From 3a66cc0a538616af1fa2dd06553427c679498d14 Mon Sep 17 00:00:00 2001
From: "Herton R. Krzesinski" <herton@redhat.com>
Date: Wed, 18 Jan 2023 13:22:36 +0000
Subject: [PATCH] kernel-5.14.0-238.el9

* Wed Jan 18 2023 Herton R. Krzesinski <herton@redhat.com> [5.14.0-238.el9]
- net/mlx5: Eswitch, Fix forwarding decision to uplink (Mohammad Kabat) [2112940]
- RDMA/mlx5: Use the proper number of ports (Mohammad Kabat) [2112940]
- net/mlx5: Fix driver use of uninitialized timeout (Mohammad Kabat) [2112940]
- net/mlx5e: Ring the TX doorbell on DMA errors (Mohammad Kabat) [2112940]
- net/mlx5e: Fix capability check for updating vnic env counters (Mohammad Kabat) [2112940]
- net/mlx5e: CT: Use own workqueue instead of mlx5e priv (Mohammad Kabat) [2112940]
- net/mlx5: Lag, correct get the port select mode str (Mohammad Kabat) [2112940]
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Mohammad Kabat) [2112940]
- net/mlx5e: kTLS, Fix build time constant test in RX (Mohammad Kabat) [2112940]
- net/mlx5e: kTLS, Fix build time constant test in TX (Mohammad Kabat) [2112940]
- net/mlx5: Lag, decouple FDB selection and shared FDB (Mohammad Kabat) [2112940]
- net/mlx5: TC, allow offload from uplink to other PF's VF (Mohammad Kabat) [2112940]
- net/mlx5e: Fix matchall police parameters validation (Mohammad Kabat) [2112940]
- mellanox: mlx5: avoid uninitialized variable warning with gcc-12 (Mohammad Kabat) [2112940]
- net/mlx5: E-Switch, pair only capable devices (Mohammad Kabat) [2112940]
- net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules (Mohammad Kabat) [2112940]
- Revert "net/mlx5e: Allow relaxed ordering over VFs" (Mohammad Kabat) [2112940]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Mohammad Kabat) [2112940]
- net/mlx5e: Update netdev features after changing XDP state (Mohammad Kabat) [2112940]
- vdpa/mlx5: Add support for reading descriptor statistics (Mohammad Kabat) [2112940]
- RDMA/mlx5: Remove duplicate pointer assignment in mlx5_ib_alloc_implicit_mr() (Mohammad Kabat) [2112940]
- net/mlx5: fix multiple definitions of mlx5_lag_mpesw_init / mlx5_lag_mpesw_cleanup (Mohammad Kabat) [2112940]
- net/mlx5: Support multiport eswitch mode (Mohammad Kabat) [2112940]
- net/mlx5: Remove unused argument (Mohammad Kabat) [2112940]
- net/mlx5: Lag, refactor lag state machine (Mohammad Kabat) [2112940]
- net/mlx5e: Add XDP SQs to uplink representors steering tables (Mohammad Kabat) [2112940]
- net/mlx5e: Correct the calculation of max channels for rep (Mohammad Kabat) [2112940]
- net/mlx5e: CT: Add ct driver counters (Mohammad Kabat) [2112940]
- net/mlx5e: Allow relaxed ordering over VFs (Mohammad Kabat) [2112940]
- net/mlx5e: Support partial GSO for tunnels over vlans (Mohammad Kabat) [2112940]
- net/mlx5e: IPoIB, Improve ethtool rxnfc callback structure in IPoIB (Mohammad Kabat) [2112940]
- net/mlx5e: Allocate virtually contiguous memory for reps structures (Mohammad Kabat) [2112940]
- net/mlx5e: Allocate virtually contiguous memory for VLANs list (Mohammad Kabat) [2112940]
- net/mlx5: Allocate virtually contiguous memory in pci_irq.c (Mohammad Kabat) [2112940]
- net/mlx5: Allocate virtually contiguous memory in vport.c (Mohammad Kabat) [2112940]
- net/mlx5: Inline db alloc API function (Mohammad Kabat) [2112940]
- net/mlx5: Add last command failure syndrome to debugfs (Mohammad Kabat) [2112940]
- net/mlx5: sparse: error: context imbalance in 'mlx5_vf_get_core_dev' (Mohammad Kabat) [2112940]
- net/mlx5: Expose mlx5_sriov_blocking_notifier_register / unregister APIs (Mohammad Kabat) [2112940]
- net/mlx5: Lag, add debugfs to query hardware lag state (Mohammad Kabat) [2112940]
- net/mlx5: Lag, use buckets in hash mode (Mohammad Kabat) [2112940]
- net/mlx5: Lag, refactor dmesg print (Mohammad Kabat) [2112940]
- net/mlx5: Support devices with more than 2 ports (Mohammad Kabat) [2112940]
