq: CPPC: Fix wrong max_freq in policy initialization - cppc_cpufreq: simplify use of performance capabilities - cpufreq: Introduce a more generic way to set default per-policy boost flag - cpufreq: Fix re-boost issue after hotplugging a CPU - cpufreq: Support per-policy performance boost - ntfs: set dummy blocksize to read boot_block when mounting - leapraid: supports LeapRaid controller - perf mem: Count L2 HITM for c2c statistic - perf mem: Add statistics for peer snooping - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12 - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel - perf arm-spe: augment the data source type with neoverse_spe list - tools arm64: Import cputype.h - arm64: cputype: Add cputype definition for HIP12 - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface - drivers/perf: hisi: Add cacheable option for L3C PMU - perf: Remove unstable events for uncore L3C PMU - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu - perf iostat: hisi: Fix port range retrival - drivers/perf: hisi: Add support for L3C PMU v3 - drivers/perf: hisi: Refactor the event configuration of L3C PMU - drivers/perf: hisi: Extend the field of tt_core - drivers/perf: hisi: Extract the event filter check of L3C PMU - drivers/perf: hisi: Simplify the probe process of each L3C PMU version - drivers/perf: hisi: Export hisi_uncore_pmu_isr() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/perf: hisi: Add support for HiSilicon MN PMU driver - drivers/perf: hisi: Add support for HiSilicon NoC PMU - drivers/perf: hisi: Support PMUs with no interrupt - drivers/perf: hisi: Relax the event number check of v2 PMUs - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver - drivers/perf: hisi: Simplify the probe process for each DDRC version - drivers/perf: hisi: Delete redundant blank line of DDRC PMU - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier - drivers/perf: convert sysfs snprintf family to sysfs_emit - perf: hisi: Constify static struct attribute_group - perf/hisi: Constify static attribute_group structs - drivers/perf: hisi: Add a common function to retrieve topology from firmware - drivers/perf: hisi: Extract topology information to a separate structure - drivers/perf: hisi: Refactor the detection of associated CPUs - drivers/perf: hisi: Migrate to one online CPU if no associated one online - drivers/perf: hisi: Don't update the associated_cpus on CPU offline - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs - perf stat: Enable iostat mode for HiSilicon PCIe PMU - perf stat: Add struct perf_stat_aggr to perf_stat_evsel - perf stat: Display iostat headers correctly - perf stat: Don't display metric header for non-leader uncore events - perf stat: Basic support for iostat in perf - perf arm-spe: Refactor arm-spe to support operation packet type - perf arm-spe: Use SPE data source for neoverse cores - perf arm-spe: Don't set data source if it's not a memory operation - perf tools: Sync addition of PERF_MEM_SNOOPX_PEER - tools: arm64: Import sysreg.h - smb3: fix for slab out of bounds on mount to ksmbd - watchdog/perf: adapt the watchdog_perf interface for async model - watchdog/perf: add a weak function for an arch to detect if perf can use NMIs - irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed - irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked - irqchip/gic-v3: Implement FEAT_GICv3_NMI support - arm64/nmi: Add Kconfig for NMI - arm64/nmi: Add handling of superpriority interrupts as NMIs - arm64/irq: Document handling of FEAT_NMI in irqflags.h - arm64/entry: Don't call preempt_schedule_irq() with NMIs masked - arm64/nmi: Manage masking for superpriority interrupts along with DAIF - nvme-fc: use lock accessing port_state and rport state - KVM: arm64: Hide FEAT_NMI from guests - arm64/cpufeature: Detect PE support for FEAT_NMI - arm64/hyp-stub: Enable access to ALLINT - arm64/asm: Introduce assembly macros for managing ALLINT - arm64/sysreg: Add definitions for immediate versions of MSR ALLINT - arm64/booting: Document boot requirements for FEAT_NMI - irqchip/gic-v3: Fix priority mask handling - irqchip/gic-v3: Refactor ISB + EOIR at ack time - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 - soc cache: Add framework driver for HiSilicon SoC cache - !20333 phytium-tpcm-sig-8-hadler-reg-s5000c - !20767 Revert hibmc patches to fix null-ptr-deref - Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6" - Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert" - !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Code refactoring for hibmc_drm_drv - !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 & SM4 algorithm - !20666 CVE-2023-53712 - !20673 Fix CVE-2025-39957 - !20686 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20687 i40e: Fix potential invalid access when MAC list is empty - !20692 ipv6: sr: Fix MAC comparison to be constant-time - !20699 sctp: linearize cloned gso packets in sctp_rcv - !20688 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - !20698 libceph: fix potential use-after-free in have_mon_and_osd_map() - !20697 tipc: Fix use-after-free in tipc_mon_reinit_self(). - sctp: linearize cloned gso packets in sctp_rcv - libceph: fix potential use-after-free in have_mon_and_osd_map() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - ipv6: sr: Fix MAC comparison to be constant-time - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - i40e: Fix potential invalid access when MAC list is empty - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20119 Add 950 KVM feature support - !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration - !20638 ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - !20637 net/sched: sch_qfq: do not free existing class in qfq_change_class() - !20636 v2 macvlan: fix possible UAF in macvlan_forward_source() - wifi: mac80211: increase scan_ies_len for S1G - !20566 crypto: lzo - Fix compression buffer overrun - KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer - KVM: arm64: ipiv: Fix compilation warning - KVM: arm64: check if IPIV is enabled in BIOS - kvm: hisi: print error for IPIV - KVM: arm64: using kvm_vgic_global_state for ipiv - kvm: hisi: Don't allow to change mpidr in IPIv - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv - KVM: arm64: fix live migration bug of IPIv - irqchip/gic: Add HiSilicon PV SGI support - KVM: arm64: Implement PV_SGI related calls - KVM: arm64: Document PV-sgi interface - KVM: arm64: Introduce ipiv enable ioctl - arm64/config: add config to control whether enable IPIV feature - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12 - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE - kvm: hisi_virt: Register ipiv exception interrupt - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule - kvm: arm64: avoid sending multi-SGIs in IPIV - kvm: hisi_virt: Allocate VM table and save vpeid in it - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2 - KVM: arm64: fix memory leak in TLBI - KVM: arm64: Add new HiSi CPU type to support DVMBM - kvm: hisi_virt: Update TLBI broadcast feature for hip12 - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE - ARM: 9317/1: kexec: Make smp stop calls asynchronous - !20654 scsi: qla4xxx: Prevent a potential error pointer dereference - !20653 bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - !20655 mm/slub: avoid accessing metadata when pointer is invalid in object_err() - !20656 firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors - x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - mm/slub: avoid accessing metadata when pointer is invalid in object_err() - scsi: qla4xxx: Prevent a potential error pointer dereference - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - net/sched: sch_qfq: do not free existing class in qfq_change_class() - macvlan: fix possible UAF in macvlan_forward_source() - !20597 team: fix check for port enabled in team_queue_override_port_prio_changed() - !20593 CVE-2025-39744 fixup - !20465 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - !20178 v3 Fix CVE-2024-53179 - team: fix check for port enabled in team_queue_override_port_prio_changed() - rcu: Fix racy re-initialization of irq_work causing hangs - rcu: Fix rcu_read_unlock() deadloop due to IRQ work - rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs - !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts - !20428 wifi: mt76: do not run mt76u_status_worker if the device is not running - !20427 RDMA/bnxt_re: Prevent handling any completions after qp destroy - !20466 pptp: ensure minimal skb length in pptp_xmit() - !20426 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - !20574 RDMA/cm: Fix leaking the multicast GID table reference - !20573 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - !20565 Fix CVE-2023-53521 - !20521 Fix CVE-2026-23038 - RDMA/cm: Fix leaking the multicast GID table reference - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - crypto: lzo - Fix compression buffer overrun - !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() - eth: bnxt: move and rename reset helpers - x86: Resolve FPU state corruption between atomic and non-atomic contexts - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - bnxt_en: Fix potential data corruption with HW GRO/LRO - pptp: ensure minimal skb length in pptp_xmit() - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - wifi: mt76: do not run mt76u_status_worker if the device is not running - RDMA/bnxt_re: Prevent handling any completions after qp destroy - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - phytium: add tpcm sgi handler for s5000c - smb: client: fix use-after-free of signing key - cifs: missed ref-counting smb session in find - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode - crypto: ccp: Add support to switch to CSV RING_BUFFER mode - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues - openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI - crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm - crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm - !20737 pNFS: Fix a deadlock when returning a delegation during open() - !20725 tracing: Add recursion protection in kernel stack trace recording - !20746 Fix CVE-2026-22990 - !20671 arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - !20669 irqchip/gic-v3-its: Avoid truncating memory addresses - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - pNFS: Fix a deadlock when returning a delegation during open() - tracing: Add recursion protection in kernel stack trace recording - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - irqchip/gic-v3-its: Avoid truncating memory addresses - !20899 Fix CVE-2026-23216 - !20885 nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file - !20839 bpf, cpumap: Make sure kthread is running before map update returns - bpf, cpumap: Make sure kthread is running before map update returns - !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1 - !20818 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20801 ACPI/IORT: Add PMCG platform information for 162001900 - !20814 migrate: correct lock ordering for hugetlb file folios - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20800 fix CVE-2026-23054 - migrate: correct lock ordering for hugetlb file folios - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - net: hv_netvsc: reject RSS hash key programming without RX indirection table - hv_netvsc: Allocate rx indirection table size dynamically - RDMA/hns: Remove the accidentally added hns_roce_trace.h file - irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI - !21136 sched/rt: Skip currently executing CPU in rto_next_cpu() - !21131 procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21093 kexec: derive purgatory entry from symbol - !21140 ksmbd: fix use-after-free in kerberos authentication - !21132 SUNRPC: Ensure the transport backchannel association - ksmbd: fix use-after-free in kerberos authentication - sched/rt: Skip currently executing CPU in rto_next_cpu() - SUNRPC: Ensure the transport backchannel association - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21112 CVE-2024-57979 - !21111 ALSA: aloop: Fix racy access at PCM trigger - pps: Fix kabi in pps_device - pps: Fix a use-after-free - ALSA: aloop: Fix racy access at PCM trigger - kexec: derive purgatory entry from symbol - ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21072 v2 arm64/mpam: enable MPAM feature and - !20883 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - !21021 CVE-2026-23209 - arm64/mpam: fix the bitmap written during mpam device reset - arm64/mpam: only allow L3 cache MPAM device created - arm64/mpam: fix inadvertently updating after repeatedly updating - arm64/mpam: set default feedback of last_cmd_status interface as null string - !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured - !19837 KVM: Drop tlbs_dirty - !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !21014 bpf selftest cross compile fixes - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - macvlan: fix error recovery in macvlan_common_newlink() - !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - selftests/bpf: Pass target triple to get_sys_includes macro - selftests/bpf: Enable cross-building - net: hns3: hns3 driver should be initialized when VF multi tcs is configured - net: hns3: modify code of judging if SMMU DMA is enabled - !20976 support apei_page_offline_policy - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() - nvmet-tcp: don't map pages which can't come from HIGHMEM - nvmet-tcp: fix regression in data_digest calculation - nvmet-tcp: fix memory leak when performing a controller reset - !20971 Fix CVE-2026-23074 - apei/ghes: Add sysctl interface to control soft-offline page isolation - Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages" - !20887 HiSock Enhancement - net/sched: Enforce that teql can only be used as root qdisc - drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !20891 dcache: Limit the minimal number of bucket to two - !20956 CVE-2025-39967 - fbcon: Fix OOB access in font allocation - fbcon: fix integer overflow in fbcon_do_set_font - overflow: Allow mixed type arguments - nvmet-tcp: add an helper to free the cmd buffers - dcache: Limit the minimal number of bucket to two - bpf: Deprecate hisock unused helpers and orig ingress logic - bpf: Add local connect support for hisock - bpf: Add ipv4-mapped ipv6 addr support for hisock - bpf: Add target comm parse to hisock_cmd - bpf: Add multi port parse to hisock_cmd - bpf: Only deploy hisock in server - bpf: Apply BPF_HISOCK_INGRESS to hisock ingress - bpf: Add bpf_handle_ingress/egress_ptype helper function - bpf: Add bpf_set_ingress/egress_dev helper function - bpf: Add bpf_get_skb_ethhdr helper function - bpf: Add bpf_set_ingress_dst helper function - bpf: Add BPF_HISOCK_INGRESS attach type - net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - KVM: Drop tlbs_dirty - !21262 arm64/mpam: Extending MPAM features and bugfix - arm64/mpam: Allow MBMIN to be set to 0 - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit - arm64/mpam: Add quirk to shrink MATA PMG range - !21211 scsi: hisi_sas: Change the debugfs parameters dump count default value - scsi: hisi_sas: Change the debugfs parameters dump count default value - !21163 gic: Add hip09 support for HISILICON_ERRATUM_165010801 - gic: Add hip09 support for HISILICON_ERRATUM_165010801 - !19740 merge refs/pull/19740/head into OLK-5.10 - !19764 merge patch-1766387978 into OLK-5.10 - hisi: l3t: enable l3t with specific cpuid - !19705 [OLK-5.10]:update patches for sw64 architecture - !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct - !19372 padata: Fix pd UAF once and for all - !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation - !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS - net: atlantic: fix fragment overflow handling in RX path - !19736 locking/rwsem: Optimize down_read_trylock() under highly contended case - locking/rwsem: Optimize down_read_trylock() under highly contended case - !19724 mm/mem_reliable: use percise count during limit check - mm/mem_reliable: use percise count during limit check - !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - !19614 NFSD: Fix crash in nfsd4_read_release() - !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19673 firewire: net: fix use after free in fwnet_finish_incoming_packet() - sw64: set PTBR_SYS before accessing vmalloc area - sw64: set execute permission for virtual machine's hmcode text section - sw64: fix simd version of copy/clear_page() - sw64: fix random mmap base range - firewire: net: fix use after free in fwnet_finish_incoming_packet() - NFSD: Fix crash in nfsd4_read_release() - crypto: ccp: add ccp-mdev functionality to the ccp module. - padata: Fix pd UAF once and for all - KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access - KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer - KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests - KVM: x86: Pass emulation type to can_emulate_instruction() - KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support - KVM: SVM: Don't intercept #GP for SEV guests - swiotlb: do not zero buffer in set_memory_decrypted() - crypto: ccp - Add SEV_INIT rc error logging on init - dma-direct: always leak memory that can't be re-encrypted - dma-direct: factor out dma_set_{de,en}crypted helpers - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits - KVM: SEV-ES: fix another issue with string I/O VMGEXITs - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed - KVM: SEV-ES: keep INS functions together - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in - KVM: x86: split the two parts of emulator_pio_in - KVM: SEV-ES: clean up kvm_sev_es_ins/outs - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out - KVM: SEV-ES: rename guest_ins_data to sev_pio_data - KVM: SEV-ES: fix length of string I/O - x86/sev-es: Do not unroll string I/O for SEV-ES guests - x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs - !19833 merge patch-1766715015 into OLK-5.10 - !19911 merge patch-1767492639 into OLK-5.10 - !19635 merge refs/pull/19635/head into OLK-5.10 - !19903 merge patch-1767161454 into OLK-5.10 - !19864 merge patch-1766990471 into OLK-5.10 - !19865 merge patch-1766990523 into OLK-5.10 - mm: mem_reliable: prevent excessive direct reclaim loops - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - !19899 merge patch-1767098709 into OLK-5.10 - erofs: validate the extent length for uncompressed pclusters - !19885 merge patch-1767076771 into OLK-5.10 - !19876 merge patch-1767011340 into OLK-5.10 - scsi: qla2xxx: Clear cmds after chip reset - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - !19856 merge patch-1766976937 into OLK-5.10 - !19857 merge patch-1766976979 into OLK-5.10 - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private - virtio-net: ensure the received length does not exceed allocated size - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - tracing: Fix memory leaks in create_field_var() - !19760 merge patch-1766370959 into OLK-5.10 - !19786 merge patch-1766474397 into OLK-5.10 - !19548 merge refs/pull/19548/head into OLK-5.10 - ext4: xattr: fix null pointer deref in ext4_raw_inode() - !19739 merge refs/pull/19739/head into OLK-5.10 - !19732 merge refs/pull/19732/head into OLK-5.10 - !19719 merge refs/pull/19719/head into OLK-5.10 - bnxt_en: Fix memory corruption when FW resources change during ifdown - bnxt_en: Fix possible crash after creating sw mqprio TCs - x86/fpu: Ensure XFD state on signal delivery - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - usb: storage: Fix memory leak in USB bulk transport - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() - cpufreq: ACPI: Fix max-frequency computation - tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes - tools headers: Update tools's copy of x86/asm headers - tools headers cpufeatures: Sync with the kernel sources - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - !19798 merge OLK-5.10 into OLK-5.10 - !19972 merge patch-1767691219 into OLK-5.10 - !19974 merge patch-1767691279 into OLK-5.10 - !19973 merge patch-1767691254 into OLK-5.10 - !19713 merge refs/pull/19713/head into OLK-5.10 - !19832 merge OLK-5.10-ringbuffer into OLK-5.10 - qed: Don't collect too many protection override GRC elements - i40e: fix validation of VF state in get resources - i40e: fix input validation logic for action_meta - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() - KVM: SVM: Skip SEV cache flush if no ASIDs have been used - KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities - x86/sev: Make enc_dec_hypercall() accept a size instead of npages - mm: x86: Fix kabi breakage of pv_ops - KVM: x86: Play nice with protected guests in complete_hypercall_exit() - KVM: x86: Assume a 64-bit hypercall for guests with protected state - KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids() - KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa - x86/kvm: Add kexec support for SEV Live Migration. - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. - EFI: Introduce the new AMD Memory Encryption GUID. - mm: x86: Invoke hypercall when page encryption status is changed - x86/kvm: Add AMD SEV specific Hypercall3 - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA - KVM: SVM: fix missing sev_decommission in sev_receive_start - KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall - KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command - KVM: SVM: Add support for KVM_SEV_RECEIVE_START command - KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command - KVM: SVM: Add KVM_SEV_SEND_FINISH command - KVM: SVM: Add KVM_SEND_UPDATE_DATA command - KVM: SVM: Add KVM_SEV SEND_START command - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19047 [OLK-5.10] Fix CVE-2025-39839 - !18614 [OLK-5.10] Fix CVE-2025-39737 - !18654 [OLK-5.10] Fix CVE-2025-38705 - !18782 【OLK-5.10】fix CVE-2025-38712 - !18612 [OLK-5.10] Fix CVE-2025-38713 - !18635 [OLK-5.10] Fix CVE-2025-38714 - !18862 [OLK-5.10] Fix CVE-2025-38697 - !20058 CVE-2025-38111 - !20131 wifi: cfg80211: fix use-after-free in cmp_bss() - !20306 mm/kmemleak: move up cond_resched() call in page scanning loop - !20309 hwmon: constify pointers to hwmon_channel_info - hwmon: fix kabi of struct hwmon_channel_info - !20338 mlxsw: spectrum_router: Fix neighbour use-after-free - !20337 mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - hwmon: constify pointers to hwmon_channel_info - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - !20316 um: virtio_uml: Fix use-after-free after put_device in probe - !20114 KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc - um: virtio_uml: Fix use-after-free after put_device in probe - !20300 software node: Correct a OOB check in software_node_get_reference_args() - !20299 jfs: add sanity check for agwidth in dbMount - !20278 iavf: fix off-by-one issues in iavf_config_rss_reg() - !20277 e1000: fix OOB in e1000_tbi_should_accept() - !20285 hwmon: (ibmpex) fix use-after-free in high/low store - mm/kmemleak: move up cond_resched() call in page scanning loop - !19953 【OLK-5.10】 power_meter patchs from 6.6 - software node: Correct a OOB check in software_node_get_reference_args() - jfs: add sanity check for agwidth in dbMount - hwmon: (ibmpex) fix use-after-free in high/low store - !20269 drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !20271 KVM: x86: use array_index_nospec with indices that come from guest - !19788 ima: Handle error code returned by ima_filter_rule_match() - iavf: fix off-by-one issues in iavf_config_rss_reg() - e1000: fix OOB in e1000_tbi_should_accept() - !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver - !20203 drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - !20202 scsi: qla2xxx: Fix premature hw access after PCI error - !19728 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09 - KVM: x86: use array_index_nospec with indices that come from guest - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - RDMA/hns: Support config and query the CNP DSCP for HIP09 - !20221 Revert "RDMA/hns: Fix mismatch exception rollback" - !20195 ACPI: APEI: Handle repeated SEA error interrupts storm - !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes - Revert "RDMA/hns: Fix mismatch exception rollback" - RDMA/hns: Support drain SQ and RQ - RDMA/hns: Return actual error code instead of fixed EINVAL - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Fix RoCEv1 failure due to DSCP - !20161 cifs: fix session state check in reconnect to avoid use-after-free issue - !20050 smb: client: Fix use-after-free in cifs_fill_dirent - !19834 v2 md/raid0, raid10: Don't set discard sectors for request queue - !19816 scsi: sg: Do not sleep in atomic context - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - scsi: qla2xxx: Fix premature hw access after PCI error - ACPI: APEI: Handle repeated SEA error interrupts storm - !20150 tracing: Do not register unsupported perf events - !20163 tracing: Fix enabling of tracing on file release - !19938 net: hns3: add VLAN id validation before using - !19836 [OLK-5.10] Fixes for SEV-ES Guest Support - !20044 【openEuler-22.03-LTS-SP4】Memory copy error - !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2 - !20025 [OLK-5.10]Support SMT control on arm64. - !19922 NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - !19985 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - !19996 net: netpoll: fix incorrect refcount handling causing incorrect cleanup - !19908 drivers:misc:sdma-dae: add NULL judgement of global variables - !20026 fs/buffer: fix use-after-free when call bh_read() helper - !19962 i40e: add max boundary check for VF filters - !20103 kmemleak: Fix kmemleak false warnings - !20169 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - !20052 CVE-2024-21823 - !18962 erofs: Fix erofs_bmap error - !20016 kernfs: Fix UAF issue - !19694 ARM: fix hash_name() issue - !20048 VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - !20065 Fix CVE-2022-50737 - !20066 smb: client: fix race with concurrent opens in rename(2) - !20151 v2 Fix CVE-2025-40016 - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems - ACPI: IPMI: Add helper to wait for when SMI is selected - hwmon: (acpi_power_meter) Fix the fake power alarm reporting - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices(). - hwmon: (acpi_power_meter) Fix update the power trip points on failure - hwmon: (acpi_power_meter) Fix uninitialized variables - !20047 crypto: af_alg - Set merge to zero early in af_alg_sendmsg - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method - hwmon: (acpi_power_meter) replace open-coded kmemdup_nul - hwmon: (acpi_power_meter) Fix style issues - hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device() - hwmon: acpi_power_meter: Get rid of ACPICA message printing - ACPI: utils: Introduce acpi_evaluation_failure_warn() - ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE - hwmon: (acpi_power_meter) clean up freeing code - x86/sev: merge continuous pages into a large range when notifying range enc status changes - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - tracing: Fix enabling of tracing on file release - cifs: fix session state check in reconnect to avoid use-after-free issue - media: uvcvideo: Use heuristic to find stream entity - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Allow extra entities - tracing: Do not register unsupported perf events - wifi: cfg80211: fix use-after-free in cmp_bss() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - arm64: kdump: fix kmemleak unknown object warning when crash base is set - arm64: kdump: fix kmemleak unknown object warning - x86/sev: Use "SEV: " prefix for messages from sev.c - x86/sev: Propagate #GP if getting linear instruction address failed - smb: client: fix race with concurrent opens in rename(2) - fs/ntfs3: Add null pointer checks - fs/ntfs3: Validate buffer length while parsing index - fs/ntfs3: Validate index root when initialize NTFS security - net/mdiobus: Fix potential out-of-bounds read/write access - net: mdio: C22 is now optional, EOPNOTSUPP if not provided - dmaengine: idxd: Fix ->poll() return value - dmaengine: idxd: Fix allowing write() from different address spaces - dmaengine: idxd: Fix passing freed memory in idxd_cdev_open() - dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling - dmaengine: idxd: add per DSA wq workqueue for processing cr faults - dmaengine: idxd: add a write() method for applications to submit work - dmaengine: idxd: add a new security check to deal with a hardware erratum - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist - smb: client: Fix use-after-free in cifs_fill_dirent - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench' - x86: don't use REP_GOOD or ERMS for small memory clearing - x86: don't use REP_GOOD or ERMS for small memory copies - fs/buffer: fix use-after-free when call bh_read() helper - powerpc/kexec: Enable SMT before waking offline CPUs - cpu/SMT: Enable SMT only if a core is online - cpu/SMT: Create topology_smt_thread_allowed() - powerpc/topology: Check if a core is online - config: enable CONFIG_HOTPLUG_SMT for arm64 - arm64: Kconfig: Enable HOTPLUG_SMT - arm64: topology: Support SMT control on ACPI based system - arch_topology: Support SMT control for OF based system - cpu/SMT: Provide a default topology_is_primary_thread() - powerpc: Add HOTPLUG_SMT support - Revert "arm64: Kconfig: Enable HOTPLUG_SMT" - kernfs: Fix kabi broken in struct kernfs_root - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir(). - kernfs: fix potential NULL dereference in __kernfs_remove - kernfs: fix NULL dereferencing in kernfs_remove - kernfs: remove redundant kernfs_rwsem declaration. - kernfs: prevent early freeing of root node - kernfs: switch global kernfs_rwsem lock to per-fs lock - KVM: SVM: Make sure GHCB is mapped before updating - KVM: SVM: check CR4 changes against vcpu->arch - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests - x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]() - x86/sev: Fix error message in runtime #VC handler - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - i40e: add max boundary check for VF filters - net: hns3: add VLAN id validation before using - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled - ACPI: thermal: Move to dedicated function sysfs extra attr creation - ACPI: thermal: Use thermal_zone_device() - thermal: core: Encapsulate tz->device field - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - drivers:misc:sdma-dae: add NULL judgement of global variables - md/raid0, raid10: Don't set discard sectors for request queue - scsi: sg: Do not sleep in atomic context - ima: Handle error code returned by ima_filter_rule_match() - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - ARM: fix hash_name() fault - ARM: allow __do_kernel_fault() to report execution of memory faults - configs: enable CONFIG_MICROCODE_ZHAOXIN - x86/microcode: Add Zhaoxin cpu microcode update driver - drm/amd/pm: fix null pointer access - batman-adv: fix OOB read/write in network-coding decode - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - erofs: Fix erofs_bmap error - jfs: upper bound check of tree index in dbAllocAG - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - !20464 rcu: Protect ->defer_qs_iw_pending from data race - !20318 net: hns3: check pf tc cfg when setting vf tc - !20522 CVE-2022-50616 - !20423 use SYS_CNTVCTSS_EL0 for gettimeofday - regulator: core: Fix resolve supply lookup issue - regulator: core: Use different devices for resource allocation and DT lookup - !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO. - !19965 nvme-fc: use lock accessing port_state and rport state - !20226 leapraid: supports LeapRaid controller - !20436 fix CVE-2026-22998 - rcu: Protect ->defer_qs_iw_pending from data race - !20449 scsi/hiraid: Support New Raid feature - !20252 ntfs: set dummy blocksize to read boot_block when mounting - !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc - !20335 Fix CVE-2025-37947 - mm: Add PAGE_ALIGN_DOWN macro - soc cache: fix walk page parameter and drop incorrect check - soc cache: Fix incorrect error path of ioctl - soc cache: Fix incorrect size validation - soc cache: Enforce maintain type check - soc cache: Modify default config to compile HiSilicon SoC cache driver - !19858 [OLK-5.10] perf support for HiSilicon HIP12 - !20331 Fix CVE-2025-39835 - !20439 Fix CVE-2025-39945 - !20251 Fix CVE-2025-38480 - !20184 Fix CVE-2025-37770 - !20185 Fix CVE-2022-49829 - !20183 Fix CVE-2025-23138 - !20240 Fix CVE-2025-21981 - !20409 net: xfrm: Fix CVE-2025-40215 - !20408 net: xfrm: Fix CVE-2025-39797 - !20407 netfilter: allow exp not to be removed in nf_ct_find_expectation - !20406 bpf, sockmap: Avoid using sk_socket after free when sending - !20405 can: bcm: add locking for bcm_op runtime updates - !20404 RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent - scsi/hiraid: Support New Raid feature - !19950 【OLK-5.10】 Drivers GPU Patches from 6.6 - !20422 driver core: fix potential null-ptr-deref in device_add() - cnic: Fix use-after-free bugs in cnic_delete_task - !20421 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - !20420 usb: early: xhci-dbc: Fix a potential out-of-bound memory access - !20418 drivers: base: Free devm resources when unregistering a device - !20417 driver core: fix resource leak in device_add() - !20416 Fix CVE-2022-49309 - !20415 kernel/resource: fix kfree() of bootmem memory again - !20414 drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - !20413 of: check previous kernel's ima-kexec-buffer against memory bounds - !20412 HID: core: Harden s32ton() against conversion to 0 bits - !20411 iommu/amd: Avoid stack buffer overflow from kernel cmdline - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvmet-tcp: remove boilerplate code - !20390 drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - vdso: do cntvct workaround in the VDSO - arm64: vdso: remove two .altinstructions related symbols - arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday - arm64: alternative: patch alternatives in the vDSO - arm64: module: move find_section to header - driver core: fix potential null-ptr-deref in device_add() - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - usb: early: xhci-dbc: Fix a potential out-of-bound memory access - drivers: base: Free devm resources when unregistering a device - driver core: fix resource leak in device_add() - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() - !20383 usb: cdns3: fix random warning message when driver load - kernel/resource: fix kfree() of bootmem memory again - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - of: check previous kernel's ima-kexec-buffer against memory bounds - HID: core: Harden s32ton() against conversion to 0 bits - !19959 【OLK-5.10】Support NMI Watchdog - iommu/amd: Avoid stack buffer overflow from kernel cmdline - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfrm: Duplicate SPI Handling - netfilter: allow exp not to be removed in nf_ct_find_expectation - bpf, sockmap: Avoid using sk_socket after free when sending - can: bcm: add locking for bcm_op runtime updates - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation. - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh - watchdog/perf: Provide function for adjusting the event period - config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64 - irqchip/gic-v3: Fix one race condition due to NMI withdraw - watchdog: Fix call trace when failed to initialize sdei - watchdog: Support watchdog_sdei coexist with existing watchdogs - init: only move down lockup_detector_init() when sdei_watchdog is enabled - arm64: enable perf events based hard lockup detector - arm64: add hw_nmi_get_sample_period for preparation of lockup detector - usb: cdns3: fix random warning message when driver load - !20051 smb3: fix for slab out of bounds on mount to ksmbd - comedi: Fix use of uninitialized data in insn_rw_emulate_bits() - watch_queue: fix pipe accounting mismatch - drm/amd/pm/powerplay: Prevent division by zero - !20357 ext4: fix e4b bitmap inconsistency reports - ice: fix memory leak in aRFS after reset - drm/hisilicon/hibmc: hibmc-drm bugfix for DP - !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6 - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel - drm/hisilicon/hibmc: Add vga connector detect functions - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp - drm/hisilicon/hibmc: Add dp serdes cfg in dp process - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis - drm/hisilicon/hibmc: Restructuring the header dp_reg.h - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers - drm/ast: Implement polling for VGA and SIL164 connectors - drm/sysfs: Register "ddc" symlink later - drm/hisilicon/hibmc: add dp module in hibmc - drm/hisilicon/hibmc: refactored struct hibmc_drm_private - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers - drm/hisilicon/hibmc: add dp aux in hibmc drivers - gic: increase the arch_timer priority to avoid hardlockup - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803 - drm/scheduler: fix fence ref counting - !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology - ext4: fix e4b bitmap inconsistency reports - !