- !30253 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - !29554 [CVEAgent@OLK-6.6] Fix CVE-2026-98286 - !30263 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - !30258 v10 net: dynthread: dynamic threaded NAPI - !30208 Fix CVE-2026-98044 - !30280 bpf: Make post-verification instruction rewrites killable - !30184 blk-mq: set RQF_USE_SCHED when the operation is known - !30267 sched/fair: Avoid overflow in place_entity() - !30236 configfs: unhash the dentry before dropping the item in rmdir - !30276 virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - !29584 [CVEAgent@OLK-6.6] Fix CVE-2026-98364 - !29906 [CVEAgent@OLK-6.6] Fix CVE-2026-98443 - !30046 net: cap skb->queue_mapping when the tx queue is picked - !30223 bpf: Reject pkt arguments in mutating subprogs - !29932 [CVEAgent@OLK-6.6] Fix CVE-2026-98598 - !30044 net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - bpf: Make post-verification instruction rewrites killable - virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - RDMA/umem: avoid ib_umem_find_best_pgsz ABI breakage - sched/fair: Avoid overflow in place_entity() - RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - net: dynthread: Add debug switch and instrumentation - net: dynthread: Scale the number of NAPI thread CPUs - net: dynthread: Switch NAPI to threads on spare CPUs - net: dynthread: Steer the RX queue IRQs away from the target tasks - net: dynthread: Monitor the load of the target tasks - net: dynthread: Add dynamic threaded NAPI scheduler framework - net/mlx5e: Do not block on RTNL while recovering an SQ - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover - net/mlx5e: Acquire RTNL lock before RQs/SQs activation/deactivation - net/mlx5e: link NAPI instances to queues and IRQs - net: Fix napi irq KABI breakage - net: Add NAPI IRQ support - net: Fix KABI breakage for queue napi association - net: Add queue and napi association - neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - configfs: unhash the dentry before dropping the item in rmdir - bpf: Reject pkt arguments in mutating subprogs - bpf: Fix kabi breakage in struct bpf_subprog_info - bpf: Reject legacy packet loads from callbacks - blk-mq: set RQF_USE_SCHED when the operation is known - net: cap skb->queue_mapping when the tx queue is picked - net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - ipv6: Prevent rt6_insert_exception() for dying fib6_info. - xfs: fix cursor and pointer handling when recovering iunlink buckets - xfrm: hold net_device reference under RCU in bundle creation - drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown - !30268 ub: udma: solving internal code review issues - !30305 bpf: Mark syscall helpers as sleepable - !30113 fix/CVE-2026-98103 - !30061 [CVEAgent@OLK-6.6] Fix CVE-2026-98966 - !30099 [CVEAgent@OLK-6.6] Fix CVE-2026-99070 - !30087 [CVEAgent@OLK-6.6] Fix CVE-2026-99031 - !30100 [CVEAgent@OLK-6.6] Fix CVE-2026-99071 - !30101 [CVEAgent@OLK-6.6] Fix CVE-2026-99072 - !30102 [CVEAgent@OLK-6.6] Fix CVE-2026-99074 - !30091 [CVEAgent@OLK-6.6] Fix CVE-2026-99041 - !30088 [CVEAgent@OLK-6.6] Fix CVE-2026-99033 - !30043 seg6: ensure packet data is writable before modifying SRH and IPv6 DA - !30197 CVE-2026-98503 - bpf: Mark syscall helpers as sleepable - ub: udma: support dwqe with a few wqebbs - ub: udma: solving internal code review issues - seg6: ensure packet data is writable before modifying SRH and IPv6 DA - igmp: fix kabi breakage of struct ip_sf_list - packet: use ubuf_info completion for TX_RING packets - virtio_net: copy zerocopy frags in start_xmit without NAPI - igmp: convert struct ip_sf_list to RCU - ipv4: stop PMTU walk when nexthop group shrinks - ipv4: stop route notification sizing when nexthop group shrinks - ipv4: do not warn on route notification size race - ipv6: do not warn on route notification size race - ip6_gre: remove obsolete ERSPAN PMTU update - net/packet: guard the ll header push in packet_rcv_spkt() - net: bridge: avoid recursive multicast port cleanup - bonding: fix the program leak when XDP is replaced - !30029 CODEOWNERS: add kernel module ownership rules - !30291 [OLK-6.6] mm/swapfile: reject duplicated bad pages in swap header - !30201 filescgroup: migrate files resources of every task, not just the first - !30306 Fix CVE-2026-98799 - bpf: Fix kabi breakage in struct bpf_tramp_image and bpf_trampoline - bpf: Skip detached progs in trampoline images that are still in use - mm/swapfile: reject duplicated bad pages in swap header - filescgroup: migrate files resources of every task, not just the first - scripts: add get_codeowner.py to look up CODEOWNERS owners - CODEOWNERS: add kernel module ownership rules - !30256 [Backport] ext4: defer unwritten splitting until I/O completion - !30394 urma: Fix the assignment before null check - !30003 [CVEAgent@OLK-6.6] Fix CVE-2026-98831 - !29516 [CVEAgent@OLK-6.6] Fix CVE-2026-98198 - !30220 drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - !30082 [CVEAgent@OLK-6.6] Fix CVE-2026-99012 - !30071 [CVEAgent@OLK-6.6] Fix CVE-2026-98983 - !30262 [CVEAgent] Fix CVE-2026-99091 - !30294 Fix CVE-2026-99011 - !30293 Fix CVE-2026-99008 - !30290 Fix CVE-2026-98663 - !30289 Fix CVE-2026-98664 - !30288 Fix CVE-2026-98666 - !30234 [PATCH 00/11] KVM: arm64: pvm: Add software VGICv3 and virtual timer support - ext4: prevent sleeping allocation in NOWAIT write path - !30367 Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - ext4: remove EXT4_GET_BLOCKS_IO_CREATE_EXT - ext4: simplify the mapping query logic in ext4_iomap_begin() - ext4: skip overwrite check for aligned non-extending DIO writes - ext4: remove unused unwritten parameter in ext4_dio_write_iter() - ext4: remove useless ext4_iomap_overwrite_ops - ext4: avoid starting handle when dio writing an unwritten extent - ext4: don't split extent before submitting I/O - !30233 Fix CVE-2026-98917 - !30235 Fix CVE-2026-98930 - !30368 wifi: mac80211: validate TX status rate metadata - !30378 tty: tty_port: restore TTY_IO_ERROR on activation failure - !30380 tty: port: fix tty_port_tty_vhangup() race - !30371 mtd: core: avoid double-free of OTP NVMEM device - urma: Fix the assignment before null check - !30386 RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - !30270 [OLK-6.6] AMD Venice additional patches for openEuler - !28385 [OLK-6.6] crypto: ccp: fix vpsp cmd ctx leak - !30382 fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - !30365 bpf: Fix out-of-bounds btf->types write for split BTF - fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - !30313 kabi: fix include helpers broken by the predefined 'linux' macro - tty: port: fix tty_port_tty_vhangup() race - tty: tty_port: restore TTY_IO_ERROR on activation failure - mtd: core: avoid double-free of OTP NVMEM device - wifi: mac80211: validate TX status rate metadata - bpf: Fix out-of-bounds btf->types write for split BTF - kabi: fix include helpers broken by the predefined 'linux' macro - KVM: arm64: pvm: Handle counter reads in the hyp path - KVM: arm64: pvm: Trap guest timer accesses and enforce EL0 permissions - KVM: arm64: pvm: Align timer capabilities and counter handling with RV timers - KVM: arm64: pvm: Wire RV timers into the KVM timer entry points - KVM: arm64: pvm: Add the software RV timer implementation - KVM: arm64: pvm: Deliver VGIC interrupts without hardware LRs - KVM: arm64: pvm: Emulate VGIC active priority registers - KVM: arm64: pvm: Route ICC accesses through register descriptors - KVM: arm64: pvm: Emulate the GICv3 CPU interface - KVM: arm64: Handle pending EL1 IRQ exceptions - KVM: arm64: pvm: Constrain virtual interrupt capabilities - Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown - iio: imu: adis16480: fix unprotected debugfs reads - iio: imu: adis16400: fix unprotected debugfs reads - iio: gyro: adis16136: fix unprotected debugfs reads - Bluetooth: MGMT: Fix status of pending commands flushed on power off - EDAC/amd64: Mask UMC chip select to the four implemented selects - x86/mce: Fix hardware debug register corruption on task migration - x86/MCE/AMD: Fix inverted interrupt enablement during storm handling - x86/amd_node: Avoid divide by zero on virtualized systems - RAS/AMD/ATL, EDAC/amd64: Only load ATL when needed - x86/mce: Set up the polling timer before CMCI discovery - x86/mce: Restore MCA polling interval halving - EDAC/amd64: Remove NUM_CONTROLLERS macro - x86/mce/inject: Remove call to mce_notify_irq() - x86/mce: Remove the redundant mce_hygon_feature_init() - x86/mce/threshold: Remove the redundant this_cpu_dec_return() - crypto: ccp: fix vpsp cmd ctx leak - KVM: s390: Fix IRQ injection with SIGP Stop and Store Status - parisc: Increase kernel stack size to 32kb - drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - Bluetooth: ISO: Serialize concurrent connect calls - unshare: don't drop active namespace references that were never taken - of/overlay: don't leak fragment references when changeset init fails - hwmon: (pwm-fan) Stop RPM timer before freeing tach data - !30459 [CVEAgent@OLK-6.6] Fix CVE-2026-99234 - !30468 [CVEAgent@OLK-6.6] Fix CVE-2026-99143 - !30322 urma: fix ipourma eid handler and register work concurrency - !30455 arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30491 [OLK-6.6] AMD Venice additional patches for openEuler - 2 - EDAC/amd64: Avoid a -Wformat-security warning - EDAC/amd64: Generate ctl_name string at runtime - !29993 [CVEAgent@OLK-6.6] Fix CVE-2026-98807 - !29964 [CVEAgent@OLK-6.6] Fix CVE-2026-98747 - !30393 ub/ubmem-vmmu: Remove the support_attr callback mechanism. - !30447 wifi: mac80211: minstrel_ht: validate fixed rate index - !30446 net: ena: fix MMIO read buffer leak on probe failure - tracing: Keep the predicate limit separate from program capacity - !30013 [CVEAgent@OLK-6.6] Fix CVE-2026-98855 - !30431 fix CVE-2026-98490 for OLK-6.6 - !30425 fix CVE-2026-98722 for OLK-6.6 - !30410 nvdimm: pmem: keep PREFLUSH before data writes - !30406 Fix CVE-2026-97480 for OLK-6.6 - !30204 x86/cpu/hygon: Report S5 reset status during boot - tracing: Unregister field variable histograms when the command fails - !30395 tty: fix saved termios reset race - arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30031 drm/amdkfd: fix SMI event cross-process information leak - wifi: mac80211: minstrel_ht: validate fixed rate index - net: ena: fix MMIO read buffer leak on probe failure - net: openvswitch: conntrack: fix helper UAF due to extensions realloc - net: openvswitch: conntrack: remove 'add_helper' dead code - openvswitch: prepare for stolen verdict coming from conntrack and nat engine - net/sched: act_ct: avoid modifying shared unconfirmed ct entry - net/sched: act_ct: fix helper UAF due to extensions realloc - ub/ubmem-vmmu: Remove the support_attr callback mechanism. - mtd: block2mtd: Fix divide error when erase_size is zero - block2mtd: prevent direct access of bd_inode - nvdimm: pmem: keep PREFLUSH before data writes - tty: serial: 8250: protect against NULL uart->port.dev in register - serial: 8250: invert serial8250_register_8250_port() CIR condition - urma: fix ipourma eid handler and register work concurrency - tty: fix saved termios reset race - x86/cpu/hygon: Report S5 reset status during boot - drm/amdkfd: fix SMI event cross-process information leak - of/overlay: put property on deadprops only after changeset add succeeds - net/mlx5: Fix slab-out-of-bounds when handling team device events - serial: core: fix NULL pointer dereference in serial_core_unregister_port() - !30553 tracing: Reject incomplete event filter expressions - !30498 nfsd: split nfsd4_copy into transient and durable async copy objects - !30000 [CVEAgent@OLK-6.6] Fix CVE-2026-98822 - !30497 cdma: ratelimit hot-path error logs in kernel driver and header file code synchronization - tracing: Reject incomplete event filter expressions - !30546 [OLK-6.6] ub: fix UBASE port reporting and UNIC reset and DMA handling - !30481 [CVEAgent@OLK-6.6] Fix CVE-2026-99080 - !30483 [CVEAgent@OLK-6.6] Fix CVE-2026-99206 - !30388 Fix CVE-2026-99153 - !30390 Fix CVE-2026-99152 - !30387 Fix CVE-2026-99110 - !30391 Fix CVE-2026-99109 - !30479 [CVEAgent@OLK-6.6] Fix CVE-2026-99254 - !30538 scsi: libsas: Fix SMP IO deadlock during HA resume - !30537 ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30536 scsi: libsas: Add linkrate and sas_addr change detection in rediscover；scsi: libsas: Add sas_ex_phy_to_dev() helper - !30486 [CVEAgent@OLK-6.6] Fix CVE-2026-99247 - !30454 [OLK-6.6] Fix CVE-2026-97566 - !30453 [OLK-6.6] Fix CVE-2026-97432 - !30444 [OLK-6.6] Fix CVE-2026-43234 - !30403 x86/hygon: Fix FPDSS on Hygon - !30269 [OLK-6.6] update rnpvf driver to 1.2.0. - !30155 [OLK-6.6] Fix CVE-2026-74695 - !30153 [OLK-6.6] Fix CVE-2026-72494 - !30149 [OLK-6.6] Fix CVE-2026-74368 - !30092 [CVEAgent@OLK-6.6] Fix CVE-2026-99052 - !30090 [CVEAgent@OLK-6.6] Fix CVE-2026-99040 - !30057 [CVEAgent@OLK-6.6] Fix CVE-2026-98948 - !30086 [CVEAgent@OLK-6.6] Fix CVE-2026-99025 - !30105 [CVEAgent@OLK-6.6] Fix CVE-2026-99078 - !30106 [CVEAgent@OLK-6.6] Fix CVE-2026-99079 - ub: ubase: skip bandwidth queries on next-generation chips - net: unic: Fix TX/RX DMA ordering and cache sync - net: unic: serialize port deactivation with reset - ub: ubase: add ub port events handling and statistics - scsi: libsas: Fix SMP IO deadlock during HA resume - scsi: libsas: Add sas_ex_phy_to_dev() helper - scsi: libsas: Add linkrate and sas_addr change detection in rediscover - !30430 v8 arm64: Allow CPU0 to be nohz_full - ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30300 mm/gup: allow movable memory pinnable - !30487 urma: limit opt buf length in uburma ioctl commands - !29931 [CVEAgent@OLK-6.6] Fix CVE-2026-98570 - nfsd: split nfsd4_copy into transient and durable async copy objects - ub: cdma: header file code synchronization - ub: cdma: ratelimit hot-path error logs in kernel driver - x86: hygon: Fix FPDSS on Hygon - tracing: Do not initialize tracefs work if tracing is disabled - scsi: target: iscsi: Fix race in discovery auth updates - fs: Free any excess xarray nodes in clear_inode() - io_uring: don't flood a cancelling task with task_work - urma: limit opt buf length in uburma ioctl commands - mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 - wifi: iwlwifi: mvm: fix P2P-Device binding handling - team: avoid NETDEV_CHANGEMTU event when unregistering slave - arm64: defconfig: Enable CONFIG_PM_SLEEP_SMP_NONZERO_CPU and CONFIG_ARCH_SUSPEND_NONZERO_CPU - arm64: Allow boot CPU nohz_full to coexist with suspend and kexec - isolation: Check whether there exists a housekeeping CPU online - isolation: Do not check whether housekeeping CPUs are present - smb: client: reject SetEA requests that do not fit the request buffer - scsi: libiscsi: Validate the task named by a management response - scsi: libiscsi: Validate the ITT reflected in a Reject PDU - smb: client: fix heap overflow in cifs_do_set_acl() - rnpvf: update rnpvf driver to 1.2.0. - mm/gup: allow movable memory pinnable - rnpvf: update rnpvf driver to 1.2.0. - netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() - RDMA/irdma: Replace waitqueue and flag with completion - wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() - net/mlx5e: Prevent stale XSK buffer release on refill retry - net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry - selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts - KEYS: Fix add_key() race with keyring restriction - openvswitch: fix soft lockup in the netlink flow dump - mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() - wifi: mac80211: prevent AP VLAN tx from other interfaces - net: ipv6: keep room for the mac header in dst_dev_overhead() - !30530 [CVEAgent@OLK-6.6] Fix CVE-2026-99163 - !30532 [CVEAgent@OLK-6.6] Fix CVE-2026-99235 - !29765 Fix CVE-2026-98289 - !30230 Fix CVE-2026-97615 - !29790 Fix CVE-2026-93250 - !30510 [CVEAgent@OLK-6.6] Fix CVE-2026-99005 - !30506 [CVEAgent@OLK-6.6] Fix CVE-2026-98871 - !30307 feat/obmm-unified-switch-split-v4 - !30064 [CVEAgent@OLK-6.6] Fix CVE-2026-98972 - !30507 [CVEAgent@OLK-6.6] Fix CVE-2026-98883 - !30450 BBML3 bugfix - !30156 [OLK-6.6] Fix CVE-2026-68258 - !30154 [OLK-6.6] Fix CVE-2026-74729 - !30151 [OLK-6.6] Fix CVE-2026-74273 - !27793 [OLK-6.6] Fix CVE-2026-68421 - !27512 [OLK-6.6] Fix CVE-2026-64259 - !30146 [OLK-6.6] Fix CVE-2026-53109 - !30575 arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30567 scsi: hisi_sas: Clear PHY error counts on phyup - arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30472 [CVEAgent@OLK-6.6] Fix CVE-2026-99243 - scsi: hisi_sas: Clear PHY error counts on phyup - scsi:hisi_sas:Sync upstream timer_delete API changes in hisi_sas_v3_hw.c - tracing: Save the event file instead of the compatible histogram - tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields - drm/i915/gt: Unmask interrupts only when ACTIVE is true - serial: 8250_port: recognize UPIO_AU - crypto: ccp - Fix possible deadlock in SEV init failure path - obmm: pack the internal structs by field ordering - obmm: sysfs views over the switch: attributes, identity, lockless reads - obmm: generalized dual-backend gap mmap - obmm: export switch target wrap-up and validation consolidation - obmm: unified two-phase switch core (import target) - obmm: install mappings lazily from the backend fault paths - obmm: fix the pxm bound, the open TOCTOU and the teardown release - obmm: split the region shell from the memory backends - obmm: depend on TRANSPARENT_HUGEPAGE for the PMD fault paths - io-wq: order the exit bit against worker creation task work - mm/pfn_range_alloc: split block mappings in linear map updates - arm64/mm: make pte_present() recognize present-invalid entries - net: bridge: use option bits for CFM/MRP frame handlers - drm/amdkfd: Check bounds on CRIU restore queue type and mqd size - soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read - cxl/region: Block region delete during region creation - powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy - cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() - vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() - af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). - sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() - fuse-uring: make a fuse_req on SQE commit only findable after memcpy - !30591 [CVEAgent@OLK-6.6] Fix CVE-2026-99142 - !30590 [CVEAgent@OLK-6.6] Fix CVE-2026-99219 - !30594 [CVEAgent@OLK-6.6] Fix CVE-2026-99233 - !30600 urma: warn on slow TP driver callbacks - urma: warn on slow TP driver callbacks - tracing/histograms: Verify event_call identity when updating synth_event refcount - tracing: Check operator stack capacity before pushing - ftrace: Initialize modname and offset in print_rec() - !30602 [CVEAgent@OLK-6.6] Fix CVE-2026-99117 - !30605 [CVEAgent@OLK-6.6] Fix CVE-2026-99211 - !30604 [CVEAgent@OLK-6.6] Fix CVE-2026-99201 - netlink: reset skb headers before unicast and multicast filtering - netlink: avoid hashing the network namespace pointer - net: bridge: mcast: don't truncate the port group walk on teardown - !30597 [CVEAgent@OLK-6.6] Fix CVE-2026-99239 - !30582 v5 MOC bypass cache - !30610 iommu/io-pgtable-arm: Add support for contiguous hint - !30523 drivers:misc:sdma-dae: Open source sdma-dae driver to OLK-6.6 (already supported on olk-5.10) - !28122 [CVEAgent@OLK-6.6] Fix CVE-2026-89802 - !29350 [CVEAgent@OLK-6.6] Fix CVE-2026-97988 - !30473 Fix CVE-2026-97992 - !30150 [OLK-6.6] Fix CVE-2026-74527 - !30576 net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - !30544 [OLK-6.6] Fix CVE-2026-90057 - !30476 [OLK-6.6] fix CVE-2026-98936 - !30474 [OLK-6.6] fix CVE-2026-99059 - !30144 [OLK-6.6] Fix CVE-2026-64190 - !30311 [OLK-6.6]nser: add support for wangxun RDMA driver - iommu/io-pgtable-arm: Add support for contiguous hint - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn - openeuler: configs: arm64: Enable PBHA by default - arm64: mm: Introduce kernel param pbha - arm64: mm: Introduce prctl to control pbha behavior - arm64: mm: Set flag VM_PBHA_BIT0 for global init task - arm64: mm: Introduce procfs interface to update PBHA0 bit - arm64: mm: Set PBHA0 bit for VM_PBHA_BIT0 - arm64: mm: Introduce VM_PBHA_BIT0 to enable pbha bit0 for single vma - arm64: mm: Show PBHA bit 59 as PBHA0 in ptdump - arm64: mm: Update kernel pte entries if pbha bit0 enabled - arm64: mm: Detect and enable PBHA bit0 at early startup - arm64: cpufeature: Enable PBHA for stage1 early via FDT - Documentation: arm64: Describe the support and expectations for PBHA - KVM: arm64: Configure PBHA bits for stage2 - arm64: mm: Add pgprot_pbha() to allow drivers to request PBHA values - arm64: cpufeature: Enable PBHA bits for stage1 - dt-bindings: arm: Add binding for Page Based Hardware Attributes - dt-bindings: Rename the description of cpu nodes cpu.yaml - KVM: arm64: Detect and enable PBHA for stage2 - net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() - drivers:misc:sdma-dae: adapt driver interfaces for OLK-6.6 - net: team: fix NULL pointer dereference in team_xmit during mode change - net: team: Rename port_disabled team mode op to port_tx_disabled - net: team: Remove unused team_mode_op, port_enabled - wifi: ath11k: reset ar->num_stations on hardware start - wireguard: noise: reject response consumption after intermediate initiation - vhost-vdpa: protect config_ctx from being freed under the config callback - x86/arm64: config: enable the Wangxun nser RDMA driver - net: wangxun: nser: add RDMA support for 100GbE NICs - octeontx2-af: Block VFs from clobbering special CGX PKIND state - vhost: invalidate vring access on IOTLB transitions - drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op - drivers:misc:sdma-dae: Remove redundant print during mm exit and resume. - drivers:misc:sdma-dae: Revert optimize kernel code - drivers:misc:sdma-dae: Revert add channel depth info in debugfs - drivers:misc:sdma-dae: Revert Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Remove interference print. - drivers:misc:sdma-dae: Checking the address alignment - drivers:misc:sdma-dae: add NULL judgement of global variables - drivers:misc:sdma-dae: add channel depth info in debugfs - drivers:misc:sdma-dae: optimize kernel code - drivers:misc:sdma-dae: fix incorrect debugfs print - drivers:misc:sdma-dae: sdma fix uncorrect sleep time - drivers:misc:sdma-dae: fix incorrect kmalloc flag - drivers:misc:sdma-dae: sdma fix PUAF problem fork risk - drivers:misc:sdma-dae: modify ttl_processes reduce logic - drivers:misc:sdma-dae: remove unnecessary return in void function - drivers:misc:sdma-dae: fix incorrect resource release - drivers:misc:sdma-dae: remove lock while pausing channels - drivers:misc:sdma-dae: add mmu_notifier - drivers:misc:sdma-dae: add MODULE_VERSION to control version - drivers:misc:sdma-dae: add print in exceptional branch - drivers:misc:sdma-dae: bugfix of channel operation - drivers:misc:sdma-dae: change authority of sdma device - drivers:misc:sdma-dae: add channel ida validation - drivers:misc:sdma-dae: add vma_ops to avoid mremap error - drivers:misc:sdma-dae: add fast mode - drivers:misc:sdma-dae: not expose sq_tail write and add validation of cq_head - drivers:misc:sdma-dae: add debugfs of sdma-dae - drivers:misc:sdma-dae: fix icsl code check problems - drivers:misc:sdma-dae: fix input validate problems - drivers:misc:sdma-dae: fix interrupt handle logic - drivers:misc:sdma-dae: not compile sdma-dae by default - drivers:misc:sdma-dae: enable sdma_dae for arm64 - drivers:misc:sdma-dae: support page fault preprocess - drivers:misc:sdma-dae: support interrupt init and handle - drivers:misc:sdma-dae: support sqe task send and execute - drivers:misc:sdma-dae: support channel management - drivers:misc:sdma-dae: support getting streamID - drivers:misc:sdma-dae: support initializ sdma driver - !30253 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - !29554 [CVEAgent@OLK-6.6] Fix CVE-2026-98286 - !30263 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - !30258 v10 net: dynthread: dynamic threaded NAPI - !30208 Fix CVE-2026-98044 - !30280 bpf: Make post-verification instruction rewrites killable - !30184 blk-mq: set RQF_USE_SCHED when the operation is known - !30267 sched/fair: Avoid overflow in place_entity() - !30236 configfs: unhash the dentry before dropping the item in rmdir - !30276 virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - !29584 [CVEAgent@OLK-6.6] Fix CVE-2026-98364 - !29906 [CVEAgent@OLK-6.6] Fix CVE-2026-98443 - !30046 net: cap skb->queue_mapping when the tx queue is picked - !30223 bpf: Reject pkt arguments in mutating subprogs - !29932 [CVEAgent@OLK-6.6] Fix CVE-2026-98598 - !30044 net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - bpf: Make post-verification instruction rewrites killable - virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - RDMA/umem: avoid ib_umem_find_best_pgsz ABI breakage - sched/fair: Avoid overflow in place_entity() - RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - net: dynthread: Add debug switch and instrumentation - net: dynthread: Scale the number of NAPI thread CPUs - net: dynthread: Switch NAPI to threads on spare CPUs - net: dynthread: Steer the RX queue IRQs away from the target tasks - net: dynthread: Monitor the load of the target tasks - net: dynthread: Add dynamic threaded NAPI scheduler framework - net/mlx5e: Do not block on RTNL while recovering an SQ - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover - net/mlx5e: Acquire RTNL lock before RQs/SQs activation/deactivation - net/mlx5e: link NAPI instances to queues and IRQs - net: Fix napi irq KABI breakage - net: Add NAPI IRQ support - net: Fix KABI breakage for queue napi association - net: Add queue and napi association - neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - configfs: unhash the dentry before dropping the item in rmdir - bpf: Reject pkt arguments in mutating subprogs - bpf: Fix kabi breakage in struct bpf_subprog_info - bpf: Reject legacy packet loads from callbacks - blk-mq: set RQF_USE_SCHED when the operation is known - net: cap skb->queue_mapping when the tx queue is picked - net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - ipv6: Prevent rt6_insert_exception() for dying fib6_info. - xfs: fix cursor and pointer handling when recovering iunlink buckets - xfrm: hold net_device reference under RCU in bundle creation - drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown - !30268 ub: udma: solving internal code review issues - !30305 bpf: Mark syscall helpers as sleepable - !30113 fix/CVE-2026-98103 - !30061 [CVEAgent@OLK-6.6] Fix CVE-2026-98966 - !30099 [CVEAgent@OLK-6.6] Fix CVE-2026-99070 - !30087 [CVEAgent@OLK-6.6] Fix CVE-2026-99031 - !30100 [CVEAgent@OLK-6.6] Fix CVE-2026-99071 - !30101 [CVEAgent@OLK-6.6] Fix CVE-2026-99072 - !30102 [CVEAgent@OLK-6.6] Fix CVE-2026-99074 - !30091 [CVEAgent@OLK-6.6] Fix CVE-2026-99041 - !30088 [CVEAgent@OLK-6.6] Fix CVE-2026-99033 - !30043 seg6: ensure packet data is writable before modifying SRH and IPv6 DA - !30197 CVE-2026-98503 - bpf: Mark syscall helpers as sleepable - ub: udma: support dwqe with a few wqebbs - ub: udma: solving internal code review issues - seg6: ensure packet data is writable before modifying SRH and IPv6 DA - igmp: fix kabi breakage of struct ip_sf_list - packet: use ubuf_info completion for TX_RING packets - virtio_net: copy zerocopy frags in start_xmit without NAPI - igmp: convert struct ip_sf_list to RCU - ipv4: stop PMTU walk when nexthop group shrinks - ipv4: stop route notification sizing when nexthop group shrinks - ipv4: do not warn on route notification size race - ipv6: do not warn on route notification size race - ip6_gre: remove obsolete ERSPAN PMTU update - net/packet: guard the ll header push in packet_rcv_spkt() - net: bridge: avoid recursive multicast port cleanup - bonding: fix the program leak when XDP is replaced - !30029 CODEOWNERS: add kernel module ownership rules - !30291 [OLK-6.6] mm/swapfile: reject duplicated bad pages in swap header - !30201 filescgroup: migrate files resources of every task, not just the first - !30306 Fix CVE-2026-98799 - bpf: Fix kabi breakage in struct bpf_tramp_image and bpf_trampoline - bpf: Skip detached progs in trampoline images that are still in use - mm/swapfile: reject duplicated bad pages in swap header - filescgroup: migrate files resources of every task, not just the first - scripts: add get_codeowner.py to look up CODEOWNERS owners - CODEOWNERS: add kernel module ownership rules - !30256 [Backport] ext4: defer unwritten splitting until I/O completion - !30394 urma: Fix the assignment before null check - !30003 [CVEAgent@OLK-6.6] Fix CVE-2026-98831 - !29516 [CVEAgent@OLK-6.6] Fix CVE-2026-98198 - !30220 drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - !30082 [CVEAgent@OLK-6.6] Fix CVE-2026-99012 - !30071 [CVEAgent@OLK-6.6] Fix CVE-2026-98983 - !30262 [CVEAgent] Fix CVE-2026-99091 - !30294 Fix CVE-2026-99011 - !30293 Fix CVE-2026-99008 - !30290 Fix CVE-2026-98663 - !30289 Fix CVE-2026-98664 - !30288 Fix CVE-2026-98666 - !30234 [PATCH 00/11] KVM: arm64: pvm: Add software VGICv3 and virtual timer support - ext4: prevent sleeping allocation in NOWAIT write path - !30367 Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - ext4: remove EXT4_GET_BLOCKS_IO_CREATE_EXT - ext4: simplify the mapping query logic in ext4_iomap_begin() - ext4: skip overwrite check for aligned non-extending DIO writes - ext4: remove unused unwritten parameter in ext4_dio_write_iter() - ext4: remove useless ext4_iomap_overwrite_ops - ext4: avoid starting handle when dio writing an unwritten extent - ext4: don't split extent before submitting I/O - !30233 Fix CVE-2026-98917 - !30235 Fix CVE-2026-98930 - !30368 wifi: mac80211: validate TX status rate metadata - !30378 tty: tty_port: restore TTY_IO_ERROR on activation failure - !30380 tty: port: fix tty_port_tty_vhangup() race - !30371 mtd: core: avoid double-free of OTP NVMEM device - urma: Fix the assignment before null check - !30386 RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - !30270 [OLK-6.6] AMD Venice additional patches for openEuler - !28385 [OLK-6.6] crypto: ccp: fix vpsp cmd ctx leak - !30382 fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - !30365 bpf: Fix out-of-bounds btf->types write for split BTF - fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - !30313 kabi: fix include helpers broken by the predefined 'linux' macro - tty: port: fix tty_port_tty_vhangup() race - tty: tty_port: restore TTY_IO_ERROR on activation failure - mtd: core: avoid double-free of OTP NVMEM device - wifi: mac80211: validate TX status rate metadata - bpf: Fix out-of-bounds btf->types write for split BTF - kabi: fix include helpers broken by the predefined 'linux' macro - KVM: arm64: pvm: Handle counter reads in the hyp path - KVM: arm64: pvm: Trap guest timer accesses and enforce EL0 permissions - KVM: arm64: pvm: Align timer capabilities and counter handling with RV timers - KVM: arm64: pvm: Wire RV timers into the KVM timer entry points - KVM: arm64: pvm: Add the software RV timer implementation - KVM: arm64: pvm: Deliver VGIC interrupts without hardware LRs - KVM: arm64: pvm: Emulate VGIC active priority registers - KVM: arm64: pvm: Route ICC accesses through register descriptors - KVM: arm64: pvm: Emulate the GICv3 CPU interface - KVM: arm64: Handle pending EL1 IRQ exceptions - KVM: arm64: pvm: Constrain virtual interrupt capabilities - Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown - iio: imu: adis16480: fix unprotected debugfs reads - iio: imu: adis16400: fix unprotected debugfs reads - iio: gyro: adis16136: fix unprotected debugfs reads - Bluetooth: MGMT: Fix status of pending commands flushed on power off - EDAC/amd64: Mask UMC chip select to the four implemented selects - x86/mce: Fix hardware debug register corruption on task migration - x86/MCE/AMD: Fix inverted interrupt enablement during storm handling - x86/amd_node: Avoid divide by zero on virtualized systems - RAS/AMD/ATL, EDAC/amd64: Only load ATL when needed - x86/mce: Set up the polling timer before CMCI discovery - x86/mce: Restore MCA polling interval halving - EDAC/amd64: Remove NUM_CONTROLLERS macro - x86/mce/inject: Remove call to mce_notify_irq() - x86/mce: Remove the redundant mce_hygon_feature_init() - x86/mce/threshold: Remove the redundant this_cpu_dec_return() - crypto: ccp: fix vpsp cmd ctx leak - KVM: s390: Fix IRQ injection with SIGP Stop and Store Status - parisc: Increase kernel stack size to 32kb - drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - Bluetooth: ISO: Serialize concurrent connect calls - unshare: don't drop active namespace references that were never taken - of/overlay: don't leak fragment references when changeset init fails - hwmon: (pwm-fan) Stop RPM timer before freeing tach data - !30459 [CVEAgent@OLK-6.6] Fix CVE-2026-99234 - !30468 [CVEAgent@OLK-6.6] Fix CVE-2026-99143 - !30322 urma: fix ipourma eid handler and register work concurrency - !30455 arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30491 [OLK-6.6] AMD Venice additional patches for openEuler - 2 - EDAC/amd64: Avoid a -Wformat-security warning - EDAC/amd64: Generate ctl_name string at runtime - !29993 [CVEAgent@OLK-6.6] Fix CVE-2026-98807 - !29964 [CVEAgent@OLK-6.6] Fix CVE-2026-98747 - !30393 ub/ubmem-vmmu: Remove the support_attr callback mechanism. - !30447 wifi: mac80211: minstrel_ht: validate fixed rate index - !30446 net: ena: fix MMIO read buffer leak on probe failure - tracing: Keep the predicate limit separate from program capacity - !30013 [CVEAgent@OLK-6.6] Fix CVE-2026-98855 - !30431 fix CVE-2026-98490 for OLK-6.6 - !30425 fix CVE-2026-98722 for OLK-6.6 - !30410 nvdimm: pmem: keep PREFLUSH before data writes - !30406 Fix CVE-2026-97480 for OLK-6.6 - !30204 x86/cpu/hygon: Report S5 reset status during boot - tracing: Unregister field variable histograms when the command fails - !30395 tty: fix saved termios reset race - arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30031 drm/amdkfd: fix SMI event cross-process information leak - wifi: mac80211: minstrel_ht: validate fixed rate index - net: ena: fix MMIO read buffer leak on probe failure - net: openvswitch: conntrack: fix helper UAF due to extensions realloc - net: openvswitch: conntrack: remove 'add_helper' dead code - openvswitch: prepare for stolen verdict coming from conntrack and nat engine - net/sched: act_ct: avoid modifying shared unconfirmed ct entry - net/sched: act_ct: fix helper UAF due to extensions realloc - ub/ubmem-vmmu: Remove the support_attr callback mechanism. - mtd: block2mtd: Fix divide error when erase_size is zero - block2mtd: prevent direct access of bd_inode - nvdimm: pmem: keep PREFLUSH before data writes - tty: serial: 8250: protect against NULL uart->port.dev in register - serial: 8250: invert serial8250_register_8250_port() CIR condition - urma: fix ipourma eid handler and register work concurrency - tty: fix saved termios reset race - x86/cpu/hygon: Report S5 reset status during boot - drm/amdkfd: fix SMI event cross-process information leak - of/overlay: put property on deadprops only after changeset add succeeds - net/mlx5: Fix slab-out-of-bounds when handling team device events - serial: core: fix NULL pointer dereference in serial_core_unregister_port() - !30553 tracing: Reject incomplete event filter expressions - !30498 nfsd: split nfsd4_copy into transient and durable async copy objects - !30000 [CVEAgent@OLK-6.6] Fix CVE-2026-98822 - !30497 cdma: ratelimit hot-path error logs in kernel driver and header file code synchronization - tracing: Reject incomplete event filter expressions - !30546 [OLK-6.6] ub: fix UBASE port reporting and UNIC reset and DMA handling - !30481 [CVEAgent@OLK-6.6] Fix CVE-2026-99080 - !30483 [CVEAgent@OLK-6.6] Fix CVE-2026-99206 - !30388 Fix CVE-2026-99153 - !30390 Fix CVE-2026-99152 - !30387 Fix CVE-2026-99110 - !30391 Fix CVE-2026-99109 - !30479 [CVEAgent@OLK-6.6] Fix CVE-2026-99254 - !30538 scsi: libsas: Fix SMP IO deadlock during HA resume - !30537 ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30536 scsi: libsas: Add linkrate and sas_addr change detection in rediscover；scsi: libsas: Add sas_ex_phy_to_dev() helper - !30486 [CVEAgent@OLK-6.6] Fix CVE-2026-99247 - !30454 [OLK-6.6] Fix CVE-2026-97566 - !30453 [OLK-6.6] Fix CVE-2026-97432 - !30444 [OLK-6.6] Fix CVE-2026-43234 - !30403 x86/hygon: Fix FPDSS on Hygon - !30269 [OLK-6.6] update rnpvf driver to 1.2.0. - !30155 [OLK-6.6] Fix CVE-2026-74695 - !30153 [OLK-6.6] Fix CVE-2026-72494 - !30149 [OLK-6.6] Fix CVE-2026-74368 - !30092 [CVEAgent@OLK-6.6] Fix CVE-2026-99052 - !30090 [CVEAgent@OLK-6.6] Fix CVE-2026-99040 - !30057 [CVEAgent@OLK-6.6] Fix CVE-2026-98948 - !30086 [CVEAgent@OLK-6.6] Fix CVE-2026-99025 - !30105 [CVEAgent@OLK-6.6] Fix CVE-2026-99078 - !30106 [CVEAgent@OLK-6.6] Fix CVE-2026-99079 - ub: ubase: skip bandwidth queries on next-generation chips - net: unic: Fix TX/RX DMA ordering and cache sync - net: unic: serialize port deactivation with reset - ub: ubase: add ub port events handling and statistics - scsi: libsas: Fix SMP IO deadlock during HA resume - scsi: libsas: Add sas_ex_phy_to_dev() helper - scsi: libsas: Add linkrate and sas_addr change detection in rediscover - !30430 v8 arm64: Allow CPU0 to be nohz_full - ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30300 mm/gup: allow movable memory pinnable - !30487 urma: limit opt buf length in uburma ioctl commands - !29931 [CVEAgent@OLK-6.6] Fix CVE-2026-98570 - nfsd: split nfsd4_copy into transient and durable async copy objects - ub: cdma: header file code synchronization - ub: cdma: ratelimit hot-path error logs in kernel driver - x86: hygon: Fix FPDSS on Hygon - tracing: Do not initialize tracefs work if tracing is disabled - scsi: target: iscsi: Fix race in discovery auth updates - fs: Free any excess xarray nodes in clear_inode() - io_uring: don't flood a cancelling task with task_work - urma: limit opt buf length in uburma ioctl commands - mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 - wifi: iwlwifi: mvm: fix P2P-Device binding handling - team: avoid NETDEV_CHANGEMTU event when unregistering slave - arm64: defconfig: Enable CONFIG_PM_SLEEP_SMP_NONZERO_CPU and CONFIG_ARCH_SUSPEND_NONZERO_CPU - arm64: Allow boot CPU nohz_full to coexist with suspend and kexec - isolation: Check whether there exists a housekeeping CPU online - isolation: Do not check whether housekeeping CPUs are present - smb: client: reject SetEA requests that do not fit the request buffer - scsi: libiscsi: Validate the task named by a management response - scsi: libiscsi: Validate the ITT reflected in a Reject PDU - smb: client: fix heap overflow in cifs_do_set_acl() - rnpvf: update rnpvf driver to 1.2.0. - mm/gup: allow movable memory pinnable - rnpvf: update rnpvf driver to 1.2.0. - netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() - RDMA/irdma: Replace waitqueue and flag with completion - wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() - net/mlx5e: Prevent stale XSK buffer release on refill retry - net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry - selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts - KEYS: Fix add_key() race with keyring restriction - openvswitch: fix soft lockup in the netlink flow dump - mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() - wifi: mac80211: prevent AP VLAN tx from other interfaces - net: ipv6: keep room for the mac header in dst_dev_overhead() - !30530 [CVEAgent@OLK-6.6] Fix CVE-2026-99163 - !30532 [CVEAgent@OLK-6.6] Fix CVE-2026-99235 - !29765 Fix CVE-2026-98289 - !30230 Fix CVE-2026-97615 - !29790 Fix CVE-2026-93250 - !30510 [CVEAgent@OLK-6.6] Fix CVE-2026-99005 - !30506 [CVEAgent@OLK-6.6] Fix CVE-2026-98871 - !30307 feat/obmm-unified-switch-split-v4 - !30064 [CVEAgent@OLK-6.6] Fix CVE-2026-98972 - !30507 [CVEAgent@OLK-6.6] Fix CVE-2026-98883 - !30450 BBML3 bugfix - !30156 [OLK-6.6] Fix CVE-2026-68258 - !30154 [OLK-6.6] Fix CVE-2026-74729 - !30151 [OLK-6.6] Fix CVE-2026-74273 - !27793 [OLK-6.6] Fix CVE-2026-68421 - !27512 [OLK-6.6] Fix CVE-2026-64259 - !30146 [OLK-6.6] Fix CVE-2026-53109 - !30575 arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30567 scsi: hisi_sas: Clear PHY error counts on phyup - arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30472 [CVEAgent@OLK-6.6] Fix CVE-2026-99243 - scsi: hisi_sas: Clear PHY error counts on phyup - scsi:hisi_sas:Sync upstream timer_delete API changes in hisi_sas_v3_hw.c - tracing: Save the event file instead of the compatible histogram - tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields - drm/i915/gt: Unmask interrupts only when ACTIVE is true - serial: 8250_port: recognize UPIO_AU - crypto: ccp - Fix possible deadlock in SEV init failure path - obmm: pack the internal structs by field ordering - obmm: sysfs views over the switch: attributes, identity, lockless reads - obmm: generalized dual-backend gap mmap - obmm: export switch target wrap-up and validation consolidation - obmm: unified two-phase switch core (import target) - obmm: install mappings lazily from the backend fault paths - obmm: fix the pxm bound, the open TOCTOU and the teardown release - obmm: split the region shell from the memory backends - obmm: depend on TRANSPARENT_HUGEPAGE for the PMD fault paths - io-wq: order the exit bit against worker creation task work - mm/pfn_range_alloc: split block mappings in linear map updates - arm64/mm: make pte_present() recognize present-invalid entries - net: bridge: use option bits for CFM/MRP frame handlers - drm/amdkfd: Check bounds on CRIU restore queue type and mqd size - soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read - cxl/region: Block region delete during region creation - powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy - cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() - vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() - af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). - sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() - fuse-uring: make a fuse_req on SQE commit only findable after memcpy - !30591 [CVEAgent@OLK-6.6] Fix CVE-2026-99142 - !30590 [CVEAgent@OLK-6.6] Fix CVE-2026-99219 - !30594 [CVEAgent@OLK-6.6] Fix CVE-2026-99233 - !30600 urma: warn on slow TP driver callbacks - urma: warn on slow TP driver callbacks - tracing/histograms: Verify event_call identity when updating synth_event refcount - tracing: Check operator stack capacity before pushing - ftrace: Initialize modname and offset in print_rec() - !30602 [CVEAgent@OLK-6.6] Fix CVE-2026-99117 - !30605 [CVEAgent@OLK-6.6] Fix CVE-2026-99211 - !30604 [CVEAgent@OLK-6.6] Fix CVE-2026-99201 - netlink: reset skb headers before unicast and multicast filtering - netlink: avoid hashing the network namespace pointer - net: bridge: mcast: don't truncate the port group walk on teardown - !30597 [CVEAgent@OLK-6.6] Fix CVE-2026-99239 - !30582 v5 MOC bypass cache - !30610 iommu/io-pgtable-arm: Add support for contiguous hint - !30523 drivers:misc:sdma-dae: Open source sdma-dae driver to OLK-6.6 (already supported on olk-5.10) - !28122 [CVEAgent@OLK-6.6] Fix CVE-2026-89802 - !29350 [CVEAgent@OLK-6.6] Fix CVE-2026-97988 - !30473 Fix CVE-2026-97992 - !30150 [OLK-6.6] Fix CVE-2026-74527 - !30576 net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - !30544 [OLK-6.6] Fix CVE-2026-90057 - !30476 [OLK-6.6] fix CVE-2026-98936 - !30474 [OLK-6.6] fix CVE-2026-99059 - !30144 [OLK-6.6] Fix CVE-2026-64190 - !30311 [OLK-6.6]nser: add support for wangxun RDMA driver - iommu/io-pgtable-arm: Add support for contiguous hint - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn - openeuler: configs: arm64: Enable PBHA by default - arm64: mm: Introduce kernel param pbha - arm64: mm: Introduce prctl to control pbha behavior - arm64: mm: Set flag VM_PBHA_BIT0 for global init task - arm64: mm: Introduce procfs interface to update PBHA0 bit - arm64: mm: Set PBHA0 bit for VM_PBHA_BIT0 - arm64: mm: Introduce VM_PBHA_BIT0 to enable pbha bit0 for single vma - arm64: mm: Show PBHA bit 59 as PBHA0 in ptdump - arm64: mm: Update kernel pte entries if pbha bit0 enabled - arm64: mm: Detect and enable PBHA bit0 at early startup - arm64: cpufeature: Enable PBHA for stage1 early via FDT - Documentation: arm64: Describe the support and expectations for PBHA - KVM: arm64: Configure PBHA bits for stage2 - arm64: mm: Add pgprot_pbha() to allow drivers to request PBHA values - arm64: cpufeature: Enable PBHA bits for stage1 - dt-bindings: arm: Add binding for Page Based Hardware Attributes - dt-bindings: Rename the description of cpu nodes cpu.yaml - KVM: arm64: Detect and enable PBHA for stage2 - net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() - drivers:misc:sdma-dae: adapt driver interfaces for OLK-6.6 - net: team: fix NULL pointer dereference in team_xmit during mode change - net: team: Rename port_disabled team mode op to port_tx_disabled - net: team: Remove unused team_mode_op, port_enabled - wifi: ath11k: reset ar->num_stations on hardware start - wireguard: noise: reject response consumption after intermediate initiation - vhost-vdpa: protect config_ctx from being freed under the config callback - x86/arm64: config: enable the Wangxun nser RDMA driver - net: wangxun: nser: add RDMA support for 100GbE NICs - octeontx2-af: Block VFs from clobbering special CGX PKIND state - vhost: invalidate vring access on IOTLB transitions - drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op - drivers:misc:sdma-dae: Remove redundant print during mm exit and resume. - drivers:misc:sdma-dae: Revert optimize kernel code - drivers:misc:sdma-dae: Revert add channel depth info in debugfs - drivers:misc:sdma-dae: Revert Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Remove interference print. - drivers:misc:sdma-dae: Checking the address alignment - drivers:misc:sdma-dae: add NULL judgement of global variables - drivers:misc:sdma-dae: add channel depth info in debugfs - drivers:misc:sdma-dae: optimize kernel code - drivers:misc:sdma-dae: fix incorrect debugfs print - drivers:misc:sdma-dae: sdma fix uncorrect sleep time - drivers:misc:sdma-dae: fix incorrect kmalloc flag - drivers:misc:sdma-dae: sdma fix PUAF problem fork risk - drivers:misc:sdma-dae: modify ttl_processes reduce logic - drivers:misc:sdma-dae: remove unnecessary return in void function - drivers:misc:sdma-dae: fix incorrect resource release - drivers:misc:sdma-dae: remove lock while pausing channels - drivers:misc:sdma-dae: add mmu_notifier - drivers:misc:sdma-dae: add MODULE_VERSION to control version - drivers:misc:sdma-dae: add print in exceptional branch - drivers:misc:sdma-dae: bugfix of channel operation - drivers:misc:sdma-dae: change authority of sdma device - drivers:misc:sdma-dae: add channel ida validation - drivers:misc:sdma-dae: add vma_ops to avoid mremap error - drivers:misc:sdma-dae: add fast mode - drivers:misc:sdma-dae: not expose sq_tail write and add validation of cq_head - drivers:misc:sdma-dae: add debugfs of sdma-dae - drivers:misc:sdma-dae: fix icsl code check problems - drivers:misc:sdma-dae: fix input validate problems - drivers:misc:sdma-dae: fix interrupt handle logic - drivers:misc:sdma-dae: not compile sdma-dae by default - drivers:misc:sdma-dae: enable sdma_dae for arm64 - drivers:misc:sdma-dae: support page fault preprocess - drivers:misc:sdma-dae: support interrupt init and handle - drivers:misc:sdma-dae: support sqe task send and execute - drivers:misc:sdma-dae: support channel management - drivers:misc:sdma-dae: support getting streamID - drivers:misc:sdma-dae: support initializ sdma driver - !30253 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - !29554 [CVEAgent@OLK-6.6] Fix CVE-2026-98286 - !30263 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - !30258 v10 net: dynthread: dynamic threaded NAPI - !30208 Fix CVE-2026-98044 - !30280 bpf: Make post-verification instruction rewrites killable - !30184 blk-mq: set RQF_USE_SCHED when the operation is known - !30267 sched/fair: Avoid overflow in place_entity() - !30236 configfs: unhash the dentry before dropping the item in rmdir - !30276 virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - !29584 [CVEAgent@OLK-6.6] Fix CVE-2026-98364 - !29906 [CVEAgent@OLK-6.6] Fix CVE-2026-98443 - !30046 net: cap skb->queue_mapping when the tx queue is picked - !30223 bpf: Reject pkt arguments in mutating subprogs - !29932 [CVEAgent@OLK-6.6] Fix CVE-2026-98598 - !30044 net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - bpf: Make post-verification instruction rewrites killable - virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - RDMA/umem: avoid ib_umem_find_best_pgsz ABI breakage - sched/fair: Avoid overflow in place_entity() - RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - net: dynthread: Add debug switch and instrumentation - net: dynthread: Scale the number of NAPI thread CPUs - net: dynthread: Switch NAPI to threads on spare CPUs - net: dynthread: Steer the RX queue IRQs away from the target tasks - net: dynthread: Monitor the load of the target tasks - net: dynthread: Add dynamic threaded NAPI scheduler framework - net/mlx5e: Do not block on RTNL while recovering an SQ - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover - net/mlx5e: Acquire RTNL lock before RQs/SQs activation/deactivation - net/mlx5e: link NAPI instances to queues and IRQs - net: Fix napi irq KABI breakage - net: Add NAPI IRQ support - net: Fix KABI breakage for queue napi association - net: Add queue and napi association - neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - configfs: unhash the dentry before dropping the item in rmdir - bpf: Reject pkt arguments in mutating subprogs - bpf: Fix kabi breakage in struct bpf_subprog_info - bpf: Reject legacy packet loads from callbacks - blk-mq: set RQF_USE_SCHED when the operation is known - net: cap skb->queue_mapping when the tx queue is picked - net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - ipv6: Prevent rt6_insert_exception() for dying fib6_info. - xfs: fix cursor and pointer handling when recovering iunlink buckets - xfrm: hold net_device reference under RCU in bundle creation - drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown - !30268 ub: udma: solving internal code review issues - !30305 bpf: Mark syscall helpers as sleepable - !30113 fix/CVE-2026-98103 - !30061 [CVEAgent@OLK-6.6] Fix CVE-2026-98966 - !30099 [CVEAgent@OLK-6.6] Fix CVE-2026-99070 - !30087 [CVEAgent@OLK-6.6] Fix CVE-2026-99031 - !30100 [CVEAgent@OLK-6.6] Fix CVE-2026-99071 - !30101 [CVEAgent@OLK-6.6] Fix CVE-2026-99072 - !30102 [CVEAgent@OLK-6.6] Fix CVE-2026-99074 - !30091 [CVEAgent@OLK-6.6] Fix CVE-2026-99041 - !30088 [CVEAgent@OLK-6.6] Fix CVE-2026-99033 - !30043 seg6: ensure packet data is writable before modifying SRH and IPv6 DA - !30197 CVE-2026-98503 - bpf: Mark syscall helpers as sleepable - ub: udma: support dwqe with a few wqebbs - ub: udma: solving internal code review issues - seg6: ensure packet data is writable before modifying SRH and IPv6 DA - igmp: fix kabi breakage of struct ip_sf_list - packet: use ubuf_info completion for TX_RING packets - virtio_net: copy zerocopy frags in start_xmit without NAPI - igmp: convert struct ip_sf_list to RCU - ipv4: stop PMTU walk when nexthop group shrinks - ipv4: stop route notification sizing when nexthop group shrinks - ipv4: do not warn on route notification size race - ipv6: do not warn on route notification size race - ip6_gre: remove obsolete ERSPAN PMTU update - net/packet: guard the ll header push in packet_rcv_spkt() - net: bridge: avoid recursive multicast port cleanup - bonding: fix the program leak when XDP is replaced - !30029 CODEOWNERS: add kernel module ownership rules - !30291 [OLK-6.6] mm/swapfile: reject duplicated bad pages in swap header - !30201 filescgroup: migrate files resources of every task, not just the first - !30306 Fix CVE-2026-98799 - bpf: Fix kabi breakage in struct bpf_tramp_image and bpf_trampoline - bpf: Skip detached progs in trampoline images that are still in use - mm/swapfile: reject duplicated bad pages in swap header - filescgroup: migrate files resources of every task, not just the first - scripts: add get_codeowner.py to look up CODEOWNERS owners - CODEOWNERS: add kernel module ownership rules - !30256 [Backport] ext4: defer unwritten splitting until I/O completion - !30394 urma: Fix the assignment before null check - !30003 [CVEAgent@OLK-6.6] Fix CVE-2026-98831 - !29516 [CVEAgent@OLK-6.6] Fix CVE-2026-98198 - !30220 drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - !30082 [CVEAgent@OLK-6.6] Fix CVE-2026-99012 - !30071 [CVEAgent@OLK-6.6] Fix CVE-2026-98983 - !30262 [CVEAgent] Fix CVE-2026-99091 - !30294 Fix CVE-2026-99011 - !30293 Fix CVE-2026-99008 - !30290 Fix CVE-2026-98663 - !30289 Fix CVE-2026-98664 - !30288 Fix CVE-2026-98666 - !30234 [PATCH 00/11] KVM: arm64: pvm: Add software VGICv3 and virtual timer support - ext4: prevent sleeping allocation in NOWAIT write path - !30367 Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - ext4: remove EXT4_GET_BLOCKS_IO_CREATE_EXT - ext4: simplify the mapping query logic in ext4_iomap_begin() - ext4: skip overwrite check for aligned non-extending DIO writes - ext4: remove unused unwritten parameter in ext4_dio_write_iter() - ext4: remove useless ext4_iomap_overwrite_ops - ext4: avoid starting handle when dio writing an unwritten extent - ext4: don't split extent before submitting I/O - !30233 Fix CVE-2026-98917 - !30235 Fix CVE-2026-98930 - !30368 wifi: mac80211: validate TX status rate metadata - !30378 tty: tty_port: restore TTY_IO_ERROR on activation failure - !30380 tty: port: fix tty_port_tty_vhangup() race - !30371 mtd: core: avoid double-free of OTP NVMEM device - urma: Fix the assignment before null check - !30386 RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - !30270 [OLK-6.6] AMD Venice additional patches for openEuler - !28385 [OLK-6.6] crypto: ccp: fix vpsp cmd ctx leak - !30382 fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - !30365 bpf: Fix out-of-bounds btf->types write for split BTF - fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - !30313 kabi: fix include helpers broken by the predefined 'linux' macro - tty: port: fix tty_port_tty_vhangup() race - tty: tty_port: restore TTY_IO_ERROR on activation failure - mtd: core: avoid double-free of OTP NVMEM device - wifi: mac80211: validate TX status rate metadata - bpf: Fix out-of-bounds btf->types write for split BTF - kabi: fix include helpers broken by the predefined 'linux' macro - KVM: arm64: pvm: Handle counter reads in the hyp path - KVM: arm64: pvm: Trap guest timer accesses and enforce EL0 permissions - KVM: arm64: pvm: Align timer capabilities and counter handling with RV timers - KVM: arm64: pvm: Wire RV timers into the KVM timer entry points - KVM: arm64: pvm: Add the software RV timer implementation - KVM: arm64: pvm: Deliver VGIC interrupts without hardware LRs - KVM: arm64: pvm: Emulate VGIC active priority registers - KVM: arm64: pvm: Route ICC accesses through register descriptors - KVM: arm64: pvm: Emulate the GICv3 CPU interface - KVM: arm64: Handle pending EL1 IRQ exceptions - KVM: arm64: pvm: Constrain virtual interrupt capabilities - Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown - iio: imu: adis16480: fix unprotected debugfs reads - iio: imu: adis16400: fix unprotected debugfs reads - iio: gyro: adis16136: fix unprotected debugfs reads - Bluetooth: MGMT: Fix status of pending commands flushed on power off - EDAC/amd64: Mask UMC chip select to the four implemented selects - x86/mce: Fix hardware debug register corruption on task migration - x86/MCE/AMD: Fix inverted interrupt enablement during storm handling - x86/amd_node: Avoid divide by zero on virtualized systems - RAS/AMD/ATL, EDAC/amd64: Only load ATL when needed - x86/mce: Set up the polling timer before CMCI discovery - x86/mce: Restore MCA polling interval halving - EDAC/amd64: Remove NUM_CONTROLLERS macro - x86/mce/inject: Remove call to mce_notify_irq() - x86/mce: Remove the redundant mce_hygon_feature_init() - x86/mce/threshold: Remove the redundant this_cpu_dec_return() - crypto: ccp: fix vpsp cmd ctx leak - KVM: s390: Fix IRQ injection with SIGP Stop and Store Status - parisc: Increase kernel stack size to 32kb - drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - Bluetooth: ISO: Serialize concurrent connect calls - unshare: don't drop active namespace references that were never taken - of/overlay: don't leak fragment references when changeset init fails - hwmon: (pwm-fan) Stop RPM timer before freeing tach data - !30459 [CVEAgent@OLK-6.6] Fix CVE-2026-99234 - !30468 [CVEAgent@OLK-6.6] Fix CVE-2026-99143 - !30322 urma: fix ipourma eid handler and register work concurrency - !30455 arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30491 [OLK-6.6] AMD Venice additional patches for openEuler - 2 - EDAC/amd64: Avoid a -Wformat-security warning - EDAC/amd64: Generate ctl_name string at runtime - !29993 [CVEAgent@OLK-6.6] Fix CVE-2026-98807 - !29964 [CVEAgent@OLK-6.6] Fix CVE-2026-98747 - !30393 ub/ubmem-vmmu: Remove the support_attr callback mechanism. - !30447 wifi: mac80211: minstrel_ht: validate fixed rate index - !30446 net: ena: fix MMIO read buffer leak on probe failure - tracing: Keep the predicate limit separate from program capacity - !30013 [CVEAgent@OLK-6.6] Fix CVE-2026-98855 - !30431 fix CVE-2026-98490 for OLK-6.6 - !30425 fix CVE-2026-98722 for OLK-6.6 - !30410 nvdimm: pmem: keep PREFLUSH before data writes - !30406 Fix CVE-2026-97480 for OLK-6.6 - !30204 x86/cpu/hygon: Report S5 reset status during boot - tracing: Unregister field variable histograms when the command fails - !30395 tty: fix saved termios reset race - arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30031 drm/amdkfd: fix SMI event cross-process information leak - wifi: mac80211: minstrel_ht: validate fixed rate index - net: ena: fix MMIO read buffer leak on probe failure - net: openvswitch: conntrack: fix helper UAF due to extensions realloc - net: openvswitch: conntrack: remove 'add_helper' dead code - openvswitch: prepare for stolen verdict coming from conntrack and nat engine - net/sched: act_ct: avoid modifying shared unconfirmed ct entry - net/sched: act_ct: fix helper UAF due to extensions realloc - ub/ubmem-vmmu: Remove the support_attr callback mechanism. - mtd: block2mtd: Fix divide error when erase_size is zero - block2mtd: prevent direct access of bd_inode - nvdimm: pmem: keep PREFLUSH before data writes - tty: serial: 8250: protect against NULL uart->port.dev in register - serial: 8250: invert serial8250_register_8250_port() CIR condition - urma: fix ipourma eid handler and register work concurrency - tty: fix saved termios reset race - x86/cpu/hygon: Report S5 reset status during boot - drm/amdkfd: fix SMI event cross-process information leak - of/overlay: put property on deadprops only after changeset add succeeds - net/mlx5: Fix slab-out-of-bounds when handling team device events - serial: core: fix NULL pointer dereference in serial_core_unregister_port() - !30553 tracing: Reject incomplete event filter expressions - !30498 nfsd: split nfsd4_copy into transient and durable async copy objects - !30000 [CVEAgent@OLK-6.6] Fix CVE-2026-98822 - !30497 cdma: ratelimit hot-path error logs in kernel driver and header file code synchronization - tracing: Reject incomplete event filter expressions - !30546 [OLK-6.6] ub: fix UBASE port reporting and UNIC reset and DMA handling - !30481 [CVEAgent@OLK-6.6] Fix CVE-2026-99080 - !30483 [CVEAgent@OLK-6.6] Fix CVE-2026-99206 - !30388 Fix CVE-2026-99153 - !30390 Fix CVE-2026-99152 - !30387 Fix CVE-2026-99110 - !30391 Fix CVE-2026-99109 - !30479 [CVEAgent@OLK-6.6] Fix CVE-2026-99254 - !30538 scsi: libsas: Fix SMP IO deadlock during HA resume - !30537 ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30536 scsi: libsas: Add linkrate and sas_addr change detection in rediscover；scsi: libsas: Add sas_ex_phy_to_dev() helper - !30486 [CVEAgent@OLK-6.6] Fix CVE-2026-99247 - !30454 [OLK-6.6] Fix CVE-2026-97566 - !30453 [OLK-6.6] Fix CVE-2026-97432 - !30444 [OLK-6.6] Fix CVE-2026-43234 - !30403 x86/hygon: Fix FPDSS on Hygon - !30269 [OLK-6.6] update rnpvf driver to 1.2.0. - !30155 [OLK-6.6] Fix CVE-2026-74695 - !30153 [OLK-6.6] Fix CVE-2026-72494 - !30149 [OLK-6.6] Fix CVE-2026-74368 - !30092 [CVEAgent@OLK-6.6] Fix CVE-2026-99052 - !30090 [CVEAgent@OLK-6.6] Fix CVE-2026-99040 - !30057 [CVEAgent@OLK-6.6] Fix CVE-2026-98948 - !30086 [CVEAgent@OLK-6.6] Fix CVE-2026-99025 - !30105 [CVEAgent@OLK-6.6] Fix CVE-2026-99078 - !30106 [CVEAgent@OLK-6.6] Fix CVE-2026-99079 - ub: ubase: skip bandwidth queries on next-generation chips - net: unic: Fix TX/RX DMA ordering and cache sync - net: unic: serialize port deactivation with reset - ub: ubase: add ub port events handling and statistics - scsi: libsas: Fix SMP IO deadlock during HA resume - scsi: libsas: Add sas_ex_phy_to_dev() helper - scsi: libsas: Add linkrate and sas_addr change detection in rediscover - !30430 v8 arm64: Allow CPU0 to be nohz_full - ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30300 mm/gup: allow movable memory pinnable - !30487 urma: limit opt buf length in uburma ioctl commands - !29931 [CVEAgent@OLK-6.6] Fix CVE-2026-98570 - nfsd: split nfsd4_copy into transient and durable async copy objects - ub: cdma: header file code synchronization - ub: cdma: ratelimit hot-path error logs in kernel driver - x86: hygon: Fix FPDSS on Hygon - tracing: Do not initialize tracefs work if tracing is disabled - scsi: target: iscsi: Fix race in discovery auth updates - fs: Free any excess xarray nodes in clear_inode() - io_uring: don't flood a cancelling task with task_work - urma: limit opt buf length in uburma ioctl commands - mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 - wifi: iwlwifi: mvm: fix P2P-Device binding handling - team: avoid NETDEV_CHANGEMTU event when unregistering slave - arm64: defconfig: Enable CONFIG_PM_SLEEP_SMP_NONZERO_CPU and CONFIG_ARCH_SUSPEND_NONZERO_CPU - arm64: Allow boot CPU nohz_full to coexist with suspend and kexec - isolation: Check whether there exists a housekeeping CPU online - isolation: Do not check whether housekeeping CPUs are present - smb: client: reject SetEA requests that do not fit the request buffer - scsi: libiscsi: Validate the task named by a management response - scsi: libiscsi: Validate the ITT reflected in a Reject PDU - smb: client: fix heap overflow in cifs_do_set_acl() - rnpvf: update rnpvf driver to 1.2.0. - mm/gup: allow movable memory pinnable - rnpvf: update rnpvf driver to 1.2.0. - netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() - RDMA/irdma: Replace waitqueue and flag with completion - wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() - net/mlx5e: Prevent stale XSK buffer release on refill retry - net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry - selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts - KEYS: Fix add_key() race with keyring restriction - openvswitch: fix soft lockup in the netlink flow dump - mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() - wifi: mac80211: prevent AP VLAN tx from other interfaces - net: ipv6: keep room for the mac header in dst_dev_overhead() - !30530 [CVEAgent@OLK-6.6] Fix CVE-2026-99163 - !30532 [CVEAgent@OLK-6.6] Fix CVE-2026-99235 - !29765 Fix CVE-2026-98289 - !30230 Fix CVE-2026-97615 - !29790 Fix CVE-2026-93250 - !30510 [CVEAgent@OLK-6.6] Fix CVE-2026-99005 - !30506 [CVEAgent@OLK-6.6] Fix CVE-2026-98871 - !30307 feat/obmm-unified-switch-split-v4 - !30064 [CVEAgent@OLK-6.6] Fix CVE-2026-98972 - !30507 [CVEAgent@OLK-6.6] Fix CVE-2026-98883 - !30450 BBML3 bugfix - !30156 [OLK-6.6] Fix CVE-2026-68258 - !30154 [OLK-6.6] Fix CVE-2026-74729 - !30151 [OLK-6.6] Fix CVE-2026-74273 - !27793 [OLK-6.6] Fix CVE-2026-68421 - !27512 [OLK-6.6] Fix CVE-2026-64259 - !30146 [OLK-6.6] Fix CVE-2026-53109 - !30575 arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30567 scsi: hisi_sas: Clear PHY error counts on phyup - arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30472 [CVEAgent@OLK-6.6] Fix CVE-2026-99243 - scsi: hisi_sas: Clear PHY error counts on phyup - scsi:hisi_sas:Sync upstream timer_delete API changes in hisi_sas_v3_hw.c - tracing: Save the event file instead of the compatible histogram - tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields - drm/i915/gt: Unmask interrupts only when ACTIVE is true - serial: 8250_port: recognize UPIO_AU - crypto: ccp - Fix possible deadlock in SEV init failure path - obmm: pack the internal structs by field ordering - obmm: sysfs views over the switch: attributes, identity, lockless reads - obmm: generalized dual-backend gap mmap - obmm: export switch target wrap-up and validation consolidation - obmm: unified two-phase switch core (import target) - obmm: install mappings lazily from the backend fault paths - obmm: fix the pxm bound, the open TOCTOU and the teardown release - obmm: split the region shell from the memory backends - obmm: depend on TRANSPARENT_HUGEPAGE for the PMD fault paths - io-wq: order the exit bit against worker creation task work - mm/pfn_range_alloc: split block mappings in linear map updates - arm64/mm: make pte_present() recognize present-invalid entries - net: bridge: use option bits for CFM/MRP frame handlers - drm/amdkfd: Check bounds on CRIU restore queue type and mqd size - soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read - cxl/region: Block region delete during region creation - powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy - cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() - vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() - af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). - sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() - fuse-uring: make a fuse_req on SQE commit only findable after memcpy - !30591 [CVEAgent@OLK-6.6] Fix CVE-2026-99142 - !30590 [CVEAgent@OLK-6.6] Fix CVE-2026-99219 - !30594 [CVEAgent@OLK-6.6] Fix CVE-2026-99233 - !30600 urma: warn on slow TP driver callbacks - urma: warn on slow TP driver callbacks - tracing/histograms: Verify event_call identity when updating synth_event refcount - tracing: Check operator stack capacity before pushing - ftrace: Initialize modname and offset in print_rec() - !30602 [CVEAgent@OLK-6.6] Fix CVE-2026-99117 - !30605 [CVEAgent@OLK-6.6] Fix CVE-2026-99211 - !30604 [CVEAgent@OLK-6.6] Fix CVE-2026-99201 - netlink: reset skb headers before unicast and multicast filtering - netlink: avoid hashing the network namespace pointer - net: bridge: mcast: don't truncate the port group walk on teardown - !30597 [CVEAgent@OLK-6.6] Fix CVE-2026-99239 - !30582 v5 MOC bypass cache - !30610 iommu/io-pgtable-arm: Add support for contiguous hint - !30523 drivers:misc:sdma-dae: Open source sdma-dae driver to OLK-6.6 (already supported on olk-5.10) - !28122 [CVEAgent@OLK-6.6] Fix CVE-2026-89802 - !29350 [CVEAgent@OLK-6.6] Fix CVE-2026-97988 - !30473 Fix CVE-2026-97992 - !30150 [OLK-6.6] Fix CVE-2026-74527 - !30576 net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - !30544 [OLK-6.6] Fix CVE-2026-90057 - !30476 [OLK-6.6] fix CVE-2026-98936 - !30474 [OLK-6.6] fix CVE-2026-99059 - !30144 [OLK-6.6] Fix CVE-2026-64190 - !30311 [OLK-6.6]nser: add support for wangxun RDMA driver - iommu/io-pgtable-arm: Add support for contiguous hint - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn - openeuler: configs: arm64: Enable PBHA by default - arm64: mm: Introduce kernel param pbha - arm64: mm: Introduce prctl to control pbha behavior - arm64: mm: Set flag VM_PBHA_BIT0 for global init task - arm64: mm: Introduce procfs interface to update PBHA0 bit - arm64: mm: Set PBHA0 bit for VM_PBHA_BIT0 - arm64: mm: Introduce VM_PBHA_BIT0 to enable pbha bit0 for single vma - arm64: mm: Show PBHA bit 59 as PBHA0 in ptdump - arm64: mm: Update kernel pte entries if pbha bit0 enabled - arm64: mm: Detect and enable PBHA bit0 at early startup - arm64: cpufeature: Enable PBHA for stage1 early via FDT - Documentation: arm64: Describe the support and expectations for PBHA - KVM: arm64: Configure PBHA bits for stage2 - arm64: mm: Add pgprot_pbha() to allow drivers to request PBHA values - arm64: cpufeature: Enable PBHA bits for stage1 - dt-bindings: arm: Add binding for Page Based Hardware Attributes - dt-bindings: Rename the description of cpu nodes cpu.yaml - KVM: arm64: Detect and enable PBHA for stage2 - net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() - drivers:misc:sdma-dae: adapt driver interfaces for OLK-6.6 - net: team: fix NULL pointer dereference in team_xmit during mode change - net: team: Rename port_disabled team mode op to port_tx_disabled - net: team: Remove unused team_mode_op, port_enabled - wifi: ath11k: reset ar->num_stations on hardware start - wireguard: noise: reject response consumption after intermediate initiation - vhost-vdpa: protect config_ctx from being freed under the config callback - x86/arm64: config: enable the Wangxun nser RDMA driver - net: wangxun: nser: add RDMA support for 100GbE NICs - octeontx2-af: Block VFs from clobbering special CGX PKIND state - vhost: invalidate vring access on IOTLB transitions - drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op - drivers:misc:sdma-dae: Remove redundant print during mm exit and resume. - drivers:misc:sdma-dae: Revert optimize kernel code - drivers:misc:sdma-dae: Revert add channel depth info in debugfs - drivers:misc:sdma-dae: Revert Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Remove interference print. - drivers:misc:sdma-dae: Checking the address alignment - drivers:misc:sdma-dae: add NULL judgement of global variables - drivers:misc:sdma-dae: add channel depth info in debugfs - drivers:misc:sdma-dae: optimize kernel code - drivers:misc:sdma-dae: fix incorrect debugfs print - drivers:misc:sdma-dae: sdma fix uncorrect sleep time - drivers:misc:sdma-dae: fix incorrect kmalloc flag - drivers:misc:sdma-dae: sdma fix PUAF problem fork risk - drivers:misc:sdma-dae: modify ttl_processes reduce logic - drivers:misc:sdma-dae: remove unnecessary return in void function - drivers:misc:sdma-dae: fix incorrect resource release - drivers:misc:sdma-dae: remove lock while pausing channels - drivers:misc:sdma-dae: add mmu_notifier - drivers:misc:sdma-dae: add MODULE_VERSION to control version - drivers:misc:sdma-dae: add print in exceptional branch - drivers:misc:sdma-dae: bugfix of channel operation - drivers:misc:sdma-dae: change authority of sdma device - drivers:misc:sdma-dae: add channel ida validation - drivers:misc:sdma-dae: add vma_ops to avoid mremap error - drivers:misc:sdma-dae: add fast mode - drivers:misc:sdma-dae: not expose sq_tail write and add validation of cq_head - drivers:misc:sdma-dae: add debugfs of sdma-dae - drivers:misc:sdma-dae: fix icsl code check problems - drivers:misc:sdma-dae: fix input validate problems - drivers:misc:sdma-dae: fix interrupt handle logic - drivers:misc:sdma-dae: not compile sdma-dae by default - drivers:misc:sdma-dae: enable sdma_dae for arm64 - drivers:misc:sdma-dae: support page fault preprocess - drivers:misc:sdma-dae: support interrupt init and handle - drivers:misc:sdma-dae: support sqe task send and execute - drivers:misc:sdma-dae: support channel management - drivers:misc:sdma-dae: support getting streamID - drivers:misc:sdma-dae: support initializ sdma driver - !30253 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - !29554 [CVEAgent@OLK-6.6] Fix CVE-2026-98286 - !30263 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - !30258 v10 net: dynthread: dynamic threaded NAPI - !30208 Fix CVE-2026-98044 - !30280 bpf: Make post-verification instruction rewrites killable - !30184 blk-mq: set RQF_USE_SCHED when the operation is known - !30267 sched/fair: Avoid overflow in place_entity() - !30236 configfs: unhash the dentry before dropping the item in rmdir - !30276 virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - !29584 [CVEAgent@OLK-6.6] Fix CVE-2026-98364 - !29906 [CVEAgent@OLK-6.6] Fix CVE-2026-98443 - !30046 net: cap skb->queue_mapping when the tx queue is picked - !30223 bpf: Reject pkt arguments in mutating subprogs - !29932 [CVEAgent@OLK-6.6] Fix CVE-2026-98598 - !30044 net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - bpf: Make post-verification instruction rewrites killable - virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - RDMA/umem: avoid ib_umem_find_best_pgsz ABI breakage - sched/fair: Avoid overflow in place_entity() - RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - net: dynthread: Add debug switch and instrumentation - net: dynthread: Scale the number of NAPI thread CPUs - net: dynthread: Switch NAPI to threads on spare CPUs - net: dynthread: Steer the RX queue IRQs away from the target tasks - net: dynthread: Monitor the load of the target tasks - net: dynthread: Add dynamic threaded NAPI scheduler framework - net/mlx5e: Do not block on RTNL while recovering an SQ - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover - net/mlx5e: Acquire RTNL lock before RQs/SQs activation/deactivation - net/mlx5e: link NAPI instances to queues and IRQs - net: Fix napi irq KABI breakage - net: Add NAPI IRQ support - net: Fix KABI breakage for queue napi association - net: Add queue and napi association - neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - configfs: unhash the dentry before dropping the item in rmdir - bpf: Reject pkt arguments in mutating subprogs - bpf: Fix kabi breakage in struct bpf_subprog_info - bpf: Reject legacy packet loads from callbacks - blk-mq: set RQF_USE_SCHED when the operation is known - net: cap skb->queue_mapping when the tx queue is picked - net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - ipv6: Prevent rt6_insert_exception() for dying fib6_info. - xfs: fix cursor and pointer handling when recovering iunlink buckets - xfrm: hold net_device reference under RCU in bundle creation - drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown - !30268 ub: udma: solving internal code review issues - !30305 bpf: Mark syscall helpers as sleepable - !30113 fix/CVE-2026-98103 - !30061 [CVEAgent@OLK-6.6] Fix CVE-2026-98966 - !30099 [CVEAgent@OLK-6.6] Fix CVE-2026-99070 - !30087 [CVEAgent@OLK-6.6] Fix CVE-2026-99031 - !30100 [CVEAgent@OLK-6.6] Fix CVE-2026-99071 - !30101 [CVEAgent@OLK-6.6] Fix CVE-2026-99072 - !30102 [CVEAgent@OLK-6.6] Fix CVE-2026-99074 - !30091 [CVEAgent@OLK-6.6] Fix CVE-2026-99041 - !30088 [CVEAgent@OLK-6.6] Fix CVE-2026-99033 - !30043 seg6: ensure packet data is writable before modifying SRH and IPv6 DA - !30197 CVE-2026-98503 - bpf: Mark syscall helpers as sleepable - ub: udma: support dwqe with a few wqebbs - ub: udma: solving internal code review issues - seg6: ensure packet data is writable before modifying SRH and IPv6 DA - igmp: fix kabi breakage of struct ip_sf_list - packet: use ubuf_info completion for TX_RING packets - virtio_net: copy zerocopy frags in start_xmit without NAPI - igmp: convert struct ip_sf_list to RCU - ipv4: stop PMTU walk when nexthop group shrinks - ipv4: stop route notification sizing when nexthop group shrinks - ipv4: do not warn on route notification size race - ipv6: do not warn on route notification size race - ip6_gre: remove obsolete ERSPAN PMTU update - net/packet: guard the ll header push in packet_rcv_spkt() - net: bridge: avoid recursive multicast port cleanup - bonding: fix the program leak when XDP is replaced - !30029 CODEOWNERS: add kernel module ownership rules - !30291 [OLK-6.6] mm/swapfile: reject duplicated bad pages in swap header - !30201 filescgroup: migrate files resources of every task, not just the first - !30306 Fix CVE-2026-98799 - bpf: Fix kabi breakage in struct bpf_tramp_image and bpf_trampoline - bpf: Skip detached progs in trampoline images that are still in use - mm/swapfile: reject duplicated bad pages in swap header - filescgroup: migrate files resources of every task, not just the first - scripts: add get_codeowner.py to look up CODEOWNERS owners - CODEOWNERS: add kernel module ownership rules - !30256 [Backport] ext4: defer unwritten splitting until I/O completion - !30394 urma: Fix the assignment before null check - !30003 [CVEAgent@OLK-6.6] Fix CVE-2026-98831 - !29516 [CVEAgent@OLK-6.6] Fix CVE-2026-98198 - !30220 drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - !30082 [CVEAgent@OLK-6.6] Fix CVE-2026-99012 - !30071 [CVEAgent@OLK-6.6] Fix CVE-2026-98983 - !30262 [CVEAgent] Fix CVE-2026-99091 - !30294 Fix CVE-2026-99011 - !30293 Fix CVE-2026-99008 - !30290 Fix CVE-2026-98663 - !30289 Fix CVE-2026-98664 - !30288 Fix CVE-2026-98666 - !30234 [PATCH 00/11] KVM: arm64: pvm: Add software VGICv3 and virtual timer support - ext4: prevent sleeping allocation in NOWAIT write path - !30367 Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - ext4: remove EXT4_GET_BLOCKS_IO_CREATE_EXT - ext4: simplify the mapping query logic in ext4_iomap_begin() - ext4: skip overwrite check for aligned non-extending DIO writes - ext4: remove unused unwritten parameter in ext4_dio_write_iter() - ext4: remove useless ext4_iomap_overwrite_ops - ext4: avoid starting handle when dio writing an unwritten extent - ext4: don't split extent before submitting I/O - !30233 Fix CVE-2026-98917 - !30235 Fix CVE-2026-98930 - !30368 wifi: mac80211: validate TX status rate metadata - !30378 tty: tty_port: restore TTY_IO_ERROR on activation failure - !30380 tty: port: fix tty_port_tty_vhangup() race - !30371 mtd: core: avoid double-free of OTP NVMEM device - urma: Fix the assignment before null check - !30386 RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - !30270 [OLK-6.6] AMD Venice additional patches for openEuler - !28385 [OLK-6.6] crypto: ccp: fix vpsp cmd ctx leak - !30382 fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - !30365 bpf: Fix out-of-bounds btf->types write for split BTF - fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - !30313 kabi: fix include helpers broken by the predefined 'linux' macro - tty: port: fix tty_port_tty_vhangup() race - tty: tty_port: restore TTY_IO_ERROR on activation failure - mtd: core: avoid double-free of OTP NVMEM device - wifi: mac80211: validate TX status rate metadata - bpf: Fix out-of-bounds btf->types write for split BTF - kabi: fix include helpers broken by the predefined 'linux' macro - KVM: arm64: pvm: Handle counter reads in the hyp path - KVM: arm64: pvm: Trap guest timer accesses and enforce EL0 permissions - KVM: arm64: pvm: Align timer capabilities and counter handling with RV timers - KVM: arm64: pvm: Wire RV timers into the KVM timer entry points - KVM: arm64: pvm: Add the software RV timer implementation - KVM: arm64: pvm: Deliver VGIC interrupts without hardware LRs - KVM: arm64: pvm: Emulate VGIC active priority registers - KVM: arm64: pvm: Route ICC accesses through register descriptors - KVM: arm64: pvm: Emulate the GICv3 CPU interface - KVM: arm64: Handle pending EL1 IRQ exceptions - KVM: arm64: pvm: Constrain virtual interrupt capabilities - Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown - iio: imu: adis16480: fix unprotected debugfs reads - iio: imu: adis16400: fix unprotected debugfs reads - iio: gyro: adis16136: fix unprotected debugfs reads - Bluetooth: MGMT: Fix status of pending commands flushed on power off - EDAC/amd64: Mask UMC chip select to the four implemented selects - x86/mce: Fix hardware debug register corruption on task migration - x86/MCE/AMD: Fix inverted interrupt enablement during storm handling - x86/amd_node: Avoid divide by zero on virtualized systems - RAS/AMD/ATL, EDAC/amd64: Only load ATL when needed - x86/mce: Set up the polling timer before CMCI discovery - x86/mce: Restore MCA polling interval halving - EDAC/amd64: Remove NUM_CONTROLLERS macro - x86/mce/inject: Remove call to mce_notify_irq() - x86/mce: Remove the redundant mce_hygon_feature_init() - x86/mce/threshold: Remove the redundant this_cpu_dec_return() - crypto: ccp: fix vpsp cmd ctx leak - KVM: s390: Fix IRQ injection with SIGP Stop and Store Status - parisc: Increase kernel stack size to 32kb - drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - Bluetooth: ISO: Serialize concurrent connect calls - unshare: don't drop active namespace references that were never taken - of/overlay: don't leak fragment references when changeset init fails - hwmon: (pwm-fan) Stop RPM timer before freeing tach data - !30459 [CVEAgent@OLK-6.6] Fix CVE-2026-99234 - !30468 [CVEAgent@OLK-6.6] Fix CVE-2026-99143 - !30322 urma: fix ipourma eid handler and register work concurrency - !30455 arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30491 [OLK-6.6] AMD Venice additional patches for openEuler - 2 - EDAC/amd64: Avoid a -Wformat-security warning - EDAC/amd64: Generate ctl_name string at runtime - !29993 [CVEAgent@OLK-6.6] Fix CVE-2026-98807 - !29964 [CVEAgent@OLK-6.6] Fix CVE-2026-98747 - !30393 ub/ubmem-vmmu: Remove the support_attr callback mechanism. - !30447 wifi: mac80211: minstrel_ht: validate fixed rate index - !30446 net: ena: fix MMIO read buffer leak on probe failure - tracing: Keep the predicate limit separate from program capacity - !30013 [CVEAgent@OLK-6.6] Fix CVE-2026-98855 - !30431 fix CVE-2026-98490 for OLK-6.6 - !30425 fix CVE-2026-98722 for OLK-6.6 - !30410 nvdimm: pmem: keep PREFLUSH before data writes - !30406 Fix CVE-2026-97480 for OLK-6.6 - !30204 x86/cpu/hygon: Report S5 reset status during boot - tracing: Unregister field variable histograms when the command fails - !30395 tty: fix saved termios reset race - arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30031 drm/amdkfd: fix SMI event cross-process information leak - wifi: mac80211: minstrel_ht: validate fixed rate index - net: ena: fix MMIO read buffer leak on probe failure - net: openvswitch: conntrack: fix helper UAF due to extensions realloc - net: openvswitch: conntrack: remove 'add_helper' dead code - openvswitch: prepare for stolen verdict coming from conntrack and nat engine - net/sched: act_ct: avoid modifying shared unconfirmed ct entry - net/sched: act_ct: fix helper UAF due to extensions realloc - ub/ubmem-vmmu: Remove the support_attr callback mechanism. - mtd: block2mtd: Fix divide error when erase_size is zero - block2mtd: prevent direct access of bd_inode - nvdimm: pmem: keep PREFLUSH before data writes - tty: serial: 8250: protect against NULL uart->port.dev in register - serial: 8250: invert serial8250_register_8250_port() CIR condition - urma: fix ipourma eid handler and register work concurrency - tty: fix saved termios reset race - x86/cpu/hygon: Report S5 reset status during boot - drm/amdkfd: fix SMI event cross-process information leak - of/overlay: put property on deadprops only after changeset add succeeds - net/mlx5: Fix slab-out-of-bounds when handling team device events - serial: core: fix NULL pointer dereference in serial_core_unregister_port() - !30553 tracing: Reject incomplete event filter expressions - !30498 nfsd: split nfsd4_copy into transient and durable async copy objects - !30000 [CVEAgent@OLK-6.6] Fix CVE-2026-98822 - !30497 cdma: ratelimit hot-path error logs in kernel driver and header file code synchronization - tracing: Reject incomplete event filter expressions - !30546 [OLK-6.6] ub: fix UBASE port reporting and UNIC reset and DMA handling - !30481 [CVEAgent@OLK-6.6] Fix CVE-2026-99080 - !30483 [CVEAgent@OLK-6.6] Fix CVE-2026-99206 - !30388 Fix CVE-2026-99153 - !30390 Fix CVE-2026-99152 - !30387 Fix CVE-2026-99110 - !30391 Fix CVE-2026-99109 - !30479 [CVEAgent@OLK-6.6] Fix CVE-2026-99254 - !30538 scsi: libsas: Fix SMP IO deadlock during HA resume - !30537 ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30536 scsi: libsas: Add linkrate and sas_addr change detection in rediscover；scsi: libsas: Add sas_ex_phy_to_dev() helper - !30486 [CVEAgent@OLK-6.6] Fix CVE-2026-99247 - !30454 [OLK-6.6] Fix CVE-2026-97566 - !30453 [OLK-6.6] Fix CVE-2026-97432 - !30444 [OLK-6.6] Fix CVE-2026-43234 - !30403 x86/hygon: Fix FPDSS on Hygon - !30269 [OLK-6.6] update rnpvf driver to 1.2.0. - !30155 [OLK-6.6] Fix CVE-2026-74695 - !30153 [OLK-6.6] Fix CVE-2026-72494 - !30149 [OLK-6.6] Fix CVE-2026-74368 - !30092 [CVEAgent@OLK-6.6] Fix CVE-2026-99052 - !30090 [CVEAgent@OLK-6.6] Fix CVE-2026-99040 - !30057 [CVEAgent@OLK-6.6] Fix CVE-2026-98948 - !30086 [CVEAgent@OLK-6.6] Fix CVE-2026-99025 - !30105 [CVEAgent@OLK-6.6] Fix CVE-2026-99078 - !30106 [CVEAgent@OLK-6.6] Fix CVE-2026-99079 - ub: ubase: skip bandwidth queries on next-generation chips - net: unic: Fix TX/RX DMA ordering and cache sync - net: unic: serialize port deactivation with reset - ub: ubase: add ub port events handling and statistics - scsi: libsas: Fix SMP IO deadlock during HA resume - scsi: libsas: Add sas_ex_phy_to_dev() helper - scsi: libsas: Add linkrate and sas_addr change detection in rediscover - !30430 v8 arm64: Allow CPU0 to be nohz_full - ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30300 mm/gup: allow movable memory pinnable - !30487 urma: limit opt buf length in uburma ioctl commands - !29931 [CVEAgent@OLK-6.6] Fix CVE-2026-98570 - nfsd: split nfsd4_copy into transient and durable async copy objects - ub: cdma: header file code synchronization - ub: cdma: ratelimit hot-path error logs in kernel driver - x86: hygon: Fix FPDSS on Hygon - tracing: Do not initialize tracefs work if tracing is disabled - scsi: target: iscsi: Fix race in discovery auth updates - fs: Free any excess xarray nodes in clear_inode() - io_uring: don't flood a cancelling task with task_work - urma: limit opt buf length in uburma ioctl commands - mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 - wifi: iwlwifi: mvm: fix P2P-Device binding handling - team: avoid NETDEV_CHANGEMTU event when unregistering slave - arm64: defconfig: Enable CONFIG_PM_SLEEP_SMP_NONZERO_CPU and CONFIG_ARCH_SUSPEND_NONZERO_CPU - arm64: Allow boot CPU nohz_full to coexist with suspend and kexec - isolation: Check whether there exists a housekeeping CPU online - isolation: Do not check whether housekeeping CPUs are present - smb: client: reject SetEA requests that do not fit the request buffer - scsi: libiscsi: Validate the task named by a management response - scsi: libiscsi: Validate the ITT reflected in a Reject PDU - smb: client: fix heap overflow in cifs_do_set_acl() - rnpvf: update rnpvf driver to 1.2.0. - mm/gup: allow movable memory pinnable - rnpvf: update rnpvf driver to 1.2.0. - netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() - RDMA/irdma: Replace waitqueue and flag with completion - wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() - net/mlx5e: Prevent stale XSK buffer release on refill retry - net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry - selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts - KEYS: Fix add_key() race with keyring restriction - openvswitch: fix soft lockup in the netlink flow dump - mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() - wifi: mac80211: prevent AP VLAN tx from other interfaces - net: ipv6: keep room for the mac header in dst_dev_overhead() - !30530 [CVEAgent@OLK-6.6] Fix CVE-2026-99163 - !30532 [CVEAgent@OLK-6.6] Fix CVE-2026-99235 - !29765 Fix CVE-2026-98289 - !30230 Fix CVE-2026-97615 - !29790 Fix CVE-2026-93250 - !30510 [CVEAgent@OLK-6.6] Fix CVE-2026-99005 - !30506 [CVEAgent@OLK-6.6] Fix CVE-2026-98871 - !30307 feat/obmm-unified-switch-split-v4 - !30064 [CVEAgent@OLK-6.6] Fix CVE-2026-98972 - !30507 [CVEAgent@OLK-6.6] Fix CVE-2026-98883 - !30450 BBML3 bugfix - !30156 [OLK-6.6] Fix CVE-2026-68258 - !30154 [OLK-6.6] Fix CVE-2026-74729 - !30151 [OLK-6.6] Fix CVE-2026-74273 - !27793 [OLK-6.6] Fix CVE-2026-68421 - !27512 [OLK-6.6] Fix CVE-2026-64259 - !30146 [OLK-6.6] Fix CVE-2026-53109 - !30575 arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30567 scsi: hisi_sas: Clear PHY error counts on phyup - arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30472 [CVEAgent@OLK-6.6] Fix CVE-2026-99243 - scsi: hisi_sas: Clear PHY error counts on phyup - scsi:hisi_sas:Sync upstream timer_delete API changes in hisi_sas_v3_hw.c - tracing: Save the event file instead of the compatible histogram - tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields - drm/i915/gt: Unmask interrupts only when ACTIVE is true - serial: 8250_port: recognize UPIO_AU - crypto: ccp - Fix possible deadlock in SEV init failure path - obmm: pack the internal structs by field ordering - obmm: sysfs views over the switch: attributes, identity, lockless reads - obmm: generalized dual-backend gap mmap - obmm: export switch target wrap-up and validation consolidation - obmm: unified two-phase switch core (import target) - obmm: install mappings lazily from the backend fault paths - obmm: fix the pxm bound, the open TOCTOU and the teardown release - obmm: split the region shell from the memory backends - obmm: depend on TRANSPARENT_HUGEPAGE for the PMD fault paths - io-wq: order the exit bit against worker creation task work - mm/pfn_range_alloc: split block mappings in linear map updates - arm64/mm: make pte_present() recognize present-invalid entries - net: bridge: use option bits for CFM/MRP frame handlers - drm/amdkfd: Check bounds on CRIU restore queue type and mqd size - soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read - cxl/region: Block region delete during region creation - powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy - cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() - vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() - af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). - sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() - fuse-uring: make a fuse_req on SQE commit only findable after memcpy - !30591 [CVEAgent@OLK-6.6] Fix CVE-2026-99142 - !30590 [CVEAgent@OLK-6.6] Fix CVE-2026-99219 - !30594 [CVEAgent@OLK-6.6] Fix CVE-2026-99233 - !30600 urma: warn on slow TP driver callbacks - urma: warn on slow TP driver callbacks - tracing/histograms: Verify event_call identity when updating synth_event refcount - tracing: Check operator stack capacity before pushing - ftrace: Initialize modname and offset in print_rec() - !30602 [CVEAgent@OLK-6.6] Fix CVE-2026-99117 - !30605 [CVEAgent@OLK-6.6] Fix CVE-2026-99211 - !30604 [CVEAgent@OLK-6.6] Fix CVE-2026-99201 - netlink: reset skb headers before unicast and multicast filtering - netlink: avoid hashing the network namespace pointer - net: bridge: mcast: don't truncate the port group walk on teardown - !30597 [CVEAgent@OLK-6.6] Fix CVE-2026-99239 - !30582 v5 MOC bypass cache - !30610 iommu/io-pgtable-arm: Add support for contiguous hint - !30523 drivers:misc:sdma-dae: Open source sdma-dae driver to OLK-6.6 (already supported on olk-5.10) - !28122 [CVEAgent@OLK-6.6] Fix CVE-2026-89802 - !29350 [CVEAgent@OLK-6.6] Fix CVE-2026-97988 - !30473 Fix CVE-2026-97992 - !30150 [OLK-6.6] Fix CVE-2026-74527 - !30576 net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - !30544 [OLK-6.6] Fix CVE-2026-90057 - !30476 [OLK-6.6] fix CVE-2026-98936 - !30474 [OLK-6.6] fix CVE-2026-99059 - !30144 [OLK-6.6] Fix CVE-2026-64190 - !30311 [OLK-6.6]nser: add support for wangxun RDMA driver - iommu/io-pgtable-arm: Add support for contiguous hint - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn - openeuler: configs: arm64: Enable PBHA by default - arm64: mm: Introduce kernel param pbha - arm64: mm: Introduce prctl to control pbha behavior - arm64: mm: Set flag VM_PBHA_BIT0 for global init task - arm64: mm: Introduce procfs interface to update PBHA0 bit - arm64: mm: Set PBHA0 bit for VM_PBHA_BIT0 - arm64: mm: Introduce VM_PBHA_BIT0 to enable pbha bit0 for single vma - arm64: mm: Show PBHA bit 59 as PBHA0 in ptdump - arm64: mm: Update kernel pte entries if pbha bit0 enabled - arm64: mm: Detect and enable PBHA bit0 at early startup - arm64: cpufeature: Enable PBHA for stage1 early via FDT - Documentation: arm64: Describe the support and expectations for PBHA - KVM: arm64: Configure PBHA bits for stage2 - arm64: mm: Add pgprot_pbha() to allow drivers to request PBHA values - arm64: cpufeature: Enable PBHA bits for stage1 - dt-bindings: arm: Add binding for Page Based Hardware Attributes - dt-bindings: Rename the description of cpu nodes cpu.yaml - KVM: arm64: Detect and enable PBHA for stage2 - net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() - drivers:misc:sdma-dae: adapt driver interfaces for OLK-6.6 - net: team: fix NULL pointer dereference in team_xmit during mode change - net: team: Rename port_disabled team mode op to port_tx_disabled - net: team: Remove unused team_mode_op, port_enabled - wifi: ath11k: reset ar->num_stations on hardware start - wireguard: noise: reject response consumption after intermediate initiation - vhost-vdpa: protect config_ctx from being freed under the config callback - x86/arm64: config: enable the Wangxun nser RDMA driver - net: wangxun: nser: add RDMA support for 100GbE NICs - octeontx2-af: Block VFs from clobbering special CGX PKIND state - vhost: invalidate vring access on IOTLB transitions - drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op - drivers:misc:sdma-dae: Remove redundant print during mm exit and resume. - drivers:misc:sdma-dae: Revert optimize kernel code - drivers:misc:sdma-dae: Revert add channel depth info in debugfs - drivers:misc:sdma-dae: Revert Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Remove interference print. - drivers:misc:sdma-dae: Checking the address alignment - drivers:misc:sdma-dae: add NULL judgement of global variables - drivers:misc:sdma-dae: add channel depth info in debugfs - drivers:misc:sdma-dae: optimize kernel code - drivers:misc:sdma-dae: fix incorrect debugfs print - drivers:misc:sdma-dae: sdma fix uncorrect sleep time - drivers:misc:sdma-dae: fix incorrect kmalloc flag - drivers:misc:sdma-dae: sdma fix PUAF problem fork risk - drivers:misc:sdma-dae: modify ttl_processes reduce logic - drivers:misc:sdma-dae: remove unnecessary return in void function - drivers:misc:sdma-dae: fix incorrect resource release - drivers:misc:sdma-dae: remove lock while pausing channels - drivers:misc:sdma-dae: add mmu_notifier - drivers:misc:sdma-dae: add MODULE_VERSION to control version - drivers:misc:sdma-dae: add print in exceptional branch - drivers:misc:sdma-dae: bugfix of channel operation - drivers:misc:sdma-dae: change authority of sdma device - drivers:misc:sdma-dae: add channel ida validation - drivers:misc:sdma-dae: add vma_ops to avoid mremap error - drivers:misc:sdma-dae: add fast mode - drivers:misc:sdma-dae: not expose sq_tail write and add validation of cq_head - drivers:misc:sdma-dae: add debugfs of sdma-dae - drivers:misc:sdma-dae: fix icsl code check problems - drivers:misc:sdma-dae: fix input validate problems - drivers:misc:sdma-dae: fix interrupt handle logic - drivers:misc:sdma-dae: not compile sdma-dae by default - drivers:misc:sdma-dae: enable sdma_dae for arm64 - drivers:misc:sdma-dae: support page fault preprocess - drivers:misc:sdma-dae: support interrupt init and handle - drivers:misc:sdma-dae: support sqe task send and execute - drivers:misc:sdma-dae: support channel management - drivers:misc:sdma-dae: support getting streamID - drivers:misc:sdma-dae: support initializ sdma driver - !30253 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - !29554 [CVEAgent@OLK-6.6] Fix CVE-2026-98286 - !30263 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - !30258 v10 net: dynthread: dynamic threaded NAPI - !30208 Fix CVE-2026-98044 - !30280 bpf: Make post-verification instruction rewrites killable - !30184 blk-mq: set RQF_USE_SCHED when the operation is known - !30267 sched/fair: Avoid overflow in place_entity() - !30236 configfs: unhash the dentry before dropping the item in rmdir - !30276 virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - !29584 [CVEAgent@OLK-6.6] Fix CVE-2026-98364 - !29906 [CVEAgent@OLK-6.6] Fix CVE-2026-98443 - !30046 net: cap skb->queue_mapping when the tx queue is picked - !30223 bpf: Reject pkt arguments in mutating subprogs - !29932 [CVEAgent@OLK-6.6] Fix CVE-2026-98598 - !30044 net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - bpf: Make post-verification instruction rewrites killable - virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - RDMA/umem: avoid ib_umem_find_best_pgsz ABI breakage - sched/fair: Avoid overflow in place_entity() - RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - net: dynthread: Add debug switch and instrumentation - net: dynthread: Scale the number of NAPI thread CPUs - net: dynthread: Switch NAPI to threads on spare CPUs - net: dynthread: Steer the RX queue IRQs away from the target tasks - net: dynthread: Monitor the load of the target tasks - net: dynthread: Add dynamic threaded NAPI scheduler framework - net/mlx5e: Do not block on RTNL while recovering an SQ - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover - net/mlx5e: Acquire RTNL lock before RQs/SQs activation/deactivation - net/mlx5e: link NAPI instances to queues and IRQs - net: Fix napi irq KABI breakage - net: Add NAPI IRQ support - net: Fix KABI breakage for queue napi association - net: Add queue and napi association - neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - configfs: unhash the dentry before dropping the item in rmdir - bpf: Reject pkt arguments in mutating subprogs - bpf: Fix kabi breakage in struct bpf_subprog_info - bpf: Reject legacy packet loads from callbacks - blk-mq: set RQF_USE_SCHED when the operation is known - net: cap skb->queue_mapping when the tx queue is picked - net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - ipv6: Prevent rt6_insert_exception() for dying fib6_info. - xfs: fix cursor and pointer handling when recovering iunlink buckets - xfrm: hold net_device reference under RCU in bundle creation - drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown - !30268 ub: udma: solving internal code review issues - !30305 bpf: Mark syscall helpers as sleepable - !30113 fix/CVE-2026-98103 - !30061 [CVEAgent@OLK-6.6] Fix CVE-2026-98966 - !30099 [CVEAgent@OLK-6.6] Fix CVE-2026-99070 - !30087 [CVEAgent@OLK-6.6] Fix CVE-2026-99031 - !30100 [CVEAgent@OLK-6.6] Fix CVE-2026-99071 - !30101 [CVEAgent@OLK-6.6] Fix CVE-2026-99072 - !30102 [CVEAgent@OLK-6.6] Fix CVE-2026-99074 - !30091 [CVEAgent@OLK-6.6] Fix CVE-2026-99041 - !30088 [CVEAgent@OLK-6.6] Fix CVE-2026-99033 - !30043 seg6: ensure packet data is writable before modifying SRH and IPv6 DA - !30197 CVE-2026-98503 - bpf: Mark syscall helpers as sleepable - ub: udma: support dwqe with a few wqebbs - ub: udma: solving internal code review issues - seg6: ensure packet data is writable before modifying SRH and IPv6 DA - igmp: fix kabi breakage of struct ip_sf_list - packet: use ubuf_info completion for TX_RING packets - virtio_net: copy zerocopy frags in start_xmit without NAPI - igmp: convert struct ip_sf_list to RCU - ipv4: stop PMTU walk when nexthop group shrinks - ipv4: stop route notification sizing when nexthop group shrinks - ipv4: do not warn on route notification size race - ipv6: do not warn on route notification size race - ip6_gre: remove obsolete ERSPAN PMTU update - net/packet: guard the ll header push in packet_rcv_spkt() - net: bridge: avoid recursive multicast port cleanup - bonding: fix the program leak when XDP is replaced - !30029 CODEOWNERS: add kernel module ownership rules - !30291 [OLK-6.6] mm/swapfile: reject duplicated bad pages in swap header - !30201 filescgroup: migrate files resources of every task, not just the first - !30306 Fix CVE-2026-98799 - bpf: Fix kabi breakage in struct bpf_tramp_image and bpf_trampoline - bpf: Skip detached progs in trampoline images that are still in use - mm/swapfile: reject duplicated bad pages in swap header - filescgroup: migrate files resources of every task, not just the first - scripts: add get_codeowner.py to look up CODEOWNERS owners - CODEOWNERS: add kernel module ownership rules - !30256 [Backport] ext4: defer unwritten splitting until I/O completion - !30394 urma: Fix the assignment before null check - !30003 [CVEAgent@OLK-6.6] Fix CVE-2026-98831 - !29516 [CVEAgent@OLK-6.6] Fix CVE-2026-98198 - !30220 drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - !30082 [CVEAgent@OLK-6.6] Fix CVE-2026-99012 - !30071 [CVEAgent@OLK-6.6] Fix CVE-2026-98983 - !30262 [CVEAgent] Fix CVE-2026-99091 - !30294 Fix CVE-2026-99011 - !30293 Fix CVE-2026-99008 - !30290 Fix CVE-2026-98663 - !30289 Fix CVE-2026-98664 - !30288 Fix CVE-2026-98666 - !30234 [PATCH 00/11] KVM: arm64: pvm: Add software VGICv3 and virtual timer support - ext4: prevent sleeping allocation in NOWAIT write path - !30367 Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - ext4: remove EXT4_GET_BLOCKS_IO_CREATE_EXT - ext4: simplify the mapping query logic in ext4_iomap_begin() - ext4: skip overwrite check for aligned non-extending DIO writes - ext4: remove unused unwritten parameter in ext4_dio_write_iter() - ext4: remove useless ext4_iomap_overwrite_ops - ext4: avoid starting handle when dio writing an unwritten extent - ext4: don't split extent before submitting I/O - !30233 Fix CVE-2026-98917 - !30235 Fix CVE-2026-98930 - !30368 wifi: mac80211: validate TX status rate metadata - !30378 tty: tty_port: restore TTY_IO_ERROR on activation failure - !30380 tty: port: fix tty_port_tty_vhangup() race - !30371 mtd: core: avoid double-free of OTP NVMEM device - urma: Fix the assignment before null check - !30386 RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - !30270 [OLK-6.6] AMD Venice additional patches for openEuler - !28385 [OLK-6.6] crypto: ccp: fix vpsp cmd ctx leak - !30382 fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - !30365 bpf: Fix out-of-bounds btf->types write for split BTF - fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - !30313 kabi: fix include helpers broken by the predefined 'linux' macro - tty: port: fix tty_port_tty_vhangup() race - tty: tty_port: restore TTY_IO_ERROR on activation failure - mtd: core: avoid double-free of OTP NVMEM device - wifi: mac80211: validate TX status rate metadata - bpf: Fix out-of-bounds btf->types write for split BTF - kabi: fix include helpers broken by the predefined 'linux' macro - KVM: arm64: pvm: Handle counter reads in the hyp path - KVM: arm64: pvm: Trap guest timer accesses and enforce EL0 permissions - KVM: arm64: pvm: Align timer capabilities and counter handling with RV timers - KVM: arm64: pvm: Wire RV timers into the KVM timer entry points - KVM: arm64: pvm: Add the software RV timer implementation - KVM: arm64: pvm: Deliver VGIC interrupts without hardware LRs - KVM: arm64: pvm: Emulate VGIC active priority registers - KVM: arm64: pvm: Route ICC accesses through register descriptors - KVM: arm64: pvm: Emulate the GICv3 CPU interface - KVM: arm64: Handle pending EL1 IRQ exceptions - KVM: arm64: pvm: Constrain virtual interrupt capabilities - Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown - iio: imu: adis16480: fix unprotected debugfs reads - iio: imu: adis16400: fix unprotected debugfs reads - iio: gyro: adis16136: fix unprotected debugfs reads - Bluetooth: MGMT: Fix status of pending commands flushed on power off - EDAC/amd64: Mask UMC chip select to the four implemented selects - x86/mce: Fix hardware debug register corruption on task migration - x86/MCE/AMD: Fix inverted interrupt enablement during storm handling - x86/amd_node: Avoid divide by zero on virtualized systems - RAS/AMD/ATL, EDAC/amd64: Only load ATL when needed - x86/mce: Set up the polling timer before CMCI discovery - x86/mce: Restore MCA polling interval halving - EDAC/amd64: Remove NUM_CONTROLLERS macro - x86/mce/inject: Remove call to mce_notify_irq() - x86/mce: Remove the redundant mce_hygon_feature_init() - x86/mce/threshold: Remove the redundant this_cpu_dec_return() - crypto: ccp: fix vpsp cmd ctx leak - KVM: s390: Fix IRQ injection with SIGP Stop and Store Status - parisc: Increase kernel stack size to 32kb - drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - Bluetooth: ISO: Serialize concurrent connect calls - unshare: don't drop active namespace references that were never taken - of/overlay: don't leak fragment references when changeset init fails - hwmon: (pwm-fan) Stop RPM timer before freeing tach data - !30459 [CVEAgent@OLK-6.6] Fix CVE-2026-99234 - !30468 [CVEAgent@OLK-6.6] Fix CVE-2026-99143 - !30322 urma: fix ipourma eid handler and register work concurrency - !30455 arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30491 [OLK-6.6] AMD Venice additional patches for openEuler - 2 - EDAC/amd64: Avoid a -Wformat-security warning - EDAC/amd64: Generate ctl_name string at runtime - !29993 [CVEAgent@OLK-6.6] Fix CVE-2026-98807 - !29964 [CVEAgent@OLK-6.6] Fix CVE-2026-98747 - !30393 ub/ubmem-vmmu: Remove the support_attr callback mechanism. - !30447 wifi: mac80211: minstrel_ht: validate fixed rate index - !30446 net: ena: fix MMIO read buffer leak on probe failure - tracing: Keep the predicate limit separate from program capacity - !30013 [CVEAgent@OLK-6.6] Fix CVE-2026-98855 - !30431 fix CVE-2026-98490 for OLK-6.6 - !30425 fix CVE-2026-98722 for OLK-6.6 - !30410 nvdimm: pmem: keep PREFLUSH before data writes - !30406 Fix CVE-2026-97480 for OLK-6.6 - !30204 x86/cpu/hygon: Report S5 reset status during boot - tracing: Unregister field variable histograms when the command fails - !30395 tty: fix saved termios reset race - arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30031 drm/amdkfd: fix SMI event cross-process information leak - wifi: mac80211: minstrel_ht: validate fixed rate index - net: ena: fix MMIO read buffer leak on probe failure - net: openvswitch: conntrack: fix helper UAF due to extensions realloc - net: openvswitch: conntrack: remove 'add_helper' dead code - openvswitch: prepare for stolen verdict coming from conntrack and nat engine - net/sched: act_ct: avoid modifying shared unconfirmed ct entry - net/sched: act_ct: fix helper UAF due to extensions realloc - ub/ubmem-vmmu: Remove the support_attr callback mechanism. - mtd: block2mtd: Fix divide error when erase_size is zero - block2mtd: prevent direct access of bd_inode - nvdimm: pmem: keep PREFLUSH before data writes - tty: serial: 8250: protect against NULL uart->port.dev in register - serial: 8250: invert serial8250_register_8250_port() CIR condition - urma: fix ipourma eid handler and register work concurrency - tty: fix saved termios reset race - x86/cpu/hygon: Report S5 reset status during boot - drm/amdkfd: fix SMI event cross-process information leak - of/overlay: put property on deadprops only after changeset add succeeds - net/mlx5: Fix slab-out-of-bounds when handling team device events - serial: core: fix NULL pointer dereference in serial_core_unregister_port() - !30553 tracing: Reject incomplete event filter expressions - !30498 nfsd: split nfsd4_copy into transient and durable async copy objects - !30000 [CVEAgent@OLK-6.6] Fix CVE-2026-98822 - !30497 cdma: ratelimit hot-path error logs in kernel driver and header file code synchronization - tracing: Reject incomplete event filter expressions - !30546 [OLK-6.6] ub: fix UBASE port reporting and UNIC reset and DMA handling - !30481 [CVEAgent@OLK-6.6] Fix CVE-2026-99080 - !30483 [CVEAgent@OLK-6.6] Fix CVE-2026-99206 - !30388 Fix CVE-2026-99153 - !30390 Fix CVE-2026-99152 - !30387 Fix CVE-2026-99110 - !30391 Fix CVE-2026-99109 - !30479 [CVEAgent@OLK-6.6] Fix CVE-2026-99254 - !30538 scsi: libsas: Fix SMP IO deadlock during HA resume - !30537 ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30536 scsi: libsas: Add linkrate and sas_addr change detection in rediscover；scsi: libsas: Add sas_ex_phy_to_dev() helper - !30486 [CVEAgent@OLK-6.6] Fix CVE-2026-99247 - !30454 [OLK-6.6] Fix CVE-2026-97566 - !30453 [OLK-6.6] Fix CVE-2026-97432 - !30444 [OLK-6.6] Fix CVE-2026-43234 - !30403 x86/hygon: Fix FPDSS on Hygon - !30269 [OLK-6.6] update rnpvf driver to 1.2.0. - !30155 [OLK-6.6] Fix CVE-2026-74695 - !30153 [OLK-6.6] Fix CVE-2026-72494 - !30149 [OLK-6.6] Fix CVE-2026-74368 - !30092 [CVEAgent@OLK-6.6] Fix CVE-2026-99052 - !30090 [CVEAgent@OLK-6.6] Fix CVE-2026-99040 - !30057 [CVEAgent@OLK-6.6] Fix CVE-2026-98948 - !30086 [CVEAgent@OLK-6.6] Fix CVE-2026-99025 - !30105 [CVEAgent@OLK-6.6] Fix CVE-2026-99078 - !30106 [CVEAgent@OLK-6.6] Fix CVE-2026-99079 - ub: ubase: skip bandwidth queries on next-generation chips - net: unic: Fix TX/RX DMA ordering and cache sync - net: unic: serialize port deactivation with reset - ub: ubase: add ub port events handling and statistics - scsi: libsas: Fix SMP IO deadlock during HA resume - scsi: libsas: Add sas_ex_phy_to_dev() helper - scsi: libsas: Add linkrate and sas_addr change detection in rediscover - !30430 v8 arm64: Allow CPU0 to be nohz_full - ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30300 mm/gup: allow movable memory pinnable - !30487 urma: limit opt buf length in uburma ioctl commands - !29931 [CVEAgent@OLK-6.6] Fix CVE-2026-98570 - nfsd: split nfsd4_copy into transient and durable async copy objects - ub: cdma: header file code synchronization - ub: cdma: ratelimit hot-path error logs in kernel driver - x86: hygon: Fix FPDSS on Hygon - tracing: Do not initialize tracefs work if tracing is disabled - scsi: target: iscsi: Fix race in discovery auth updates - fs: Free any excess xarray nodes in clear_inode() - io_uring: don't flood a cancelling task with task_work - urma: limit opt buf length in uburma ioctl commands - mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 - wifi: iwlwifi: mvm: fix P2P-Device binding handling - team: avoid NETDEV_CHANGEMTU event when unregistering slave - arm64: defconfig: Enable CONFIG_PM_SLEEP_SMP_NONZERO_CPU and CONFIG_ARCH_SUSPEND_NONZERO_CPU - arm64: Allow boot CPU nohz_full to coexist with suspend and kexec - isolation: Check whether there exists a housekeeping CPU online - isolation: Do not check whether housekeeping CPUs are present - smb: client: reject SetEA requests that do not fit the request buffer - scsi: libiscsi: Validate the task named by a management response - scsi: libiscsi: Validate the ITT reflected in a Reject PDU - smb: client: fix heap overflow in cifs_do_set_acl() - rnpvf: update rnpvf driver to 1.2.0. - mm/gup: allow movable memory pinnable - rnpvf: update rnpvf driver to 1.2.0. - netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() - RDMA/irdma: Replace waitqueue and flag with completion - wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() - net/mlx5e: Prevent stale XSK buffer release on refill retry - net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry - selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts - KEYS: Fix add_key() race with keyring restriction - openvswitch: fix soft lockup in the netlink flow dump - mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() - wifi: mac80211: prevent AP VLAN tx from other interfaces - net: ipv6: keep room for the mac header in dst_dev_overhead() - !30530 [CVEAgent@OLK-6.6] Fix CVE-2026-99163 - !30532 [CVEAgent@OLK-6.6] Fix CVE-2026-99235 - !29765 Fix CVE-2026-98289 - !30230 Fix CVE-2026-97615 - !29790 Fix CVE-2026-93250 - !30510 [CVEAgent@OLK-6.6] Fix CVE-2026-99005 - !30506 [CVEAgent@OLK-6.6] Fix CVE-2026-98871 - !30307 feat/obmm-unified-switch-split-v4 - !30064 [CVEAgent@OLK-6.6] Fix CVE-2026-98972 - !30507 [CVEAgent@OLK-6.6] Fix CVE-2026-98883 - !30450 BBML3 bugfix - !30156 [OLK-6.6] Fix CVE-2026-68258 - !30154 [OLK-6.6] Fix CVE-2026-74729 - !30151 [OLK-6.6] Fix CVE-2026-74273 - !27793 [OLK-6.6] Fix CVE-2026-68421 - !27512 [OLK-6.6] Fix CVE-2026-64259 - !30146 [OLK-6.6] Fix CVE-2026-53109 - !30575 arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30567 scsi: hisi_sas: Clear PHY error counts on phyup - arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30472 [CVEAgent@OLK-6.6] Fix CVE-2026-99243 - scsi: hisi_sas: Clear PHY error counts on phyup - scsi:hisi_sas:Sync upstream timer_delete API changes in hisi_sas_v3_hw.c - tracing: Save the event file instead of the compatible histogram - tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields - drm/i915/gt: Unmask interrupts only when ACTIVE is true - serial: 8250_port: recognize UPIO_AU - crypto: ccp - Fix possible deadlock in SEV init failure path - obmm: pack the internal structs by field ordering - obmm: sysfs views over the switch: attributes, identity, lockless reads - obmm: generalized dual-backend gap mmap - obmm: export switch target wrap-up and validation consolidation - obmm: unified two-phase switch core (import target) - obmm: install mappings lazily from the backend fault paths - obmm: fix the pxm bound, the open TOCTOU and the teardown release - obmm: split the region shell from the memory backends - obmm: depend on TRANSPARENT_HUGEPAGE for the PMD fault paths - io-wq: order the exit bit against worker creation task work - mm/pfn_range_alloc: split block mappings in linear map updates - arm64/mm: make pte_present() recognize present-invalid entries - net: bridge: use option bits for CFM/MRP frame handlers - drm/amdkfd: Check bounds on CRIU restore queue type and mqd size - soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read - cxl/region: Block region delete during region creation - powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy - cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() - vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() - af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). - sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() - fuse-uring: make a fuse_req on SQE commit only findable after memcpy - !30591 [CVEAgent@OLK-6.6] Fix CVE-2026-99142 - !30590 [CVEAgent@OLK-6.6] Fix CVE-2026-99219 - !30594 [CVEAgent@OLK-6.6] Fix CVE-2026-99233 - !30600 urma: warn on slow TP driver callbacks - urma: warn on slow TP driver callbacks - tracing/histograms: Verify event_call identity when updating synth_event refcount - tracing: Check operator stack capacity before pushing - ftrace: Initialize modname and offset in print_rec() - !30602 [CVEAgent@OLK-6.6] Fix CVE-2026-99117 - !30605 [CVEAgent@OLK-6.6] Fix CVE-2026-99211 - !30604 [CVEAgent@OLK-6.6] Fix CVE-2026-99201 - netlink: reset skb headers before unicast and multicast filtering - netlink: avoid hashing the network namespace pointer - net: bridge: mcast: don't truncate the port group walk on teardown - !30597 [CVEAgent@OLK-6.6] Fix CVE-2026-99239 - !30582 v5 MOC bypass cache - !30610 iommu/io-pgtable-arm: Add support for contiguous hint - !30523 drivers:misc:sdma-dae: Open source sdma-dae driver to OLK-6.6 (already supported on olk-5.10) - !28122 [CVEAgent@OLK-6.6] Fix CVE-2026-89802 - !29350 [CVEAgent@OLK-6.6] Fix CVE-2026-97988 - !30473 Fix CVE-2026-97992 - !30150 [OLK-6.6] Fix CVE-2026-74527 - !30576 net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - !30544 [OLK-6.6] Fix CVE-2026-90057 - !30476 [OLK-6.6] fix CVE-2026-98936 - !30474 [OLK-6.6] fix CVE-2026-99059 - !30144 [OLK-6.6] Fix CVE-2026-64190 - !30311 [OLK-6.6]nser: add support for wangxun RDMA driver - iommu/io-pgtable-arm: Add support for contiguous hint - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn - openeuler: configs: arm64: Enable PBHA by default - arm64: mm: Introduce kernel param pbha - arm64: mm: Introduce prctl to control pbha behavior - arm64: mm: Set flag VM_PBHA_BIT0 for global init task - arm64: mm: Introduce procfs interface to update PBHA0 bit - arm64: mm: Set PBHA0 bit for VM_PBHA_BIT0 - arm64: mm: Introduce VM_PBHA_BIT0 to enable pbha bit0 for single vma - arm64: mm: Show PBHA bit 59 as PBHA0 in ptdump - arm64: mm: Update kernel pte entries if pbha bit0 enabled - arm64: mm: Detect and enable PBHA bit0 at early startup - arm64: cpufeature: Enable PBHA for stage1 early via FDT - Documentation: arm64: Describe the support and expectations for PBHA - KVM: arm64: Configure PBHA bits for stage2 - arm64: mm: Add pgprot_pbha() to allow drivers to request PBHA values - arm64: cpufeature: Enable PBHA bits for stage1 - dt-bindings: arm: Add binding for Page Based Hardware Attributes - dt-bindings: Rename the description of cpu nodes cpu.yaml - KVM: arm64: Detect and enable PBHA for stage2 - net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() - drivers:misc:sdma-dae: adapt driver interfaces for OLK-6.6 - net: team: fix NULL pointer dereference in team_xmit during mode change - net: team: Rename port_disabled team mode op to port_tx_disabled - net: team: Remove unused team_mode_op, port_enabled - wifi: ath11k: reset ar->num_stations on hardware start - wireguard: noise: reject response consumption after intermediate initiation - vhost-vdpa: protect config_ctx from being freed under the config callback - x86/arm64: config: enable the Wangxun nser RDMA driver - net: wangxun: nser: add RDMA support for 100GbE NICs - octeontx2-af: Block VFs from clobbering special CGX PKIND state - vhost: invalidate vring access on IOTLB transitions - drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op - drivers:misc:sdma-dae: Remove redundant print during mm exit and resume. - drivers:misc:sdma-dae: Revert optimize kernel code - drivers:misc:sdma-dae: Revert add channel depth info in debugfs - drivers:misc:sdma-dae: Revert Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Remove interference print. - drivers:misc:sdma-dae: Checking the address alignment - drivers:misc:sdma-dae: add NULL judgement of global variables - drivers:misc:sdma-dae: add channel depth info in debugfs - drivers:misc:sdma-dae: optimize kernel code - drivers:misc:sdma-dae: fix incorrect debugfs print - drivers:misc:sdma-dae: sdma fix uncorrect sleep time - drivers:misc:sdma-dae: fix incorrect kmalloc flag - drivers:misc:sdma-dae: sdma fix PUAF problem fork risk - drivers:misc:sdma-dae: modify ttl_processes reduce logic - drivers:misc:sdma-dae: remove unnecessary return in void function - drivers:misc:sdma-dae: fix incorrect resource release - drivers:misc:sdma-dae: remove lock while pausing channels - drivers:misc:sdma-dae: add mmu_notifier - drivers:misc:sdma-dae: add MODULE_VERSION to control version - drivers:misc:sdma-dae: add print in exceptional branch - drivers:misc:sdma-dae: bugfix of channel operation - drivers:misc:sdma-dae: change authority of sdma device - drivers:misc:sdma-dae: add channel ida validation - drivers:misc:sdma-dae: add vma_ops to avoid mremap error - drivers:misc:sdma-dae: add fast mode - drivers:misc:sdma-dae: not expose sq_tail write and add validation of cq_head - drivers:misc:sdma-dae: add debugfs of sdma-dae - drivers:misc:sdma-dae: fix icsl code check problems - drivers:misc:sdma-dae: fix input validate problems - drivers:misc:sdma-dae: fix interrupt handle logic - drivers:misc:sdma-dae: not compile sdma-dae by default - drivers:misc:sdma-dae: enable sdma_dae for arm64 - drivers:misc:sdma-dae: support page fault preprocess - drivers:misc:sdma-dae: support interrupt init and handle - drivers:misc:sdma-dae: support sqe task send and execute - drivers:misc:sdma-dae: support channel management - drivers:misc:sdma-dae: support getting streamID - drivers:misc:sdma-dae: support initializ sdma driver - !30253 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - !29554 [CVEAgent@OLK-6.6] Fix CVE-2026-98286 - !30263 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - !30258 v10 net: dynthread: dynamic threaded NAPI - !30208 Fix CVE-2026-98044 - !30280 bpf: Make post-verification instruction rewrites killable - !30184 blk-mq: set RQF_USE_SCHED when the operation is known - !30267 sched/fair: Avoid overflow in place_entity() - !30236 configfs: unhash the dentry before dropping the item in rmdir - !30276 virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - !29584 [CVEAgent@OLK-6.6] Fix CVE-2026-98364 - !29906 [CVEAgent@OLK-6.6] Fix CVE-2026-98443 - !30046 net: cap skb->queue_mapping when the tx queue is picked - !30223 bpf: Reject pkt arguments in mutating subprogs - !29932 [CVEAgent@OLK-6.6] Fix CVE-2026-98598 - !30044 net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - bpf: Make post-verification instruction rewrites killable - virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - RDMA/umem: avoid ib_umem_find_best_pgsz ABI breakage - sched/fair: Avoid overflow in place_entity() - RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - net: dynthread: Add debug switch and instrumentation - net: dynthread: Scale the number of NAPI thread CPUs - net: dynthread: Switch NAPI to threads on spare CPUs - net: dynthread: Steer the RX queue IRQs away from the target tasks - net: dynthread: Monitor the load of the target tasks - net: dynthread: Add dynamic threaded NAPI scheduler framework - net/mlx5e: Do not block on RTNL while recovering an SQ - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover - net/mlx5e: Acquire RTNL lock before RQs/SQs activation/deactivation - net/mlx5e: link NAPI instances to queues and IRQs - net: Fix napi irq KABI breakage - net: Add NAPI IRQ support - net: Fix KABI breakage for queue napi association - net: Add queue and napi association - neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - configfs: unhash the dentry before dropping the item in rmdir - bpf: Reject pkt arguments in mutating subprogs - bpf: Fix kabi breakage in struct bpf_subprog_info - bpf: Reject legacy packet loads from callbacks - blk-mq: set RQF_USE_SCHED when the operation is known - net: cap skb->queue_mapping when the tx queue is picked - net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - ipv6: Prevent rt6_insert_exception() for dying fib6_info. - xfs: fix cursor and pointer handling when recovering iunlink buckets - xfrm: hold net_device reference under RCU in bundle creation - drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown - !30268 ub: udma: solving internal code review issues - !30305 bpf: Mark syscall helpers as sleepable - !30113 fix/CVE-2026-98103 - !30061 [CVEAgent@OLK-6.6] Fix CVE-2026-98966 - !30099 [CVEAgent@OLK-6.6] Fix CVE-2026-99070 - !30087 [CVEAgent@OLK-6.6] Fix CVE-2026-99031 - !30100 [CVEAgent@OLK-6.6] Fix CVE-2026-99071 - !30101 [CVEAgent@OLK-6.6] Fix CVE-2026-99072 - !30102 [CVEAgent@OLK-6.6] Fix CVE-2026-99074 - !30091 [CVEAgent@OLK-6.6] Fix CVE-2026-99041 - !30088 [CVEAgent@OLK-6.6] Fix CVE-2026-99033 - !30043 seg6: ensure packet data is writable before modifying SRH and IPv6 DA - !30197 CVE-2026-98503 - bpf: Mark syscall helpers as sleepable - ub: udma: support dwqe with a few wqebbs - ub: udma: solving internal code review issues - seg6: ensure packet data is writable before modifying SRH and IPv6 DA - igmp: fix kabi breakage of struct ip_sf_list - packet: use ubuf_info completion for TX_RING packets - virtio_net: copy zerocopy frags in start_xmit without NAPI - igmp: convert struct ip_sf_list to RCU - ipv4: stop PMTU walk when nexthop group shrinks - ipv4: stop route notification sizing when nexthop group shrinks - ipv4: do not warn on route notification size race - ipv6: do not warn on route notification size race - ip6_gre: remove obsolete ERSPAN PMTU update - net/packet: guard the ll header push in packet_rcv_spkt() - net: bridge: avoid recursive multicast port cleanup - bonding: fix the program leak when XDP is replaced - !30029 CODEOWNERS: add kernel module ownership rules - !30291 [OLK-6.6] mm/swapfile: reject duplicated bad pages in swap header - !30201 filescgroup: migrate files resources of every task, not just the first - !30306 Fix CVE-2026-98799 - bpf: Fix kabi breakage in struct bpf_tramp_image and bpf_trampoline - bpf: Skip detached progs in trampoline images that are still in use - mm/swapfile: reject duplicated bad pages in swap header - filescgroup: migrate files resources of every task, not just the first - scripts: add get_codeowner.py to look up CODEOWNERS owners - CODEOWNERS: add kernel module ownership rules - !30256 [Backport] ext4: defer unwritten splitting until I/O completion - !30394 urma: Fix the assignment before null check - !30003 [CVEAgent@OLK-6.6] Fix CVE-2026-98831 - !29516 [CVEAgent@OLK-6.6] Fix CVE-2026-98198 - !30220 drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - !30082 [CVEAgent@OLK-6.6] Fix CVE-2026-99012 - !30071 [CVEAgent@OLK-6.6] Fix CVE-2026-98983 - !30262 [CVEAgent] Fix CVE-2026-99091 - !30294 Fix CVE-2026-99011 - !30293 Fix CVE-2026-99008 - !30290 Fix CVE-2026-98663 - !30289 Fix CVE-2026-98664 - !30288 Fix CVE-2026-98666 - !30234 [PATCH 00/11] KVM: arm64: pvm: Add software VGICv3 and virtual timer support - ext4: prevent sleeping allocation in NOWAIT write path - !30367 Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - ext4: remove EXT4_GET_BLOCKS_IO_CREATE_EXT - ext4: simplify the mapping query logic in ext4_iomap_begin() - ext4: skip overwrite check for aligned non-extending DIO writes - ext4: remove unused unwritten parameter in ext4_dio_write_iter() - ext4: remove useless ext4_iomap_overwrite_ops - ext4: avoid starting handle when dio writing an unwritten extent - ext4: don't split extent before submitting I/O - !30233 Fix CVE-2026-98917 - !30235 Fix CVE-2026-98930 - !30368 wifi: mac80211: validate TX status rate metadata - !30378 tty: tty_port: restore TTY_IO_ERROR on activation failure - !30380 tty: port: fix tty_port_tty_vhangup() race - !30371 mtd: core: avoid double-free of OTP NVMEM device - urma: Fix the assignment before null check - !30386 RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - !30270 [OLK-6.6] AMD Venice additional patches for openEuler - !28385 [OLK-6.6] crypto: ccp: fix vpsp cmd ctx leak - !30382 fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - !30365 bpf: Fix out-of-bounds btf->types write for split BTF - fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - !30313 kabi: fix include helpers broken by the predefined 'linux' macro - tty: port: fix tty_port_tty_vhangup() race - tty: tty_port: restore TTY_IO_ERROR on activation failure - mtd: core: avoid double-free of OTP NVMEM device - wifi: mac80211: validate TX status rate metadata - bpf: Fix out-of-bounds btf->types write for split BTF - kabi: fix include helpers broken by the predefined 'linux' macro - KVM: arm64: pvm: Handle counter reads in the hyp path - KVM: arm64: pvm: Trap guest timer accesses and enforce EL0 permissions - KVM: arm64: pvm: Align timer capabilities and counter handling with RV timers - KVM: arm64: pvm: Wire RV timers into the KVM timer entry points - KVM: arm64: pvm: Add the software RV timer implementation - KVM: arm64: pvm: Deliver VGIC interrupts without hardware LRs - KVM: arm64: pvm: Emulate VGIC active priority registers - KVM: arm64: pvm: Route ICC accesses through register descriptors - KVM: arm64: pvm: Emulate the GICv3 CPU interface - KVM: arm64: Handle pending EL1 IRQ exceptions - KVM: arm64: pvm: Constrain virtual interrupt capabilities - Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown - iio: imu: adis16480: fix unprotected debugfs reads - iio: imu: adis16400: fix unprotected debugfs reads - iio: gyro: adis16136: fix unprotected debugfs reads - Bluetooth: MGMT: Fix status of pending commands flushed on power off - EDAC/amd64: Mask UMC chip select to the four implemented selects - x86/mce: Fix hardware debug register corruption on task migration - x86/MCE/AMD: Fix inverted interrupt enablement during storm handling - x86/amd_node: Avoid divide by zero on virtualized systems - RAS/AMD/ATL, EDAC/amd64: Only load ATL when needed - x86/mce: Set up the polling timer before CMCI discovery - x86/mce: Restore MCA polling interval halving - EDAC/amd64: Remove NUM_CONTROLLERS macro - x86/mce/inject: Remove call to mce_notify_irq() - x86/mce: Remove the redundant mce_hygon_feature_init() - x86/mce/threshold: Remove the redundant this_cpu_dec_return() - crypto: ccp: fix vpsp cmd ctx leak - KVM: s390: Fix IRQ injection with SIGP Stop and Store Status - parisc: Increase kernel stack size to 32kb - drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - Bluetooth: ISO: Serialize concurrent connect calls - unshare: don't drop active namespace references that were never taken - of/overlay: don't leak fragment references when changeset init fails - hwmon: (pwm-fan) Stop RPM timer before freeing tach data - !30459 [CVEAgent@OLK-6.6] Fix CVE-2026-99234 - !30468 [CVEAgent@OLK-6.6] Fix CVE-2026-99143 - !30322 urma: fix ipourma eid handler and register work concurrency - !30455 arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30491 [OLK-6.6] AMD Venice additional patches for openEuler - 2 - EDAC/amd64: Avoid a -Wformat-security warning - EDAC/amd64: Generate ctl_name string at runtime - !29993 [CVEAgent@OLK-6.6] Fix CVE-2026-98807 - !29964 [CVEAgent@OLK-6.6] Fix CVE-2026-98747 - !30393 ub/ubmem-vmmu: Remove the support_attr callback mechanism. - !30447 wifi: mac80211: minstrel_ht: validate fixed rate index - !30446 net: ena: fix MMIO read buffer leak on probe failure - tracing: Keep the predicate limit separate from program capacity - !30013 [CVEAgent@OLK-6.6] Fix CVE-2026-98855 - !30431 fix CVE-2026-98490 for OLK-6.6 - !30425 fix CVE-2026-98722 for OLK-6.6 - !30410 nvdimm: pmem: keep PREFLUSH before data writes - !30406 Fix CVE-2026-97480 for OLK-6.6 - !30204 x86/cpu/hygon: Report S5 reset status during boot - tracing: Unregister field variable histograms when the command fails - !30395 tty: fix saved termios reset race - arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30031 drm/amdkfd: fix SMI event cross-process information leak - wifi: mac80211: minstrel_ht: validate fixed rate index - net: ena: fix MMIO read buffer leak on probe failure - net: openvswitch: conntrack: fix helper UAF due to extensions realloc - net: openvswitch: conntrack: remove 'add_helper' dead code - openvswitch: prepare for stolen verdict coming from conntrack and nat engine - net/sched: act_ct: avoid modifying shared unconfirmed ct entry - net/sched: act_ct: fix helper UAF due to extensions realloc - ub/ubmem-vmmu: Remove the support_attr callback mechanism. - mtd: block2mtd: Fix divide error when erase_size is zero - block2mtd: prevent direct access of bd_inode - nvdimm: pmem: keep PREFLUSH before data writes - tty: serial: 8250: protect against NULL uart->port.dev in register - serial: 8250: invert serial8250_register_8250_port() CIR condition - urma: fix ipourma eid handler and register work concurrency - tty: fix saved termios reset race - x86/cpu/hygon: Report S5 reset status during boot - drm/amdkfd: fix SMI event cross-process information leak - of/overlay: put property on deadprops only after changeset add succeeds - net/mlx5: Fix slab-out-of-bounds when handling team device events - serial: core: fix NULL pointer dereference in serial_core_unregister_port() - !30553 tracing: Reject incomplete event filter expressions - !30498 nfsd: split nfsd4_copy into transient and durable async copy objects - !30000 [CVEAgent@OLK-6.6] Fix CVE-2026-98822 - !30497 cdma: ratelimit hot-path error logs in kernel driver and header file code synchronization - tracing: Reject incomplete event filter expressions - !30546 [OLK-6.6] ub: fix UBASE port reporting and UNIC reset and DMA handling - !30481 [CVEAgent@OLK-6.6] Fix CVE-2026-99080 - !30483 [CVEAgent@OLK-6.6] Fix CVE-2026-99206 - !30388 Fix CVE-2026-99153 - !30390 Fix CVE-2026-99152 - !30387 Fix CVE-2026-99110 - !30391 Fix CVE-2026-99109 - !30479 [CVEAgent@OLK-6.6] Fix CVE-2026-99254 - !30538 scsi: libsas: Fix SMP IO deadlock during HA resume - !30537 ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30536 scsi: libsas: Add linkrate and sas_addr change detection in rediscover；scsi: libsas: Add sas_ex_phy_to_dev() helper - !30486 [CVEAgent@OLK-6.6] Fix CVE-2026-99247 - !30454 [OLK-6.6] Fix CVE-2026-97566 - !30453 [OLK-6.6] Fix CVE-2026-97432 - !30444 [OLK-6.6] Fix CVE-2026-43234 - !30403 x86/hygon: Fix FPDSS on Hygon - !30269 [OLK-6.6] update rnpvf driver to 1.2.0. - !30155 [OLK-6.6] Fix CVE-2026-74695 - !30153 [OLK-6.6] Fix CVE-2026-72494 - !30149 [OLK-6.6] Fix CVE-2026-74368 - !30092 [CVEAgent@OLK-6.6] Fix CVE-2026-99052 - !30090 [CVEAgent@OLK-6.6] Fix CVE-2026-99040 - !30057 [CVEAgent@OLK-6.6] Fix CVE-2026-98948 - !30086 [CVEAgent@OLK-6.6] Fix CVE-2026-99025 - !30105 [CVEAgent@OLK-6.6] Fix CVE-2026-99078 - !30106 [CVEAgent@OLK-6.6] Fix CVE-2026-99079 - ub: ubase: skip bandwidth queries on next-generation chips - net: unic: Fix TX/RX DMA ordering and cache sync - net: unic: serialize port deactivation with reset - ub: ubase: add ub port events handling and statistics - scsi: libsas: Fix SMP IO deadlock during HA resume - scsi: libsas: Add sas_ex_phy_to_dev() helper - scsi: libsas: Add linkrate and sas_addr change detection in rediscover - !30430 v8 arm64: Allow CPU0 to be nohz_full - ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30300 mm/gup: allow movable memory pinnable - !30487 urma: limit opt buf length in uburma ioctl commands - !29931 [CVEAgent@OLK-6.6] Fix CVE-2026-98570 - nfsd: split nfsd4_copy into transient and durable async copy objects - ub: cdma: header file code synchronization - ub: cdma: ratelimit hot-path error logs in kernel driver - x86: hygon: Fix FPDSS on Hygon - tracing: Do not initialize tracefs work if tracing is disabled - scsi: target: iscsi: Fix race in discovery auth updates - fs: Free any excess xarray nodes in clear_inode() - io_uring: don't flood a cancelling task with task_work - urma: limit opt buf length in uburma ioctl commands - mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 - wifi: iwlwifi: mvm: fix P2P-Device binding handling - team: avoid NETDEV_CHANGEMTU event when unregistering slave - arm64: defconfig: Enable CONFIG_PM_SLEEP_SMP_NONZERO_CPU and CONFIG_ARCH_SUSPEND_NONZERO_CPU - arm64: Allow boot CPU nohz_full to coexist with suspend and kexec - isolation: Check whether there exists a housekeeping CPU online - isolation: Do not check whether housekeeping CPUs are present - smb: client: reject SetEA requests that do not fit the request buffer - scsi: libiscsi: Validate the task named by a management response - scsi: libiscsi: Validate the ITT reflected in a Reject PDU - smb: client: fix heap overflow in cifs_do_set_acl() - rnpvf: update rnpvf driver to 1.2.0. - mm/gup: allow movable memory pinnable - rnpvf: update rnpvf driver to 1.2.0. - netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() - RDMA/irdma: Replace waitqueue and flag with completion - wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() - net/mlx5e: Prevent stale XSK buffer release on refill retry - net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry - selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts - KEYS: Fix add_key() race with keyring restriction - openvswitch: fix soft lockup in the netlink flow dump - mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() - wifi: mac80211: prevent AP VLAN tx from other interfaces - net: ipv6: keep room for the mac header in dst_dev_overhead() - !30530 [CVEAgent@OLK-6.6] Fix CVE-2026-99163 - !30532 [CVEAgent@OLK-6.6] Fix CVE-2026-99235 - !29765 Fix CVE-2026-98289 - !30230 Fix CVE-2026-97615 - !29790 Fix CVE-2026-93250 - !30510 [CVEAgent@OLK-6.6] Fix CVE-2026-99005 - !30506 [CVEAgent@OLK-6.6] Fix CVE-2026-98871 - !30307 feat/obmm-unified-switch-split-v4 - !30064 [CVEAgent@OLK-6.6] Fix CVE-2026-98972 - !30507 [CVEAgent@OLK-6.6] Fix CVE-2026-98883 - !30450 BBML3 bugfix - !30156 [OLK-6.6] Fix CVE-2026-68258 - !30154 [OLK-6.6] Fix CVE-2026-74729 - !30151 [OLK-6.6] Fix CVE-2026-74273 - !27793 [OLK-6.6] Fix CVE-2026-68421 - !27512 [OLK-6.6] Fix CVE-2026-64259 - !30146 [OLK-6.6] Fix CVE-2026-53109 - !30575 arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30567 scsi: hisi_sas: Clear PHY error counts on phyup - arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30472 [CVEAgent@OLK-6.6] Fix CVE-2026-99243 - scsi: hisi_sas: Clear PHY error counts on phyup - scsi:hisi_sas:Sync upstream timer_delete API changes in hisi_sas_v3_hw.c - tracing: Save the event file instead of the compatible histogram - tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields - drm/i915/gt: Unmask interrupts only when ACTIVE is true - serial: 8250_port: recognize UPIO_AU - crypto: ccp - Fix possible deadlock in SEV init failure path - obmm: pack the internal structs by field ordering - obmm: sysfs views over the switch: attributes, identity, lockless reads - obmm: generalized dual-backend gap mmap - obmm: export switch target wrap-up and validation consolidation - obmm: unified two-phase switch core (import target) - obmm: install mappings lazily from the backend fault paths - obmm: fix the pxm bound, the open TOCTOU and the teardown release - obmm: split the region shell from the memory backends - obmm: depend on TRANSPARENT_HUGEPAGE for the PMD fault paths - io-wq: order the exit bit against worker creation task work - mm/pfn_range_alloc: split block mappings in linear map updates - arm64/mm: make pte_present() recognize present-invalid entries - net: bridge: use option bits for CFM/MRP frame handlers - drm/amdkfd: Check bounds on CRIU restore queue type and mqd size - soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read - cxl/region: Block region delete during region creation - powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy - cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() - vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() - af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). - sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() - fuse-uring: make a fuse_req on SQE commit only findable after memcpy - !30591 [CVEAgent@OLK-6.6] Fix CVE-2026-99142 - !30590 [CVEAgent@OLK-6.6] Fix CVE-2026-99219 - !30594 [CVEAgent@OLK-6.6] Fix CVE-2026-99233 - !30600 urma: warn on slow TP driver callbacks - urma: warn on slow TP driver callbacks - tracing/histograms: Verify event_call identity when updating synth_event refcount - tracing: Check operator stack capacity before pushing - ftrace: Initialize modname and offset in print_rec() - !30602 [CVEAgent@OLK-6.6] Fix CVE-2026-99117 - !30605 [CVEAgent@OLK-6.6] Fix CVE-2026-99211 - !30604 [CVEAgent@OLK-6.6] Fix CVE-2026-99201 - netlink: reset skb headers before unicast and multicast filtering - netlink: avoid hashing the network namespace pointer - net: bridge: mcast: don't truncate the port group walk on teardown - !30597 [CVEAgent@OLK-6.6] Fix CVE-2026-99239 - !30582 v5 MOC bypass cache - !30610 iommu/io-pgtable-arm: Add support for contiguous hint - !30523 drivers:misc:sdma-dae: Open source sdma-dae driver to OLK-6.6 (already supported on olk-5.10) - !28122 [CVEAgent@OLK-6.6] Fix CVE-2026-89802 - !29350 [CVEAgent@OLK-6.6] Fix CVE-2026-97988 - !30473 Fix CVE-2026-97992 - !30150 [OLK-6.6] Fix CVE-2026-74527 - !30576 net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - !30544 [OLK-6.6] Fix CVE-2026-90057 - !30476 [OLK-6.6] fix CVE-2026-98936 - !30474 [OLK-6.6] fix CVE-2026-99059 - !30144 [OLK-6.6] Fix CVE-2026-64190 - !30311 [OLK-6.6]nser: add support for wangxun RDMA driver - iommu/io-pgtable-arm: Add support for contiguous hint - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn - openeuler: configs: arm64: Enable PBHA by default - arm64: mm: Introduce kernel param pbha - arm64: mm: Introduce prctl to control pbha behavior - arm64: mm: Set flag VM_PBHA_BIT0 for global init task - arm64: mm: Introduce procfs interface to update PBHA0 bit - arm64: mm: Set PBHA0 bit for VM_PBHA_BIT0 - arm64: mm: Introduce VM_PBHA_BIT0 to enable pbha bit0 for single vma - arm64: mm: Show PBHA bit 59 as PBHA0 in ptdump - arm64: mm: Update kernel pte entries if pbha bit0 enabled - arm64: mm: Detect and enable PBHA bit0 at early startup - arm64: cpufeature: Enable PBHA for stage1 early via FDT - Documentation: arm64: Describe the support and expectations for PBHA - KVM: arm64: Configure PBHA bits for stage2 - arm64: mm: Add pgprot_pbha() to allow drivers to request PBHA values - arm64: cpufeature: Enable PBHA bits for stage1 - dt-bindings: arm: Add binding for Page Based Hardware Attributes - dt-bindings: Rename the description of cpu nodes cpu.yaml - KVM: arm64: Detect and enable PBHA for stage2 - net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() - drivers:misc:sdma-dae: adapt driver interfaces for OLK-6.6 - net: team: fix NULL pointer dereference in team_xmit during mode change - net: team: Rename port_disabled team mode op to port_tx_disabled - net: team: Remove unused team_mode_op, port_enabled - wifi: ath11k: reset ar->num_stations on hardware start - wireguard: noise: reject response consumption after intermediate initiation - vhost-vdpa: protect config_ctx from being freed under the config callback - x86/arm64: config: enable the Wangxun nser RDMA driver - net: wangxun: nser: add RDMA support for 100GbE NICs - octeontx2-af: Block VFs from clobbering special CGX PKIND state - vhost: invalidate vring access on IOTLB transitions - drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op - drivers:misc:sdma-dae: Remove redundant print during mm exit and resume. - drivers:misc:sdma-dae: Revert optimize kernel code - drivers:misc:sdma-dae: Revert add channel depth info in debugfs - drivers:misc:sdma-dae: Revert Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Remove interference print. - drivers:misc:sdma-dae: Checking the address alignment - drivers:misc:sdma-dae: add NULL judgement of global variables - drivers:misc:sdma-dae: add channel depth info in debugfs - drivers:misc:sdma-dae: optimize kernel code - drivers:misc:sdma-dae: fix incorrect debugfs print - drivers:misc:sdma-dae: sdma fix uncorrect sleep time - drivers:misc:sdma-dae: fix incorrect kmalloc flag - drivers:misc:sdma-dae: sdma fix PUAF problem fork risk - drivers:misc:sdma-dae: modify ttl_processes reduce logic - drivers:misc:sdma-dae: remove unnecessary return in void function - drivers:misc:sdma-dae: fix incorrect resource release - drivers:misc:sdma-dae: remove lock while pausing channels - drivers:misc:sdma-dae: add mmu_notifier - drivers:misc:sdma-dae: add MODULE_VERSION to control version - drivers:misc:sdma-dae: add print in exceptional branch - drivers:misc:sdma-dae: bugfix of channel operation - drivers:misc:sdma-dae: change authority of sdma device - drivers:misc:sdma-dae: add channel ida validation - drivers:misc:sdma-dae: add vma_ops to avoid mremap error - drivers:misc:sdma-dae: add fast mode - drivers:misc:sdma-dae: not expose sq_tail write and add validation of cq_head - drivers:misc:sdma-dae: add debugfs of sdma-dae - drivers:misc:sdma-dae: fix icsl code check problems - drivers:misc:sdma-dae: fix input validate problems - drivers:misc:sdma-dae: fix interrupt handle logic - drivers:misc:sdma-dae: not compile sdma-dae by default - drivers:misc:sdma-dae: enable sdma_dae for arm64 - drivers:misc:sdma-dae: support page fault preprocess - drivers:misc:sdma-dae: support interrupt init and handle - drivers:misc:sdma-dae: support sqe task send and execute - drivers:misc:sdma-dae: support channel management - drivers:misc:sdma-dae: support getting streamID - drivers:misc:sdma-dae: support initializ sdma driver - !30253 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - !29554 [CVEAgent@OLK-6.6] Fix CVE-2026-98286 - !30263 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - !30258 v10 net: dynthread: dynamic threaded NAPI - !30208 Fix CVE-2026-98044 - !30280 bpf: Make post-verification instruction rewrites killable - !30184 blk-mq: set RQF_USE_SCHED when the operation is known - !30267 sched/fair: Avoid overflow in place_entity() - !30236 configfs: unhash the dentry before dropping the item in rmdir - !30276 virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - !29584 [CVEAgent@OLK-6.6] Fix CVE-2026-98364 - !29906 [CVEAgent@OLK-6.6] Fix CVE-2026-98443 - !30046 net: cap skb->queue_mapping when the tx queue is picked - !30223 bpf: Reject pkt arguments in mutating subprogs - !29932 [CVEAgent@OLK-6.6] Fix CVE-2026-98598 - !30044 net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - bpf: Make post-verification instruction rewrites killable - virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - RDMA/umem: avoid ib_umem_find_best_pgsz ABI breakage - sched/fair: Avoid overflow in place_entity() - RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - net: dynthread: Add debug switch and instrumentation - net: dynthread: Scale the number of NAPI thread CPUs - net: dynthread: Switch NAPI to threads on spare CPUs - net: dynthread: Steer the RX queue IRQs away from the target tasks - net: dynthread: Monitor the load of the target tasks - net: dynthread: Add dynamic threaded NAPI scheduler framework - net/mlx5e: Do not block on RTNL while recovering an SQ - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover - net/mlx5e: Acquire RTNL lock before RQs/SQs activation/deactivation - net/mlx5e: link NAPI instances to queues and IRQs - net: Fix napi irq KABI breakage - net: Add NAPI IRQ support - net: Fix KABI breakage for queue napi association - net: Add queue and napi association - neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - configfs: unhash the dentry before dropping the item in rmdir - bpf: Reject pkt arguments in mutating subprogs - bpf: Fix kabi breakage in struct bpf_subprog_info - bpf: Reject legacy packet loads from callbacks - blk-mq: set RQF_USE_SCHED when the operation is known - net: cap skb->queue_mapping when the tx queue is picked - net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - ipv6: Prevent rt6_insert_exception() for dying fib6_info. - xfs: fix cursor and pointer handling when recovering iunlink buckets - xfrm: hold net_device reference under RCU in bundle creation - drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown - !30268 ub: udma: solving internal code review issues - !30305 bpf: Mark syscall helpers as sleepable - !30113 fix/CVE-2026-98103 - !30061 [CVEAgent@OLK-6.6] Fix CVE-2026-98966 - !30099 [CVEAgent@OLK-6.6] Fix CVE-2026-99070 - !30087 [CVEAgent@OLK-6.6] Fix CVE-2026-99031 - !30100 [CVEAgent@OLK-6.6] Fix CVE-2026-99071 - !30101 [CVEAgent@OLK-6.6] Fix CVE-2026-99072 - !30102 [CVEAgent@OLK-6.6] Fix CVE-2026-99074 - !30091 [CVEAgent@OLK-6.6] Fix CVE-2026-99041 - !30088 [CVEAgent@OLK-6.6] Fix CVE-2026-99033 - !30043 seg6: ensure packet data is writable before modifying SRH and IPv6 DA - !30197 CVE-2026-98503 - bpf: Mark syscall helpers as sleepable - ub: udma: support dwqe with a few wqebbs - ub: udma: solving internal code review issues - seg6: ensure packet data is writable before modifying SRH and IPv6 DA - igmp: fix kabi breakage of struct ip_sf_list - packet: use ubuf_info completion for TX_RING packets - virtio_net: copy zerocopy frags in start_xmit without NAPI - igmp: convert struct ip_sf_list to RCU - ipv4: stop PMTU walk when nexthop group shrinks - ipv4: stop route notification sizing when nexthop group shrinks - ipv4: do not warn on route notification size race - ipv6: do not warn on route notification size race - ip6_gre: remove obsolete ERSPAN PMTU update - net/packet: guard the ll header push in packet_rcv_spkt() - net: bridge: avoid recursive multicast port cleanup - bonding: fix the program leak when XDP is replaced - !30029 CODEOWNERS: add kernel module ownership rules - !30291 [OLK-6.6] mm/swapfile: reject duplicated bad pages in swap header - !30201 filescgroup: migrate files resources of every task, not just the first - !30306 Fix CVE-2026-98799 - bpf: Fix kabi breakage in struct bpf_tramp_image and bpf_trampoline - bpf: Skip detached progs in trampoline images that are still in use - mm/swapfile: reject duplicated bad pages in swap header - filescgroup: migrate files resources of every task, not just the first - scripts: add get_codeowner.py to look up CODEOWNERS owners - CODEOWNERS: add kernel module ownership rules - !30256 [Backport] ext4: defer unwritten splitting until I/O completion - !30394 urma: Fix the assignment before null check - !30003 [CVEAgent@OLK-6.6] Fix CVE-2026-98831 - !29516 [CVEAgent@OLK-6.6] Fix CVE-2026-98198 - !30220 drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - !30082 [CVEAgent@OLK-6.6] Fix CVE-2026-99012 - !30071 [CVEAgent@OLK-6.6] Fix CVE-2026-98983 - !30262 [CVEAgent] Fix CVE-2026-99091 - !30294 Fix CVE-2026-99011 - !30293 Fix CVE-2026-99008 - !30290 Fix CVE-2026-98663 - !30289 Fix CVE-2026-98664 - !30288 Fix CVE-2026-98666 - !30234 [PATCH 00/11] KVM: arm64: pvm: Add software VGICv3 and virtual timer support - ext4: prevent sleeping allocation in NOWAIT write path - !30367 Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - ext4: remove EXT4_GET_BLOCKS_IO_CREATE_EXT - ext4: simplify the mapping query logic in ext4_iomap_begin() - ext4: skip overwrite check for aligned non-extending DIO writes - ext4: remove unused unwritten parameter in ext4_dio_write_iter() - ext4: remove useless ext4_iomap_overwrite_ops - ext4: avoid starting handle when dio writing an unwritten extent - ext4: don't split extent before submitting I/O - !30233 Fix CVE-2026-98917 - !30235 Fix CVE-2026-98930 - !30368 wifi: mac80211: validate TX status rate metadata - !30378 tty: tty_port: restore TTY_IO_ERROR on activation failure - !30380 tty: port: fix tty_port_tty_vhangup() race - !30371 mtd: core: avoid double-free of OTP NVMEM device - urma: Fix the assignment before null check - !30386 RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - !30270 [OLK-6.6] AMD Venice additional patches for openEuler - !28385 [OLK-6.6] crypto: ccp: fix vpsp cmd ctx leak - !30382 fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - !30365 bpf: Fix out-of-bounds btf->types write for split BTF - fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - !30313 kabi: fix include helpers broken by the predefined 'linux' macro - tty: port: fix tty_port_tty_vhangup() race - tty: tty_port: restore TTY_IO_ERROR on activation failure - mtd: core: avoid double-free of OTP NVMEM device - wifi: mac80211: validate TX status rate metadata - bpf: Fix out-of-bounds btf->types write for split BTF - kabi: fix include helpers broken by the predefined 'linux' macro - KVM: arm64: pvm: Handle counter reads in the hyp path - KVM: arm64: pvm: Trap guest timer accesses and enforce EL0 permissions - KVM: arm64: pvm: Align timer capabilities and counter handling with RV timers - KVM: arm64: pvm: Wire RV timers into the KVM timer entry points - KVM: arm64: pvm: Add the software RV timer implementation - KVM: arm64: pvm: Deliver VGIC interrupts without hardware LRs - KVM: arm64: pvm: Emulate VGIC active priority registers - KVM: arm64: pvm: Route ICC accesses through register descriptors - KVM: arm64: pvm: Emulate the GICv3 CPU interface - KVM: arm64: Handle pending EL1 IRQ exceptions - KVM: arm64: pvm: Constrain virtual interrupt capabilities - Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown - iio: imu: adis16480: fix unprotected debugfs reads - iio: imu: adis16400: fix unprotected debugfs reads - iio: gyro: adis16136: fix unprotected debugfs reads - Bluetooth: MGMT: Fix status of pending commands flushed on power off - EDAC/amd64: Mask UMC chip select to the four implemented selects - x86/mce: Fix hardware debug register corruption on task migration - x86/MCE/AMD: Fix inverted interrupt enablement during storm handling - x86/amd_node: Avoid divide by zero on virtualized systems - RAS/AMD/ATL, EDAC/amd64: Only load ATL when needed - x86/mce: Set up the polling timer before CMCI discovery - x86/mce: Restore MCA polling interval halving - EDAC/amd64: Remove NUM_CONTROLLERS macro - x86/mce/inject: Remove call to mce_notify_irq() - x86/mce: Remove the redundant mce_hygon_feature_init() - x86/mce/threshold: Remove the redundant this_cpu_dec_return() - crypto: ccp: fix vpsp cmd ctx leak - KVM: s390: Fix IRQ injection with SIGP Stop and Store Status - parisc: Increase kernel stack size to 32kb - drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - Bluetooth: ISO: Serialize concurrent connect calls - unshare: don't drop active namespace references that were never taken - of/overlay: don't leak fragment references when changeset init fails - hwmon: (pwm-fan) Stop RPM timer before freeing tach data - !30459 [CVEAgent@OLK-6.6] Fix CVE-2026-99234 - !30468 [CVEAgent@OLK-6.6] Fix CVE-2026-99143 - !30322 urma: fix ipourma eid handler and register work concurrency - !30455 arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30491 [OLK-6.6] AMD Venice additional patches for openEuler - 2 - EDAC/amd64: Avoid a -Wformat-security warning - EDAC/amd64: Generate ctl_name string at runtime - !29993 [CVEAgent@OLK-6.6] Fix CVE-2026-98807 - !29964 [CVEAgent@OLK-6.6] Fix CVE-2026-98747 - !30393 ub/ubmem-vmmu: Remove the support_attr callback mechanism. - !30447 wifi: mac80211: minstrel_ht: validate fixed rate index - !30446 net: ena: fix MMIO read buffer leak on probe failure - tracing: Keep the predicate limit separate from program capacity - !30013 [CVEAgent@OLK-6.6] Fix CVE-2026-98855 - !30431 fix CVE-2026-98490 for OLK-6.6 - !30425 fix CVE-2026-98722 for OLK-6.6 - !30410 nvdimm: pmem: keep PREFLUSH before data writes - !30406 Fix CVE-2026-97480 for OLK-6.6 - !30204 x86/cpu/hygon: Report S5 reset status during boot - tracing: Unregister field variable histograms when the command fails - !30395 tty: fix saved termios reset race - arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30031 drm/amdkfd: fix SMI event cross-process information leak - wifi: mac80211: minstrel_ht: validate fixed rate index - net: ena: fix MMIO read buffer leak on probe failure - net: openvswitch: conntrack: fix helper UAF due to extensions realloc - net: openvswitch: conntrack: remove 'add_helper' dead code - openvswitch: prepare for stolen verdict coming from conntrack and nat engine - net/sched: act_ct: avoid modifying shared unconfirmed ct entry - net/sched: act_ct: fix helper UAF due to extensions realloc - ub/ubmem-vmmu: Remove the support_attr callback mechanism. - mtd: block2mtd: Fix divide error when erase_size is zero - block2mtd: prevent direct access of bd_inode - nvdimm: pmem: keep PREFLUSH before data writes - tty: serial: 8250: protect against NULL uart->port.dev in register - serial: 8250: invert serial8250_register_8250_port() CIR condition - urma: fix ipourma eid handler and register work concurrency - tty: fix saved termios reset race - x86/cpu/hygon: Report S5 reset status during boot - drm/amdkfd: fix SMI event cross-process information leak - of/overlay: put property on deadprops only after changeset add succeeds - net/mlx5: Fix slab-out-of-bounds when handling team device events - serial: core: fix NULL pointer dereference in serial_core_unregister_port() - !30553 tracing: Reject incomplete event filter expressions - !30498 nfsd: split nfsd4_copy into transient and durable async copy objects - !30000 [CVEAgent@OLK-6.6] Fix CVE-2026-98822 - !30497 cdma: ratelimit hot-path error logs in kernel driver and header file code synchronization - tracing: Reject incomplete event filter expressions - !30546 [OLK-6.6] ub: fix UBASE port reporting and UNIC reset and DMA handling - !30481 [CVEAgent@OLK-6.6] Fix CVE-2026-99080 - !30483 [CVEAgent@OLK-6.6] Fix CVE-2026-99206 - !30388 Fix CVE-2026-99153 - !30390 Fix CVE-2026-99152 - !30387 Fix CVE-2026-99110 - !30391 Fix CVE-2026-99109 - !30479 [CVEAgent@OLK-6.6] Fix CVE-2026-99254 - !30538 scsi: libsas: Fix SMP IO deadlock during HA resume - !30537 ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30536 scsi: libsas: Add linkrate and sas_addr change detection in rediscover；scsi: libsas: Add sas_ex_phy_to_dev() helper - !30486 [CVEAgent@OLK-6.6] Fix CVE-2026-99247 - !30454 [OLK-6.6] Fix CVE-2026-97566 - !30453 [OLK-6.6] Fix CVE-2026-97432 - !30444 [OLK-6.6] Fix CVE-2026-43234 - !30403 x86/hygon: Fix FPDSS on Hygon - !30269 [OLK-6.6] update rnpvf driver to 1.2.0. - !30155 [OLK-6.6] Fix CVE-2026-74695 - !30153 [OLK-6.6] Fix CVE-2026-72494 - !30149 [OLK-6.6] Fix CVE-2026-74368 - !30092 [CVEAgent@OLK-6.6] Fix CVE-2026-99052 - !30090 [CVEAgent@OLK-6.6] Fix CVE-2026-99040 - !30057 [CVEAgent@OLK-6.6] Fix CVE-2026-98948 - !30086 [CVEAgent@OLK-6.6] Fix CVE-2026-99025 - !30105 [CVEAgent@OLK-6.6] Fix CVE-2026-99078 - !30106 [CVEAgent@OLK-6.6] Fix CVE-2026-99079 - ub: ubase: skip bandwidth queries on next-generation chips - net: unic: Fix TX/RX DMA ordering and cache sync - net: unic: serialize port deactivation with reset - ub: ubase: add ub port events handling and statistics - scsi: libsas: Fix SMP IO deadlock during HA resume - scsi: libsas: Add sas_ex_phy_to_dev() helper - scsi: libsas: Add linkrate and sas_addr change detection in rediscover - !30430 v8 arm64: Allow CPU0 to be nohz_full - ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30300 mm/gup: allow movable memory pinnable - !30487 urma: limit opt buf length in uburma ioctl commands - !29931 [CVEAgent@OLK-6.6] Fix CVE-2026-98570 - nfsd: split nfsd4_copy into transient and durable async copy objects - ub: cdma: header file code synchronization - ub: cdma: ratelimit hot-path error logs in kernel driver - x86: hygon: Fix FPDSS on Hygon - tracing: Do not initialize tracefs work if tracing is disabled - scsi: target: iscsi: Fix race in discovery auth updates - fs: Free any excess xarray nodes in clear_inode() - io_uring: don't flood a cancelling task with task_work - urma: limit opt buf length in uburma ioctl commands - mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 - wifi: iwlwifi: mvm: fix P2P-Device binding handling - team: avoid NETDEV_CHANGEMTU event when unregistering slave - arm64: defconfig: Enable CONFIG_PM_SLEEP_SMP_NONZERO_CPU and CONFIG_ARCH_SUSPEND_NONZERO_CPU - arm64: Allow boot CPU nohz_full to coexist with suspend and kexec - isolation: Check whether there exists a housekeeping CPU online - isolation: Do not check whether housekeeping CPUs are present - smb: client: reject SetEA requests that do not fit the request buffer - scsi: libiscsi: Validate the task named by a management response - scsi: libiscsi: Validate the ITT reflected in a Reject PDU - smb: client: fix heap overflow in cifs_do_set_acl() - rnpvf: update rnpvf driver to 1.2.0. - mm/gup: allow movable memory pinnable - rnpvf: update rnpvf driver to 1.2.0. - netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() - RDMA/irdma: Replace waitqueue and flag with completion - wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() - net/mlx5e: Prevent stale XSK buffer release on refill retry - net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry - selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts - KEYS: Fix add_key() race with keyring restriction - openvswitch: fix soft lockup in the netlink flow dump - mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() - wifi: mac80211: prevent AP VLAN tx from other interfaces - net: ipv6: keep room for the mac header in dst_dev_overhead() - !30530 [CVEAgent@OLK-6.6] Fix CVE-2026-99163 - !30532 [CVEAgent@OLK-6.6] Fix CVE-2026-99235 - !29765 Fix CVE-2026-98289 - !30230 Fix CVE-2026-97615 - !29790 Fix CVE-2026-93250 - !30510 [CVEAgent@OLK-6.6] Fix CVE-2026-99005 - !30506 [CVEAgent@OLK-6.6] Fix CVE-2026-98871 - !30307 feat/obmm-unified-switch-split-v4 - !30064 [CVEAgent@OLK-6.6] Fix CVE-2026-98972 - !30507 [CVEAgent@OLK-6.6] Fix CVE-2026-98883 - !30450 BBML3 bugfix - !30156 [OLK-6.6] Fix CVE-2026-68258 - !30154 [OLK-6.6] Fix CVE-2026-74729 - !30151 [OLK-6.6] Fix CVE-2026-74273 - !27793 [OLK-6.6] Fix CVE-2026-68421 - !27512 [OLK-6.6] Fix CVE-2026-64259 - !30146 [OLK-6.6] Fix CVE-2026-53109 - !30575 arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30567 scsi: hisi_sas: Clear PHY error counts on phyup - arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30472 [CVEAgent@OLK-6.6] Fix CVE-2026-99243 - scsi: hisi_sas: Clear PHY error counts on phyup - scsi:hisi_sas:Sync upstream timer_delete API changes in hisi_sas_v3_hw.c - tracing: Save the event file instead of the compatible histogram - tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields - drm/i915/gt: Unmask interrupts only when ACTIVE is true - serial: 8250_port: recognize UPIO_AU - crypto: ccp - Fix possible deadlock in SEV init failure path - obmm: pack the internal structs by field ordering - obmm: sysfs views over the switch: attributes, identity, lockless reads - obmm: generalized dual-backend gap mmap - obmm: export switch target wrap-up and validation consolidation - obmm: unified two-phase switch core (import target) - obmm: install mappings lazily from the backend fault paths - obmm: fix the pxm bound, the open TOCTOU and the teardown release - obmm: split the region shell from the memory backends - obmm: depend on TRANSPARENT_HUGEPAGE for the PMD fault paths - io-wq: order the exit bit against worker creation task work - mm/pfn_range_alloc: split block mappings in linear map updates - arm64/mm: make pte_present() recognize present-invalid entries - net: bridge: use option bits for CFM/MRP frame handlers - drm/amdkfd: Check bounds on CRIU restore queue type and mqd size - soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read - cxl/region: Block region delete during region creation - powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy - cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() - vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() - af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). - sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() - fuse-uring: make a fuse_req on SQE commit only findable after memcpy - !30591 [CVEAgent@OLK-6.6] Fix CVE-2026-99142 - !30590 [CVEAgent@OLK-6.6] Fix CVE-2026-99219 - !30594 [CVEAgent@OLK-6.6] Fix CVE-2026-99233 - !30600 urma: warn on slow TP driver callbacks - urma: warn on slow TP driver callbacks - tracing/histograms: Verify event_call identity when updating synth_event refcount - tracing: Check operator stack capacity before pushing - ftrace: Initialize modname and offset in print_rec() - !30602 [CVEAgent@OLK-6.6] Fix CVE-2026-99117 - !30605 [CVEAgent@OLK-6.6] Fix CVE-2026-99211 - !30604 [CVEAgent@OLK-6.6] Fix CVE-2026-99201 - netlink: reset skb headers before unicast and multicast filtering - netlink: avoid hashing the network namespace pointer - net: bridge: mcast: don't truncate the port group walk on teardown - !30597 [CVEAgent@OLK-6.6] Fix CVE-2026-99239 - !30582 v5 MOC bypass cache - !30610 iommu/io-pgtable-arm: Add support for contiguous hint - !30523 drivers:misc:sdma-dae: Open source sdma-dae driver to OLK-6.6 (already supported on olk-5.10) - !28122 [CVEAgent@OLK-6.6] Fix CVE-2026-89802 - !29350 [CVEAgent@OLK-6.6] Fix CVE-2026-97988 - !30473 Fix CVE-2026-97992 - !30150 [OLK-6.6] Fix CVE-2026-74527 - !30576 net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - !30544 [OLK-6.6] Fix CVE-2026-90057 - !30476 [OLK-6.6] fix CVE-2026-98936 - !30474 [OLK-6.6] fix CVE-2026-99059 - !30144 [OLK-6.6] Fix CVE-2026-64190 - !30311 [OLK-6.6]nser: add support for wangxun RDMA driver - iommu/io-pgtable-arm: Add support for contiguous hint - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn - openeuler: configs: arm64: Enable PBHA by default - arm64: mm: Introduce kernel param pbha - arm64: mm: Introduce prctl to control pbha behavior - arm64: mm: Set flag VM_PBHA_BIT0 for global init task - arm64: mm: Introduce procfs interface to update PBHA0 bit - arm64: mm: Set PBHA0 bit for VM_PBHA_BIT0 - arm64: mm: Introduce VM_PBHA_BIT0 to enable pbha bit0 for single vma - arm64: mm: Show PBHA bit 59 as PBHA0 in ptdump - arm64: mm: Update kernel pte entries if pbha bit0 enabled - arm64: mm: Detect and enable PBHA bit0 at early startup - arm64: cpufeature: Enable PBHA for stage1 early via FDT - Documentation: arm64: Describe the support and expectations for PBHA - KVM: arm64: Configure PBHA bits for stage2 - arm64: mm: Add pgprot_pbha() to allow drivers to request PBHA values - arm64: cpufeature: Enable PBHA bits for stage1 - dt-bindings: arm: Add binding for Page Based Hardware Attributes - dt-bindings: Rename the description of cpu nodes cpu.yaml - KVM: arm64: Detect and enable PBHA for stage2 - net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() - drivers:misc:sdma-dae: adapt driver interfaces for OLK-6.6 - net: team: fix NULL pointer dereference in team_xmit during mode change - net: team: Rename port_disabled team mode op to port_tx_disabled - net: team: Remove unused team_mode_op, port_enabled - wifi: ath11k: reset ar->num_stations on hardware start - wireguard: noise: reject response consumption after intermediate initiation - vhost-vdpa: protect config_ctx from being freed under the config callback - x86/arm64: config: enable the Wangxun nser RDMA driver - net: wangxun: nser: add RDMA support for 100GbE NICs - octeontx2-af: Block VFs from clobbering special CGX PKIND state - vhost: invalidate vring access on IOTLB transitions - drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op - drivers:misc:sdma-dae: Remove redundant print during mm exit and resume. - drivers:misc:sdma-dae: Revert optimize kernel code - drivers:misc:sdma-dae: Revert add channel depth info in debugfs - drivers:misc:sdma-dae: Revert Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Remove interference print. - drivers:misc:sdma-dae: Checking the address alignment - drivers:misc:sdma-dae: add NULL judgement of global variables - drivers:misc:sdma-dae: add channel depth info in debugfs - drivers:misc:sdma-dae: optimize kernel code - drivers:misc:sdma-dae: fix incorrect debugfs print - drivers:misc:sdma-dae: sdma fix uncorrect sleep time - drivers:misc:sdma-dae: fix incorrect kmalloc flag - drivers:misc:sdma-dae: sdma fix PUAF problem fork risk - drivers:misc:sdma-dae: modify ttl_processes reduce logic - drivers:misc:sdma-dae: remove unnecessary return in void function - drivers:misc:sdma-dae: fix incorrect resource release - drivers:misc:sdma-dae: remove lock while pausing channels - drivers:misc:sdma-dae: add mmu_notifier - drivers:misc:sdma-dae: add MODULE_VERSION to control version - drivers:misc:sdma-dae: add print in exceptional branch - drivers:misc:sdma-dae: bugfix of channel operation - drivers:misc:sdma-dae: change authority of sdma device - drivers:misc:sdma-dae: add channel ida validation - drivers:misc:sdma-dae: add vma_ops to avoid mremap error - drivers:misc:sdma-dae: add fast mode - drivers:misc:sdma-dae: not expose sq_tail write and add validation of cq_head - drivers:misc:sdma-dae: add debugfs of sdma-dae - drivers:misc:sdma-dae: fix icsl code check problems - drivers:misc:sdma-dae: fix input validate problems - drivers:misc:sdma-dae: fix interrupt handle logic - drivers:misc:sdma-dae: not compile sdma-dae by default - drivers:misc:sdma-dae: enable sdma_dae for arm64 - drivers:misc:sdma-dae: support page fault preprocess - drivers:misc:sdma-dae: support interrupt init and handle - drivers:misc:sdma-dae: support sqe task send and execute - drivers:misc:sdma-dae: support channel management - drivers:misc:sdma-dae: support getting streamID - drivers:misc:sdma-dae: support initializ sdma driver - !30253 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - !29554 [CVEAgent@OLK-6.6] Fix CVE-2026-98286 - !30263 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - !30258 v10 net: dynthread: dynamic threaded NAPI - !30208 Fix CVE-2026-98044 - !30280 bpf: Make post-verification instruction rewrites killable - !30184 blk-mq: set RQF_USE_SCHED when the operation is known - !30267 sched/fair: Avoid overflow in place_entity() - !30236 configfs: unhash the dentry before dropping the item in rmdir - !30276 virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - !29584 [CVEAgent@OLK-6.6] Fix CVE-2026-98364 - !29906 [CVEAgent@OLK-6.6] Fix CVE-2026-98443 - !30046 net: cap skb->queue_mapping when the tx queue is picked - !30223 bpf: Reject pkt arguments in mutating subprogs - !29932 [CVEAgent@OLK-6.6] Fix CVE-2026-98598 - !30044 net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - bpf: Make post-verification instruction rewrites killable - virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - RDMA/umem: avoid ib_umem_find_best_pgsz ABI breakage - sched/fair: Avoid overflow in place_entity() - RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - net: dynthread: Add debug switch and instrumentation - net: dynthread: Scale the number of NAPI thread CPUs - net: dynthread: Switch NAPI to threads on spare CPUs - net: dynthread: Steer the RX queue IRQs away from the target tasks - net: dynthread: Monitor the load of the target tasks - net: dynthread: Add dynamic threaded NAPI scheduler framework - net/mlx5e: Do not block on RTNL while recovering an SQ - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover - net/mlx5e: Acquire RTNL lock before RQs/SQs activation/deactivation - net/mlx5e: link NAPI instances to queues and IRQs - net: Fix napi irq KABI breakage - net: Add NAPI IRQ support - net: Fix KABI breakage for queue napi association - net: Add queue and napi association - neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - configfs: unhash the dentry before dropping the item in rmdir - bpf: Reject pkt arguments in mutating subprogs - bpf: Fix kabi breakage in struct bpf_subprog_info - bpf: Reject legacy packet loads from callbacks - blk-mq: set RQF_USE_SCHED when the operation is known - net: cap skb->queue_mapping when the tx queue is picked - net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - ipv6: Prevent rt6_insert_exception() for dying fib6_info. - xfs: fix cursor and pointer handling when recovering iunlink buckets - xfrm: hold net_device reference under RCU in bundle creation - drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown - !30268 ub: udma: solving internal code review issues - !30305 bpf: Mark syscall helpers as sleepable - !30113 fix/CVE-2026-98103 - !30061 [CVEAgent@OLK-6.6] Fix CVE-2026-98966 - !30099 [CVEAgent@OLK-6.6] Fix CVE-2026-99070 - !30087 [CVEAgent@OLK-6.6] Fix CVE-2026-99031 - !30100 [CVEAgent@OLK-6.6] Fix CVE-2026-99071 - !30101 [CVEAgent@OLK-6.6] Fix CVE-2026-99072 - !30102 [CVEAgent@OLK-6.6] Fix CVE-2026-99074 - !30091 [CVEAgent@OLK-6.6] Fix CVE-2026-99041 - !30088 [CVEAgent@OLK-6.6] Fix CVE-2026-99033 - !30043 seg6: ensure packet data is writable before modifying SRH and IPv6 DA - !30197 CVE-2026-98503 - bpf: Mark syscall helpers as sleepable - ub: udma: support dwqe with a few wqebbs - ub: udma: solving internal code review issues - seg6: ensure packet data is writable before modifying SRH and IPv6 DA - igmp: fix kabi breakage of struct ip_sf_list - packet: use ubuf_info completion for TX_RING packets - virtio_net: copy zerocopy frags in start_xmit without NAPI - igmp: convert struct ip_sf_list to RCU - ipv4: stop PMTU walk when nexthop group shrinks - ipv4: stop route notification sizing when nexthop group shrinks - ipv4: do not warn on route notification size race - ipv6: do not warn on route notification size race - ip6_gre: remove obsolete ERSPAN PMTU update - net/packet: guard the ll header push in packet_rcv_spkt() - net: bridge: avoid recursive multicast port cleanup - bonding: fix the program leak when XDP is replaced - !30029 CODEOWNERS: add kernel module ownership rules - !30291 [OLK-6.6] mm/swapfile: reject duplicated bad pages in swap header - !30201 filescgroup: migrate files resources of every task, not just the first - !30306 Fix CVE-2026-98799 - bpf: Fix kabi breakage in struct bpf_tramp_image and bpf_trampoline - bpf: Skip detached progs in trampoline images that are still in use - mm/swapfile: reject duplicated bad pages in swap header - filescgroup: migrate files resources of every task, not just the first - scripts: add get_codeowner.py to look up CODEOWNERS owners - CODEOWNERS: add kernel module ownership rules - !30256 [Backport] ext4: defer unwritten splitting until I/O completion - !30394 urma: Fix the assignment before null check - !30003 [CVEAgent@OLK-6.6] Fix CVE-2026-98831 - !29516 [CVEAgent@OLK-6.6] Fix CVE-2026-98198 - !30220 drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - !30082 [CVEAgent@OLK-6.6] Fix CVE-2026-99012 - !30071 [CVEAgent@OLK-6.6] Fix CVE-2026-98983 - !30262 [CVEAgent] Fix CVE-2026-99091 - !30294 Fix CVE-2026-99011 - !30293 Fix CVE-2026-99008 - !30290 Fix CVE-2026-98663 - !30289 Fix CVE-2026-98664 - !30288 Fix CVE-2026-98666 - !30234 [PATCH 00/11] KVM: arm64: pvm: Add software VGICv3 and virtual timer support - ext4: prevent sleeping allocation in NOWAIT write path - !30367 Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - ext4: remove EXT4_GET_BLOCKS_IO_CREATE_EXT - ext4: simplify the mapping query logic in ext4_iomap_begin() - ext4: skip overwrite check for aligned non-extending DIO writes - ext4: remove unused unwritten parameter in ext4_dio_write_iter() - ext4: remove useless ext4_iomap_overwrite_ops - ext4: avoid starting handle when dio writing an unwritten extent - ext4: don't split extent before submitting I/O - !30233 Fix CVE-2026-98917 - !30235 Fix CVE-2026-98930 - !30368 wifi: mac80211: validate TX status rate metadata - !30378 tty: tty_port: restore TTY_IO_ERROR on activation failure - !30380 tty: port: fix tty_port_tty_vhangup() race - !30371 mtd: core: avoid double-free of OTP NVMEM device - urma: Fix the assignment before null check - !30386 RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - !30270 [OLK-6.6] AMD Venice additional patches for openEuler - !28385 [OLK-6.6] crypto: ccp: fix vpsp cmd ctx leak - !30382 fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - !30365 bpf: Fix out-of-bounds btf->types write for split BTF - fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - !30313 kabi: fix include helpers broken by the predefined 'linux' macro - tty: port: fix tty_port_tty_vhangup() race - tty: tty_port: restore TTY_IO_ERROR on activation failure - mtd: core: avoid double-free of OTP NVMEM device - wifi: mac80211: validate TX status rate metadata - bpf: Fix out-of-bounds btf->types write for split BTF - kabi: fix include helpers broken by the predefined 'linux' macro - KVM: arm64: pvm: Handle counter reads in the hyp path - KVM: arm64: pvm: Trap guest timer accesses and enforce EL0 permissions - KVM: arm64: pvm: Align timer capabilities and counter handling with RV timers - KVM: arm64: pvm: Wire RV timers into the KVM timer entry points - KVM: arm64: pvm: Add the software RV timer implementation - KVM: arm64: pvm: Deliver VGIC interrupts without hardware LRs - KVM: arm64: pvm: Emulate VGIC active priority registers - KVM: arm64: pvm: Route ICC accesses through register descriptors - KVM: arm64: pvm: Emulate the GICv3 CPU interface - KVM: arm64: Handle pending EL1 IRQ exceptions - KVM: arm64: pvm: Constrain virtual interrupt capabilities - Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown - iio: imu: adis16480: fix unprotected debugfs reads - iio: imu: adis16400: fix unprotected debugfs reads - iio: gyro: adis16136: fix unprotected debugfs reads - Bluetooth: MGMT: Fix status of pending commands flushed on power off - EDAC/amd64: Mask UMC chip select to the four implemented selects - x86/mce: Fix hardware debug register corruption on task migration - x86/MCE/AMD: Fix inverted interrupt enablement during storm handling - x86/amd_node: Avoid divide by zero on virtualized systems - RAS/AMD/ATL, EDAC/amd64: Only load ATL when needed - x86/mce: Set up the polling timer before CMCI discovery - x86/mce: Restore MCA polling interval halving - EDAC/amd64: Remove NUM_CONTROLLERS macro - x86/mce/inject: Remove call to mce_notify_irq() - x86/mce: Remove the redundant mce_hygon_feature_init() - x86/mce/threshold: Remove the redundant this_cpu_dec_return() - crypto: ccp: fix vpsp cmd ctx leak - KVM: s390: Fix IRQ injection with SIGP Stop and Store Status - parisc: Increase kernel stack size to 32kb - drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - Bluetooth: ISO: Serialize concurrent connect calls - unshare: don't drop active namespace references that were never taken - of/overlay: don't leak fragment references when changeset init fails - hwmon: (pwm-fan) Stop RPM timer before freeing tach data - !30459 [CVEAgent@OLK-6.6] Fix CVE-2026-99234 - !30468 [CVEAgent@OLK-6.6] Fix CVE-2026-99143 - !30322 urma: fix ipourma eid handler and register work concurrency - !30455 arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30491 [OLK-6.6] AMD Venice additional patches for openEuler - 2 - EDAC/amd64: Avoid a -Wformat-security warning - EDAC/amd64: Generate ctl_name string at runtime - !29993 [CVEAgent@OLK-6.6] Fix CVE-2026-98807 - !29964 [CVEAgent@OLK-6.6] Fix CVE-2026-98747 - !30393 ub/ubmem-vmmu: Remove the support_attr callback mechanism. - !30447 wifi: mac80211: minstrel_ht: validate fixed rate index - !30446 net: ena: fix MMIO read buffer leak on probe failure - tracing: Keep the predicate limit separate from program capacity - !30013 [CVEAgent@OLK-6.6] Fix CVE-2026-98855 - !30431 fix CVE-2026-98490 for OLK-6.6 - !30425 fix CVE-2026-98722 for OLK-6.6 - !30410 nvdimm: pmem: keep PREFLUSH before data writes - !30406 Fix CVE-2026-97480 for OLK-6.6 - !30204 x86/cpu/hygon: Report S5 reset status during boot - tracing: Unregister field variable histograms when the command fails - !30395 tty: fix saved termios reset race - arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30031 drm/amdkfd: fix SMI event cross-process information leak - wifi: mac80211: minstrel_ht: validate fixed rate index - net: ena: fix MMIO read buffer leak on probe failure - net: openvswitch: conntrack: fix helper UAF due to extensions realloc - net: openvswitch: conntrack: remove 'add_helper' dead code - openvswitch: prepare for stolen verdict coming from conntrack and nat engine - net/sched: act_ct: avoid modifying shared unconfirmed ct entry - net/sched: act_ct: fix helper UAF due to extensions realloc - ub/ubmem-vmmu: Remove the support_attr callback mechanism. - mtd: block2mtd: Fix divide error when erase_size is zero - block2mtd: prevent direct access of bd_inode - nvdimm: pmem: keep PREFLUSH before data writes - tty: serial: 8250: protect against NULL uart->port.dev in register - serial: 8250: invert serial8250_register_8250_port() CIR condition - urma: fix ipourma eid handler and register work concurrency - tty: fix saved termios reset race - x86/cpu/hygon: Report S5 reset status during boot - drm/amdkfd: fix SMI event cross-process information leak - of/overlay: put property on deadprops only after changeset add succeeds - net/mlx5: Fix slab-out-of-bounds when handling team device events - serial: core: fix NULL pointer dereference in serial_core_unregister_port() - !30553 tracing: Reject incomplete event filter expressions - !30498 nfsd: split nfsd4_copy into transient and durable async copy objects - !30000 [CVEAgent@OLK-6.6] Fix CVE-2026-98822 - !30497 cdma: ratelimit hot-path error logs in kernel driver and header file code synchronization - tracing: Reject incomplete event filter expressions - !30546 [OLK-6.6] ub: fix UBASE port reporting and UNIC reset and DMA handling - !30481 [CVEAgent@OLK-6.6] Fix CVE-2026-99080 - !30483 [CVEAgent@OLK-6.6] Fix CVE-2026-99206 - !30388 Fix CVE-2026-99153 - !30390 Fix CVE-2026-99152 - !30387 Fix CVE-2026-99110 - !30391 Fix CVE-2026-99109 - !30479 [CVEAgent@OLK-6.6] Fix CVE-2026-99254 - !30538 scsi: libsas: Fix SMP IO deadlock during HA resume - !30537 ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30536 scsi: libsas: Add linkrate and sas_addr change detection in rediscover；scsi: libsas: Add sas_ex_phy_to_dev() helper - !30486 [CVEAgent@OLK-6.6] Fix CVE-2026-99247 - !30454 [OLK-6.6] Fix CVE-2026-97566 - !30453 [OLK-6.6] Fix CVE-2026-97432 - !30444 [OLK-6.6] Fix CVE-2026-43234 - !30403 x86/hygon: Fix FPDSS on Hygon - !30269 [OLK-6.6] update rnpvf driver to 1.2.0. - !30155 [OLK-6.6] Fix CVE-2026-74695 - !30153 [OLK-6.6] Fix CVE-2026-72494 - !30149 [OLK-6.6] Fix CVE-2026-74368 - !30092 [CVEAgent@OLK-6.6] Fix CVE-2026-99052 - !30090 [CVEAgent@OLK-6.6] Fix CVE-2026-99040 - !30057 [CVEAgent@OLK-6.6] Fix CVE-2026-98948 - !30086 [CVEAgent@OLK-6.6] Fix CVE-2026-99025 - !30105 [CVEAgent@OLK-6.6] Fix CVE-2026-99078 - !30106 [CVEAgent@OLK-6.6] Fix CVE-2026-99079 - ub: ubase: skip bandwidth queries on next-generation chips - net: unic: Fix TX/RX DMA ordering and cache sync - net: unic: serialize port deactivation with reset - ub: ubase: add ub port events handling and statistics - scsi: libsas: Fix SMP IO deadlock during HA resume - scsi: libsas: Add sas_ex_phy_to_dev() helper - scsi: libsas: Add linkrate and sas_addr change detection in rediscover - !30430 v8 arm64: Allow CPU0 to be nohz_full - ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30300 mm/gup: allow movable memory pinnable - !30487 urma: limit opt buf length in uburma ioctl commands - !29931 [CVEAgent@OLK-6.6] Fix CVE-2026-98570 - nfsd: split nfsd4_copy into transient and durable async copy objects - ub: cdma: header file code synchronization - ub: cdma: ratelimit hot-path error logs in kernel driver - x86: hygon: Fix FPDSS on Hygon - tracing: Do not initialize tracefs work if tracing is disabled - scsi: target: iscsi: Fix race in discovery auth updates - fs: Free any excess xarray nodes in clear_inode() - io_uring: don't flood a cancelling task with task_work - urma: limit opt buf length in uburma ioctl commands - mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 - wifi: iwlwifi: mvm: fix P2P-Device binding handling - team: avoid NETDEV_CHANGEMTU event when unregistering slave - arm64: defconfig: Enable CONFIG_PM_SLEEP_SMP_NONZERO_CPU and CONFIG_ARCH_SUSPEND_NONZERO_CPU - arm64: Allow boot CPU nohz_full to coexist with suspend and kexec - isolation: Check whether there exists a housekeeping CPU online - isolation: Do not check whether housekeeping CPUs are present - smb: client: reject SetEA requests that do not fit the request buffer - scsi: libiscsi: Validate the task named by a management response - scsi: libiscsi: Validate the ITT reflected in a Reject PDU - smb: client: fix heap overflow in cifs_do_set_acl() - rnpvf: update rnpvf driver to 1.2.0. - mm/gup: allow movable memory pinnable - rnpvf: update rnpvf driver to 1.2.0. - netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() - RDMA/irdma: Replace waitqueue and flag with completion - wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() - net/mlx5e: Prevent stale XSK buffer release on refill retry - net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry - selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts - KEYS: Fix add_key() race with keyring restriction - openvswitch: fix soft lockup in the netlink flow dump - mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() - wifi: mac80211: prevent AP VLAN tx from other interfaces - net: ipv6: keep room for the mac header in dst_dev_overhead() - !30530 [CVEAgent@OLK-6.6] Fix CVE-2026-99163 - !30532 [CVEAgent@OLK-6.6] Fix CVE-2026-99235 - !29765 Fix CVE-2026-98289 - !30230 Fix CVE-2026-97615 - !29790 Fix CVE-2026-93250 - !30510 [CVEAgent@OLK-6.6] Fix CVE-2026-99005 - !30506 [CVEAgent@OLK-6.6] Fix CVE-2026-98871 - !30307 feat/obmm-unified-switch-split-v4 - !30064 [CVEAgent@OLK-6.6] Fix CVE-2026-98972 - !30507 [CVEAgent@OLK-6.6] Fix CVE-2026-98883 - !30450 BBML3 bugfix - !30156 [OLK-6.6] Fix CVE-2026-68258 - !30154 [OLK-6.6] Fix CVE-2026-74729 - !30151 [OLK-6.6] Fix CVE-2026-74273 - !27793 [OLK-6.6] Fix CVE-2026-68421 - !27512 [OLK-6.6] Fix CVE-2026-64259 - !30146 [OLK-6.6] Fix CVE-2026-53109 - !30575 arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30567 scsi: hisi_sas: Clear PHY error counts on phyup - arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30472 [CVEAgent@OLK-6.6] Fix CVE-2026-99243 - scsi: hisi_sas: Clear PHY error counts on phyup - scsi:hisi_sas:Sync upstream timer_delete API changes in hisi_sas_v3_hw.c - tracing: Save the event file instead of the compatible histogram - tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields - drm/i915/gt: Unmask interrupts only when ACTIVE is true - serial: 8250_port: recognize UPIO_AU - crypto: ccp - Fix possible deadlock in SEV init failure path - obmm: pack the internal structs by field ordering - obmm: sysfs views over the switch: attributes, identity, lockless reads - obmm: generalized dual-backend gap mmap - obmm: export switch target wrap-up and validation consolidation - obmm: unified two-phase switch core (import target) - obmm: install mappings lazily from the backend fault paths - obmm: fix the pxm bound, the open TOCTOU and the teardown release - obmm: split the region shell from the memory backends - obmm: depend on TRANSPARENT_HUGEPAGE for the PMD fault paths - io-wq: order the exit bit against worker creation task work - mm/pfn_range_alloc: split block mappings in linear map updates - arm64/mm: make pte_present() recognize present-invalid entries - net: bridge: use option bits for CFM/MRP frame handlers - drm/amdkfd: Check bounds on CRIU restore queue type and mqd size - soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read - cxl/region: Block region delete during region creation - powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy - cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() - vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() - af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). - sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() - fuse-uring: make a fuse_req on SQE commit only findable after memcpy - !30591 [CVEAgent@OLK-6.6] Fix CVE-2026-99142 - !30590 [CVEAgent@OLK-6.6] Fix CVE-2026-99219 - !30594 [CVEAgent@OLK-6.6] Fix CVE-2026-99233 - !30600 urma: warn on slow TP driver callbacks - urma: warn on slow TP driver callbacks - tracing/histograms: Verify event_call identity when updating synth_event refcount - tracing: Check operator stack capacity before pushing - ftrace: Initialize modname and offset in print_rec() - !30602 [CVEAgent@OLK-6.6] Fix CVE-2026-99117 - !30605 [CVEAgent@OLK-6.6] Fix CVE-2026-99211 - !30604 [CVEAgent@OLK-6.6] Fix CVE-2026-99201 - netlink: reset skb headers before unicast and multicast filtering - netlink: avoid hashing the network namespace pointer - net: bridge: mcast: don't truncate the port group walk on teardown - !30597 [CVEAgent@OLK-6.6] Fix CVE-2026-99239 - !30582 v5 MOC bypass cache - !30610 iommu/io-pgtable-arm: Add support for contiguous hint - !30523 drivers:misc:sdma-dae: Open source sdma-dae driver to OLK-6.6 (already supported on olk-5.10) - !28122 [CVEAgent@OLK-6.6] Fix CVE-2026-89802 - !29350 [CVEAgent@OLK-6.6] Fix CVE-2026-97988 - !30473 Fix CVE-2026-97992 - !30150 [OLK-6.6] Fix CVE-2026-74527 - !30576 net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - !30544 [OLK-6.6] Fix CVE-2026-90057 - !30476 [OLK-6.6] fix CVE-2026-98936 - !30474 [OLK-6.6] fix CVE-2026-99059 - !30144 [OLK-6.6] Fix CVE-2026-64190 - !30311 [OLK-6.6]nser: add support for wangxun RDMA driver - iommu/io-pgtable-arm: Add support for contiguous hint - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn - openeuler: configs: arm64: Enable PBHA by default - arm64: mm: Introduce kernel param pbha - arm64: mm: Introduce prctl to control pbha behavior - arm64: mm: Set flag VM_PBHA_BIT0 for global init task - arm64: mm: Introduce procfs interface to update PBHA0 bit - arm64: mm: Set PBHA0 bit for VM_PBHA_BIT0 - arm64: mm: Introduce VM_PBHA_BIT0 to enable pbha bit0 for single vma - arm64: mm: Show PBHA bit 59 as PBHA0 in ptdump - arm64: mm: Update kernel pte entries if pbha bit0 enabled - arm64: mm: Detect and enable PBHA bit0 at early startup - arm64: cpufeature: Enable PBHA for stage1 early via FDT - Documentation: arm64: Describe the support and expectations for PBHA - KVM: arm64: Configure PBHA bits for stage2 - arm64: mm: Add pgprot_pbha() to allow drivers to request PBHA values - arm64: cpufeature: Enable PBHA bits for stage1 - dt-bindings: arm: Add binding for Page Based Hardware Attributes - dt-bindings: Rename the description of cpu nodes cpu.yaml - KVM: arm64: Detect and enable PBHA for stage2 - net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() - drivers:misc:sdma-dae: adapt driver interfaces for OLK-6.6 - net: team: fix NULL pointer dereference in team_xmit during mode change - net: team: Rename port_disabled team mode op to port_tx_disabled - net: team: Remove unused team_mode_op, port_enabled - wifi: ath11k: reset ar->num_stations on hardware start - wireguard: noise: reject response consumption after intermediate initiation - vhost-vdpa: protect config_ctx from being freed under the config callback - x86/arm64: config: enable the Wangxun nser RDMA driver - net: wangxun: nser: add RDMA support for 100GbE NICs - octeontx2-af: Block VFs from clobbering special CGX PKIND state - vhost: invalidate vring access on IOTLB transitions - drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op - drivers:misc:sdma-dae: Remove redundant print during mm exit and resume. - drivers:misc:sdma-dae: Revert optimize kernel code - drivers:misc:sdma-dae: Revert add channel depth info in debugfs - drivers:misc:sdma-dae: Revert Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Remove interference print. - drivers:misc:sdma-dae: Checking the address alignment - drivers:misc:sdma-dae: add NULL judgement of global variables - drivers:misc:sdma-dae: add channel depth info in debugfs - drivers:misc:sdma-dae: optimize kernel code - drivers:misc:sdma-dae: fix incorrect debugfs print - drivers:misc:sdma-dae: sdma fix uncorrect sleep time - drivers:misc:sdma-dae: fix incorrect kmalloc flag - drivers:misc:sdma-dae: sdma fix PUAF problem fork risk - drivers:misc:sdma-dae: modify ttl_processes reduce logic - drivers:misc:sdma-dae: remove unnecessary return in void function - drivers:misc:sdma-dae: fix incorrect resource release - drivers:misc:sdma-dae: remove lock while pausing channels - drivers:misc:sdma-dae: add mmu_notifier - drivers:misc:sdma-dae: add MODULE_VERSION to control version - drivers:misc:sdma-dae: add print in exceptional branch - drivers:misc:sdma-dae: bugfix of channel operation - drivers:misc:sdma-dae: change authority of sdma device - drivers:misc:sdma-dae: add channel ida validation - drivers:misc:sdma-dae: add vma_ops to avoid mremap error - drivers:misc:sdma-dae: add fast mode - drivers:misc:sdma-dae: not expose sq_tail write and add validation of cq_head - drivers:misc:sdma-dae: add debugfs of sdma-dae - drivers:misc:sdma-dae: fix icsl code check problems - drivers:misc:sdma-dae: fix input validate problems - drivers:misc:sdma-dae: fix interrupt handle logic - drivers:misc:sdma-dae: not compile sdma-dae by default - drivers:misc:sdma-dae: enable sdma_dae for arm64 - drivers:misc:sdma-dae: support page fault preprocess - drivers:misc:sdma-dae: support interrupt init and handle - drivers:misc:sdma-dae: support sqe task send and execute - drivers:misc:sdma-dae: support channel management - drivers:misc:sdma-dae: support getting streamID - drivers:misc:sdma-dae: support initializ sdma driver - !30253 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - !29554 [CVEAgent@OLK-6.6] Fix CVE-2026-98286 - !30263 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - !30258 v10 net: dynthread: dynamic threaded NAPI - !30208 Fix CVE-2026-98044 - !30280 bpf: Make post-verification instruction rewrites killable - !30184 blk-mq: set RQF_USE_SCHED when the operation is known - !30267 sched/fair: Avoid overflow in place_entity() - !30236 configfs: unhash the dentry before dropping the item in rmdir - !30276 virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - !29584 [CVEAgent@OLK-6.6] Fix CVE-2026-98364 - !29906 [CVEAgent@OLK-6.6] Fix CVE-2026-98443 - !30046 net: cap skb->queue_mapping when the tx queue is picked - !30223 bpf: Reject pkt arguments in mutating subprogs - !29932 [CVEAgent@OLK-6.6] Fix CVE-2026-98598 - !30044 net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - bpf: Make post-verification instruction rewrites killable - virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - RDMA/umem: avoid ib_umem_find_best_pgsz ABI breakage - sched/fair: Avoid overflow in place_entity() - RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - net: dynthread: Add debug switch and instrumentation - net: dynthread: Scale the number of NAPI thread CPUs - net: dynthread: Switch NAPI to threads on spare CPUs - net: dynthread: Steer the RX queue IRQs away from the target tasks - net: dynthread: Monitor the load of the target tasks - net: dynthread: Add dynamic threaded NAPI scheduler framework - net/mlx5e: Do not block on RTNL while recovering an SQ - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover - net/mlx5e: Acquire RTNL lock before RQs/SQs activation/deactivation - net/mlx5e: link NAPI instances to queues and IRQs - net: Fix napi irq KABI breakage - net: Add NAPI IRQ support - net: Fix KABI breakage for queue napi association - net: Add queue and napi association - neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - configfs: unhash the dentry before dropping the item in rmdir - bpf: Reject pkt arguments in mutating subprogs - bpf: Fix kabi breakage in struct bpf_subprog_info - bpf: Reject legacy packet loads from callbacks - blk-mq: set RQF_USE_SCHED when the operation is known - net: cap skb->queue_mapping when the tx queue is picked - net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - ipv6: Prevent rt6_insert_exception() for dying fib6_info. - xfs: fix cursor and pointer handling when recovering iunlink buckets - xfrm: hold net_device reference under RCU in bundle creation - drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown - !30268 ub: udma: solving internal code review issues - !30305 bpf: Mark syscall helpers as sleepable - !30113 fix/CVE-2026-98103 - !30061 [CVEAgent@OLK-6.6] Fix CVE-2026-98966 - !30099 [CVEAgent@OLK-6.6] Fix CVE-2026-99070 - !30087 [CVEAgent@OLK-6.6] Fix CVE-2026-99031 - !30100 [CVEAgent@OLK-6.6] Fix CVE-2026-99071 - !30101 [CVEAgent@OLK-6.6] Fix CVE-2026-99072 - !30102 [CVEAgent@OLK-6.6] Fix CVE-2026-99074 - !30091 [CVEAgent@OLK-6.6] Fix CVE-2026-99041 - !30088 [CVEAgent@OLK-6.6] Fix CVE-2026-99033 - !30043 seg6: ensure packet data is writable before modifying SRH and IPv6 DA - !30197 CVE-2026-98503 - bpf: Mark syscall helpers as sleepable - ub: udma: support dwqe with a few wqebbs - ub: udma: solving internal code review issues - seg6: ensure packet data is writable before modifying SRH and IPv6 DA - igmp: fix kabi breakage of struct ip_sf_list - packet: use ubuf_info completion for TX_RING packets - virtio_net: copy zerocopy frags in start_xmit without NAPI - igmp: convert struct ip_sf_list to RCU - ipv4: stop PMTU walk when nexthop group shrinks - ipv4: stop route notification sizing when nexthop group shrinks - ipv4: do not warn on route notification size race - ipv6: do not warn on route notification size race - ip6_gre: remove obsolete ERSPAN PMTU update - net/packet: guard the ll header push in packet_rcv_spkt() - net: bridge: avoid recursive multicast port cleanup - bonding: fix the program leak when XDP is replaced - !30029 CODEOWNERS: add kernel module ownership rules - !30291 [OLK-6.6] mm/swapfile: reject duplicated bad pages in swap header - !30201 filescgroup: migrate files resources of every task, not just the first - !30306 Fix CVE-2026-98799 - bpf: Fix kabi breakage in struct bpf_tramp_image and bpf_trampoline - bpf: Skip detached progs in trampoline images that are still in use - mm/swapfile: reject duplicated bad pages in swap header - filescgroup: migrate files resources of every task, not just the first - scripts: add get_codeowner.py to look up CODEOWNERS owners - CODEOWNERS: add kernel module ownership rules - !30256 [Backport] ext4: defer unwritten splitting until I/O completion - !30394 urma: Fix the assignment before null check - !30003 [CVEAgent@OLK-6.6] Fix CVE-2026-98831 - !29516 [CVEAgent@OLK-6.6] Fix CVE-2026-98198 - !30220 drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - !30082 [CVEAgent@OLK-6.6] Fix CVE-2026-99012 - !30071 [CVEAgent@OLK-6.6] Fix CVE-2026-98983 - !30262 [CVEAgent] Fix CVE-2026-99091 - !30294 Fix CVE-2026-99011 - !30293 Fix CVE-2026-99008 - !30290 Fix CVE-2026-98663 - !30289 Fix CVE-2026-98664 - !30288 Fix CVE-2026-98666 - !30234 [PATCH 00/11] KVM: arm64: pvm: Add software VGICv3 and virtual timer support - ext4: prevent sleeping allocation in NOWAIT write path - !30367 Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - ext4: remove EXT4_GET_BLOCKS_IO_CREATE_EXT - ext4: simplify the mapping query logic in ext4_iomap_begin() - ext4: skip overwrite check for aligned non-extending DIO writes - ext4: remove unused unwritten parameter in ext4_dio_write_iter() - ext4: remove useless ext4_iomap_overwrite_ops - ext4: avoid starting handle when dio writing an unwritten extent - ext4: don't split extent before submitting I/O - !30233 Fix CVE-2026-98917 - !30235 Fix CVE-2026-98930 - !30368 wifi: mac80211: validate TX status rate metadata - !30378 tty: tty_port: restore TTY_IO_ERROR on activation failure - !30380 tty: port: fix tty_port_tty_vhangup() race - !30371 mtd: core: avoid double-free of OTP NVMEM device - urma: Fix the assignment before null check - !30386 RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - !30270 [OLK-6.6] AMD Venice additional patches for openEuler - !28385 [OLK-6.6] crypto: ccp: fix vpsp cmd ctx leak - !30382 fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - !30365 bpf: Fix out-of-bounds btf->types write for split BTF - fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - !30313 kabi: fix include helpers broken by the predefined 'linux' macro - tty: port: fix tty_port_tty_vhangup() race - tty: tty_port: restore TTY_IO_ERROR on activation failure - mtd: core: avoid double-free of OTP NVMEM device - wifi: mac80211: validate TX status rate metadata - bpf: Fix out-of-bounds btf->types write for split BTF - kabi: fix include helpers broken by the predefined 'linux' macro - KVM: arm64: pvm: Handle counter reads in the hyp path - KVM: arm64: pvm: Trap guest timer accesses and enforce EL0 permissions - KVM: arm64: pvm: Align timer capabilities and counter handling with RV timers - KVM: arm64: pvm: Wire RV timers into the KVM timer entry points - KVM: arm64: pvm: Add the software RV timer implementation - KVM: arm64: pvm: Deliver VGIC interrupts without hardware LRs - KVM: arm64: pvm: Emulate VGIC active priority registers - KVM: arm64: pvm: Route ICC accesses through register descriptors - KVM: arm64: pvm: Emulate the GICv3 CPU interface - KVM: arm64: Handle pending EL1 IRQ exceptions - KVM: arm64: pvm: Constrain virtual interrupt capabilities - Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown - iio: imu: adis16480: fix unprotected debugfs reads - iio: imu: adis16400: fix unprotected debugfs reads - iio: gyro: adis16136: fix unprotected debugfs reads - Bluetooth: MGMT: Fix status of pending commands flushed on power off - EDAC/amd64: Mask UMC chip select to the four implemented selects - x86/mce: Fix hardware debug register corruption on task migration - x86/MCE/AMD: Fix inverted interrupt enablement during storm handling - x86/amd_node: Avoid divide by zero on virtualized systems - RAS/AMD/ATL, EDAC/amd64: Only load ATL when needed - x86/mce: Set up the polling timer before CMCI discovery - x86/mce: Restore MCA polling interval halving - EDAC/amd64: Remove NUM_CONTROLLERS macro - x86/mce/inject: Remove call to mce_notify_irq() - x86/mce: Remove the redundant mce_hygon_feature_init() - x86/mce/threshold: Remove the redundant this_cpu_dec_return() - crypto: ccp: fix vpsp cmd ctx leak - KVM: s390: Fix IRQ injection with SIGP Stop and Store Status - parisc: Increase kernel stack size to 32kb - drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - Bluetooth: ISO: Serialize concurrent connect calls - unshare: don't drop active namespace references that were never taken - of/overlay: don't leak fragment references when changeset init fails - hwmon: (pwm-fan) Stop RPM timer before freeing tach data - !30459 [CVEAgent@OLK-6.6] Fix CVE-2026-99234 - !30468 [CVEAgent@OLK-6.6] Fix CVE-2026-99143 - !30322 urma: fix ipourma eid handler and register work concurrency - !30455 arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30491 [OLK-6.6] AMD Venice additional patches for openEuler - 2 - EDAC/amd64: Avoid a -Wformat-security warning - EDAC/amd64: Generate ctl_name string at runtime - !29993 [CVEAgent@OLK-6.6] Fix CVE-2026-98807 - !29964 [CVEAgent@OLK-6.6] Fix CVE-2026-98747 - !30393 ub/ubmem-vmmu: Remove the support_attr callback mechanism. - !30447 wifi: mac80211: minstrel_ht: validate fixed rate index - !30446 net: ena: fix MMIO read buffer leak on probe failure - tracing: Keep the predicate limit separate from program capacity - !30013 [CVEAgent@OLK-6.6] Fix CVE-2026-98855 - !30431 fix CVE-2026-98490 for OLK-6.6 - !30425 fix CVE-2026-98722 for OLK-6.6 - !30410 nvdimm: pmem: keep PREFLUSH before data writes - !30406 Fix CVE-2026-97480 for OLK-6.6 - !30204 x86/cpu/hygon: Report S5 reset status during boot - tracing: Unregister field variable histograms when the command fails - !30395 tty: fix saved termios reset race - arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30031 drm/amdkfd: fix SMI event cross-process information leak - wifi: mac80211: minstrel_ht: validate fixed rate index - net: ena: fix MMIO read buffer leak on probe failure - net: openvswitch: conntrack: fix helper UAF due to extensions realloc - net: openvswitch: conntrack: remove 'add_helper' dead code - openvswitch: prepare for stolen verdict coming from conntrack and nat engine - net/sched: act_ct: avoid modifying shared unconfirmed ct entry - net/sched: act_ct: fix helper UAF due to extensions realloc - ub/ubmem-vmmu: Remove the support_attr callback mechanism. - mtd: block2mtd: Fix divide error when erase_size is zero - block2mtd: prevent direct access of bd_inode - nvdimm: pmem: keep PREFLUSH before data writes - tty: serial: 8250: protect against NULL uart->port.dev in register - serial: 8250: invert serial8250_register_8250_port() CIR condition - urma: fix ipourma eid handler and register work concurrency - tty: fix saved termios reset race - x86/cpu/hygon: Report S5 reset status during boot - drm/amdkfd: fix SMI event cross-process information leak - of/overlay: put property on deadprops only after changeset add succeeds - net/mlx5: Fix slab-out-of-bounds when handling team device events - serial: core: fix NULL pointer dereference in serial_core_unregister_port() - !30553 tracing: Reject incomplete event filter expressions - !30498 nfsd: split nfsd4_copy into transient and durable async copy objects - !30000 [CVEAgent@OLK-6.6] Fix CVE-2026-98822 - !30497 cdma: ratelimit hot-path error logs in kernel driver and header file code synchronization - tracing: Reject incomplete event filter expressions - !30546 [OLK-6.6] ub: fix UBASE port reporting and UNIC reset and DMA handling - !30481 [CVEAgent@OLK-6.6] Fix CVE-2026-99080 - !30483 [CVEAgent@OLK-6.6] Fix CVE-2026-99206 - !30388 Fix CVE-2026-99153 - !30390 Fix CVE-2026-99152 - !30387 Fix