- net/mlx5: Lag, use actual number of lag ports (Mohammad Kabat) [2112940]
- net/mlx5: Lag, use hash when in roce lag on 4 ports (Mohammad Kabat) [2112940]
- net/mlx5: Lag, support single FDB only on 2 ports (Mohammad Kabat) [2112940]
- net/mlx5: Lag, store number of ports inside lag object (Mohammad Kabat) [2112940]
- net/mlx5: Lag, filter non compatible devices (Mohammad Kabat) [2112940]
- net/mlx5: Lag, use lag lock (Mohammad Kabat) [2112940]
- net/mlx5: Lag, move E-Switch prerequisite check into lag code (Mohammad Kabat) [2112940]
- net/mlx5: devcom only supports 2 ports (Mohammad Kabat) [2112940]
- net/mlx5: Lag, expose number of lag ports (Mohammad Kabat) [2112940]
- net/mlx5: Increase FW pre-init timeout for health recovery (Mohammad Kabat) [2112940]
- net/mlx5: Add exit route when waiting for FW (Mohammad Kabat) [2112940]
- net/mlx5: Don't perform lookup after already known sec_path (Mohammad Kabat) [2112940]
- net/mlx5: Cleanup XFRM attributes struct (Mohammad Kabat) [2112940]
- net/mlx5: Remove not-supported ICV length (Mohammad Kabat) [2112940]
- net/mlx5: Simplify IPsec capabilities logic (Mohammad Kabat) [2112940]
- net/mlx5: Don't advertise IPsec netdev support for non-IPsec device (Mohammad Kabat) [2112940]
- net/mlx5: Make sure that no dangling IPsec FS pointers exist (Mohammad Kabat) [2112940]
- net/mlx5: Clean IPsec FS add/delete rules (Mohammad Kabat) [2112940]
- net/mlx5: Simplify HW context interfaces by using SA entry (Mohammad Kabat) [2112940]
- net/mlx5: Remove indirections from esp functions (Mohammad Kabat) [2112940]
- net/mlx5: Merge various control path IPsec headers into one file (Mohammad Kabat) [2112940]
- net/mlx5: Remove useless validity check (Mohammad Kabat) [2112940]
- net/mlx5: Store IPsec ESN update work in XFRM state (Mohammad Kabat) [2112940]
- net/mlx5: Reduce useless indirection in IPsec FS add/delete flows (Mohammad Kabat) [2112940]
- net/mlx5: Don't hide fallback to software IPsec in FS code (Mohammad Kabat) [2112940]
- net/mlx5: Check IPsec TX flow steering namespace in advance (Mohammad Kabat) [2112940]
- net/mlx5: Simplify IPsec flow steering init/cleanup functions (Mohammad Kabat) [2112940]
- net/mlx5: fs, an FTE should have no dests when deleted (Mohammad Kabat) [2112940]
- net/mlx5: fs, call the deletion function of the node (Mohammad Kabat) [2112940]
- net/mlx5: fs, delete the FTE when there are no rules attached to it (Mohammad Kabat) [2112940]
- net/mlx5: fs, do proper bookkeeping for forward destinations (Mohammad Kabat) [2112940]
- net/mlx5: fs, add unused destination type (Mohammad Kabat) [2112940]
- net/mlx5: fs, jump to exit point and don't fall through (Mohammad Kabat) [2112940]
- net/mlx5: fs, refactor software deletion rule (Mohammad Kabat) [2112940]
- net/mlx5: fs, split software and IFC flow destination definitions (Mohammad Kabat) [2112940]
- net/mlx5e: TC, set proper dest type (Mohammad Kabat) [2112940]
- net/mlx5e: Remove unused mlx5e_dcbnl_build_rep_netdev function (Mohammad Kabat) [2112940]
- net/mlx5e: Drop error CQE handling from the XSK RX handler (Mohammad Kabat) [2112940]
- net/mlx5: Print initializing field in case of timeout (Mohammad Kabat) [2112940]
- net/mlx5: Delete redundant default assignment of runtime devlink params (Mohammad Kabat) [2112940]
- net/mlx5: Remove useless kfree (Mohammad Kabat) [2112940]
- net/mlx5: use kvfree() for kvzalloc() in mlx5_ct_fs_smfs_matcher_create (Mohammad Kabat) [2112940]
- RDMA/mlx5: Clean UMR QP type flow from mlx5_ib_post_send() (Mohammad Kabat) [2112940]
- RDMA/mlx5: Use mlx5_umr_post_send_wait() to update xlt (Mohammad Kabat) [2112940]
- RDMA/mlx5: Use mlx5_umr_post_send_wait() to update MR pas (Mohammad Kabat) [2112940]
- RDMA/mlx5: Move creation and free of translation tables to umr.c (Mohammad Kabat) [2112940]