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction - !20256 Fix CVE-2025-39828 - !20339 wifi: prevent A-MSDU attacks in mesh networks - wifi: prevent A-MSDU attacks in mesh networks - ksmbd: fix stream write failure - ksmbd: prevent out-of-bounds stream writes by validating *pos - xfs: do not propagate ENODATA disk errors into xattr code - net: hns3: check pf tc cfg when setting vf tc - net: hns3: support tc limit speed - net: hns3: the multi-tcs VF can be configured only when the interface is down - irqchip/gic-v3-its: Remove DevID Pool's restriction - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *' - perf: Update .gitignore file - perf stat: Enable iostat mode for x86 platforms - perf stat: Helper functions for PCIe root ports list in iostat mode - perf: Fix tt_core mismatch over PG CPU - perf iostat: Use system-wide mode if the target cpu_list is unspecified - perf arm_spe: Correct memory level for remote access - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU - Documentation: hisi-pmu: Fix of minor format error - drivers/perf: hisi: Add support for L3C PMU v3 - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - arm64: topology: Setup amu fie when cpu hotplugging - topology: Set capacity_freq_ref in all cases - arm64/amu: Use capacity_ref_freq() to set AMU ratio - cpufreq/cppc: Set the frequency used for computing the capacity - cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}() - energy_model: Use a fixed reference frequency - cpufreq/schedutil: Use a fixed reference frequency - cpufreq: Use the fixed and coherent frequency for scaling capacity - sched/topology: Add a new arch_scale_freq_ref() method - arch_topology: Introduce thermal pressure update function - riscv: export cpu/freq invariant to scheduler - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() - cpufreq: Allow drivers to advertise boost enabled - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' - openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix unused-function warning - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: ACPI: Mark boost policy as enabled when setting boost - cpufreq: ACPI: Only set boost MSRs on supported CPUs - cpufreq: ACPI: Defer setting boost MSRs - cpufreq: acpi: Remove acpi_cpufreq_cpu_ready() - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw() - Documentation: power: Add description about new callback for EM registration - arch_topology: Avoid use-after-free for scale_freq_data - cpufreq: Exit governor when failed to start old governor - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() - cpufreq: Initialize cpufreq-based frequency-invariance later - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost - cpufreq: Remove duplicate check in __cpufreq_offline() - cpufreq: Don't unregister cpufreq cooling on CPU hotplug - cpufreq: Remove the ->stop_cpu() driver callback - cpufreq: intel_pstate: Combine ->stop_cpu() and ->offline() - cpufreq: powernv: Migrate to ->exit() callback instead of ->stop_cpu() - docs/zh_CN: add cpu-freq cpu-drivers.rst translation - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() - cpufreq: CPPC: Do not return a value from populate_efficiency_class() - cpufreq: CPPC: Remove cpu_data_list - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate() - cpufreq: CPPC: Register EM based on efficiency class information - PM: EM: Change the order of arguments in the .active_power() callback - cpufreq: Add callback to register with energy model - PM: EM: Add .get_cost() callback - cpufreq: CPPC: Add per_cpu efficiency_class - cpufreq: remove useless INIT_LIST_HEAD() - ACPI: CPPC: Disable FIE if registers in PCC regions - ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate() - cpufreq: cppc: Fix invalid return value in .get() callback - cppc_cpufreq: Fix possible null pointer dereference - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn() - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus - cpufreq: CPPC: Add support for frequency invariance - arch_topology: Export arch_freq_scale and helpers - cpufreq: CPPC: Pass structure instance by reference - cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init - cpufreq: CPPC: Migrate to ->exit() callback instead of ->stop_cpu() - cppc_cpufreq: replace per-cpu data array with a list - cppc_cpufreq: expose information on frequency domains - cppc_cpufreq: clarify support for coordination types - arch_topology: Allow multiple entities to provide sched_freq_tick() callback - sched/topology,schedutil: Wrap sched domains rebuild - arch_topology: Rename freq_scale as arch_freq_scale - arm64: topology: Drop the useless update to per-cpu cycles - arm64: topology: Make AMUs work with modular cpufreq drivers - arm64: topology: Reorder init_amu_fie() a bit - arm64: topology: Avoid the have_policy check - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() - cpufreq: prevent NULL dereference in cpufreq_online() - cpufreq: CPPC: Fix wrong max_freq in policy initialization - cppc_cpufreq: simplify use of performance capabilities - cpufreq: Introduce a more generic way to set default per-policy boost flag - cpufreq: Fix re-boost issue after hotplugging a CPU - cpufreq: Support per-policy performance boost - ntfs: set dummy blocksize to read boot_block when mounting - leapraid: supports LeapRaid controller - perf mem: Count L2 HITM for c2c statistic - perf mem: Add statistics for peer snooping - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12 - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel - perf arm-spe: augment the data source type with neoverse_spe list - tools arm64: Import cputype.h - arm64: cputype: Add cputype definition for HIP12 - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface - drivers/perf: hisi: Add cacheable option for L3C PMU - perf: Remove unstable events for uncore L3C PMU - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu - perf iostat: hisi: Fix port range retrival - drivers/perf: hisi: Add support for L3C PMU v3 - drivers/perf: hisi: Refactor the event configuration of L3C PMU - drivers/perf: hisi: Extend the field of tt_core - drivers/perf: hisi: Extract the event filter check of L3C PMU - drivers/perf: hisi: Simplify the probe process of each L3C PMU version - drivers/perf: hisi: Export hisi_uncore_pmu_isr() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/perf: hisi: Add support for HiSilicon MN PMU driver - drivers/perf: hisi: Add support for HiSilicon NoC PMU - drivers/perf: hisi: Support PMUs with no interrupt - drivers/perf: hisi: Relax the event number check of v2 PMUs - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver - drivers/perf: hisi: Simplify the probe process for each DDRC version - drivers/perf: hisi: Delete redundant blank line of DDRC PMU - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier - drivers/perf: convert sysfs snprintf family to sysfs_emit - perf: hisi: Constify static struct attribute_group - perf/hisi: Constify static attribute_group structs - drivers/perf: hisi: Add a common function to retrieve topology from firmware - drivers/perf: hisi: Extract topology information to a separate structure - drivers/perf: hisi: Refactor the detection of associated CPUs - drivers/perf: hisi: Migrate to one online CPU if no associated one online - drivers/perf: hisi: Don't update the associated_cpus on CPU offline - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs - perf stat: Enable iostat mode for HiSilicon PCIe PMU - perf stat: Add struct perf_stat_aggr to perf_stat_evsel - perf stat: Display iostat headers correctly - perf stat: Don't display metric header for non-leader uncore events - perf stat: Basic support for iostat in perf - perf arm-spe: Refactor arm-spe to support operation packet type - perf arm-spe: Use SPE data source for neoverse cores - perf arm-spe: Don't set data source if it's not a memory operation - perf tools: Sync addition of PERF_MEM_SNOOPX_PEER - tools: arm64: Import sysreg.h - smb3: fix for slab out of bounds on mount to ksmbd - watchdog/perf: adapt the watchdog_perf interface for async model - watchdog/perf: add a weak function for an arch to detect if perf can use NMIs - irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed - irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked - irqchip/gic-v3: Implement FEAT_GICv3_NMI support - arm64/nmi: Add Kconfig for NMI - arm64/nmi: Add handling of superpriority interrupts as NMIs - arm64/irq: Document handling of FEAT_NMI in irqflags.h - arm64/entry: Don't call preempt_schedule_irq() with NMIs masked - arm64/nmi: Manage masking for superpriority interrupts along with DAIF - nvme-fc: use lock accessing port_state and rport state - KVM: arm64: Hide FEAT_NMI from guests - arm64/cpufeature: Detect PE support for FEAT_NMI - arm64/hyp-stub: Enable access to ALLINT - arm64/asm: Introduce assembly macros for managing ALLINT - arm64/sysreg: Add definitions for immediate versions of MSR ALLINT - arm64/booting: Document boot requirements for FEAT_NMI - irqchip/gic-v3: Fix priority mask handling - irqchip/gic-v3: Refactor ISB + EOIR at ack time - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 - soc cache: Add framework driver for HiSilicon SoC cache - !20333 phytium-tpcm-sig-8-hadler-reg-s5000c - !20767 Revert hibmc patches to fix null-ptr-deref - Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6" - Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert" - !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Code refactoring for hibmc_drm_drv - !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 & SM4 algorithm - !20666 CVE-2023-53712 - !20673 Fix CVE-2025-39957 - !20686 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20687 i40e: Fix potential invalid access when MAC list is empty - !20692 ipv6: sr: Fix MAC comparison to be constant-time - !20699 sctp: linearize cloned gso packets in sctp_rcv - !20688 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - !20698 libceph: fix potential use-after-free in have_mon_and_osd_map() - !20697 tipc: Fix use-after-free in tipc_mon_reinit_self(). - sctp: linearize cloned gso packets in sctp_rcv - libceph: fix potential use-after-free in have_mon_and_osd_map() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - ipv6: sr: Fix MAC comparison to be constant-time - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - i40e: Fix potential invalid access when MAC list is empty - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20119 Add 950 KVM feature support - !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration - !20638 ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - !20637 net/sched: sch_qfq: do not free existing class in qfq_change_class() - !20636 v2 macvlan: fix possible UAF in macvlan_forward_source() - wifi: mac80211: increase scan_ies_len for S1G - !20566 crypto: lzo - Fix compression buffer overrun - KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer - KVM: arm64: ipiv: Fix compilation warning - KVM: arm64: check if IPIV is enabled in BIOS - kvm: hisi: print error for IPIV - KVM: arm64: using kvm_vgic_global_state for ipiv - kvm: hisi: Don't allow to change mpidr in IPIv - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv - KVM: arm64: fix live migration bug of IPIv - irqchip/gic: Add HiSilicon PV SGI support - KVM: arm64: Implement PV_SGI related calls - KVM: arm64: Document PV-sgi interface - KVM: arm64: Introduce ipiv enable ioctl - arm64/config: add config to control whether enable IPIV feature - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12 - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE - kvm: hisi_virt: Register ipiv exception interrupt - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule - kvm: arm64: avoid sending multi-SGIs in IPIV - kvm: hisi_virt: Allocate VM table and save vpeid in it - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2 - KVM: arm64: fix memory leak in TLBI - KVM: arm64: Add new HiSi CPU type to support DVMBM - kvm: hisi_virt: Update TLBI broadcast feature for hip12 - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE - ARM: 9317/1: kexec: Make smp stop calls asynchronous - !20654 scsi: qla4xxx: Prevent a potential error pointer dereference - !20653 bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - !20655 mm/slub: avoid accessing metadata when pointer is invalid in object_err() - !20656 firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors - x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - mm/slub: avoid accessing metadata when pointer is invalid in object_err() - scsi: qla4xxx: Prevent a potential error pointer dereference - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - net/sched: sch_qfq: do not free existing class in qfq_change_class() - macvlan: fix possible UAF in macvlan_forward_source() - !20597 team: fix check for port enabled in team_queue_override_port_prio_changed() - !20593 CVE-2025-39744 fixup - !20465 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - !20178 v3 Fix CVE-2024-53179 - team: fix check for port enabled in team_queue_override_port_prio_changed() - rcu: Fix racy re-initialization of irq_work causing hangs - rcu: Fix rcu_read_unlock() deadloop due to IRQ work - rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs - !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts - !20428 wifi: mt76: do not run mt76u_status_worker if the device is not running - !20427 RDMA/bnxt_re: Prevent handling any completions after qp destroy - !20466 pptp: ensure minimal skb length in pptp_xmit() - !20426 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - !20574 RDMA/cm: Fix leaking the multicast GID table reference - !20573 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - !20565 Fix CVE-2023-53521 - !20521 Fix CVE-2026-23038 - RDMA/cm: Fix leaking the multicast GID table reference - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - crypto: lzo - Fix compression buffer overrun - !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() - eth: bnxt: move and rename reset helpers - x86: Resolve FPU state corruption between atomic and non-atomic contexts - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - bnxt_en: Fix potential data corruption with HW GRO/LRO - pptp: ensure minimal skb length in pptp_xmit() - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - wifi: mt76: do not run mt76u_status_worker if the device is not running - RDMA/bnxt_re: Prevent handling any completions after qp destroy - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - phytium: add tpcm sgi handler for s5000c - smb: client: fix use-after-free of signing key - cifs: missed ref-counting smb session in find - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode - crypto: ccp: Add support to switch to CSV RING_BUFFER mode - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues - openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI - crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm - crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm - !20737 pNFS: Fix a deadlock when returning a delegation during open() - !20725 tracing: Add recursion protection in kernel stack trace recording - !20746 Fix CVE-2026-22990 - !20671 arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - !20669 irqchip/gic-v3-its: Avoid truncating memory addresses - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - pNFS: Fix a deadlock when returning a delegation during open() - tracing: Add recursion protection in kernel stack trace recording - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - irqchip/gic-v3-its: Avoid truncating memory addresses - !20899 Fix CVE-2026-23216 - !20885 nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file - !20839 bpf, cpumap: Make sure kthread is running before map update returns - bpf, cpumap: Make sure kthread is running before map update returns - !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1 - !20818 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20801 ACPI/IORT: Add PMCG platform information for 162001900 - !20814 migrate: correct lock ordering for hugetlb file folios - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20800 fix CVE-2026-23054 - migrate: correct lock ordering for hugetlb file folios - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - net: hv_netvsc: reject RSS hash key programming without RX indirection table - hv_netvsc: Allocate rx indirection table size dynamically - RDMA/hns: Remove the accidentally added hns_roce_trace.h file - irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI - !21136 sched/rt: Skip currently executing CPU in rto_next_cpu() - !21131 procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21093 kexec: derive purgatory entry from symbol - !21140 ksmbd: fix use-after-free in kerberos authentication - !21132 SUNRPC: Ensure the transport backchannel association - ksmbd: fix use-after-free in kerberos authentication - sched/rt: Skip currently executing CPU in rto_next_cpu() - SUNRPC: Ensure the transport backchannel association - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21112 CVE-2024-57979 - !21111 ALSA: aloop: Fix racy access at PCM trigger - pps: Fix kabi in pps_device - pps: Fix a use-after-free - ALSA: aloop: Fix racy access at PCM trigger - kexec: derive purgatory entry from symbol - ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21072 v2 arm64/mpam: enable MPAM feature and - !20883 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - !21021 CVE-2026-23209 - arm64/mpam: fix the bitmap written during mpam device reset - arm64/mpam: only allow L3 cache MPAM device created - arm64/mpam: fix inadvertently updating after repeatedly updating - arm64/mpam: set default feedback of last_cmd_status interface as null string - !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured - !19837 KVM: Drop tlbs_dirty - !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !21014 bpf selftest cross compile fixes - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - macvlan: fix error recovery in macvlan_common_newlink() - !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - selftests/bpf: Pass target triple to get_sys_includes macro - selftests/bpf: Enable cross-building - net: hns3: hns3 driver should be initialized when VF multi tcs is configured - net: hns3: modify code of judging if SMMU DMA is enabled - !20976 support apei_page_offline_policy - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() - nvmet-tcp: don't map pages which can't come from HIGHMEM - nvmet-tcp: fix regression in data_digest calculation - nvmet-tcp: fix memory leak when performing a controller reset - !20971 Fix CVE-2026-23074 - apei/ghes: Add sysctl interface to control soft-offline page isolation - Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages" - !20887 HiSock Enhancement - net/sched: Enforce that teql can only be used as root qdisc - drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !20891 dcache: Limit the minimal number of bucket to two - !20956 CVE-2025-39967 - fbcon: Fix OOB access in font allocation - fbcon: fix integer overflow in fbcon_do_set_font - overflow: Allow mixed type arguments - nvmet-tcp: add an helper to free the cmd buffers - dcache: Limit the minimal number of bucket to two - bpf: Deprecate hisock unused helpers and orig ingress logic - bpf: Add local connect support for hisock - bpf: Add ipv4-mapped ipv6 addr support for hisock - bpf: Add target comm parse to hisock_cmd - bpf: Add multi port parse to hisock_cmd - bpf: Only deploy hisock in server - bpf: Apply BPF_HISOCK_INGRESS to hisock ingress - bpf: Add bpf_handle_ingress/egress_ptype helper function - bpf: Add bpf_set_ingress/egress_dev helper function - bpf: Add bpf_get_skb_ethhdr helper function - bpf: Add bpf_set_ingress_dst helper function - bpf: Add BPF_HISOCK_INGRESS attach type - net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - KVM: Drop tlbs_dirty - !21262 arm64/mpam: Extending MPAM features and bugfix - arm64/mpam: Allow MBMIN to be set to 0 - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit - arm64/mpam: Add quirk to shrink MATA PMG range - !21211 scsi: hisi_sas: Change the debugfs parameters dump count default value - scsi: hisi_sas: Change the debugfs parameters dump count default value - !21163 gic: Add hip09 support for HISILICON_ERRATUM_165010801 - gic: Add hip09 support for HISILICON_ERRATUM_165010801 - !19740 merge refs/pull/19740/head into OLK-5.10 - !19764 merge patch-1766387978 into OLK-5.10 - hisi: l3t: enable l3t with specific cpuid - !19705 [OLK-5.10]:update patches for sw64 architecture - !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct - !19372 padata: Fix pd UAF once and for all - !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation - !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS - net: atlantic: fix fragment overflow handling in RX path - !19736 locking/rwsem: Optimize down_read_trylock() under highly contended case - locking/rwsem: Optimize down_read_trylock() under highly contended case - !19724 mm/mem_reliable: use percise count during limit check - mm/mem_reliable: use percise count during limit check - !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - !19614 NFSD: Fix crash in nfsd4_read_release() - !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19673 firewire: net: fix use after free in fwnet_finish_incoming_packet() - sw64: set PTBR_SYS before accessing vmalloc area - sw64: set execute permission for virtual machine's hmcode text section - sw64: fix simd version of copy/clear_page() - sw64: fix random mmap base range - firewire: net: fix use after free in fwnet_finish_incoming_packet() - NFSD: Fix crash in nfsd4_read_release() - crypto: ccp: add ccp-mdev functionality to the ccp module. - padata: Fix pd UAF once and for all - KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access - KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer - KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests - KVM: x86: Pass emulation type to can_emulate_instruction() - KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support - KVM: SVM: Don't intercept #GP for SEV guests - swiotlb: do not zero buffer in set_memory_decrypted() - crypto: ccp - Add SEV_INIT rc error logging on init - dma-direct: always leak memory that can't be re-encrypted - dma-direct: factor out dma_set_{de,en}crypted helpers - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits - KVM: SEV-ES: fix another issue with string I/O VMGEXITs - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed - KVM: SEV-ES: keep INS functions together - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in - KVM: x86: split the two parts of emulator_pio_in - KVM: SEV-ES: clean up kvm_sev_es_ins/outs - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out - KVM: SEV-ES: rename guest_ins_data to sev_pio_data - KVM: SEV-ES: fix length of string I/O - x86/sev-es: Do not unroll string I/O for SEV-ES guests - x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs - !19833 merge patch-1766715015 into OLK-5.10 - !19911 merge patch-1767492639 into OLK-5.10 - !19635 merge refs/pull/19635/head into OLK-5.10 - !19903 merge patch-1767161454 into OLK-5.10 - !19864 merge patch-1766990471 into OLK-5.10 - !19865 merge patch-1766990523 into OLK-5.10 - mm: mem_reliable: prevent excessive direct reclaim loops - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - !19899 merge patch-1767098709 into OLK-5.10 - erofs: validate the extent length for uncompressed pclusters - !19885 merge patch-1767076771 into OLK-5.10 - !19876 merge patch-1767011340 into OLK-5.10 - scsi: qla2xxx: Clear cmds after chip reset - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - !19856 merge patch-1766976937 into OLK-5.10 - !19857 merge patch-1766976979 into OLK-5.10 - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private - virtio-net: ensure the received length does not exceed allocated size - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - tracing: Fix memory leaks in create_field_var() - !19760 merge patch-1766370959 into OLK-5.10 - !19786 merge patch-1766474397 into OLK-5.10 - !19548 merge refs/pull/19548/head into OLK-5.10 - ext4: xattr: fix null pointer deref in ext4_raw_inode() - !19739 merge refs/pull/19739/head into OLK-5.10 - !19732 merge refs/pull/19732/head into OLK-5.10 - !19719 merge refs/pull/19719/head into OLK-5.10 - bnxt_en: Fix memory corruption when FW resources change during ifdown - bnxt_en: Fix possible crash after creating sw mqprio TCs - x86/fpu: Ensure XFD state on signal delivery - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - usb: storage: Fix memory leak in USB bulk transport - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() - cpufreq: ACPI: Fix max-frequency computation - tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes - tools headers: Update tools's copy of x86/asm headers - tools headers cpufeatures: Sync with the kernel sources - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - !19798 merge OLK-5.10 into OLK-5.10 - !19972 merge patch-1767691219 into OLK-5.10 - !19974 merge patch-1767691279 into OLK-5.10 - !19973 merge patch-1767691254 into OLK-5.10 - !19713 merge refs/pull/19713/head into OLK-5.10 - !19832 merge OLK-5.10-ringbuffer into OLK-5.10 - qed: Don't collect too many protection override GRC elements - i40e: fix validation of VF state in get resources - i40e: fix input validation logic for action_meta - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() - KVM: SVM: Skip SEV cache flush if no ASIDs have been used - KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities - x86/sev: Make enc_dec_hypercall() accept a size instead of npages - mm: x86: Fix kabi breakage of pv_ops - KVM: x86: Play nice with protected guests in complete_hypercall_exit() - KVM: x86: Assume a 64-bit hypercall for guests with protected state - KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids() - KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa - x86/kvm: Add kexec support for SEV Live Migration. - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. - EFI: Introduce the new AMD Memory Encryption GUID. - mm: x86: Invoke hypercall when page encryption status is changed - x86/kvm: Add AMD SEV specific Hypercall3 - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA - KVM: SVM: fix missing sev_decommission in sev_receive_start - KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall - KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command - KVM: SVM: Add support for KVM_SEV_RECEIVE_START command - KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command - KVM: SVM: Add KVM_SEV_SEND_FINISH command - KVM: SVM: Add KVM_SEND_UPDATE_DATA command - KVM: SVM: Add KVM_SEV SEND_START command - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19047 [OLK-5.10] Fix CVE-2025-39839 - !18614 [OLK-5.10] Fix CVE-2025-39737 - !18654 [OLK-5.10] Fix CVE-2025-38705 - !18782 【OLK-5.10】fix CVE-2025-38712 - !18612 [OLK-5.10] Fix CVE-2025-38713 - !18635 [OLK-5.10] Fix CVE-2025-38714 - !18862 [OLK-5.10] Fix CVE-2025-38697 - !20058 CVE-2025-38111 - !20131 wifi: cfg80211: fix use-after-free in cmp_bss() - !20306 mm/kmemleak: move up cond_resched() call in page scanning loop - !20309 hwmon: constify pointers to hwmon_channel_info - hwmon: fix kabi of struct hwmon_channel_info - !20338 mlxsw: spectrum_router: Fix neighbour use-after-free - !20337 mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - hwmon: constify pointers to hwmon_channel_info - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - !20316 um: virtio_uml: Fix use-after-free after put_device in probe - !20114 KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc - um: virtio_uml: Fix use-after-free after put_device in probe - !20300 software node: Correct a OOB check in software_node_get_reference_args() - !20299 jfs: add sanity check for agwidth in dbMount - !20278 iavf: fix off-by-one issues in iavf_config_rss_reg() - !20277 e1000: fix OOB in e1000_tbi_should_accept() - !20285 hwmon: (ibmpex) fix use-after-free in high/low store - mm/kmemleak: move up cond_resched() call in page scanning loop - !19953 【OLK-5.10】 power_meter patchs from 6.6 - software node: Correct a OOB check in software_node_get_reference_args() - jfs: add sanity check for agwidth in dbMount - hwmon: (ibmpex) fix use-after-free in high/low store - !20269 drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !20271 KVM: x86: use array_index_nospec with indices that come from guest - !19788 ima: Handle error code returned by ima_filter_rule_match() - iavf: fix off-by-one issues in iavf_config_rss_reg() - e1000: fix OOB in e1000_tbi_should_accept() - !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver - !20203 drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - !20202 scsi: qla2xxx: Fix premature hw access after PCI error - !19728 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09 - KVM: x86: use array_index_nospec with indices that come from guest - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - RDMA/hns: Support config and query the CNP DSCP for HIP09 - !20221 Revert "RDMA/hns: Fix mismatch exception rollback" - !20195 ACPI: APEI: Handle repeated SEA error interrupts storm - !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes - Revert "RDMA/hns: Fix mismatch exception rollback" - RDMA/hns: Support drain SQ and RQ - RDMA/hns: Return actual error code instead of fixed EINVAL - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Fix RoCEv1 failure due to DSCP - !20161 cifs: fix session state check in reconnect to avoid use-after-free issue - !20050 smb: client: Fix use-after-free in cifs_fill_dirent - !19834 v2 md/raid0, raid10: Don't set discard sectors for request queue - !19816 scsi: sg: Do not sleep in atomic context - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - scsi: qla2xxx: Fix premature hw access after PCI error - ACPI: APEI: Handle repeated SEA error interrupts storm - !20150 tracing: Do not register unsupported perf events - !20163 tracing: Fix enabling of tracing on file release - !19938 net: hns3: add VLAN id validation before using - !19836 [OLK-5.10] Fixes for SEV-ES Guest Support - !20044 【openEuler-22.03-LTS-SP4】Memory copy error - !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2 - !20025 [OLK-5.10]Support SMT control on arm64. - !19922 NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - !19985 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - !19996 net: netpoll: fix incorrect refcount handling causing incorrect cleanup - !19908 drivers:misc:sdma-dae: add NULL judgement of global variables - !20026 fs/buffer: fix use-after-free when call bh_read() helper - !19962 i40e: add max boundary check for VF filters - !20103 kmemleak: Fix kmemleak false warnings - !20169 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - !20052 CVE-2024-21823 - !18962 erofs: Fix erofs_bmap error - !20016 kernfs: Fix UAF issue - !19694 ARM: fix hash_name() issue - !20048 VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - !20065 Fix CVE-2022-50737 - !20066 smb: client: fix race with concurrent opens in rename(2) - !20151 v2 Fix CVE-2025-40016 - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems - ACPI: IPMI: Add helper to wait for when SMI is selected - hwmon: (acpi_power_meter) Fix the fake power alarm reporting - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices(). - hwmon: (acpi_power_meter) Fix update the power trip points on failure - hwmon: (acpi_power_meter) Fix uninitialized variables - !20047 crypto: af_alg - Set merge to zero early in af_alg_sendmsg - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method - hwmon: (acpi_power_meter) replace open-coded kmemdup_nul - hwmon: (acpi_power_meter) Fix style issues - hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device() - hwmon: acpi_power_meter: Get rid of ACPICA message printing - ACPI: utils: Introduce acpi_evaluation_failure_warn() - ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE - hwmon: (acpi_power_meter) clean up freeing code - x86/sev: merge continuous pages into a large range when notifying range enc status changes - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - tracing: Fix enabling of tracing on file release - cifs: fix session state check in reconnect to avoid use-after-free issue - media: uvcvideo: Use heuristic to find stream entity - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Allow extra entities - tracing: Do not register unsupported perf events - wifi: cfg80211: fix use-after-free in cmp_bss() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - arm64: kdump: fix kmemleak unknown object warning when crash base is set - arm64: kdump: fix kmemleak unknown object warning - x86/sev: Use "SEV: " prefix for messages from sev.c - x86/sev: Propagate #GP if getting linear instruction address failed - smb: client: fix race with concurrent opens in rename(2) - fs/ntfs3: Add null pointer checks - fs/ntfs3: Validate buffer length while parsing index - fs/ntfs3: Validate index root when initialize NTFS security - net/mdiobus: Fix potential out-of-bounds read/write access - net: mdio: C22 is now optional, EOPNOTSUPP if not provided - dmaengine: idxd: Fix ->poll() return value - dmaengine: idxd: Fix allowing write() from different address spaces - dmaengine: idxd: Fix passing freed memory in idxd_cdev_open() - dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling - dmaengine: idxd: add per DSA wq workqueue for processing cr faults - dmaengine: idxd: add a write() method for applications to submit work - dmaengine: idxd: add a new security check to deal with a hardware erratum - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist - smb: client: Fix use-after-free in cifs_fill_dirent - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench' - x86: don't use REP_GOOD or ERMS for small memory clearing - x86: don't use REP_GOOD or ERMS for small memory copies - fs/buffer: fix use-after-free when call bh_read() helper - powerpc/kexec: Enable SMT before waking offline CPUs - cpu/SMT: Enable SMT only if a core is online - cpu/SMT: Create topology_smt_thread_allowed() - powerpc/topology: Check if a core is online - config: enable CONFIG_HOTPLUG_SMT for arm64 - arm64: Kconfig: Enable HOTPLUG_SMT - arm64: topology: Support SMT control on ACPI based system - arch_topology: Support SMT control for OF based system - cpu/SMT: Provide a default topology_is_primary_thread() - powerpc: Add HOTPLUG_SMT support - Revert "arm64: Kconfig: Enable HOTPLUG_SMT" - kernfs: Fix kabi broken in struct kernfs_root - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir(). - kernfs: fix potential NULL dereference in __kernfs_remove - kernfs: fix NULL dereferencing in kernfs_remove - kernfs: remove redundant kernfs_rwsem declaration. - kernfs: prevent early freeing of root node - kernfs: switch global kernfs_rwsem lock to per-fs lock - KVM: SVM: Make sure GHCB is mapped before updating - KVM: SVM: check CR4 changes against vcpu->arch - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests - x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]() - x86/sev: Fix error message in runtime #VC handler - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - i40e: add max boundary check for VF filters - net: hns3: add VLAN id validation before using - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled - ACPI: thermal: Move to dedicated function sysfs extra attr creation - ACPI: thermal: Use thermal_zone_device() - thermal: core: Encapsulate tz->device field - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - drivers:misc:sdma-dae: add NULL judgement of global variables - md/raid0, raid10: Don't set discard sectors for request queue - scsi: sg: Do not sleep in atomic context - ima: Handle error code returned by ima_filter_rule_match() - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - ARM: fix hash_name() fault - ARM: allow __do_kernel_fault() to report execution of memory faults - configs: enable CONFIG_MICROCODE_ZHAOXIN - x86/microcode: Add Zhaoxin cpu microcode update driver - drm/amd/pm: fix null pointer access - batman-adv: fix OOB read/write in network-coding decode - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - erofs: Fix erofs_bmap error - jfs: upper bound check of tree index in dbAllocAG - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - !20464 rcu: Protect ->defer_qs_iw_pending from data race - !20318 net: hns3: check pf tc cfg when setting vf tc - !20522 CVE-2022-50616 - !20423 use SYS_CNTVCTSS_EL0 for gettimeofday - regulator: core: Fix resolve supply lookup issue - regulator: core: Use different devices for resource allocation and DT lookup - !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO. - !19965 nvme-fc: use lock accessing port_state and rport state - !20226 leapraid: supports LeapRaid controller - !20436 fix CVE-2026-22998 - rcu: Protect ->defer_qs_iw_pending from data race - !20449 scsi/hiraid: Support New Raid feature - !20252 ntfs: set dummy blocksize to read boot_block when mounting - !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc - !20335 Fix CVE-2025-37947 - mm: Add PAGE_ALIGN_DOWN macro - soc cache: fix walk page parameter and drop incorrect check - soc cache: Fix incorrect error path of ioctl - soc cache: Fix incorrect size validation - soc cache: Enforce maintain type check - soc cache: Modify default config to compile HiSilicon SoC cache driver - !19858 [OLK-5.10] perf support for HiSilicon HIP12 - !20331 Fix CVE-2025-39835 - !20439 Fix CVE-2025-39945 - !20251 Fix CVE-2025-38480 - !20184 Fix CVE-2025-37770 - !20185 Fix CVE-2022-49829 - !20183 Fix CVE-2025-23138 - !20240 Fix CVE-2025-21981 - !20409 net: xfrm: Fix CVE-2025-40215 - !20408 net: xfrm: Fix CVE-2025-39797 - !20407 netfilter: allow exp not to be removed in nf_ct_find_expectation - !20406 bpf, sockmap: Avoid using sk_socket after free when sending - !20405 can: bcm: add locking for bcm_op runtime updates - !20404 RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent - scsi/hiraid: Support New Raid feature - !19950 【OLK-5.10】 Drivers GPU Patches from 6.6 - !20422 driver core: fix potential null-ptr-deref in device_add() - cnic: Fix use-after-free bugs in cnic_delete_task - !20421 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - !20420 usb: early: xhci-dbc: Fix a potential out-of-bound memory access - !20418 drivers: base: Free devm resources when unregistering a device - !20417 driver core: fix resource leak in device_add() - !20416 Fix CVE-2022-49309 - !20415 kernel/resource: fix kfree() of bootmem memory again - !20414 drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - !20413 of: check previous kernel's ima-kexec-buffer against memory bounds - !20412 HID: core: Harden s32ton() against conversion to 0 bits - !20411 iommu/amd: Avoid stack buffer overflow from kernel cmdline - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvmet-tcp: remove boilerplate code - !20390 drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - vdso: do cntvct workaround in the VDSO - arm64: vdso: remove two .altinstructions related symbols - arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday - arm64: alternative: patch alternatives in the vDSO - arm64: module: move find_section to header - driver core: fix potential null-ptr-deref in device_add() - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - usb: early: xhci-dbc: Fix a potential out-of-bound memory access - drivers: base: Free devm resources when unregistering a device - driver core: fix resource leak in device_add() - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() - !20383 usb: cdns3: fix random warning message when driver load - kernel/resource: fix kfree() of bootmem memory again - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - of: check previous kernel's ima-kexec-buffer against memory bounds - HID: core: Harden s32ton() against conversion to 0 bits - !19959 【OLK-5.10】Support NMI Watchdog - iommu/amd: Avoid stack buffer overflow from kernel cmdline - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfrm: Duplicate SPI Handling - netfilter: allow exp not to be removed in nf_ct_find_expectation - bpf, sockmap: Avoid using sk_socket after free when sending - can: bcm: add locking for bcm_op runtime updates - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation. - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh - watchdog/perf: Provide function for adjusting the event period - config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64 - irqchip/gic-v3: Fix one race condition due to NMI withdraw - watchdog: Fix call trace when failed to initialize sdei - watchdog: Support watchdog_sdei coexist with existing watchdogs - init: only move down lockup_detector_init() when sdei_watchdog is enabled - arm64: enable perf events based hard lockup detector - arm64: add hw_nmi_get_sample_period for preparation of lockup detector - usb: cdns3: fix random warning message when driver load - !20051 smb3: fix for slab out of bounds on mount to ksmbd - comedi: Fix use of uninitialized data in insn_rw_emulate_bits() - watch_queue: fix pipe accounting mismatch - drm/amd/pm/powerplay: Prevent division by zero - !20357 ext4: fix e4b bitmap inconsistency reports - ice: fix memory leak in aRFS after reset - drm/hisilicon/hibmc: hibmc-drm bugfix for DP - !