From 69027d65f627fe4b0466935840f4c44605140c31 Mon Sep 17 00:00:00 2001 From: Julio Faracco Date: Fri, 7 Mar 2025 18:23:05 -0300 Subject: [PATCH] kernel-6.12.0-61.el10 * Fri Mar 07 2025 Julio Faracco [6.12.0-61.el10] - af_packet: fix vlan_get_tci() vs MSG_PEEK (CKI Backport Bot) [RHEL-80305] {CVE-2024-57902} - smb: client: fix chmod(2) regression with ATTR_READONLY (Paulo Alcantara) [RHEL-80534] - sched_ext: Fix incorrect autogroup migration detection (CKI Backport Bot) [RHEL-81482] {CVE-2025-21771} - PCI: vmd: Set devices to D0 before enabling PM L1 Substates (Myron Stowe) [RHEL-47437] - PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs (Myron Stowe) [RHEL-47437] - kernel.spec: add missing tools-libs on s390x (Jan Stancek) [RHEL-80626] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-81669] {CVE-2025-21785} - kexec/crash: no crash update when kexec in progress (Mamatha Inamdar) [RHEL-76749] - md/raid*: Fix the set_queue_limits implementations (Nigel Croxon) [RHEL-73721] - md: Fix linear_set_limits() (Nigel Croxon) [RHEL-73721] - md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime (Nigel Croxon) [RHEL-73721] - md/md-linear: Fix a NULL vs IS_ERR() bug in linear_add() (Nigel Croxon) [RHEL-73721] - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-73721] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-73721] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-73721] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-73721] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-73721] - md: Replace deprecated kmap_atomic() with kmap_local_page() (Nigel Croxon) [RHEL-73721] - md/raid10: Atomic write support (Nigel Croxon) [RHEL-73721] - md/raid1: Atomic write support (Nigel Croxon) [RHEL-73721] - md/raid0: Atomic write support (Nigel Croxon) [RHEL-73721] - block: Support atomic writes limits for stacked devices (Nigel Croxon) [RHEL-73721] - md/raid5: Increase r5conf.cache_name size (Nigel Croxon) [RHEL-73721] - md/raid10: Handle bio_split() errors (Nigel Croxon) [RHEL-73721] - md/raid1: Handle bio_split() errors (Nigel Croxon) [RHEL-73721] - md/raid0: Handle bio_split() errors (Nigel Croxon) [RHEL-73721] - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-73721] - md/md-bitmap: Add missing destroy_work_on_stack() (Nigel Croxon) [RHEL-73721] - md/raid5: don't set Faulty rdev for blocked_rdev (Nigel Croxon) [RHEL-73721] - md/raid10: don't wait for Faulty rdev in wait_blocked_rdev() (Nigel Croxon) [RHEL-73721] - md/raid1: don't wait for Faulty rdev in wait_blocked_rdev() (Nigel Croxon) [RHEL-73721] - md/raid1: factor out helper to handle blocked rdev from raid1_write_request() (Nigel Croxon) [RHEL-73721] - md: don't record new badblocks for faulty rdev (Nigel Croxon) [RHEL-73721] - md: don't wait faulty rdev in md_wait_for_blocked_rdev() (Nigel Croxon) [RHEL-73721] - md: add a new helper rdev_blocked() (Nigel Croxon) [RHEL-73721] - md/raid5-ppl: Use atomic64_inc_return() in ppl_new_iounit() (Nigel Croxon) [RHEL-73721] - RDMA/mlx5: Fix a WARN during dereg_mr for DM type (Benjamin Poirier) [RHEL-41204] - arm64: mm: Fix zone_dma_limit calculation (Luiz Capitulino) [RHEL-71568] - uki: enable FIPS mode (Vitaly Kuznetsov) [RHEL-80149] Resolves: RHEL-47437, RHEL-73721, RHEL-76749, RHEL-80305, RHEL-80534, RHEL-80626, RHEL-81482, RHEL-81669 Signed-off-by: Julio Faracco --- Makefile.rhelver | 2 +- dracut-virt.conf | 5 +++++ kernel.changelog | 48 +++++++++++++++++++++++++++++++++++++++++++ kernel.spec | 53 ++++++++++++++++++++++++++++++++++++++++++------ sources | 6 +++--- 5 files changed, 104 insertions(+), 10 deletions(-) diff --git a/Makefile.rhelver b/Makefile.rhelver index b90cbc848..00248b984 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 1 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 60 +RHEL_RELEASE = 61 # # RHEL_REBASE_NUM diff --git a/dracut-virt.conf b/dracut-virt.conf index 3bd3baaa6..41f989eca 100644 --- a/dracut-virt.conf +++ b/dracut-virt.conf @@ -27,6 +27,11 @@ dracutmodules+=" systemd-sysext " # modules: root disk integrity protection dracutmodules+=" systemd-veritysetup " +# modules: FIPS +dracutmodules+=" fips " +# FIPS mode requires early crypto drivers test +drivers+=" =crypto " + # drivers: virtual buses, pci drivers+=" virtio-pci virtio-mmio " # qemu-kvm drivers+=" hv-vmbus pci-hyperv " # hyperv diff --git a/kernel.changelog b/kernel.changelog index d80e825a2..1b9e8fe65 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,45 @@ +* Fri Mar 07 2025 Julio Faracco [6.12.0-61.el10] +- af_packet: fix vlan_get_tci() vs MSG_PEEK (CKI Backport Bot) [RHEL-80305] {CVE-2024-57902} +- smb: client: fix chmod(2) regression with ATTR_READONLY (Paulo Alcantara) [RHEL-80534] +- sched_ext: Fix incorrect autogroup migration detection (CKI Backport Bot) [RHEL-81482] {CVE-2025-21771} +- PCI: vmd: Set devices to D0 before enabling PM L1 Substates (Myron Stowe) [RHEL-47437] +- PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs (Myron Stowe) [RHEL-47437] +- kernel.spec: add missing tools-libs on s390x (Jan Stancek) [RHEL-80626] +- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-81669] {CVE-2025-21785} +- kexec/crash: no crash update when kexec in progress (Mamatha Inamdar) [RHEL-76749] +- md/raid*: Fix the set_queue_limits implementations (Nigel Croxon) [RHEL-73721] +- md: Fix linear_set_limits() (Nigel Croxon) [RHEL-73721] +- md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime (Nigel Croxon) [RHEL-73721] +- md/md-linear: Fix a NULL vs IS_ERR() bug in linear_add() (Nigel Croxon) [RHEL-73721] +- md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-73721] +- md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-73721] +- md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-73721] +- md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-73721] +- md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-73721] +- md: Replace deprecated kmap_atomic() with kmap_local_page() (Nigel Croxon) [RHEL-73721] +- md/raid10: Atomic write support (Nigel Croxon) [RHEL-73721] +- md/raid1: Atomic write support (Nigel Croxon) [RHEL-73721] +- md/raid0: Atomic write support (Nigel Croxon) [RHEL-73721] +- block: Support atomic writes limits for stacked devices (Nigel Croxon) [RHEL-73721] +- md/raid5: Increase r5conf.cache_name size (Nigel Croxon) [RHEL-73721] +- md/raid10: Handle bio_split() errors (Nigel Croxon) [RHEL-73721] +- md/raid1: Handle bio_split() errors (Nigel Croxon) [RHEL-73721] +- md/raid0: Handle bio_split() errors (Nigel Croxon) [RHEL-73721] +- md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-73721] +- md/md-bitmap: Add missing destroy_work_on_stack() (Nigel Croxon) [RHEL-73721] +- md/raid5: don't set Faulty rdev for blocked_rdev (Nigel Croxon) [RHEL-73721] +- md/raid10: don't wait for Faulty rdev in wait_blocked_rdev() (Nigel Croxon) [RHEL-73721] +- md/raid1: don't wait for Faulty rdev in wait_blocked_rdev() (Nigel Croxon) [RHEL-73721] +- md/raid1: factor out helper to handle blocked rdev from raid1_write_request() (Nigel Croxon) [RHEL-73721] +- md: don't record new badblocks for faulty rdev (Nigel Croxon) [RHEL-73721] +- md: don't wait faulty rdev in md_wait_for_blocked_rdev() (Nigel Croxon) [RHEL-73721] +- md: add a new helper rdev_blocked() (Nigel Croxon) [RHEL-73721] +- md/raid5-ppl: Use atomic64_inc_return() in ppl_new_iounit() (Nigel Croxon) [RHEL-73721] +- RDMA/mlx5: Fix a WARN during dereg_mr for DM type (Benjamin Poirier) [RHEL-41204] +- arm64: mm: Fix zone_dma_limit calculation (Luiz Capitulino) [RHEL-71568] +- uki: enable FIPS mode (Vitaly Kuznetsov) [RHEL-80149] +Resolves: RHEL-41204, RHEL-47437, RHEL-71568, RHEL-73721, RHEL-76749, RHEL-80149, RHEL-80305, RHEL-80534, RHEL-80626, RHEL-81482, RHEL-81669 + * Wed Mar 05 2025 Julio Faracco [6.12.0-60.el10] - idpf: call set_real_num_queues in idpf_open (CKI Backport Bot) [RHEL-79464] - tracing: Fix bad hist from corrupting named_triggers list (Tomas Glozar) [RHEL-80060] @@ -158,6 +200,12 @@ Resolves: RHEL-75925, RHEL-76843, RHEL-77986, RHEL-78189, RHEL-79162 - Bump RHEL MINOR to 10.1 (Julio Faracco) Resolves: RHEL-78946, RHEL-79097 +* Thu Mar 06 2025 Jan Stancek [6.12.0-55.3.1.el10_0] +- RDMA/mlx5: Fix a WARN during dereg_mr for DM type (Benjamin Poirier) [RHEL-41204] +- arm64: mm: Fix zone_dma_limit