- RDMA/mlx5: Use mlx5_umr_post_send_wait() to rereg pd access (Mohammad Kabat) [2112940]
- RDMA/mlx5: Use mlx5_umr_post_send_wait() to revoke MRs (Mohammad Kabat) [2112940]
- RDMA/mlx5: Introduce mlx5_umr_post_send_wait() (Mohammad Kabat) [2112940]
- RDMA/mlx5: Expose wqe posting helpers outside of wr.c (Mohammad Kabat) [2112940]
- RDMA/mlx5: Simplify get_umr_update_access_mask() (Mohammad Kabat) [2112940]
- RDMA/mlx5: Move mkey ctrl segment logic to umr.c (Mohammad Kabat) [2112940]
- RDMA/mlx5: Move umr checks to umr.h (Mohammad Kabat) [2112940]
- RDMA/mlx5: Move init and cleanup of UMR to umr.c (Mohammad Kabat) [2112940]
- RDMA/mlx5: Fix flow steering egress flow (Mohammad Kabat) [2112940]
- mlx5, xsk: Diversify return values from xsk_wakeup call paths (Mohammad Kabat) [2112940]
- net/mlx5: Remove not-implemented IPsec capabilities (Mohammad Kabat) [2112940]
- net/mlx5: Remove ipsec_ops function table (Mohammad Kabat) [2112940]
- net/mlx5: Reduce kconfig complexity while building crypto support (Mohammad Kabat) [2112940]
- net/mlx5: Move IPsec file to relevant directory (Mohammad Kabat) [2112940]
- net/mlx5: Remove not-needed IPsec config (Mohammad Kabat) [2112940]
- net/mlx5: Align flow steering allocation namespace to common style (Mohammad Kabat) [2112940]
- net/mlx5: Unify device IPsec capabilities check (Mohammad Kabat) [2112940]
- net/mlx5: Remove useless IPsec device checks (Mohammad Kabat) [2112940]
- net/mlx5: Remove ipsec vs. ipsec offload file separation (Mohammad Kabat) [2112940]
- RDMA/mlx5: Drop crypto flow steering API (Mohammad Kabat) [2112940]
- RDMA/mlx5: Delete never supported IPsec flow action (Mohammad Kabat) [2112940]
- net/mlx5: Remove FPGA ipsec specific statistics (Mohammad Kabat) [2112940]
- net/mlx5: Remove XFRM no_trailer flag (Mohammad Kabat) [2112940]
- net/mlx5: Remove not-used IDA field from IPsec struct (Mohammad Kabat) [2112940]
- net/mlx5: Delete metadata handling logic (Mohammad Kabat) [2112940]
- net/mlx5_fpga: Drop INNOVA IPsec support (Mohammad Kabat) [2112940]
- net/mlx5: Cleanup kTLS function names and their exposure (Mohammad Kabat) [2112940]
- net/mlx5: Remove tls vs. ktls separation as it is the same (Mohammad Kabat) [2112940]
- net/mlx5: Remove indirection in TLS build (Mohammad Kabat) [2112940]
- net/mlx5: Reliably return TLS device capabilities (Mohammad Kabat) [2112940]
- net/mlx5_fpga: Drop INNOVA TLS support (Mohammad Kabat) [2112940]
Resolves: rhbz#2112940

Signed-off-by: Herton R. Krzesinski <herton@redhat.com>
---
 Makefile.rhelver                  |   2 +-
 kernel-aarch64-debug-rhel.config  |   5 --
 kernel-aarch64-rhel.config        |   5 --
 kernel-ppc64le-debug-rhel.config  |   5 --
 kernel-ppc64le-rhel.config        |   5 --
 kernel-s390x-debug-rhel.config    |   5 --
 kernel-s390x-rhel.config          |   5 --
 kernel-s390x-zfcpdump-rhel.config |   5 --
 kernel-x86_64-debug-rhel.config   |   5 --
 kernel-x86_64-rhel.config         |   5 --
 kernel.spec                       | 130 +++++++++++++++++++++++++++++-
 sources                           |   6 +-
 12 files changed, 130 insertions(+), 53 deletions(-)

diff --git a/Makefile.rhelver b/Makefile.rhelver
index d75bc83..5adbace 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 2
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 237
+RHEL_RELEASE = 238
 
 #
 # ZSTREAM
diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config
index 7f6cb2c..525d6ad 100644
--- a/kernel-aarch64-debug-rhel.config
+++ b/kernel-aarch64-debug-rhel.config
@@ -3163,7 +3163,6 @@ CONFIG_MLX4_CORE=m
 CONFIG_MLX4_EN_DCB=y
 CONFIG_MLX4_EN=m
 CONFIG_MLX4_INFINIBAND=m
-CONFIG_MLX5_ACCEL=y
 CONFIG_MLX5_CLS_ACT=y
 CONFIG_MLX5_CORE_EN_DCB=y
 CONFIG_MLX5_CORE_EN=y
@@ -3174,17 +3173,13 @@ CONFIG_MLX5_EN_IPSEC=y
 CONFIG_MLX5_EN_RXNFC=y
 CONFIG_MLX5_EN_TLS=y