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6 - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel - drm/hisilicon/hibmc: Add vga connector detect functions - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp - drm/hisilicon/hibmc: Add dp serdes cfg in dp process - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis - drm/hisilicon/hibmc: Restructuring the header dp_reg.h - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers - drm/ast: Implement polling for VGA and SIL164 connectors - drm/sysfs: Register "ddc" symlink later - drm/hisilicon/hibmc: add dp module in hibmc - drm/hisilicon/hibmc: refactored struct hibmc_drm_private - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers - drm/hisilicon/hibmc: add dp aux in hibmc drivers - gic: increase the arch_timer priority to avoid hardlockup - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803 - drm/scheduler: fix fence ref counting - !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology - ext4: fix e4b bitmap inconsistency reports - !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction - !20256 Fix CVE-2025-39828 - !20339 wifi: prevent A-MSDU attacks in mesh networks - wifi: prevent A-MSDU attacks in mesh networks - ksmbd: fix stream write failure - ksmbd: prevent out-of-bounds stream writes by validating *pos - xfs: do not propagate ENODATA disk errors into xattr code - net: hns3: check pf tc cfg when setting vf tc - net: hns3: support tc limit speed - net: hns3: the multi-tcs VF can be configured only when the interface is down - irqchip/gic-v3-its: Remove DevID Pool's restriction - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *' - perf: Update .gitignore file - perf stat: Enable iostat mode for x86 platforms - perf stat: Helper functions for PCIe root ports list in iostat mode - perf: Fix tt_core mismatch over PG CPU - perf iostat: Use system-wide mode if the target cpu_list is unspecified - perf arm_spe: Correct memory level for remote access - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU - Documentation: hisi-pmu: Fix of minor format error - drivers/perf: hisi: Add support for L3C PMU v3 - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - arm64: topology: Setup amu fie when cpu hotplugging - topology: Set capacity_freq_ref in all cases - arm64/amu: Use capacity_ref_freq() to set AMU ratio - cpufreq/cppc: Set the frequency used for computing the capacity - cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}() - energy_model: Use a fixed reference frequency - cpufreq/schedutil: Use a fixed reference frequency - cpufreq: Use the fixed and coherent frequency for scaling capacity - sched/topology: Add a new arch_scale_freq_ref() method - arch_topology: Introduce thermal pressure update function - riscv: export cpu/freq invariant to scheduler - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() - cpufreq: Allow drivers to advertise boost enabled - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' - openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix unused-function warning - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: ACPI: Mark boost policy as enabled when setting boost - cpufreq: ACPI: Only set boost MSRs on supported CPUs - cpufreq: ACPI: Defer setting boost MSRs - cpufreq: acpi: Remove acpi_cpufreq_cpu_ready() - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw() - Documentation: power: Add description about new callback for EM registration - arch_topology: Avoid use-after-free for scale_freq_data - cpufreq: Exit governor when failed to start old governor - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() - cpufreq: Initialize cpufreq-based frequency-invariance later - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost - cpufreq: Remove duplicate check in __cpufreq_offline() - cpufreq: Don't unregister cpufreq cooling on CPU hotplug - cpufreq: Remove the ->stop_cpu() driver callback - cpufreq: intel_pstate: Combine ->stop_cpu() and ->offline() - cpufreq: powernv: Migrate to ->exit() callback instead of ->stop_cpu() - docs/zh_CN: add cpu-freq cpu-drivers.rst translation - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() - cpufreq: CPPC: Do not return a value from populate_efficiency_class() - cpufreq: CPPC: Remove cpu_data_list - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate() - cpufreq: CPPC: Register EM based on efficiency class information - PM: EM: Change the order of arguments in the .active_power() callback - cpufreq: Add callback to register with energy model - PM: EM: Add .get_cost() callback - cpufreq: CPPC: Add per_cpu efficiency_class - cpufreq: remove useless INIT_LIST_HEAD() - ACPI: CPPC: Disable FIE if registers in PCC regions - ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate() - cpufreq: cppc: Fix invalid return value in .get() callback - cppc_cpufreq: Fix possible null pointer dereference - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn() - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus - cpufreq: CPPC: Add support for frequency invariance - arch_topology: Export arch_freq_scale and helpers - cpufreq: CPPC: Pass structure instance by reference - cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init - cpufreq: CPPC: Migrate to ->exit() callback instead of ->stop_cpu() - cppc_cpufreq: replace per-cpu data array with a list - cppc_cpufreq: expose information on frequency domains - cppc_cpufreq: clarify support for coordination types - arch_topology: Allow multiple entities to provide sched_freq_tick() callback - sched/topology,schedutil: Wrap sched domains rebuild - arch_topology: Rename freq_scale as arch_freq_scale - arm64: topology: Drop the useless update to per-cpu cycles - arm64: topology: Make AMUs work with modular cpufreq drivers - arm64: topology: Reorder init_amu_fie() a bit - arm64: topology: Avoid the have_policy check - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() - cpufreq: prevent NULL dereference in cpufreq_online() - cpufreq: CPPC: Fix wrong max_freq in policy initialization - cppc_cpufreq: simplify use of performance capabilities - cpufreq: Introduce a more generic way to set default per-policy boost flag - cpufreq: Fix re-boost issue after hotplugging a CPU - cpufreq: Support per-policy performance boost - ntfs: set dummy blocksize to read boot_block when mounting - leapraid: supports LeapRaid controller - perf mem: Count L2 HITM for c2c statistic - perf mem: Add statistics for peer snooping - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12 - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel - perf arm-spe: augment the data source type with neoverse_spe list - tools arm64: Import cputype.h - arm64: cputype: Add cputype definition for HIP12 - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface - drivers/perf: hisi: Add cacheable option for L3C PMU - perf: Remove unstable events for uncore L3C PMU - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu - perf iostat: hisi: Fix port range retrival - drivers/perf: hisi: Add support for L3C PMU v3 - drivers/perf: hisi: Refactor the event configuration of L3C PMU - drivers/perf: hisi: Extend the field of tt_core - drivers/perf: hisi: Extract the event filter check of L3C PMU - drivers/perf: hisi: Simplify the probe process of each L3C PMU version - drivers/perf: hisi: Export hisi_uncore_pmu_isr() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/perf: hisi: Add support for HiSilicon MN PMU driver - drivers/perf: hisi: Add support for HiSilicon NoC PMU - drivers/perf: hisi: Support PMUs with no interrupt - drivers/perf: hisi: Relax the event number check of v2 PMUs - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver - drivers/perf: hisi: Simplify the probe process for each DDRC version - drivers/perf: hisi: Delete redundant blank line of DDRC PMU - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier - drivers/perf: convert sysfs snprintf family to sysfs_emit - perf: hisi: Constify static struct attribute_group - perf/hisi: Constify static attribute_group structs - drivers/perf: hisi: Add a common function to retrieve topology from firmware - drivers/perf: hisi: Extract topology information to a separate structure - drivers/perf: hisi: Refactor the detection of associated CPUs - drivers/perf: hisi: Migrate to one online CPU if no associated one online - drivers/perf: hisi: Don't update the associated_cpus on CPU offline - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs - perf stat: Enable iostat mode for HiSilicon PCIe PMU - perf stat: Add struct perf_stat_aggr to perf_stat_evsel - perf stat: Display iostat headers correctly - perf stat: Don't display metric header for non-leader uncore events - perf stat: Basic support for iostat in perf - perf arm-spe: Refactor arm-spe to support operation packet type - perf arm-spe: Use SPE data source for neoverse cores - perf arm-spe: Don't set data source if it's not a memory operation - perf tools: Sync addition of PERF_MEM_SNOOPX_PEER - tools: arm64: Import sysreg.h - smb3: fix for slab out of bounds on mount to ksmbd - watchdog/perf: adapt the watchdog_perf interface for async model - watchdog/perf: add a weak function for an arch to detect if perf can use NMIs - irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed - irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked - irqchip/gic-v3: Implement FEAT_GICv3_NMI support - arm64/nmi: Add Kconfig for NMI - arm64/nmi: Add handling of superpriority interrupts as NMIs - arm64/irq: Document handling of FEAT_NMI in irqflags.h - arm64/entry: Don't call preempt_schedule_irq() with NMIs masked - arm64/nmi: Manage masking for superpriority interrupts along with DAIF - nvme-fc: use lock accessing port_state and rport state - KVM: arm64: Hide FEAT_NMI from guests - arm64/cpufeature: Detect PE support for FEAT_NMI - arm64/hyp-stub: Enable access to ALLINT - arm64/asm: Introduce assembly macros for managing ALLINT - arm64/sysreg: Add definitions for immediate versions of MSR ALLINT - arm64/booting: Document boot requirements for FEAT_NMI - irqchip/gic-v3: Fix priority mask handling - irqchip/gic-v3: Refactor ISB + EOIR at ack time - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 - soc cache: Add framework driver for HiSilicon SoC cache - !20333 phytium-tpcm-sig-8-hadler-reg-s5000c - !20767 Revert hibmc patches to fix null-ptr-deref - Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6" - Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert" - !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Code refactoring for hibmc_drm_drv - !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 & SM4 algorithm - !20666 CVE-2023-53712 - !20673 Fix CVE-2025-39957 - !20686 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20687 i40e: Fix potential invalid access when MAC list is empty - !20692 ipv6: sr: Fix MAC comparison to be constant-time - !20699 sctp: linearize cloned gso packets in sctp_rcv - !20688 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - !20698 libceph: fix potential use-after-free in have_mon_and_osd_map() - !20697 tipc: Fix use-after-free in tipc_mon_reinit_self(). - sctp: linearize cloned gso packets in sctp_rcv - libceph: fix potential use-after-free in have_mon_and_osd_map() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - ipv6: sr: Fix MAC comparison to be constant-time - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - i40e: Fix potential invalid access when MAC list is empty - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20119 Add 950 KVM feature support - !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration - !20638 ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - !20637 net/sched: sch_qfq: do not free existing class in qfq_change_class() - !20636 v2 macvlan: fix possible UAF in macvlan_forward_source() - wifi: mac80211: increase scan_ies_len for S1G - !20566 crypto: lzo - Fix compression buffer overrun - KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer - KVM: arm64: ipiv: Fix compilation warning - KVM: arm64: check if IPIV is enabled in BIOS - kvm: hisi: print error for IPIV - KVM: arm64: using kvm_vgic_global_state for ipiv - kvm: hisi: Don't allow to change mpidr in IPIv - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv - KVM: arm64: fix live migration bug of IPIv - irqchip/gic: Add HiSilicon PV SGI support - KVM: arm64: Implement PV_SGI related calls - KVM: arm64: Document PV-sgi interface - KVM: arm64: Introduce ipiv enable ioctl - arm64/config: add config to control whether enable IPIV feature - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12 - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE - kvm: hisi_virt: Register ipiv exception interrupt - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule - kvm: arm64: avoid sending multi-SGIs in IPIV - kvm: hisi_virt: Allocate VM table and save vpeid in it - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2 - KVM: arm64: fix memory leak in TLBI - KVM: arm64: Add new HiSi CPU type to support DVMBM - kvm: hisi_virt: Update TLBI broadcast feature for hip12 - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE - ARM: 9317/1: kexec: Make smp stop calls asynchronous - !20654 scsi: qla4xxx: Prevent a potential error pointer dereference - !20653 bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - !20655 mm/slub: avoid accessing metadata when pointer is invalid in object_err() - !20656 firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors - x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - mm/slub: avoid accessing metadata when pointer is invalid in object_err() - scsi: qla4xxx: Prevent a potential error pointer dereference - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - net/sched: sch_qfq: do not free existing class in qfq_change_class() - macvlan: fix possible UAF in macvlan_forward_source() - !20597 team: fix check for port enabled in team_queue_override_port_prio_changed() - !20593 CVE-2025-39744 fixup - !20465 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - !20178 v3 Fix CVE-2024-53179 - team: fix check for port enabled in team_queue_override_port_prio_changed() - rcu: Fix racy re-initialization of irq_work causing hangs - rcu: Fix rcu_read_unlock() deadloop due to IRQ work - rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs - !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts - !20428 wifi: mt76: do not run mt76u_status_worker if the device is not running - !20427 RDMA/bnxt_re: Prevent handling any completions after qp destroy - !20466 pptp: ensure minimal skb length in pptp_xmit() - !20426 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - !20574 RDMA/cm: Fix leaking the multicast GID table reference - !20573 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - !20565 Fix CVE-2023-53521 - !20521 Fix CVE-2026-23038 - RDMA/cm: Fix leaking the multicast GID table reference - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - crypto: lzo - Fix compression buffer overrun - !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() - eth: bnxt: move and rename reset helpers - x86: Resolve FPU state corruption between atomic and non-atomic contexts - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - bnxt_en: Fix potential data corruption with HW GRO/LRO - pptp: ensure minimal skb length in pptp_xmit() - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - wifi: mt76: do not run mt76u_status_worker if the device is not running - RDMA/bnxt_re: Prevent handling any completions after qp destroy - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - phytium: add tpcm sgi handler for s5000c - smb: client: fix use-after-free of signing key - cifs: missed ref-counting smb session in find - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode - crypto: ccp: Add support to switch to CSV RING_BUFFER mode - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues - openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI - crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm - crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm - !20737 pNFS: Fix a deadlock when returning a delegation during open() - !20725 tracing: Add recursion protection in kernel stack trace recording - !20746 Fix CVE-2026-22990 - !20671 arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - !20669 irqchip/gic-v3-its: Avoid truncating memory addresses - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - pNFS: Fix a deadlock when returning a delegation during open() - tracing: Add recursion protection in kernel stack trace recording - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - irqchip/gic-v3-its: Avoid truncating memory addresses - !20899 Fix CVE-2026-23216 - !20885 nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file - !20839 bpf, cpumap: Make sure kthread is running before map update returns - bpf, cpumap: Make sure kthread is running before map update returns - !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1 - !20818 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20801 ACPI/IORT: Add PMCG platform information for 162001900 - !20814 migrate: correct lock ordering for hugetlb file folios - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20800 fix CVE-2026-23054 - migrate: correct lock ordering for hugetlb file folios - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - net: hv_netvsc: reject RSS hash key programming without RX indirection table - hv_netvsc: Allocate rx indirection table size dynamically - RDMA/hns: Remove the accidentally added hns_roce_trace.h file - irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI - !21136 sched/rt: Skip currently executing CPU in rto_next_cpu() - !21131 procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21093 kexec: derive purgatory entry from symbol - !21140 ksmbd: fix use-after-free in kerberos authentication - !21132 SUNRPC: Ensure the transport backchannel association - ksmbd: fix use-after-free in kerberos authentication - sched/rt: Skip currently executing CPU in rto_next_cpu() - SUNRPC: Ensure the transport backchannel association - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21112 CVE-2024-57979 - !21111 ALSA: aloop: Fix racy access at PCM trigger - pps: Fix kabi in pps_device - pps: Fix a use-after-free - ALSA: aloop: Fix racy access at PCM trigger - kexec: derive purgatory entry from symbol - ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21072 v2 arm64/mpam: enable MPAM feature and - !20883 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - !21021 CVE-2026-23209 - arm64/mpam: fix the bitmap written during mpam device reset - arm64/mpam: only allow L3 cache MPAM device created - arm64/mpam: fix inadvertently updating after repeatedly updating - arm64/mpam: set default feedback of last_cmd_status interface as null string - !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured - !19837 KVM: Drop tlbs_dirty - !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !21014 bpf selftest cross compile fixes - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - macvlan: fix error recovery in macvlan_common_newlink() - !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - selftests/bpf: Pass target triple to get_sys_includes macro - selftests/bpf: Enable cross-building - net: hns3: hns3 driver should be initialized when VF multi tcs is configured - net: hns3: modify code of judging if SMMU DMA is enabled - !20976 support apei_page_offline_policy - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() - nvmet-tcp: don't map pages which can't come from HIGHMEM - nvmet-tcp: fix regression in data_digest calculation - nvmet-tcp: fix memory leak when performing a controller reset - !20971 Fix CVE-2026-23074 - apei/ghes: Add sysctl interface to control soft-offline page isolation - Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages" - !20887 HiSock Enhancement - net/sched: Enforce that teql can only be used as root qdisc - drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !20891 dcache: Limit the minimal number of bucket to two - !20956 CVE-2025-39967 - fbcon: Fix OOB access in font allocation - fbcon: fix integer overflow in fbcon_do_set_font - overflow: Allow mixed type arguments - nvmet-tcp: add an helper to free the cmd buffers - dcache: Limit the minimal number of bucket to two - bpf: Deprecate hisock unused helpers and orig ingress logic - bpf: Add local connect support for hisock - bpf: Add ipv4-mapped ipv6 addr support for hisock - bpf: Add target comm parse to hisock_cmd - bpf: Add multi port parse to hisock_cmd - bpf: Only deploy hisock in server - bpf: Apply BPF_HISOCK_INGRESS to hisock ingress - bpf: Add bpf_handle_ingress/egress_ptype helper function - bpf: Add bpf_set_ingress/egress_dev helper function - bpf: Add bpf_get_skb_ethhdr helper function - bpf: Add bpf_set_ingress_dst helper function - bpf: Add BPF_HISOCK_INGRESS attach type - net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - KVM: Drop tlbs_dirty - !21262 arm64/mpam: Extending MPAM features and bugfix - arm64/mpam: Allow MBMIN to be set to 0 - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit - arm64/mpam: Add quirk to shrink MATA PMG range - !21211 scsi: hisi_sas: Change the debugfs parameters dump count default value - scsi: hisi_sas: Change the debugfs parameters dump count default value - !21163 gic: Add hip09 support for HISILICON_ERRATUM_165010801 - gic: Add hip09 support for HISILICON_ERRATUM_165010801 - !19740 merge refs/pull/19740/head into OLK-5.10 - !19764 merge patch-1766387978 into OLK-5.10 - hisi: l3t: enable l3t with specific cpuid - !19705 [OLK-5.10]:update patches for sw64 architecture - !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct - !19372 padata: Fix pd UAF once and for all - !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation - !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS - net: atlantic: fix fragment overflow handling in RX path - !19736 locking/rwsem: Optimize down_read_trylock() under highly contended case - locking/rwsem: Optimize down_read_trylock() under highly contended case - !19724 mm/mem_reliable: use percise count during limit check - mm/mem_reliable: use percise count during limit check - !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - !19614 NFSD: Fix crash in nfsd4_read_release() - !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19673 firewire: net: fix use after free in fwnet_finish_incoming_packet() - sw64: set PTBR_SYS before accessing vmalloc area - sw64: set execute permission for virtual machine's hmcode text section - sw64: fix simd version of copy/clear_page() - sw64: fix random mmap base range - firewire: net: fix use after free in fwnet_finish_incoming_packet() - NFSD: Fix crash in nfsd4_read_release() - crypto: ccp: add ccp-mdev functionality to the ccp module. - padata: Fix pd UAF once and for all - KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access - KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer - KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests - KVM: x86: Pass emulation type to can_emulate_instruction() - KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support - KVM: SVM: Don't intercept #GP for SEV guests - swiotlb: do not zero buffer in set_memory_decrypted() - crypto: ccp - Add SEV_INIT rc error logging on init - dma-direct: always leak memory that can't be re-encrypted - dma-direct: factor out dma_set_{de,en}crypted helpers - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits - KVM: SEV-ES: fix another issue with string I/O VMGEXITs - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed - KVM: SEV-ES: keep INS functions together - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in - KVM: x86: split the two parts of emulator_pio_in - KVM: SEV-ES: clean up kvm_sev_es_ins/outs - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out - KVM: SEV-ES: rename guest_ins_data to sev_pio_data - KVM: SEV-ES: fix length of string I/O - x86/sev-es: Do not unroll string I/O for SEV-ES guests - x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs - !19833 merge patch-1766715015 into OLK-5.10 - !19911 merge patch-1767492639 into OLK-5.10 - !19635 merge refs/pull/19635/head into OLK-5.10 - !19903 merge patch-1767161454 into OLK-5.10 - !19864 merge patch-1766990471 into OLK-5.10 - !19865 merge patch-1766990523 into OLK-5.10 - mm: mem_reliable: prevent excessive direct reclaim loops - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - !19899 merge patch-1767098709 into OLK-5.10 - erofs: validate the extent length for uncompressed pclusters - !19885 merge patch-1767076771 into OLK-5.10 - !19876 merge patch-1767011340 into OLK-5.10 - scsi: qla2xxx: Clear cmds after chip reset - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - !19856 merge patch-1766976937 into OLK-5.10 - !19857 merge patch-1766976979 into OLK-5.10 - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private - virtio-net: ensure the received length does not exceed allocated size - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - tracing: Fix memory leaks in create_field_var() - !19760 merge patch-1766370959 into OLK-5.10 - !19786 merge patch-1766474397 into OLK-5.10 - !19548 merge refs/pull/19548/head into OLK-5.10 - ext4: xattr: fix null pointer deref in ext4_raw_inode() - !19739 merge refs/pull/19739/head into OLK-5.10 - !19732 merge refs/pull/19732/head into OLK-5.10 - !19719 merge refs/pull/19719/head into OLK-5.10 - bnxt_en: Fix memory corruption when FW resources change during ifdown - bnxt_en: Fix possible crash after creating sw mqprio TCs - x86/fpu: Ensure XFD state on signal delivery - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - usb: storage: Fix memory leak in USB bulk transport - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() - cpufreq: ACPI: Fix max-frequency computation - tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes - tools headers: Update tools's copy of x86/asm headers - tools headers cpufeatures: Sync with the kernel sources - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - !19798 merge OLK-5.10 into OLK-5.10 - !19972 merge patch-1767691219 into OLK-5.10 - !19974 merge patch-1767691279 into OLK-5.10 - !19973 merge patch-1767691254 into OLK-5.10 - !19713 merge refs/pull/19713/head into OLK-5.10 - !19832 merge OLK-5.10-ringbuffer into OLK-5.10 - qed: Don't collect too many protection override GRC elements - i40e: fix validation of VF state in get resources - i40e: fix input validation logic for action_meta - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() - KVM: SVM: Skip SEV cache flush if no ASIDs have been used - KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities - x86/sev: Make enc_dec_hypercall() accept a size instead of npages - mm: x86: Fix kabi breakage of pv_ops - KVM: x86: Play nice with protected guests in complete_hypercall_exit() - KVM: x86: Assume a 64-bit hypercall for guests with protected state - KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids() - KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa - x86/kvm: Add kexec support for SEV Live Migration. - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. - EFI: Introduce the new AMD Memory Encryption GUID. - mm: x86: Invoke hypercall when page encryption status is changed - x86/kvm: Add AMD SEV specific Hypercall3 - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA - KVM: SVM: fix missing sev_decommission in sev_receive_start - KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall - KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command - KVM: SVM: Add support for KVM_SEV_RECEIVE_START command - KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command - KVM: SVM: Add KVM_SEV_SEND_FINISH command - KVM: SVM: Add KVM_SEND_UPDATE_DATA command - KVM: SVM: Add KVM_SEV SEND_START command - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19047 [OLK-5.10] Fix CVE-2025-39839 - !18614 [OLK-5.10] Fix CVE-2025-39737 - !18654 [OLK-5.10] Fix CVE-2025-38705 - !18782 【OLK-5.10】fix CVE-2025-38712 - !18612 [OLK-5.10] Fix CVE-2025-38713 - !18635 [OLK-5.10] Fix CVE-2025-38714 - !18862 [OLK-5.10] Fix CVE-2025-38697 - !20058 CVE-2025-38111 - !20131 wifi: cfg80211: fix use-after-free in cmp_bss() - !20306 mm/kmemleak: move up cond_resched() call in page scanning loop - !20309 hwmon: constify pointers to hwmon_channel_info - hwmon: fix kabi of struct hwmon_channel_info - !20338 mlxsw: spectrum_router: Fix neighbour use-after-free - !20337 mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - hwmon: constify pointers to hwmon_channel_info - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - !20316 um: virtio_uml: Fix use-after-free after put_device in probe - !20114 KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc - um: virtio_uml: Fix use-after-free after put_device in probe - !20300 software node: Correct a OOB check in software_node_get_reference_args() - !20299 jfs: add sanity check for agwidth in dbMount - !20278 iavf: fix off-by-one issues in iavf_config_rss_reg() - !20277 e1000: fix OOB in e1000_tbi_should_accept() - !20285 hwmon: (ibmpex) fix use-after-free in high/low store - mm/kmemleak: move up cond_resched() call in page scanning loop - !19953 【OLK-5.10】 power_meter patchs from 6.6 - software node: Correct a OOB check in software_node_get_reference_args() - jfs: add sanity check for agwidth in dbMount - hwmon: (ibmpex) fix use-after-free in high/low store - !20269 drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !20271 KVM: x86: use array_index_nospec with indices that come from guest - !19788 ima: Handle error code returned by ima_filter_rule_match() - iavf: fix off-by-one issues in iavf_config_rss_reg() - e1000: fix OOB in e1000_tbi_should_accept() - !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver - !20203 drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - !20202 scsi: qla2xxx: Fix premature hw access after PCI error - !19728 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09 - KVM: x86: use array_index_nospec with indices that come from guest - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - RDMA/hns: Support config and query the CNP DSCP for HIP09 - !20221 Revert "RDMA/hns: Fix mismatch exception rollback" - !20195 ACPI: APEI: Handle repeated SEA error interrupts storm - !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes - Revert "RDMA/hns: Fix mismatch exception rollback" - RDMA/hns: Support drain SQ and RQ - RDMA/hns: Return actual error code instead of fixed EINVAL - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Fix RoCEv1 failure due to DSCP - !20161 cifs: fix session state check in reconnect to avoid use-after-free issue - !20050 smb: client: Fix use-after-free in cifs_fill_dirent - !19834 v2 md/raid0, raid10: Don't set discard sectors for request queue - !19816 scsi: sg: Do not sleep in atomic context - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - scsi: qla2xxx: Fix premature hw access after PCI error - ACPI: APEI: Handle repeated SEA error interrupts storm - !20150 tracing: Do not register unsupported perf events - !20163 tracing: Fix enabling of tracing on file release - !19938 net: hns3: add VLAN id validation before using - !19836 [OLK-5.10] Fixes for SEV-ES Guest Support - !20044 【openEuler-22.03-LTS-SP4】Memory copy error - !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2 - !20025 [OLK-5.10]Support SMT control on arm64. - !19922 NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - !19985 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - !19996 net: netpoll: fix incorrect refcount handling causing incorrect cleanup - !19908 drivers:misc:sdma-dae: add NULL judgement of global variables - !20026 fs/buffer: fix use-after-free when call bh_read() helper - !19962 i40e: add max boundary check for VF filters - !20103 kmemleak: Fix kmemleak false warnings - !20169 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - !20052 CVE-2024-21823 - !18962 erofs: Fix erofs_bmap error - !20016 kernfs: Fix UAF issue - !19694 ARM: fix hash_name() issue - !20048 VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - !20065 Fix CVE-2022-50737 - !20066 smb: client: fix race with concurrent opens in rename(2) - !20151 v2 Fix CVE-2025-40016 - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems - ACPI: IPMI: Add helper to wait for when SMI is selected - hwmon: (acpi_power_meter) Fix the fake power alarm reporting - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices(). - hwmon: (acpi_power_meter) Fix update the power trip points on failure - hwmon: (acpi_power_meter) Fix uninitialized variables - !20047 crypto: af_alg - Set merge to zero early in af_alg_sendmsg - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method - hwmon: (acpi_power_meter) replace open-coded kmemdup_nul - hwmon: (acpi_power_meter) Fix style issues - hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device() - hwmon: acpi_power_meter: Get rid of ACPICA message printing - ACPI: utils: Introduce acpi_evaluation_failure_warn() - ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE - hwmon: (acpi_power_meter) clean up freeing code - x86/sev: merge continuous pages into a large range when notifying range enc status changes - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - tracing: Fix enabling of tracing on file release - cifs: fix session state check in reconnect to avoid use-after-free issue - media: uvcvideo: Use heuristic to find stream entity - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Allow extra entities - tracing: Do not register unsupported perf events - wifi: cfg80211: fix use-after-free in cmp_bss() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - arm64: kdump: fix kmemleak unknown object warning when crash base is set - arm64: kdump: fix kmemleak unknown object warning - x86/sev: Use "SEV: " prefix for messages from sev.c - x86/sev: Propagate #GP if getting linear instruction address failed - smb: client: fix race with concurrent opens in rename(2) - fs/ntfs3: Add null pointer checks - fs/ntfs3: Validate buffer length while parsing index - fs/ntfs3: Validate index root when initialize NTFS security - net/mdiobus: Fix potential out-of-bounds read/write access - net: mdio: C22 is now optional, EOPNOTSUPP if not provided - dmaengine: idxd: Fix ->poll() return value - dmaengine: idxd: Fix allowing write() from different address spaces - dmaengine: idxd: Fix passing freed memory in idxd_cdev_open() - dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling - dmaengine: idxd: add per DSA wq workqueue for processing cr faults - dmaengine: idxd: add a write() method for applications to submit work - dmaengine: idxd: add a new security check to deal with a hardware erratum - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist - smb: client: Fix use-after-free in cifs_fill_dirent - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench' - x86: don't use REP_GOOD or ERMS for small memory clearing - x86: don't use REP_GOOD or ERMS for small memory copies - fs/buffer: fix use-after-free when call bh_read() helper - powerpc/kexec: Enable SMT before waking offline CPUs - cpu/SMT: Enable SMT only if a core is online - cpu/SMT: Create topology_smt_thread_allowed() - powerpc/topology: Check if a core is online - config: enable CONFIG_HOTPLUG_SMT for arm64 - arm64: Kconfig: Enable HOTPLUG_SMT - arm64: topology: Support SMT control on ACPI based system - arch_topology: Support SMT control for OF based system - cpu/SMT: Provide a default topology_is_primary_thread() - powerpc: Add HOTPLUG_SMT support - Revert "arm64: Kconfig: Enable HOTPLUG_SMT" - kernfs: Fix kabi broken in struct kernfs_root - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir(). - kernfs: fix potential NULL dereference in __kernfs_remove - kernfs: fix NULL dereferencing in kernfs_remove - kernfs: remove redundant kernfs_rwsem declaration. - kernfs: prevent early freeing of root node - kernfs: switch global kernfs_rwsem lock to per-fs lock - KVM: SVM: Make sure GHCB is mapped before updating - KVM: SVM: check CR4 changes against vcpu->arch - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests - x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]() - x86/sev: Fix error message in runtime #VC handler - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - i40e: add max boundary check for VF filters - net: hns3: add VLAN id validation before using - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled - ACPI: thermal: Move to dedicated function sysfs extra attr creation - ACPI: thermal: Use thermal_zone_device() - thermal: core: Encapsulate tz->device field - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - drivers:misc:sdma-dae: add NULL judgement of global variables - md/raid0, raid10: Don't set discard sectors for request queue - scsi: sg: Do not sleep in atomic context - ima: Handle error code returned by ima_filter_rule_match() - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - ARM: fix hash_name() fault - ARM: allow __do_kernel_fault() to report execution of memory faults - configs: enable CONFIG_MICROCODE_ZHAOXIN - x86/microcode: Add Zhaoxin cpu microcode update driver - drm/amd/pm: fix null pointer access - batman-adv: fix OOB read/write in network-coding decode - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - erofs: Fix erofs_bmap error - jfs: upper bound check of tree index in dbAllocAG - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - !20464 rcu: Protect ->defer_qs_iw_pending from data race - !20318 net: hns3: check pf tc cfg when setting vf tc - !20522 CVE-2022-50616 - !20423 use SYS_CNTVCTSS_EL0 for gettimeofday - regulator: core: Fix resolve supply lookup issue - regulator: core: Use different devices for resource allocation and DT lookup - !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO. - !19965 nvme-fc: use lock accessing port_state and rport state - !20226 leapraid: supports LeapRaid controller - !20436 fix CVE-2026-22998 - rcu: Protect ->defer_qs_iw_pending from data race - !20449 scsi/hiraid: Support New Raid feature - !20252 ntfs: set dummy blocksize to read boot_block when mounting - !