CVE-2026-99110 - !30391 Fix CVE-2026-99109 - !30479 [CVEAgent@OLK-6.6] Fix CVE-2026-99254 - !30538 scsi: libsas: Fix SMP IO deadlock during HA resume - !30537 ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30536 scsi: libsas: Add linkrate and sas_addr change detection in rediscover；scsi: libsas: Add sas_ex_phy_to_dev() helper - !30486 [CVEAgent@OLK-6.6] Fix CVE-2026-99247 - !30454 [OLK-6.6] Fix CVE-2026-97566 - !30453 [OLK-6.6] Fix CVE-2026-97432 - !30444 [OLK-6.6] Fix CVE-2026-43234 - !30403 x86/hygon: Fix FPDSS on Hygon - !30269 [OLK-6.6] update rnpvf driver to 1.2.0. - !30155 [OLK-6.6] Fix CVE-2026-74695 - !30153 [OLK-6.6] Fix CVE-2026-72494 - !30149 [OLK-6.6] Fix CVE-2026-74368 - !30092 [CVEAgent@OLK-6.6] Fix CVE-2026-99052 - !30090 [CVEAgent@OLK-6.6] Fix CVE-2026-99040 - !30057 [CVEAgent@OLK-6.6] Fix CVE-2026-98948 - !30086 [CVEAgent@OLK-6.6] Fix CVE-2026-99025 - !30105 [CVEAgent@OLK-6.6] Fix CVE-2026-99078 - !30106 [CVEAgent@OLK-6.6] Fix CVE-2026-99079 - ub: ubase: skip bandwidth queries on next-generation chips - net: unic: Fix TX/RX DMA ordering and cache sync - net: unic: serialize port deactivation with reset - ub: ubase: add ub port events handling and statistics - scsi: libsas: Fix SMP IO deadlock during HA resume - scsi: libsas: Add sas_ex_phy_to_dev() helper - scsi: libsas: Add linkrate and sas_addr change detection in rediscover - !30430 v8 arm64: Allow CPU0 to be nohz_full - ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30300 mm/gup: allow movable memory pinnable - !30487 urma: limit opt buf length in uburma ioctl commands - !29931 [CVEAgent@OLK-6.6] Fix CVE-2026-98570 - nfsd: split nfsd4_copy into transient and durable async copy objects - ub: cdma: header file code synchronization - ub: cdma: ratelimit hot-path error logs in kernel driver - x86: hygon: Fix FPDSS on Hygon - tracing: Do not initialize tracefs work if tracing is disabled - scsi: target: iscsi: Fix race in discovery auth updates - fs: Free any excess xarray nodes in clear_inode() - io_uring: don't flood a cancelling task with task_work - urma: limit opt buf length in uburma ioctl commands - mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 - wifi: iwlwifi: mvm: fix P2P-Device binding handling - team: avoid NETDEV_CHANGEMTU event when unregistering slave - arm64: defconfig: Enable CONFIG_PM_SLEEP_SMP_NONZERO_CPU and CONFIG_ARCH_SUSPEND_NONZERO_CPU - arm64: Allow boot CPU nohz_full to coexist with suspend and kexec - isolation: Check whether there exists a housekeeping CPU online - isolation: Do not check whether housekeeping CPUs are present - smb: client: reject SetEA requests that do not fit the request buffer - scsi: libiscsi: Validate the task named by a management response - scsi: libiscsi: Validate the ITT reflected in a Reject PDU - smb: client: fix heap overflow in cifs_do_set_acl() - rnpvf: update rnpvf driver to 1.2.0. - mm/gup: allow movable memory pinnable - rnpvf: update rnpvf driver to 1.2.0. - netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() - RDMA/irdma: Replace waitqueue and flag with completion - wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() - net/mlx5e: Prevent stale XSK buffer release on refill retry - net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry - selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts - KEYS: Fix add_key() race with keyring restriction - openvswitch: fix soft lockup in the netlink flow dump - mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() - wifi: mac80211: prevent AP VLAN tx from other interfaces - net: ipv6: keep room for the mac header in dst_dev_overhead() - !30530 [CVEAgent@OLK-6.6] Fix CVE-2026-99163 - !30532 [CVEAgent@OLK-6.6] Fix CVE-2026-99235 - !29765 Fix CVE-2026-98289 - !30230 Fix CVE-2026-97615 - !29790 Fix CVE-2026-93250 - !30510 [CVEAgent@OLK-6.6] Fix CVE-2026-99005 - !30506 [CVEAgent@OLK-6.6] Fix CVE-2026-98871 - !30307 feat/obmm-unified-switch-split-v4 - !30064 [CVEAgent@OLK-6.6] Fix CVE-2026-98972 - !30507 [CVEAgent@OLK-6.6] Fix CVE-2026-98883 - !30450 BBML3 bugfix - !30156 [OLK-6.6] Fix CVE-2026-68258 - !30154 [OLK-6.6] Fix CVE-2026-74729 - !30151 [OLK-6.6] Fix CVE-2026-74273 - !27793 [OLK-6.6] Fix CVE-2026-68421 - !27512 [OLK-6.6] Fix CVE-2026-64259 - !30146 [OLK-6.6] Fix CVE-2026-53109 - !30575 arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30567 scsi: hisi_sas: Clear PHY error counts on phyup - arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30472 [CVEAgent@OLK-6.6] Fix CVE-2026-99243 - scsi: hisi_sas: Clear PHY error counts on phyup - scsi:hisi_sas:Sync upstream timer_delete API changes in hisi_sas_v3_hw.c - tracing: Save the event file instead of the compatible histogram - tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields - drm/i915/gt: Unmask interrupts only when ACTIVE is true - serial: 8250_port: recognize UPIO_AU - crypto: ccp - Fix possible deadlock in SEV init failure path - obmm: pack the internal structs by field ordering - obmm: sysfs views over the switch: attributes, identity, lockless reads - obmm: generalized dual-backend gap mmap - obmm: export switch target wrap-up and validation consolidation - obmm: unified two-phase switch core (import target) - obmm: install mappings lazily from the backend fault paths - obmm: fix the pxm bound, the open TOCTOU and the teardown release - obmm: split the region shell from the memory backends - obmm: depend on TRANSPARENT_HUGEPAGE for the PMD fault paths - io-wq: order the exit bit against worker creation task work - mm/pfn_range_alloc: split block mappings in linear map updates - arm64/mm: make pte_present() recognize present-invalid entries - net: bridge: use option bits for CFM/MRP frame handlers - drm/amdkfd: Check bounds on CRIU restore queue type and mqd size - soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read - cxl/region: Block region delete during region creation - powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy - cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() - vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() - af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). - sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() - fuse-uring: make a fuse_req on SQE commit only findable after memcpy - !30591 [CVEAgent@OLK-6.6] Fix CVE-2026-99142 - !30590 [CVEAgent@OLK-6.6] Fix CVE-2026-99219 - !30594 [CVEAgent@OLK-6.6] Fix CVE-2026-99233 - !30600 urma: warn on slow TP driver callbacks - urma: warn on slow TP driver callbacks - tracing/histograms: Verify event_call identity when updating synth_event refcount - tracing: Check operator stack capacity before pushing - ftrace: Initialize modname and offset in print_rec() - !30602 [CVEAgent@OLK-6.6] Fix CVE-2026-99117 - !30605 [CVEAgent@OLK-6.6] Fix CVE-2026-99211 - !30604 [CVEAgent@OLK-6.6] Fix CVE-2026-99201 - netlink: reset skb headers before unicast and multicast filtering - netlink: avoid hashing the network namespace pointer - net: bridge: mcast: don't truncate the port group walk on teardown - !30597 [CVEAgent@OLK-6.6] Fix CVE-2026-99239 - !30582 v5 MOC bypass cache - !30610 iommu/io-pgtable-arm: Add support for contiguous hint - !30523 drivers:misc:sdma-dae: Open source sdma-dae driver to OLK-6.6 (already supported on olk-5.10) - !28122 [CVEAgent@OLK-6.6] Fix CVE-2026-89802 - !29350 [CVEAgent@OLK-6.6] Fix CVE-2026-97988 - !30473 Fix CVE-2026-97992 - !30150 [OLK-6.6] Fix CVE-2026-74527 - !30576 net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - !30544 [OLK-6.6] Fix CVE-2026-90057 - !30476 [OLK-6.6] fix CVE-2026-98936 - !30474 [OLK-6.6] fix CVE-2026-99059 - !30144 [OLK-6.6] Fix CVE-2026-64190 - !30311 [OLK-6.6]nser: add support for wangxun RDMA driver - iommu/io-pgtable-arm: Add support for contiguous hint - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn - openeuler: configs: arm64: Enable PBHA by default - arm64: mm: Introduce kernel param pbha - arm64: mm: Introduce prctl to control pbha behavior - arm64: mm: Set flag VM_PBHA_BIT0 for global init task - arm64: mm: Introduce procfs interface to update PBHA0 bit - arm64: mm: Set PBHA0 bit for VM_PBHA_BIT0 - arm64: mm: Introduce VM_PBHA_BIT0 to enable pbha bit0 for single vma - arm64: mm: Show PBHA bit 59 as PBHA0 in ptdump - arm64: mm: Update kernel pte entries if pbha bit0 enabled - arm64: mm: Detect and enable PBHA bit0 at early startup - arm64: cpufeature: Enable PBHA for stage1 early via FDT - Documentation: arm64: Describe the support and expectations for PBHA - KVM: arm64: Configure PBHA bits for stage2 - arm64: mm: Add pgprot_pbha() to allow drivers to request PBHA values - arm64: cpufeature: Enable PBHA bits for stage1 - dt-bindings: arm: Add binding for Page Based Hardware Attributes - dt-bindings: Rename the description of cpu nodes cpu.yaml - KVM: arm64: Detect and enable PBHA for stage2 - net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() - drivers:misc:sdma-dae: adapt driver interfaces for OLK-6.6 - net: team: fix NULL pointer dereference in team_xmit during mode change - net: team: Rename port_disabled team mode op to port_tx_disabled - net: team: Remove unused team_mode_op, port_enabled - wifi: ath11k: reset ar->num_stations on hardware start - wireguard: noise: reject response consumption after intermediate initiation - vhost-vdpa: protect config_ctx from being freed under the config callback - x86/arm64: config: enable the Wangxun nser RDMA driver - net: wangxun: nser: add RDMA support for 100GbE NICs - octeontx2-af: Block VFs from clobbering special CGX PKIND state - vhost: invalidate vring access on IOTLB transitions - drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op - drivers:misc:sdma-dae: Remove redundant print during mm exit and resume. - drivers:misc:sdma-dae: Revert optimize kernel code - drivers:misc:sdma-dae: Revert add channel depth info in debugfs - drivers:misc:sdma-dae: Revert Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Remove interference print. - drivers:misc:sdma-dae: Checking the address alignment - drivers:misc:sdma-dae: add NULL judgement of global variables - drivers:misc:sdma-dae: add channel depth info in debugfs - drivers:misc:sdma-dae: optimize kernel code - drivers:misc:sdma-dae: fix incorrect debugfs print - drivers:misc:sdma-dae: sdma fix uncorrect sleep time - drivers:misc:sdma-dae: fix incorrect kmalloc flag - drivers:misc:sdma-dae: sdma fix PUAF problem fork risk - drivers:misc:sdma-dae: modify ttl_processes reduce logic - drivers:misc:sdma-dae: remove unnecessary return in void function - drivers:misc:sdma-dae: fix incorrect resource release - drivers:misc:sdma-dae: remove lock while pausing channels - drivers:misc:sdma-dae: add mmu_notifier - drivers:misc:sdma-dae: add MODULE_VERSION to control version - drivers:misc:sdma-dae: add print in exceptional branch - drivers:misc:sdma-dae: bugfix of channel operation - drivers:misc:sdma-dae: change authority of sdma device - drivers:misc:sdma-dae: add channel ida validation - drivers:misc:sdma-dae: add vma_ops to avoid mremap error - drivers:misc:sdma-dae: add fast mode - drivers:misc:sdma-dae: not expose sq_tail write and add validation of cq_head - drivers:misc:sdma-dae: add debugfs of sdma-dae - drivers:misc:sdma-dae: fix icsl code check problems - drivers:misc:sdma-dae: fix input validate problems - drivers:misc:sdma-dae: fix interrupt handle logic - drivers:misc:sdma-dae: not compile sdma-dae by default - drivers:misc:sdma-dae: enable sdma_dae for arm64 - drivers:misc:sdma-dae: support page fault preprocess - drivers:misc:sdma-dae: support interrupt init and handle - drivers:misc:sdma-dae: support sqe task send and execute - drivers:misc:sdma-dae: support channel management - drivers:misc:sdma-dae: support getting streamID - drivers:misc:sdma-dae: support initializ sdma driver - !30253 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - !29554 [CVEAgent@OLK-6.6] Fix CVE-2026-98286 - !30263 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - !30258 v10 net: dynthread: dynamic threaded NAPI - !30208 Fix CVE-2026-98044 - !30280 bpf: Make post-verification instruction rewrites killable - !30184 blk-mq: set RQF_USE_SCHED when the operation is known - !30267 sched/fair: Avoid overflow in place_entity() - !30236 configfs: unhash the dentry before dropping the item in rmdir - !30276 virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - !29584 [CVEAgent@OLK-6.6] Fix CVE-2026-98364 - !29906 [CVEAgent@OLK-6.6] Fix CVE-2026-98443 - !30046 net: cap skb->queue_mapping when the tx queue is picked - !30223 bpf: Reject pkt arguments in mutating subprogs - !29932 [CVEAgent@OLK-6.6] Fix CVE-2026-98598 - !30044 net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - bpf: Make post-verification instruction rewrites killable - virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - RDMA/umem: avoid ib_umem_find_best_pgsz ABI breakage - sched/fair: Avoid overflow in place_entity() - RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - net: dynthread: Add debug switch and instrumentation - net: dynthread: Scale the number of NAPI thread CPUs - net: dynthread: Switch NAPI to threads on spare CPUs - net: dynthread: Steer the RX queue IRQs away from the target tasks - net: dynthread: Monitor the load of the target tasks - net: dynthread: Add dynamic threaded NAPI scheduler framework - net/mlx5e: Do not block on RTNL while recovering an SQ - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover - net/mlx5e: Acquire RTNL lock before RQs/SQs activation/deactivation - net/mlx5e: link NAPI instances to queues and IRQs - net: Fix napi irq KABI breakage - net: Add NAPI IRQ support - net: Fix KABI breakage for queue napi association - net: Add queue and napi association - neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - configfs: unhash the dentry before dropping the item in rmdir - bpf: Reject pkt arguments in mutating subprogs - bpf: Fix kabi breakage in struct bpf_subprog_info - bpf: Reject legacy packet loads from callbacks - blk-mq: set RQF_USE_SCHED when the operation is known - net: cap skb->queue_mapping when the tx queue is picked - net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - ipv6: Prevent rt6_insert_exception() for dying fib6_info. - xfs: fix cursor and pointer handling when recovering iunlink buckets - xfrm: hold net_device reference under RCU in bundle creation - drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown - !30268 ub: udma: solving internal code review issues - !30305 bpf: Mark syscall helpers as sleepable - !30113 fix/CVE-2026-98103 - !30061 [CVEAgent@OLK-6.6] Fix CVE-2026-98966 - !30099 [CVEAgent@OLK-6.6] Fix CVE-2026-99070 - !30087 [CVEAgent@OLK-6.6] Fix CVE-2026-99031 - !30100 [CVEAgent@OLK-6.6] Fix CVE-2026-99071 - !30101 [CVEAgent@OLK-6.6] Fix CVE-2026-99072 - !30102 [CVEAgent@OLK-6.6] Fix CVE-2026-99074 - !30091 [CVEAgent@OLK-6.6] Fix CVE-2026-99041 - !30088 [CVEAgent@OLK-6.6] Fix CVE-2026-99033 - !30043 seg6: ensure packet data is writable before modifying SRH and IPv6 DA - !30197 CVE-2026-98503 - bpf: Mark syscall helpers as sleepable - ub: udma: support dwqe with a few wqebbs - ub: udma: solving internal code review issues - seg6: ensure packet data is writable before modifying SRH and IPv6 DA - igmp: fix kabi breakage of struct ip_sf_list - packet: use ubuf_info completion for TX_RING packets - virtio_net: copy zerocopy frags in start_xmit without NAPI - igmp: convert struct ip_sf_list to RCU - ipv4: stop PMTU walk when nexthop group shrinks - ipv4: stop route notification sizing when nexthop group shrinks - ipv4: do not warn on route notification size race - ipv6: do not warn on route notification size race - ip6_gre: remove obsolete ERSPAN PMTU update - net/packet: guard the ll header push in packet_rcv_spkt() - net: bridge: avoid recursive multicast port cleanup - bonding: fix the program leak when XDP is replaced - !30029 CODEOWNERS: add kernel module ownership rules - !30291 [OLK-6.6] mm/swapfile: reject duplicated bad pages in swap header - !30201 filescgroup: migrate files resources of every task, not just the first - !30306 Fix CVE-2026-98799 - bpf: Fix kabi breakage in struct bpf_tramp_image and bpf_trampoline - bpf: Skip detached progs in trampoline images that are still in use - mm/swapfile: reject duplicated bad pages in swap header - filescgroup: migrate files resources of every task, not just the first - scripts: add get_codeowner.py to look up CODEOWNERS owners - CODEOWNERS: add kernel module ownership rules - !30256 [Backport] ext4: defer unwritten splitting until I/O completion - !30394 urma: Fix the assignment before null check - !30003 [CVEAgent@OLK-6.6] Fix CVE-2026-98831 - !29516 [CVEAgent@OLK-6.6] Fix CVE-2026-98198 - !30220 drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - !30082 [CVEAgent@OLK-6.6] Fix CVE-2026-99012 - !30071 [CVEAgent@OLK-6.6] Fix CVE-2026-98983 - !30262 [CVEAgent] Fix CVE-2026-99091 - !30294 Fix CVE-2026-99011 - !30293 Fix CVE-2026-99008 - !30290 Fix CVE-2026-98663 - !30289 Fix CVE-2026-98664 - !30288 Fix CVE-2026-98666 - !30234 [PATCH 00/11] KVM: arm64: pvm: Add software VGICv3 and virtual timer support - ext4: prevent sleeping allocation in NOWAIT write path - !30367 Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - ext4: remove EXT4_GET_BLOCKS_IO_CREATE_EXT - ext4: simplify the mapping query logic in ext4_iomap_begin() - ext4: skip overwrite check for aligned non-extending DIO writes - ext4: remove unused unwritten parameter in ext4_dio_write_iter() - ext4: remove useless ext4_iomap_overwrite_ops - ext4: avoid starting handle when dio writing an unwritten extent - ext4: don't split extent before submitting I/O - !30233 Fix CVE-2026-98917 - !30235 Fix CVE-2026-98930 - !30368 wifi: mac80211: validate TX status rate metadata - !30378 tty: tty_port: restore TTY_IO_ERROR on activation failure - !30380 tty: port: fix tty_port_tty_vhangup() race - !30371 mtd: core: avoid double-free of OTP NVMEM device - urma: Fix the assignment before null check - !30386 RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - !30270 [OLK-6.6] AMD Venice additional patches for openEuler - !28385 [OLK-6.6] crypto: ccp: fix vpsp cmd ctx leak - !30382 fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - !30365 bpf: Fix out-of-bounds btf->types write for split BTF - fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - !30313 kabi: fix include helpers broken by the predefined 'linux' macro - tty: port: fix tty_port_tty_vhangup() race - tty: tty_port: restore TTY_IO_ERROR on activation failure - mtd: core: avoid double-free of OTP NVMEM device - wifi: mac80211: validate TX status rate metadata - bpf: Fix out-of-bounds btf->types write for split BTF - kabi: fix include helpers broken by the predefined 'linux' macro - KVM: arm64: pvm: Handle counter reads in the hyp path - KVM: arm64: pvm: Trap guest timer accesses and enforce EL0 permissions - KVM: arm64: pvm: Align timer capabilities and counter handling with RV timers - KVM: arm64: pvm: Wire RV timers into the KVM timer entry points - KVM: arm64: pvm: Add the software RV timer implementation - KVM: arm64: pvm: Deliver VGIC interrupts without hardware LRs - KVM: arm64: pvm: Emulate VGIC active priority registers - KVM: arm64: pvm: Route ICC accesses through register descriptors - KVM: arm64: pvm: Emulate the GICv3 CPU interface - KVM: arm64: Handle pending EL1 IRQ exceptions - KVM: arm64: pvm: Constrain virtual interrupt capabilities - Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown - iio: imu: adis16480: fix unprotected debugfs reads - iio: imu: adis16400: fix unprotected debugfs reads - iio: gyro: adis16136: fix unprotected debugfs reads - Bluetooth: MGMT: Fix status of pending commands flushed on power off - EDAC/amd64: Mask UMC chip select to the four implemented selects - x86/mce: Fix hardware debug register corruption on task migration - x86/MCE/AMD: Fix inverted interrupt enablement during storm handling - x86/amd_node: Avoid divide by zero on virtualized systems - RAS/AMD/ATL, EDAC/amd64: Only load ATL when needed - x86/mce: Set up the polling timer before CMCI discovery - x86/mce: Restore MCA polling interval halving - EDAC/amd64: Remove NUM_CONTROLLERS macro - x86/mce/inject: Remove call to mce_notify_irq() - x86/mce: Remove the redundant mce_hygon_feature_init() - x86/mce/threshold: Remove the redundant this_cpu_dec_return() - crypto: ccp: fix vpsp cmd ctx leak - KVM: s390: Fix IRQ injection with SIGP Stop and Store Status - parisc: Increase kernel stack size to 32kb - drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - Bluetooth: ISO: Serialize concurrent connect calls - unshare: don't drop active namespace references that were never taken - of/overlay: don't leak fragment references when changeset init fails - hwmon: (pwm-fan) Stop RPM timer before freeing tach data - !30459 [CVEAgent@OLK-6.6] Fix CVE-2026-99234 - !30468 [CVEAgent@OLK-6.6] Fix CVE-2026-99143 - !30322 urma: fix ipourma eid handler and register work concurrency - !30455 arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30491 [OLK-6.6] AMD Venice additional patches for openEuler - 2 - EDAC/amd64: Avoid a -Wformat-security warning - EDAC/amd64: Generate ctl_name string at runtime - !29993 [CVEAgent@OLK-6.6] Fix CVE-2026-98807 - !29964 [CVEAgent@OLK-6.6] Fix CVE-2026-98747 - !30393 ub/ubmem-vmmu: Remove the support_attr callback mechanism. - !30447 wifi: mac80211: minstrel_ht: validate fixed rate index - !30446 net: ena: fix MMIO read buffer leak on probe failure - tracing: Keep the predicate limit separate from program capacity - !30013 [CVEAgent@OLK-6.6] Fix CVE-2026-98855 - !30431 fix CVE-2026-98490 for OLK-6.6 - !30425 fix CVE-2026-98722 for OLK-6.6 - !30410 nvdimm: pmem: keep PREFLUSH before data writes - !30406 Fix CVE-2026-97480 for OLK-6.6 - !30204 x86/cpu/hygon: Report S5 reset status during boot - tracing: Unregister field variable histograms when the command fails - !30395 tty: fix saved termios reset race - arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30031 drm/amdkfd: fix SMI event cross-process information leak - wifi: mac80211: minstrel_ht: validate fixed rate index - net: ena: fix MMIO read buffer leak on probe failure - net: openvswitch: conntrack: fix helper UAF due to extensions realloc - net: openvswitch: conntrack: remove 'add_helper' dead code - openvswitch: prepare for stolen verdict coming from conntrack and nat engine - net/sched: act_ct: avoid modifying shared unconfirmed ct entry - net/sched: act_ct: fix helper UAF due to extensions realloc - ub/ubmem-vmmu: Remove the support_attr callback mechanism. - mtd: block2mtd: Fix divide error when erase_size is zero - block2mtd: prevent direct access of bd_inode - nvdimm: pmem: keep PREFLUSH before data writes - tty: serial: 8250: protect against NULL uart->port.dev in register - serial: 8250: invert serial8250_register_8250_port() CIR condition - urma: fix ipourma eid handler and register work concurrency - tty: fix saved termios reset race - x86/cpu/hygon: Report S5 reset status during boot - drm/amdkfd: fix SMI event cross-process information leak - of/overlay: put property on deadprops only after changeset add succeeds - net/mlx5: Fix slab-out-of-bounds when handling team device events - serial: core: fix NULL pointer dereference in serial_core_unregister_port() - !30553 tracing: Reject incomplete event filter expressions - !30498 nfsd: split nfsd4_copy into transient and durable async copy objects - !30000 [CVEAgent@OLK-6.6] Fix CVE-2026-98822 - !30497 cdma: ratelimit hot-path error logs in kernel driver and header file code synchronization - tracing: Reject incomplete event filter expressions - !30546 [OLK-6.6] ub: fix UBASE port reporting and UNIC reset and DMA handling - !30481 [CVEAgent@OLK-6.6] Fix CVE-2026-99080 - !30483 [CVEAgent@OLK-6.6] Fix CVE-2026-99206 - !30388 Fix CVE-2026-99153 - !30390 Fix CVE-2026-99152 - !30387 Fix CVE-2026-99110 - !30391 Fix CVE-2026-99109 - !30479 [CVEAgent@OLK-6.6] Fix CVE-2026-99254 - !30538 scsi: libsas: Fix SMP IO deadlock during HA resume - !30537 ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30536 scsi: libsas: Add linkrate and sas_addr change detection in rediscover；scsi: libsas: Add sas_ex_phy_to_dev() helper - !30486 [CVEAgent@OLK-6.6] Fix CVE-2026-99247 - !30454 [OLK-6.6] Fix CVE-2026-97566 - !30453 [OLK-6.6] Fix CVE-2026-97432 - !30444 [OLK-6.6] Fix CVE-2026-43234 - !30403 x86/hygon: Fix FPDSS on Hygon - !30269 [OLK-6.6] update rnpvf driver to 1.2.0. - !30155 [OLK-6.6] Fix CVE-2026-74695 - !30153 [OLK-6.6] Fix CVE-2026-72494 - !30149 [OLK-6.6] Fix CVE-2026-74368 - !30092 [CVEAgent@OLK-6.6] Fix CVE-2026-99052 - !30090 [CVEAgent@OLK-6.6] Fix CVE-2026-99040 - !30057 [CVEAgent@OLK-6.6] Fix CVE-2026-98948 - !30086 [CVEAgent@OLK-6.6] Fix CVE-2026-99025 - !30105 [CVEAgent@OLK-6.6] Fix CVE-2026-99078 - !30106 [CVEAgent@OLK-6.6] Fix CVE-2026-99079 - ub: ubase: skip bandwidth queries on next-generation chips - net: unic: Fix TX/RX DMA ordering and cache sync - net: unic: serialize port deactivation with reset - ub: ubase: add ub port events handling and statistics - scsi: libsas: Fix SMP IO deadlock during HA resume - scsi: libsas: Add sas_ex_phy_to_dev() helper - scsi: libsas: Add linkrate and sas_addr change detection in rediscover - !30430 v8 arm64: Allow CPU0 to be nohz_full - ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30300 mm/gup: allow movable memory pinnable - !30487 urma: limit opt buf length in uburma ioctl commands - !29931 [CVEAgent@OLK-6.6] Fix CVE-2026-98570 - nfsd: split nfsd4_copy into transient and durable async copy objects - ub: cdma: header file code synchronization - ub: cdma: ratelimit hot-path error logs in kernel driver - x86: hygon: Fix FPDSS on Hygon - tracing: Do not initialize tracefs work if tracing is disabled - scsi: target: iscsi: Fix race in discovery auth updates - fs: Free any excess xarray nodes in clear_inode() - io_uring: don't flood a cancelling task with task_work - urma: limit opt buf length in uburma ioctl commands - mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 - wifi: iwlwifi: mvm: fix P2P-Device binding handling - team: avoid NETDEV_CHANGEMTU event when unregistering slave - arm64: defconfig: Enable CONFIG_PM_SLEEP_SMP_NONZERO_CPU and CONFIG_ARCH_SUSPEND_NONZERO_CPU - arm64: Allow boot CPU nohz_full to coexist with suspend and kexec - isolation: Check whether there exists a housekeeping CPU online - isolation: Do not check whether housekeeping CPUs are present - smb: client: reject SetEA requests that do not fit the request buffer - scsi: libiscsi: Validate the task named by a management response - scsi: libiscsi: Validate the ITT reflected in a Reject PDU - smb: client: fix heap overflow in cifs_do_set_acl() - rnpvf: update rnpvf driver to 1.2.0. - mm/gup: allow movable memory pinnable - rnpvf: update rnpvf driver to 1.2.0. - netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() - RDMA/irdma: Replace waitqueue and flag with completion - wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() - net/mlx5e: Prevent stale XSK buffer release on refill retry - net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry - selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts - KEYS: Fix add_key() race with keyring restriction - openvswitch: fix soft lockup in the netlink flow dump - mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() - wifi: mac80211: prevent AP VLAN tx from other interfaces - net: ipv6: keep room for the mac header in dst_dev_overhead() - !30530 [CVEAgent@OLK-6.6] Fix CVE-2026-99163 - !30532 [CVEAgent@OLK-6.6] Fix CVE-2026-99235 - !29765 Fix CVE-2026-98289 - !30230 Fix CVE-2026-97615 - !29790 Fix CVE-2026-93250 - !30510 [CVEAgent@OLK-6.6] Fix CVE-2026-99005 - !30506 [CVEAgent@OLK-6.6] Fix CVE-2026-98871 - !30307 feat/obmm-unified-switch-split-v4 - !30064 [CVEAgent@OLK-6.6] Fix CVE-2026-98972 - !30507 [CVEAgent@OLK-6.6] Fix CVE-2026-98883 - !30450 BBML3 bugfix - !30156 [OLK-6.6] Fix CVE-2026-68258 - !30154 [OLK-6.6] Fix CVE-2026-74729 - !30151 [OLK-6.6] Fix CVE-2026-74273 - !27793 [OLK-6.6] Fix CVE-2026-68421 - !27512 [OLK-6.6] Fix CVE-2026-64259 - !30146 [OLK-6.6] Fix CVE-2026-53109 - !30575 arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30567 scsi: hisi_sas: Clear PHY error counts on phyup - arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30472 [CVEAgent@OLK-6.6] Fix CVE-2026-99243 - scsi: hisi_sas: Clear PHY error counts on phyup - scsi:hisi_sas:Sync upstream timer_delete API changes in hisi_sas_v3_hw.c - tracing: Save the event file instead of the compatible histogram - tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields - drm/i915/gt: Unmask interrupts only when ACTIVE is true - serial: 8250_port: recognize UPIO_AU - crypto: ccp - Fix possible deadlock in SEV init failure path - obmm: pack the internal structs by field ordering - obmm: sysfs views over the switch: attributes, identity, lockless reads - obmm: generalized dual-backend gap mmap - obmm: export switch target wrap-up and validation consolidation - obmm: unified two-phase switch core (import target) - obmm: install mappings lazily from the backend fault paths - obmm: fix the pxm bound, the open TOCTOU and the teardown release - obmm: split the region shell from the memory backends - obmm: depend on TRANSPARENT_HUGEPAGE for the PMD fault paths - io-wq: order the exit bit against worker creation task work - mm/pfn_range_alloc: split block mappings in linear map updates - arm64/mm: make pte_present() recognize present-invalid entries - net: bridge: use option bits for CFM/MRP frame handlers - drm/amdkfd: Check bounds on CRIU restore queue type and mqd size - soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read - cxl/region: Block region delete during region creation - powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy - cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() - vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() - af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). - sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() - fuse-uring: make a fuse_req on SQE commit only findable after memcpy - !30591 [CVEAgent@OLK-6.6] Fix CVE-2026-99142 - !30590 [CVEAgent@OLK-6.6] Fix CVE-2026-99219 - !30594 [CVEAgent@OLK-6.6] Fix CVE-2026-99233 - !30600 urma: warn on slow TP driver callbacks - urma: warn on slow TP driver callbacks - tracing/histograms: Verify event_call identity when updating synth_event refcount - tracing: Check operator stack capacity before pushing - ftrace: Initialize modname and offset in print_rec() - !30602 [CVEAgent@OLK-6.6] Fix CVE-2026-99117 - !30605 [CVEAgent@OLK-6.6] Fix CVE-2026-99211 - !30604 [CVEAgent@OLK-6.6] Fix CVE-2026-99201 - netlink: reset skb headers before unicast and multicast filtering - netlink: avoid hashing the network namespace pointer - net: bridge: mcast: don't truncate the port group walk on teardown - !30597 [CVEAgent@OLK-6.6] Fix CVE-2026-99239 - !30582 v5 MOC bypass cache - !30610 iommu/io-pgtable-arm: Add support for contiguous hint - !30523 drivers:misc:sdma-dae: Open source sdma-dae driver to OLK-6.6 (already supported on olk-5.10) - !28122 [CVEAgent@OLK-6.6] Fix CVE-2026-89802 - !29350 [CVEAgent@OLK-6.6] Fix CVE-2026-97988 - !30473 Fix CVE-2026-97992 - !30150 [OLK-6.6] Fix CVE-2026-74527 - !30576 net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - !30544 [OLK-6.6] Fix CVE-2026-90057 - !30476 [OLK-6.6] fix CVE-2026-98936 - !30474 [OLK-6.6] fix CVE-2026-99059 - !30144 [OLK-6.6] Fix CVE-2026-64190 - !30311 [OLK-6.6]nser: add support for wangxun RDMA driver - iommu/io-pgtable-arm: Add support for contiguous hint - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn - openeuler: configs: arm64: Enable PBHA by default - arm64: mm: Introduce kernel param pbha - arm64: mm: Introduce prctl to control pbha behavior - arm64: mm: Set flag VM_PBHA_BIT0 for global init task - arm64: mm: Introduce procfs interface to update PBHA0 bit - arm64: mm: Set PBHA0 bit for VM_PBHA_BIT0 - arm64: mm: Introduce VM_PBHA_BIT0 to enable pbha bit0 for single vma - arm64: mm: Show PBHA bit 59 as PBHA0 in ptdump - arm64: mm: Update kernel pte entries if pbha bit0 enabled - arm64: mm: Detect and enable PBHA bit0 at early startup - arm64: cpufeature: Enable PBHA for stage1 early via FDT - Documentation: arm64: Describe the support and expectations for PBHA - KVM: arm64: Configure PBHA bits for stage2 - arm64: mm: Add pgprot_pbha() to allow drivers to request PBHA values - arm64: cpufeature: Enable PBHA bits for stage1 - dt-bindings: arm: Add binding for Page Based Hardware Attributes - dt-bindings: Rename the description of cpu nodes cpu.yaml - KVM: arm64: Detect and enable PBHA for stage2 - net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() - drivers:misc:sdma-dae: adapt driver interfaces for OLK-6.6 - net: team: fix NULL pointer dereference in team_xmit during mode change - net: team: Rename port_disabled team mode op to port_tx_disabled - net: team: Remove unused team_mode_op, port_enabled - wifi: ath11k: reset ar->num_stations on hardware start - wireguard: noise: reject response consumption after intermediate initiation - vhost-vdpa: protect config_ctx from being freed under the config callback - x86/arm64: config: enable the Wangxun nser RDMA driver - net: wangxun: nser: add RDMA support for 100GbE NICs - octeontx2-af: Block VFs from clobbering special CGX PKIND state - vhost: invalidate vring access on IOTLB transitions - drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op - drivers:misc:sdma-dae: Remove redundant print during mm exit and resume. - drivers:misc:sdma-dae: Revert optimize kernel code - drivers:misc:sdma-dae: Revert add channel depth info in debugfs - drivers:misc:sdma-dae: Revert Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Remove interference print. - drivers:misc:sdma-dae: Checking the address alignment - drivers:misc:sdma-dae: add NULL judgement of global variables - drivers:misc:sdma-dae: add channel depth info in debugfs - drivers:misc:sdma-dae: optimize kernel code - drivers:misc:sdma-dae: fix incorrect debugfs print - drivers:misc:sdma-dae: sdma fix uncorrect sleep time - drivers:misc:sdma-dae: fix incorrect kmalloc flag - drivers:misc:sdma-dae: sdma fix PUAF problem fork risk - drivers:misc:sdma-dae: modify ttl_processes reduce logic - drivers:misc:sdma-dae: remove unnecessary return in void function - drivers:misc:sdma-dae: fix incorrect resource release - drivers:misc:sdma-dae: remove lock while pausing channels - drivers:misc:sdma-dae: add mmu_notifier - drivers:misc:sdma-dae: add MODULE_VERSION to control version - drivers:misc:sdma-dae: add print in exceptional branch - drivers:misc:sdma-dae: bugfix of channel operation - drivers:misc:sdma-dae: change authority of sdma device - drivers:misc:sdma-dae: add channel ida validation - drivers:misc:sdma-dae: add vma_ops to avoid mremap error - drivers:misc:sdma-dae: add fast mode - drivers:misc:sdma-dae: not expose sq_tail write and add validation of cq_head - drivers:misc:sdma-dae: add debugfs of sdma-dae - drivers:misc:sdma-dae: fix icsl code check problems - drivers:misc:sdma-dae: fix input validate problems - drivers:misc:sdma-dae: fix interrupt handle logic - drivers:misc:sdma-dae: not compile sdma-dae by default - drivers:misc:sdma-dae: enable sdma_dae for arm64 - drivers:misc:sdma-dae: support page fault preprocess - drivers:misc:sdma-dae: support interrupt init and handle - drivers:misc:sdma-dae: support sqe task send and execute - drivers:misc:sdma-dae: support channel management - drivers:misc:sdma-dae: support getting streamID - drivers:misc:sdma-dae: support initializ sdma driver - !30253 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - !29554 [CVEAgent@OLK-6.6] Fix CVE-2026-98286 - !30263 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - !30258 v10 net: dynthread: dynamic threaded NAPI - !30208 Fix CVE-2026-98044 - !30280 bpf: Make post-verification instruction rewrites killable - !30184 blk-mq: set RQF_USE_SCHED when the operation is known - !30267 sched/fair: Avoid overflow in place_entity() - !30236 configfs: unhash the dentry before dropping the item in rmdir - !30276 virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - !29584 [CVEAgent@OLK-6.6] Fix CVE-2026-98364 - !29906 [CVEAgent@OLK-6.6] Fix CVE-2026-98443 - !30046 net: cap skb->queue_mapping when the tx queue is picked - !30223 bpf: Reject pkt arguments in mutating subprogs - !29932 [CVEAgent@OLK-6.6] Fix CVE-2026-98598 - !30044 net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - bpf: Make post-verification instruction rewrites killable - virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - RDMA/umem: avoid ib_umem_find_best_pgsz ABI breakage - sched/fair: Avoid overflow in place_entity() - RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - net: dynthread: Add debug switch and instrumentation - net: dynthread: Scale the number of NAPI thread CPUs - net: dynthread: Switch NAPI to threads on spare CPUs - net: dynthread: Steer the RX queue IRQs away from the target tasks - net: dynthread: Monitor the load of the target tasks - net: dynthread: Add dynamic threaded NAPI scheduler framework - net/mlx5e: Do not block on RTNL while recovering an SQ - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover - net/mlx5e: Acquire RTNL lock before RQs/SQs activation/deactivation - net/mlx5e: link NAPI instances to queues and IRQs - net: Fix napi irq KABI breakage - net: Add NAPI IRQ support - net: Fix KABI breakage for queue napi association - net: Add queue and napi association - neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - configfs: unhash the dentry before dropping the item in rmdir - bpf: Reject pkt arguments in mutating subprogs - bpf: Fix kabi breakage in struct bpf_subprog_info - bpf: Reject legacy packet loads from callbacks - blk-mq: set RQF_USE_SCHED when the operation is known - net: cap skb->queue_mapping when the tx queue is picked - net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - ipv6: Prevent rt6_insert_exception() for dying fib6_info. - xfs: fix cursor and pointer handling when recovering iunlink buckets - xfrm: hold net_device reference under RCU in bundle creation - drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown - !30268 ub: udma: solving internal code review issues - !30305 bpf: Mark syscall helpers as sleepable - !30113 fix/CVE-2026-98103 - !30061 [CVEAgent@OLK-6.6] Fix CVE-2026-98966 - !30099 [CVEAgent@OLK-6.6] Fix CVE-2026-99070 - !30087 [CVEAgent@OLK-6.6] Fix CVE-2026-99031 - !30100 [CVEAgent@OLK-6.6] Fix CVE-2026-99071 - !30101 [CVEAgent@OLK-6.6] Fix CVE-2026-99072 - !30102 [CVEAgent@OLK-6.6] Fix CVE-2026-99074 - !30091 [CVEAgent@OLK-6.6] Fix CVE-2026-99041 - !30088 [CVEAgent@OLK-6.6] Fix CVE-2026-99033 - !30043 seg6: ensure packet data is writable before modifying SRH and IPv6 DA - !30197 CVE-2026-98503 - bpf: Mark syscall helpers as sleepable - ub: udma: support dwqe with a few wqebbs - ub: udma: solving internal code review issues - seg6: ensure packet data is writable before modifying SRH and IPv6 DA - igmp: fix kabi breakage of struct ip_sf_list - packet: use ubuf_info completion for TX_RING packets - virtio_net: copy zerocopy frags in start_xmit without NAPI - igmp: convert struct ip_sf_list to RCU - ipv4: stop PMTU walk when nexthop group shrinks - ipv4: stop route notification sizing when nexthop group shrinks - ipv4: do not warn on route notification size race - ipv6: do not warn on route notification size race - ip6_gre: remove obsolete ERSPAN PMTU update - net/packet: guard the ll header push in packet_rcv_spkt() - net: bridge: avoid recursive multicast port cleanup - bonding: fix the program leak when XDP is replaced - !30029 CODEOWNERS: add kernel module ownership rules - !30291 [OLK-6.6] mm/swapfile: reject duplicated bad pages in swap header - !30201 filescgroup: migrate files resources of every task, not just the first - !30306 Fix CVE-2026-98799 - bpf: Fix kabi breakage in struct bpf_tramp_image and bpf_trampoline - bpf: Skip detached progs in trampoline images that are still in use - mm/swapfile: reject duplicated bad pages in swap header - filescgroup: migrate files resources of every task, not just the first - scripts: add get_codeowner.py to look up CODEOWNERS owners - CODEOWNERS: add kernel module ownership rules - !30256 [Backport] ext4: defer unwritten splitting until I/O completion - !30394 urma: Fix the assignment before null check - !30003 [CVEAgent@OLK-6.6] Fix CVE-2026-98831 - !29516 [CVEAgent@OLK-6.6] Fix CVE-2026-98198 - !30220 drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - !30082 [CVEAgent@OLK-6.6] Fix CVE-2026-99012 - !30071 [CVEAgent@OLK-6.6] Fix CVE-2026-98983 - !30262 [CVEAgent] Fix CVE-2026-99091 - !30294 Fix CVE-2026-99011 - !30293 Fix CVE-2026-99008 - !30290 Fix CVE-2026-98663 - !30289 Fix CVE-2026-98664 - !30288 Fix CVE-2026-98666 - !30234 [PATCH 00/11] KVM: arm64: pvm: Add software VGICv3 and virtual timer support - ext4: prevent sleeping allocation in NOWAIT write path - !30367 Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - ext4: remove EXT4_GET_BLOCKS_IO_CREATE_EXT - ext4: simplify the mapping query logic in ext4_iomap_begin() - ext4: skip overwrite check for aligned non-extending DIO writes - ext4: remove unused unwritten parameter in ext4_dio_write_iter() - ext4: remove useless ext4_iomap_overwrite_ops - ext4: avoid starting handle when dio writing an unwritten extent - ext4: don't split extent before submitting I/O - !30233 Fix CVE-2026-98917 - !30235 Fix CVE-2026-98930 - !30368 wifi: mac80211: validate TX status rate metadata - !30378 tty: tty_port: restore TTY_IO_ERROR on activation failure - !30380 tty: port: fix tty_port_tty_vhangup() race - !30371 mtd: core: avoid double-free of OTP NVMEM device - urma: Fix the assignment before null check - !30386 RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - !30270 [OLK-6.6] AMD Venice additional patches for openEuler - !28385 [OLK-6.6] crypto: ccp: fix vpsp cmd ctx leak - !30382 fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - !30365 bpf: Fix out-of-bounds btf->types write for split BTF - fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - !30313 kabi: fix include helpers broken by the predefined 'linux' macro - tty: port: fix tty_port_tty_vhangup() race - tty: tty_port: restore TTY_IO_ERROR on activation failure - mtd: core: avoid double-free of OTP NVMEM device - wifi: mac80211: validate TX status rate metadata - bpf: Fix out-of-bounds btf->types write for split BTF - kabi: fix include helpers broken by the predefined 'linux' macro - KVM: arm64: pvm: Handle counter reads in the hyp path - KVM: arm64: pvm: Trap guest timer accesses and enforce EL0 permissions - KVM: arm64: pvm: Align timer capabilities and counter handling with RV timers - KVM: arm64: pvm: Wire RV timers into the KVM timer entry points - KVM: arm64: pvm: Add the software RV timer implementation - KVM: arm64: pvm: Deliver VGIC interrupts without hardware LRs - KVM: arm64: pvm: Emulate VGIC active priority registers - KVM: arm64: pvm: Route ICC accesses through register descriptors - KVM: arm64: pvm: Emulate the GICv3 CPU interface - KVM: arm64: Handle pending EL1 IRQ exceptions - KVM: arm64: pvm: Constrain virtual interrupt capabilities - Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown - iio: imu: adis16480: fix unprotected debugfs reads - iio: imu: adis16400: fix unprotected debugfs reads - iio: gyro: adis16136: fix unprotected debugfs reads - Bluetooth: MGMT: Fix status of pending commands flushed on power off - EDAC/amd64: Mask UMC chip select to the four implemented selects - x86/mce: Fix hardware debug register corruption on task migration - x86/MCE/AMD: Fix inverted interrupt enablement during storm handling - x86/amd_node: Avoid divide by zero on virtualized systems - RAS/AMD/ATL, EDAC/amd64: Only load ATL when needed - x86/mce: Set up the polling timer before CMCI discovery - x86/mce: Restore MCA polling interval halving - EDAC/amd64: Remove NUM_CONTROLLERS macro - x86/mce/inject: Remove call to mce_notify_irq() - x86/mce: Remove the redundant mce_hygon_feature_init() - x86/mce/threshold: Remove the redundant this_cpu_dec_return() - crypto: ccp: fix vpsp cmd ctx leak - KVM: s390: Fix IRQ injection with SIGP Stop and Store Status - parisc: Increase kernel stack size to 32kb - drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - Bluetooth: ISO: Serialize concurrent connect calls - unshare: don't drop active namespace references that were never taken - of/overlay: don't leak fragment references when changeset init fails - hwmon: (pwm-fan) Stop RPM timer before freeing tach data - !30459 [CVEAgent@OLK-6.6] Fix CVE-2026-99234 - !30468 [CVEAgent@OLK-6.6] Fix CVE-2026-99143 - !30322 urma: fix ipourma eid handler and register work concurrency - !30455 arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30491 [OLK-6.6] AMD Venice additional patches for openEuler - 2 - EDAC/amd64: Avoid a -Wformat-security warning - EDAC/amd64: Generate ctl_name string at runtime - !29993 [CVEAgent@OLK-6.6] Fix CVE-2026-98807 - !29964 [CVEAgent@OLK-6.6] Fix CVE-2026-98747 - !30393 ub/ubmem-vmmu: Remove the support_attr callback mechanism. - !30447 wifi: mac80211: minstrel_ht: validate fixed rate index - !30446 net: ena: fix MMIO read buffer leak on probe failure - tracing: Keep the predicate limit separate from program capacity - !30013 [CVEAgent@OLK-6.6] Fix CVE-2026-98855 - !30431 fix CVE-2026-98490 for OLK-6.6 - !30425 fix CVE-2026-98722 for OLK-6.6 - !30410 nvdimm: pmem: keep PREFLUSH before data writes - !30406 Fix CVE-2026-97480 for OLK-6.6 - !30204 x86/cpu/hygon: Report S5 reset status during boot - tracing: Unregister field variable histograms when the command fails - !30395 tty: fix saved termios reset race - arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30031 drm/amdkfd: fix SMI event cross-process information leak - wifi: mac80211: minstrel_ht: validate fixed rate index - net: ena: fix MMIO read buffer leak on probe failure - net: openvswitch: conntrack: fix helper UAF due to extensions realloc - net: openvswitch: conntrack: remove 'add_helper' dead code - openvswitch: prepare for stolen verdict coming from conntrack and nat engine - net/sched: act_ct: avoid modifying shared unconfirmed ct entry - net/sched: act_ct: fix helper UAF due to extensions realloc - ub/ubmem-vmmu: Remove the support_attr callback mechanism. - mtd: block2mtd: Fix divide error when erase_size is zero - block2mtd: prevent direct access of bd_inode - nvdimm: pmem: keep PREFLUSH before data writes - tty: serial: 8250: protect against NULL uart->port.dev in register - serial: 8250: invert serial8250_register_8250_port() CIR condition - urma: fix ipourma eid handler and register work concurrency - tty: fix saved termios reset race - x86/cpu/hygon: Report S5 reset status during boot - drm/amdkfd: fix SMI event cross-process information leak - of/overlay: put property on deadprops only after changeset add succeeds - net/mlx5: Fix slab-out-of-bounds when handling team device events - serial: core: fix NULL pointer dereference in serial_core_unregister_port() - !30553 tracing: Reject incomplete event filter expressions - !30498 nfsd: split nfsd4_copy into transient and durable async copy objects - !30000 [CVEAgent@OLK-6.6] Fix CVE-2026-98822 - !30497 cdma: ratelimit hot-path error logs in kernel driver and header file code synchronization - tracing: Reject incomplete event filter expressions - !30546 [OLK-6.6] ub: fix UBASE port reporting and UNIC reset and DMA handling - !30481 [CVEAgent@OLK-6.6] Fix CVE-2026-99080 - !30483 [CVEAgent@OLK-6.6] Fix CVE-2026-99206 - !30388 Fix CVE-2026-99153 - !30390 Fix CVE-2026-99152 - !30387 Fix CVE-2026-99110 - !30391 Fix CVE-2026-99109 - !30479 [CVEAgent@OLK-6.6] Fix CVE-2026-99254 - !30538 scsi: libsas: Fix SMP IO deadlock during HA resume - !30537 ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30536 scsi: libsas: Add linkrate and sas_addr change detection in rediscover；scsi: libsas: Add sas_ex_phy_to_dev() helper - !30486 [CVEAgent@OLK-6.6] Fix CVE-2026-99247 - !30454 [OLK-6.6] Fix CVE-2026-97566 - !30453 [OLK-6.6] Fix CVE-2026-97432 - !30444 [OLK-6.6] Fix CVE-2026-43234 - !30403 x86/hygon: Fix FPDSS on Hygon - !30269 [OLK-6.6] update rnpvf driver to 1.2.0. - !30155 [OLK-6.6] Fix CVE-2026-74695 - !30153 [OLK-6.6] Fix CVE-2026-72494 - !30149 [OLK-6.6] Fix CVE-2026-74368 - !30092 [CVEAgent@OLK-6.6] Fix CVE-2026-99052 - !30090 [CVEAgent@OLK-6.6] Fix CVE-2026-99040 - !30057 [CVEAgent@OLK-6.6] Fix CVE-2026-98948 - !30086 [CVEAgent@OLK-6.6] Fix CVE-2026-99025 - !30105 [CVEAgent@OLK-6.6] Fix CVE-2026-99078 - !30106 [CVEAgent@OLK-6.6] Fix CVE-2026-99079 - ub: ubase: skip bandwidth queries on next-generation chips - net: unic: Fix TX/RX DMA ordering and cache sync - net: unic: serialize port deactivation with reset - ub: ubase: add ub port events handling and statistics - scsi: libsas: Fix SMP IO deadlock during HA resume - scsi: libsas: Add sas_ex_phy_to_dev() helper - scsi: libsas: Add linkrate and sas_addr change detection in rediscover - !30430 v8 arm64: Allow CPU0 to be nohz_full - ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30300 mm/gup: allow movable memory pinnable - !30487 urma: limit opt buf length in uburma ioctl commands - !29931 [CVEAgent@OLK-6.6] Fix CVE-2026-98570 - nfsd: split nfsd4_copy into transient and durable async copy objects - ub: cdma: header file code synchronization - ub: cdma: ratelimit hot-path error logs in kernel driver - x86: hygon: Fix FPDSS on Hygon - tracing: Do not initialize tracefs work if tracing is disabled - scsi: target: iscsi: Fix race in discovery auth updates - fs: Free any excess xarray nodes in clear_inode() - io_uring: don't flood a cancelling task with task_work - urma: limit opt buf length in uburma ioctl commands - mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 - wifi: iwlwifi: mvm: fix P2P-Device binding handling - team: avoid NETDEV_CHANGEMTU event when unregistering slave - arm64: defconfig: Enable CONFIG_PM_SLEEP_SMP_NONZERO_CPU and CONFIG_ARCH_SUSPEND_NONZERO_CPU - arm64: Allow boot CPU nohz_full to coexist with suspend and kexec - isolation: Check whether there exists a housekeeping CPU online - isolation: Do not check whether housekeeping CPUs are present - smb: client: reject SetEA requests that do not fit the request buffer - scsi: libiscsi: Validate the task named by a management response - scsi: libiscsi: Validate the ITT reflected in a Reject PDU - smb: client: fix heap overflow in cifs_do_set_acl() - rnpvf: update rnpvf driver to 1.2.0. - mm/gup: allow movable memory pinnable - rnpvf: update rnpvf driver to 1.2.0. - netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() - RDMA/irdma: Replace waitqueue and flag with completion - wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() - net/mlx5e: Prevent stale XSK buffer release on refill retry - net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry - selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts - KEYS: Fix add_key() race with keyring restriction - openvswitch: fix soft lockup in the netlink flow dump - mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() - wifi: mac80211: prevent AP VLAN tx from other interfaces - net: ipv6: keep room for the mac header in dst_dev_overhead() - !30530 [CVEAgent@OLK-6.6] Fix CVE-2026-99163 - !30532 [CVEAgent@OLK-6.6] Fix CVE-2026-99235 - !29765 Fix CVE-2026-98289 - !30230 Fix CVE-2026-97615 - !29790 Fix CVE-2026-93250 - !30510 [CVEAgent@OLK-6.6] Fix CVE-2026-99005 - !30506 [CVEAgent@OLK-6.6] Fix CVE-2026-98871 - !30307 feat/obmm-unified-switch-split-v4 - !30064 [CVEAgent@OLK-6.6] Fix CVE-2026-98972 - !30507 [CVEAgent@OLK-6.6] Fix CVE-2026-98883 - !30450 BBML3 bugfix - !30156 [OLK-6.6] Fix CVE-2026-68258 - !30154 [OLK-6.6] Fix CVE-2026-74729 - !30151 [OLK-6.6] Fix CVE-2026-74273 - !27793 [OLK-6.6] Fix CVE-2026-68421 - !27512 [OLK-6.6] Fix CVE-2026-64259 - !30146 [OLK-6.6] Fix CVE-2026-53109 - !30575 arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30567 scsi: hisi_sas: Clear PHY error counts on phyup - arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30472 [CVEAgent@OLK-6.6] Fix CVE-2026-99243 - scsi: hisi_sas: Clear PHY error counts on phyup - scsi:hisi_sas:Sync upstream timer_delete API changes in hisi_sas_v3_hw.c - tracing: Save the event file instead of the compatible histogram - tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields - drm/i915/gt: Unmask interrupts only when ACTIVE is true - serial: 8250_port: recognize UPIO_AU - crypto: ccp - Fix possible deadlock in SEV init failure path - obmm: pack the internal structs by field ordering - obmm: sysfs views over the switch: attributes, identity, lockless reads - obmm: generalized dual-backend gap mmap - obmm: export switch target wrap-up and validation consolidation - obmm: unified two-phase switch core (import target) - obmm: install mappings lazily from the backend fault paths - obmm: fix the pxm bound, the open TOCTOU and the teardown release - obmm: split the region shell from the memory backends - obmm: depend on TRANSPARENT_HUGEPAGE for the PMD fault paths - io-wq: order the exit bit against worker creation task work - mm/pfn_range_alloc: split block mappings in linear map updates - arm64/mm: make pte_present() recognize present-invalid entries - net: bridge: use option bits for CFM/MRP frame handlers - drm/amdkfd: Check bounds on CRIU restore queue type and mqd size - soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read - cxl/region: Block region delete during region creation - powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy - cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() - vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() - af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). - sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() - fuse-uring: make a fuse_req on SQE commit only findable after memcpy - !30591 [CVEAgent@OLK-6.6] Fix CVE-2026-99142 - !30590 [CVEAgent@OLK-6.6] Fix CVE-2026-99219 - !30594 [CVEAgent@OLK-6.6] Fix CVE-2026-99233 - !30600 urma: warn on slow TP driver callbacks - urma: warn on slow TP driver callbacks - tracing/histograms: Verify event_call identity when updating synth_event refcount - tracing: Check operator stack capacity before pushing - ftrace: Initialize modname and offset in print_rec() - !30602 [CVEAgent@OLK-6.6] Fix CVE-2026-99117 - !30605 [CVEAgent@OLK-6.6] Fix CVE-2026-99211 - !30604 [CVEAgent@OLK-6.6] Fix CVE-2026-99201 - netlink: reset skb headers before unicast and multicast filtering - netlink: avoid hashing the network namespace pointer - net: bridge: mcast: don't truncate the port group walk on teardown - !30597 [CVEAgent@OLK-6.6] Fix CVE-2026-99239 - !30582 v5 MOC bypass cache - !30610 iommu/io-pgtable-arm: Add support for contiguous hint - !30523 drivers:misc:sdma-dae: Open source sdma-dae driver to OLK-6.6 (already supported on olk-5.10) - !28122 [CVEAgent@OLK-6.6] Fix CVE-2026-89802 - !29350 [CVEAgent@OLK-6.6] Fix CVE-2026-97988 - !30473 Fix CVE-2026-97992 - !30150 [OLK-6.6] Fix CVE-2026-74527 - !30576 net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - !30544 [OLK-6.6] Fix CVE-2026-90057 - !30476 [OLK-6.6] fix CVE-2026-98936 - !30474 [OLK-6.6] fix CVE-2026-99059 - !30144 [OLK-6.6] Fix CVE-2026-64190 - !30311 [OLK-6.6]nser: add support for wangxun RDMA driver - iommu/io-pgtable-arm: Add support for contiguous hint - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn - openeuler: configs: arm64: Enable PBHA by default - arm64: mm: Introduce kernel param pbha - arm64: mm: Introduce prctl to control pbha behavior - arm64: mm: Set flag VM_PBHA_BIT0 for global init task - arm64: mm: Introduce procfs interface to update PBHA0 bit - arm64: mm: Set PBHA0 bit for VM_PBHA_BIT0 - arm64: mm: Introduce VM_PBHA_BIT0 to enable pbha bit0 for single vma - arm64: mm: Show PBHA bit 59 as PBHA0 in ptdump - arm64: mm: Update kernel pte entries if pbha bit0 enabled - arm64: mm: Detect and enable PBHA bit0 at early startup - arm64: cpufeature: Enable PBHA for stage1 early via FDT - Documentation: arm64: Describe the support and expectations for PBHA - KVM: arm64: Configure PBHA bits for stage2 - arm64: mm: Add pgprot_pbha() to allow drivers to request PBHA values - arm64: cpufeature: Enable PBHA bits for stage1 - dt-bindings: arm: Add binding for Page Based Hardware Attributes - dt-bindings: Rename the description of cpu nodes cpu.yaml - KVM: arm64: Detect and enable PBHA for stage2 - net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() - drivers:misc:sdma-dae: adapt driver interfaces for OLK-6.6 - net: team: fix NULL pointer dereference in team_xmit during mode change - net: team: Rename port_disabled team mode op to port_tx_disabled - net: team: Remove unused team_mode_op, port_enabled - wifi: ath11k: reset ar->num_stations on hardware start - wireguard: noise: reject response consumption after intermediate initiation - vhost-vdpa: protect config_ctx from being freed under the config callback - x86/arm64: config: enable the Wangxun nser RDMA driver - net: wangxun: nser: add RDMA support for 100GbE NICs - octeontx2-af: Block VFs from clobbering special CGX PKIND state - vhost: invalidate vring access on IOTLB transitions - drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op - drivers:misc:sdma-dae: Remove redundant print during mm exit and resume. - drivers:misc:sdma-dae: Revert optimize kernel code - drivers:misc:sdma-dae: Revert add channel depth info in debugfs - drivers:misc:sdma-dae: Revert Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Remove interference print. - drivers:misc:sdma-dae: Checking the address alignment - drivers:misc:sdma-dae: add NULL judgement of global variables - drivers:misc:sdma-dae: add channel depth info in debugfs - drivers:misc:sdma-dae: optimize kernel code - drivers:misc:sdma-dae: fix incorrect debugfs print - drivers:misc:sdma-dae: sdma fix uncorrect sleep time - drivers:misc:sdma-dae: fix incorrect kmalloc flag - drivers:misc:sdma-dae: sdma fix PUAF problem fork risk - drivers:misc:sdma-dae: modify ttl_processes reduce logic - drivers:misc:sdma-dae: remove unnecessary return in void function - drivers:misc:sdma-dae: fix incorrect resource release - drivers:misc:sdma-dae: remove lock while pausing channels - drivers:misc:sdma-dae: add mmu_notifier - drivers:misc:sdma-dae: add MODULE_VERSION to control version - drivers:misc:sdma-dae: add print in exceptional branch - drivers:misc:sdma-dae: bugfix of channel operation - drivers:misc:sdma-dae: change authority of sdma device - drivers:misc:sdma-dae: add channel ida validation - drivers:misc:sdma-dae: add vma_ops to avoid mremap error - drivers:misc:sdma-dae: add fast mode - drivers:misc:sdma-dae: not expose sq_tail write and add validation of cq_head - drivers:misc:sdma-dae: add debugfs of sdma-dae - drivers:misc:sdma-dae: fix icsl code check problems - drivers:misc:sdma-dae: fix input validate problems - drivers:misc:sdma-dae: fix interrupt handle logic - drivers:misc:sdma-dae: not compile sdma-dae by default - drivers:misc:sdma-dae: enable sdma_dae for arm64 - drivers:misc:sdma-dae: support page fault preprocess - drivers:misc:sdma-dae: support interrupt init and handle - drivers:misc:sdma-dae: support sqe task send and execute - drivers:misc:sdma-dae: support channel management - drivers:misc:sdma-dae: support getting streamID - drivers:misc:sdma-dae: support initializ sdma driver - !30253 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - !29554 [CVEAgent@OLK-6.6] Fix CVE-2026-98286 - !30263 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - !30258 v10 net: dynthread: dynamic threaded NAPI - !30208 Fix CVE-2026-98044 - !30280 bpf: Make post-verification instruction rewrites killable - !30184 blk-mq: set RQF_USE_SCHED when the operation is known - !30267 sched/fair: Avoid overflow in place_entity() - !30236 configfs: unhash the dentry before dropping the item in rmdir - !30276 virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - !29584 [CVEAgent@OLK-6.6] Fix CVE-2026-98364 - !29906 [CVEAgent@OLK-6.6] Fix CVE-2026-98443 - !30046 net: cap skb->queue_mapping when the tx queue is picked - !30223 bpf: Reject pkt arguments in mutating subprogs - !29932 [CVEAgent@OLK-6.6] Fix CVE-2026-98598 - !30044 net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - bpf: Make post-verification instruction rewrites killable - virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - RDMA/umem: avoid ib_umem_find_best_pgsz ABI breakage - sched/fair: Avoid overflow in place_entity() - RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - net: dynthread: Add debug switch and instrumentation - net: dynthread: Scale the number of NAPI thread CPUs - net: dynthread: Switch NAPI to threads on spare CPUs - net: dynthread: Steer the RX queue IRQs away from the target tasks - net: dynthread: Monitor the load of the target tasks - net: dynthread: Add dynamic threaded NAPI scheduler framework - net/mlx5e: Do not block on RTNL while recovering an SQ - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover - net/mlx5e: Acquire RTNL lock before RQs/SQs activation/deactivation - net/mlx5e: link NAPI instances to queues and IRQs - net: Fix napi irq KABI breakage - net: Add NAPI IRQ support - net: Fix KABI breakage for queue napi association - net: Add queue and napi association - neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - configfs: unhash the dentry before dropping the item in rmdir - bpf: Reject pkt arguments in mutating subprogs - bpf: Fix kabi breakage in struct bpf_subprog_info - bpf: Reject legacy packet loads from callbacks - blk-mq: set RQF_USE_SCHED when the operation is known - net: cap skb->queue_mapping when the tx queue is picked - net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - ipv6: Prevent rt6_insert_exception() for dying fib6_info. - xfs: fix cursor and pointer handling when recovering iunlink buckets - xfrm: hold net_device reference under RCU in bundle creation - drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown - !30268 ub: udma: solving internal code review issues - !30305 bpf: Mark syscall helpers as sleepable - !30113 fix/CVE-2026-98103 - !30061 [CVEAgent@OLK-6.6] Fix CVE-2026-98966 - !30099 [CVEAgent@OLK-6.6] Fix CVE-2026-99070 - !30087 [CVEAgent@OLK-6.6] Fix CVE-2026-99031 - !30100 [CVEAgent@OLK-6.6] Fix CVE-2026-99071 - !30101 [CVEAgent@OLK-6.6] Fix CVE-2026-99072 - !30102 [CVEAgent@OLK-6.6] Fix CVE-2026-99074 - !30091 [CVEAgent@OLK-6.6] Fix CVE-2026-99041 - !30088 [CVEAgent@OLK-6.6] Fix CVE-2026-99033 - !30043 seg6: ensure packet data is writable before modifying SRH and IPv6 DA - !30197 CVE-2026-98503 - bpf: Mark syscall helpers as sleepable - ub: udma: support dwqe with a few wqebbs - ub: udma: solving internal code review issues - seg6: ensure packet data is writable before modifying SRH and IPv6 DA - igmp: fix kabi breakage of struct ip_sf_list - packet: use ubuf_info completion for TX_RING packets - virtio_net: copy zerocopy frags in start_xmit without NAPI - igmp: convert struct ip_sf_list to RCU - ipv4: stop PMTU walk when nexthop group shrinks - ipv4: stop route notification sizing when nexthop group shrinks - ipv4: do not warn on route notification size race - ipv6: do not warn on route notification size race - ip6_gre: remove obsolete ERSPAN PMTU update - net/packet: guard the ll header push in packet_rcv_spkt() - net: bridge: avoid recursive multicast port cleanup - bonding: fix the program leak when XDP is replaced - !30029 CODEOWNERS: add kernel module ownership rules - !30291 [OLK-6.6] mm/swapfile: reject duplicated bad pages in swap header - !30201 filescgroup: migrate files resources of every task, not just the first - !30306 Fix CVE-2026-98799 - bpf: Fix kabi breakage in struct bpf_tramp_image and bpf_trampoline - bpf: Skip detached progs in trampoline images that are still in use - mm/swapfile: reject duplicated bad pages in swap header - filescgroup: migrate files resources of every task, not just the first - scripts: add get_codeowner.py to look up CODEOWNERS owners - CODEOWNERS: add kernel module ownership rules - !30256 [Backport] ext4: defer unwritten splitting until I/O completion - !30394 urma: Fix the assignment before null check - !30003 [CVEAgent@OLK-6.6] Fix CVE-2026-98831 - !29516 [CVEAgent@OLK-6.6] Fix CVE-2026-98198 - !30220 drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - !30082 [CVEAgent@OLK-6.6] Fix CVE-2026-99012 - !30071 [CVEAgent@OLK-6.6] Fix CVE-2026-98983 - !30262 [CVEAgent] Fix CVE-2026-99091 - !30294 Fix CVE-2026-99011 - !30293 Fix CVE-2026-99008 - !30290 Fix CVE-2026-98663 - !30289 Fix CVE-2026-98664 - !30288 Fix CVE-2026-98666 - !30234 [PATCH 00/11] KVM: arm64: pvm: Add software VGICv3 and virtual timer support - ext4: prevent sleeping allocation in NOWAIT write path - !30367 Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - ext4: remove EXT4_GET_BLOCKS_IO_CREATE_EXT - ext4: simplify the mapping query logic in ext4_iomap_begin() - ext4: skip overwrite check for aligned non-extending DIO writes - ext4: remove unused unwritten parameter in ext4_dio_write_iter() - ext4: remove useless ext4_iomap_overwrite_ops - ext4: avoid starting handle when dio writing an unwritten extent - ext4: don't split extent before submitting I/O - !30233 Fix CVE-2026-98917 - !30235 Fix CVE-2026-98930 - !30368 wifi: mac80211: validate TX status rate metadata - !30378 tty: tty_port: restore TTY_IO_ERROR on activation failure - !30380 tty: port: fix tty_port_tty_vhangup() race - !30371 mtd: core: avoid double-free of OTP NVMEM device - urma: Fix the assignment before null check - !30386 RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - !30270 [OLK-6.6] AMD Venice additional patches for openEuler - !28385 [OLK-6.6] crypto: ccp: fix vpsp cmd ctx leak - !30382 fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - !30365 bpf: Fix out-of-bounds btf->types write for split BTF - fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - !30313 kabi: fix include helpers broken by the predefined 'linux' macro - tty: port: fix tty_port_tty_vhangup() race - tty: tty_port: restore TTY_IO_ERROR on activation failure - mtd: core: avoid double-free of OTP NVMEM device - wifi: mac80211: validate TX status rate metadata - bpf: Fix out-of-bounds btf->types write for split BTF - kabi: fix include helpers broken by the predefined 'linux' macro - KVM: arm64: pvm: Handle counter reads in the hyp path - KVM: arm64: pvm: Trap guest timer accesses and enforce EL0 permissions - KVM: arm64: pvm: Align timer capabilities and counter handling with RV timers - KVM: arm64: pvm: Wire RV timers into the KVM timer entry points - KVM: arm64: pvm: Add the software RV timer implementation - KVM: arm64: pvm: Deliver VGIC interrupts without hardware LRs - KVM: arm64: pvm: Emulate VGIC active priority registers - KVM: arm64: pvm: Route ICC accesses through register descriptors - KVM: arm64: pvm: Emulate the GICv3 CPU interface - KVM: arm64: Handle pending EL1 IRQ exceptions - KVM: arm64: pvm: Constrain virtual interrupt capabilities - Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown - iio: imu: adis16480: fix unprotected debugfs reads - iio: imu: adis16400: fix unprotected debugfs reads - iio: gyro: adis16136: fix unprotected debugfs reads - Bluetooth: MGMT: Fix status of pending commands flushed on power off - EDAC/amd64: Mask UMC chip select to the four implemented selects - x86/mce: Fix hardware debug register corruption on task migration - x86/MCE/AMD: Fix inverted interrupt enablement during storm handling - x86/amd_node: Avoid divide by zero on virtualized systems - RAS/AMD/ATL, EDAC/amd64: Only load ATL when needed - x86/mce: Set up the polling timer before CMCI discovery - x86/mce: Restore MCA polling interval halving - EDAC/amd64: Remove NUM_CONTROLLERS macro - x86/mce/inject: Remove call to mce_notify_irq() - x86/mce: Remove the redundant mce_hygon_feature_init() - x86/mce/threshold: Remove the redundant this_cpu_dec_return() - crypto: ccp: fix vpsp cmd ctx leak - KVM: s390: Fix IRQ injection with SIGP Stop and Store Status - parisc: Increase kernel stack size to 32kb - drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - Bluetooth: ISO: Serialize concurrent connect calls - unshare: don't drop active namespace references that were never taken - of/overlay: don't leak fragment references when changeset init fails - hwmon: (pwm-fan) Stop RPM timer before freeing tach data - !30459 [CVEAgent@OLK-6.6] Fix CVE-2026-99234 - !30468 [CVEAgent@OLK-6.6] Fix CVE-2026-99143 - !30322 urma: fix ipourma eid handler and register work concurrency - !30455 arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30491 [OLK-6.6] AMD Venice additional patches for openEuler - 2 - EDAC/amd64: Avoid a -Wformat-security warning - EDAC/amd64: Generate ctl_name string at runtime - !29993 [CVEAgent@OLK-6.6] Fix CVE-2026-98807 - !29964 [CVEAgent@OLK-6.6] Fix CVE-2026-98747 - !30393 ub/ubmem-vmmu: Remove the support_attr callback mechanism. - !30447 wifi: mac80211: minstrel_ht: validate fixed rate index - !30446 net: ena: fix MMIO read buffer leak on probe failure - tracing: Keep the predicate limit separate from program capacity - !30013 [CVEAgent@OLK-6.6] Fix CVE-2026-98855 - !30431 fix CVE-2026-98490 for OLK-6.6 - !30425 fix CVE-2026-98722 for OLK-6.6 - !30410 nvdimm: pmem: keep PREFLUSH before data writes - !30406 Fix CVE-2026-97480 for OLK-6.6 - !30204 x86/cpu/hygon: Report S5 reset status during boot - tracing: Unregister field variable histograms when the command fails - !30395 tty: fix saved termios reset race - arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30031 drm/amdkfd: fix SMI event cross-process information leak - wifi: mac80211: minstrel_ht: validate fixed rate index - net: ena: fix MMIO read buffer leak on probe failure - net: openvswitch: conntrack: fix helper UAF due to extensions realloc - net: openvswitch: conntrack: remove 'add_helper' dead code - openvswitch: prepare for stolen verdict coming from conntrack and nat engine - net/sched: act_ct: avoid modifying shared unconfirmed ct entry - net/sched: act_ct: fix helper UAF due to extensions realloc - ub/ubmem-vmmu: Remove the support_attr callback mechanism. - mtd: block2mtd: Fix divide error when erase_size is zero - block2mtd: prevent direct access of bd_inode - nvdimm: pmem: keep PREFLUSH before data writes - tty: serial: 8250: protect against NULL uart->port.dev in register - serial: 8250: invert serial8250_register_8250_port() CIR condition - urma: fix ipourma eid handler and register work concurrency - tty: fix saved termios reset race - x86/cpu/hygon: Report S5 reset status during boot - drm/amdkfd: fix SMI event cross-process information leak - of/overlay: put property on deadprops only after changeset add succeeds - net/mlx5: Fix slab-out-of-bounds when handling team device events - serial: core: fix NULL pointer dereference in serial_core_unregister_port() - !30553 tracing: Reject incomplete event filter expressions - !30498 nfsd: split nfsd4_copy into transient and durable async copy objects - !30000 [CVEAgent@OLK-6.6] Fix CVE-2026-98822 - !30497 cdma: ratelimit hot-path error logs in kernel driver and header file code synchronization - tracing: Reject incomplete event filter expressions - !30546 [OLK-6.6] ub: fix UBASE port reporting and UNIC reset and DMA handling - !30481 [CVEAgent@OLK-6.6] Fix CVE-2026-99080 - !30483 [CVEAgent@OLK-6.6] Fix CVE-2026-99206 - !30388 Fix CVE-2026-99153 - !30390 Fix CVE-2026-99152 - !30387 Fix CVE-2026-99110 - !30391 Fix CVE-2026-99109 - !30479 [CVEAgent@OLK-6.6] Fix CVE-2026-99254 - !30538 scsi: libsas: Fix SMP IO deadlock during HA resume - !30537 ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30536 scsi: libsas: Add linkrate and sas_addr change detection in rediscover；scsi: libsas: Add sas_ex_phy_to_dev() helper - !30486 [CVEAgent@OLK-6.6] Fix CVE-2026-99247 - !30454 [OLK-6.6] Fix CVE-2026-97566 - !30453 [OLK-6.6] Fix CVE-2026-97432 - !30444 [OLK-6.6] Fix CVE-2026-43234 - !30403 x86/hygon: Fix FPDSS on Hygon - !30269 [OLK-6.6] update rnpvf driver to 1.2.0. - !30155 [OLK-6.6] Fix CVE-2026-74695 - !30153 [OLK-6.6] Fix CVE-2026-72494 - !30149 [OLK-6.6] Fix CVE-2026-74368 - !30092 [CVEAgent@OLK-6.6] Fix CVE-2026-99052 - !30090 [CVEAgent@OLK-6.6] Fix CVE-2026-99040 - !30057 [CVEAgent@OLK-6.6] Fix CVE-2026-98948 - !30086 [CVEAgent@OLK-6.6] Fix CVE-2026-99025 - !30105 [CVEAgent@OLK-6.6] Fix CVE-2026-99078 - !30106 [CVEAgent@OLK-6.6] Fix CVE-2026-99079 - ub: ubase: skip bandwidth queries on next-generation chips - net: unic: Fix TX/RX DMA ordering and cache sync - net: unic: serialize port deactivation with reset - ub: ubase: add ub port events handling and statistics - scsi: libsas: Fix SMP IO deadlock during HA resume - scsi: libsas: Add sas_ex_phy_to_dev() helper - scsi: libsas: Add linkrate and sas_addr change detection in rediscover - !30430 v8 arm64: Allow CPU0 to be nohz_full - ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30300 mm/gup: allow movable memory pinnable - !30487 urma: limit opt buf length in uburma ioctl commands - !29931 [CVEAgent@OLK-6.6] Fix CVE-2026-98570 - nfsd: split nfsd4_copy into transient and durable async copy objects - ub: cdma: header file code synchronization - ub: cdma: ratelimit hot-path error logs in kernel driver - x86: hygon: Fix FPDSS on Hygon - tracing: Do not initialize tracefs work if tracing is disabled - scsi: target: iscsi: Fix race in discovery auth updates - fs: Free any excess xarray nodes in clear_inode() - io_uring: don't flood a cancelling task with task_work - urma: limit opt buf length in uburma ioctl commands - mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 - wifi: iwlwifi: mvm: fix P2P-Device binding handling - team: avoid NETDEV_CHANGEMTU event when unregistering slave - arm64: defconfig: Enable CONFIG_PM_SLEEP_SMP_NONZERO_CPU and CONFIG_ARCH_SUSPEND_NONZERO_CPU - arm64: Allow boot CPU nohz_full to coexist with suspend and kexec - isolation: Check whether there exists a housekeeping CPU online - isolation: Do not check whether housekeeping CPUs are present - smb: client: reject SetEA requests that do not fit the request buffer - scsi: libiscsi: Validate the task named by a management response - scsi: libiscsi: Validate the ITT reflected in a Reject PDU - smb: client: fix heap overflow in cifs_do_set_acl() - rnpvf: update rnpvf driver to 1.2.0. - mm/gup: allow movable memory pinnable - rnpvf: update rnpvf driver to 1.2.0. - netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() - RDMA/irdma: Replace waitqueue and flag with completion - wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() - net/mlx5e: Prevent stale XSK buffer release on refill retry - net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry - selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts - KEYS: Fix add_key() race with keyring restriction - openvswitch: fix soft lockup in the netlink flow dump - mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() - wifi: mac80211: prevent AP VLAN tx from other interfaces - net: ipv6: keep room for the mac header in dst_dev_overhead() - !30530 [CVEAgent@OLK-6.6] Fix CVE-2026-99163 - !30532 [CVEAgent@OLK-6.6] Fix CVE-2026-99235 - !29765 Fix CVE-2026-98289 - !30230 Fix CVE-2026-97615 - !29790 Fix CVE-2026-93250 - !30510 [CVEAgent@OLK-6.6] Fix CVE-2026-99005 - !30506 [CVEAgent@OLK-6.6] Fix CVE-2026-98871 - !30307 feat/obmm-unified-switch-split-v4 - !30064 [CVEAgent@OLK-6.6] Fix CVE-2026-98972 - !30507 [CVEAgent@OLK-6.6] Fix CVE-2026-98883 - !30450 BBML3 bugfix - !30156 [OLK-6.6] Fix CVE-2026-68258 - !30154 [OLK-6.6] Fix CVE-2026-74729 - !30151 [OLK-6.6] Fix CVE-2026-74273 - !27793 [OLK-6.6] Fix CVE-2026-68421 - !27512 [OLK-6.6] Fix CVE-2026-64259 - !30146 [OLK-6.6] Fix CVE-2026-53109 - !30575 arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30567 scsi: hisi_sas: Clear PHY error counts on phyup - arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30472 [CVEAgent@OLK-6.6] Fix CVE-2026-99243 - scsi: hisi_sas: Clear PHY error counts on phyup - scsi:hisi_sas:Sync upstream timer_delete API changes in hisi_sas_v3_hw.c - tracing: Save the event file instead of the compatible histogram - tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields - drm/i915/gt: Unmask interrupts only when ACTIVE is true - serial: 8250_port: recognize UPIO_AU - crypto: ccp - Fix possible deadlock in SEV init failure path - obmm: pack the internal structs by field ordering - obmm: sysfs views over the switch: attributes, identity, lockless reads - obmm: generalized dual-backend gap mmap - obmm: export switch target wrap-up and validation consolidation - obmm: unified two-phase switch core (import target) - obmm: install mappings lazily from the backend fault paths - obmm: fix the pxm bound, the open TOCTOU and the teardown release - obmm: split the region shell from the memory backends - obmm: depend on TRANSPARENT_HUGEPAGE for the PMD fault paths - io-wq: order the exit bit against worker creation task work - mm/pfn_range_alloc: split block mappings in linear map updates - arm64/mm: make pte_present() recognize present-invalid entries - net: bridge: use option bits for CFM/MRP frame handlers - drm/amdkfd: Check bounds on CRIU restore queue type and mqd size - soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read - cxl/region: Block region delete during region creation - powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy - cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() - vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() - af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). - sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() - fuse-uring: make a fuse_req on SQE commit only findable after memcpy - !30591 [CVEAgent@OLK-6.6] Fix CVE-2026-99142 - !30590 [CVEAgent@OLK-6.6] Fix CVE-2026-99219 - !30594 [CVEAgent@OLK-6.6] Fix CVE-2026-99233 - !30600 urma: warn on slow TP driver callbacks - urma: warn on slow TP driver callbacks - tracing/histograms: Verify event_call identity when updating synth_event refcount - tracing: Check operator stack capacity before pushing - ftrace: Initialize modname and offset in print_rec() - !30602 [CVEAgent@OLK-6.6] Fix CVE-2026-99117 - !30605 [CVEAgent@OLK-6.6] Fix CVE-2026-99211 - !30604 [CVEAgent@OLK-6.6] Fix CVE-2026-99201 - netlink: reset skb headers before unicast and multicast filtering - netlink: avoid hashing the network namespace pointer - net: bridge: mcast: don't truncate the port group walk on teardown - !30597 [CVEAgent@OLK-6.6] Fix CVE-2026-99239 - !30582 v5 MOC bypass cache - !30610 iommu/io-pgtable-arm: Add support for contiguous hint - !30523 drivers:misc:sdma-dae: Open source sdma-dae driver to OLK-6.6 (already supported on olk-5.10) - !28122 [CVEAgent@OLK-6.6] Fix CVE-2026-89802 - !29350 [CVEAgent@OLK-6.6] Fix CVE-2026-97988 - !30473 Fix CVE-2026-97992 - !30150 [OLK-6.6] Fix CVE-2026-74527 - !30576 net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - !30544 [OLK-6.6] Fix CVE-2026-90057 - !30476 [OLK-6.6] fix CVE-2026-98936 - !30474 [OLK-6.6] fix CVE-2026-99059 - !30144 [OLK-6.6] Fix CVE-2026-64190 - !30311 [OLK-6.6]nser: add support for wangxun RDMA driver - iommu/io-pgtable-arm: Add support for contiguous hint - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn - openeuler: configs: arm64: Enable PBHA by default - arm64: mm: Introduce kernel param pbha - arm64: mm: Introduce prctl to control pbha behavior - arm64: mm: Set flag VM_PBHA_BIT0 for global init task - arm64: mm: Introduce procfs interface to update PBHA0 bit - arm64: mm: Set PBHA0 bit for VM_PBHA_BIT0 - arm64: mm: Introduce VM_PBHA_BIT0 to enable pbha bit0 for single vma - arm64: mm: Show PBHA bit 59 as PBHA0 in ptdump - arm64: mm: Update kernel pte entries if pbha bit0 enabled - arm64: mm: Detect and enable PBHA bit0 at early startup - arm64: cpufeature: Enable PBHA for stage1 early via FDT - Documentation: arm64: Describe the support and expectations for PBHA - KVM: arm64: Configure PBHA bits for stage2 - arm64: mm: Add pgprot_pbha() to allow drivers to request PBHA values - arm64: cpufeature: Enable PBHA bits for stage1 - dt-bindings: arm: Add binding for Page Based Hardware Attributes - dt-bindings: Rename the description of cpu nodes cpu.yaml - KVM: arm64: Detect and enable PBHA for stage2 - net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() - drivers:misc:sdma-dae: adapt driver interfaces for OLK-6.6 - net: team: fix NULL pointer dereference in team_xmit during mode change - net: team: Rename port_disabled team mode op to port_tx_disabled - net: team: Remove unused team_mode_op, port_enabled - wifi: ath11k: reset ar->num_stations on hardware start - wireguard: noise: reject response consumption after intermediate initiation - vhost-vdpa: protect config_ctx from being freed under the config callback - x86/arm64: config: enable the Wangxun nser RDMA driver - net: wangxun: nser: add RDMA support for 100GbE NICs - octeontx2-af: Block VFs from clobbering special CGX PKIND state - vhost: invalidate vring access on IOTLB transitions - drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op - drivers:misc:sdma-dae: Remove redundant print during mm exit and resume. - drivers:misc:sdma-dae: Revert optimize kernel code - drivers:misc:sdma-dae: Revert add channel depth info in debugfs - drivers:misc:sdma-dae: Revert Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Remove interference print. - drivers:misc:sdma-dae: Checking the address alignment - drivers:misc:sdma-dae: add NULL judgement of global variables - drivers:misc:sdma-dae: add channel depth info in debugfs - drivers:misc:sdma-dae: optimize kernel code - drivers:misc:sdma-dae: fix incorrect debugfs print - drivers:misc:sdma-dae: sdma fix uncorrect sleep time - drivers:misc:sdma-dae: fix incorrect kmalloc flag - drivers:misc:sdma-dae: sdma fix PUAF problem fork risk - drivers:misc:sdma-dae: modify ttl_processes reduce logic - drivers:misc:sdma-dae: remove unnecessary return in void function - drivers:misc:sdma-dae: fix incorrect resource release - drivers:misc:sdma-dae: remove lock while pausing channels - drivers:misc:sdma-dae: add mmu_notifier - drivers:misc:sdma-dae: add MODULE_VERSION to control version - drivers:misc:sdma-dae: add print in exceptional branch - drivers:misc:sdma-dae: bugfix of channel operation - drivers:misc:sdma-dae: change authority of sdma device - drivers:misc:sdma-dae: add channel ida validation - drivers:misc:sdma-dae: add vma_ops to avoid mremap error - drivers:misc:sdma-dae: add fast mode - drivers:misc:sdma-dae: not expose sq_tail write and add validation of cq_head - drivers:misc:sdma-dae: add debugfs of sdma-dae - drivers:misc:sdma-dae: fix icsl code check problems - drivers:misc:sdma-dae: fix input validate problems - drivers:misc:sdma-dae: fix interrupt handle logic - drivers:misc:sdma-dae: not compile sdma-dae by default - drivers:misc:sdma-dae: enable sdma_dae for arm64 - drivers:misc:sdma-dae: support page fault preprocess - drivers:misc:sdma-dae: support interrupt init and handle - drivers:misc:sdma-dae: support sqe task send and execute - drivers:misc:sdma-dae: support channel management - drivers:misc:sdma-dae: support getting streamID - drivers:misc:sdma-dae: support initializ sdma driver - !30253 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - !29554 [CVEAgent@OLK-6.6] Fix CVE-2026-98286 - !30263 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - !30258 v10 net: dynthread: dynamic threaded NAPI - !30208 Fix CVE-2026-98044 - !30280 bpf: Make post-verification instruction rewrites killable - !30184 blk-mq: set RQF_USE_SCHED when the operation is known - !30267 sched/fair: Avoid overflow in place_entity() - !30236 configfs: unhash the dentry before dropping the item in rmdir - !30276 virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - !29584 [CVEAgent@OLK-6.6] Fix CVE-2026-98364 - !29906 [CVEAgent@OLK-6.6] Fix CVE-2026-98443 - !30046 net: cap skb->queue_mapping when the tx queue is picked - !30223 bpf: Reject pkt arguments in mutating subprogs - !29932 [CVEAgent@OLK-6.6] Fix CVE-2026-98598 - !30044 net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - bpf: Make post-verification instruction rewrites killable - virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - RDMA/umem: avoid ib_umem_find_best_pgsz ABI breakage - sched/fair: Avoid overflow in place_entity() - RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - net: dynthread: Add debug switch and instrumentation - net: dynthread: Scale the number of NAPI thread CPUs - net: dynthread: Switch NAPI to threads on spare CPUs - net: dynthread: Steer the RX queue IRQs away from the target tasks - net: dynthread: Monitor the load of the target tasks - net: dynthread: Add dynamic threaded NAPI scheduler framework - net/mlx5e: Do not block on RTNL while recovering an SQ - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover - net/mlx5e: Acquire RTNL lock before RQs/SQs activation/deactivation - net/mlx5e: link NAPI instances to queues and IRQs - net: Fix napi irq KABI breakage - net: Add NAPI IRQ support - net: Fix KABI breakage for queue napi association - net: Add queue and napi association - neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - configfs: unhash the dentry before dropping the item in rmdir - bpf: Reject pkt arguments in mutating subprogs - bpf: Fix kabi breakage in struct bpf_subprog_info - bpf: Reject legacy packet loads from callbacks - blk-mq: set RQF_USE_SCHED when the operation is known - net: cap skb->queue_mapping when the tx queue is picked - net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - ipv6: Prevent rt6_insert_exception() for dying fib6_info. - xfs: fix cursor and pointer handling when recovering iunlink buckets - xfrm: hold net_device reference under RCU in bundle creation - drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown - !30268 ub: udma: solving internal code review issues - !30305 bpf: Mark syscall helpers as sleepable - !30113 fix/CVE-2026-98103 - !30061 [CVEAgent@OLK-6.6] Fix CVE-2026-98966 - !30099 [CVEAgent@OLK-6.6] Fix CVE-2026-99070 - !30087 [CVEAgent@OLK-6.6] Fix CVE-2026-99031 - !30100 [CVEAgent@OLK-6.6] Fix CVE-2026-99071 - !30101 [CVEAgent@OLK-6.6] Fix CVE-2026-99072 - !30102 [CVEAgent@OLK-6.6] Fix CVE-2026-99074 - !30091 [CVEAgent@OLK-6.6] Fix CVE-2026-99041 - !30088 [CVEAgent@OLK-6.6] Fix CVE-2026-99033 - !30043 seg6: ensure packet data is writable before modifying SRH and IPv6 DA - !30197 CVE-2026-98503 - bpf: Mark syscall helpers as sleepable - ub: udma: support dwqe with a few wqebbs - ub: udma: solving internal code review issues - seg6: ensure packet data is writable before modifying SRH and IPv6 DA - igmp: fix kabi breakage of struct ip_sf_list - packet: use ubuf_info completion for TX_RING packets - virtio_net: copy zerocopy frags in start_xmit without NAPI - igmp: convert struct ip_sf_list to RCU - ipv4: stop PMTU walk when nexthop group shrinks - ipv4: stop route notification sizing when nexthop group shrinks - ipv4: do not warn on route notification size race - ipv6: do not warn on route notification size race - ip6_gre: remove obsolete ERSPAN PMTU update - net/packet: guard the ll header push in packet_rcv_spkt() - net: bridge: avoid recursive multicast port cleanup - bonding: fix the program leak when XDP is replaced - !30029 CODEOWNERS: add kernel module ownership rules - !30291 [OLK-6.6] mm/swapfile: reject duplicated bad pages in swap header - !30201 filescgroup: migrate files resources of every task, not just the first - !30306 Fix CVE-2026-98799 - bpf: Fix kabi breakage in struct bpf_tramp_image and bpf_trampoline - bpf: Skip detached progs in trampoline images that are still in use - mm/swapfile: reject duplicated bad pages in swap header - filescgroup: migrate files resources of every task, not just the first - scripts: add get_codeowner.py to look up CODEOWNERS owners - CODEOWNERS: add kernel module ownership rules - !30256 [Backport] ext4: defer unwritten splitting until I/O completion - !30394 urma: Fix the assignment before null check - !30003 [CVEAgent@OLK-6.6] Fix CVE-2026-98831 - !29516 [CVEAgent@OLK-6.6] Fix CVE-2026-98198 - !30220 drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - !30082 [CVEAgent@OLK-6.6] Fix CVE-2026-99012 - !30071 [CVEAgent@OLK-6.6] Fix CVE-2026-98983 - !30262 [CVEAgent] Fix CVE-2026-99091 - !30294 Fix CVE-2026-99011 - !30293 Fix CVE-2026-99008 - !30290 Fix CVE-2026-98663 - !30289 Fix CVE-2026-98664 - !30288 Fix CVE-2026-98666 - !30234 [PATCH 00/11] KVM: arm64: pvm: Add software VGICv3 and virtual timer support - ext4: prevent sleeping allocation in NOWAIT write path - !30367 Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - ext4: remove EXT4_GET_BLOCKS_IO_CREATE_EXT - ext4: simplify the mapping query logic in ext4_iomap_begin() - ext4: skip overwrite check for aligned non-extending DIO writes - ext4: remove unused unwritten parameter in ext4_dio_write_iter() - ext4: remove useless ext4_iomap_overwrite_ops - ext4: avoid starting handle when dio writing an unwritten extent - ext4: don't split extent before submitting I/O - !30233 Fix CVE-2026-98917 - !30235 Fix CVE-2026-98930 - !30368 wifi: mac80211: validate TX status rate metadata - !30378 tty: tty_port: restore TTY_IO_ERROR on activation failure - !30380 tty: port: fix tty_port_tty_vhangup() race - !30371 mtd: core: avoid double-free of OTP NVMEM device - urma: Fix the assignment before null check - !30386 RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - !30270 [OLK-6.6] AMD Venice additional patches for openEuler - !28385 [OLK-6.6] crypto: ccp: fix vpsp cmd ctx leak - !30382 fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - !30365 bpf: Fix out-of-bounds btf->types write for split BTF - fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - !30313 kabi: fix include helpers broken by the predefined 'linux' macro - tty: port: fix tty_port_tty_vhangup() race - tty: tty_port: restore TTY_IO_ERROR on activation failure - mtd: core: avoid double-free of OTP NVMEM device - wifi: mac80211: validate TX status rate metadata - bpf: Fix out-of-bounds btf->types write for split BTF - kabi: fix include helpers broken by the predefined 'linux' macro - KVM: arm64: pvm: Handle counter reads in the hyp path - KVM: arm64: pvm: Trap guest timer accesses and enforce EL0 permissions - KVM: arm64: pvm: Align timer capabilities and counter handling with RV timers - KVM: arm64: pvm: Wire RV timers into the KVM timer entry points - KVM: arm64: pvm: Add the software RV timer implementation - KVM: arm64: pvm: Deliver VGIC interrupts without hardware LRs - KVM: arm64: pvm: Emulate VGIC active priority registers - KVM: arm64: pvm: Route ICC accesses through register descriptors - KVM: arm64: pvm: Emulate the GICv3 CPU interface - KVM: arm64: Handle pending EL1 IRQ exceptions - KVM: arm64: pvm: Constrain virtual interrupt capabilities - Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown - iio: imu: adis16480: fix unprotected debugfs reads - iio: imu: adis16400: fix unprotected debugfs reads - iio: gyro: adis16136: fix unprotected debugfs reads - Bluetooth: MGMT: Fix status of pending commands flushed on power off - EDAC/amd64: Mask UMC chip select to the four implemented selects - x86/mce: Fix hardware debug register corruption on task migration - x86/MCE/AMD: Fix inverted interrupt enablement during storm handling - x86/amd_node: Avoid divide by zero on virtualized systems - RAS/AMD/ATL, EDAC/amd64: Only load ATL when needed - x86/mce: Set up the polling timer before CMCI discovery - x86/mce: Restore MCA polling interval halving - EDAC/amd64: Remove NUM_CONTROLLERS macro - x86/mce/inject: Remove call to mce_notify_irq() - x86/mce: Remove the redundant mce_hygon_feature_init() - x86/mce/threshold: Remove the redundant this_cpu_dec_return() - crypto: ccp: fix vpsp cmd ctx leak - KVM: s390: Fix IRQ injection with SIGP Stop and Store Status - parisc: Increase kernel stack size to 32kb - drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - Bluetooth: ISO: Serialize concurrent connect calls - unshare: don't drop active namespace references that were never taken - of/overlay: don't leak fragment references when changeset init fails - hwmon: (pwm-fan) Stop RPM timer before freeing tach data - !30459 [CVEAgent@OLK-6.6] Fix CVE-2026-99234 - !30468 [CVEAgent@OLK-6.6] Fix CVE-2026-99143 - !30322 urma: fix ipourma eid handler and register work concurrency - !30455 arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30491 [OLK-6.6] AMD Venice additional patches for openEuler - 2 - EDAC/amd64: Avoid a -Wformat-security warning - EDAC/amd64: Generate ctl_name string at runtime - !29993 [CVEAgent@OLK-6.6] Fix CVE-2026-98807 - !29964 [CVEAgent@OLK-6.6] Fix CVE-2026-98747 - !30393 ub/ubmem-vmmu: Remove the support_attr callback mechanism. - !30447 wifi: mac80211: minstrel_ht: validate fixed rate index - !30446 net: ena: fix MMIO read buffer leak on probe failure - tracing: Keep the predicate limit separate from program capacity - !30013 [CVEAgent@OLK-6.6] Fix CVE-2026-98855 - !30431 fix CVE-2026-98490 for OLK-6.6 - !30425 fix CVE-2026-98722 for OLK-6.6 - !30410 nvdimm: pmem: keep PREFLUSH before data writes - !30406 Fix CVE-2026-97480 for OLK-6.6 - !30204 x86/cpu/hygon: Report S5 reset status during boot - tracing: Unregister field variable histograms when the command fails - !30395 tty: fix saved termios reset race - arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30031 drm/amdkfd: fix SMI event cross-process information leak - wifi: mac80211: minstrel_ht: validate fixed rate index - net: ena: fix MMIO read buffer leak on probe failure - net: openvswitch: conntrack: fix helper UAF due to extensions realloc - net: openvswitch: conntrack: remove 'add_helper' dead code - openvswitch: prepare for stolen verdict coming from conntrack and nat engine - net/sched: act_ct: avoid modifying shared unconfirmed ct entry - net/sched: act_ct: fix helper UAF due to extensions realloc - ub/ubmem-vmmu: Remove the support_attr callback mechanism. - mtd: block2mtd: Fix divide error when erase_size is zero - block2mtd: prevent direct access of bd_inode - nvdimm: pmem: keep PREFLUSH before data writes - tty: serial: 8250: protect against NULL uart->port.dev in register - serial: 8250: invert serial8250_register_8250_port() CIR condition - urma: fix ipourma eid handler and register work concurrency - tty: fix saved termios reset race - x86/cpu/hygon: Report S5 reset status during boot - drm/amdkfd: fix SMI event cross-process information leak - of/overlay: put property on deadprops only after changeset add succeeds - net/mlx5: Fix slab-out-of-bounds when handling team device events - serial: core: fix NULL pointer dereference in serial_core_unregister_port() - !30553 tracing: Reject incomplete event filter expressions - !30498 nfsd: split nfsd4_copy into transient and durable async copy objects - !30000 [CVEAgent@OLK-6.6] Fix CVE-2026-98822 - !30497 cdma: ratelimit hot-path error logs in kernel driver and header file code synchronization - tracing: Reject incomplete event filter expressions - !30546 [OLK-6.6] ub: fix UBASE port reporting and UNIC reset and DMA handling - !30481 [CVEAgent@OLK-6.6] Fix CVE-2026-99080 - !30483 [CVEAgent@OLK-6.6] Fix CVE-2026-99206 - !30388 Fix CVE-2026-99153 - !30390 Fix CVE-2026-99152 - !30387 Fix CVE-2026-99110 - !30391 Fix CVE-2026-99109 - !30479 [CVEAgent@OLK-6.6] Fix CVE-2026-99254 - !30538 scsi: libsas: Fix SMP IO deadlock during HA resume - !30537 ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30536 scsi: libsas: Add linkrate and sas_addr change detection in rediscover；scsi: libsas: Add sas_ex_phy_to_dev() helper - !30486 [CVEAgent@OLK-6.6] Fix CVE-2026-99247 - !30454 [OLK-6.6] Fix CVE-2026-97566 - !30453 [OLK-6.6] Fix CVE-2026-97432 - !30444 [OLK-6.6] Fix CVE-2026-43234 - !30403 x86/hygon: Fix FPDSS on Hygon - !30269 [OLK-6.6] update rnpvf driver to 1.2.0. - !30155 [OLK-6.6] Fix CVE-2026-74695 - !30153 [OLK-6.6] Fix CVE-2026-72494 - !30149 [OLK-6.6] Fix CVE-2026-74368 - !30092 [CVEAgent@OLK-6.6] Fix CVE-2026-99052 - !30090 [CVEAgent@OLK-6.6] Fix CVE-2026-99040 - !30057 [CVEAgent@OLK-6.6] Fix CVE-2026-98948 - !30086 [CVEAgent@OLK-6.6] Fix CVE-2026-99025 - !30105 [CVEAgent@OLK-6.6] Fix CVE-2026-99078 - !30106 [CVEAgent@OLK-6.6] Fix CVE-2026-99079 - ub: ubase: skip bandwidth queries on next-generation chips - net: unic: Fix TX/RX DMA ordering and cache sync - net: unic: serialize port deactivation with reset - ub: ubase: add ub port events handling and statistics - scsi: libsas: Fix SMP IO deadlock during HA resume - scsi: libsas: Add sas_ex_phy_to_dev() helper - scsi: libsas: Add linkrate and sas_addr change detection in rediscover - !30430 v8 arm64: Allow CPU0 to be nohz_full - ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30300 mm/gup: allow movable memory pinnable - !30487 urma: limit opt buf length in uburma ioctl commands - !29931 [CVEAgent@OLK-6.6] Fix CVE-2026-98570 - nfsd: split nfsd4_copy into transient and durable async copy objects - ub: cdma: header file code synchronization - ub: cdma: ratelimit hot-path error logs in kernel driver - x86: hygon: Fix FPDSS on Hygon - tracing: Do not initialize tracefs work if tracing is disabled - scsi: target: iscsi: Fix race in discovery auth updates - fs: Free any excess xarray nodes in clear_inode() - io_uring: don't flood a cancelling task with task_work - urma: limit opt buf length in uburma ioctl commands - mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 - wifi: iwlwifi: mvm: fix P2P-Device binding handling - team: avoid NETDEV_CHANGEMTU event when unregistering slave - arm64: defconfig: Enable CONFIG_PM_SLEEP_SMP_NONZERO_CPU and CONFIG_ARCH_SUSPEND_NONZERO_CPU - arm64: Allow boot CPU nohz_full to coexist with suspend and kexec - isolation: Check whether there exists a housekeeping CPU online - isolation: Do not check whether housekeeping CPUs are present - smb: client: reject SetEA requests that do not fit the request buffer - scsi: libiscsi: Validate the task named by a management response - scsi: libiscsi: Validate the ITT reflected in a Reject PDU - smb: client: fix heap overflow in cifs_do_set_acl() - rnpvf: update rnpvf driver to 1.2.0. - mm/gup: allow movable memory pinnable - rnpvf: update rnpvf driver to 1.2.0. - netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() - RDMA/irdma: Replace waitqueue and flag with completion - wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() - net/mlx5e: Prevent stale XSK buffer release on refill retry - net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry - selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts - KEYS: Fix add_key() race with keyring restriction - openvswitch: fix soft lockup in the netlink flow dump - mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() - wifi: mac80211: prevent AP VLAN tx from other interfaces - net: ipv6: keep room for the mac header in dst_dev_overhead() - !30530 [CVEAgent@OLK-6.6] Fix CVE-2026-99163 - !30532 [CVEAgent@OLK-6.6] Fix CVE-2026-99235 - !29765 Fix CVE-2026-98289 - !30230 Fix CVE-2026-97615 - !29790 Fix CVE-2026-93250 - !30510 [CVEAgent@OLK-6.6] Fix CVE-2026-99005 - !30506 [CVEAgent@OLK-6.6] Fix CVE-2026-98871 - !30307 feat/obmm-unified-switch-split-v4 - !30064 [CVEAgent@OLK-6.6] Fix CVE-2026-98972 - !30507 [CVEAgent@OLK-6.6] Fix CVE-2026-98883 - !30450 BBML3 bugfix - !30156 [OLK-6.6] Fix CVE-2026-68258 - !30154 [OLK-6.6] Fix CVE-2026-74729 - !30151 [OLK-6.6] Fix CVE-2026-74273 - !27793 [OLK-6.6] Fix CVE-2026-68421 - !27512 [OLK-6.6] Fix CVE-2026-64259 - !30146 [OLK-6.6] Fix CVE-2026-53109 - !30575 arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30567 scsi: hisi_sas: Clear PHY error counts on phyup - arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30472 [CVEAgent@OLK-6.6] Fix CVE-2026-99243 - scsi: hisi_sas: Clear PHY error counts on phyup - scsi:hisi_sas:Sync upstream timer_delete API changes in hisi_sas_v3_hw.c - tracing: Save the event file instead of the compatible histogram - tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields - drm/i915/gt: Unmask interrupts only when ACTIVE is true - serial: 8250_port: recognize UPIO_AU - crypto: ccp - Fix possible deadlock in SEV init failure path - obmm: pack the internal structs by field ordering - obmm: sysfs views over the switch: attributes, identity, lockless reads - obmm: generalized dual-backend gap mmap - obmm: export switch target wrap-up and validation consolidation - obmm: unified two-phase switch core (import target) - obmm: install mappings lazily from the backend fault paths - obmm: fix the pxm bound, the open TOCTOU and the teardown release - obmm: split the region shell from the memory backends - obmm: depend on TRANSPARENT_HUGEPAGE for the PMD fault paths - io-wq: order the exit bit against worker creation task work - mm/pfn_range_alloc: split block mappings in linear map updates - arm64/mm: make pte_present() recognize present-invalid entries - net: bridge: use option bits for CFM/MRP frame handlers - drm/amdkfd: Check bounds on CRIU restore queue type and mqd size - soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read - cxl/region: Block region delete during region creation - powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy - cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() - vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() - af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). - sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() - fuse-uring: make a fuse_req on SQE commit only findable after memcpy - !30591 [CVEAgent@OLK-6.6] Fix CVE-2026-99142 - !30590 [CVEAgent@OLK-6.6] Fix CVE-2026-99219 - !30594 [CVEAgent@OLK-6.6] Fix CVE-2026-99233 - !30600 urma: warn on slow TP driver callbacks - urma: warn on slow TP driver callbacks - tracing/histograms: Verify event_call identity when updating synth_event refcount - tracing: Check operator stack capacity before pushing - ftrace: Initialize modname and offset in print_rec() - !30602 [CVEAgent@OLK-6.6] Fix CVE-2026-99117 - !30605 [CVEAgent@OLK-6.6] Fix CVE-2026-99211 - !30604 [CVEAgent@OLK-6.6] Fix CVE-2026-99201 - netlink: reset skb headers before unicast and multicast filtering - netlink: avoid hashing the network namespace pointer - net: bridge: mcast: don't truncate the port group walk on teardown - !30597 [CVEAgent@OLK-6.6] Fix CVE-2026-99239 - !30582 v5 MOC bypass cache - !30610 iommu/io-pgtable-arm: Add support for contiguous hint - !30523 drivers:misc:sdma-dae: Open source sdma-dae driver to OLK-6.6 (already supported on olk-5.10) - !28122 [CVEAgent@OLK-6.6] Fix CVE-2026-89802 - !29350 [CVEAgent@OLK-6.6] Fix CVE-2026-97988 - !30473 Fix CVE-2026-97992 - !30150 [OLK-6.6] Fix CVE-2026-74527 - !30576 net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - !30544 [OLK-6.6] Fix CVE-2026-90057 - !30476 [OLK-6.6] fix CVE-2026-98936 - !30474 [OLK-6.6] fix CVE-2026-99059 - !30144 [OLK-6.6] Fix CVE-2026-64190 - !30311 [OLK-6.6]nser: add support for wangxun RDMA driver - iommu/io-pgtable-arm: Add support for contiguous hint - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn - openeuler: configs: arm64: Enable PBHA by default - arm64: mm: Introduce kernel param pbha - arm64: mm: Introduce prctl to control pbha behavior - arm64: mm: Set flag VM_PBHA_BIT0 for global init task - arm64: mm: Introduce procfs interface to update PBHA0 bit - arm64: mm: Set PBHA0 bit for VM_PBHA_BIT0 - arm64: mm: Introduce VM_PBHA_BIT0 to enable pbha bit0 for single vma - arm64: mm: Show PBHA bit 59 as PBHA0 in ptdump - arm64: mm: Update kernel pte entries if pbha bit0 enabled - arm64: mm: Detect and enable PBHA bit0 at early startup - arm64: cpufeature: Enable PBHA for stage1 early via FDT - Documentation: arm64: Describe the support and expectations for PBHA - KVM: arm64: Configure PBHA bits for stage2 - arm64: mm: Add pgprot_pbha() to allow drivers to request PBHA values - arm64: cpufeature: Enable PBHA bits for stage1 - dt-bindings: arm: Add binding for Page Based Hardware Attributes - dt-bindings: Rename the description of cpu nodes cpu.yaml - KVM: arm64: Detect and enable PBHA for stage2 - net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() - drivers:misc:sdma-dae: adapt driver interfaces for OLK-6.6 - net: team: fix NULL pointer dereference in team_xmit during mode change - net: team: Rename port_disabled team mode op to port_tx_disabled - net: team: Remove unused team_mode_op, port_enabled - wifi: ath11k: reset ar->num_stations on hardware start - wireguard: noise: reject response consumption after intermediate initiation - vhost-vdpa: protect config_ctx from being freed under the config callback - x86/arm64: config: enable the Wangxun nser RDMA driver - net: wangxun: nser: add RDMA support for 100GbE NICs - octeontx2-af: Block VFs from clobbering special CGX PKIND state - vhost: invalidate vring access on IOTLB transitions - drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op - drivers:misc:sdma-dae: Remove redundant print during mm exit and resume. - drivers:misc:sdma-dae: Revert optimize kernel code - drivers:misc:sdma-dae: Revert add channel depth info in debugfs - drivers:misc:sdma-dae: Revert Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Remove interference print. - drivers:misc:sdma-dae: Checking the address alignment - drivers:misc:sdma-dae: add NULL judgement of global variables - drivers:misc:sdma-dae: add channel depth info in debugfs - drivers:misc:sdma-dae: optimize kernel code - drivers:misc:sdma-dae: fix incorrect debugfs print - drivers:misc:sdma-dae: sdma fix uncorrect sleep time - drivers:misc:sdma-dae: fix incorrect kmalloc flag - drivers:misc:sdma-dae: sdma fix PUAF problem fork risk - drivers:misc:sdma-dae: modify ttl_processes reduce logic - drivers:misc:sdma-dae: remove unnecessary return in void function - drivers:misc:sdma-dae: fix incorrect resource release - drivers:misc:sdma-dae: remove lock while pausing channels - drivers:misc:sdma-dae: add mmu_notifier - drivers:misc:sdma-dae: add MODULE_VERSION to control version - drivers:misc:sdma-dae: add print in exceptional branch - drivers:misc:sdma-dae: bugfix of channel operation - drivers:misc:sdma-dae: change authority of sdma device - drivers:misc:sdma-dae: add channel ida validation - drivers:misc:sdma-dae: add vma_ops to avoid mremap error - drivers:misc:sdma-dae: add fast mode - drivers:misc:sdma-dae: not expose sq_tail write and add validation of cq_head - drivers:misc:sdma-dae: add debugfs of sdma-dae - drivers:misc:sdma-dae: fix icsl code check problems - drivers:misc:sdma-dae: fix input validate problems - drivers:misc:sdma-dae: fix interrupt handle logic - drivers:misc:sdma-dae: not compile sdma-dae by default - drivers:misc:sdma-dae: enable sdma_dae for arm64 - drivers:misc:sdma-dae: support page fault preprocess - drivers:misc:sdma-dae: support interrupt init and handle - drivers:misc:sdma-dae: support sqe task send and execute - drivers:misc:sdma-dae: support channel management - drivers:misc:sdma-dae: support getting streamID - drivers:misc:sdma-dae: support initializ sdma driver - !30253 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - !29554 [CVEAgent@OLK-6.6] Fix CVE-2026-98286 - !30263 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - !30258 v10 net: dynthread: dynamic threaded NAPI - !30208 Fix CVE-2026-98044 - !30280 bpf: Make post-verification instruction rewrites killable - !30184 blk-mq: set RQF_USE_SCHED when the operation is known - !30267 sched/fair: Avoid overflow in place_entity() - !30236 configfs: unhash the dentry before dropping the item in rmdir - !30276 virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - !29584 [CVEAgent@OLK-6.6] Fix CVE-2026-98364 - !29906 [CVEAgent@OLK-6.6] Fix CVE-2026-98443 - !30046 net: cap skb->queue_mapping when the tx queue is picked - !30223 bpf: Reject pkt arguments in mutating subprogs - !29932 [CVEAgent@OLK-6.6] Fix CVE-2026-98598 - !30044 net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - bpf: Make post-verification instruction rewrites killable - virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - RDMA/umem: avoid ib_umem_find_best_pgsz ABI breakage - sched/fair: Avoid overflow in place_entity() - RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - net: dynthread: Add debug switch and instrumentation - net: dynthread: Scale the number of NAPI thread CPUs - net: dynthread: Switch NAPI to threads on spare CPUs - net: dynthread: Steer the RX queue IRQs away from the target tasks - net: dynthread: Monitor the load of the target tasks - net: dynthread: Add dynamic threaded NAPI scheduler framework - net/mlx5e: Do not block on RTNL while recovering an SQ - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover - net/mlx5e: Acquire RTNL lock before RQs/SQs activation/deactivation - net/mlx5e: link NAPI instances to queues and IRQs - net: Fix napi irq KABI breakage - net: Add NAPI IRQ support - net: Fix KABI breakage for queue napi association - net: Add queue and napi association - neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - configfs: unhash the dentry before dropping the item in rmdir - bpf: Reject pkt arguments in mutating subprogs - bpf: Fix kabi breakage in struct bpf_subprog_info - bpf: Reject legacy packet loads from callbacks - blk-mq: set RQF_USE_SCHED when the operation is known - net: cap skb->queue_mapping when the tx queue is picked - net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - ipv6: Prevent rt6_insert_exception() for dying fib6_info. - xfs: fix cursor and pointer handling when recovering iunlink buckets - xfrm: hold net_device reference under RCU in bundle creation - drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown - !30268 ub: udma: solving internal code review issues - !30305 bpf: Mark syscall helpers as sleepable - !30113 fix/CVE-2026-98103 - !30061 [CVEAgent@OLK-6.6] Fix CVE-2026-98966 - !30099 [CVEAgent@OLK-6.6] Fix CVE-2026-99070 - !30087 [CVEAgent@OLK-6.6] Fix CVE-2026-99031 - !30100 [CVEAgent@OLK-6.6] Fix CVE-2026-99071 - !30101 [CVEAgent@OLK-6.6] Fix CVE-2026-99072 - !30102 [CVEAgent@OLK-6.6] Fix CVE-2026-99074 - !30091 [CVEAgent@OLK-6.6] Fix CVE-2026-99041 - !30088 [CVEAgent@OLK-6.6] Fix CVE-2026-99033 - !30043 seg6: ensure packet data is writable before modifying SRH and IPv6 DA - !30197 CVE-2026-98503 - bpf: Mark syscall helpers as sleepable - ub: udma: support dwqe with a few wqebbs - ub: udma: solving internal code review issues - seg6: ensure packet data is writable before modifying SRH and IPv6 DA - igmp: fix kabi breakage of struct ip_sf_list - packet: use ubuf_info completion for TX_RING packets - virtio_net: copy zerocopy frags in start_xmit without NAPI - igmp: convert struct ip_sf_list to RCU - ipv4: stop PMTU walk when nexthop group shrinks - ipv4: stop route notification sizing when nexthop group shrinks - ipv4: do not warn on route notification size race - ipv6: do not warn on route notification size race - ip6_gre: remove obsolete ERSPAN PMTU update - net/packet: guard the ll header push in packet_rcv_spkt() - net: bridge: avoid recursive multicast port cleanup - bonding: fix the program leak when XDP is replaced - !30029 CODEOWNERS: add kernel module ownership rules - !30291 [OLK-6.6] mm/swapfile: reject duplicated bad pages in swap header - !30201 filescgroup: migrate files resources of every task, not just the first - !30306 Fix CVE-2026-98799 - bpf: Fix kabi breakage in struct bpf_tramp_image and bpf_trampoline - bpf: Skip detached progs in trampoline images that are still in use - mm/swapfile: reject duplicated bad pages in swap header - filescgroup: migrate files resources of every task, not just the first - scripts: add get_codeowner.py to look up CODEOWNERS owners - CODEOWNERS: add kernel module ownership rules - !30256 [Backport] ext4: defer unwritten splitting until I/O completion - !30394 urma: Fix the assignment before null check - !30003 [CVEAgent@OLK-6.6] Fix CVE-2026-98831 - !29516 [CVEAgent@OLK-6.6] Fix CVE-2026-98198 - !30220 drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - !30082 [CVEAgent@OLK-6.6] Fix CVE-2026-99012 - !30071 [CVEAgent@OLK-6.6] Fix CVE-2026-98983 - !30262 [CVEAgent] Fix CVE-2026-99091 - !30294 Fix CVE-2026-99011 - !30293 Fix CVE-2026-99008 - !30290 Fix CVE-2026-98663 - !30289 Fix CVE-2026-98664 - !30288 Fix CVE-2026-98666 - !30234 [PATCH 00/11] KVM: arm64: pvm: Add software VGICv3 and virtual timer support - ext4: prevent sleeping allocation in NOWAIT write path - !30367 Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - ext4: remove EXT4_GET_BLOCKS_IO_CREATE_EXT - ext4: simplify the mapping query logic in ext4_iomap_begin() - ext4: skip overwrite check for aligned non-extending DIO writes - ext4: remove unused unwritten parameter in ext4_dio_write_iter() - ext4: remove useless ext4_iomap_overwrite_ops - ext4: avoid starting handle when dio writing an unwritten extent - ext4: don't split extent before submitting I/O - !30233 Fix CVE-2026-98917 - !30235 Fix CVE-2026-98930 - !30368 wifi: mac80211: validate TX status rate metadata - !30378 tty: tty_port: restore TTY_IO_ERROR on activation failure - !30380 tty: port: fix tty_port_tty_vhangup() race - !30371 mtd: core: avoid double-free of OTP NVMEM device - urma: Fix the assignment before null check - !30386 RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - !30270 [OLK-6.6] AMD Venice additional patches for openEuler - !28385 [OLK-6.6] crypto: ccp: fix vpsp cmd ctx leak - !30382 fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - !30365 bpf: Fix out-of-bounds btf->types write for split BTF - fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - !30313 kabi: fix include helpers broken by the predefined 'linux' macro - tty: port: fix tty_port_tty_vhangup() race - tty: tty_port: restore TTY_IO_ERROR on activation failure - mtd: core: avoid double-free of OTP NVMEM device - wifi: mac80211: validate TX status rate metadata - bpf: Fix out-of-bounds btf->types write for split BTF - kabi: fix include helpers broken by the predefined 'linux' macro - KVM: arm64: pvm: Handle counter reads in the hyp path - KVM: arm64: pvm: Trap guest timer accesses and enforce EL0 permissions - KVM: arm64: pvm: Align timer capabilities and counter handling with RV timers - KVM: arm64: pvm: Wire RV timers into the KVM timer entry points - KVM: arm64: pvm: Add the software RV timer implementation - KVM: arm64: pvm: Deliver VGIC interrupts without hardware LRs - KVM: arm64: pvm: Emulate VGIC active priority registers - KVM: arm64: pvm: Route ICC accesses through register descriptors - KVM: arm64: pvm: Emulate the GICv3 CPU interface - KVM: arm64: Handle pending EL1 IRQ exceptions - KVM: arm64: pvm: Constrain virtual interrupt capabilities - Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown - iio: imu: adis16480: fix unprotected debugfs reads - iio: imu: adis16400: fix unprotected debugfs reads - iio: gyro: adis16136: fix unprotected debugfs reads - Bluetooth: MGMT: Fix status of pending commands flushed on power off - EDAC/amd64: Mask UMC chip select to the four implemented selects - x86/mce: Fix hardware debug register corruption on task migration - x86/MCE/AMD: Fix inverted interrupt enablement during storm handling - x86/amd_node: Avoid divide by zero on virtualized systems - RAS/AMD/ATL, EDAC/amd64: Only load ATL when needed - x86/mce: Set up the polling timer before CMCI discovery - x86/mce: Restore MCA polling interval halving - EDAC/amd64: Remove NUM_CONTROLLERS macro - x86/mce/inject: Remove call to mce_notify_irq() - x86/mce: Remove the redundant mce_hygon_feature_init() - x86/mce/threshold: Remove the redundant this_cpu_dec_return() - crypto: ccp: fix vpsp cmd ctx leak - KVM: s390: Fix IRQ injection with SIGP Stop and Store Status - parisc: Increase kernel stack size to 32kb - drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - Bluetooth: ISO: Serialize concurrent connect calls - unshare: don't drop active namespace references that were never taken - of/overlay: don't leak fragment references when changeset init fails - hwmon: (pwm-fan) Stop RPM timer before freeing tach data - !30459 [CVEAgent@OLK-6.6] Fix CVE-2026-99234 - !30468 [CVEAgent@OLK-6.6] Fix CVE-2026-99143 - !30322 urma: fix ipourma eid handler and register work concurrency - !30455 arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30491 [OLK-6.6] AMD Venice additional patches for openEuler - 2 - EDAC/amd64: Avoid a -Wformat-security warning - EDAC/amd64: Generate ctl_name string at runtime - !29993 [CVEAgent@OLK-6.6] Fix CVE-2026-98807 - !29964 [CVEAgent@OLK-6.6] Fix CVE-2026-98747 - !30393 ub/ubmem-vmmu: Remove the support_attr callback mechanism. - !30447 wifi: mac80211: minstrel_ht: validate fixed rate index - !30446 net: ena: fix MMIO read buffer leak on probe failure - tracing: Keep the predicate limit separate from program capacity - !30013 [CVEAgent@OLK-6.6] Fix CVE-2026-98855 - !30431 fix CVE-2026-98490 for OLK-6.6 - !30425 fix CVE-2026-98722 for OLK-6.6 - !30410 nvdimm: pmem: keep PREFLUSH before data writes - !30406 Fix CVE-2026-97480 for OLK-6.6 - !30204 x86/cpu/hygon: Report S5 reset status during boot - tracing: Unregister field variable histograms when the command fails - !30395 tty: fix saved termios reset race - arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30031 drm/amdkfd: fix SMI event cross-process information leak - wifi: mac80211: minstrel_ht: validate fixed rate index - net: ena: fix MMIO read buffer leak on probe failure - net: openvswitch: conntrack: fix helper UAF due to extensions realloc - net: openvswitch: conntrack: remove 'add_helper' dead code - openvswitch: prepare for stolen verdict coming from conntrack and nat engine - net/sched: act_ct: avoid modifying shared unconfirmed ct entry - net/sched: act_ct: fix helper UAF due to extensions realloc - ub/ubmem-vmmu: Remove the support_attr callback mechanism. - mtd: block2mtd: Fix divide error when erase_size is zero - block2mtd: prevent direct access of bd_inode - nvdimm: pmem: keep PREFLUSH before data writes - tty: serial: 8250: protect against NULL uart->port.dev in register - serial: 8250: invert serial8250_register_8250_port() CIR condition - urma: fix ipourma eid handler and register work concurrency - tty: fix saved termios reset race - x86/cpu/hygon: Report S5 reset status during boot - drm/amdkfd: fix SMI event cross-process information leak - of/overlay: put property on deadprops only after changeset add succeeds - net/mlx5: Fix slab-out-of-bounds when handling team device events - serial: core: fix NULL pointer dereference in serial_core_unregister_port() - !30553 tracing: Reject incomplete event filter expressions - !30498 nfsd: split nfsd4_copy into transient and durable async copy objects - !30000 [CVEAgent@OLK-6.6] Fix CVE-2026-98822 - !30497 cdma: ratelimit hot-path error logs in kernel driver and header file code synchronization - tracing: Reject incomplete event filter expressions - !30546 [OLK-6.6] ub: fix UBASE port reporting and UNIC reset and DMA handling - !30481 [CVEAgent@OLK-6.6] Fix CVE-2026-99080 - !30483 [CVEAgent@OLK-6.6] Fix CVE-2026-99206 - !30388 Fix CVE-2026-99153 - !30390 Fix CVE-2026-99152 - !30387 Fix CVE-2026-99110 - !30391 Fix CVE-2026-99109 - !30479 [CVEAgent@OLK-6.6] Fix CVE-2026-99254 - !30538 scsi: libsas: Fix SMP IO deadlock during HA resume - !30537 ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30536 scsi: libsas: Add linkrate and sas_addr change detection in rediscover；scsi: libsas: Add sas_ex_phy_to_dev() helper - !30486 [CVEAgent@OLK-6.6] Fix CVE-2026-99247 - !30454 [OLK-6.6] Fix CVE-2026-97566 - !30453 [OLK-6.6] Fix CVE-2026-97432 - !30444 [OLK-6.6] Fix CVE-2026-43234 - !30403 x86/hygon: Fix FPDSS on Hygon - !30269 [OLK-6.6] update rnpvf driver to 1.2.0. - !30155 [OLK-6.6] Fix CVE-2026-74695 - !30153 [OLK-6.6] Fix CVE-2026-72494 - !30149 [OLK-6.6] Fix CVE-2026-74368 - !30092 [CVEAgent@OLK-6.6] Fix CVE-2026-99052 - !30090 [CVEAgent@OLK-6.6] Fix CVE-2026-99040 - !30057 [CVEAgent@OLK-6.6] Fix CVE-2026-98948 - !30086 [CVEAgent@OLK-6.6] Fix CVE-2026-99025 - !30105 [CVEAgent@OLK-6.6] Fix CVE-2026-99078 - !30106 [CVEAgent@OLK-6.6] Fix CVE-2026-99079 - ub: ubase: skip bandwidth queries on next-generation chips - net: unic: Fix TX/RX DMA ordering and cache sync - net: unic: serialize port deactivation with reset - ub: ubase: add ub port events handling and statistics - scsi: libsas: Fix SMP IO deadlock during HA resume - scsi: libsas: Add sas_ex_phy_to_dev() helper - scsi: libsas: Add linkrate and sas_addr change detection in rediscover - !30430 v8 arm64: Allow CPU0 to be nohz_full - ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30300 mm/gup: allow movable memory pinnable - !30487 urma: limit opt buf length in uburma ioctl commands - !29931 [CVEAgent@OLK-6.6] Fix CVE-2026-98570 - nfsd: split nfsd4_copy into transient and durable async copy objects - ub: cdma: header file code synchronization - ub: cdma: ratelimit hot-path error logs in kernel driver - x86: hygon: Fix FPDSS on Hygon - tracing: Do not initialize tracefs work if tracing is disabled - scsi: target: iscsi: Fix race in discovery auth updates - fs: Free any excess xarray nodes in clear_inode() - io_uring: don't flood a cancelling task with task_work - urma: limit opt buf length in uburma ioctl commands - mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 - wifi: iwlwifi: mvm: fix P2P-Device binding handling - team: avoid NETDEV_CHANGEMTU event when unregistering slave - arm64: defconfig: Enable CONFIG_PM_SLEEP_SMP_NONZERO_CPU and CONFIG_ARCH_SUSPEND_NONZERO_CPU - arm64: Allow boot CPU nohz_full to coexist with suspend and kexec - isolation: Check whether there exists a housekeeping CPU online - isolation: Do not check whether housekeeping CPUs are present - smb: client: reject SetEA requests that do not fit the request buffer - scsi: libiscsi: Validate the task named by a management response - scsi: libiscsi: Validate the ITT reflected in a Reject PDU - smb: client: fix heap overflow in cifs_do_set_acl() - rnpvf: update rnpvf driver to 1.2.0. - mm/gup: allow movable memory pinnable - rnpvf: update rnpvf driver to 1.2.0. - netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() - RDMA/irdma: Replace waitqueue and flag with completion - wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() - net/mlx5e: Prevent stale XSK buffer release on refill retry - net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry - selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts - KEYS: Fix add_key() race with keyring restriction - openvswitch: fix soft lockup in the netlink flow dump - mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() - wifi: mac80211: prevent AP VLAN tx from other interfaces - net: ipv6: keep room for the mac header in dst_dev_overhead() - !30530 [CVEAgent@OLK-6.6] Fix CVE-2026-99163 - !30532 [CVEAgent@OLK-6.6] Fix CVE-2026-99235 - !29765 Fix CVE-2026-98289 - !30230 Fix CVE-2026-97615 - !29790 Fix CVE-2026-93250 - !30510 [CVEAgent@OLK-6.6] Fix CVE-2026-99005 - !30506 [CVEAgent@OLK-6.6] Fix CVE-2026-98871 - !30307 feat/obmm-unified-switch-split-v4 - !30064 [CVEAgent@OLK-6.6] Fix CVE-2026-98972 - !30507 [CVEAgent@OLK-6.6] Fix CVE-2026-98883 - !30450 BBML3 bugfix - !30156 [OLK-6.6] Fix CVE-2026-68258 - !30154 [OLK-6.6] Fix CVE-2026-74729 - !30151 [OLK-6.6] Fix CVE-2026-74273 - !27793 [OLK-6.6] Fix CVE-2026-68421 - !27512 [OLK-6.6] Fix CVE-2026-64259 - !30146 [OLK-6.6] Fix CVE-2026-53109 - !30575 arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30567 scsi: hisi_sas: Clear PHY error counts on phyup - arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30472 [CVEAgent@OLK-6.6] Fix CVE-2026-99243 - scsi: hisi_sas: Clear PHY error counts on phyup - scsi:hisi_sas:Sync upstream timer_delete API changes in hisi_sas_v3_hw.c - tracing: Save the event file instead of the compatible histogram - tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields - drm/i915/gt: Unmask interrupts only when ACTIVE is true - serial: 8250_port: recognize UPIO_AU - crypto: ccp - Fix possible deadlock in SEV init failure path - obmm: pack the internal structs by field ordering - obmm: sysfs views over the switch: attributes, identity, lockless reads - obmm: generalized dual-backend gap mmap - obmm: export switch target wrap-up and validation consolidation - obmm: unified two-phase switch core (import target) - obmm: install mappings lazily from the backend fault paths - obmm: fix the pxm bound, the open TOCTOU and the teardown release - obmm: split the region shell from the memory backends - obmm: depend on TRANSPARENT_HUGEPAGE for the PMD fault paths - io-wq: order the exit bit against worker creation task work - mm/pfn_range_alloc: split block mappings in linear map updates - arm64/mm: make pte_present() recognize present-invalid entries - net: bridge: use option bits for CFM/MRP frame handlers - drm/amdkfd: Check bounds on CRIU restore queue type and mqd size - soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read - cxl/region: Block region delete during region creation - powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy - cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() - vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() - af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). - sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() - fuse-uring: make a fuse_req on SQE commit only findable after memcpy - !30591 [CVEAgent@OLK-6.6] Fix CVE-2026-99142 - !30590 [CVEAgent@OLK-6.6] Fix CVE-2026-99219 - !30594 [CVEAgent@OLK-6.6] Fix CVE-2026-99233 - !30600 urma: warn on slow TP driver callbacks - urma: warn on slow TP driver callbacks - tracing/histograms: Verify event_call identity when updating synth_event refcount - tracing: Check operator stack capacity before pushing - ftrace: Initialize modname and offset in print_rec() - !30602 [CVEAgent@OLK-6.6] Fix CVE-2026-99117 - !30605 [CVEAgent@OLK-6.6] Fix CVE-2026-99211 - !30604 [CVEAgent@OLK-6.6] Fix CVE-2026-99201 - netlink: reset skb headers before unicast and multicast filtering - netlink: avoid hashing the network namespace pointer - net: bridge: mcast: don't truncate the port group walk on teardown - !30597 [CVEAgent@OLK-6.6] Fix CVE-2026-99239 - !30582 v5 MOC bypass cache - !30610 iommu/io-pgtable-arm: Add support for contiguous hint - !30523 drivers:misc:sdma-dae: Open source sdma-dae driver to OLK-6.6 (already supported on olk-5.10) - !28122 [CVEAgent@OLK-6.6] Fix CVE-2026-89802 - !29350 [CVEAgent@OLK-6.6] Fix CVE-2026-97988 - !30473 Fix CVE-2026-97992 - !30150 [OLK-6.6] Fix CVE-2026-74527 - !30576 net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - !30544 [OLK-6.6] Fix CVE-2026-90057 - !30476 [OLK-6.6] fix CVE-2026-98936 - !30474 [OLK-6.6] fix CVE-2026-99059 - !30144 [OLK-6.6] Fix CVE-2026-64190 - !30311 [OLK-6.6]nser: add support for wangxun RDMA driver - iommu/io-pgtable-arm: Add support for contiguous hint - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn - openeuler: configs: arm64: Enable PBHA by default - arm64: mm: Introduce kernel param pbha - arm64: mm: Introduce prctl to control pbha behavior - arm64: mm: Set flag VM_PBHA_BIT0 for global init task - arm64: mm: Introduce procfs interface to update PBHA0 bit - arm64: mm: Set PBHA0 bit for VM_PBHA_BIT0 - arm64: mm: Introduce VM_PBHA_BIT0 to enable pbha bit0 for single vma - arm64: mm: Show PBHA bit 59 as PBHA0 in ptdump - arm64: mm: Update kernel pte entries if pbha bit0 enabled - arm64: mm: Detect and enable PBHA bit0 at early startup - arm64: cpufeature: Enable PBHA for stage1 early via FDT - Documentation: arm64: Describe the support and expectations for PBHA - KVM: arm64: Configure PBHA bits for stage2 - arm64: mm: Add pgprot_pbha() to allow drivers to request PBHA values - arm64: cpufeature: Enable PBHA bits for stage1 - dt-bindings: arm: Add binding for Page Based Hardware Attributes - dt-bindings: Rename the description of cpu nodes cpu.yaml - KVM: arm64: Detect and enable PBHA for stage2 - net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() - drivers:misc:sdma-dae: adapt driver interfaces for OLK-6.6 - net: team: fix NULL pointer dereference in team_xmit during mode change - net: team: Rename port_disabled team mode op to port_tx_disabled - net: team: Remove unused team_mode_op, port_enabled - wifi: ath11k: reset ar->num_stations on hardware start - wireguard: noise: reject response consumption after intermediate initiation - vhost-vdpa: protect config_ctx from being freed under the config callback - x86/arm64: config: enable the Wangxun nser RDMA driver - net: wangxun: nser: add RDMA support for 100GbE NICs - octeontx2-af: Block VFs from clobbering special CGX PKIND state - vhost: invalidate vring access on IOTLB transitions - drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op - drivers:misc:sdma-dae: Remove redundant print during mm exit and resume. - drivers:misc:sdma-dae: Revert optimize kernel code - drivers:misc:sdma-dae: Revert add channel depth info in debugfs - drivers:misc:sdma-dae: Revert Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Remove interference print. - drivers:misc:sdma-dae: Checking the address alignment - drivers:misc:sdma-dae: add NULL judgement of global variables - drivers:misc:sdma-dae: add channel depth info in debugfs - drivers:misc:sdma-dae: optimize kernel code - drivers:misc:sdma-dae: fix incorrect debugfs print - drivers:misc:sdma-dae: sdma fix uncorrect sleep time - drivers:misc:sdma-dae: fix incorrect kmalloc flag - drivers:misc:sdma-dae: sdma fix PUAF problem fork risk - drivers:misc:sdma-dae: modify ttl_processes reduce logic - drivers:misc:sdma-dae: remove unnecessary return in void function - drivers:misc:sdma-dae: fix incorrect resource release - drivers:misc:sdma-dae: remove lock while pausing channels - drivers:misc:sdma-dae: add mmu_notifier - drivers:misc:sdma-dae: add MODULE_VERSION to control version - drivers:misc:sdma-dae: add print in exceptional branch - drivers:misc:sdma-dae: bugfix of channel operation - drivers:misc:sdma-dae: change authority of sdma device - drivers:misc:sdma-dae: add channel ida validation - drivers:misc:sdma-dae: add vma_ops to avoid mremap error - drivers:misc:sdma-dae: add fast mode - drivers:misc:sdma-dae: not expose sq_tail write and add validation of cq_head - drivers:misc:sdma-dae: add debugfs of sdma-dae - drivers:misc:sdma-dae: fix icsl code check problems - drivers:misc:sdma-dae: fix input validate problems - drivers:misc:sdma-dae: fix interrupt handle logic - drivers:misc:sdma-dae: not compile sdma-dae by default - drivers:misc:sdma-dae: enable sdma_dae for arm64 - drivers:misc:sdma-dae: support page fault preprocess - drivers:misc:sdma-dae: support interrupt init and handle - drivers:misc:sdma-dae: support sqe task send and execute - drivers:misc:sdma-dae: support channel management - drivers:misc:sdma-dae: support getting streamID - drivers:misc:sdma-dae: support initializ sdma driver - !30253 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - !29554 [CVEAgent@OLK-6.6] Fix CVE-2026-98286 - !30263 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - !30258 v10 net: dynthread: dynamic threaded NAPI - !30208 Fix CVE-2026-98044 - !30280 bpf: Make post-verification instruction rewrites killable - !30184 blk-mq: set RQF_USE_SCHED when the operation is known - !30267 sched/fair: Avoid overflow in place_entity() - !30236 configfs: unhash the dentry before dropping the item in rmdir - !30276 virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - !29584 [CVEAgent@OLK-6.6] Fix CVE-2026-98364 - !29906 [CVEAgent@OLK-6.6] Fix CVE-2026-98443 - !30046 net: cap skb->queue_mapping when the tx queue is picked - !30223 bpf: Reject pkt arguments in mutating subprogs - !29932 [CVEAgent@OLK-6.6] Fix CVE-2026-98598 - !30044 net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - bpf: Make post-verification instruction rewrites killable - virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - RDMA/umem: avoid ib_umem_find_best_pgsz ABI breakage - sched/fair: Avoid overflow in place_entity() - RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - net: dynthread: Add debug switch and instrumentation - net: dynthread: Scale the number of NAPI thread CPUs - net: dynthread: Switch NAPI to threads on spare CPUs - net: dynthread: Steer the RX queue IRQs away from the target tasks - net: dynthread: Monitor the load of the target tasks - net: dynthread: Add dynamic threaded NAPI scheduler framework - net/mlx5e: Do not block on RTNL while recovering an SQ - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover - net/mlx5e: Acquire RTNL lock before RQs/SQs activation/deactivation - net/mlx5e: link NAPI instances to queues and IRQs - net: Fix napi irq KABI breakage - net: Add NAPI IRQ support - net: Fix KABI breakage for queue napi association - net: Add queue and napi association - neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - configfs: unhash the dentry before dropping the item in rmdir - bpf: Reject pkt arguments in mutating subprogs - bpf: Fix kabi breakage in struct bpf_subprog_info - bpf: Reject legacy packet loads from callbacks - blk-mq: set RQF_USE_SCHED when the operation is known - net: cap skb->queue_mapping when the tx queue is picked - net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - ipv6: Prevent rt6_insert_exception() for dying fib6_info. - xfs: fix cursor and pointer handling when recovering iunlink buckets - xfrm: hold net_device reference under RCU in bundle creation - drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown - !30268 ub: udma: solving internal code review issues - !30305 bpf: Mark syscall helpers as sleepable - !30113 fix/CVE-2026-98103 - !30061 [CVEAgent@OLK-6.6] Fix CVE-2026-98966 - !30099 [CVEAgent@OLK-6.6] Fix CVE-2026-99070 - !30087 [CVEAgent@OLK-6.6] Fix CVE-2026-99031 - !30100 [CVEAgent@OLK-6.6] Fix CVE-2026-99071 - !30101 [CVEAgent@OLK-6.6] Fix CVE-2026-99072 - !30102 [CVEAgent@OLK-6.6] Fix CVE-2026-99074 - !30091 [CVEAgent@OLK-6.6] Fix CVE-2026-99041 - !30088 [CVEAgent@OLK-6.6] Fix CVE-2026-99033 - !30043 seg6: ensure packet data is writable before modifying SRH and IPv6 DA - !30197 CVE-2026-98503 - bpf: Mark syscall helpers as sleepable - ub: udma: support dwqe with a few wqebbs - ub: udma: solving internal code review issues - seg6: ensure packet data is writable before modifying SRH and IPv6 DA - igmp: fix kabi breakage of struct ip_sf_list - packet: use ubuf_info completion for TX_RING packets - virtio_net: copy zerocopy frags in start_xmit without NAPI - igmp: convert struct ip_sf_list to RCU - ipv4: stop PMTU walk when nexthop group shrinks - ipv4: stop route notification sizing when nexthop group shrinks - ipv4: do not warn on route notification size race - ipv6: do not warn on route notification size race - ip6_gre: remove obsolete ERSPAN PMTU update - net/packet: guard the ll header push in packet_rcv_spkt() - net: bridge: avoid recursive multicast port cleanup - bonding: fix the program leak when XDP is replaced - !30029 CODEOWNERS: add kernel module ownership rules - !30291 [OLK-6.6] mm/swapfile: reject duplicated bad pages in swap header - !30201 filescgroup: migrate files resources of every task, not just the first - !30306 Fix CVE-2026-98799 - bpf: Fix kabi breakage in struct bpf_tramp_image and bpf_trampoline - bpf: Skip detached progs in trampoline images that are still in use - mm/swapfile: reject duplicated bad pages in swap header - filescgroup: migrate files resources of every task, not just the first - scripts: add get_codeowner.py to look up CODEOWNERS owners - CODEOWNERS: add kernel module ownership rules - !30256 [Backport] ext4: defer unwritten splitting until I/O completion - !30394 urma: Fix the assignment before null check - !30003 [CVEAgent@OLK-6.6] Fix CVE-2026-98831 - !29516 [CVEAgent@OLK-6.6] Fix CVE-2026-98198 - !30220 drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - !30082 [CVEAgent@OLK-6.6] Fix CVE-2026-99012 - !30071 [CVEAgent@OLK-6.6] Fix CVE-2026-98983 - !30262 [CVEAgent] Fix CVE-2026-99091 - !30294 Fix CVE-2026-99011 - !30293 Fix CVE-2026-99008 - !30290 Fix CVE-2026-98663 - !30289 Fix CVE-2026-98664 - !30288 Fix CVE-2026-98666 - !30234 [PATCH 00/11] KVM: arm64: pvm: Add software VGICv3 and virtual timer support - ext4: prevent sleeping allocation in NOWAIT write path - !30367 Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - ext4: remove EXT4_GET_BLOCKS_IO_CREATE_EXT - ext4: simplify the mapping query logic in ext4_iomap_begin() - ext4: skip overwrite check for aligned non-extending DIO writes - ext4: remove unused unwritten parameter in ext4_dio_write_iter() - ext4: remove useless ext4_iomap_overwrite_ops - ext4: avoid starting handle when dio writing an unwritten extent - ext4: don't split extent before submitting I/O - !30233 Fix CVE-2026-98917 - !30235 Fix CVE-2026-98930 - !30368 wifi: mac80211: validate TX status rate metadata - !30378 tty: tty_port: restore TTY_IO_ERROR on activation failure - !30380 tty: port: fix tty_port_tty_vhangup() race - !30371 mtd: core: avoid double-free of OTP NVMEM device - urma: Fix the assignment before null check - !30386 RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - !30270 [OLK-6.6] AMD Venice additional patches for openEuler - !28385 [OLK-6.6] crypto: ccp: fix vpsp cmd ctx leak - !30382 fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - !30365 bpf: Fix out-of-bounds btf->types write for split BTF - fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - !30313 kabi: fix include helpers broken by the predefined 'linux' macro - tty: port: fix tty_port_tty_vhangup() race - tty: tty_port: restore TTY_IO_ERROR on activation failure - mtd: core: avoid double-free of OTP NVMEM device - wifi: mac80211: validate TX status rate metadata - bpf: Fix out-of-bounds btf->types write for split BTF - kabi: fix include helpers broken by the predefined 'linux' macro - KVM: arm64: pvm: Handle counter reads in the hyp path - KVM: arm64: pvm: Trap guest timer accesses and enforce EL0 permissions - KVM: arm64: pvm: Align timer capabilities and counter handling with RV timers - KVM: arm64: pvm: Wire RV timers into the KVM timer entry points - KVM: arm64: pvm: Add the software RV timer implementation - KVM: arm64: pvm: Deliver VGIC interrupts without hardware LRs - KVM: arm64: pvm: Emulate VGIC active priority registers - KVM: arm64: pvm: Route ICC accesses through register descriptors - KVM: arm64: pvm: Emulate the GICv3 CPU interface - KVM: arm64: Handle pending EL1 IRQ exceptions - KVM: arm64: pvm: Constrain virtual interrupt capabilities - Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown - iio: imu: adis16480: fix unprotected debugfs reads - iio: imu: adis16400: fix unprotected debugfs reads - iio: gyro: adis16136: fix unprotected debugfs reads - Bluetooth: MGMT: Fix status of pending commands flushed on power off - EDAC/amd64: Mask UMC chip select to the four implemented selects - x86/mce: Fix hardware debug register corruption on task migration - x86/MCE/AMD: Fix inverted interrupt enablement during storm handling - x86/amd_node: Avoid divide by zero on virtualized systems - RAS/AMD/ATL, EDAC/amd64: Only load ATL when needed - x86/mce: Set up the polling timer before CMCI discovery - x86/mce: Restore MCA polling interval halving - EDAC/amd64: Remove NUM_CONTROLLERS macro - x86/mce/inject: Remove call to mce_notify_irq() - x86/mce: Remove the redundant mce_hygon_feature_init() - x86/mce/threshold: Remove the redundant this_cpu_dec_return() - crypto: ccp: fix vpsp cmd ctx leak - KVM: s390: Fix IRQ injection with SIGP Stop and Store Status - parisc: Increase kernel stack size to 32kb - drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - Bluetooth: ISO: Serialize concurrent connect calls - unshare: don't drop active namespace references that were never taken - of/overlay: don't leak fragment references when changeset init fails - hwmon: (pwm-fan) Stop RPM timer before freeing tach data - !30459 [CVEAgent@OLK-6.6] Fix CVE-2026-99234 - !30468 [CVEAgent@OLK-6.6] Fix CVE-2026-99143 - !30322 urma: fix ipourma eid handler and register work concurrency - !30455 arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30491 [OLK-6.6] AMD Venice additional patches for openEuler - 2 - EDAC/amd64: Avoid a -Wformat-security warning - EDAC/amd64: Generate ctl_name string at runtime - !29993 [CVEAgent@OLK-6.6] Fix CVE-2026-98807 - !29964 [CVEAgent@OLK-6.6] Fix CVE-2026-98747 - !30393 ub/ubmem-vmmu: Remove the support_attr callback mechanism. - !30447 wifi: mac80211: minstrel_ht: validate fixed rate index - !30446 net: ena: fix MMIO read buffer leak on probe failure - tracing: Keep the predicate limit separate from program capacity - !30013 [CVEAgent@OLK-6.6] Fix CVE-2026-98855 - !30431 fix CVE-2026-98490 for OLK-6.6 - !30425 fix CVE-2026-98722 for OLK-6.6 - !30410 nvdimm: pmem: keep PREFLUSH before data writes - !30406 Fix CVE-2026-97480 for OLK-6.6 - !30204 x86/cpu/hygon: Report S5 reset status during boot - tracing: Unregister field variable histograms when the command fails - !30395 tty: fix saved termios reset race - arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30031 drm/amdkfd: fix SMI event cross-process information leak - wifi: mac80211: minstrel_ht: validate fixed rate index - net: ena: fix MMIO read buffer leak on probe failure - net: openvswitch: conntrack: fix helper UAF due to extensions realloc - net: openvswitch: conntrack: remove 'add_helper' dead code - openvswitch: prepare for stolen verdict coming from conntrack and nat engine - net/sched: act_ct: avoid modifying shared unconfirmed ct entry - net/sched: act_ct: fix helper UAF due to extensions realloc - ub/ubmem-vmmu: Remove the support_attr callback mechanism. - mtd: block2mtd: Fix divide error when erase_size is zero - block2mtd: prevent direct access of bd_inode - nvdimm: pmem: keep PREFLUSH before data writes - tty: serial: 8250: protect against NULL uart->port.dev in register - serial: 8250: invert serial8250_register_8250_port() CIR condition - urma: fix ipourma eid handler and register work concurrency - tty: fix saved termios reset race - x86/cpu/hygon: Report S5 reset status during boot - drm/amdkfd: fix SMI event cross-process information leak - of/overlay: put property on deadprops only after changeset add succeeds - net/mlx5: Fix slab-out-of-bounds when handling team device events - serial: core: fix NULL pointer dereference in serial_core_unregister_port() - !30553 tracing: Reject incomplete event filter expressions - !30498 nfsd: split nfsd4_copy into transient and durable async copy objects - !30000 [CVEAgent@OLK-6.6] Fix CVE-2026-98822 - !30497 cdma: ratelimit hot-path error logs in kernel driver and header file code synchronization - tracing: Reject incomplete event filter expressions - !30546 [OLK-6.6] ub: fix UBASE port reporting and UNIC reset and DMA handling - !30481 [CVEAgent@OLK-6.6] Fix CVE-2026-99080 - !30483 [CVEAgent@OLK-6.6] Fix CVE-2026-99206 - !30388 Fix CVE-2026-99153 - !30390 Fix CVE-2026-99152 - !30387 Fix CVE-2026-99110 - !30391 Fix CVE-2026-99109 - !30479 [CVEAgent@OLK-6.6] Fix CVE-2026-99254 - !30538 scsi: libsas: Fix SMP IO deadlock during HA resume - !30537 ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30536 scsi: libsas: Add linkrate and sas_addr change detection in rediscover；scsi: libsas: Add sas_ex_phy_to_dev() helper - !30486 [CVEAgent@OLK-6.6] Fix CVE-2026-99247 - !30454 [OLK-6.6] Fix CVE-2026-97566 - !30453 [OLK-6.6] Fix CVE-2026-97432 - !30444 [OLK-6.6] Fix CVE-2026-43234 - !30403 x86/hygon: Fix FPDSS on Hygon - !30269 [OLK-6.6] update rnpvf driver to 1.2.0. - !30155 [OLK-6.6] Fix CVE-2026-74695 - !30153 [OLK-6.6] Fix CVE-2026-72494 - !30149 [OLK-6.6] Fix CVE-2026-74368 - !30092 [CVEAgent@OLK-6.6] Fix CVE-2026-99052 - !30090 [CVEAgent@OLK-6.6] Fix CVE-2026-99040 - !30057 [CVEAgent@OLK-6.6] Fix CVE-2026-98948 - !30086 [CVEAgent@OLK-6.6] Fix CVE-2026-99025 - !30105 [CVEAgent@OLK-6.6] Fix CVE-2026-99078 - !30106 [CVEAgent@OLK-6.6] Fix CVE-2026-99079 - ub: ubase: skip bandwidth queries on next-generation chips - net: unic: Fix TX/RX DMA ordering and cache sync - net: unic: serialize port deactivation with reset - ub: ubase: add ub port events handling and statistics - scsi: libsas: Fix SMP IO deadlock during HA resume - scsi: libsas: Add sas_ex_phy_to_dev() helper - scsi: libsas: Add linkrate and sas_addr change detection in rediscover - !30430 v8 arm64: Allow CPU0 to be nohz_full - ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30300 mm/gup: allow movable memory pinnable - !30487 urma: limit opt buf length in uburma ioctl commands - !29931 [CVEAgent@OLK-6.6] Fix CVE-2026-98570 - nfsd: split nfsd4_copy into transient and durable async copy objects - ub: cdma: header file code synchronization - ub: cdma: ratelimit hot-path error logs in kernel driver - x86: hygon: Fix FPDSS on Hygon - tracing: Do not initialize tracefs work if tracing is disabled - scsi: target: iscsi: Fix race in discovery auth updates - fs: Free any excess xarray nodes in clear_inode() - io_uring: don't flood a cancelling task with task_work - urma: limit opt buf length in uburma ioctl commands - mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 - wifi: iwlwifi: mvm: fix P2P-Device binding handling - team: avoid NETDEV_CHANGEMTU event when unregistering slave - arm64: defconfig: Enable CONFIG_PM_SLEEP_SMP_NONZERO_CPU and CONFIG_ARCH_SUSPEND_NONZERO_CPU - arm64: Allow boot CPU nohz_full to coexist with suspend and kexec - isolation: Check whether there exists a housekeeping CPU online - isolation: Do not check whether housekeeping CPUs are present - smb: client: reject SetEA requests that do not fit the request buffer - scsi: libiscsi: Validate the task named by a management response - scsi: libiscsi: Validate the ITT reflected in a Reject PDU - smb: client: fix heap overflow in cifs_do_set_acl() - rnpvf: update rnpvf driver to 1.2.0. - mm/gup: allow movable memory pinnable - rnpvf: update rnpvf driver to 1.2.0. - netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() - RDMA/irdma: Replace waitqueue and flag with completion - wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() - net/mlx5e: Prevent stale XSK buffer release on refill retry - net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry - selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts - KEYS: Fix add_key() race with keyring restriction - openvswitch: fix soft lockup in the netlink flow dump - mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() - wifi: mac80211: prevent AP VLAN tx from other interfaces - net: ipv6: keep room for the mac header in dst_dev_overhead() - !30530 [CVEAgent@OLK-6.6] Fix CVE-2026-99163 - !30532 [CVEAgent@OLK-6.6] Fix CVE-2026-99235 - !29765 Fix CVE-2026-98289 - !30230 Fix CVE-2026-97615 - !29790 Fix CVE-2026-93250 - !30510 [CVEAgent@OLK-6.6] Fix CVE-2026-99005 - !30506 [CVEAgent@OLK-6.6] Fix CVE-2026-98871 - !30307 feat/obmm-unified-switch-split-v4 - !30064 [CVEAgent@OLK-6.6] Fix CVE-2026-98972 - !30507 [CVEAgent@OLK-6.6] Fix CVE-2026-98883 - !30450 BBML3 bugfix - !30156 [OLK-6.6] Fix CVE-2026-68258 - !30154 [OLK-6.6] Fix CVE-2026-74729 - !30151 [OLK-6.6] Fix CVE-2026-74273 - !27793 [OLK-6.6] Fix CVE-2026-68421 - !27512 [OLK-6.6] Fix CVE-2026-64259 - !30146 [OLK-6.6] Fix CVE-2026-53109 - !30575 arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30567 scsi: hisi_sas: Clear PHY error counts on phyup - arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30472 [CVEAgent@OLK-6.6] Fix CVE-2026-99243 - scsi: hisi_sas: Clear PHY error counts on phyup - scsi:hisi_sas:Sync upstream timer_delete API changes in hisi_sas_v3_hw.c - tracing: Save the event file instead of the compatible histogram - tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields - drm/i915/gt: Unmask interrupts only when ACTIVE is true - serial: 8250_port: recognize UPIO_AU - crypto: ccp - Fix possible deadlock in SEV init failure path - obmm: pack the internal structs by field ordering - obmm: sysfs views over the switch: attributes, identity, lockless reads - obmm: generalized dual-backend gap mmap - obmm: export switch target wrap-up and validation consolidation - obmm: unified two-phase switch core (import target) - obmm: install mappings lazily from the backend fault paths - obmm: fix the pxm bound, the open TOCTOU and the teardown release - obmm: split the region shell from the memory backends - obmm: depend on TRANSPARENT_HUGEPAGE for the PMD fault paths - io-wq: order the exit bit against worker creation task work - mm/pfn_range_alloc: split block mappings in linear map updates - arm64/mm: make pte_present() recognize present-invalid entries - net: bridge: use option bits for CFM/MRP frame handlers - drm/amdkfd: Check bounds on CRIU restore queue type and mqd size - soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read - cxl/region: Block region delete during region creation - powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy - cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() - vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() - af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). - sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() - fuse-uring: make a fuse_req on SQE commit only findable after memcpy - !30591 [CVEAgent@OLK-6.6] Fix CVE-2026-99142 - !30590 [CVEAgent@OLK-6.6] Fix CVE-2026-99219 - !30594 [CVEAgent@OLK-6.6] Fix CVE-2026-99233 - !30600 urma: warn on slow TP driver callbacks - urma: warn on slow TP driver callbacks - tracing/histograms: Verify event_call identity when updating synth_event refcount - tracing: Check operator stack capacity before pushing - ftrace: Initialize modname and offset in print_rec() - !30602 [CVEAgent@OLK-6.6] Fix CVE-2026-99117 - !30605 [CVEAgent@OLK-6.6] Fix CVE-2026-99211 - !30604 [CVEAgent@OLK-6.6] Fix CVE-2026-99201 - netlink: reset skb headers before unicast and multicast filtering - netlink: avoid hashing the network namespace pointer - net: bridge: mcast: don't truncate the port group walk on teardown - !30597 [CVEAgent@OLK-6.6] Fix CVE-2026-99239 - !30582 v5 MOC bypass cache - !30610 iommu/io-pgtable-arm: Add support for contiguous hint - !30523 drivers:misc:sdma-dae: Open source sdma-dae driver to OLK-6.6 (already supported on olk-5.10) - !28122 [CVEAgent@OLK-6.6] Fix CVE-2026-89802 - !29350 [CVEAgent@OLK-6.6] Fix CVE-2026-97988 - !30473 Fix CVE-2026-97992 - !30150 [OLK-6.6] Fix CVE-2026-74527 - !30576 net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - !30544 [OLK-6.6] Fix CVE-2026-90057 - !30476 [OLK-6.6] fix CVE-2026-98936 - !30474 [OLK-6.6] fix CVE-2026-99059 - !30144 [OLK-6.6] Fix CVE-2026-64190 - !30311 [OLK-6.6]nser: add support for wangxun RDMA driver - iommu/io-pgtable-arm: Add support for contiguous hint - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn - openeuler: configs: arm64: Enable PBHA by default - arm64: mm: Introduce kernel param pbha - arm64: mm: Introduce prctl to control pbha behavior - arm64: mm: Set flag VM_PBHA_BIT0 for global init task - arm64: mm: Introduce procfs interface to update PBHA0 bit - arm64: mm: Set PBHA0 bit for VM_PBHA_BIT0 - arm64: mm: Introduce VM_PBHA_BIT0 to enable pbha bit0 for single vma - arm64: mm: Show PBHA bit 59 as PBHA0 in ptdump - arm64: mm: Update kernel pte entries if pbha bit0 enabled - arm64: mm: Detect and enable PBHA bit0 at early startup - arm64: cpufeature: Enable PBHA for stage1 early via FDT - Documentation: arm64: Describe the support and expectations for PBHA - KVM: arm64: Configure PBHA bits for stage2 - arm64: mm: Add pgprot_pbha() to allow drivers to request PBHA values - arm64: cpufeature: Enable PBHA bits for stage1 - dt-bindings: arm: Add binding for Page Based Hardware Attributes - dt-bindings: Rename the description of cpu nodes cpu.yaml - KVM: arm64: Detect and enable PBHA for stage2 - net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() - drivers:misc:sdma-dae: adapt driver interfaces for OLK-6.6 - net: team: fix NULL pointer dereference in team_xmit during mode change - net: team: Rename port_disabled team mode op to port_tx_disabled - net: team: Remove unused team_mode_op, port_enabled - wifi: ath11k: reset ar->num_stations on hardware start - wireguard: noise: reject response consumption after intermediate initiation - vhost-vdpa: protect config_ctx from being freed under the config callback - x86/arm64: config: enable the Wangxun nser RDMA driver - net: wangxun: nser: add RDMA support for 100GbE NICs - octeontx2-af: Block VFs from clobbering special CGX PKIND state - vhost: invalidate vring access on IOTLB transitions - drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op - drivers:misc:sdma-dae: Remove redundant print during mm exit and resume. - drivers:misc:sdma-dae: Revert optimize kernel code - drivers:misc:sdma-dae: Revert add channel depth info in debugfs - drivers:misc:sdma-dae: Revert Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Remove interference print. - drivers:misc:sdma-dae: Checking the address alignment - drivers:misc:sdma-dae: add NULL judgement of global variables - drivers:misc:sdma-dae: add channel depth info in debugfs - drivers:misc:sdma-dae: optimize kernel code - drivers:misc:sdma-dae: fix incorrect debugfs print - drivers:misc:sdma-dae: sdma fix uncorrect sleep time - drivers:misc:sdma-dae: fix incorrect kmalloc flag - drivers:misc:sdma-dae: sdma fix PUAF problem fork risk - drivers:misc:sdma-dae: modify ttl_processes reduce logic - drivers:misc:sdma-dae: remove unnecessary return in void function - drivers:misc:sdma-dae: fix incorrect resource release - drivers:misc:sdma-dae: remove lock while pausing channels - drivers:misc:sdma-dae: add mmu_notifier - drivers:misc:sdma-dae: add MODULE_VERSION to control version - drivers:misc:sdma-dae: add print in exceptional branch - drivers:misc:sdma-dae: bugfix of channel operation - drivers:misc:sdma-dae: change authority of sdma device - drivers:misc:sdma-dae: add channel ida validation - drivers:misc:sdma-dae: add vma_ops to avoid mremap error - drivers:misc:sdma-dae: add fast mode - drivers:misc:sdma-dae: not expose sq_tail write and add validation of cq_head - drivers:misc:sdma-dae: add debugfs of sdma-dae - drivers:misc:sdma-dae: fix icsl code check problems - drivers:misc:sdma-dae: fix input validate problems - drivers:misc:sdma-dae: fix interrupt handle logic - drivers:misc:sdma-dae: not compile sdma-dae by default - drivers:misc:sdma-dae: enable sdma_dae for arm64 - drivers:misc:sdma-dae: support page fault preprocess - drivers:misc:sdma-dae: support interrupt init and handle - drivers:misc:sdma-dae: support sqe task send and execute - drivers:misc:sdma-dae: support channel management - drivers:misc:sdma-dae: support getting streamID - drivers:misc:sdma-dae: support initializ sdma driver - !30253 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - !29554 [CVEAgent@OLK-6.6] Fix CVE-2026-98286 - !30263 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - !30258 v10 net: dynthread: dynamic threaded NAPI - !30208 Fix CVE-2026-98044 - !30280 bpf: Make post-verification instruction rewrites killable - !30184 blk-mq: set RQF_USE_SCHED when the operation is known - !30267 sched/fair: Avoid overflow in place_entity() - !30236 configfs: unhash the dentry before dropping the item in rmdir - !30276 virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - !29584 [CVEAgent@OLK-6.6] Fix CVE-2026-98364 - !29906 [CVEAgent@OLK-6.6] Fix CVE-2026-98443 - !30046 net: cap skb->queue_mapping when the tx queue is picked - !30223 bpf: Reject pkt arguments in mutating subprogs - !29932 [CVEAgent@OLK-6.6] Fix CVE-2026-98598 - !30044 net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - bpf: Make post-verification instruction rewrites killable - virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - RDMA/umem: avoid ib_umem_find_best_pgsz ABI breakage - sched/fair: Avoid overflow in place_entity() - RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - net: dynthread: Add debug switch and instrumentation - net: dynthread: Scale the number of NAPI thread CPUs - net: dynthread: Switch NAPI to threads on spare CPUs - net: dynthread: Steer the RX queue IRQs away from the target tasks - net: dynthread: Monitor the load of the target tasks - net: dynthread: Add dynamic threaded NAPI scheduler framework - net/mlx5e: Do not block on RTNL while recovering an SQ - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover - net/mlx5e: Acquire RTNL lock before RQs/SQs activation/deactivation - net/mlx5e: link NAPI instances to queues and IRQs - net: Fix napi irq KABI breakage - net: Add NAPI IRQ support - net: Fix KABI breakage for queue napi association - net: Add queue and napi association - neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - configfs: unhash the dentry before dropping the item in rmdir - bpf: Reject pkt arguments in mutating subprogs - bpf: Fix kabi breakage in struct bpf_subprog_info - bpf: Reject legacy packet loads from callbacks - blk-mq: set RQF_USE_SCHED when the operation is known - net: cap skb->queue_mapping when the tx queue is picked - net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - ipv6: Prevent rt6_insert_exception() for dying fib6_info. - xfs: fix cursor and pointer handling when recovering iunlink buckets - xfrm: hold net_device reference under RCU in bundle creation - drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown - !30268 ub: udma: solving internal code review issues - !30305 bpf: Mark syscall helpers as sleepable - !30113 fix/CVE-2026-98103 - !30061 [CVEAgent@OLK-6.6] Fix CVE-2026-98966 - !30099 [CVEAgent@OLK-6.6] Fix CVE-2026-99070 - !30087 [CVEAgent@OLK-6.6] Fix CVE-2026-99031 - !30100 [CVEAgent@OLK-6.6] Fix CVE-2026-99071 - !30101 [CVEAgent@OLK-6.6] Fix CVE-2026-99072 - !30102 [CVEAgent@OLK-6.6] Fix CVE-2026-99074 - !30091 [CVEAgent@OLK-6.6] Fix CVE-2026-99041 - !30088 [CVEAgent@OLK-6.6] Fix CVE-2026-99033 - !30043 seg6: ensure packet data is writable before modifying SRH and IPv6 DA - !30197 CVE-2026-98503 - bpf: Mark syscall helpers as sleepable - ub: udma: support dwqe with a few wqebbs - ub: udma: solving internal code review issues - seg6: ensure packet data is writable before modifying SRH and IPv6 DA - igmp: fix kabi breakage of struct ip_sf_list - packet: use ubuf_info completion for TX_RING packets - virtio_net: copy zerocopy frags in start_xmit without NAPI - igmp: convert struct ip_sf_list to RCU - ipv4: stop PMTU walk when nexthop group shrinks - ipv4: stop route notification sizing when nexthop group shrinks - ipv4: do not warn on route notification size race - ipv6: do not warn on route notification size race - ip6_gre: remove obsolete ERSPAN PMTU update - net/packet: guard the ll header push in packet_rcv_spkt() - net: bridge: avoid recursive multicast port cleanup - bonding: fix the program leak when XDP is replaced - !30029 CODEOWNERS: add kernel module ownership rules - !30291 [OLK-6.6] mm/swapfile: reject duplicated bad pages in swap header - !30201 filescgroup: migrate files resources of every task, not just the first - !30306 Fix CVE-2026-98799 - bpf: Fix kabi breakage in struct bpf_tramp_image and bpf_trampoline - bpf: Skip detached progs in trampoline images that are still in use - mm/swapfile: reject duplicated bad pages in swap header - filescgroup: migrate files resources of every task, not just the first - scripts: add get_codeowner.py to look up CODEOWNERS owners - CODEOWNERS: add kernel module ownership rules - !30256 [Backport] ext4: defer unwritten splitting until I/O completion - !30394 urma: Fix the assignment before null check - !30003 [CVEAgent@OLK-6.6] Fix CVE-2026-98831 - !29516 [CVEAgent@OLK-6.6] Fix CVE-2026-98198 - !30220 drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - !30082 [CVEAgent@OLK-6.6] Fix CVE-2026-99012 - !30071 [CVEAgent@OLK-6.6] Fix CVE-2026-98983 - !30262 [CVEAgent] Fix CVE-2026-99091 - !30294 Fix CVE-2026-99011 - !30293 Fix CVE-2026-99008 - !30290 Fix CVE-2026-98663 - !30289 Fix CVE-2026-98664 - !30288 Fix CVE-2026-98666 - !30234 [PATCH 00/11] KVM: arm64: pvm: Add software VGICv3 and virtual timer support - ext4: prevent sleeping allocation in NOWAIT write path - !30367 Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - ext4: remove EXT4_GET_BLOCKS_IO_CREATE_EXT - ext4: simplify the mapping query logic in ext4_iomap_begin() - ext4: skip overwrite check for aligned non-extending DIO writes - ext4: remove unused unwritten parameter in ext4_dio_write_iter() - ext4: remove useless ext4_iomap_overwrite_ops - ext4: avoid starting handle when dio writing an unwritten extent - ext4: don't split extent before submitting I/O - !30233 Fix CVE-2026-98917 - !30235 Fix CVE-2026-98930 - !30368 wifi: mac80211: validate TX status rate metadata - !30378 tty: tty_port: restore TTY_IO_ERROR on activation failure - !30380 tty: port: fix tty_port_tty_vhangup() race - !30371 mtd: core: avoid double-free of OTP NVMEM device - urma: Fix the assignment before null check - !30386 RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - !30270 [OLK-6.6] AMD Venice additional patches for openEuler - !28385 [OLK-6.6] crypto: ccp: fix vpsp cmd ctx leak - !30382 fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - !30365 bpf: Fix out-of-bounds btf->types write for split BTF - fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - !30313 kabi: fix include helpers broken by the predefined 'linux' macro - tty: port: fix tty_port_tty_vhangup() race - tty: tty_port: restore TTY_IO_ERROR on activation failure - mtd: core: avoid double-free of OTP NVMEM device - wifi: mac80211: validate TX status rate metadata - bpf: Fix out-of-bounds btf->types write for split BTF - kabi: fix include helpers broken by the predefined 'linux' macro - KVM: arm64: pvm: Handle counter reads in the hyp path - KVM: arm64: pvm: Trap guest timer accesses and enforce EL0 permissions - KVM: arm64: pvm: Align timer capabilities and counter handling with RV timers - KVM: arm64: pvm: Wire RV timers into the KVM timer entry points - KVM: arm64: pvm: Add the software RV timer implementation - KVM: arm64: pvm: Deliver VGIC interrupts without hardware LRs - KVM: arm64: pvm: Emulate VGIC active priority registers - KVM: arm64: pvm: Route ICC accesses through register descriptors - KVM: arm64: pvm: Emulate the GICv3 CPU interface - KVM: arm64: Handle pending EL1 IRQ exceptions - KVM: arm64: pvm: Constrain virtual interrupt capabilities - Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown - iio: imu: adis16480: fix unprotected debugfs reads - iio: imu: adis16400: fix unprotected debugfs reads - iio: gyro: adis16136: fix unprotected debugfs reads - Bluetooth: MGMT: Fix status of pending commands flushed on power off - EDAC/amd64: Mask UMC chip select to the four implemented selects - x86/mce: Fix hardware debug register corruption on task migration - x86/MCE/AMD: Fix inverted interrupt enablement during storm handling - x86/amd_node: Avoid divide by zero on virtualized systems - RAS/AMD/ATL, EDAC/amd64: Only load ATL when needed - x86/mce: Set up the polling timer before CMCI discovery - x86/mce: Restore MCA polling interval halving - EDAC/amd64: Remove NUM_CONTROLLERS macro - x86/mce/inject: Remove call to mce_notify_irq() - x86/mce: Remove the redundant mce_hygon_feature_init() - x86/mce/threshold: Remove the redundant this_cpu_dec_return() - crypto: ccp: fix vpsp cmd ctx leak - KVM: s390: Fix IRQ injection with SIGP Stop and Store Status - parisc: Increase kernel stack size to 32kb - drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - Bluetooth: ISO: Serialize concurrent connect calls - unshare: don't drop active namespace references that were never taken - of/overlay: don't leak fragment references when changeset init fails - hwmon: (pwm-fan) Stop RPM timer before freeing tach data - !30459 [CVEAgent@OLK-6.6] Fix CVE-2026-99234 - !30468 [CVEAgent@OLK-6.6] Fix CVE-2026-99143 - !30322 urma: fix ipourma eid handler and register work concurrency - !30455 arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30491 [OLK-6.6] AMD Venice additional patches for openEuler - 2 - EDAC/amd64: Avoid a -Wformat-security warning - EDAC/amd64: Generate ctl_name string at runtime - !29993 [CVEAgent@OLK-6.6] Fix CVE-2026-98807 - !29964 [CVEAgent@OLK-6.6] Fix CVE-2026-98747 - !30393 ub/ubmem-vmmu: Remove the support_attr callback mechanism. - !30447 wifi: mac80211: minstrel_ht: validate fixed rate index - !30446 net: ena: fix MMIO read buffer leak on probe failure - tracing: Keep the predicate limit separate from program capacity - !30013 [CVEAgent@OLK-6.6] Fix CVE-2026-98855 - !30431 fix CVE-2026-98490 for OLK-6.6 - !30425 fix CVE-2026-98722 for OLK-6.6 - !30410 nvdimm: pmem: keep PREFLUSH before data writes - !30406 Fix CVE-2026-97480 for OLK-6.6 - !30204 x86/cpu/hygon: Report S5 reset status during boot - tracing: Unregister field variable histograms when the command fails - !30395 tty: fix saved termios reset race - arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30031 drm/amdkfd: fix SMI event cross-process information leak - wifi: mac80211: minstrel_ht: validate fixed rate index - net: ena: fix MMIO read buffer leak on probe failure - net: openvswitch: conntrack: fix helper UAF due to extensions realloc - net: openvswitch: conntrack: remove 'add_helper' dead code - openvswitch: prepare for stolen verdict coming from conntrack and nat engine - net/sched: act_ct: avoid modifying shared unconfirmed ct entry - net/sched: act_ct: fix helper UAF due to extensions realloc - ub/ubmem-vmmu: Remove the support_attr callback mechanism. - mtd: block2mtd: Fix divide error when erase_size is zero - block2mtd: prevent direct access of bd_inode - nvdimm: pmem: keep PREFLUSH before data writes - tty: serial: 8250: protect against NULL uart->port.dev in register - serial: 8250: invert serial8250_register_8250_port() CIR condition - urma: fix ipourma eid handler and register work concurrency - tty: fix saved termios reset race - x86/cpu/hygon: Report S5 reset status during boot - drm/amdkfd: fix SMI event cross-process information leak - of/overlay: put property on deadprops only after changeset add succeeds - net/mlx5: Fix slab-out-of-bounds when handling team device events - serial: core: fix NULL pointer dereference in serial_core_unregister_port() - !30553 tracing: Reject incomplete event filter expressions - !30498 nfsd: split nfsd4_copy into transient and durable async copy objects - !30000 [CVEAgent@OLK-6.6] Fix CVE-2026-98822 - !30497 cdma: ratelimit hot-path error logs in kernel driver and header file code synchronization - tracing: Reject incomplete event filter expressions - !30546 [OLK-6.6] ub: fix UBASE port reporting and UNIC reset and DMA handling - !30481 [CVEAgent@OLK-6.6] Fix CVE-2026-99080 - !30483 [CVEAgent@OLK-6.6] Fix CVE-2026-99206 - !30388 Fix CVE-2026-99153 - !30390 Fix CVE-2026-99152 - !30387 Fix CVE-2026-99110 - !30391 Fix CVE-2026-99109 - !30479 [CVEAgent@OLK-6.6] Fix CVE-2026-99254 - !30538 scsi: libsas: Fix SMP IO deadlock during HA resume - !30537 ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30536 scsi: libsas: Add linkrate and sas_addr change detection in rediscover；scsi: libsas: Add sas_ex_phy_to_dev() helper - !30486 [CVEAgent@OLK-6.6] Fix CVE-2026-99247 - !30454 [OLK-6.6] Fix CVE-2026-97566 - !30453 [OLK-6.6] Fix CVE-2026-97432 - !30444 [OLK-6.6] Fix CVE-2026-43234 - !30403 x86/hygon: Fix FPDSS on Hygon - !30269 [OLK-6.6] update rnpvf driver to 1.2.0. - !30155 [OLK-6.6] Fix CVE-2026-74695 - !30153 [OLK-6.6] Fix CVE-2026-72494 - !30149 [OLK-6.6] Fix CVE-2026-74368 - !30092 [CVEAgent@OLK-6.6] Fix CVE-2026-99052 - !30090 [CVEAgent@OLK-6.6] Fix CVE-2026-99040 - !30057 [CVEAgent@OLK-6.6] Fix CVE-2026-98948 - !30086 [CVEAgent@OLK-6.6] Fix CVE-2026-99025 - !30105 [CVEAgent@OLK-6.6] Fix CVE-2026-99078 - !30106 [CVEAgent@OLK-6.6] Fix CVE-2026-99079 - ub: ubase: skip bandwidth queries on next-generation chips - net: unic: Fix TX/RX DMA ordering and cache sync - net: unic: serialize port deactivation with reset - ub: ubase: add ub port events handling and statistics - scsi: libsas: Fix SMP IO deadlock during HA resume - scsi: libsas: Add sas_ex_phy_to_dev() helper - scsi: libsas: Add linkrate and sas_addr change detection in rediscover - !30430 v8 arm64: Allow CPU0 to be nohz_full - ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30300 mm/gup: allow movable memory pinnable - !30487 urma: limit opt buf length in uburma ioctl commands - !29931 [CVEAgent@OLK-6.6] Fix CVE-2026-98570 - nfsd: split nfsd4_copy into transient and durable async copy objects - ub: cdma: header file code synchronization - ub: cdma: ratelimit hot-path error logs in kernel driver - x86: hygon: Fix FPDSS on Hygon - tracing: Do not initialize tracefs work if tracing is disabled - scsi: target: iscsi: Fix race in discovery auth updates - fs: Free any excess xarray nodes in clear_inode() - io_uring: don't flood a cancelling task with task_work - urma: limit opt buf length in uburma ioctl commands - mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 - wifi: iwlwifi: mvm: fix P2P-Device binding handling - team: avoid NETDEV_CHANGEMTU event when unregistering slave - arm64: defconfig: Enable CONFIG_PM_SLEEP_SMP_NONZERO_CPU and CONFIG_ARCH_SUSPEND_NONZERO_CPU - arm64: Allow boot CPU nohz_full to coexist with suspend and kexec - isolation: Check whether there exists a housekeeping CPU online - isolation: Do not check whether housekeeping CPUs are present - smb: client: reject SetEA requests that do not fit the request buffer - scsi: libiscsi: Validate the task named by a management response - scsi: libiscsi: Validate the ITT reflected in a Reject PDU - smb: client: fix heap overflow in cifs_do_set_acl() - rnpvf: update rnpvf driver to 1.2.0. - mm/gup: allow movable memory pinnable - rnpvf: update rnpvf driver to 1.2.0. - netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() - RDMA/irdma: Replace waitqueue and flag with completion - wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() - net/mlx5e: Prevent stale XSK buffer release on refill retry - net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry - selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts - KEYS: Fix add_key() race with keyring restriction - openvswitch: fix soft lockup in the netlink flow dump - mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() - wifi: mac80211: prevent AP VLAN tx from other interfaces - net: ipv6: keep room for the mac header in dst_dev_overhead() - !30530 [CVEAgent@OLK-6.6] Fix CVE-2026-99163 - !30532 [CVEAgent@OLK-6.6] Fix CVE-2026-99235 - !29765 Fix CVE-2026-98289 - !30230 Fix CVE-2026-97615 - !29790 Fix CVE-2026-93250 - !30510 [CVEAgent@OLK-6.6] Fix CVE-2026-99005 - !30506 [CVEAgent@OLK-6.6] Fix CVE-2026-98871 - !30307 feat/obmm-unified-switch-split-v4 - !30064 [CVEAgent@OLK-6.6] Fix CVE-2026-98972 - !30507 [CVEAgent@OLK-6.6] Fix CVE-2026-98883 - !30450 BBML3 bugfix - !30156 [OLK-6.6] Fix CVE-2026-68258 - !30154 [OLK-6.6] Fix CVE-2026-74729 - !30151 [OLK-6.6] Fix CVE-2026-74273 - !27793 [OLK-6.6] Fix CVE-2026-68421 - !27512 [OLK-6.6] Fix CVE-2026-64259 - !30146 [OLK-6.6] Fix CVE-2026-53109 - !30575 arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30567 scsi: hisi_sas: Clear PHY error counts on phyup - arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30472 [CVEAgent@OLK-6.6] Fix CVE-2026-99243 - scsi: hisi_sas: Clear PHY error counts on phyup - scsi:hisi_sas:Sync upstream timer_delete API changes in hisi_sas_v3_hw.c - tracing: Save the event file instead of the compatible histogram - tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields - drm/i915/gt: Unmask interrupts only when ACTIVE is true - serial: 8250_port: recognize UPIO_AU - crypto: ccp - Fix possible deadlock in SEV init failure path - obmm: pack the internal structs by field ordering - obmm: sysfs views over the switch: attributes, identity, lockless reads - obmm: generalized dual-backend gap mmap - obmm: export switch target wrap-up and validation consolidation - obmm: unified two-phase switch core (import target) - obmm: install mappings lazily from the backend fault paths - obmm: fix the pxm bound, the open TOCTOU and the teardown release - obmm: split the region shell from the memory backends - obmm: depend on TRANSPARENT_HUGEPAGE for the PMD fault paths - io-wq: order the exit bit against worker creation task work - mm/pfn_range_alloc: split block mappings in linear map updates - arm64/mm: make pte_present() recognize present-invalid entries - net: bridge: use option bits for CFM/MRP frame handlers - drm/amdkfd: Check bounds on CRIU restore queue type and mqd size - soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read - cxl/region: Block region delete during region creation - powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy - cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() - vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() - af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). - sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() - fuse-uring: make a fuse_req on SQE commit only findable after memcpy - !30591 [CVEAgent@OLK-6.6] Fix CVE-2026-99142 - !30590 [CVEAgent@OLK-6.6] Fix CVE-2026-99219 - !30594 [CVEAgent@OLK-6.6] Fix CVE-2026-99233 - !30600 urma: warn on slow TP driver callbacks - urma: warn on slow TP driver callbacks - tracing/histograms: Verify event_call identity when updating synth_event refcount - tracing: Check operator stack capacity before pushing - ftrace: Initialize modname and offset in print_rec() - !30602 [CVEAgent@OLK-6.6] Fix CVE-2026-99117 - !30605 [CVEAgent@OLK-6.6] Fix CVE-2026-99211 - !30604 [CVEAgent@OLK-6.6] Fix CVE-2026-99201 - netlink: reset skb headers before unicast and multicast filtering - netlink: avoid hashing the network namespace pointer - net: bridge: mcast: don't truncate the port group walk on teardown - !30597 [CVEAgent@OLK-6.6] Fix CVE-2026-99239 - !30582 v5 MOC bypass cache - !30610 iommu/io-pgtable-arm: Add support for contiguous hint - !30523 drivers:misc:sdma-dae: Open source sdma-dae driver to OLK-6.6 (already supported on olk-5.10) - !28122 [CVEAgent@OLK-6.6] Fix CVE-2026-89802 - !29350 [CVEAgent@OLK-6.6] Fix CVE-2026-97988 - !30473 Fix CVE-2026-97992 - !30150 [OLK-6.6] Fix CVE-2026-74527 - !30576 net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - !30544 [OLK-6.6] Fix CVE-2026-90057 - !30476 [OLK-6.6] fix CVE-2026-98936 - !30474 [OLK-6.6] fix CVE-2026-99059 - !30144 [OLK-6.6] Fix CVE-2026-64190 - !30311 [OLK-6.6]nser: add support for wangxun RDMA driver - iommu/io-pgtable-arm: Add support for contiguous hint - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn - openeuler: configs: arm64: Enable PBHA by default - arm64: mm: Introduce kernel param pbha - arm64: mm: Introduce prctl to control pbha behavior - arm64: mm: Set flag VM_PBHA_BIT0 for global init task - arm64: mm: Introduce procfs interface to update PBHA0 bit - arm64: mm: Set PBHA0 bit for VM_PBHA_BIT0 - arm64: mm: Introduce VM_PBHA_BIT0 to enable pbha bit0 for single vma - arm64: mm: Show PBHA bit 59 as PBHA0 in ptdump - arm64: mm: Update kernel pte entries if pbha bit0 enabled - arm64: mm: Detect and enable PBHA bit0 at early startup - arm64: cpufeature: Enable PBHA for stage1 early via FDT - Documentation: arm64: Describe the support and expectations for PBHA - KVM: arm64: Configure PBHA bits for stage2 - arm64: mm: Add pgprot_pbha() to allow drivers to request PBHA values - arm64: cpufeature: Enable PBHA bits for stage1 - dt-bindings: arm: Add binding for Page Based Hardware Attributes - dt-bindings: Rename the description of cpu nodes cpu.yaml - KVM: arm64: Detect and enable PBHA for stage2 - net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() - drivers:misc:sdma-dae: adapt driver interfaces for OLK-6.6 - net: team: fix NULL pointer dereference in team_xmit during mode change - net: team: Rename port_disabled team mode op to port_tx_disabled - net: team: Remove unused team_mode_op, port_enabled - wifi: ath11k: reset ar->num_stations on hardware start - wireguard: noise: reject response consumption after intermediate initiation - vhost-vdpa: protect config_ctx from being freed under the config callback - x86/arm64: config: enable the Wangxun nser RDMA driver - net: wangxun: nser: add RDMA support for 100GbE NICs - octeontx2-af: Block VFs from clobbering special CGX PKIND state - vhost: invalidate vring access on IOTLB transitions - drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op - drivers:misc:sdma-dae: Remove redundant print during mm exit and resume. - drivers:misc:sdma-dae: Revert optimize kernel code - drivers:misc:sdma-dae: Revert add channel depth info in debugfs - drivers:misc:sdma-dae: Revert Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Remove interference print. - drivers:misc:sdma-dae: Checking the address alignment - drivers:misc:sdma-dae: add NULL judgement of global variables - drivers:misc:sdma-dae: add channel depth info in debugfs - drivers:misc:sdma-dae: optimize kernel code - drivers:misc:sdma-dae: fix incorrect debugfs print - drivers:misc:sdma-dae: sdma fix uncorrect sleep time - drivers:misc:sdma-dae: fix incorrect kmalloc flag - drivers:misc:sdma-dae: sdma fix PUAF problem fork risk - drivers:misc:sdma-dae: modify ttl_processes reduce logic - drivers:misc:sdma-dae: remove unnecessary return in void function - drivers:misc:sdma-dae: fix incorrect resource release - drivers:misc:sdma-dae: remove lock while pausing channels - drivers:misc:sdma-dae: add mmu_notifier - drivers:misc:sdma-dae: add MODULE_VERSION to control version - drivers:misc:sdma-dae: add print in exceptional branch - drivers:misc:sdma-dae: bugfix of channel operation - drivers:misc:sdma-dae: change authority of sdma device - drivers:misc:sdma-dae: add channel ida validation - drivers:misc:sdma-dae: add vma_ops to avoid mremap error - drivers:misc:sdma-dae: add fast mode - drivers:misc:sdma-dae: not expose sq_tail write and add validation of cq_head - drivers:misc:sdma-dae: add debugfs of sdma-dae - drivers:misc:sdma-dae: fix icsl code check problems - drivers:misc:sdma-dae: fix input validate problems - drivers:misc:sdma-dae: fix interrupt handle logic - drivers:misc:sdma-dae: not compile sdma-dae by default - drivers:misc:sdma-dae: enable sdma_dae for arm64 - drivers:misc:sdma-dae: support page fault preprocess - drivers:misc:sdma-dae: support interrupt init and handle - drivers:misc:sdma-dae: support sqe task send and execute - drivers:misc:sdma-dae: support channel management - drivers:misc:sdma-dae: support getting streamID - drivers:misc:sdma-dae: support initializ sdma driver - !30253 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - !29554 [CVEAgent@OLK-6.6] Fix CVE-2026-98286 - !30263 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - !30258 v10 net: dynthread: dynamic threaded NAPI - !30208 Fix CVE-2026-98044 - !30280 bpf: Make post-verification instruction rewrites killable - !30184 blk-mq: set RQF_USE_SCHED when the operation is known - !30267 sched/fair: Avoid overflow in place_entity() - !30236 configfs: unhash the dentry before dropping the item in rmdir - !30276 virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - !29584 [CVEAgent@OLK-6.6] Fix CVE-2026-98364 - !29906 [CVEAgent@OLK-6.6] Fix CVE-2026-98443 - !30046 net: cap skb->queue_mapping when the tx queue is picked - !30223 bpf: Reject pkt arguments in mutating subprogs - !29932 [CVEAgent@OLK-6.6] Fix CVE-2026-98598 - !30044 net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - bpf: Make post-verification instruction rewrites killable - virtcca_cvm: fix mmap with uninitialized pfn in migvm queue - RDMA/umem: avoid ib_umem_find_best_pgsz ABI breakage - sched/fair: Avoid overflow in place_entity() - RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() - net: dynthread: Add debug switch and instrumentation - net: dynthread: Scale the number of NAPI thread CPUs - net: dynthread: Switch NAPI to threads on spare CPUs - net: dynthread: Steer the RX queue IRQs away from the target tasks - net: dynthread: Monitor the load of the target tasks - net: dynthread: Add dynamic threaded NAPI scheduler framework - net/mlx5e: Do not block on RTNL while recovering an SQ - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover - net/mlx5e: Acquire RTNL lock before RQs/SQs activation/deactivation - net/mlx5e: link NAPI instances to queues and IRQs - net: Fix napi irq KABI breakage - net: Add NAPI IRQ support - net: Fix KABI breakage for queue napi association - net: Add queue and napi association - neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. - configfs: unhash the dentry before dropping the item in rmdir - bpf: Reject pkt arguments in mutating subprogs - bpf: Fix kabi breakage in struct bpf_subprog_info - bpf: Reject legacy packet loads from callbacks - blk-mq: set RQF_USE_SCHED when the operation is known - net: cap skb->queue_mapping when the tx queue is picked - net: restrict SO_RESERVE_MEM to TCP sockets and cap max value - ipv6: Prevent rt6_insert_exception() for dying fib6_info. - xfs: fix cursor and pointer handling when recovering iunlink buckets - xfrm: hold net_device reference under RCU in bundle creation - drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown - !30268 ub: udma: solving internal code review issues - !30305 bpf: Mark syscall helpers as sleepable - !30113 fix/CVE-2026-98103 - !30061 [CVEAgent@OLK-6.6] Fix CVE-2026-98966 - !30099 [CVEAgent@OLK-6.6] Fix CVE-2026-99070 - !30087 [CVEAgent@OLK-6.6] Fix CVE-2026-99031 - !30100 [CVEAgent@OLK-6.6] Fix CVE-2026-99071 - !30101 [CVEAgent@OLK-6.6] Fix CVE-2026-99072 - !30102 [CVEAgent@OLK-6.6] Fix CVE-2026-99074 - !30091 [CVEAgent@OLK-6.6] Fix CVE-2026-99041 - !30088 [CVEAgent@OLK-6.6] Fix CVE-2026-99033 - !30043 seg6: ensure packet data is writable before modifying SRH and IPv6 DA - !30197 CVE-2026-98503 - bpf: Mark syscall helpers as sleepable - ub: udma: support dwqe with a few wqebbs - ub: udma: solving internal code review issues - seg6: ensure packet data is writable before modifying SRH and IPv6 DA - igmp: fix kabi breakage of struct ip_sf_list - packet: use ubuf_info completion for TX_RING packets - virtio_net: copy zerocopy frags in start_xmit without NAPI - igmp: convert struct ip_sf_list to RCU - ipv4: stop PMTU walk when nexthop group shrinks - ipv4: stop route notification sizing when nexthop group shrinks - ipv4: do not warn on route notification size race - ipv6: do not warn on route notification size race - ip6_gre: remove obsolete ERSPAN PMTU update - net/packet: guard the ll header push in packet_rcv_spkt() - net: bridge: avoid recursive multicast port cleanup - bonding: fix the program leak when XDP is replaced - !30029 CODEOWNERS: add kernel module ownership rules - !30291 [OLK-6.6] mm/swapfile: reject duplicated bad pages in swap header - !30201 filescgroup: migrate files resources of every task, not just the first - !30306 Fix CVE-2026-98799 - bpf: Fix kabi breakage in struct bpf_tramp_image and bpf_trampoline - bpf: Skip detached progs in trampoline images that are still in use - mm/swapfile: reject duplicated bad pages in swap header - filescgroup: migrate files resources of every task, not just the first - scripts: add get_codeowner.py to look up CODEOWNERS owners - CODEOWNERS: add kernel module ownership rules - !30256 [Backport] ext4: defer unwritten splitting until I/O completion - !30394 urma: Fix the assignment before null check - !30003 [CVEAgent@OLK-6.6] Fix CVE-2026-98831 - !29516 [CVEAgent@OLK-6.6] Fix CVE-2026-98198 - !30220 drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - !30082 [CVEAgent@OLK-6.6] Fix CVE-2026-99012 - !30071 [CVEAgent@OLK-6.6] Fix CVE-2026-98983 - !30262 [CVEAgent] Fix CVE-2026-99091 - !30294 Fix CVE-2026-99011 - !30293 Fix CVE-2026-99008 - !30290 Fix CVE-2026-98663 - !30289 Fix CVE-2026-98664 - !30288 Fix CVE-2026-98666 - !30234 [PATCH 00/11] KVM: arm64: pvm: Add software VGICv3 and virtual timer support - ext4: prevent sleeping allocation in NOWAIT write path - !30367 Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - ext4: remove EXT4_GET_BLOCKS_IO_CREATE_EXT - ext4: simplify the mapping query logic in ext4_iomap_begin() - ext4: skip overwrite check for aligned non-extending DIO writes - ext4: remove unused unwritten parameter in ext4_dio_write_iter() - ext4: remove useless ext4_iomap_overwrite_ops - ext4: avoid starting handle when dio writing an unwritten extent - ext4: don't split extent before submitting I/O - !30233 Fix CVE-2026-98917 - !30235 Fix CVE-2026-98930 - !30368 wifi: mac80211: validate TX status rate metadata - !30378 tty: tty_port: restore TTY_IO_ERROR on activation failure - !30380 tty: port: fix tty_port_tty_vhangup() race - !30371 mtd: core: avoid double-free of OTP NVMEM device - urma: Fix the assignment before null check - !30386 RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - Revert "net/hinic5:Fix the missing rollback in the hinic5 XDP" - !30270 [OLK-6.6] AMD Venice additional patches for openEuler - !28385 [OLK-6.6] crypto: ccp: fix vpsp cmd ctx leak - !30382 fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - RDMA/hns: Fix UAF when late CQE arrives after drain QP timeout - !30365 bpf: Fix out-of-bounds btf->types write for split BTF - fs/dirty_pages: Fix fix UAF caused by unbalanced lock release in proc_buffer_open() - !30313 kabi: fix include helpers broken by the predefined 'linux' macro - tty: port: fix tty_port_tty_vhangup() race - tty: tty_port: restore TTY_IO_ERROR on activation failure - mtd: core: avoid double-free of OTP NVMEM device - wifi: mac80211: validate TX status rate metadata - bpf: Fix out-of-bounds btf->types write for split BTF - kabi: fix include helpers broken by the predefined 'linux' macro - KVM: arm64: pvm: Handle counter reads in the hyp path - KVM: arm64: pvm: Trap guest timer accesses and enforce EL0 permissions - KVM: arm64: pvm: Align timer capabilities and counter handling with RV timers - KVM: arm64: pvm: Wire RV timers into the KVM timer entry points - KVM: arm64: pvm: Add the software RV timer implementation - KVM: arm64: pvm: Deliver VGIC interrupts without hardware LRs - KVM: arm64: pvm: Emulate VGIC active priority registers - KVM: arm64: pvm: Route ICC accesses through register descriptors - KVM: arm64: pvm: Emulate the GICv3 CPU interface - KVM: arm64: Handle pending EL1 IRQ exceptions - KVM: arm64: pvm: Constrain virtual interrupt capabilities - Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown - iio: imu: adis16480: fix unprotected debugfs reads - iio: imu: adis16400: fix unprotected debugfs reads - iio: gyro: adis16136: fix unprotected debugfs reads - Bluetooth: MGMT: Fix status of pending commands flushed on power off - EDAC/amd64: Mask UMC chip select to the four implemented selects - x86/mce: Fix hardware debug register corruption on task migration - x86/MCE/AMD: Fix inverted interrupt enablement during storm handling - x86/amd_node: Avoid divide by zero on virtualized systems - RAS/AMD/ATL, EDAC/amd64: Only load ATL when needed - x86/mce: Set up the polling timer before CMCI discovery - x86/mce: Restore MCA polling interval halving - EDAC/amd64: Remove NUM_CONTROLLERS macro - x86/mce/inject: Remove call to mce_notify_irq() - x86/mce: Remove the redundant mce_hygon_feature_init() - x86/mce/threshold: Remove the redundant this_cpu_dec_return() - crypto: ccp: fix vpsp cmd ctx leak - KVM: s390: Fix IRQ injection with SIGP Stop and Store Status - parisc: Increase kernel stack size to 32kb - drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - Bluetooth: ISO: Serialize concurrent connect calls - unshare: don't drop active namespace references that were never taken - of/overlay: don't leak fragment references when changeset init fails - hwmon: (pwm-fan) Stop RPM timer before freeing tach data - !30459 [CVEAgent@OLK-6.6] Fix CVE-2026-99234 - !30468 [CVEAgent@OLK-6.6] Fix CVE-2026-99143 - !30322 urma: fix ipourma eid handler and register work concurrency - !30455 arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30491 [OLK-6.6] AMD Venice additional patches for openEuler - 2 - EDAC/amd64: Avoid a -Wformat-security warning - EDAC/amd64: Generate ctl_name string at runtime - !29993 [CVEAgent@OLK-6.6] Fix CVE-2026-98807 - !29964 [CVEAgent@OLK-6.6] Fix CVE-2026-98747 - !30393 ub/ubmem-vmmu: Remove the support_attr callback mechanism. - !30447 wifi: mac80211: minstrel_ht: validate fixed rate index - !30446 net: ena: fix MMIO read buffer leak on probe failure - tracing: Keep the predicate limit separate from program capacity - !30013 [CVEAgent@OLK-6.6] Fix CVE-2026-98855 - !30431 fix CVE-2026-98490 for OLK-6.6 - !30425 fix CVE-2026-98722 for OLK-6.6 - !30410 nvdimm: pmem: keep PREFLUSH before data writes - !30406 Fix CVE-2026-97480 for OLK-6.6 - !30204 x86/cpu/hygon: Report S5 reset status during boot - tracing: Unregister field variable histograms when the command fails - !30395 tty: fix saved termios reset race - arm64: tlb: Enable local TLBI on systems without FEAT_TLBID - !30031 drm/amdkfd: fix SMI event cross-process information leak - wifi: mac80211: minstrel_ht: validate fixed rate index - net: ena: fix MMIO read buffer leak on probe failure - net: openvswitch: conntrack: fix helper UAF due to extensions realloc - net: openvswitch: conntrack: remove 'add_helper' dead code - openvswitch: prepare for stolen verdict coming from conntrack and nat engine - net/sched: act_ct: avoid modifying shared unconfirmed ct entry - net/sched: act_ct: fix helper UAF due to extensions realloc - ub/ubmem-vmmu: Remove the support_attr callback mechanism. - mtd: block2mtd: Fix divide error when erase_size is zero - block2mtd: prevent direct access of bd_inode - nvdimm: pmem: keep PREFLUSH before data writes - tty: serial: 8250: protect against NULL uart->port.dev in register - serial: 8250: invert serial8250_register_8250_port() CIR condition - urma: fix ipourma eid handler and register work concurrency - tty: fix saved termios reset race - x86/cpu/hygon: Report S5 reset status during boot - drm/amdkfd: fix SMI event cross-process information leak - of/overlay: put property on deadprops only after changeset add succeeds - net/mlx5: Fix slab-out-of-bounds when handling team device events - serial: core: fix NULL pointer dereference in serial_core_unregister_port() - !30553 tracing: Reject incomplete event filter expressions - !30498 nfsd: split nfsd4_copy into transient and durable async copy objects - !30000 [CVEAgent@OLK-6.6] Fix CVE-2026-98822 - !30497 cdma: ratelimit hot-path error logs in kernel driver and header file code synchronization - tracing: Reject incomplete event filter expressions - !30546 [OLK-6.6] ub: fix UBASE port reporting and UNIC reset and DMA handling - !30481 [CVEAgent@OLK-6.6] Fix CVE-2026-99080 - !30483 [CVEAgent@OLK-6.6] Fix CVE-2026-99206 - !30388 Fix CVE-2026-99153 - !30390 Fix CVE-2026-99152 - !30387 Fix CVE-2026-99110 - !30391 Fix CVE-2026-99109 - !30479 [CVEAgent@OLK-6.6] Fix CVE-2026-99254 - !30538 scsi: libsas: Fix SMP IO deadlock during HA resume - !30537 ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30536 scsi: libsas: Add linkrate and sas_addr change detection in rediscover；scsi: libsas: Add sas_ex_phy_to_dev() helper - !30486 [CVEAgent@OLK-6.6] Fix CVE-2026-99247 - !30454 [OLK-6.6] Fix CVE-2026-97566 - !30453 [OLK-6.6] Fix CVE-2026-97432 - !30444 [OLK-6.6] Fix CVE-2026-43234 - !30403 x86/hygon: Fix FPDSS on Hygon - !30269 [OLK-6.6] update rnpvf driver to 1.2.0. - !30155 [OLK-6.6] Fix CVE-2026-74695 - !30153 [OLK-6.6] Fix CVE-2026-72494 - !30149 [OLK-6.6] Fix CVE-2026-74368 - !30092 [CVEAgent@OLK-6.6] Fix CVE-2026-99052 - !30090 [CVEAgent@OLK-6.6] Fix CVE-2026-99040 - !30057 [CVEAgent@OLK-6.6] Fix CVE-2026-98948 - !30086 [CVEAgent@OLK-6.6] Fix CVE-2026-99025 - !30105 [CVEAgent@OLK-6.6] Fix CVE-2026-99078 - !30106 [CVEAgent@OLK-6.6] Fix CVE-2026-99079 - ub: ubase: skip bandwidth queries on next-generation chips - net: unic: Fix TX/RX DMA ordering and cache sync - net: unic: serialize port deactivation with reset - ub: ubase: add ub port events handling and statistics - scsi: libsas: Fix SMP IO deadlock during HA resume - scsi: libsas: Add sas_ex_phy_to_dev() helper - scsi: libsas: Add linkrate and sas_addr change detection in rediscover - !30430 v8 arm64: Allow CPU0 to be nohz_full - ACPI: OSL: Use usleep_range() in acpi_os_sleep() - !30300 mm/gup: allow movable memory pinnable - !30487 urma: limit opt buf length in uburma ioctl commands - !29931 [CVEAgent@OLK-6.6] Fix CVE-2026-98570 - nfsd: split nfsd4_copy into transient and durable async copy objects - ub: cdma: header file code synchronization - ub: cdma: ratelimit hot-path error logs in kernel driver - x86: hygon: Fix FPDSS on Hygon - tracing: Do not initialize tracefs work if tracing is disabled - scsi: target: iscsi: Fix race in discovery auth updates - fs: Free any excess xarray nodes in clear_inode() - io_uring: don't flood a cancelling task with task_work - urma: limit opt buf length in uburma ioctl commands - mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 - wifi: iwlwifi: mvm: fix P2P-Device binding handling - team: avoid NETDEV_CHANGEMTU event when unregistering slave - arm64: defconfig: Enable CONFIG_PM_SLEEP_SMP_NONZERO_CPU and CONFIG_ARCH_SUSPEND_NONZERO_CPU - arm64: Allow boot CPU nohz_full to coexist with suspend and kexec - isolation: Check whether there exists a housekeeping CPU online - isolation: Do not check whether housekeeping CPUs are present - smb: client: reject SetEA requests that do not fit the request buffer - scsi: libiscsi: Validate the task named by a management response - scsi: libiscsi: Validate the ITT reflected in a Reject PDU - smb: client: fix heap overflow in cifs_do_set_acl() - rnpvf: update rnpvf driver to 1.2.0. - mm/gup: allow movable memory pinnable - rnpvf: update rnpvf driver to 1.2.0. - netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() - RDMA/irdma: Replace waitqueue and flag with completion - wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() - net/mlx5e: Prevent stale XSK buffer release on refill retry - net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry - selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts - KEYS: Fix add_key() race with keyring restriction - openvswitch: fix soft lockup in the netlink flow dump - mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() - wifi: mac80211: prevent AP VLAN tx from other interfaces - net: ipv6: keep room for the mac header in dst_dev_overhead() - !30530 [CVEAgent@OLK-6.6] Fix CVE-2026-99163 - !30532 [CVEAgent@OLK-6.6] Fix CVE-2026-99235 - !29765 Fix CVE-2026-98289 - !30230 Fix CVE-2026-97615 - !29790 Fix CVE-2026-93250 - !30510 [CVEAgent@OLK-6.6] Fix CVE-2026-99005 - !30506 [CVEAgent@OLK-6.6] Fix CVE-2026-98871 - !30307 feat/obmm-unified-switch-split-v4 - !30064 [CVEAgent@OLK-6.6] Fix CVE-2026-98972 - !30507 [CVEAgent@OLK-6.6] Fix CVE-2026-98883 - !30450 BBML3 bugfix - !30156 [OLK-6.6] Fix CVE-2026-68258 - !30154 [OLK-6.6] Fix CVE-2026-74729 - !30151 [OLK-6.6] Fix CVE-2026-74273 - !27793 [OLK-6.6] Fix CVE-2026-68421 - !27512 [OLK-6.6] Fix CVE-2026-64259 - !30146 [OLK-6.6] Fix CVE-2026-53109 - !30575 arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30567 scsi: hisi_sas: Clear PHY error counts on phyup - arm64: configs: fix duplicate Hisilicon SoC drivers block in openeuler_defconfig - !30472 [CVEAgent@OLK-6.6] Fix CVE-2026-99243 - scsi: hisi_sas: Clear PHY error counts on phyup - scsi:hisi_sas:Sync upstream timer_delete API changes in hisi_sas_v3_hw.c - tracing: Save the event file instead of the compatible histogram - tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields - drm/i915/gt: Unmask interrupts only when ACTIVE is true - serial: 8250_port: recognize UPIO_AU - crypto: ccp - Fix possible deadlock in SEV init failure path - obmm: pack the internal structs by field ordering - obmm: sysfs views over the switch: attributes, identity, lockless reads - obmm: generalized dual-backend gap mmap - obmm: export switch target wrap-up and validation consolidation - obmm: unified two-phase switch core (import target) - obmm: install mappings lazily from the backend fault paths - obmm: fix the pxm bound, the open TOCTOU and the teardown release - obmm: split the region shell from the memory backends - obmm: depend on TRANSPARENT_HUGEPAGE for the PMD fault paths - io-wq: order the exit bit against worker creation task work - mm/pfn_range_alloc: split block mappings in linear map updates - arm64/mm: make pte_present() recognize present-invalid entries - net: bridge: use option bits for CFM/MRP frame handlers - drm/amdkfd: Check bounds on CRIU restore queue type and mqd size - soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read - cxl/region: Block region delete during region creation - powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy - cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() - vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() - af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). - sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() - fuse-uring: make a fuse_req on SQE commit only findable after memcpy - !30591 [CVEAgent@OLK-6.6] Fix CVE-2026-99142 - !30590 [CVEAgent@OLK-6.6] Fix CVE-2026-99219 - !30594 [CVEAgent@OLK-6.6] Fix CVE-2026-99233 - !30600 urma: warn on slow TP driver callbacks - urma: warn on slow TP driver callbacks - tracing/histograms: Verify event_call identity when updating synth_event refcount - tracing: Check operator stack capacity before pushing - ftrace: Initialize modname and offset in print_rec() - !30602 [CVEAgent@OLK-6.6] Fix CVE-2026-99117 - !30605 [CVEAgent@OLK-6.6] Fix CVE-2026-99211 - !30604 [CVEAgent@OLK-6.6] Fix CVE-2026-99201 - netlink: reset skb headers before unicast and multicast filtering - netlink: avoid hashing the network namespace pointer - net: bridge: mcast: don't truncate the port group walk on teardown - !30597 [CVEAgent@OLK-6.6] Fix CVE-2026-99239 - !30582 v5 MOC bypass cache - !30610 iommu/io-pgtable-arm: Add support for contiguous hint - !30523 drivers:misc:sdma-dae: Open source sdma-dae driver to OLK-6.6 (already supported on olk-5.10) - !28122 [CVEAgent@OLK-6.6] Fix CVE-2026-89802 - !29350 [CVEAgent@OLK-6.6] Fix CVE-2026-97988 - !30473 Fix CVE-2026-97992 - !30150 [OLK-6.6] Fix CVE-2026-74527 - !30576 net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - !30544 [OLK-6.6] Fix CVE-2026-90057 - !30476 [OLK-6.6] fix CVE-2026-98936 - !30474 [OLK-6.6] fix CVE-2026-99059 - !30144 [OLK-6.6] Fix CVE-2026-64190 - !30311 [OLK-6.6]nser: add support for wangxun RDMA driver - iommu/io-pgtable-arm: Add support for contiguous hint - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn - openeuler: configs: arm64: Enable PBHA by default - arm64: mm: Introduce kernel param pbha - arm64: mm: Introduce prctl to control pbha behavior - arm64: mm: Set flag VM_PBHA_BIT0 for global init task - arm64: mm: Introduce procfs interface to update PBHA0 bit - arm64: mm: Set PBHA0 bit for VM_PBHA_BIT0 - arm64: mm: Introduce VM_PBHA_BIT0 to enable pbha bit0 for single vma - arm64: mm: Show PBHA bit 59 as PBHA0 in ptdump - arm64: mm: Update kernel pte entries if pbha bit0 enabled - arm64: mm: Detect and enable PBHA bit0 at early startup - arm64: cpufeature: Enable PBHA for stage1 early via FDT - Documentation: arm64: Describe the support and expectations for PBHA - KVM: arm64: Configure PBHA bits for stage2 - arm64: mm: Add pgprot_pbha() to allow drivers to request PBHA values - arm64: cpufeature: Enable PBHA bits for stage1 - dt-bindings: arm: Add binding for Page Based Hardware Attributes - dt-bindings: Rename the description of cpu nodes cpu.yaml - KVM: arm64: Detect and enable PBHA for stage2 - net: wangxun: nse: sync OOT nse-1.0.3 fixes and optimizations - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() - drivers:misc:sdma-dae: adapt driver interfaces for OLK-6.6 - net: team: fix NULL pointer dereference in team_xmit during mode change - net: team: Rename port_disabled team mode op to port_tx_disabled - net: team: Remove unused team_mode_op, port_enabled - wifi: ath11k: reset ar->num_stations on hardware start - wireguard: noise: reject response consumption after intermediate initiation - vhost-vdpa: protect config_ctx from being freed under the config callback - x86/arm64: config: enable the Wangxun nser RDMA driver - net: wangxun: nser: add RDMA support for 100GbE NICs - octeontx2-af: Block VFs from clobbering special CGX PKIND state - vhost: invalidate vring access on IOTLB transitions - drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op - drivers:misc:sdma-dae: Remove redundant print during mm exit and resume. - drivers:misc:sdma-dae: Revert optimize kernel code - drivers:misc:sdma-dae: Revert add channel depth info in debugfs - drivers:misc:sdma-dae: Revert Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Write the CQ head pointer correctly. - drivers:misc:sdma-dae: Remove interference print. - drivers:misc:sdma-dae: Checking the address alignment - drivers:misc:sdma-dae: add NULL judgement of global variables - drivers:misc:sdma-dae: add channel depth info in debugfs - drivers:misc:sdma-dae: optimize kernel code - drivers:misc:sdma-dae: fix incorrect debugfs print - drivers:misc:sdma-dae: sdma fix uncorrect sleep time - drivers:misc:sdma-dae: fix incorrect kmalloc flag - drivers:misc:sdma-dae: sdma fix PUAF problem fork risk - drivers:misc:sdma-dae: modify ttl_processes reduce logic - drivers:misc:sdma-dae: remove unnecessary return in void function - drivers:misc:sdma-dae: fix incorrect resource release - drivers:misc:sdma-dae: remove lock while pausing channels - drivers:misc:sdma-dae: add mmu_notifier - drivers:misc:sdma-dae: add MODULE_VERSION to control version - drivers:misc:sdma-dae: add print in exceptional branch - drivers:misc:sdma-dae: bugfix of channel operation - drivers:misc:sdma-dae: change authority of sdma device - drivers:misc:sdma-dae: add channel ida validation - drivers:misc:sdma-dae: add vma_ops to avoid mremap error - drivers:misc:sdma-dae: add fast mode - drivers:misc:sdma-dae: not expose sq_tail write and add validation of cq_head - drivers:misc:sdma-dae: add debugfs of sdma-dae - drivers:misc:sdma-dae: fix icsl code check problems - drivers:misc:sdma-dae: fix input validate problems - drivers:misc:sdma-dae: fix interrupt handle logic - drivers:misc:sdma-dae: not compile sdma-dae by default - drivers:misc:sdma-dae: enable sdma_dae for arm64 - drivers:misc:sdma-dae: support page fault preprocess - drivers:misc:sdma-dae: support interrupt init and handle - drivers:misc:sdma-dae: support sqe task send and execute - drivers:misc:sdma-dae: support channel management - drivers:misc:sdma-dae: support getting streamID - drivers:misc:sdma-dae: support initializ sdma driver