 CONFIG_MLX5_ESWITCH=y
-# CONFIG_MLX5_FPGA_IPSEC is not set
-# CONFIG_MLX5_FPGA_TLS is not set
 CONFIG_MLX5_FPGA=y
 CONFIG_MLX5_INFINIBAND=m
-CONFIG_MLX5_IPSEC=y
 CONFIG_MLX5_MPFS=y
 CONFIG_MLX5_SF=y
 CONFIG_MLX5_SW_STEERING=y
 CONFIG_MLX5_TC_CT=y
 CONFIG_MLX5_TC_SAMPLE=y
-CONFIG_MLX5_TLS=y
 # CONFIG_MLX5_VDPA_NET is not set
 # CONFIG_MLX90614 is not set
 # CONFIG_MLX90632 is not set
diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config
index 93b9e2a..9c5b78c 100644
--- a/kernel-aarch64-rhel.config
+++ b/kernel-aarch64-rhel.config
@@ -3142,7 +3142,6 @@ CONFIG_MLX4_CORE=m
 CONFIG_MLX4_EN_DCB=y
 CONFIG_MLX4_EN=m
 CONFIG_MLX4_INFINIBAND=m
-CONFIG_MLX5_ACCEL=y
 CONFIG_MLX5_CLS_ACT=y
 CONFIG_MLX5_CORE_EN_DCB=y
 CONFIG_MLX5_CORE_EN=y
@@ -3153,17 +3152,13 @@ CONFIG_MLX5_EN_IPSEC=y
 CONFIG_MLX5_EN_RXNFC=y
 CONFIG_MLX5_EN_TLS=y
 CONFIG_MLX5_ESWITCH=y
-# CONFIG_MLX5_FPGA_IPSEC is not set
-# CONFIG_MLX5_FPGA_TLS is not set
 CONFIG_MLX5_FPGA=y
 CONFIG_MLX5_INFINIBAND=m
-CONFIG_MLX5_IPSEC=y
 CONFIG_MLX5_MPFS=y
 CONFIG_MLX5_SF=y
 CONFIG_MLX5_SW_STEERING=y
 CONFIG_MLX5_TC_CT=y
 CONFIG_MLX5_TC_SAMPLE=y
-CONFIG_MLX5_TLS=y
 # CONFIG_MLX5_VDPA_NET is not set
 # CONFIG_MLX90614 is not set
 # CONFIG_MLX90632 is not set
diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config
index a7ba23c..2d734d1 100644
--- a/kernel-ppc64le-debug-rhel.config
+++ b/kernel-ppc64le-debug-rhel.config
@@ -2884,7 +2884,6 @@ CONFIG_MISC_RTSX_USB=m
 CONFIG_MLX4_EN_DCB=y
 CONFIG_MLX4_EN=m
 CONFIG_MLX4_INFINIBAND=m
-CONFIG_MLX5_ACCEL=y
 CONFIG_MLX5_CLS_ACT=y
 CONFIG_MLX5_CORE_EN_DCB=y
 CONFIG_MLX5_CORE_EN=y
@@ -2895,17 +2894,13 @@ CONFIG_MLX5_EN_IPSEC=y
 CONFIG_MLX5_EN_RXNFC=y
 CONFIG_MLX5_EN_TLS=y
 CONFIG_MLX5_ESWITCH=y
-# CONFIG_MLX5_FPGA_IPSEC is not set
-# CONFIG_MLX5_FPGA_TLS is not set
 CONFIG_MLX5_FPGA=y
 CONFIG_MLX5_INFINIBAND=m
-CONFIG_MLX5_IPSEC=y
 CONFIG_MLX5_MPFS=y
 CONFIG_MLX5_SF=y
 CONFIG_MLX5_SW_STEERING=y
 CONFIG_MLX5_TC_CT=y
 CONFIG_MLX5_TC_SAMPLE=y
-CONFIG_MLX5_TLS=y
 # CONFIG_MLX5_VDPA_NET is not set
 # CONFIG_MLX90614 is not set
 # CONFIG_MLX90632 is not set
diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config
index 57cc4a1..ae772ab 100644
--- a/kernel-ppc64le-rhel.config
+++ b/kernel-ppc64le-rhel.config
@@ -2864,7 +2864,6 @@ CONFIG_MISC_RTSX_USB=m
 CONFIG_MLX4_EN_DCB=y
 CONFIG_MLX4_EN=m
 CONFIG_MLX4_INFINIBAND=m
-CONFIG_MLX5_ACCEL=y
 CONFIG_MLX5_CLS_ACT=y
 CONFIG_MLX5_CORE_EN_DCB=y
 CONFIG_MLX5_CORE_EN=y
@@ -2875,17 +2874,13 @@ CONFIG_MLX5_EN_IPSEC=y
 CONFIG_MLX5_EN_RXNFC=y
 CONFIG_MLX5_EN_TLS=y
 CONFIG_MLX5_ESWITCH=y
-# CONFIG_MLX5_FPGA_IPSEC is not set
-# CONFIG_MLX5_FPGA_TLS is not set
 CONFIG_MLX5_FPGA=y
 CONFIG_MLX5_INFINIBAND=m
-CONFIG_MLX5_IPSEC=y
 CONFIG_MLX5_MPFS=y
 CONFIG_MLX5_SF=y
 CONFIG_MLX5_SW_STEERING=y
 CONFIG_MLX5_TC_CT=y
 CONFIG_MLX5_TC_SAMPLE=y
-CONFIG_MLX5_TLS=y
 # CONFIG_MLX5_VDPA_NET is not set
 # CONFIG_MLX90614 is not set
 # CONFIG_MLX90632 is not set
diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config
index dc79b2e..e7518c9 100644
--- a/kernel-s390x-debug-rhel.config
+++ b/kernel-s390x-debug-rhel.config
@@ -2877,7 +2877,6 @@ CONFIG_MISC_RTSX_USB=m
 CONFIG_MLX4_EN_DCB=y
 CONFIG_MLX4_EN=m
 CONFIG_MLX4_INFINIBAND=m
-CONFIG_MLX5_ACCEL=y
 CONFIG_MLX5_CLS_ACT=y
 CONFIG_MLX5_CORE_EN_DCB=y
 CONFIG_MLX5_CORE_EN=y
@@ -2888,17 +2887,13 @@ CONFIG_MLX5_EN_IPSEC=y
 CONFIG_MLX5_EN_RXNFC=y
 CONFIG_MLX5_EN_TLS=y
 CONFIG_MLX5_ESWITCH=y
-# CONFIG_MLX5_FPGA_IPSEC is not set
-# CONFIG_MLX5_FPGA_TLS is not set
 CONFIG_MLX5_FPGA=y
 CONFIG_MLX5_INFINIBAND=m
-CONFIG_MLX5_IPSEC=y
 CONFIG_MLX5_MPFS=y
 CONFIG_MLX5_SF=y
 CONFIG_MLX5_SW_STEERING=y
 CONFIG_MLX5_TC_CT=y
 CONFIG_MLX5_TC_SAMPLE=y
-CONFIG_MLX5_TLS=y
 # CONFIG_MLX5_VDPA_NET is not set
 # CONFIG_MLX90614 is not set
 # CONFIG_MLX90632 is not set
diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config