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc - !20335 Fix CVE-2025-37947 - mm: Add PAGE_ALIGN_DOWN macro - soc cache: fix walk page parameter and drop incorrect check - soc cache: Fix incorrect error path of ioctl - soc cache: Fix incorrect size validation - soc cache: Enforce maintain type check - soc cache: Modify default config to compile HiSilicon SoC cache driver - !19858 [OLK-5.10] perf support for HiSilicon HIP12 - !20331 Fix CVE-2025-39835 - !20439 Fix CVE-2025-39945 - !20251 Fix CVE-2025-38480 - !20184 Fix CVE-2025-37770 - !20185 Fix CVE-2022-49829 - !20183 Fix CVE-2025-23138 - !20240 Fix CVE-2025-21981 - !20409 net: xfrm: Fix CVE-2025-40215 - !20408 net: xfrm: Fix CVE-2025-39797 - !20407 netfilter: allow exp not to be removed in nf_ct_find_expectation - !20406 bpf, sockmap: Avoid using sk_socket after free when sending - !20405 can: bcm: add locking for bcm_op runtime updates - !20404 RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent - scsi/hiraid: Support New Raid feature - !19950 【OLK-5.10】 Drivers GPU Patches from 6.6 - !20422 driver core: fix potential null-ptr-deref in device_add() - cnic: Fix use-after-free bugs in cnic_delete_task - !20421 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - !20420 usb: early: xhci-dbc: Fix a potential out-of-bound memory access - !20418 drivers: base: Free devm resources when unregistering a device - !20417 driver core: fix resource leak in device_add() - !20416 Fix CVE-2022-49309 - !20415 kernel/resource: fix kfree() of bootmem memory again - !20414 drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - !20413 of: check previous kernel's ima-kexec-buffer against memory bounds - !20412 HID: core: Harden s32ton() against conversion to 0 bits - !20411 iommu/amd: Avoid stack buffer overflow from kernel cmdline - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvmet-tcp: remove boilerplate code - !20390 drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - vdso: do cntvct workaround in the VDSO - arm64: vdso: remove two .altinstructions related symbols - arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday - arm64: alternative: patch alternatives in the vDSO - arm64: module: move find_section to header - driver core: fix potential null-ptr-deref in device_add() - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - usb: early: xhci-dbc: Fix a potential out-of-bound memory access - drivers: base: Free devm resources when unregistering a device - driver core: fix resource leak in device_add() - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() - !20383 usb: cdns3: fix random warning message when driver load - kernel/resource: fix kfree() of bootmem memory again - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - of: check previous kernel's ima-kexec-buffer against memory bounds - HID: core: Harden s32ton() against conversion to 0 bits - !19959 【OLK-5.10】Support NMI Watchdog - iommu/amd: Avoid stack buffer overflow from kernel cmdline - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfrm: Duplicate SPI Handling - netfilter: allow exp not to be removed in nf_ct_find_expectation - bpf, sockmap: Avoid using sk_socket after free when sending - can: bcm: add locking for bcm_op runtime updates - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation. - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh - watchdog/perf: Provide function for adjusting the event period - config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64 - irqchip/gic-v3: Fix one race condition due to NMI withdraw - watchdog: Fix call trace when failed to initialize sdei - watchdog: Support watchdog_sdei coexist with existing watchdogs - init: only move down lockup_detector_init() when sdei_watchdog is enabled - arm64: enable perf events based hard lockup detector - arm64: add hw_nmi_get_sample_period for preparation of lockup detector - usb: cdns3: fix random warning message when driver load - !20051 smb3: fix for slab out of bounds on mount to ksmbd - comedi: Fix use of uninitialized data in insn_rw_emulate_bits() - watch_queue: fix pipe accounting mismatch - drm/amd/pm/powerplay: Prevent division by zero - !20357 ext4: fix e4b bitmap inconsistency reports - ice: fix memory leak in aRFS after reset - drm/hisilicon/hibmc: hibmc-drm bugfix for DP - !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6 - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel - drm/hisilicon/hibmc: Add vga connector detect functions - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp - drm/hisilicon/hibmc: Add dp serdes cfg in dp process - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis - drm/hisilicon/hibmc: Restructuring the header dp_reg.h - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers - drm/ast: Implement polling for VGA and SIL164 connectors - drm/sysfs: Register "ddc" symlink later - drm/hisilicon/hibmc: add dp module in hibmc - drm/hisilicon/hibmc: refactored struct hibmc_drm_private - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers - drm/hisilicon/hibmc: add dp aux in hibmc drivers - gic: increase the arch_timer priority to avoid hardlockup - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803 - drm/scheduler: fix fence ref counting - !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology - ext4: fix e4b bitmap inconsistency reports - !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction - !20256 Fix CVE-2025-39828 - !20339 wifi: prevent A-MSDU attacks in mesh networks - wifi: prevent A-MSDU attacks in mesh networks - ksmbd: fix stream write failure - ksmbd: prevent out-of-bounds stream writes by validating *pos - xfs: do not propagate ENODATA disk errors into xattr code - net: hns3: check pf tc cfg when setting vf tc - net: hns3: support tc limit speed - net: hns3: the multi-tcs VF can be configured only when the interface is down - irqchip/gic-v3-its: Remove DevID Pool's restriction - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *' - perf: Update .gitignore file - perf stat: Enable iostat mode for x86 platforms - perf stat: Helper functions for PCIe root ports list in iostat mode - perf: Fix tt_core mismatch over PG CPU - perf iostat: Use system-wide mode if the target cpu_list is unspecified - perf arm_spe: Correct memory level for remote access - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU - Documentation: hisi-pmu: Fix of minor format error - drivers/perf: hisi: Add support for L3C PMU v3 - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - arm64: topology: Setup amu fie when cpu hotplugging - topology: Set capacity_freq_ref in all cases - arm64/amu: Use capacity_ref_freq() to set AMU ratio - cpufreq/cppc: Set the frequency used for computing the capacity - cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}() - energy_model: Use a fixed reference frequency - cpufreq/schedutil: Use a fixed reference frequency - cpufreq: Use the fixed and coherent frequency for scaling capacity - sched/topology: Add a new arch_scale_freq_ref() method - arch_topology: Introduce thermal pressure update function - riscv: export cpu/freq invariant to scheduler - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() - cpufreq: Allow drivers to advertise boost enabled - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' - openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix unused-function warning - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: ACPI: Mark boost policy as enabled when setting boost - cpufreq: ACPI: Only set boost MSRs on supported CPUs - cpufreq: ACPI: Defer setting boost MSRs - cpufreq: acpi: Remove acpi_cpufreq_cpu_ready() - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw() - Documentation: power: Add description about new callback for EM registration - arch_topology: Avoid use-after-free for scale_freq_data - cpufreq: Exit governor when failed to start old governor - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() - cpufreq: Initialize cpufreq-based frequency-invariance later - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost - cpufreq: Remove duplicate check in __cpufreq_offline() - cpufreq: Don't unregister cpufreq cooling on CPU hotplug - cpufreq: Remove the ->stop_cpu() driver callback - cpufreq: intel_pstate: Combine ->stop_cpu() and ->offline() - cpufreq: powernv: Migrate to ->exit() callback instead of ->stop_cpu() - docs/zh_CN: add cpu-freq cpu-drivers.rst translation - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() - cpufreq: CPPC: Do not return a value from populate_efficiency_class() - cpufreq: CPPC: Remove cpu_data_list - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate() - cpufreq: CPPC: Register EM based on efficiency class information - PM: EM: Change the order of arguments in the .active_power() callback - cpufreq: Add callback to register with energy model - PM: EM: Add .get_cost() callback - cpufreq: CPPC: Add per_cpu efficiency_class - cpufreq: remove useless INIT_LIST_HEAD() - ACPI: CPPC: Disable FIE if registers in PCC regions - ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate() - cpufreq: cppc: Fix invalid return value in .get() callback - cppc_cpufreq: Fix possible null pointer dereference - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn() - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus - cpufreq: CPPC: Add support for frequency invariance - arch_topology: Export arch_freq_scale and helpers - cpufreq: CPPC: Pass structure instance by reference - cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init - cpufreq: CPPC: Migrate to ->exit() callback instead of ->stop_cpu() - cppc_cpufreq: replace per-cpu data array with a list - cppc_cpufreq: expose information on frequency domains - cppc_cpufreq: clarify support for coordination types - arch_topology: Allow multiple entities to provide sched_freq_tick() callback - sched/topology,schedutil: Wrap sched domains rebuild - arch_topology: Rename freq_scale as arch_freq_scale - arm64: topology: Drop the useless update to per-cpu cycles - arm64: topology: Make AMUs work with modular cpufreq drivers - arm64: topology: Reorder init_amu_fie() a bit - arm64: topology: Avoid the have_policy check - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() - cpufreq: prevent NULL dereference in cpufreq_online() - cpufreq: CPPC: Fix wrong max_freq in policy initialization - cppc_cpufreq: simplify use of performance capabilities - cpufreq: Introduce a more generic way to set default per-policy boost flag - cpufreq: Fix re-boost issue after hotplugging a CPU - cpufreq: Support per-policy performance boost - ntfs: set dummy blocksize to read boot_block when mounting - leapraid: supports LeapRaid controller - perf mem: Count L2 HITM for c2c statistic - perf mem: Add statistics for peer snooping - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12 - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel - perf arm-spe: augment the data source type with neoverse_spe list - tools arm64: Import cputype.h - arm64: cputype: Add cputype definition for HIP12 - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface - drivers/perf: hisi: Add cacheable option for L3C PMU - perf: Remove unstable events for uncore L3C PMU - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu - perf iostat: hisi: Fix port range retrival - drivers/perf: hisi: Add support for L3C PMU v3 - drivers/perf: hisi: Refactor the event configuration of L3C PMU - drivers/perf: hisi: Extend the field of tt_core - drivers/perf: hisi: Extract the event filter check of L3C PMU - drivers/perf: hisi: Simplify the probe process of each L3C PMU version - drivers/perf: hisi: Export hisi_uncore_pmu_isr() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/perf: hisi: Add support for HiSilicon MN PMU driver - drivers/perf: hisi: Add support for HiSilicon NoC PMU - drivers/perf: hisi: Support PMUs with no interrupt - drivers/perf: hisi: Relax the event number check of v2 PMUs - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver - drivers/perf: hisi: Simplify the probe process for each DDRC version - drivers/perf: hisi: Delete redundant blank line of DDRC PMU - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier - drivers/perf: convert sysfs snprintf family to sysfs_emit - perf: hisi: Constify static struct attribute_group - perf/hisi: Constify static attribute_group structs - drivers/perf: hisi: Add a common function to retrieve topology from firmware - drivers/perf: hisi: Extract topology information to a separate structure - drivers/perf: hisi: Refactor the detection of associated CPUs - drivers/perf: hisi: Migrate to one online CPU if no associated one online - drivers/perf: hisi: Don't update the associated_cpus on CPU offline - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs - perf stat: Enable iostat mode for HiSilicon PCIe PMU - perf stat: Add struct perf_stat_aggr to perf_stat_evsel - perf stat: Display iostat headers correctly - perf stat: Don't display metric header for non-leader uncore events - perf stat: Basic support for iostat in perf - perf arm-spe: Refactor arm-spe to support operation packet type - perf arm-spe: Use SPE data source for neoverse cores - perf arm-spe: Don't set data source if it's not a memory operation - perf tools: Sync addition of PERF_MEM_SNOOPX_PEER - tools: arm64: Import sysreg.h - smb3: fix for slab out of bounds on mount to ksmbd - watchdog/perf: adapt the watchdog_perf interface for async model - watchdog/perf: add a weak function for an arch to detect if perf can use NMIs - irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed - irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked - irqchip/gic-v3: Implement FEAT_GICv3_NMI support - arm64/nmi: Add Kconfig for NMI - arm64/nmi: Add handling of superpriority interrupts as NMIs - arm64/irq: Document handling of FEAT_NMI in irqflags.h - arm64/entry: Don't call preempt_schedule_irq() with NMIs masked - arm64/nmi: Manage masking for superpriority interrupts along with DAIF - nvme-fc: use lock accessing port_state and rport state - KVM: arm64: Hide FEAT_NMI from guests - arm64/cpufeature: Detect PE support for FEAT_NMI - arm64/hyp-stub: Enable access to ALLINT - arm64/asm: Introduce assembly macros for managing ALLINT - arm64/sysreg: Add definitions for immediate versions of MSR ALLINT - arm64/booting: Document boot requirements for FEAT_NMI - irqchip/gic-v3: Fix priority mask handling - irqchip/gic-v3: Refactor ISB + EOIR at ack time - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 - soc cache: Add framework driver for HiSilicon SoC cache - !20333 phytium-tpcm-sig-8-hadler-reg-s5000c - !20767 Revert hibmc patches to fix null-ptr-deref - Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6" - Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert" - !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Code refactoring for hibmc_drm_drv - !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 & SM4 algorithm - !20666 CVE-2023-53712 - !20673 Fix CVE-2025-39957 - !20686 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20687 i40e: Fix potential invalid access when MAC list is empty - !20692 ipv6: sr: Fix MAC comparison to be constant-time - !20699 sctp: linearize cloned gso packets in sctp_rcv - !20688 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - !20698 libceph: fix potential use-after-free in have_mon_and_osd_map() - !20697 tipc: Fix use-after-free in tipc_mon_reinit_self(). - sctp: linearize cloned gso packets in sctp_rcv - libceph: fix potential use-after-free in have_mon_and_osd_map() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - ipv6: sr: Fix MAC comparison to be constant-time - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - i40e: Fix potential invalid access when MAC list is empty - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20119 Add 950 KVM feature support - !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration - !20638 ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - !20637 net/sched: sch_qfq: do not free existing class in qfq_change_class() - !20636 v2 macvlan: fix possible UAF in macvlan_forward_source() - wifi: mac80211: increase scan_ies_len for S1G - !20566 crypto: lzo - Fix compression buffer overrun - KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer - KVM: arm64: ipiv: Fix compilation warning - KVM: arm64: check if IPIV is enabled in BIOS - kvm: hisi: print error for IPIV - KVM: arm64: using kvm_vgic_global_state for ipiv - kvm: hisi: Don't allow to change mpidr in IPIv - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv - KVM: arm64: fix live migration bug of IPIv - irqchip/gic: Add HiSilicon PV SGI support - KVM: arm64: Implement PV_SGI related calls - KVM: arm64: Document PV-sgi interface - KVM: arm64: Introduce ipiv enable ioctl - arm64/config: add config to control whether enable IPIV feature - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12 - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE - kvm: hisi_virt: Register ipiv exception interrupt - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule - kvm: arm64: avoid sending multi-SGIs in IPIV - kvm: hisi_virt: Allocate VM table and save vpeid in it - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2 - KVM: arm64: fix memory leak in TLBI - KVM: arm64: Add new HiSi CPU type to support DVMBM - kvm: hisi_virt: Update TLBI broadcast feature for hip12 - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE - ARM: 9317/1: kexec: Make smp stop calls asynchronous - !20654 scsi: qla4xxx: Prevent a potential error pointer dereference - !20653 bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - !20655 mm/slub: avoid accessing metadata when pointer is invalid in object_err() - !20656 firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors - x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - mm/slub: avoid accessing metadata when pointer is invalid in object_err() - scsi: qla4xxx: Prevent a potential error pointer dereference - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - net/sched: sch_qfq: do not free existing class in qfq_change_class() - macvlan: fix possible UAF in macvlan_forward_source() - !20597 team: fix check for port enabled in team_queue_override_port_prio_changed() - !20593 CVE-2025-39744 fixup - !20465 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - !20178 v3 Fix CVE-2024-53179 - team: fix check for port enabled in team_queue_override_port_prio_changed() - rcu: Fix racy re-initialization of irq_work causing hangs - rcu: Fix rcu_read_unlock() deadloop due to IRQ work - rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs - !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts - !20428 wifi: mt76: do not run mt76u_status_worker if the device is not running - !20427 RDMA/bnxt_re: Prevent handling any completions after qp destroy - !20466 pptp: ensure minimal skb length in pptp_xmit() - !20426 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - !20574 RDMA/cm: Fix leaking the multicast GID table reference - !20573 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - !20565 Fix CVE-2023-53521 - !20521 Fix CVE-2026-23038 - RDMA/cm: Fix leaking the multicast GID table reference - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - crypto: lzo - Fix compression buffer overrun - !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() - eth: bnxt: move and rename reset helpers - x86: Resolve FPU state corruption between atomic and non-atomic contexts - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - bnxt_en: Fix potential data corruption with HW GRO/LRO - pptp: ensure minimal skb length in pptp_xmit() - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - wifi: mt76: do not run mt76u_status_worker if the device is not running - RDMA/bnxt_re: Prevent handling any completions after qp destroy - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - phytium: add tpcm sgi handler for s5000c - smb: client: fix use-after-free of signing key - cifs: missed ref-counting smb session in find - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode - crypto: ccp: Add support to switch to CSV RING_BUFFER mode - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues - openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI - crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm - crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm - !20737 pNFS: Fix a deadlock when returning a delegation during open() - !20725 tracing: Add recursion protection in kernel stack trace recording - !20746 Fix CVE-2026-22990 - !20671 arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - !20669 irqchip/gic-v3-its: Avoid truncating memory addresses - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - pNFS: Fix a deadlock when returning a delegation during open() - tracing: Add recursion protection in kernel stack trace recording - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - irqchip/gic-v3-its: Avoid truncating memory addresses - !20899 Fix CVE-2026-23216 - !20885 nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file - !20839 bpf, cpumap: Make sure kthread is running before map update returns - bpf, cpumap: Make sure kthread is running before map update returns - !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1 - !20818 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20801 ACPI/IORT: Add PMCG platform information for 162001900 - !20814 migrate: correct lock ordering for hugetlb file folios - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20800 fix CVE-2026-23054 - migrate: correct lock ordering for hugetlb file folios - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - net: hv_netvsc: reject RSS hash key programming without RX indirection table - hv_netvsc: Allocate rx indirection table size dynamically - RDMA/hns: Remove the accidentally added hns_roce_trace.h file - irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI - !21136 sched/rt: Skip currently executing CPU in rto_next_cpu() - !21131 procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21093 kexec: derive purgatory entry from symbol - !21140 ksmbd: fix use-after-free in kerberos authentication - !21132 SUNRPC: Ensure the transport backchannel association - ksmbd: fix use-after-free in kerberos authentication - sched/rt: Skip currently executing CPU in rto_next_cpu() - SUNRPC: Ensure the transport backchannel association - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21112 CVE-2024-57979 - !21111 ALSA: aloop: Fix racy access at PCM trigger - pps: Fix kabi in pps_device - pps: Fix a use-after-free - ALSA: aloop: Fix racy access at PCM trigger - kexec: derive purgatory entry from symbol - ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21072 v2 arm64/mpam: enable MPAM feature and - !20883 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - !21021 CVE-2026-23209 - arm64/mpam: fix the bitmap written during mpam device reset - arm64/mpam: only allow L3 cache MPAM device created - arm64/mpam: fix inadvertently updating after repeatedly updating - arm64/mpam: set default feedback of last_cmd_status interface as null string - !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured - !19837 KVM: Drop tlbs_dirty - !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !21014 bpf selftest cross compile fixes - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - macvlan: fix error recovery in macvlan_common_newlink() - !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - selftests/bpf: Pass target triple to get_sys_includes macro - selftests/bpf: Enable cross-building - net: hns3: hns3 driver should be initialized when VF multi tcs is configured - net: hns3: modify code of judging if SMMU DMA is enabled - !20976 support apei_page_offline_policy - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() - nvmet-tcp: don't map pages which can't come from HIGHMEM - nvmet-tcp: fix regression in data_digest calculation - nvmet-tcp: fix memory leak when performing a controller reset - !20971 Fix CVE-2026-23074 - apei/ghes: Add sysctl interface to control soft-offline page isolation - Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages" - !20887 HiSock Enhancement - net/sched: Enforce that teql can only be used as root qdisc - drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !20891 dcache: Limit the minimal number of bucket to two - !20956 CVE-2025-39967 - fbcon: Fix OOB access in font allocation - fbcon: fix integer overflow in fbcon_do_set_font - overflow: Allow mixed type arguments - nvmet-tcp: add an helper to free the cmd buffers - dcache: Limit the minimal number of bucket to two - bpf: Deprecate hisock unused helpers and orig ingress logic - bpf: Add local connect support for hisock - bpf: Add ipv4-mapped ipv6 addr support for hisock - bpf: Add target comm parse to hisock_cmd - bpf: Add multi port parse to hisock_cmd - bpf: Only deploy hisock in server - bpf: Apply BPF_HISOCK_INGRESS to hisock ingress - bpf: Add bpf_handle_ingress/egress_ptype helper function - bpf: Add bpf_set_ingress/egress_dev helper function - bpf: Add bpf_get_skb_ethhdr helper function - bpf: Add bpf_set_ingress_dst helper function - bpf: Add BPF_HISOCK_INGRESS attach type - net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - KVM: Drop tlbs_dirty - !21262 arm64/mpam: Extending MPAM features and bugfix - arm64/mpam: Allow MBMIN to be set to 0 - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit - arm64/mpam: Add quirk to shrink MATA PMG range - !21211 scsi: hisi_sas: Change the debugfs parameters dump count default value - scsi: hisi_sas: Change the debugfs parameters dump count default value - !21163 gic: Add hip09 support for HISILICON_ERRATUM_165010801 - gic: Add hip09 support for HISILICON_ERRATUM_165010801 - !19740 merge refs/pull/19740/head into OLK-5.10 - !19764 merge patch-1766387978 into OLK-5.10 - hisi: l3t: enable l3t with specific cpuid - !19705 [OLK-5.10]:update patches for sw64 architecture - !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct - !19372 padata: Fix pd UAF once and for all - !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation - !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS - net: atlantic: fix fragment overflow handling in RX path - !19736 locking/rwsem: Optimize down_read_trylock() under highly contended case - locking/rwsem: Optimize down_read_trylock() under highly contended case - !19724 mm/mem_reliable: use percise count during limit check - mm/mem_reliable: use percise count during limit check - !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - !19614 NFSD: Fix crash in nfsd4_read_release() - !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19673 firewire: net: fix use after free in fwnet_finish_incoming_packet() - sw64: set PTBR_SYS before accessing vmalloc area - sw64: set execute permission for virtual machine's hmcode text section - sw64: fix simd version of copy/clear_page() - sw64: fix random mmap base range - firewire: net: fix use after free in fwnet_finish_incoming_packet() - NFSD: Fix crash in nfsd4_read_release() - crypto: ccp: add ccp-mdev functionality to the ccp module. - padata: Fix pd UAF once and for all - KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access - KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer - KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests - KVM: x86: Pass emulation type to can_emulate_instruction() - KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support - KVM: SVM: Don't intercept #GP for SEV guests - swiotlb: do not zero buffer in set_memory_decrypted() - crypto: ccp - Add SEV_INIT rc error logging on init - dma-direct: always leak memory that can't be re-encrypted - dma-direct: factor out dma_set_{de,en}crypted helpers - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits - KVM: SEV-ES: fix another issue with string I/O VMGEXITs - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed - KVM: SEV-ES: keep INS functions together - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in - KVM: x86: split the two parts of emulator_pio_in - KVM: SEV-ES: clean up kvm_sev_es_ins/outs - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out - KVM: SEV-ES: rename guest_ins_data to sev_pio_data - KVM: SEV-ES: fix length of string I/O - x86/sev-es: Do not unroll string I/O for SEV-ES guests - x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs - !19833 merge patch-1766715015 into OLK-5.10 - !19911 merge patch-1767492639 into OLK-5.10 - !19635 merge refs/pull/19635/head into OLK-5.10 - !19903 merge patch-1767161454 into OLK-5.10 - !19864 merge patch-1766990471 into OLK-5.10 - !19865 merge patch-1766990523 into OLK-5.10 - mm: mem_reliable: prevent excessive direct reclaim loops - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - !19899 merge patch-1767098709 into OLK-5.10 - erofs: validate the extent length for uncompressed pclusters - !19885 merge patch-1767076771 into OLK-5.10 - !19876 merge patch-1767011340 into OLK-5.10 - scsi: qla2xxx: Clear cmds after chip reset - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - !19856 merge patch-1766976937 into OLK-5.10 - !19857 merge patch-1766976979 into OLK-5.10 - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private - virtio-net: ensure the received length does not exceed allocated size - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - tracing: Fix memory leaks in create_field_var() - !19760 merge patch-1766370959 into OLK-5.10 - !19786 merge patch-1766474397 into OLK-5.10 - !19548 merge refs/pull/19548/head into OLK-5.10 - ext4: xattr: fix null pointer deref in ext4_raw_inode() - !19739 merge refs/pull/19739/head into OLK-5.10 - !19732 merge refs/pull/19732/head into OLK-5.10 - !19719 merge refs/pull/19719/head into OLK-5.10 - bnxt_en: Fix memory corruption when FW resources change during ifdown - bnxt_en: Fix possible crash after creating sw mqprio TCs - x86/fpu: Ensure XFD state on signal delivery - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - usb: storage: Fix memory leak in USB bulk transport - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() - cpufreq: ACPI: Fix max-frequency computation - tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes - tools headers: Update tools's copy of x86/asm headers - tools headers cpufeatures: Sync with the kernel sources - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - !19798 merge OLK-5.10 into OLK-5.10 - !19972 merge patch-1767691219 into OLK-5.10 - !19974 merge patch-1767691279 into OLK-5.10 - !19973 merge patch-1767691254 into OLK-5.10 - !19713 merge refs/pull/19713/head into OLK-5.10 - !19832 merge OLK-5.10-ringbuffer into OLK-5.10 - qed: Don't collect too many protection override GRC elements - i40e: fix validation of VF state in get resources - i40e: fix input validation logic for action_meta - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() - KVM: SVM: Skip SEV cache flush if no ASIDs have been used - KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities - x86/sev: Make enc_dec_hypercall() accept a size instead of npages - mm: x86: Fix kabi breakage of pv_ops - KVM: x86: Play nice with protected guests in complete_hypercall_exit() - KVM: x86: Assume a 64-bit hypercall for guests with protected state - KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids() - KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa - x86/kvm: Add kexec support for SEV Live Migration. - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. - EFI: Introduce the new AMD Memory Encryption GUID. - mm: x86: Invoke hypercall when page encryption status is changed - x86/kvm: Add AMD SEV specific Hypercall3 - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA - KVM: SVM: fix missing sev_decommission in sev_receive_start - KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall - KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command - KVM: SVM: Add support for KVM_SEV_RECEIVE_START command - KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command - KVM: SVM: Add KVM_SEV_SEND_FINISH command - KVM: SVM: Add KVM_SEND_UPDATE_DATA command - KVM: SVM: Add KVM_SEV SEND_START command - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19047 [OLK-5.10] Fix CVE-2025-39839 - !18614 [OLK-5.10] Fix CVE-2025-39737 - !18654 [OLK-5.10] Fix CVE-2025-38705 - !18782 【OLK-5.10】fix CVE-2025-38712 - !18612 [OLK-5.10] Fix CVE-2025-38713 - !18635 [OLK-5.10] Fix CVE-2025-38714 - !18862 [OLK-5.10] Fix CVE-2025-38697 - !20058 CVE-2025-38111 - !20131 wifi: cfg80211: fix use-after-free in cmp_bss() - !20306 mm/kmemleak: move up cond_resched() call in page scanning loop - !20309 hwmon: constify pointers to hwmon_channel_info - hwmon: fix kabi of struct hwmon_channel_info - !20338 mlxsw: spectrum_router: Fix neighbour use-after-free - !20337 mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - hwmon: constify pointers to hwmon_channel_info - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - !20316 um: virtio_uml: Fix use-after-free after put_device in probe - !20114 KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc - um: virtio_uml: Fix use-after-free after put_device in probe - !20300 software node: Correct a OOB check in software_node_get_reference_args() - !20299 jfs: add sanity check for agwidth in dbMount - !20278 iavf: fix off-by-one issues in iavf_config_rss_reg() - !20277 e1000: fix OOB in e1000_tbi_should_accept() - !20285 hwmon: (ibmpex) fix use-after-free in high/low store - mm/kmemleak: move up cond_resched() call in page scanning loop - !19953 【OLK-5.10】 power_meter patchs from 6.6 - software node: Correct a OOB check in software_node_get_reference_args() - jfs: add sanity check for agwidth in dbMount - hwmon: (ibmpex) fix use-after-free in high/low store - !20269 drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !20271 KVM: x86: use array_index_nospec with indices that come from guest - !19788 ima: Handle error code returned by ima_filter_rule_match() - iavf: fix off-by-one issues in iavf_config_rss_reg() - e1000: fix OOB in e1000_tbi_should_accept() - !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver - !20203 drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - !20202 scsi: qla2xxx: Fix premature hw access after PCI error - !19728 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09 - KVM: x86: use array_index_nospec with indices that come from guest - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - RDMA/hns: Support config and query the CNP DSCP for HIP09 - !20221 Revert "RDMA/hns: Fix mismatch exception rollback" - !20195 ACPI: APEI: Handle repeated SEA error interrupts storm - !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes - Revert "RDMA/hns: Fix mismatch exception rollback" - RDMA/hns: Support drain SQ and RQ - RDMA/hns: Return actual error code instead of fixed EINVAL - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Fix RoCEv1 failure due to DSCP - !20161 cifs: fix session state check in reconnect to avoid use-after-free issue - !20050 smb: client: Fix use-after-free in cifs_fill_dirent - !19834 v2 md/raid0, raid10: Don't set discard sectors for request queue - !19816 scsi: sg: Do not sleep in atomic context - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - scsi: qla2xxx: Fix premature hw access after PCI error - ACPI: APEI: Handle repeated SEA error interrupts storm - !20150 tracing: Do not register unsupported perf events - !20163 tracing: Fix enabling of tracing on file release - !19938 net: hns3: add VLAN id validation before using - !19836 [OLK-5.10] Fixes for SEV-ES Guest Support - !20044 【openEuler-22.03-LTS-SP4】Memory copy error - !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2 - !20025 [OLK-5.10]Support SMT control on arm64. - !19922 NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - !19985 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - !19996 net: netpoll: fix incorrect refcount handling causing incorrect cleanup - !19908 drivers:misc:sdma-dae: add NULL judgement of global variables - !20026 fs/buffer: fix use-after-free when call bh_read() helper - !19962 i40e: add max boundary check for VF filters - !20103 kmemleak: Fix kmemleak false warnings - !20169 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - !20052 CVE-2024-21823 - !18962 erofs: Fix erofs_bmap error - !20016 kernfs: Fix UAF issue - !19694 ARM: fix hash_name() issue - !20048 VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - !20065 Fix CVE-2022-50737 - !20066 smb: client: fix race with concurrent opens in rename(2) - !20151 v2 Fix CVE-2025-40016 - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems - ACPI: IPMI: Add helper to wait for when SMI is selected - hwmon: (acpi_power_meter) Fix the fake power alarm reporting - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices(). - hwmon: (acpi_power_meter) Fix update the power trip points on failure - hwmon: (acpi_power_meter) Fix uninitialized variables - !20047 crypto: af_alg - Set merge to zero early in af_alg_sendmsg - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method - hwmon: (acpi_power_meter) replace open-coded kmemdup_nul - hwmon: (acpi_power_meter) Fix style issues - hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device() - hwmon: acpi_power_meter: Get rid of ACPICA message printing - ACPI: utils: Introduce acpi_evaluation_failure_warn() - ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE - hwmon: (acpi_power_meter) clean up freeing code - x86/sev: merge continuous pages into a large range when notifying range enc status changes - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - tracing: Fix enabling of tracing on file release - cifs: fix session state check in reconnect to avoid use-after-free issue - media: uvcvideo: Use heuristic to find stream entity - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Allow extra entities - tracing: Do not register unsupported perf events - wifi: cfg80211: fix use-after-free in cmp_bss() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - arm64: kdump: fix kmemleak unknown object warning when crash base is set - arm64: kdump: fix kmemleak unknown object warning - x86/sev: Use "SEV: " prefix for messages from sev.c - x86/sev: Propagate #GP if getting linear instruction address failed - smb: client: fix race with concurrent opens in rename(2) - fs/ntfs3: Add null pointer checks - fs/ntfs3: Validate buffer length while parsing index - fs/ntfs3: Validate index root when initialize NTFS security - net/mdiobus: Fix potential out-of-bounds read/write access - net: mdio: C22 is now optional, EOPNOTSUPP if not provided - dmaengine: idxd: Fix ->poll() return value - dmaengine: idxd: Fix allowing write() from different address spaces - dmaengine: idxd: Fix passing freed memory in idxd_cdev_open() - dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling - dmaengine: idxd: add per DSA wq workqueue for processing cr faults - dmaengine: idxd: add a write() method for applications to submit work - dmaengine: idxd: add a new security check to deal with a hardware erratum - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist - smb: client: Fix use-after-free in cifs_fill_dirent - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench' - x86: don't use REP_GOOD or ERMS for small memory clearing - x86: don't use REP_GOOD or ERMS for small memory copies - fs/buffer: fix use-after-free when call bh_read() helper - powerpc/kexec: Enable SMT before waking offline CPUs - cpu/SMT: Enable SMT only if a core is online - cpu/SMT: Create topology_smt_thread_allowed() - powerpc/topology: Check if a core is online - config: enable CONFIG_HOTPLUG_SMT for arm64 - arm64: Kconfig: Enable HOTPLUG_SMT - arm64: topology: Support SMT control on ACPI based system - arch_topology: Support SMT control for OF based system - cpu/SMT: Provide a default topology_is_primary_thread() - powerpc: Add HOTPLUG_SMT support - Revert "arm64: Kconfig: Enable HOTPLUG_SMT" - kernfs: Fix kabi broken in struct kernfs_root - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir(). - kernfs: fix potential NULL dereference in __kernfs_remove - kernfs: fix NULL dereferencing in kernfs_remove - kernfs: remove redundant kernfs_rwsem declaration. - kernfs: prevent early freeing of root node - kernfs: switch global kernfs_rwsem lock to per-fs lock - KVM: SVM: Make sure GHCB is mapped before updating - KVM: SVM: check CR4 changes against vcpu->arch - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests - x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]() - x86/sev: Fix error message in runtime #VC handler - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - i40e: add max boundary check for VF filters - net: hns3: add VLAN id validation before using - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled - ACPI: thermal: Move to dedicated function sysfs extra attr creation - ACPI: thermal: Use thermal_zone_device() - thermal: core: Encapsulate tz->device field - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - drivers:misc:sdma-dae: add NULL judgement of global variables - md/raid0, raid10: Don't set discard sectors for request queue - scsi: sg: Do not sleep in atomic context - ima: Handle error code returned by ima_filter_rule_match() - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - ARM: fix hash_name() fault - ARM: allow __do_kernel_fault() to report execution of memory faults - configs: enable CONFIG_MICROCODE_ZHAOXIN - x86/microcode: Add Zhaoxin cpu microcode update driver - drm/amd/pm: fix null pointer access - batman-adv: fix OOB read/write in network-coding decode - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - erofs: Fix erofs_bmap error - jfs: upper bound check of tree index in dbAllocAG - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - !20464 rcu: Protect ->defer_qs_iw_pending from data race - !20318 net: hns3: check pf tc cfg when setting vf tc - !20522 CVE-2022-50616 - !20423 use SYS_CNTVCTSS_EL0 for gettimeofday - regulator: core: Fix resolve supply lookup issue - regulator: core: Use different devices for resource allocation and DT lookup - !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO. - !19965 nvme-fc: use lock accessing port_state and rport state - !20226 leapraid: supports LeapRaid controller - !20436 fix CVE-2026-22998 - rcu: Protect ->defer_qs_iw_pending from data race - !20449 scsi/hiraid: Support New Raid feature - !20252 ntfs: set dummy blocksize to read boot_block when mounting - !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc - !20335 Fix CVE-2025-37947 - mm: Add PAGE_ALIGN_DOWN macro - soc cache: fix walk page parameter and drop incorrect check - soc cache: Fix incorrect error path of ioctl - soc cache: Fix incorrect size validation - soc cache: Enforce maintain type check - soc cache: Modify default config to compile HiSilicon SoC cache driver - !19858 [OLK-5.10] perf support for HiSilicon HIP12 - !20331 Fix CVE-2025-39835 - !20439 Fix CVE-2025-39945 - !20251 Fix CVE-2025-38480 - !20184 Fix CVE-2025-37770 - !20185 Fix CVE-2022-49829 - !20183 Fix CVE-2025-23138 - !20240 Fix CVE-2025-21981 - !20409 net: xfrm: Fix CVE-2025-40215 - !20408 net: xfrm: Fix CVE-2025-39797 - !20407 netfilter: allow exp not to be removed in nf_ct_find_expectation - !20406 bpf, sockmap: Avoid using sk_socket after free when sending - !20405 can: bcm: add locking for bcm_op runtime updates - !20404 RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent - scsi/hiraid: Support New Raid feature - !19950 【OLK-5.10】 Drivers GPU Patches from 6.6 - !20422 driver core: fix potential null-ptr-deref in device_add() - cnic: Fix use-after-free bugs in cnic_delete_task - !20421 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - !20420 usb: early: xhci-dbc: Fix a potential out-of-bound memory access - !20418 drivers: base: Free devm resources when unregistering a device - !20417 driver core: fix resource leak in device_add() - !20416 Fix CVE-2022-49309 - !20415 kernel/resource: fix kfree() of bootmem memory again - !20414 drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - !20413 of: check previous kernel's ima-kexec-buffer against memory bounds - !20412 HID: core: Harden s32ton() against conversion to 0 bits - !20411 iommu/amd: Avoid stack buffer overflow from kernel cmdline - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvmet-tcp: remove boilerplate code - !20390 drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - vdso: do cntvct workaround in the VDSO - arm64: vdso: remove two .altinstructions related symbols - arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday - arm64: alternative: patch alternatives in the vDSO - arm64: module: move find_section to header - driver core: fix potential null-ptr-deref in device_add() - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - usb: early: xhci-dbc: Fix a potential out-of-bound memory access - drivers: base: Free devm resources when unregistering a device - driver core: fix resource leak in device_add() - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() - !20383 usb: cdns3: fix random warning message when driver load - kernel/resource: fix kfree() of bootmem memory again - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - of: check previous kernel's ima-kexec-buffer against memory bounds - HID: core: Harden s32ton() against conversion to 0 bits - !19959 【OLK-5.10】Support NMI Watchdog - iommu/amd: Avoid stack buffer overflow from kernel cmdline - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfrm: Duplicate SPI Handling - netfilter: allow exp not to be removed in nf_ct_find_expectation - bpf, sockmap: Avoid using sk_socket after free when sending - can: bcm: add locking for bcm_op runtime updates - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation. - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh - watchdog/perf: Provide function for adjusting the event period - config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64 - irqchip/gic-v3: Fix one race condition due to NMI withdraw - watchdog: Fix call trace when failed to initialize sdei - watchdog: Support watchdog_sdei coexist with existing watchdogs - init: only move down lockup_detector_init() when sdei_watchdog is enabled - arm64: enable perf events based hard lockup detector - arm64: add hw_nmi_get_sample_period for preparation of lockup detector - usb: cdns3: fix random warning message when driver load - !20051 smb3: fix for slab out of bounds on mount to ksmbd - comedi: Fix use of uninitialized data in insn_rw_emulate_bits() - watch_queue: fix pipe accounting mismatch - drm/amd/pm/powerplay: Prevent division by zero - !20357 ext4: fix e4b bitmap inconsistency reports - ice: fix memory leak in aRFS after reset - drm/hisilicon/hibmc: hibmc-drm bugfix for DP - !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6 - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel - drm/hisilicon/hibmc: Add vga connector detect functions - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp - drm/hisilicon/hibmc: Add dp serdes cfg in dp process - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis - drm/hisilicon/hibmc: Restructuring the header dp_reg.h - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers - drm/ast: Implement polling for VGA and SIL164 connectors - drm/sysfs: Register "ddc" symlink later - drm/hisilicon/hibmc: add dp module in hibmc - drm/hisilicon/hibmc: refactored struct hibmc_drm_private - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers - drm/hisilicon/hibmc: add dp aux in hibmc drivers - gic: increase the arch_timer priority to avoid hardlockup - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803 - drm/scheduler: fix fence ref counting - !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology - ext4: fix e4b bitmap inconsistency reports - !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction - !20256 Fix CVE-2025-39828 - !20339 wifi: prevent A-MSDU attacks in mesh networks - wifi: prevent A-MSDU attacks in mesh networks - ksmbd: fix stream write failure - ksmbd: prevent out-of-bounds stream writes by validating *pos - xfs: do not propagate ENODATA disk errors into xattr code - net: hns3: check pf tc cfg when setting vf tc - net: hns3: support tc limit speed - net: hns3: the multi-tcs VF can be configured only when the interface is down - irqchip/gic-v3-its: Remove DevID Pool's restriction - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *' - perf: Update .gitignore file - perf stat: Enable iostat mode for x86 platforms - perf stat: Helper functions for PCIe root ports list in iostat mode - perf: Fix tt_core mismatch over PG CPU - perf iostat: Use system-wide mode if the target cpu_list is unspecified - perf arm_spe: Correct memory level for remote access - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU - Documentation: hisi-pmu: Fix of minor format error - drivers/perf: hisi: Add support for L3C PMU v3 - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - arm64: topology: Setup amu fie when cpu hotplugging - topology: Set capacity_freq_ref in all cases - arm64/amu: Use capacity_ref_freq() to set AMU ratio - cpufreq/cppc: Set the frequency used for computing the capacity - cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}() - energy_model: Use a fixed reference frequency - cpufreq/schedutil: Use a fixed reference frequency - cpufreq: Use the fixed and coherent frequency for scaling capacity - sched/topology: Add a new arch_scale_freq_ref() method - arch_topology: Introduce thermal pressure update function - riscv: export cpu/freq invariant to scheduler - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() - cpufreq: Allow drivers to advertise boost enabled - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' - openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix unused-function warning - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: ACPI: Mark boost policy as enabled when setting boost - cpufreq: ACPI: Only set boost MSRs on supported CPUs - cpufreq: ACPI: Defer setting boost MSRs - cpufreq: acpi: Remove acpi_cpufreq_cpu_ready() - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw() - Documentation: power: Add description about new callback for EM registration - arch_topology: Avoid use-after-free for scale_freq_data - cpufreq: Exit governor when failed to start old governor - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() - cpufreq: Initialize cpufreq-based frequency-invariance later - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost - cpufreq: Remove duplicate check in __cpufreq_offline() - cpufreq: Don't unregister cpufreq cooling on CPU hotplug - cpufreq: Remove the ->stop_cpu() driver callback - cpufreq: intel_pstate: Combine ->stop_cpu() and ->offline() - cpufreq: powernv: Migrate to ->exit() callback instead of ->stop_cpu() - docs/zh_CN: add cpu-freq cpu-drivers.rst translation - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() - cpufreq: CPPC: Do not return a value from populate_efficiency_class() - cpufreq: CPPC: Remove cpu_data_list - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate() - cpufreq: CPPC: Register EM based on efficiency class information - PM: EM: Change the order of arguments in the .active_power() callback - cpufreq: Add callback to register with energy model - PM: EM: Add .get_cost() callback - cpufreq: CPPC: Add per_cpu efficiency_class - cpufreq: remove useless INIT_LIST_HEAD() - ACPI: CPPC: Disable FIE if registers in PCC regions - ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate() - cpufreq: cppc: Fix invalid return value in .get() callback - cppc_cpufreq: Fix possible null pointer dereference - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn() - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus - cpufreq: CPPC: Add support for frequency invariance - arch_topology: Export arch_freq_scale and helpers - cpufreq: CPPC: Pass structure instance by reference - cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init - cpufreq: CPPC: Migrate to ->exit() callback instead of ->stop_cpu() - cppc_cpufreq: replace per-cpu data array with a list - cppc_cpufreq: expose information on frequency domains - cppc_cpufreq: clarify support for coordination types - arch_topology: Allow multiple entities to provide sched_freq_tick() callback - sched/topology,schedutil: Wrap sched domains rebuild - arch_topology: Rename freq_scale as arch_freq_scale - arm64: topology: Drop the useless update to per-cpu cycles - arm64: topology: Make AMUs work with modular cpufreq drivers - arm64: topology: Reorder init_amu_fie() a bit - arm64: topology: Avoid the have_policy check - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() - cpufreq: prevent NULL dereference in cpufreq_online() - cpufreq: CPPC: Fix wrong max_freq in policy initialization - cppc_cpufreq: simplify use of performance capabilities - cpufreq: Introduce a more generic way to set default per-policy boost flag - cpufreq: Fix re-boost issue after hotplugging a CPU - cpufreq: Support per-policy performance boost - ntfs: set dummy blocksize to read boot_block when mounting - leapraid: supports LeapRaid controller - perf mem: Count L2 HITM for c2c statistic - perf mem: Add statistics for peer snooping - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12 - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel - perf arm-spe: augment the data source type with neoverse_spe list - tools arm64: Import cputype.h - arm64: cputype: Add cputype definition for HIP12 - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface - drivers/perf: hisi: Add cacheable option for L3C PMU - perf: Remove unstable events for uncore L3C PMU - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu - perf iostat: hisi: Fix port range retrival - drivers/perf: hisi: Add support for L3C PMU v3 - drivers/perf: hisi: Refactor the event configuration of L3C PMU - drivers/perf: hisi: Extend the field of tt_core - drivers/perf: hisi: Extract the event filter check of L3C PMU - drivers/perf: hisi: Simplify the probe process of each L3C PMU version - drivers/perf: hisi: Export hisi_uncore_pmu_isr() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/perf: hisi: Add support for HiSilicon MN PMU driver - drivers/perf: hisi: Add support for HiSilicon NoC PMU - drivers/perf: hisi: Support PMUs with no interrupt - drivers/perf: hisi: Relax the event number check of v2 PMUs - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver - drivers/perf: hisi: Simplify the probe process for each DDRC version - drivers/perf: hisi: Delete redundant blank line of DDRC PMU - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier - drivers/perf: convert sysfs snprintf family to sysfs_emit - perf: hisi: Constify static struct attribute_group - perf/hisi: Constify static attribute_group structs - drivers/perf: hisi: Add a common function to retrieve topology from firmware - drivers/perf: hisi: Extract topology information to a separate structure - drivers/perf: hisi: Refactor the detection of associated CPUs - drivers/perf: hisi: Migrate to one online CPU if no associated one online - drivers/perf: hisi: Don't update the associated_cpus on CPU offline - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs - perf stat: Enable iostat mode for HiSilicon PCIe PMU - perf stat: Add struct perf_stat_aggr to perf_stat_evsel - perf stat: Display iostat headers correctly - perf stat: Don't display metric header for non-leader uncore events - perf stat: Basic support for iostat in perf - perf arm-spe: Refactor arm-spe to support operation packet type - perf arm-spe: Use SPE data source for neoverse cores - perf arm-spe: Don't set data source if it's not a memory operation - perf tools: Sync addition of PERF_MEM_SNOOPX_PEER - tools: arm64: Import sysreg.h - smb3: fix for slab out of bounds on mount to ksmbd - watchdog/perf: adapt the watchdog_perf interface for async model - watchdog/perf: add a weak function for an arch to detect if perf can use NMIs - irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed - irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked - irqchip/gic-v3: Implement FEAT_GICv3_NMI support - arm64/nmi: Add Kconfig for NMI - arm64/nmi: Add handling of superpriority interrupts as NMIs - arm64/irq: Document handling of FEAT_NMI in irqflags.h - arm64/entry: Don't call preempt_schedule_irq() with NMIs masked - arm64/nmi: Manage masking for superpriority interrupts along with DAIF - nvme-fc: use lock accessing port_state and rport state - KVM: arm64: Hide FEAT_NMI from guests - arm64/cpufeature: Detect PE support for FEAT_NMI - arm64/hyp-stub: Enable access to ALLINT - arm64/asm: Introduce assembly macros for managing ALLINT - arm64/sysreg: Add definitions for immediate versions of MSR ALLINT - arm64/booting: Document boot requirements for FEAT_NMI - irqchip/gic-v3: Fix priority mask handling - irqchip/gic-v3: Refactor ISB + EOIR at ack time - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 - soc cache: Add framework driver for HiSilicon SoC cache - !20333 phytium-tpcm-sig-8-hadler-reg-s5000c - !20767 Revert hibmc patches to fix null-ptr-deref - Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6" - Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert" - !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Code refactoring for hibmc_drm_drv - !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 & SM4 algorithm - !20666 CVE-2023-53712 - !20673 Fix CVE-2025-39957 - !20686 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20687 i40e: Fix potential invalid access when MAC list is empty - !20692 ipv6: sr: Fix MAC comparison to be constant-time - !20699 sctp: linearize cloned gso packets in sctp_rcv - !20688 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - !20698 libceph: fix potential use-after-free in have_mon_and_osd_map() - !20697 tipc: Fix use-after-free in tipc_mon_reinit_self(). - sctp: linearize cloned gso packets in sctp_rcv - libceph: fix potential use-after-free in have_mon_and_osd_map() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - ipv6: sr: Fix MAC comparison to be constant-time - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - i40e: Fix potential invalid access when MAC list is empty - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20119 Add 950 KVM feature support - !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration - !20638 ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - !20637 net/sched: sch_qfq: do not free existing class in qfq_change_class() - !20636 v2 macvlan: fix possible UAF in macvlan_forward_source() - wifi: mac80211: increase scan_ies_len for S1G - !20566 crypto: lzo - Fix compression buffer overrun - KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer - KVM: arm64: ipiv: Fix compilation warning - KVM: arm64: check if IPIV is enabled in BIOS - kvm: hisi: print error for IPIV - KVM: arm64: using kvm_vgic_global_state for ipiv - kvm: hisi: Don't allow to change mpidr in IPIv - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv - KVM: arm64: fix live migration bug of IPIv - irqchip/gic: Add HiSilicon PV SGI support - KVM: arm64: Implement PV_SGI related calls - KVM: arm64: Document PV-sgi interface - KVM: arm64: Introduce ipiv enable ioctl - arm64/config: add config to control whether enable IPIV feature - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12 - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE - kvm: hisi_virt: Register ipiv exception interrupt - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule - kvm: arm64: avoid sending multi-SGIs in IPIV - kvm: hisi_virt: Allocate VM table and save vpeid in it - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2 - KVM: arm64: fix memory leak in TLBI - KVM: arm64: Add new HiSi CPU type to support DVMBM - kvm: hisi_virt: Update TLBI broadcast feature for hip12 - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE - ARM: 9317/1: kexec: Make smp stop calls asynchronous - !20654 scsi: qla4xxx: Prevent a potential error pointer dereference - !20653 bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - !20655 mm/slub: avoid accessing metadata when pointer is invalid in object_err() - !20656 firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors - x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - mm/slub: avoid accessing metadata when pointer is invalid in object_err() - scsi: qla4xxx: Prevent a potential error pointer dereference - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - net/sched: sch_qfq: do not free existing class in qfq_change_class() - macvlan: fix possible UAF in macvlan_forward_source() - !20597 team: fix check for port enabled in team_queue_override_port_prio_changed() - !20593 CVE-2025-39744 fixup - !20465 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - !20178 v3 Fix CVE-2024-53179 - team: fix check for port enabled in team_queue_override_port_prio_changed() - rcu: Fix racy re-initialization of irq_work causing hangs - rcu: Fix rcu_read_unlock() deadloop due to IRQ work - rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs - !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts - !20428 wifi: mt76: do not run mt76u_status_worker if the device is not running - !20427 RDMA/bnxt_re: Prevent handling any completions after qp destroy - !20466 pptp: ensure minimal skb length in pptp_xmit() - !20426 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - !20574 RDMA/cm: Fix leaking the multicast GID table reference - !20573 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - !20565 Fix CVE-2023-53521 - !20521 Fix CVE-2026-23038 - RDMA/cm: Fix leaking the multicast GID table reference - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - crypto: lzo - Fix compression buffer overrun - !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() - eth: bnxt: move and rename reset helpers - x86: Resolve FPU state corruption between atomic and non-atomic contexts - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - bnxt_en: Fix potential data corruption with HW GRO/LRO - pptp: ensure minimal skb length in pptp_xmit() - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - wifi: mt76: do not run mt76u_status_worker if the device is not running - RDMA/bnxt_re: Prevent handling any completions after qp destroy - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - phytium: add tpcm sgi handler for s5000c - smb: client: fix use-after-free of signing key - cifs: missed ref-counting smb session in find - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode - crypto: ccp: Add support to switch to CSV RING_BUFFER mode - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues - openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI - crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm - crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm - !20737 pNFS: Fix a deadlock when returning a delegation during open() - !20725 tracing: Add recursion protection in kernel stack trace recording - !20746 Fix CVE-2026-22990 - !20671 arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - !20669 irqchip/gic-v3-its: Avoid truncating memory addresses - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - pNFS: Fix a deadlock when returning a delegation during open() - tracing: Add recursion protection in kernel stack trace recording - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - irqchip/gic-v3-its: Avoid truncating memory addresses - !20899 Fix CVE-2026-23216 - !20885 nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file - !20839 bpf, cpumap: Make sure kthread is running before map update returns - bpf, cpumap: Make sure kthread is running before map update returns - !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1 - !20818 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20801 ACPI/IORT: Add PMCG platform information for 162001900 - !20814 migrate: correct lock ordering for hugetlb file folios - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20800 fix CVE-2026-23054 - migrate: correct lock ordering for hugetlb file folios - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - net: hv_netvsc: reject RSS hash key programming without RX indirection table - hv_netvsc: Allocate rx indirection table size dynamically - RDMA/hns: Remove the accidentally added hns_roce_trace.h file - irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI - !21136 sched/rt: Skip currently executing CPU in rto_next_cpu() - !21131 procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21093 kexec: derive purgatory entry from symbol - !21140 ksmbd: fix use-after-free in kerberos authentication - !21132 SUNRPC: Ensure the transport backchannel association - ksmbd: fix use-after-free in kerberos authentication - sched/rt: Skip currently executing CPU in rto_next_cpu() - SUNRPC: Ensure the transport backchannel association - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21112 CVE-2024-57979 - !21111 ALSA: aloop: Fix racy access at PCM trigger - pps: Fix kabi in pps_device - pps: Fix a use-after-free - ALSA: aloop: Fix racy access at PCM trigger - kexec: derive purgatory entry from symbol - ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21072 v2 arm64/mpam: enable MPAM feature and - !20883 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - !21021 CVE-2026-23209 - arm64/mpam: fix the bitmap written during mpam device reset - arm64/mpam: only allow L3 cache MPAM device created - arm64/mpam: fix inadvertently updating after repeatedly updating - arm64/mpam: set default feedback of last_cmd_status interface as null string - !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured - !19837 KVM: Drop tlbs_dirty - !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !21014 bpf selftest cross compile fixes - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - macvlan: fix error recovery in macvlan_common_newlink() - !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - selftests/bpf: Pass target triple to get_sys_includes macro - selftests/bpf: Enable cross-building - net: hns3: hns3 driver should be initialized when VF multi tcs is configured - net: hns3: modify code of judging if SMMU DMA is enabled - !20976 support apei_page_offline_policy - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() - nvmet-tcp: don't map pages which can't come from HIGHMEM - nvmet-tcp: fix regression in data_digest calculation - nvmet-tcp: fix memory leak when performing a controller reset - !20971 Fix CVE-2026-23074 - apei/ghes: Add sysctl interface to control soft-offline page isolation - Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages" - !20887 HiSock Enhancement - net/sched: Enforce that teql can only be used as root qdisc - drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !20891 dcache: Limit the minimal number of bucket to two - !20956 CVE-2025-39967 - fbcon: Fix OOB access in font allocation - fbcon: fix integer overflow in fbcon_do_set_font - overflow: Allow mixed type arguments - nvmet-tcp: add an helper to free the cmd buffers - dcache: Limit the minimal number of bucket to two - bpf: Deprecate hisock unused helpers and orig ingress logic - bpf: Add local connect support for hisock - bpf: Add ipv4-mapped ipv6 addr support for hisock - bpf: Add target comm parse to hisock_cmd - bpf: Add multi port parse to hisock_cmd - bpf: Only deploy hisock in server - bpf: Apply BPF_HISOCK_INGRESS to hisock ingress - bpf: Add bpf_handle_ingress/egress_ptype helper function - bpf: Add bpf_set_ingress/egress_dev helper function - bpf: Add bpf_get_skb_ethhdr helper function - bpf: Add bpf_set_ingress_dst helper function - bpf: Add BPF_HISOCK_INGRESS attach type - net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - KVM: Drop tlbs_dirty - !21262 arm64/mpam: Extending MPAM features and bugfix - arm64/mpam: Allow MBMIN to be set to 0 - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit - arm64/mpam: Add quirk to shrink MATA PMG range - !21211 scsi: hisi_sas: Change the debugfs parameters dump count default value - scsi: hisi_sas: Change the debugfs parameters dump count default value - !21163 gic: Add hip09 support for HISILICON_ERRATUM_165010801 - gic: Add hip09 support for HISILICON_ERRATUM_165010801 - !19740 merge refs/pull/19740/head into OLK-5.10 - !19764 merge patch-1766387978 into OLK-5.10 - hisi: l3t: enable l3t with specific cpuid - !19705 [OLK-5.10]:update patches for sw64 architecture - !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct - !19372 padata: Fix pd UAF once and for all - !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation - !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS - net: atlantic: fix fragment overflow handling in RX path - !19736 locking/rwsem: Optimize down_read_trylock() under highly contended case - locking/rwsem: Optimize down_read_trylock() under highly contended case - !19724 mm/mem_reliable: use percise count during limit check - mm/mem_reliable: use percise count during limit check - !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - !19614 NFSD: Fix crash in nfsd4_read_release() - !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19673 firewire: net: fix use after free in fwnet_finish_incoming_packet() - sw64: set PTBR_SYS before accessing vmalloc area - sw64: set execute permission for virtual machine's hmcode text section - sw64: fix simd version of copy/clear_page() - sw64: fix random mmap base range - firewire: net: fix use after free in fwnet_finish_incoming_packet() - NFSD: Fix crash in nfsd4_read_release() - crypto: ccp: add ccp-mdev functionality to the ccp module. - padata: Fix pd UAF once and for all - KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access - KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer - KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests - KVM: x86: Pass emulation type to can_emulate_instruction() - KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support - KVM: SVM: Don't intercept #GP for SEV guests - swiotlb: do not zero buffer in set_memory_decrypted() - crypto: ccp - Add SEV_INIT rc error logging on init - dma-direct: always leak memory that can't be re-encrypted - dma-direct: factor out dma_set_{de,en}crypted helpers - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits - KVM: SEV-ES: fix another issue with string I/O VMGEXITs - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed - KVM: SEV-ES: keep INS functions together - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in - KVM: x86: split the two parts of emulator_pio_in - KVM: SEV-ES: clean up kvm_sev_es_ins/outs - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out - KVM: SEV-ES: rename guest_ins_data to sev_pio_data - KVM: SEV-ES: fix length of string I/O - x86/sev-es: Do not unroll string I/O for SEV-ES guests - x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs - !19833 merge patch-1766715015 into OLK-5.10 - !19911 merge patch-1767492639 into OLK-5.10 - !19635 merge refs/pull/19635/head into OLK-5.10 - !19903 merge patch-1767161454 into OLK-5.10 - !19864 merge patch-1766990471 into OLK-5.10 - !19865 merge patch-1766990523 into OLK-5.10 - mm: mem_reliable: prevent excessive direct reclaim loops - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - !19899 merge patch-1767098709 into OLK-5.10 - erofs: validate the extent length for uncompressed pclusters - !19885 merge patch-1767076771 into OLK-5.10 - !19876 merge patch-1767011340 into OLK-5.10 - scsi: qla2xxx: Clear cmds after chip reset - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - !19856 merge patch-1766976937 into OLK-5.10 - !19857 merge patch-1766976979 into OLK-5.10 - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private - virtio-net: ensure the received length does not exceed allocated size - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - tracing: Fix memory leaks in create_field_var() - !19760 merge patch-1766370959 into OLK-5.10 - !19786 merge patch-1766474397 into OLK-5.10 - !19548 merge refs/pull/19548/head into OLK-5.10 - ext4: xattr: fix null pointer deref in ext4_raw_inode() - !19739 merge refs/pull/19739/head into OLK-5.10 - !19732 merge refs/pull/19732/head into OLK-5.10 - !19719 merge refs/pull/19719/head into OLK-5.10 - bnxt_en: Fix memory corruption when FW resources change during ifdown - bnxt_en: Fix possible crash after creating sw mqprio TCs - x86/fpu: Ensure XFD state on signal delivery - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - usb: storage: Fix memory leak in USB bulk transport - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() - cpufreq: ACPI: Fix max-frequency computation - tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes - tools headers: Update tools's copy of x86/asm headers - tools headers cpufeatures: Sync with the kernel sources - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - !19798 merge OLK-5.10 into OLK-5.10 - !19972 merge patch-1767691219 into OLK-5.10 - !19974 merge patch-1767691279 into OLK-5.10 - !19973 merge patch-1767691254 into OLK-5.10 - !19713 merge refs/pull/19713/head into OLK-5.10 - !19832 merge OLK-5.10-ringbuffer into OLK-5.10 - qed: Don't collect too many protection override GRC elements - i40e: fix validation of VF state in get resources - i40e: fix input validation logic for action_meta - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() - KVM: SVM: Skip SEV cache flush if no ASIDs have been used - KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities - x86/sev: Make enc_dec_hypercall() accept a size instead of npages - mm: x86: Fix kabi breakage of pv_ops - KVM: x86: Play nice with protected guests in complete_hypercall_exit() - KVM: x86: Assume a 64-bit hypercall for guests with protected state - KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids() - KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa - x86/kvm: Add kexec support for SEV Live Migration. - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. - EFI: Introduce the new AMD Memory Encryption GUID. - mm: x86: Invoke hypercall when page encryption status is changed - x86/kvm: Add AMD SEV specific Hypercall3 - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA - KVM: SVM: fix missing sev_decommission in sev_receive_start - KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall - KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command - KVM: SVM: Add support for KVM_SEV_RECEIVE_START command - KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command - KVM: SVM: Add KVM_SEV_SEND_FINISH command - KVM: SVM: Add KVM_SEND_UPDATE_DATA command - KVM: SVM: Add KVM_SEV SEND_START command - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19047 [OLK-5.10] Fix CVE-2025-39839 - !18614 [OLK-5.10] Fix CVE-2025-39737 - !18654 [OLK-5.10] Fix CVE-2025-38705 - !18782 【OLK-5.10】fix CVE-2025-38712 - !18612 [OLK-5.10] Fix CVE-2025-38713 - !18635 [OLK-5.10] Fix CVE-2025-38714 - !18862 [OLK-5.10] Fix CVE-2025-38697 - !20058 CVE-2025-38111 - !20131 wifi: cfg80211: fix use-after-free in cmp_bss() - !20306 mm/kmemleak: move up cond_resched() call in page scanning loop - !20309 hwmon: constify pointers to hwmon_channel_info - hwmon: fix kabi of struct hwmon_channel_info - !20338 mlxsw: spectrum_router: Fix neighbour use-after-free - !20337 mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - hwmon: constify pointers to hwmon_channel_info - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - !20316 um: virtio_uml: Fix use-after-free after put_device in probe - !20114 KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc - um: virtio_uml: Fix use-after-free after put_device in probe - !20300 software node: Correct a OOB check in software_node_get_reference_args() - !20299 jfs: add sanity check for agwidth in dbMount - !20278 iavf: fix off-by-one issues in iavf_config_rss_reg() - !20277 e1000: fix OOB in e1000_tbi_should_accept() - !20285 hwmon: (ibmpex) fix use-after-free in high/low store - mm/kmemleak: move up cond_resched() call in page scanning loop - !19953 【OLK-5.10】 power_meter patchs from 6.6 - software node: Correct a OOB check in software_node_get_reference_args() - jfs: add sanity check for agwidth in dbMount - hwmon: (ibmpex) fix use-after-free in high/low store - !20269 drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !20271 KVM: x86: use array_index_nospec with indices that come from guest - !19788 ima: Handle error code returned by ima_filter_rule_match() - iavf: fix off-by-one issues in iavf_config_rss_reg() - e1000: fix OOB in e1000_tbi_should_accept() - !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver - !20203 drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - !20202 scsi: qla2xxx: Fix premature hw access after PCI error - !19728 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09 - KVM: x86: use array_index_nospec with indices that come from guest - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - RDMA/hns: Support config and query the CNP DSCP for HIP09 - !20221 Revert "RDMA/hns: Fix mismatch exception rollback" - !20195 ACPI: APEI: Handle repeated SEA error interrupts storm - !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes - Revert "RDMA/hns: Fix mismatch exception rollback" - RDMA/hns: Support drain SQ and RQ - RDMA/hns: Return actual error code instead of fixed EINVAL - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Fix RoCEv1 failure due to DSCP - !20161 cifs: fix session state check in reconnect to avoid use-after-free issue - !20050 smb: client: Fix use-after-free in cifs_fill_dirent - !19834 v2 md/raid0, raid10: Don't set discard sectors for request queue - !19816 scsi: sg: Do not sleep in atomic context - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - scsi: qla2xxx: Fix premature hw access after PCI error - ACPI: APEI: Handle repeated SEA error interrupts storm - !20150 tracing: Do not register unsupported perf events - !20163 tracing: Fix enabling of tracing on file release - !19938 net: hns3: add VLAN id validation before using - !19836 [OLK-5.10] Fixes for SEV-ES Guest Support - !20044 【openEuler-22.03-LTS-SP4】Memory copy error - !