index c59ff44..ebb0a1a 100644
--- a/kernel-s390x-rhel.config
+++ b/kernel-s390x-rhel.config
@@ -2857,7 +2857,6 @@ CONFIG_MISC_RTSX_USB=m
 CONFIG_MLX4_EN_DCB=y
 CONFIG_MLX4_EN=m
 CONFIG_MLX4_INFINIBAND=m
-CONFIG_MLX5_ACCEL=y
 CONFIG_MLX5_CLS_ACT=y
 CONFIG_MLX5_CORE_EN_DCB=y
 CONFIG_MLX5_CORE_EN=y
@@ -2868,17 +2867,13 @@ CONFIG_MLX5_EN_IPSEC=y
 CONFIG_MLX5_EN_RXNFC=y
 CONFIG_MLX5_EN_TLS=y
 CONFIG_MLX5_ESWITCH=y
-# CONFIG_MLX5_FPGA_IPSEC is not set
-# CONFIG_MLX5_FPGA_TLS is not set
 CONFIG_MLX5_FPGA=y
 CONFIG_MLX5_INFINIBAND=m
-CONFIG_MLX5_IPSEC=y
 CONFIG_MLX5_MPFS=y
 CONFIG_MLX5_SF=y
 CONFIG_MLX5_SW_STEERING=y
 CONFIG_MLX5_TC_CT=y
 CONFIG_MLX5_TC_SAMPLE=y
-CONFIG_MLX5_TLS=y
 # CONFIG_MLX5_VDPA_NET is not set
 # CONFIG_MLX90614 is not set
 # CONFIG_MLX90632 is not set
diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config
index f27cc13..fc263e7 100644
--- a/kernel-s390x-zfcpdump-rhel.config
+++ b/kernel-s390x-zfcpdump-rhel.config
@@ -2870,7 +2870,6 @@ CONFIG_MISC_RTSX_USB=m
 CONFIG_MLX4_EN_DCB=y
 CONFIG_MLX4_EN=m
 CONFIG_MLX4_INFINIBAND=m
-CONFIG_MLX5_ACCEL=y
 CONFIG_MLX5_CLS_ACT=y
 CONFIG_MLX5_CORE_EN_DCB=y
 CONFIG_MLX5_CORE_EN=y
@@ -2881,17 +2880,13 @@ CONFIG_MLX5_EN_IPSEC=y
 CONFIG_MLX5_EN_RXNFC=y
 CONFIG_MLX5_EN_TLS=y
 CONFIG_MLX5_ESWITCH=y
-# CONFIG_MLX5_FPGA_IPSEC is not set
-# CONFIG_MLX5_FPGA_TLS is not set
 CONFIG_MLX5_FPGA=y
 CONFIG_MLX5_INFINIBAND=m
-CONFIG_MLX5_IPSEC=y
 CONFIG_MLX5_MPFS=y
 CONFIG_MLX5_SF=y
 CONFIG_MLX5_SW_STEERING=y
 CONFIG_MLX5_TC_CT=y
 CONFIG_MLX5_TC_SAMPLE=y
-CONFIG_MLX5_TLS=y
 # CONFIG_MLX5_VDPA_NET is not set
 # CONFIG_MLX90614 is not set
 # CONFIG_MLX90632 is not set
diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config
index 0a8c705..578b024 100644
--- a/kernel-x86_64-debug-rhel.config
+++ b/kernel-x86_64-debug-rhel.config
@@ -3061,7 +3061,6 @@ CONFIG_MISC_RTSX_USB=m
 CONFIG_MLX4_EN_DCB=y
 CONFIG_MLX4_EN=m
 CONFIG_MLX4_INFINIBAND=m
-CONFIG_MLX5_ACCEL=y
 CONFIG_MLX5_CLS_ACT=y
 CONFIG_MLX5_CORE_EN_DCB=y
 CONFIG_MLX5_CORE_EN=y
@@ -3072,17 +3071,13 @@ CONFIG_MLX5_EN_IPSEC=y
 CONFIG_MLX5_EN_RXNFC=y
 CONFIG_MLX5_EN_TLS=y
 CONFIG_MLX5_ESWITCH=y
-# CONFIG_MLX5_FPGA_IPSEC is not set
-# CONFIG_MLX5_FPGA_TLS is not set
 CONFIG_MLX5_FPGA=y
 CONFIG_MLX5_INFINIBAND=m
-CONFIG_MLX5_IPSEC=y
 CONFIG_MLX5_MPFS=y
 CONFIG_MLX5_SF=y
 CONFIG_MLX5_SW_STEERING=y
 CONFIG_MLX5_TC_CT=y
 CONFIG_MLX5_TC_SAMPLE=y
-CONFIG_MLX5_TLS=y
 CONFIG_MLX5_VDPA_NET=m
 # CONFIG_MLX90614 is not set
 # CONFIG_MLX90632 is not set
diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config
index 2aae55e..01765aa 100644
--- a/kernel-x86_64-rhel.config
+++ b/kernel-x86_64-rhel.config
@@ -3041,7 +3041,6 @@ CONFIG_MISC_RTSX_USB=m
 CONFIG_MLX4_EN_DCB=y
 CONFIG_MLX4_EN=m
 CONFIG_MLX4_INFINIBAND=m
-CONFIG_MLX5_ACCEL=y
 CONFIG_MLX5_CLS_ACT=y
 CONFIG_MLX5_CORE_EN_DCB=y
 CONFIG_MLX5_CORE_EN=y
@@ -3052,17 +3051,13 @@ CONFIG_MLX5_EN_IPSEC=y
 CONFIG_MLX5_EN_RXNFC=y
 CONFIG_MLX5_EN_TLS=y
 CONFIG_MLX5_ESWITCH=y
-# CONFIG_MLX5_FPGA_IPSEC is not set
-# CONFIG_MLX5_FPGA_TLS is not set
 CONFIG_MLX5_FPGA=y
 CONFIG_MLX5_INFINIBAND=m
-CONFIG_MLX5_IPSEC=y
 CONFIG_MLX5_MPFS=y
 CONFIG_MLX5_SF=y
 CONFIG_MLX5_SW_STEERING=y
 CONFIG_MLX5_TC_CT=y
 CONFIG_MLX5_TC_SAMPLE=y
-CONFIG_MLX5_TLS=y
 CONFIG_MLX5_VDPA_NET=m
 # CONFIG_MLX90614 is not set
 # CONFIG_MLX90632 is not set
diff --git a/kernel.spec b/kernel.spec
index 54f3ca9..9bec3ff 100755
--- a/kernel.spec
+++ b/kernel.spec
@@ -119,15 +119,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 237
+%define pkgrelease 238
 %define kversion 5
-%define tarfile_release 5.14.0-237.el9
+%define tarfile_release 5.14.0-238.el9
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 237%{?buildid}%{?dist}
+%define specrelease 238%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-237.el9
+%define kabiversion 5.14.0-238.el9
 