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2 - !20025 [OLK-5.10]Support SMT control on arm64. - !19922 NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - !19985 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - !19996 net: netpoll: fix incorrect refcount handling causing incorrect cleanup - !19908 drivers:misc:sdma-dae: add NULL judgement of global variables - !20026 fs/buffer: fix use-after-free when call bh_read() helper - !19962 i40e: add max boundary check for VF filters - !20103 kmemleak: Fix kmemleak false warnings - !20169 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - !20052 CVE-2024-21823 - !18962 erofs: Fix erofs_bmap error - !20016 kernfs: Fix UAF issue - !19694 ARM: fix hash_name() issue - !20048 VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - !20065 Fix CVE-2022-50737 - !20066 smb: client: fix race with concurrent opens in rename(2) - !20151 v2 Fix CVE-2025-40016 - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems - ACPI: IPMI: Add helper to wait for when SMI is selected - hwmon: (acpi_power_meter) Fix the fake power alarm reporting - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices(). - hwmon: (acpi_power_meter) Fix update the power trip points on failure - hwmon: (acpi_power_meter) Fix uninitialized variables - !20047 crypto: af_alg - Set merge to zero early in af_alg_sendmsg - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method - hwmon: (acpi_power_meter) replace open-coded kmemdup_nul - hwmon: (acpi_power_meter) Fix style issues - hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device() - hwmon: acpi_power_meter: Get rid of ACPICA message printing - ACPI: utils: Introduce acpi_evaluation_failure_warn() - ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE - hwmon: (acpi_power_meter) clean up freeing code - x86/sev: merge continuous pages into a large range when notifying range enc status changes - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - tracing: Fix enabling of tracing on file release - cifs: fix session state check in reconnect to avoid use-after-free issue - media: uvcvideo: Use heuristic to find stream entity - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Allow extra entities - tracing: Do not register unsupported perf events - wifi: cfg80211: fix use-after-free in cmp_bss() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - arm64: kdump: fix kmemleak unknown object warning when crash base is set - arm64: kdump: fix kmemleak unknown object warning - x86/sev: Use "SEV: " prefix for messages from sev.c - x86/sev: Propagate #GP if getting linear instruction address failed - smb: client: fix race with concurrent opens in rename(2) - fs/ntfs3: Add null pointer checks - fs/ntfs3: Validate buffer length while parsing index - fs/ntfs3: Validate index root when initialize NTFS security - net/mdiobus: Fix potential out-of-bounds read/write access - net: mdio: C22 is now optional, EOPNOTSUPP if not provided - dmaengine: idxd: Fix ->poll() return value - dmaengine: idxd: Fix allowing write() from different address spaces - dmaengine: idxd: Fix passing freed memory in idxd_cdev_open() - dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling - dmaengine: idxd: add per DSA wq workqueue for processing cr faults - dmaengine: idxd: add a write() method for applications to submit work - dmaengine: idxd: add a new security check to deal with a hardware erratum - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist - smb: client: Fix use-after-free in cifs_fill_dirent - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench' - x86: don't use REP_GOOD or ERMS for small memory clearing - x86: don't use REP_GOOD or ERMS for small memory copies - fs/buffer: fix use-after-free when call bh_read() helper - powerpc/kexec: Enable SMT before waking offline CPUs - cpu/SMT: Enable SMT only if a core is online - cpu/SMT: Create topology_smt_thread_allowed() - powerpc/topology: Check if a core is online - config: enable CONFIG_HOTPLUG_SMT for arm64 - arm64: Kconfig: Enable HOTPLUG_SMT - arm64: topology: Support SMT control on ACPI based system - arch_topology: Support SMT control for OF based system - cpu/SMT: Provide a default topology_is_primary_thread() - powerpc: Add HOTPLUG_SMT support - Revert "arm64: Kconfig: Enable HOTPLUG_SMT" - kernfs: Fix kabi broken in struct kernfs_root - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir(). - kernfs: fix potential NULL dereference in __kernfs_remove - kernfs: fix NULL dereferencing in kernfs_remove - kernfs: remove redundant kernfs_rwsem declaration. - kernfs: prevent early freeing of root node - kernfs: switch global kernfs_rwsem lock to per-fs lock - KVM: SVM: Make sure GHCB is mapped before updating - KVM: SVM: check CR4 changes against vcpu->arch - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests - x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]() - x86/sev: Fix error message in runtime #VC handler - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - i40e: add max boundary check for VF filters - net: hns3: add VLAN id validation before using - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled - ACPI: thermal: Move to dedicated function sysfs extra attr creation - ACPI: thermal: Use thermal_zone_device() - thermal: core: Encapsulate tz->device field - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - drivers:misc:sdma-dae: add NULL judgement of global variables - md/raid0, raid10: Don't set discard sectors for request queue - scsi: sg: Do not sleep in atomic context - ima: Handle error code returned by ima_filter_rule_match() - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - ARM: fix hash_name() fault - ARM: allow __do_kernel_fault() to report execution of memory faults - configs: enable CONFIG_MICROCODE_ZHAOXIN - x86/microcode: Add Zhaoxin cpu microcode update driver - drm/amd/pm: fix null pointer access - batman-adv: fix OOB read/write in network-coding decode - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - erofs: Fix erofs_bmap error - jfs: upper bound check of tree index in dbAllocAG - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - !20464 rcu: Protect ->defer_qs_iw_pending from data race - !20318 net: hns3: check pf tc cfg when setting vf tc - !20522 CVE-2022-50616 - !20423 use SYS_CNTVCTSS_EL0 for gettimeofday - regulator: core: Fix resolve supply lookup issue - regulator: core: Use different devices for resource allocation and DT lookup - !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO. - !19965 nvme-fc: use lock accessing port_state and rport state - !20226 leapraid: supports LeapRaid controller - !20436 fix CVE-2026-22998 - rcu: Protect ->defer_qs_iw_pending from data race - !20449 scsi/hiraid: Support New Raid feature - !20252 ntfs: set dummy blocksize to read boot_block when mounting - !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc - !20335 Fix CVE-2025-37947 - mm: Add PAGE_ALIGN_DOWN macro - soc cache: fix walk page parameter and drop incorrect check - soc cache: Fix incorrect error path of ioctl - soc cache: Fix incorrect size validation - soc cache: Enforce maintain type check - soc cache: Modify default config to compile HiSilicon SoC cache driver - !19858 [OLK-5.10] perf support for HiSilicon HIP12 - !20331 Fix CVE-2025-39835 - !20439 Fix CVE-2025-39945 - !20251 Fix CVE-2025-38480 - !20184 Fix CVE-2025-37770 - !20185 Fix CVE-2022-49829 - !20183 Fix CVE-2025-23138 - !20240 Fix CVE-2025-21981 - !20409 net: xfrm: Fix CVE-2025-40215 - !20408 net: xfrm: Fix CVE-2025-39797 - !20407 netfilter: allow exp not to be removed in nf_ct_find_expectation - !20406 bpf, sockmap: Avoid using sk_socket after free when sending - !20405 can: bcm: add locking for bcm_op runtime updates - !20404 RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent - scsi/hiraid: Support New Raid feature - !19950 【OLK-5.10】 Drivers GPU Patches from 6.6 - !20422 driver core: fix potential null-ptr-deref in device_add() - cnic: Fix use-after-free bugs in cnic_delete_task - !20421 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - !20420 usb: early: xhci-dbc: Fix a potential out-of-bound memory access - !20418 drivers: base: Free devm resources when unregistering a device - !20417 driver core: fix resource leak in device_add() - !20416 Fix CVE-2022-49309 - !20415 kernel/resource: fix kfree() of bootmem memory again - !20414 drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - !20413 of: check previous kernel's ima-kexec-buffer against memory bounds - !20412 HID: core: Harden s32ton() against conversion to 0 bits - !20411 iommu/amd: Avoid stack buffer overflow from kernel cmdline - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvmet-tcp: remove boilerplate code - !20390 drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - vdso: do cntvct workaround in the VDSO - arm64: vdso: remove two .altinstructions related symbols - arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday - arm64: alternative: patch alternatives in the vDSO - arm64: module: move find_section to header - driver core: fix potential null-ptr-deref in device_add() - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - usb: early: xhci-dbc: Fix a potential out-of-bound memory access - drivers: base: Free devm resources when unregistering a device - driver core: fix resource leak in device_add() - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() - !20383 usb: cdns3: fix random warning message when driver load - kernel/resource: fix kfree() of bootmem memory again - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - of: check previous kernel's ima-kexec-buffer against memory bounds - HID: core: Harden s32ton() against conversion to 0 bits - !19959 【OLK-5.10】Support NMI Watchdog - iommu/amd: Avoid stack buffer overflow from kernel cmdline - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfrm: Duplicate SPI Handling - netfilter: allow exp not to be removed in nf_ct_find_expectation - bpf, sockmap: Avoid using sk_socket after free when sending - can: bcm: add locking for bcm_op runtime updates - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation. - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh - watchdog/perf: Provide function for adjusting the event period - config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64 - irqchip/gic-v3: Fix one race condition due to NMI withdraw - watchdog: Fix call trace when failed to initialize sdei - watchdog: Support watchdog_sdei coexist with existing watchdogs - init: only move down lockup_detector_init() when sdei_watchdog is enabled - arm64: enable perf events based hard lockup detector - arm64: add hw_nmi_get_sample_period for preparation of lockup detector - usb: cdns3: fix random warning message when driver load - !20051 smb3: fix for slab out of bounds on mount to ksmbd - comedi: Fix use of uninitialized data in insn_rw_emulate_bits() - watch_queue: fix pipe accounting mismatch - drm/amd/pm/powerplay: Prevent division by zero - !20357 ext4: fix e4b bitmap inconsistency reports - ice: fix memory leak in aRFS after reset - drm/hisilicon/hibmc: hibmc-drm bugfix for DP - !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6 - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel - drm/hisilicon/hibmc: Add vga connector detect functions - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp - drm/hisilicon/hibmc: Add dp serdes cfg in dp process - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis - drm/hisilicon/hibmc: Restructuring the header dp_reg.h - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers - drm/ast: Implement polling for VGA and SIL164 connectors - drm/sysfs: Register "ddc" symlink later - drm/hisilicon/hibmc: add dp module in hibmc - drm/hisilicon/hibmc: refactored struct hibmc_drm_private - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers - drm/hisilicon/hibmc: add dp aux in hibmc drivers - gic: increase the arch_timer priority to avoid hardlockup - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803 - drm/scheduler: fix fence ref counting - !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology - ext4: fix e4b bitmap inconsistency reports - !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction - !20256 Fix CVE-2025-39828 - !20339 wifi: prevent A-MSDU attacks in mesh networks - wifi: prevent A-MSDU attacks in mesh networks - ksmbd: fix stream write failure - ksmbd: prevent out-of-bounds stream writes by validating *pos - xfs: do not propagate ENODATA disk errors into xattr code - net: hns3: check pf tc cfg when setting vf tc - net: hns3: support tc limit speed - net: hns3: the multi-tcs VF can be configured only when the interface is down - irqchip/gic-v3-its: Remove DevID Pool's restriction - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *' - perf: Update .gitignore file - perf stat: Enable iostat mode for x86 platforms - perf stat: Helper functions for PCIe root ports list in iostat mode - perf: Fix tt_core mismatch over PG CPU - perf iostat: Use system-wide mode if the target cpu_list is unspecified - perf arm_spe: Correct memory level for remote access - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU - Documentation: hisi-pmu: Fix of minor format error - drivers/perf: hisi: Add support for L3C PMU v3 - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - arm64: topology: Setup amu fie when cpu hotplugging - topology: Set capacity_freq_ref in all cases - arm64/amu: Use capacity_ref_freq() to set AMU ratio - cpufreq/cppc: Set the frequency used for computing the capacity - cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}() - energy_model: Use a fixed reference frequency - cpufreq/schedutil: Use a fixed reference frequency - cpufreq: Use the fixed and coherent frequency for scaling capacity - sched/topology: Add a new arch_scale_freq_ref() method - arch_topology: Introduce thermal pressure update function - riscv: export cpu/freq invariant to scheduler - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() - cpufreq: Allow drivers to advertise boost enabled - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' - openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix unused-function warning - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: ACPI: Mark boost policy as enabled when setting boost - cpufreq: ACPI: Only set boost MSRs on supported CPUs - cpufreq: ACPI: Defer setting boost MSRs - cpufreq: acpi: Remove acpi_cpufreq_cpu_ready() - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw() - Documentation: power: Add description about new callback for EM registration - arch_topology: Avoid use-after-free for scale_freq_data - cpufreq: Exit governor when failed to start old governor - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() - cpufreq: Initialize cpufreq-based frequency-invariance later - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost - cpufreq: Remove duplicate check in __cpufreq_offline() - cpufreq: Don't unregister cpufreq cooling on CPU hotplug - cpufreq: Remove the ->stop_cpu() driver callback - cpufreq: intel_pstate: Combine ->stop_cpu() and ->offline() - cpufreq: powernv: Migrate to ->exit() callback instead of ->stop_cpu() - docs/zh_CN: add cpu-freq cpu-drivers.rst translation - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() - cpufreq: CPPC: Do not return a value from populate_efficiency_class() - cpufreq: CPPC: Remove cpu_data_list - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate() - cpufreq: CPPC: Register EM based on efficiency class information - PM: EM: Change the order of arguments in the .active_power() callback - cpufreq: Add callback to register with energy model - PM: EM: Add .get_cost() callback - cpufreq: CPPC: Add per_cpu efficiency_class - cpufreq: remove useless INIT_LIST_HEAD() - ACPI: CPPC: Disable FIE if registers in PCC regions - ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate() - cpufreq: cppc: Fix invalid return value in .get() callback - cppc_cpufreq: Fix possible null pointer dereference - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn() - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus - cpufreq: CPPC: Add support for frequency invariance - arch_topology: Export arch_freq_scale and helpers - cpufreq: CPPC: Pass structure instance by reference - cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init - cpufreq: CPPC: Migrate to ->exit() callback instead of ->stop_cpu() - cppc_cpufreq: replace per-cpu data array with a list - cppc_cpufreq: expose information on frequency domains - cppc_cpufreq: clarify support for coordination types - arch_topology: Allow multiple entities to provide sched_freq_tick() callback - sched/topology,schedutil: Wrap sched domains rebuild - arch_topology: Rename freq_scale as arch_freq_scale - arm64: topology: Drop the useless update to per-cpu cycles - arm64: topology: Make AMUs work with modular cpufreq drivers - arm64: topology: Reorder init_amu_fie() a bit - arm64: topology: Avoid the have_policy check - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() - cpufreq: prevent NULL dereference in cpufreq_online() - cpufreq: CPPC: Fix wrong max_freq in policy initialization - cppc_cpufreq: simplify use of performance capabilities - cpufreq: Introduce a more generic way to set default per-policy boost flag - cpufreq: Fix re-boost issue after hotplugging a CPU - cpufreq: Support per-policy performance boost - ntfs: set dummy blocksize to read boot_block when mounting - leapraid: supports LeapRaid controller - perf mem: Count L2 HITM for c2c statistic - perf mem: Add statistics for peer snooping - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12 - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel - perf arm-spe: augment the data source type with neoverse_spe list - tools arm64: Import cputype.h - arm64: cputype: Add cputype definition for HIP12 - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface - drivers/perf: hisi: Add cacheable option for L3C PMU - perf: Remove unstable events for uncore L3C PMU - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu - perf iostat: hisi: Fix port range retrival - drivers/perf: hisi: Add support for L3C PMU v3 - drivers/perf: hisi: Refactor the event configuration of L3C PMU - drivers/perf: hisi: Extend the field of tt_core - drivers/perf: hisi: Extract the event filter check of L3C PMU - drivers/perf: hisi: Simplify the probe process of each L3C PMU version - drivers/perf: hisi: Export hisi_uncore_pmu_isr() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/perf: hisi: Add support for HiSilicon MN PMU driver - drivers/perf: hisi: Add support for HiSilicon NoC PMU - drivers/perf: hisi: Support PMUs with no interrupt - drivers/perf: hisi: Relax the event number check of v2 PMUs - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver - drivers/perf: hisi: Simplify the probe process for each DDRC version - drivers/perf: hisi: Delete redundant blank line of DDRC PMU - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier - drivers/perf: convert sysfs snprintf family to sysfs_emit - perf: hisi: Constify static struct attribute_group - perf/hisi: Constify static attribute_group structs - drivers/perf: hisi: Add a common function to retrieve topology from firmware - drivers/perf: hisi: Extract topology information to a separate structure - drivers/perf: hisi: Refactor the detection of associated CPUs - drivers/perf: hisi: Migrate to one online CPU if no associated one online - drivers/perf: hisi: Don't update the associated_cpus on CPU offline - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs - perf stat: Enable iostat mode for HiSilicon PCIe PMU - perf stat: Add struct perf_stat_aggr to perf_stat_evsel - perf stat: Display iostat headers correctly - perf stat: Don't display metric header for non-leader uncore events - perf stat: Basic support for iostat in perf - perf arm-spe: Refactor arm-spe to support operation packet type - perf arm-spe: Use SPE data source for neoverse cores - perf arm-spe: Don't set data source if it's not a memory operation - perf tools: Sync addition of PERF_MEM_SNOOPX_PEER - tools: arm64: Import sysreg.h - smb3: fix for slab out of bounds on mount to ksmbd - watchdog/perf: adapt the watchdog_perf interface for async model - watchdog/perf: add a weak function for an arch to detect if perf can use NMIs - irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed - irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked - irqchip/gic-v3: Implement FEAT_GICv3_NMI support - arm64/nmi: Add Kconfig for NMI - arm64/nmi: Add handling of superpriority interrupts as NMIs - arm64/irq: Document handling of FEAT_NMI in irqflags.h - arm64/entry: Don't call preempt_schedule_irq() with NMIs masked - arm64/nmi: Manage masking for superpriority interrupts along with DAIF - nvme-fc: use lock accessing port_state and rport state - KVM: arm64: Hide FEAT_NMI from guests - arm64/cpufeature: Detect PE support for FEAT_NMI - arm64/hyp-stub: Enable access to ALLINT - arm64/asm: Introduce assembly macros for managing ALLINT - arm64/sysreg: Add definitions for immediate versions of MSR ALLINT - arm64/booting: Document boot requirements for FEAT_NMI - irqchip/gic-v3: Fix priority mask handling - irqchip/gic-v3: Refactor ISB + EOIR at ack time - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 - soc cache: Add framework driver for HiSilicon SoC cache - !20333 phytium-tpcm-sig-8-hadler-reg-s5000c - !20767 Revert hibmc patches to fix null-ptr-deref - Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6" - Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert" - !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Code refactoring for hibmc_drm_drv - !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 & SM4 algorithm - !20666 CVE-2023-53712 - !20673 Fix CVE-2025-39957 - !20686 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20687 i40e: Fix potential invalid access when MAC list is empty - !20692 ipv6: sr: Fix MAC comparison to be constant-time - !20699 sctp: linearize cloned gso packets in sctp_rcv - !20688 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - !20698 libceph: fix potential use-after-free in have_mon_and_osd_map() - !20697 tipc: Fix use-after-free in tipc_mon_reinit_self(). - sctp: linearize cloned gso packets in sctp_rcv - libceph: fix potential use-after-free in have_mon_and_osd_map() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - ipv6: sr: Fix MAC comparison to be constant-time - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - i40e: Fix potential invalid access when MAC list is empty - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20119 Add 950 KVM feature support - !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration - !20638 ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - !20637 net/sched: sch_qfq: do not free existing class in qfq_change_class() - !20636 v2 macvlan: fix possible UAF in macvlan_forward_source() - wifi: mac80211: increase scan_ies_len for S1G - !20566 crypto: lzo - Fix compression buffer overrun - KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer - KVM: arm64: ipiv: Fix compilation warning - KVM: arm64: check if IPIV is enabled in BIOS - kvm: hisi: print error for IPIV - KVM: arm64: using kvm_vgic_global_state for ipiv - kvm: hisi: Don't allow to change mpidr in IPIv - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv - KVM: arm64: fix live migration bug of IPIv - irqchip/gic: Add HiSilicon PV SGI support - KVM: arm64: Implement PV_SGI related calls - KVM: arm64: Document PV-sgi interface - KVM: arm64: Introduce ipiv enable ioctl - arm64/config: add config to control whether enable IPIV feature - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12 - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE - kvm: hisi_virt: Register ipiv exception interrupt - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule - kvm: arm64: avoid sending multi-SGIs in IPIV - kvm: hisi_virt: Allocate VM table and save vpeid in it - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2 - KVM: arm64: fix memory leak in TLBI - KVM: arm64: Add new HiSi CPU type to support DVMBM - kvm: hisi_virt: Update TLBI broadcast feature for hip12 - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE - ARM: 9317/1: kexec: Make smp stop calls asynchronous - !20654 scsi: qla4xxx: Prevent a potential error pointer dereference - !20653 bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - !20655 mm/slub: avoid accessing metadata when pointer is invalid in object_err() - !20656 firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors - x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - mm/slub: avoid accessing metadata when pointer is invalid in object_err() - scsi: qla4xxx: Prevent a potential error pointer dereference - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - net/sched: sch_qfq: do not free existing class in qfq_change_class() - macvlan: fix possible UAF in macvlan_forward_source() - !20597 team: fix check for port enabled in team_queue_override_port_prio_changed() - !20593 CVE-2025-39744 fixup - !20465 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - !20178 v3 Fix CVE-2024-53179 - team: fix check for port enabled in team_queue_override_port_prio_changed() - rcu: Fix racy re-initialization of irq_work causing hangs - rcu: Fix rcu_read_unlock() deadloop due to IRQ work - rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs - !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts - !20428 wifi: mt76: do not run mt76u_status_worker if the device is not running - !20427 RDMA/bnxt_re: Prevent handling any completions after qp destroy - !20466 pptp: ensure minimal skb length in pptp_xmit() - !20426 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - !20574 RDMA/cm: Fix leaking the multicast GID table reference - !20573 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - !20565 Fix CVE-2023-53521 - !20521 Fix CVE-2026-23038 - RDMA/cm: Fix leaking the multicast GID table reference - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - crypto: lzo - Fix compression buffer overrun - !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() - eth: bnxt: move and rename reset helpers - x86: Resolve FPU state corruption between atomic and non-atomic contexts - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - bnxt_en: Fix potential data corruption with HW GRO/LRO - pptp: ensure minimal skb length in pptp_xmit() - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - wifi: mt76: do not run mt76u_status_worker if the device is not running - RDMA/bnxt_re: Prevent handling any completions after qp destroy - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - phytium: add tpcm sgi handler for s5000c - smb: client: fix use-after-free of signing key - cifs: missed ref-counting smb session in find - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode - crypto: ccp: Add support to switch to CSV RING_BUFFER mode - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues - openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI - crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm - crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm - !20737 pNFS: Fix a deadlock when returning a delegation during open() - !20725 tracing: Add recursion protection in kernel stack trace recording - !20746 Fix CVE-2026-22990 - !20671 arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - !20669 irqchip/gic-v3-its: Avoid truncating memory addresses - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - pNFS: Fix a deadlock when returning a delegation during open() - tracing: Add recursion protection in kernel stack trace recording - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - irqchip/gic-v3-its: Avoid truncating memory addresses - !20899 Fix CVE-2026-23216 - !20885 nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file - !20839 bpf, cpumap: Make sure kthread is running before map update returns - bpf, cpumap: Make sure kthread is running before map update returns - !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1 - !20818 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20801 ACPI/IORT: Add PMCG platform information for 162001900 - !20814 migrate: correct lock ordering for hugetlb file folios - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20800 fix CVE-2026-23054 - migrate: correct lock ordering for hugetlb file folios - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - net: hv_netvsc: reject RSS hash key programming without RX indirection table - hv_netvsc: Allocate rx indirection table size dynamically - RDMA/hns: Remove the accidentally added hns_roce_trace.h file - irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI - !21136 sched/rt: Skip currently executing CPU in rto_next_cpu() - !21131 procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21093 kexec: derive purgatory entry from symbol - !21140 ksmbd: fix use-after-free in kerberos authentication - !21132 SUNRPC: Ensure the transport backchannel association - ksmbd: fix use-after-free in kerberos authentication - sched/rt: Skip currently executing CPU in rto_next_cpu() - SUNRPC: Ensure the transport backchannel association - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21112 CVE-2024-57979 - !21111 ALSA: aloop: Fix racy access at PCM trigger - pps: Fix kabi in pps_device - pps: Fix a use-after-free - ALSA: aloop: Fix racy access at PCM trigger - kexec: derive purgatory entry from symbol - ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21072 v2 arm64/mpam: enable MPAM feature and - !20883 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - !21021 CVE-2026-23209 - arm64/mpam: fix the bitmap written during mpam device reset - arm64/mpam: only allow L3 cache MPAM device created - arm64/mpam: fix inadvertently updating after repeatedly updating - arm64/mpam: set default feedback of last_cmd_status interface as null string - !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured - !19837 KVM: Drop tlbs_dirty - !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !21014 bpf selftest cross compile fixes - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - macvlan: fix error recovery in macvlan_common_newlink() - !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - selftests/bpf: Pass target triple to get_sys_includes macro - selftests/bpf: Enable cross-building - net: hns3: hns3 driver should be initialized when VF multi tcs is configured - net: hns3: modify code of judging if SMMU DMA is enabled - !20976 support apei_page_offline_policy - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() - nvmet-tcp: don't map pages which can't come from HIGHMEM - nvmet-tcp: fix regression in data_digest calculation - nvmet-tcp: fix memory leak when performing a controller reset - !20971 Fix CVE-2026-23074 - apei/ghes: Add sysctl interface to control soft-offline page isolation - Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages" - !20887 HiSock Enhancement - net/sched: Enforce that teql can only be used as root qdisc - drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !20891 dcache: Limit the minimal number of bucket to two - !20956 CVE-2025-39967 - fbcon: Fix OOB access in font allocation - fbcon: fix integer overflow in fbcon_do_set_font - overflow: Allow mixed type arguments - nvmet-tcp: add an helper to free the cmd buffers - dcache: Limit the minimal number of bucket to two - bpf: Deprecate hisock unused helpers and orig ingress logic - bpf: Add local connect support for hisock - bpf: Add ipv4-mapped ipv6 addr support for hisock - bpf: Add target comm parse to hisock_cmd - bpf: Add multi port parse to hisock_cmd - bpf: Only deploy hisock in server - bpf: Apply BPF_HISOCK_INGRESS to hisock ingress - bpf: Add bpf_handle_ingress/egress_ptype helper function - bpf: Add bpf_set_ingress/egress_dev helper function - bpf: Add bpf_get_skb_ethhdr helper function - bpf: Add bpf_set_ingress_dst helper function - bpf: Add BPF_HISOCK_INGRESS attach type - net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - KVM: Drop tlbs_dirty - !21262 arm64/mpam: Extending MPAM features and bugfix - arm64/mpam: Allow MBMIN to be set to 0 - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit - arm64/mpam: Add quirk to shrink MATA PMG range - !21211 scsi: hisi_sas: Change the debugfs parameters dump count default value - scsi: hisi_sas: Change the debugfs parameters dump count default value - !21163 gic: Add hip09 support for HISILICON_ERRATUM_165010801 - gic: Add hip09 support for HISILICON_ERRATUM_165010801 - !19740 merge refs/pull/19740/head into OLK-5.10 - !19764 merge patch-1766387978 into OLK-5.10 - hisi: l3t: enable l3t with specific cpuid - !19705 [OLK-5.10]:update patches for sw64 architecture - !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct - !19372 padata: Fix pd UAF once and for all - !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation - !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS - net: atlantic: fix fragment overflow handling in RX path - !19736 locking/rwsem: Optimize down_read_trylock() under highly contended case - locking/rwsem: Optimize down_read_trylock() under highly contended case - !19724 mm/mem_reliable: use percise count during limit check - mm/mem_reliable: use percise count during limit check - !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - !19614 NFSD: Fix crash in nfsd4_read_release() - !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19673 firewire: net: fix use after free in fwnet_finish_incoming_packet() - sw64: set PTBR_SYS before accessing vmalloc area - sw64: set execute permission for virtual machine's hmcode text section - sw64: fix simd version of copy/clear_page() - sw64: fix random mmap base range - firewire: net: fix use after free in fwnet_finish_incoming_packet() - NFSD: Fix crash in nfsd4_read_release() - crypto: ccp: add ccp-mdev functionality to the ccp module. - padata: Fix pd UAF once and for all - KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access - KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer - KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests - KVM: x86: Pass emulation type to can_emulate_instruction() - KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support - KVM: SVM: Don't intercept #GP for SEV guests - swiotlb: do not zero buffer in set_memory_decrypted() - crypto: ccp - Add SEV_INIT rc error logging on init - dma-direct: always leak memory that can't be re-encrypted - dma-direct: factor out dma_set_{de,en}crypted helpers - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits - KVM: SEV-ES: fix another issue with string I/O VMGEXITs - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed - KVM: SEV-ES: keep INS functions together - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in - KVM: x86: split the two parts of emulator_pio_in - KVM: SEV-ES: clean up kvm_sev_es_ins/outs - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out - KVM: SEV-ES: rename guest_ins_data to sev_pio_data - KVM: SEV-ES: fix length of string I/O - x86/sev-es: Do not unroll string I/O for SEV-ES guests - x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs - !19833 merge patch-1766715015 into OLK-5.10 - !19911 merge patch-1767492639 into OLK-5.10 - !19635 merge refs/pull/19635/head into OLK-5.10 - !19903 merge patch-1767161454 into OLK-5.10 - !19864 merge patch-1766990471 into OLK-5.10 - !19865 merge patch-1766990523 into OLK-5.10 - mm: mem_reliable: prevent excessive direct reclaim loops - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - !19899 merge patch-1767098709 into OLK-5.10 - erofs: validate the extent length for uncompressed pclusters - !19885 merge patch-1767076771 into OLK-5.10 - !19876 merge patch-1767011340 into OLK-5.10 - scsi: qla2xxx: Clear cmds after chip reset - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - !19856 merge patch-1766976937 into OLK-5.10 - !19857 merge patch-1766976979 into OLK-5.10 - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private - virtio-net: ensure the received length does not exceed allocated size - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - tracing: Fix memory leaks in create_field_var() - !19760 merge patch-1766370959 into OLK-5.10 - !19786 merge patch-1766474397 into OLK-5.10 - !19548 merge refs/pull/19548/head into OLK-5.10 - ext4: xattr: fix null pointer deref in ext4_raw_inode() - !19739 merge refs/pull/19739/head into OLK-5.10 - !19732 merge refs/pull/19732/head into OLK-5.10 - !19719 merge refs/pull/19719/head into OLK-5.10 - bnxt_en: Fix memory corruption when FW resources change during ifdown - bnxt_en: Fix possible crash after creating sw mqprio TCs - x86/fpu: Ensure XFD state on signal delivery - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - usb: storage: Fix memory leak in USB bulk transport - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() - cpufreq: ACPI: Fix max-frequency computation - tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes - tools headers: Update tools's copy of x86/asm headers - tools headers cpufeatures: Sync with the kernel sources - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - !19798 merge OLK-5.10 into OLK-5.10 - !19972 merge patch-1767691219 into OLK-5.10 - !19974 merge patch-1767691279 into OLK-5.10 - !19973 merge patch-1767691254 into OLK-5.10 - !19713 merge refs/pull/19713/head into OLK-5.10 - !19832 merge OLK-5.10-ringbuffer into OLK-5.10 - qed: Don't collect too many protection override GRC elements - i40e: fix validation of VF state in get resources - i40e: fix input validation logic for action_meta - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() - KVM: SVM: Skip SEV cache flush if no ASIDs have been used - KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities - x86/sev: Make enc_dec_hypercall() accept a size instead of npages - mm: x86: Fix kabi breakage of pv_ops - KVM: x86: Play nice with protected guests in complete_hypercall_exit() - KVM: x86: Assume a 64-bit hypercall for guests with protected state - KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids() - KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa - x86/kvm: Add kexec support for SEV Live Migration. - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. - EFI: Introduce the new AMD Memory Encryption GUID. - mm: x86: Invoke hypercall when page encryption status is changed - x86/kvm: Add AMD SEV specific Hypercall3 - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA - KVM: SVM: fix missing sev_decommission in sev_receive_start - KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall - KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command - KVM: SVM: Add support for KVM_SEV_RECEIVE_START command - KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command - KVM: SVM: Add KVM_SEV_SEND_FINISH command - KVM: SVM: Add KVM_SEND_UPDATE_DATA command - KVM: SVM: Add KVM_SEV SEND_START command - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19047 [OLK-5.10] Fix CVE-2025-39839 - !18614 [OLK-5.10] Fix CVE-2025-39737 - !18654 [OLK-5.10] Fix CVE-2025-38705 - !18782 【OLK-5.10】fix CVE-2025-38712 - !18612 [OLK-5.10] Fix CVE-2025-38713 - !18635 [OLK-5.10] Fix CVE-2025-38714 - !18862 [OLK-5.10] Fix CVE-2025-38697 - !20058 CVE-2025-38111 - !20131 wifi: cfg80211: fix use-after-free in cmp_bss() - !20306 mm/kmemleak: move up cond_resched() call in page scanning loop - !20309 hwmon: constify pointers to hwmon_channel_info - hwmon: fix kabi of struct hwmon_channel_info - !20338 mlxsw: spectrum_router: Fix neighbour use-after-free - !20337 mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - hwmon: constify pointers to hwmon_channel_info - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - !20316 um: virtio_uml: Fix use-after-free after put_device in probe - !20114 KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc - um: virtio_uml: Fix use-after-free after put_device in probe - !20300 software node: Correct a OOB check in software_node_get_reference_args() - !20299 jfs: add sanity check for agwidth in dbMount - !20278 iavf: fix off-by-one issues in iavf_config_rss_reg() - !20277 e1000: fix OOB in e1000_tbi_should_accept() - !20285 hwmon: (ibmpex) fix use-after-free in high/low store - mm/kmemleak: move up cond_resched() call in page scanning loop - !19953 【OLK-5.10】 power_meter patchs from 6.6 - software node: Correct a OOB check in software_node_get_reference_args() - jfs: add sanity check for agwidth in dbMount - hwmon: (ibmpex) fix use-after-free in high/low store - !20269 drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !20271 KVM: x86: use array_index_nospec with indices that come from guest - !19788 ima: Handle error code returned by ima_filter_rule_match() - iavf: fix off-by-one issues in iavf_config_rss_reg() - e1000: fix OOB in e1000_tbi_should_accept() - !