 #
 # End of genspec.sh variables
@@ -3110,6 +3110,128 @@ fi
 #
 #
 %changelog
+* Wed Jan 18 2023 Herton R. Krzesinski <herton@redhat.com> [5.14.0-238.el9]
+- net/mlx5: Eswitch, Fix forwarding decision to uplink (Mohammad Kabat) [2112940]
+- RDMA/mlx5: Use the proper number of ports (Mohammad Kabat) [2112940]
+- net/mlx5: Fix driver use of uninitialized timeout (Mohammad Kabat) [2112940]
+- net/mlx5e: Ring the TX doorbell on DMA errors (Mohammad Kabat) [2112940]
+- net/mlx5e: Fix capability check for updating vnic env counters (Mohammad Kabat) [2112940]
+- net/mlx5e: CT: Use own workqueue instead of mlx5e priv (Mohammad Kabat) [2112940]
+- net/mlx5: Lag, correct get the port select mode str (Mohammad Kabat) [2112940]
+- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Mohammad Kabat) [2112940]
+- net/mlx5e: kTLS, Fix build time constant test in RX (Mohammad Kabat) [2112940]
+- net/mlx5e: kTLS, Fix build time constant test in TX (Mohammad Kabat) [2112940]
+- net/mlx5: Lag, decouple FDB selection and shared FDB (Mohammad Kabat) [2112940]
+- net/mlx5: TC, allow offload from uplink to other PF's VF (Mohammad Kabat) [2112940]
+- net/mlx5e: Fix matchall police parameters validation (Mohammad Kabat) [2112940]
+- mellanox: mlx5: avoid uninitialized variable warning with gcc-12 (Mohammad Kabat) [2112940]
+- net/mlx5: E-Switch, pair only capable devices (Mohammad Kabat) [2112940]
+- net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules (Mohammad Kabat) [2112940]
+- Revert "net/mlx5e: Allow relaxed ordering over VFs" (Mohammad Kabat) [2112940]
+- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Mohammad Kabat) [2112940]
+- net/mlx5e: Update netdev features after changing XDP state (Mohammad Kabat) [2112940]
+- vdpa/mlx5: Add support for reading descriptor statistics (Mohammad Kabat) [2112940]
+- RDMA/mlx5: Remove duplicate pointer assignment in mlx5_ib_alloc_implicit_mr() (Mohammad Kabat) [2112940]
+- net/mlx5: fix multiple definitions of mlx5_lag_mpesw_init / mlx5_lag_mpesw_cleanup (Mohammad Kabat) [2112940]
+- net/mlx5: Support multiport eswitch mode (Mohammad Kabat) [2112940]
+- net/mlx5: Remove unused argument (Mohammad Kabat) [2112940]
+- net/mlx5: Lag, refactor lag state machine (Mohammad Kabat) [2112940]
+- net/mlx5e: Add XDP SQs to uplink representors steering tables (Mohammad Kabat) [2112940]
+- net/mlx5e: Correct the calculation of max channels for rep (Mohammad Kabat) [2112940]
+- net/mlx5e: CT: Add ct driver counters (Mohammad Kabat) [2112940]
+- net/mlx5e: Allow relaxed ordering over VFs (Mohammad Kabat) [2112940]
+- net/mlx5e: Support partial GSO for tunnels over vlans (Mohammad Kabat) [2112940]
+- net/mlx5e: IPoIB, Improve ethtool rxnfc callback structure in IPoIB (Mohammad Kabat) [2112940]
+- net/mlx5e: Allocate virtually contiguous memory for reps structures (Mohammad Kabat) [2112940]
+- net/mlx5e: Allocate virtually contiguous memory for VLANs list (Mohammad Kabat) [2112940]
+- net/mlx5: Allocate virtually contiguous memory in pci_irq.c (Mohammad Kabat) [2112940]
+- net/mlx5: Allocate virtually contiguous memory in vport.c (Mohammad Kabat) [2112940]
+- net/mlx5: Inline db alloc API function (Mohammad Kabat) [2112940]
+- net/mlx5: Add last command failure syndrome to debugfs (Mohammad Kabat) [2112940]
+- net/mlx5: sparse: error: context imbalance in 'mlx5_vf_get_core_dev' (Mohammad Kabat) [2112940]
+- net/mlx5: Expose mlx5_sriov_blocking_notifier_register / unregister APIs (Mohammad Kabat) [2112940]
+- net/mlx5: Lag, add debugfs to query hardware lag state (Mohammad Kabat) [2112940]
+- net/mlx5: Lag, use buckets in hash mode (Mohammad Kabat) [2112940]
+- net/mlx5: Lag, refactor dmesg print (Mohammad Kabat) [2112940]
+- net/mlx5: Support devices with more than 2 ports (Mohammad Kabat) [2112940]
+- net/mlx5: Lag, use actual number of lag ports (Mohammad Kabat) [2112940]