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver - !20203 drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - !20202 scsi: qla2xxx: Fix premature hw access after PCI error - !19728 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09 - KVM: x86: use array_index_nospec with indices that come from guest - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - RDMA/hns: Support config and query the CNP DSCP for HIP09 - !20221 Revert "RDMA/hns: Fix mismatch exception rollback" - !20195 ACPI: APEI: Handle repeated SEA error interrupts storm - !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes - Revert "RDMA/hns: Fix mismatch exception rollback" - RDMA/hns: Support drain SQ and RQ - RDMA/hns: Return actual error code instead of fixed EINVAL - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Fix RoCEv1 failure due to DSCP - !20161 cifs: fix session state check in reconnect to avoid use-after-free issue - !20050 smb: client: Fix use-after-free in cifs_fill_dirent - !19834 v2 md/raid0, raid10: Don't set discard sectors for request queue - !19816 scsi: sg: Do not sleep in atomic context - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - scsi: qla2xxx: Fix premature hw access after PCI error - ACPI: APEI: Handle repeated SEA error interrupts storm - !20150 tracing: Do not register unsupported perf events - !20163 tracing: Fix enabling of tracing on file release - !19938 net: hns3: add VLAN id validation before using - !19836 [OLK-5.10] Fixes for SEV-ES Guest Support - !20044 【openEuler-22.03-LTS-SP4】Memory copy error - !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2 - !20025 [OLK-5.10]Support SMT control on arm64. - !19922 NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - !19985 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - !19996 net: netpoll: fix incorrect refcount handling causing incorrect cleanup - !19908 drivers:misc:sdma-dae: add NULL judgement of global variables - !20026 fs/buffer: fix use-after-free when call bh_read() helper - !19962 i40e: add max boundary check for VF filters - !20103 kmemleak: Fix kmemleak false warnings - !20169 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - !20052 CVE-2024-21823 - !18962 erofs: Fix erofs_bmap error - !20016 kernfs: Fix UAF issue - !19694 ARM: fix hash_name() issue - !20048 VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - !20065 Fix CVE-2022-50737 - !20066 smb: client: fix race with concurrent opens in rename(2) - !20151 v2 Fix CVE-2025-40016 - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems - ACPI: IPMI: Add helper to wait for when SMI is selected - hwmon: (acpi_power_meter) Fix the fake power alarm reporting - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices(). - hwmon: (acpi_power_meter) Fix update the power trip points on failure - hwmon: (acpi_power_meter) Fix uninitialized variables - !20047 crypto: af_alg - Set merge to zero early in af_alg_sendmsg - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method - hwmon: (acpi_power_meter) replace open-coded kmemdup_nul - hwmon: (acpi_power_meter) Fix style issues - hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device() - hwmon: acpi_power_meter: Get rid of ACPICA message printing - ACPI: utils: Introduce acpi_evaluation_failure_warn() - ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE - hwmon: (acpi_power_meter) clean up freeing code - x86/sev: merge continuous pages into a large range when notifying range enc status changes - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - tracing: Fix enabling of tracing on file release - cifs: fix session state check in reconnect to avoid use-after-free issue - media: uvcvideo: Use heuristic to find stream entity - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Allow extra entities - tracing: Do not register unsupported perf events - wifi: cfg80211: fix use-after-free in cmp_bss() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - arm64: kdump: fix kmemleak unknown object warning when crash base is set - arm64: kdump: fix kmemleak unknown object warning - x86/sev: Use "SEV: " prefix for messages from sev.c - x86/sev: Propagate #GP if getting linear instruction address failed - smb: client: fix race with concurrent opens in rename(2) - fs/ntfs3: Add null pointer checks - fs/ntfs3: Validate buffer length while parsing index - fs/ntfs3: Validate index root when initialize NTFS security - net/mdiobus: Fix potential out-of-bounds read/write access - net: mdio: C22 is now optional, EOPNOTSUPP if not provided - dmaengine: idxd: Fix ->poll() return value - dmaengine: idxd: Fix allowing write() from different address spaces - dmaengine: idxd: Fix passing freed memory in idxd_cdev_open() - dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling - dmaengine: idxd: add per DSA wq workqueue for processing cr faults - dmaengine: idxd: add a write() method for applications to submit work - dmaengine: idxd: add a new security check to deal with a hardware erratum - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist - smb: client: Fix use-after-free in cifs_fill_dirent - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench' - x86: don't use REP_GOOD or ERMS for small memory clearing - x86: don't use REP_GOOD or ERMS for small memory copies - fs/buffer: fix use-after-free when call bh_read() helper - powerpc/kexec: Enable SMT before waking offline CPUs - cpu/SMT: Enable SMT only if a core is online - cpu/SMT: Create topology_smt_thread_allowed() - powerpc/topology: Check if a core is online - config: enable CONFIG_HOTPLUG_SMT for arm64 - arm64: Kconfig: Enable HOTPLUG_SMT - arm64: topology: Support SMT control on ACPI based system - arch_topology: Support SMT control for OF based system - cpu/SMT: Provide a default topology_is_primary_thread() - powerpc: Add HOTPLUG_SMT support - Revert "arm64: Kconfig: Enable HOTPLUG_SMT" - kernfs: Fix kabi broken in struct kernfs_root - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir(). - kernfs: fix potential NULL dereference in __kernfs_remove - kernfs: fix NULL dereferencing in kernfs_remove - kernfs: remove redundant kernfs_rwsem declaration. - kernfs: prevent early freeing of root node - kernfs: switch global kernfs_rwsem lock to per-fs lock - KVM: SVM: Make sure GHCB is mapped before updating - KVM: SVM: check CR4 changes against vcpu->arch - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests - x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]() - x86/sev: Fix error message in runtime #VC handler - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - i40e: add max boundary check for VF filters - net: hns3: add VLAN id validation before using - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled - ACPI: thermal: Move to dedicated function sysfs extra attr creation - ACPI: thermal: Use thermal_zone_device() - thermal: core: Encapsulate tz->device field - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - drivers:misc:sdma-dae: add NULL judgement of global variables - md/raid0, raid10: Don't set discard sectors for request queue - scsi: sg: Do not sleep in atomic context - ima: Handle error code returned by ima_filter_rule_match() - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - ARM: fix hash_name() fault - ARM: allow __do_kernel_fault() to report execution of memory faults - configs: enable CONFIG_MICROCODE_ZHAOXIN - x86/microcode: Add Zhaoxin cpu microcode update driver - drm/amd/pm: fix null pointer access - batman-adv: fix OOB read/write in network-coding decode - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - erofs: Fix erofs_bmap error - jfs: upper bound check of tree index in dbAllocAG - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - !20464 rcu: Protect ->defer_qs_iw_pending from data race - !20318 net: hns3: check pf tc cfg when setting vf tc - !20522 CVE-2022-50616 - !20423 use SYS_CNTVCTSS_EL0 for gettimeofday - regulator: core: Fix resolve supply lookup issue - regulator: core: Use different devices for resource allocation and DT lookup - !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO. - !19965 nvme-fc: use lock accessing port_state and rport state - !20226 leapraid: supports LeapRaid controller - !20436 fix CVE-2026-22998 - rcu: Protect ->defer_qs_iw_pending from data race - !20449 scsi/hiraid: Support New Raid feature - !20252 ntfs: set dummy blocksize to read boot_block when mounting - !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc - !20335 Fix CVE-2025-37947 - mm: Add PAGE_ALIGN_DOWN macro - soc cache: fix walk page parameter and drop incorrect check - soc cache: Fix incorrect error path of ioctl - soc cache: Fix incorrect size validation - soc cache: Enforce maintain type check - soc cache: Modify default config to compile HiSilicon SoC cache driver - !19858 [OLK-5.10] perf support for HiSilicon HIP12 - !20331 Fix CVE-2025-39835 - !20439 Fix CVE-2025-39945 - !20251 Fix CVE-2025-38480 - !20184 Fix CVE-2025-37770 - !20185 Fix CVE-2022-49829 - !20183 Fix CVE-2025-23138 - !20240 Fix CVE-2025-21981 - !20409 net: xfrm: Fix CVE-2025-40215 - !20408 net: xfrm: Fix CVE-2025-39797 - !20407 netfilter: allow exp not to be removed in nf_ct_find_expectation - !20406 bpf, sockmap: Avoid using sk_socket after free when sending - !20405 can: bcm: add locking for bcm_op runtime updates - !20404 RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent - scsi/hiraid: Support New Raid feature - !19950 【OLK-5.10】 Drivers GPU Patches from 6.6 - !20422 driver core: fix potential null-ptr-deref in device_add() - cnic: Fix use-after-free bugs in cnic_delete_task - !20421 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - !20420 usb: early: xhci-dbc: Fix a potential out-of-bound memory access - !20418 drivers: base: Free devm resources when unregistering a device - !20417 driver core: fix resource leak in device_add() - !20416 Fix CVE-2022-49309 - !20415 kernel/resource: fix kfree() of bootmem memory again - !20414 drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - !20413 of: check previous kernel's ima-kexec-buffer against memory bounds - !20412 HID: core: Harden s32ton() against conversion to 0 bits - !20411 iommu/amd: Avoid stack buffer overflow from kernel cmdline - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvmet-tcp: remove boilerplate code - !20390 drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - vdso: do cntvct workaround in the VDSO - arm64: vdso: remove two .altinstructions related symbols - arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday - arm64: alternative: patch alternatives in the vDSO - arm64: module: move find_section to header - driver core: fix potential null-ptr-deref in device_add() - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - usb: early: xhci-dbc: Fix a potential out-of-bound memory access - drivers: base: Free devm resources when unregistering a device - driver core: fix resource leak in device_add() - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() - !20383 usb: cdns3: fix random warning message when driver load - kernel/resource: fix kfree() of bootmem memory again - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - of: check previous kernel's ima-kexec-buffer against memory bounds - HID: core: Harden s32ton() against conversion to 0 bits - !19959 【OLK-5.10】Support NMI Watchdog - iommu/amd: Avoid stack buffer overflow from kernel cmdline - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfrm: Duplicate SPI Handling - netfilter: allow exp not to be removed in nf_ct_find_expectation - bpf, sockmap: Avoid using sk_socket after free when sending - can: bcm: add locking for bcm_op runtime updates - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation. - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh - watchdog/perf: Provide function for adjusting the event period - config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64 - irqchip/gic-v3: Fix one race condition due to NMI withdraw - watchdog: Fix call trace when failed to initialize sdei - watchdog: Support watchdog_sdei coexist with existing watchdogs - init: only move down lockup_detector_init() when sdei_watchdog is enabled - arm64: enable perf events based hard lockup detector - arm64: add hw_nmi_get_sample_period for preparation of lockup detector - usb: cdns3: fix random warning message when driver load - !20051 smb3: fix for slab out of bounds on mount to ksmbd - comedi: Fix use of uninitialized data in insn_rw_emulate_bits() - watch_queue: fix pipe accounting mismatch - drm/amd/pm/powerplay: Prevent division by zero - !20357 ext4: fix e4b bitmap inconsistency reports - ice: fix memory leak in aRFS after reset - drm/hisilicon/hibmc: hibmc-drm bugfix for DP - !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6 - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel - drm/hisilicon/hibmc: Add vga connector detect functions - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp - drm/hisilicon/hibmc: Add dp serdes cfg in dp process - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis - drm/hisilicon/hibmc: Restructuring the header dp_reg.h - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers - drm/ast: Implement polling for VGA and SIL164 connectors - drm/sysfs: Register "ddc" symlink later - drm/hisilicon/hibmc: add dp module in hibmc - drm/hisilicon/hibmc: refactored struct hibmc_drm_private - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers - drm/hisilicon/hibmc: add dp aux in hibmc drivers - gic: increase the arch_timer priority to avoid hardlockup - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803 - drm/scheduler: fix fence ref counting - !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology - ext4: fix e4b bitmap inconsistency reports - !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction - !20256 Fix CVE-2025-39828 - !20339 wifi: prevent A-MSDU attacks in mesh networks - wifi: prevent A-MSDU attacks in mesh networks - ksmbd: fix stream write failure - ksmbd: prevent out-of-bounds stream writes by validating *pos - xfs: do not propagate ENODATA disk errors into xattr code - net: hns3: check pf tc cfg when setting vf tc - net: hns3: support tc limit speed - net: hns3: the multi-tcs VF can be configured only when the interface is down - irqchip/gic-v3-its: Remove DevID Pool's restriction - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *' - perf: Update .gitignore file - perf stat: Enable iostat mode for x86 platforms - perf stat: Helper functions for PCIe root ports list in iostat mode - perf: Fix tt_core mismatch over PG CPU - perf iostat: Use system-wide mode if the target cpu_list is unspecified - perf arm_spe: Correct memory level for remote access - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU - Documentation: hisi-pmu: Fix of minor format error - drivers/perf: hisi: Add support for L3C PMU v3 - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - arm64: topology: Setup amu fie when cpu hotplugging - topology: Set capacity_freq_ref in all cases - arm64/amu: Use capacity_ref_freq() to set AMU ratio - cpufreq/cppc: Set the frequency used for computing the capacity - cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}() - energy_model: Use a fixed reference frequency - cpufreq/schedutil: Use a fixed reference frequency - cpufreq: Use the fixed and coherent frequency for scaling capacity - sched/topology: Add a new arch_scale_freq_ref() method - arch_topology: Introduce thermal pressure update function - riscv: export cpu/freq invariant to scheduler - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() - cpufreq: Allow drivers to advertise boost enabled - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' - openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix unused-function warning - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: ACPI: Mark boost policy as enabled when setting boost - cpufreq: ACPI: Only set boost MSRs on supported CPUs - cpufreq: ACPI: Defer setting boost MSRs - cpufreq: acpi: Remove acpi_cpufreq_cpu_ready() - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw() - Documentation: power: Add description about new callback for EM registration - arch_topology: Avoid use-after-free for scale_freq_data - cpufreq: Exit governor when failed to start old governor - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() - cpufreq: Initialize cpufreq-based frequency-invariance later - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost - cpufreq: Remove duplicate check in __cpufreq_offline() - cpufreq: Don't unregister cpufreq cooling on CPU hotplug - cpufreq: Remove the ->stop_cpu() driver callback - cpufreq: intel_pstate: Combine ->stop_cpu() and ->offline() - cpufreq: powernv: Migrate to ->exit() callback instead of ->stop_cpu() - docs/zh_CN: add cpu-freq cpu-drivers.rst translation - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() - cpufreq: CPPC: Do not return a value from populate_efficiency_class() - cpufreq: CPPC: Remove cpu_data_list - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate() - cpufreq: CPPC: Register EM based on efficiency class information - PM: EM: Change the order of arguments in the .active_power() callback - cpufreq: Add callback to register with energy model - PM: EM: Add .get_cost() callback - cpufreq: CPPC: Add per_cpu efficiency_class - cpufreq: remove useless INIT_LIST_HEAD() - ACPI: CPPC: Disable FIE if registers in PCC regions - ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate() - cpufreq: cppc: Fix invalid return value in .get() callback - cppc_cpufreq: Fix possible null pointer dereference - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn() - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus - cpufreq: CPPC: Add support for frequency invariance - arch_topology: Export arch_freq_scale and helpers - cpufreq: CPPC: Pass structure instance by reference - cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init - cpufreq: CPPC: Migrate to ->exit() callback instead of ->stop_cpu() - cppc_cpufreq: replace per-cpu data array with a list - cppc_cpufreq: expose information on frequency domains - cppc_cpufreq: clarify support for coordination types - arch_topology: Allow multiple entities to provide sched_freq_tick() callback - sched/topology,schedutil: Wrap sched domains rebuild - arch_topology: Rename freq_scale as arch_freq_scale - arm64: topology: Drop the useless update to per-cpu cycles - arm64: topology: Make AMUs work with modular cpufreq drivers - arm64: topology: Reorder init_amu_fie() a bit - arm64: topology: Avoid the have_policy check - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() - cpufreq: prevent NULL dereference in cpufreq_online() - cpufreq: CPPC: Fix wrong max_freq in policy initialization - cppc_cpufreq: simplify use of performance capabilities - cpufreq: Introduce a more generic way to set default per-policy boost flag - cpufreq: Fix re-boost issue after hotplugging a CPU - cpufreq: Support per-policy performance boost - ntfs: set dummy blocksize to read boot_block when mounting - leapraid: supports LeapRaid controller - perf mem: Count L2 HITM for c2c statistic - perf mem: Add statistics for peer snooping - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12 - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel - perf arm-spe: augment the data source type with neoverse_spe list - tools arm64: Import cputype.h - arm64: cputype: Add cputype definition for HIP12 - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface - drivers/perf: hisi: Add cacheable option for L3C PMU - perf: Remove unstable events for uncore L3C PMU - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu - perf iostat: hisi: Fix port range retrival - drivers/perf: hisi: Add support for L3C PMU v3 - drivers/perf: hisi: Refactor the event configuration of L3C PMU - drivers/perf: hisi: Extend the field of tt_core - drivers/perf: hisi: Extract the event filter check of L3C PMU - drivers/perf: hisi: Simplify the probe process of each L3C PMU version - drivers/perf: hisi: Export hisi_uncore_pmu_isr() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/perf: hisi: Add support for HiSilicon MN PMU driver - drivers/perf: hisi: Add support for HiSilicon NoC PMU - drivers/perf: hisi: Support PMUs with no interrupt - drivers/perf: hisi: Relax the event number check of v2 PMUs - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver - drivers/perf: hisi: Simplify the probe process for each DDRC version - drivers/perf: hisi: Delete redundant blank line of DDRC PMU - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier - drivers/perf: convert sysfs snprintf family to sysfs_emit - perf: hisi: Constify static struct attribute_group - perf/hisi: Constify static attribute_group structs - drivers/perf: hisi: Add a common function to retrieve topology from firmware - drivers/perf: hisi: Extract topology information to a separate structure - drivers/perf: hisi: Refactor the detection of associated CPUs - drivers/perf: hisi: Migrate to one online CPU if no associated one online - drivers/perf: hisi: Don't update the associated_cpus on CPU offline - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs - perf stat: Enable iostat mode for HiSilicon PCIe PMU - perf stat: Add struct perf_stat_aggr to perf_stat_evsel - perf stat: Display iostat headers correctly - perf stat: Don't display metric header for non-leader uncore events - perf stat: Basic support for iostat in perf - perf arm-spe: Refactor arm-spe to support operation packet type - perf arm-spe: Use SPE data source for neoverse cores - perf arm-spe: Don't set data source if it's not a memory operation - perf tools: Sync addition of PERF_MEM_SNOOPX_PEER - tools: arm64: Import sysreg.h - smb3: fix for slab out of bounds on mount to ksmbd - watchdog/perf: adapt the watchdog_perf interface for async model - watchdog/perf: add a weak function for an arch to detect if perf can use NMIs - irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed - irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked - irqchip/gic-v3: Implement FEAT_GICv3_NMI support - arm64/nmi: Add Kconfig for NMI - arm64/nmi: Add handling of superpriority interrupts as NMIs - arm64/irq: Document handling of FEAT_NMI in irqflags.h - arm64/entry: Don't call preempt_schedule_irq() with NMIs masked - arm64/nmi: Manage masking for superpriority interrupts along with DAIF - nvme-fc: use lock accessing port_state and rport state - KVM: arm64: Hide FEAT_NMI from guests - arm64/cpufeature: Detect PE support for FEAT_NMI - arm64/hyp-stub: Enable access to ALLINT - arm64/asm: Introduce assembly macros for managing ALLINT - arm64/sysreg: Add definitions for immediate versions of MSR ALLINT - arm64/booting: Document boot requirements for FEAT_NMI - irqchip/gic-v3: Fix priority mask handling - irqchip/gic-v3: Refactor ISB + EOIR at ack time - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 - soc cache: Add framework driver for HiSilicon SoC cache - !20333 phytium-tpcm-sig-8-hadler-reg-s5000c - !20767 Revert hibmc patches to fix null-ptr-deref - Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6" - Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert" - !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Code refactoring for hibmc_drm_drv - !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 & SM4 algorithm - !20666 CVE-2023-53712 - !20673 Fix CVE-2025-39957 - !20686 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20687 i40e: Fix potential invalid access when MAC list is empty - !20692 ipv6: sr: Fix MAC comparison to be constant-time - !20699 sctp: linearize cloned gso packets in sctp_rcv - !20688 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - !20698 libceph: fix potential use-after-free in have_mon_and_osd_map() - !20697 tipc: Fix use-after-free in tipc_mon_reinit_self(). - sctp: linearize cloned gso packets in sctp_rcv - libceph: fix potential use-after-free in have_mon_and_osd_map() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - ipv6: sr: Fix MAC comparison to be constant-time - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - i40e: Fix potential invalid access when MAC list is empty - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20119 Add 950 KVM feature support - !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration - !20638 ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - !20637 net/sched: sch_qfq: do not free existing class in qfq_change_class() - !20636 v2 macvlan: fix possible UAF in macvlan_forward_source() - wifi: mac80211: increase scan_ies_len for S1G - !20566 crypto: lzo - Fix compression buffer overrun - KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer - KVM: arm64: ipiv: Fix compilation warning - KVM: arm64: check if IPIV is enabled in BIOS - kvm: hisi: print error for IPIV - KVM: arm64: using kvm_vgic_global_state for ipiv - kvm: hisi: Don't allow to change mpidr in IPIv - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv - KVM: arm64: fix live migration bug of IPIv - irqchip/gic: Add HiSilicon PV SGI support - KVM: arm64: Implement PV_SGI related calls - KVM: arm64: Document PV-sgi interface - KVM: arm64: Introduce ipiv enable ioctl - arm64/config: add config to control whether enable IPIV feature - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12 - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE - kvm: hisi_virt: Register ipiv exception interrupt - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule - kvm: arm64: avoid sending multi-SGIs in IPIV - kvm: hisi_virt: Allocate VM table and save vpeid in it - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2 - KVM: arm64: fix memory leak in TLBI - KVM: arm64: Add new HiSi CPU type to support DVMBM - kvm: hisi_virt: Update TLBI broadcast feature for hip12 - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE - ARM: 9317/1: kexec: Make smp stop calls asynchronous - !20654 scsi: qla4xxx: Prevent a potential error pointer dereference - !20653 bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - !20655 mm/slub: avoid accessing metadata when pointer is invalid in object_err() - !20656 firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors - x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - mm/slub: avoid accessing metadata when pointer is invalid in object_err() - scsi: qla4xxx: Prevent a potential error pointer dereference - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - net/sched: sch_qfq: do not free existing class in qfq_change_class() - macvlan: fix possible UAF in macvlan_forward_source() - !20597 team: fix check for port enabled in team_queue_override_port_prio_changed() - !20593 CVE-2025-39744 fixup - !20465 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - !20178 v3 Fix CVE-2024-53179 - team: fix check for port enabled in team_queue_override_port_prio_changed() - rcu: Fix racy re-initialization of irq_work causing hangs - rcu: Fix rcu_read_unlock() deadloop due to IRQ work - rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs - !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts - !20428 wifi: mt76: do not run mt76u_status_worker if the device is not running - !20427 RDMA/bnxt_re: Prevent handling any completions after qp destroy - !20466 pptp: ensure minimal skb length in pptp_xmit() - !20426 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - !20574 RDMA/cm: Fix leaking the multicast GID table reference - !20573 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - !20565 Fix CVE-2023-53521 - !20521 Fix CVE-2026-23038 - RDMA/cm: Fix leaking the multicast GID table reference - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - crypto: lzo - Fix compression buffer overrun - !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() - eth: bnxt: move and rename reset helpers - x86: Resolve FPU state corruption between atomic and non-atomic contexts - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - bnxt_en: Fix potential data corruption with HW GRO/LRO - pptp: ensure minimal skb length in pptp_xmit() - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - wifi: mt76: do not run mt76u_status_worker if the device is not running - RDMA/bnxt_re: Prevent handling any completions after qp destroy - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - phytium: add tpcm sgi handler for s5000c - smb: client: fix use-after-free of signing key - cifs: missed ref-counting smb session in find - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode - crypto: ccp: Add support to switch to CSV RING_BUFFER mode - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues - openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI - crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm - crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm - !20737 pNFS: Fix a deadlock when returning a delegation during open() - !20725 tracing: Add recursion protection in kernel stack trace recording - !20746 Fix CVE-2026-22990 - !20671 arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - !20669 irqchip/gic-v3-its: Avoid truncating memory addresses - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - pNFS: Fix a deadlock when returning a delegation during open() - tracing: Add recursion protection in kernel stack trace recording - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - irqchip/gic-v3-its: Avoid truncating memory addresses - !20899 Fix CVE-2026-23216 - !20885 nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file - !20839 bpf, cpumap: Make sure kthread is running before map update returns - bpf, cpumap: Make sure kthread is running before map update returns - !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1 - !20818 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20801 ACPI/IORT: Add PMCG platform information for 162001900 - !20814 migrate: correct lock ordering for hugetlb file folios - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20800 fix CVE-2026-23054 - migrate: correct lock ordering for hugetlb file folios - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - net: hv_netvsc: reject RSS hash key programming without RX indirection table - hv_netvsc: Allocate rx indirection table size dynamically - RDMA/hns: Remove the accidentally added hns_roce_trace.h file - irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI - !21136 sched/rt: Skip currently executing CPU in rto_next_cpu() - !21131 procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21093 kexec: derive purgatory entry from symbol - !21140 ksmbd: fix use-after-free in kerberos authentication - !21132 SUNRPC: Ensure the transport backchannel association - ksmbd: fix use-after-free in kerberos authentication - sched/rt: Skip currently executing CPU in rto_next_cpu() - SUNRPC: Ensure the transport backchannel association - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21112 CVE-2024-57979 - !21111 ALSA: aloop: Fix racy access at PCM trigger - pps: Fix kabi in pps_device - pps: Fix a use-after-free - ALSA: aloop: Fix racy access at PCM trigger - kexec: derive purgatory entry from symbol - ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21072 v2 arm64/mpam: enable MPAM feature and - !20883 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - !21021 CVE-2026-23209 - arm64/mpam: fix the bitmap written during mpam device reset - arm64/mpam: only allow L3 cache MPAM device created - arm64/mpam: fix inadvertently updating after repeatedly updating - arm64/mpam: set default feedback of last_cmd_status interface as null string - !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured - !19837 KVM: Drop tlbs_dirty - !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !21014 bpf selftest cross compile fixes - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - macvlan: fix error recovery in macvlan_common_newlink() - !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - selftests/bpf: Pass target triple to get_sys_includes macro - selftests/bpf: Enable cross-building - net: hns3: hns3 driver should be initialized when VF multi tcs is configured - net: hns3: modify code of judging if SMMU DMA is enabled - !20976 support apei_page_offline_policy - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() - nvmet-tcp: don't map pages which can't come from HIGHMEM - nvmet-tcp: fix regression in data_digest calculation - nvmet-tcp: fix memory leak when performing a controller reset - !20971 Fix CVE-2026-23074 - apei/ghes: Add sysctl interface to control soft-offline page isolation - Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages" - !20887 HiSock Enhancement - net/sched: Enforce that teql can only be used as root qdisc - drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !20891 dcache: Limit the minimal number of bucket to two - !20956 CVE-2025-39967 - fbcon: Fix OOB access in font allocation - fbcon: fix integer overflow in fbcon_do_set_font - overflow: Allow mixed type arguments - nvmet-tcp: add an helper to free the cmd buffers - dcache: Limit the minimal number of bucket to two - bpf: Deprecate hisock unused helpers and orig ingress logic - bpf: Add local connect support for hisock - bpf: Add ipv4-mapped ipv6 addr support for hisock - bpf: Add target comm parse to hisock_cmd - bpf: Add multi port parse to hisock_cmd - bpf: Only deploy hisock in server - bpf: Apply BPF_HISOCK_INGRESS to hisock ingress - bpf: Add bpf_handle_ingress/egress_ptype helper function - bpf: Add bpf_set_ingress/egress_dev helper function - bpf: Add bpf_get_skb_ethhdr helper function - bpf: Add bpf_set_ingress_dst helper function - bpf: Add BPF_HISOCK_INGRESS attach type - net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - KVM: Drop tlbs_dirty - !21262 arm64/mpam: Extending MPAM features and bugfix - arm64/mpam: Allow MBMIN to be set to 0 - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit - arm64/mpam: Add quirk to shrink MATA PMG range - !21211 scsi: hisi_sas: Change the debugfs parameters dump count default value - scsi: hisi_sas: Change the debugfs parameters dump count default value - !21163 gic: Add hip09 support for HISILICON_ERRATUM_165010801 - gic: Add hip09 support for HISILICON_ERRATUM_165010801 - !19740 merge refs/pull/19740/head into OLK-5.10 - !19764 merge patch-1766387978 into OLK-5.10 - hisi: l3t: enable l3t with specific cpuid - !19705 [OLK-5.10]:update patches for sw64 architecture - !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct - !19372 padata: Fix pd UAF once and for all - !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation - !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS - net: atlantic: fix fragment overflow handling in RX path - !19736 locking/rwsem: Optimize down_read_trylock() under highly contended case - locking/rwsem: Optimize down_read_trylock() under highly contended case - !19724 mm/mem_reliable: use percise count during limit check - mm/mem_reliable: use percise count during limit check - !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - !19614 NFSD: Fix crash in nfsd4_read_release() - !