+- net/mlx5: Lag, use hash when in roce lag on 4 ports (Mohammad Kabat) [2112940]
+- net/mlx5: Lag, support single FDB only on 2 ports (Mohammad Kabat) [2112940]
+- net/mlx5: Lag, store number of ports inside lag object (Mohammad Kabat) [2112940]
+- net/mlx5: Lag, filter non compatible devices (Mohammad Kabat) [2112940]
+- net/mlx5: Lag, use lag lock (Mohammad Kabat) [2112940]
+- net/mlx5: Lag, move E-Switch prerequisite check into lag code (Mohammad Kabat) [2112940]
+- net/mlx5: devcom only supports 2 ports (Mohammad Kabat) [2112940]
+- net/mlx5: Lag, expose number of lag ports (Mohammad Kabat) [2112940]
+- net/mlx5: Increase FW pre-init timeout for health recovery (Mohammad Kabat) [2112940]
+- net/mlx5: Add exit route when waiting for FW (Mohammad Kabat) [2112940]
+- net/mlx5: Don't perform lookup after already known sec_path (Mohammad Kabat) [2112940]
+- net/mlx5: Cleanup XFRM attributes struct (Mohammad Kabat) [2112940]
+- net/mlx5: Remove not-supported ICV length (Mohammad Kabat) [2112940]
+- net/mlx5: Simplify IPsec capabilities logic (Mohammad Kabat) [2112940]
+- net/mlx5: Don't advertise IPsec netdev support for non-IPsec device (Mohammad Kabat) [2112940]
+- net/mlx5: Make sure that no dangling IPsec FS pointers exist (Mohammad Kabat) [2112940]
+- net/mlx5: Clean IPsec FS add/delete rules (Mohammad Kabat) [2112940]
+- net/mlx5: Simplify HW context interfaces by using SA entry (Mohammad Kabat) [2112940]
+- net/mlx5: Remove indirections from esp functions (Mohammad Kabat) [2112940]
+- net/mlx5: Merge various control path IPsec headers into one file (Mohammad Kabat) [2112940]
+- net/mlx5: Remove useless validity check (Mohammad Kabat) [2112940]
+- net/mlx5: Store IPsec ESN update work in XFRM state (Mohammad Kabat) [2112940]
+- net/mlx5: Reduce useless indirection in IPsec FS add/delete flows (Mohammad Kabat) [2112940]
+- net/mlx5: Don't hide fallback to software IPsec in FS code (Mohammad Kabat) [2112940]
+- net/mlx5: Check IPsec TX flow steering namespace in advance (Mohammad Kabat) [2112940]
+- net/mlx5: Simplify IPsec flow steering init/cleanup functions (Mohammad Kabat) [2112940]
+- net/mlx5: fs, an FTE should have no dests when deleted (Mohammad Kabat) [2112940]
+- net/mlx5: fs, call the deletion function of the node (Mohammad Kabat) [2112940]
+- net/mlx5: fs, delete the FTE when there are no rules attached to it (Mohammad Kabat) [2112940]
+- net/mlx5: fs, do proper bookkeeping for forward destinations (Mohammad Kabat) [2112940]
+- net/mlx5: fs, add unused destination type (Mohammad Kabat) [2112940]
+- net/mlx5: fs, jump to exit point and don't fall through (Mohammad Kabat) [2112940]
+- net/mlx5: fs, refactor software deletion rule (Mohammad Kabat) [2112940]
+- net/mlx5: fs, split software and IFC flow destination definitions (Mohammad Kabat) [2112940]
+- net/mlx5e: TC, set proper dest type (Mohammad Kabat) [2112940]
+- net/mlx5e: Remove unused mlx5e_dcbnl_build_rep_netdev function (Mohammad Kabat) [2112940]
+- net/mlx5e: Drop error CQE handling from the XSK RX handler (Mohammad Kabat) [2112940]
+- net/mlx5: Print initializing field in case of timeout (Mohammad Kabat) [2112940]
+- net/mlx5: Delete redundant default assignment of runtime devlink params (Mohammad Kabat) [2112940]
+- net/mlx5: Remove useless kfree (Mohammad Kabat) [2112940]
+- net/mlx5: use kvfree() for kvzalloc() in mlx5_ct_fs_smfs_matcher_create (Mohammad Kabat) [2112940]
+- RDMA/mlx5: Clean UMR QP type flow from mlx5_ib_post_send() (Mohammad Kabat) [2112940]
+- RDMA/mlx5: Use mlx5_umr_post_send_wait() to update xlt (Mohammad Kabat) [2112940]
+- RDMA/mlx5: Use mlx5_umr_post_send_wait() to update MR pas (Mohammad Kabat) [2112940]
+- RDMA/mlx5: Move creation and free of translation tables to umr.c (Mohammad Kabat) [2112940]