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19673 firewire: net: fix use after free in fwnet_finish_incoming_packet() - sw64: set PTBR_SYS before accessing vmalloc area - sw64: set execute permission for virtual machine's hmcode text section - sw64: fix simd version of copy/clear_page() - sw64: fix random mmap base range - firewire: net: fix use after free in fwnet_finish_incoming_packet() - NFSD: Fix crash in nfsd4_read_release() - crypto: ccp: add ccp-mdev functionality to the ccp module. - padata: Fix pd UAF once and for all - KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access - KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer - KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests - KVM: x86: Pass emulation type to can_emulate_instruction() - KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support - KVM: SVM: Don't intercept #GP for SEV guests - swiotlb: do not zero buffer in set_memory_decrypted() - crypto: ccp - Add SEV_INIT rc error logging on init - dma-direct: always leak memory that can't be re-encrypted - dma-direct: factor out dma_set_{de,en}crypted helpers - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits - KVM: SEV-ES: fix another issue with string I/O VMGEXITs - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed - KVM: SEV-ES: keep INS functions together - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in - KVM: x86: split the two parts of emulator_pio_in - KVM: SEV-ES: clean up kvm_sev_es_ins/outs - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out - KVM: SEV-ES: rename guest_ins_data to sev_pio_data - KVM: SEV-ES: fix length of string I/O - x86/sev-es: Do not unroll string I/O for SEV-ES guests - x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs - !19833 merge patch-1766715015 into OLK-5.10 - !19911 merge patch-1767492639 into OLK-5.10 - !19635 merge refs/pull/19635/head into OLK-5.10 - !19903 merge patch-1767161454 into OLK-5.10 - !19864 merge patch-1766990471 into OLK-5.10 - !19865 merge patch-1766990523 into OLK-5.10 - mm: mem_reliable: prevent excessive direct reclaim loops - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - !19899 merge patch-1767098709 into OLK-5.10 - erofs: validate the extent length for uncompressed pclusters - !19885 merge patch-1767076771 into OLK-5.10 - !19876 merge patch-1767011340 into OLK-5.10 - scsi: qla2xxx: Clear cmds after chip reset - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - !19856 merge patch-1766976937 into OLK-5.10 - !19857 merge patch-1766976979 into OLK-5.10 - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private - virtio-net: ensure the received length does not exceed allocated size - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - tracing: Fix memory leaks in create_field_var() - !19760 merge patch-1766370959 into OLK-5.10 - !19786 merge patch-1766474397 into OLK-5.10 - !19548 merge refs/pull/19548/head into OLK-5.10 - ext4: xattr: fix null pointer deref in ext4_raw_inode() - !19739 merge refs/pull/19739/head into OLK-5.10 - !19732 merge refs/pull/19732/head into OLK-5.10 - !19719 merge refs/pull/19719/head into OLK-5.10 - bnxt_en: Fix memory corruption when FW resources change during ifdown - bnxt_en: Fix possible crash after creating sw mqprio TCs - x86/fpu: Ensure XFD state on signal delivery - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - usb: storage: Fix memory leak in USB bulk transport - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() - cpufreq: ACPI: Fix max-frequency computation - tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes - tools headers: Update tools's copy of x86/asm headers - tools headers cpufeatures: Sync with the kernel sources - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - !19798 merge OLK-5.10 into OLK-5.10 - !19972 merge patch-1767691219 into OLK-5.10 - !19974 merge patch-1767691279 into OLK-5.10 - !19973 merge patch-1767691254 into OLK-5.10 - !19713 merge refs/pull/19713/head into OLK-5.10 - !19832 merge OLK-5.10-ringbuffer into OLK-5.10 - qed: Don't collect too many protection override GRC elements - i40e: fix validation of VF state in get resources - i40e: fix input validation logic for action_meta - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() - KVM: SVM: Skip SEV cache flush if no ASIDs have been used - KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities - x86/sev: Make enc_dec_hypercall() accept a size instead of npages - mm: x86: Fix kabi breakage of pv_ops - KVM: x86: Play nice with protected guests in complete_hypercall_exit() - KVM: x86: Assume a 64-bit hypercall for guests with protected state - KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids() - KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa - x86/kvm: Add kexec support for SEV Live Migration. - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. - EFI: Introduce the new AMD Memory Encryption GUID. - mm: x86: Invoke hypercall when page encryption status is changed - x86/kvm: Add AMD SEV specific Hypercall3 - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA - KVM: SVM: fix missing sev_decommission in sev_receive_start - KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall - KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command - KVM: SVM: Add support for KVM_SEV_RECEIVE_START command - KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command - KVM: SVM: Add KVM_SEV_SEND_FINISH command - KVM: SVM: Add KVM_SEND_UPDATE_DATA command - KVM: SVM: Add KVM_SEV SEND_START command - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - !19047 [OLK-5.10] Fix CVE-2025-39839 - !18614 [OLK-5.10] Fix CVE-2025-39737 - !18654 [OLK-5.10] Fix CVE-2025-38705 - !18782 【OLK-5.10】fix CVE-2025-38712 - !18612 [OLK-5.10] Fix CVE-2025-38713 - !18635 [OLK-5.10] Fix CVE-2025-38714 - !18862 [OLK-5.10] Fix CVE-2025-38697 - !20058 CVE-2025-38111 - !20131 wifi: cfg80211: fix use-after-free in cmp_bss() - !20306 mm/kmemleak: move up cond_resched() call in page scanning loop - !20309 hwmon: constify pointers to hwmon_channel_info - hwmon: fix kabi of struct hwmon_channel_info - !20338 mlxsw: spectrum_router: Fix neighbour use-after-free - !20337 mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - hwmon: constify pointers to hwmon_channel_info - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - !20316 um: virtio_uml: Fix use-after-free after put_device in probe - !20114 KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc - um: virtio_uml: Fix use-after-free after put_device in probe - !20300 software node: Correct a OOB check in software_node_get_reference_args() - !20299 jfs: add sanity check for agwidth in dbMount - !20278 iavf: fix off-by-one issues in iavf_config_rss_reg() - !20277 e1000: fix OOB in e1000_tbi_should_accept() - !20285 hwmon: (ibmpex) fix use-after-free in high/low store - mm/kmemleak: move up cond_resched() call in page scanning loop - !19953 【OLK-5.10】 power_meter patchs from 6.6 - software node: Correct a OOB check in software_node_get_reference_args() - jfs: add sanity check for agwidth in dbMount - hwmon: (ibmpex) fix use-after-free in high/low store - !20269 drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !20271 KVM: x86: use array_index_nospec with indices that come from guest - !19788 ima: Handle error code returned by ima_filter_rule_match() - iavf: fix off-by-one issues in iavf_config_rss_reg() - e1000: fix OOB in e1000_tbi_should_accept() - !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver - !20203 drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - !20202 scsi: qla2xxx: Fix premature hw access after PCI error - !19728 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09 - KVM: x86: use array_index_nospec with indices that come from guest - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP - !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue - RDMA/hns: Support config and query the CNP DSCP for HIP09 - !20221 Revert "RDMA/hns: Fix mismatch exception rollback" - !20195 ACPI: APEI: Handle repeated SEA error interrupts storm - !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes - Revert "RDMA/hns: Fix mismatch exception rollback" - RDMA/hns: Support drain SQ and RQ - RDMA/hns: Return actual error code instead of fixed EINVAL - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Fix RoCEv1 failure due to DSCP - !20161 cifs: fix session state check in reconnect to avoid use-after-free issue - !20050 smb: client: Fix use-after-free in cifs_fill_dirent - !19834 v2 md/raid0, raid10: Don't set discard sectors for request queue - !19816 scsi: sg: Do not sleep in atomic context - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero - scsi: qla2xxx: Fix premature hw access after PCI error - ACPI: APEI: Handle repeated SEA error interrupts storm - !20150 tracing: Do not register unsupported perf events - !20163 tracing: Fix enabling of tracing on file release - !19938 net: hns3: add VLAN id validation before using - !19836 [OLK-5.10] Fixes for SEV-ES Guest Support - !20044 【openEuler-22.03-LTS-SP4】Memory copy error - !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2 - !20025 [OLK-5.10]Support SMT control on arm64. - !19922 NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - !19985 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - !19996 net: netpoll: fix incorrect refcount handling causing incorrect cleanup - !19908 drivers:misc:sdma-dae: add NULL judgement of global variables - !20026 fs/buffer: fix use-after-free when call bh_read() helper - !19962 i40e: add max boundary check for VF filters - !20103 kmemleak: Fix kmemleak false warnings - !20169 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - !20052 CVE-2024-21823 - !18962 erofs: Fix erofs_bmap error - !20016 kernfs: Fix UAF issue - !19694 ARM: fix hash_name() issue - !20048 VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - !20065 Fix CVE-2022-50737 - !20066 smb: client: fix race with concurrent opens in rename(2) - !20151 v2 Fix CVE-2025-40016 - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems - ACPI: IPMI: Add helper to wait for when SMI is selected - hwmon: (acpi_power_meter) Fix the fake power alarm reporting - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices(). - hwmon: (acpi_power_meter) Fix update the power trip points on failure - hwmon: (acpi_power_meter) Fix uninitialized variables - !20047 crypto: af_alg - Set merge to zero early in af_alg_sendmsg - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method - hwmon: (acpi_power_meter) replace open-coded kmemdup_nul - hwmon: (acpi_power_meter) Fix style issues - hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device() - hwmon: acpi_power_meter: Get rid of ACPICA message printing - ACPI: utils: Introduce acpi_evaluation_failure_warn() - ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE - hwmon: (acpi_power_meter) clean up freeing code - x86/sev: merge continuous pages into a large range when notifying range enc status changes - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() - tracing: Fix enabling of tracing on file release - cifs: fix session state check in reconnect to avoid use-after-free issue - media: uvcvideo: Use heuristic to find stream entity - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Allow extra entities - tracing: Do not register unsupported perf events - wifi: cfg80211: fix use-after-free in cmp_bss() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - arm64: kdump: fix kmemleak unknown object warning when crash base is set - arm64: kdump: fix kmemleak unknown object warning - x86/sev: Use "SEV: " prefix for messages from sev.c - x86/sev: Propagate #GP if getting linear instruction address failed - smb: client: fix race with concurrent opens in rename(2) - fs/ntfs3: Add null pointer checks - fs/ntfs3: Validate buffer length while parsing index - fs/ntfs3: Validate index root when initialize NTFS security - net/mdiobus: Fix potential out-of-bounds read/write access - net: mdio: C22 is now optional, EOPNOTSUPP if not provided - dmaengine: idxd: Fix ->poll() return value - dmaengine: idxd: Fix allowing write() from different address spaces - dmaengine: idxd: Fix passing freed memory in idxd_cdev_open() - dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling - dmaengine: idxd: add per DSA wq workqueue for processing cr faults - dmaengine: idxd: add a write() method for applications to submit work - dmaengine: idxd: add a new security check to deal with a hardware erratum - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist - smb: client: Fix use-after-free in cifs_fill_dirent - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench' - x86: don't use REP_GOOD or ERMS for small memory clearing - x86: don't use REP_GOOD or ERMS for small memory copies - fs/buffer: fix use-after-free when call bh_read() helper - powerpc/kexec: Enable SMT before waking offline CPUs - cpu/SMT: Enable SMT only if a core is online - cpu/SMT: Create topology_smt_thread_allowed() - powerpc/topology: Check if a core is online - config: enable CONFIG_HOTPLUG_SMT for arm64 - arm64: Kconfig: Enable HOTPLUG_SMT - arm64: topology: Support SMT control on ACPI based system - arch_topology: Support SMT control for OF based system - cpu/SMT: Provide a default topology_is_primary_thread() - powerpc: Add HOTPLUG_SMT support - Revert "arm64: Kconfig: Enable HOTPLUG_SMT" - kernfs: Fix kabi broken in struct kernfs_root - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir(). - kernfs: fix potential NULL dereference in __kernfs_remove - kernfs: fix NULL dereferencing in kernfs_remove - kernfs: remove redundant kernfs_rwsem declaration. - kernfs: prevent early freeing of root node - kernfs: switch global kernfs_rwsem lock to per-fs lock - KVM: SVM: Make sure GHCB is mapped before updating - KVM: SVM: check CR4 changes against vcpu->arch - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests - x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]() - x86/sev: Fix error message in runtime #VC handler - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - i40e: add max boundary check for VF filters - net: hns3: add VLAN id validation before using - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled - ACPI: thermal: Move to dedicated function sysfs extra attr creation - ACPI: thermal: Use thermal_zone_device() - thermal: core: Encapsulate tz->device field - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - drivers:misc:sdma-dae: add NULL judgement of global variables - md/raid0, raid10: Don't set discard sectors for request queue - scsi: sg: Do not sleep in atomic context - ima: Handle error code returned by ima_filter_rule_match() - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - ARM: fix hash_name() fault - ARM: allow __do_kernel_fault() to report execution of memory faults - configs: enable CONFIG_MICROCODE_ZHAOXIN - x86/microcode: Add Zhaoxin cpu microcode update driver - drm/amd/pm: fix null pointer access - batman-adv: fix OOB read/write in network-coding decode - PCI: Fix PCIe unplug Enumeration Long Blocking Issue - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - erofs: Fix erofs_bmap error - jfs: upper bound check of tree index in dbAllocAG - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - !20464 rcu: Protect ->defer_qs_iw_pending from data race - !20318 net: hns3: check pf tc cfg when setting vf tc - !20522 CVE-2022-50616 - !20423 use SYS_CNTVCTSS_EL0 for gettimeofday - regulator: core: Fix resolve supply lookup issue - regulator: core: Use different devices for resource allocation and DT lookup - !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO. - !19965 nvme-fc: use lock accessing port_state and rport state - !20226 leapraid: supports LeapRaid controller - !20436 fix CVE-2026-22998 - rcu: Protect ->defer_qs_iw_pending from data race - !20449 scsi/hiraid: Support New Raid feature - !20252 ntfs: set dummy blocksize to read boot_block when mounting - !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc - !20335 Fix CVE-2025-37947 - mm: Add PAGE_ALIGN_DOWN macro - soc cache: fix walk page parameter and drop incorrect check - soc cache: Fix incorrect error path of ioctl - soc cache: Fix incorrect size validation - soc cache: Enforce maintain type check - soc cache: Modify default config to compile HiSilicon SoC cache driver - !19858 [OLK-5.10] perf support for HiSilicon HIP12 - !20331 Fix CVE-2025-39835 - !20439 Fix CVE-2025-39945 - !20251 Fix CVE-2025-38480 - !20184 Fix CVE-2025-37770 - !20185 Fix CVE-2022-49829 - !20183 Fix CVE-2025-23138 - !20240 Fix CVE-2025-21981 - !20409 net: xfrm: Fix CVE-2025-40215 - !20408 net: xfrm: Fix CVE-2025-39797 - !20407 netfilter: allow exp not to be removed in nf_ct_find_expectation - !20406 bpf, sockmap: Avoid using sk_socket after free when sending - !20405 can: bcm: add locking for bcm_op runtime updates - !20404 RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent - scsi/hiraid: Support New Raid feature - !19950 【OLK-5.10】 Drivers GPU Patches from 6.6 - !20422 driver core: fix potential null-ptr-deref in device_add() - cnic: Fix use-after-free bugs in cnic_delete_task - !20421 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - !20420 usb: early: xhci-dbc: Fix a potential out-of-bound memory access - !20418 drivers: base: Free devm resources when unregistering a device - !20417 driver core: fix resource leak in device_add() - !20416 Fix CVE-2022-49309 - !20415 kernel/resource: fix kfree() of bootmem memory again - !20414 drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - !20413 of: check previous kernel's ima-kexec-buffer against memory bounds - !20412 HID: core: Harden s32ton() against conversion to 0 bits - !20411 iommu/amd: Avoid stack buffer overflow from kernel cmdline - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvmet-tcp: remove boilerplate code - !20390 drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - vdso: do cntvct workaround in the VDSO - arm64: vdso: remove two .altinstructions related symbols - arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday - arm64: alternative: patch alternatives in the vDSO - arm64: module: move find_section to header - driver core: fix potential null-ptr-deref in device_add() - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - usb: early: xhci-dbc: Fix a potential out-of-bound memory access - drivers: base: Free devm resources when unregistering a device - driver core: fix resource leak in device_add() - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() - !20383 usb: cdns3: fix random warning message when driver load - kernel/resource: fix kfree() of bootmem memory again - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero - of: check previous kernel's ima-kexec-buffer against memory bounds - HID: core: Harden s32ton() against conversion to 0 bits - !19959 【OLK-5.10】Support NMI Watchdog - iommu/amd: Avoid stack buffer overflow from kernel cmdline - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfrm: Duplicate SPI Handling - netfilter: allow exp not to be removed in nf_ct_find_expectation - bpf, sockmap: Avoid using sk_socket after free when sending - can: bcm: add locking for bcm_op runtime updates - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug - x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation. - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh - watchdog/perf: Provide function for adjusting the event period - config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64 - irqchip/gic-v3: Fix one race condition due to NMI withdraw - watchdog: Fix call trace when failed to initialize sdei - watchdog: Support watchdog_sdei coexist with existing watchdogs - init: only move down lockup_detector_init() when sdei_watchdog is enabled - arm64: enable perf events based hard lockup detector - arm64: add hw_nmi_get_sample_period for preparation of lockup detector - usb: cdns3: fix random warning message when driver load - !20051 smb3: fix for slab out of bounds on mount to ksmbd - comedi: Fix use of uninitialized data in insn_rw_emulate_bits() - watch_queue: fix pipe accounting mismatch - drm/amd/pm/powerplay: Prevent division by zero - !20357 ext4: fix e4b bitmap inconsistency reports - ice: fix memory leak in aRFS after reset - drm/hisilicon/hibmc: hibmc-drm bugfix for DP - !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6 - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel - drm/hisilicon/hibmc: Add vga connector detect functions - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp - drm/hisilicon/hibmc: Add dp serdes cfg in dp process - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis - drm/hisilicon/hibmc: Restructuring the header dp_reg.h - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers - drm/ast: Implement polling for VGA and SIL164 connectors - drm/sysfs: Register "ddc" symlink later - drm/hisilicon/hibmc: add dp module in hibmc - drm/hisilicon/hibmc: refactored struct hibmc_drm_private - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers - drm/hisilicon/hibmc: add dp aux in hibmc drivers - gic: increase the arch_timer priority to avoid hardlockup - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803 - drm/scheduler: fix fence ref counting - !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology - ext4: fix e4b bitmap inconsistency reports - !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction - !20256 Fix CVE-2025-39828 - !20339 wifi: prevent A-MSDU attacks in mesh networks - wifi: prevent A-MSDU attacks in mesh networks - ksmbd: fix stream write failure - ksmbd: prevent out-of-bounds stream writes by validating *pos - xfs: do not propagate ENODATA disk errors into xattr code - net: hns3: check pf tc cfg when setting vf tc - net: hns3: support tc limit speed - net: hns3: the multi-tcs VF can be configured only when the interface is down - irqchip/gic-v3-its: Remove DevID Pool's restriction - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *' - perf: Update .gitignore file - perf stat: Enable iostat mode for x86 platforms - perf stat: Helper functions for PCIe root ports list in iostat mode - perf: Fix tt_core mismatch over PG CPU - perf iostat: Use system-wide mode if the target cpu_list is unspecified - perf arm_spe: Correct memory level for remote access - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU - Documentation: hisi-pmu: Fix of minor format error - drivers/perf: hisi: Add support for L3C PMU v3 - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - arm64: topology: Setup amu fie when cpu hotplugging - topology: Set capacity_freq_ref in all cases - arm64/amu: Use capacity_ref_freq() to set AMU ratio - cpufreq/cppc: Set the frequency used for computing the capacity - cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}() - energy_model: Use a fixed reference frequency - cpufreq/schedutil: Use a fixed reference frequency - cpufreq: Use the fixed and coherent frequency for scaling capacity - sched/topology: Add a new arch_scale_freq_ref() method - arch_topology: Introduce thermal pressure update function - riscv: export cpu/freq invariant to scheduler - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() - cpufreq: Allow drivers to advertise boost enabled - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' - openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE - cpufreq: CPPC: Fix unused-function warning - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: ACPI: Mark boost policy as enabled when setting boost - cpufreq: ACPI: Only set boost MSRs on supported CPUs - cpufreq: ACPI: Defer setting boost MSRs - cpufreq: acpi: Remove acpi_cpufreq_cpu_ready() - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw() - Documentation: power: Add description about new callback for EM registration - arch_topology: Avoid use-after-free for scale_freq_data - cpufreq: Exit governor when failed to start old governor - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() - cpufreq: Initialize cpufreq-based frequency-invariance later - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost - cpufreq: Remove duplicate check in __cpufreq_offline() - cpufreq: Don't unregister cpufreq cooling on CPU hotplug - cpufreq: Remove the ->stop_cpu() driver callback - cpufreq: intel_pstate: Combine ->stop_cpu() and ->offline() - cpufreq: powernv: Migrate to ->exit() callback instead of ->stop_cpu() - docs/zh_CN: add cpu-freq cpu-drivers.rst translation - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() - cpufreq: CPPC: Do not return a value from populate_efficiency_class() - cpufreq: CPPC: Remove cpu_data_list - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate() - cpufreq: CPPC: Register EM based on efficiency class information - PM: EM: Change the order of arguments in the .active_power() callback - cpufreq: Add callback to register with energy model - PM: EM: Add .get_cost() callback - cpufreq: CPPC: Add per_cpu efficiency_class - cpufreq: remove useless INIT_LIST_HEAD() - ACPI: CPPC: Disable FIE if registers in PCC regions - ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate() - cpufreq: cppc: Fix invalid return value in .get() callback - cppc_cpufreq: Fix possible null pointer dereference - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn() - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus - cpufreq: CPPC: Add support for frequency invariance - arch_topology: Export arch_freq_scale and helpers - cpufreq: CPPC: Pass structure instance by reference - cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init - cpufreq: CPPC: Migrate to ->exit() callback instead of ->stop_cpu() - cppc_cpufreq: replace per-cpu data array with a list - cppc_cpufreq: expose information on frequency domains - cppc_cpufreq: clarify support for coordination types - arch_topology: Allow multiple entities to provide sched_freq_tick() callback - sched/topology,schedutil: Wrap sched domains rebuild - arch_topology: Rename freq_scale as arch_freq_scale - arm64: topology: Drop the useless update to per-cpu cycles - arm64: topology: Make AMUs work with modular cpufreq drivers - arm64: topology: Reorder init_amu_fie() a bit - arm64: topology: Avoid the have_policy check - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() - cpufreq: prevent NULL dereference in cpufreq_online() - cpufreq: CPPC: Fix wrong max_freq in policy initialization - cppc_cpufreq: simplify use of performance capabilities - cpufreq: Introduce a more generic way to set default per-policy boost flag - cpufreq: Fix re-boost issue after hotplugging a CPU - cpufreq: Support per-policy performance boost - ntfs: set dummy blocksize to read boot_block when mounting - leapraid: supports LeapRaid controller - perf mem: Count L2 HITM for c2c statistic - perf mem: Add statistics for peer snooping - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12 - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel - perf arm-spe: augment the data source type with neoverse_spe list - tools arm64: Import cputype.h - arm64: cputype: Add cputype definition for HIP12 - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface - drivers/perf: hisi: Add cacheable option for L3C PMU - perf: Remove unstable events for uncore L3C PMU - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu - perf iostat: hisi: Fix port range retrival - drivers/perf: hisi: Add support for L3C PMU v3 - drivers/perf: hisi: Refactor the event configuration of L3C PMU - drivers/perf: hisi: Extend the field of tt_core - drivers/perf: hisi: Extract the event filter check of L3C PMU - drivers/perf: hisi: Simplify the probe process of each L3C PMU version - drivers/perf: hisi: Export hisi_uncore_pmu_isr() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/perf: hisi: Add support for HiSilicon MN PMU driver - drivers/perf: hisi: Add support for HiSilicon NoC PMU - drivers/perf: hisi: Support PMUs with no interrupt - drivers/perf: hisi: Relax the event number check of v2 PMUs - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver - drivers/perf: hisi: Simplify the probe process for each DDRC version - drivers/perf: hisi: Delete redundant blank line of DDRC PMU - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier - drivers/perf: convert sysfs snprintf family to sysfs_emit - perf: hisi: Constify static struct attribute_group - perf/hisi: Constify static attribute_group structs - drivers/perf: hisi: Add a common function to retrieve topology from firmware - drivers/perf: hisi: Extract topology information to a separate structure - drivers/perf: hisi: Refactor the detection of associated CPUs - drivers/perf: hisi: Migrate to one online CPU if no associated one online - drivers/perf: hisi: Don't update the associated_cpus on CPU offline - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs - perf stat: Enable iostat mode for HiSilicon PCIe PMU - perf stat: Add struct perf_stat_aggr to perf_stat_evsel - perf stat: Display iostat headers correctly - perf stat: Don't display metric header for non-leader uncore events - perf stat: Basic support for iostat in perf - perf arm-spe: Refactor arm-spe to support operation packet type - perf arm-spe: Use SPE data source for neoverse cores - perf arm-spe: Don't set data source if it's not a memory operation - perf tools: Sync addition of PERF_MEM_SNOOPX_PEER - tools: arm64: Import sysreg.h - smb3: fix for slab out of bounds on mount to ksmbd - watchdog/perf: adapt the watchdog_perf interface for async model - watchdog/perf: add a weak function for an arch to detect if perf can use NMIs - irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed - irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked - irqchip/gic-v3: Implement FEAT_GICv3_NMI support - arm64/nmi: Add Kconfig for NMI - arm64/nmi: Add handling of superpriority interrupts as NMIs - arm64/irq: Document handling of FEAT_NMI in irqflags.h - arm64/entry: Don't call preempt_schedule_irq() with NMIs masked - arm64/nmi: Manage masking for superpriority interrupts along with DAIF - nvme-fc: use lock accessing port_state and rport state - KVM: arm64: Hide FEAT_NMI from guests - arm64/cpufeature: Detect PE support for FEAT_NMI - arm64/hyp-stub: Enable access to ALLINT - arm64/asm: Introduce assembly macros for managing ALLINT - arm64/sysreg: Add definitions for immediate versions of MSR ALLINT - arm64/booting: Document boot requirements for FEAT_NMI - irqchip/gic-v3: Fix priority mask handling - irqchip/gic-v3: Refactor ISB + EOIR at ack time - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 - soc cache: Add framework driver for HiSilicon SoC cache - !20333 phytium-tpcm-sig-8-hadler-reg-s5000c - !20767 Revert hibmc patches to fix null-ptr-deref - Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6" - Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert" - !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT - !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Using the to_hibmc_drm_private to convert - drm/hisilicon: Code refactoring for hibmc_drm_drv - !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 & SM4 algorithm - !20666 CVE-2023-53712 - !20673 Fix CVE-2025-39957 - !20686 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20687 i40e: Fix potential invalid access when MAC list is empty - !20692 ipv6: sr: Fix MAC comparison to be constant-time - !20699 sctp: linearize cloned gso packets in sctp_rcv - !20688 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - !20698 libceph: fix potential use-after-free in have_mon_and_osd_map() - !20697 tipc: Fix use-after-free in tipc_mon_reinit_self(). - sctp: linearize cloned gso packets in sctp_rcv - libceph: fix potential use-after-free in have_mon_and_osd_map() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - ipv6: sr: Fix MAC comparison to be constant-time - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - i40e: Fix potential invalid access when MAC list is empty - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() - !20119 Add 950 KVM feature support - !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration - !20638 ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - !20637 net/sched: sch_qfq: do not free existing class in qfq_change_class() - !20636 v2 macvlan: fix possible UAF in macvlan_forward_source() - wifi: mac80211: increase scan_ies_len for S1G - !20566 crypto: lzo - Fix compression buffer overrun - KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer - KVM: arm64: ipiv: Fix compilation warning - KVM: arm64: check if IPIV is enabled in BIOS - kvm: hisi: print error for IPIV - KVM: arm64: using kvm_vgic_global_state for ipiv - kvm: hisi: Don't allow to change mpidr in IPIv - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv - KVM: arm64: fix live migration bug of IPIv - irqchip/gic: Add HiSilicon PV SGI support - KVM: arm64: Implement PV_SGI related calls - KVM: arm64: Document PV-sgi interface - KVM: arm64: Introduce ipiv enable ioctl - arm64/config: add config to control whether enable IPIV feature - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12 - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE - kvm: hisi_virt: Register ipiv exception interrupt - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule - kvm: arm64: avoid sending multi-SGIs in IPIV - kvm: hisi_virt: Allocate VM table and save vpeid in it - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2 - KVM: arm64: fix memory leak in TLBI - KVM: arm64: Add new HiSi CPU type to support DVMBM - kvm: hisi_virt: Update TLBI broadcast feature for hip12 - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE - ARM: 9317/1: kexec: Make smp stop calls asynchronous - !20654 scsi: qla4xxx: Prevent a potential error pointer dereference - !20653 bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - !20655 mm/slub: avoid accessing metadata when pointer is invalid in object_err() - !20656 firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors - x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle - mm/slub: avoid accessing metadata when pointer is invalid in object_err() - scsi: qla4xxx: Prevent a potential error pointer dereference - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - net/sched: sch_qfq: do not free existing class in qfq_change_class() - macvlan: fix possible UAF in macvlan_forward_source() - !20597 team: fix check for port enabled in team_queue_override_port_prio_changed() - !20593 CVE-2025-39744 fixup - !20465 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - !20178 v3 Fix CVE-2024-53179 - team: fix check for port enabled in team_queue_override_port_prio_changed() - rcu: Fix racy re-initialization of irq_work causing hangs - rcu: Fix rcu_read_unlock() deadloop due to IRQ work - rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs - !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts - !20428 wifi: mt76: do not run mt76u_status_worker if the device is not running - !20427 RDMA/bnxt_re: Prevent handling any completions after qp destroy - !20466 pptp: ensure minimal skb length in pptp_xmit() - !20426 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - !20574 RDMA/cm: Fix leaking the multicast GID table reference - !20573 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - !20565 Fix CVE-2023-53521 - !20521 Fix CVE-2026-23038 - RDMA/cm: Fix leaking the multicast GID table reference - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - crypto: lzo - Fix compression buffer overrun - !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() - eth: bnxt: move and rename reset helpers - x86: Resolve FPU state corruption between atomic and non-atomic contexts - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - bnxt_en: Fix potential data corruption with HW GRO/LRO - pptp: ensure minimal skb length in pptp_xmit() - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - wifi: mt76: do not run mt76u_status_worker if the device is not running - RDMA/bnxt_re: Prevent handling any completions after qp destroy - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - phytium: add tpcm sgi handler for s5000c - smb: client: fix use-after-free of signing key - cifs: missed ref-counting smb session in find - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode - crypto: ccp: Add support to switch to CSV RING_BUFFER mode - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues - openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI - crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm - crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm - !20737 pNFS: Fix a deadlock when returning a delegation during open() - !20725 tracing: Add recursion protection in kernel stack trace recording - !20746 Fix CVE-2026-22990 - !20671 arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - !20669 irqchip/gic-v3-its: Avoid truncating memory addresses - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - pNFS: Fix a deadlock when returning a delegation during open() - tracing: Add recursion protection in kernel stack trace recording - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - irqchip/gic-v3-its: Avoid truncating memory addresses - !20899 Fix CVE-2026-23216 - !20885 nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file - !20839 bpf, cpumap: Make sure kthread is running before map update returns - bpf, cpumap: Make sure kthread is running before map update returns - !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1 - !20818 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20801 ACPI/IORT: Add PMCG platform information for 162001900 - !20814 migrate: correct lock ordering for hugetlb file folios - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - !20800 fix CVE-2026-23054 - migrate: correct lock ordering for hugetlb file folios - ACPI/IORT: Add PMCG platform information for 162001900 - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata - net: hv_netvsc: reject RSS hash key programming without RX indirection table - hv_netvsc: Allocate rx indirection table size dynamically - RDMA/hns: Remove the accidentally added hns_roce_trace.h file - irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI - !21136 sched/rt: Skip currently executing CPU in rto_next_cpu() - !21131 procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21093 kexec: derive purgatory entry from symbol - !21140 ksmbd: fix use-after-free in kerberos authentication - !21132 SUNRPC: Ensure the transport backchannel association - ksmbd: fix use-after-free in kerberos authentication - sched/rt: Skip currently executing CPU in rto_next_cpu() - SUNRPC: Ensure the transport backchannel association - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - !21112 CVE-2024-57979 - !21111 ALSA: aloop: Fix racy access at PCM trigger - pps: Fix kabi in pps_device - pps: Fix a use-after-free - ALSA: aloop: Fix racy access at PCM trigger - kexec: derive purgatory entry from symbol - ipmi: Add HiSilicon IPMI Page Soft Offline driver - !21072 v2 arm64/mpam: enable MPAM feature and - !20883 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - !21021 CVE-2026-23209 - arm64/mpam: fix the bitmap written during mpam device reset - arm64/mpam: only allow L3 cache MPAM device created - arm64/mpam: fix inadvertently updating after repeatedly updating - arm64/mpam: set default feedback of last_cmd_status interface as null string - !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured - !19837 KVM: Drop tlbs_dirty - !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !21014 bpf selftest cross compile fixes - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - macvlan: fix error recovery in macvlan_common_newlink() - !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y - selftests/bpf: Pass target triple to get_sys_includes macro - selftests/bpf: Enable cross-building - net: hns3: hns3 driver should be initialized when VF multi tcs is configured - net: hns3: modify code of judging if SMMU DMA is enabled - !20976 support apei_page_offline_policy - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() - nvmet-tcp: don't map pages which can't come from HIGHMEM - nvmet-tcp: fix regression in data_digest calculation - nvmet-tcp: fix memory leak when performing a controller reset - !20971 Fix CVE-2026-23074 - apei/ghes: Add sysctl interface to control soft-offline page isolation - Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages" - !20887 HiSock Enhancement - net/sched: Enforce that teql can only be used as root qdisc - drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers - !20891 dcache: Limit the minimal number of bucket to two - !20956 CVE-2025-39967 - fbcon: Fix OOB access in font allocation - fbcon: fix integer overflow in fbcon_do_set_font - overflow: Allow mixed type arguments - nvmet-tcp: add an helper to free the cmd buffers - dcache: Limit the minimal number of bucket to two - bpf: Deprecate hisock unused helpers and orig ingress logic - bpf: Add local connect support for hisock - bpf: Add ipv4-mapped ipv6 addr support for hisock - bpf: Add target comm parse to hisock_cmd - bpf: Add multi port parse to hisock_cmd - bpf: Only deploy hisock in server - bpf: Apply BPF_HISOCK_INGRESS to hisock ingress - bpf: Add bpf_handle_ingress/egress_ptype helper function - bpf: Add bpf_set_ingress/egress_dev helper function - bpf: Add bpf_get_skb_ethhdr helper function - bpf: Add bpf_set_ingress_dst helper function - bpf: Add BPF_HISOCK_INGRESS attach type - net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - KVM: Drop tlbs_dirty - !21262 arm64/mpam: Extending MPAM features and bugfix - arm64/mpam: Allow MBMIN to be set to 0 - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit - arm64/mpam: Add quirk to shrink MATA PMG range - !21211 scsi: hisi_sas: Change the debugfs parameters dump count default value - scsi: hisi_sas: Change the debugfs parameters dump count default value - !21163 gic: Add hip09 support for HISILICON_ERRATUM_165010801 - gic: Add hip09 support for HISILICON_ERRATUM_165010801