+- RDMA/mlx5: Use mlx5_umr_post_send_wait() to rereg pd access (Mohammad Kabat) [2112940]
+- RDMA/mlx5: Use mlx5_umr_post_send_wait() to revoke MRs (Mohammad Kabat) [2112940]
+- RDMA/mlx5: Introduce mlx5_umr_post_send_wait() (Mohammad Kabat) [2112940]
+- RDMA/mlx5: Expose wqe posting helpers outside of wr.c (Mohammad Kabat) [2112940]
+- RDMA/mlx5: Simplify get_umr_update_access_mask() (Mohammad Kabat) [2112940]
+- RDMA/mlx5: Move mkey ctrl segment logic to umr.c (Mohammad Kabat) [2112940]
+- RDMA/mlx5: Move umr checks to umr.h (Mohammad Kabat) [2112940]
+- RDMA/mlx5: Move init and cleanup of UMR to umr.c (Mohammad Kabat) [2112940]
+- RDMA/mlx5: Fix flow steering egress flow (Mohammad Kabat) [2112940]
+- mlx5, xsk: Diversify return values from xsk_wakeup call paths (Mohammad Kabat) [2112940]
+- net/mlx5: Remove not-implemented IPsec capabilities (Mohammad Kabat) [2112940]
+- net/mlx5: Remove ipsec_ops function table (Mohammad Kabat) [2112940]
+- net/mlx5: Reduce kconfig complexity while building crypto support (Mohammad Kabat) [2112940]
+- net/mlx5: Move IPsec file to relevant directory (Mohammad Kabat) [2112940]
+- net/mlx5: Remove not-needed IPsec config (Mohammad Kabat) [2112940]
+- net/mlx5: Align flow steering allocation namespace to common style (Mohammad Kabat) [2112940]
+- net/mlx5: Unify device IPsec capabilities check (Mohammad Kabat) [2112940]
+- net/mlx5: Remove useless IPsec device checks (Mohammad Kabat) [2112940]
+- net/mlx5: Remove ipsec vs. ipsec offload file separation (Mohammad Kabat) [2112940]
+- RDMA/mlx5: Drop crypto flow steering API (Mohammad Kabat) [2112940]
+- RDMA/mlx5: Delete never supported IPsec flow action (Mohammad Kabat) [2112940]
+- net/mlx5: Remove FPGA ipsec specific statistics (Mohammad Kabat) [2112940]
+- net/mlx5: Remove XFRM no_trailer flag (Mohammad Kabat) [2112940]
+- net/mlx5: Remove not-used IDA field from IPsec struct (Mohammad Kabat) [2112940]
+- net/mlx5: Delete metadata handling logic (Mohammad Kabat) [2112940]
+- net/mlx5_fpga: Drop INNOVA IPsec support (Mohammad Kabat) [2112940]
+- net/mlx5: Cleanup kTLS function names and their exposure (Mohammad Kabat) [2112940]
+- net/mlx5: Remove tls vs. ktls separation as it is the same (Mohammad Kabat) [2112940]
+- net/mlx5: Remove indirection in TLS build (Mohammad Kabat) [2112940]
+- net/mlx5: Reliably return TLS device capabilities (Mohammad Kabat) [2112940]
+- net/mlx5_fpga: Drop INNOVA TLS support (Mohammad Kabat) [2112940]
+
 * Tue Jan 17 2023 Herton R. Krzesinski <herton@redhat.com> [5.14.0-237.el9]
 - Revert "stmmac/intel: mark driver as tech preview" (Mark Salter) [2122226]
 - stmmac: intel: Simplify intel_eth_pci_remove() (Mark Salter) [2122226]
diff --git a/sources b/sources
index 2e5d9a7..9e8f8d2 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-5.14.0-237.el9.tar.xz) = 1eeb32f6e7e0ddcd99f15f0870758202d941ec45101070b03735e5a5fd7ba925e36decff1effabd38614beff76d3e721b1e78ae29df2f26280e6e7430d66095a
-SHA512 (kernel-abi-stablelists-5.14.0-237.el9.tar.bz2) = 9f67db2addb771512f2540661246849b4e71b399d2a45e862e9d3d1f4ad54476145dcc0f70964478d2883afbef002bb2f68bb68f59bb47a37fd35b92f91dfa91
-SHA512 (kernel-kabi-dw-5.14.0-237.el9.tar.bz2) = ffd00df7ade415dead258d7529abdcae7a983b161918c24d9790e9e234515693595d1c181e1dc0d7e524124c89a68fe8e1c05f3ec6777a3b907280ff7b69e40c
+SHA512 (linux-5.14.0-238.el9.tar.xz) = 2aa691aaef1ec7fbe2486d04f3e60cc4a7d55c162971cd638f5a14a0d1e8752368574af055b7f7e4b4f256ca9a491ab9c195be6c0eb170e61f7bb32e1a08d2d2
+SHA512 (kernel-abi-stablelists-5.14.0-238.el9.tar.bz2) = be472c15a85b142f3485e1d812869f80723035ee9a947100e79594e798f9558c856c15c18aa8897955c13886db388bb7dc2b417b1449bf6fa40a8c58cedb7b07
+SHA512 (kernel-kabi-dw-5.14.0-238.el9.tar.bz2) = 792920eb51d7dc6ff92ae9e10fb46af78540b5628b0b77ac43d9e7e992a8ef8bcbffa9d1fec87fd749b4e167c41e65a6c3fbcd8df4d7508908e9d33e56f22873