calculation (Luiz Capitulino) [RHEL-71568] +- uki: enable FIPS mode (Vitaly Kuznetsov) [RHEL-80149] +Resolves: RHEL-41204, RHEL-71568, RHEL-80149 + * Mon Mar 03 2025 Jan Stancek [6.12.0-55.2.1.el10_0] - Documentation/powerpc/fadump: add additional parameter feature details (Mamatha Inamdar) [RHEL-70827] - powerpc: increase MIN RMA size for CAS negotiation (Mamatha Inamdar) [RHEL-70827] diff --git a/kernel.spec b/kernel.spec index c3642f0f6..c5ed910cf 100644 --- a/kernel.spec +++ b/kernel.spec @@ -162,15 +162,15 @@ Summary: The Linux kernel %define specrpmversion 6.12.0 %define specversion 6.12.0 %define patchversion 6.12 -%define pkgrelease 60 +%define pkgrelease 61 %define kversion 6 -%define tarfile_release 6.12.0-60.el10 +%define tarfile_release 6.12.0-61.el10 # This is needed to do merge window version magic %define patchlevel 12 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 60%{?buildid}%{?dist} +%define specrelease 61%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 6.12.0-60.el10 +%define kabiversion 6.12.0-61.el10 # If this variable is set to 1, a bpf selftests build failure will cause a # fatal kernel package build error @@ -860,7 +860,7 @@ BuildRequires: lld %endif %if %{with_efiuki} -BuildRequires: dracut +BuildRequires: dracut >= 104 # For dracut UEFI uki binaries BuildRequires: binutils # For the initrd @@ -4078,8 +4078,8 @@ fi\ %files -f %{package_name}-tools-debuginfo.list -n %{package_name}-tools-debuginfo %endif -%ifarch %{cpupowerarchs} %files -n %{package_name}-tools-libs +%ifarch %{cpupowerarchs} %{_libdir}/libcpupower.so.1 %{_libdir}/libcpupower.so.0.0.1 %endif @@ -4313,6 +4313,47 @@ fi\ # # %changelog +* Fri Mar 07 2025 Julio Faracco [6.12.0-61.el10] +- af_packet: fix vlan_get_tci() vs MSG_PEEK (CKI Backport Bot) [RHEL-80305] {CVE-2024-57902} +- smb: client: fix chmod(2) regression with ATTR_READONLY (Paulo Alcantara) [RHEL-80534] +- sched_ext: Fix incorrect autogroup migration detection (CKI Backport Bot) [RHEL-81482] {CVE-2025-21771} +- PCI: vmd: Set devices to D0 before enabling PM L1 Substates (Myron Stowe) [RHEL-47437] +- PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs (Myron Stowe) [RHEL-47437] +- kernel.spec: add missing tools-libs on s390x (Jan Stancek) [RHEL-80626] +- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-81669] {CVE-2025-21785} +- kexec/crash: no crash update when kexec in progress (Mamatha Inamdar) [RHEL-76749] +- md/raid*: Fix the set_queue_limits implementations (Nigel Croxon) [RHEL-73721] +- md: Fix linear_set_limits() (Nigel Croxon) [RHEL-73721] +- md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime (Nigel Croxon) [RHEL-73721] +- md/md-linear: Fix a NULL vs IS_ERR() bug in linear_add() (Nigel Croxon) [RHEL-73721] +- md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-73721] +- md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-73721] +- md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-73721] +- md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-73721] +- md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-73721] +- md: Replace deprecated kmap_atomic() with kmap_local_page() (Nigel Croxon) [RHEL-73721] +- md/raid10: Atomic write support (Nigel Croxon) [RHEL-73721] +- md/raid1: Atomic write support (Nigel Croxon) [RHEL-73721] +- md/raid0: Atomic write support (Nigel Croxon) [RHEL-73721] +- block: Support atomic writes limits for stacked devices (Nigel Croxon) [RHEL-73721] +- md/raid5: Increase r5conf.cache_name size (Nigel Croxon) [RHEL-73721] +- md/raid10: Handle bio_split() errors (Nigel Croxon) [RHEL-73721] +- md/raid1: Handle bio_split() errors (Nigel Croxon) [RHEL-73721] +- md/raid0: Handle bio_split() errors (Nigel Croxon) [RHEL-73721] +- md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-73721] +- md/md-bitmap: Add missing destroy_work_on_stack() (Nigel Croxon) [RHEL-73721] +- md/raid5: don't set Faulty rdev for blocked_rdev (Nigel Croxon) [RHEL-73721] +- md/raid10: don't wait for Faulty rdev in wait_blocked_rdev() (Nigel Croxon) [RHEL-73721] +- md/raid1: don't wait for Faulty rdev in wait_blocked_rdev() (Nigel Croxon) [RHEL-73721] +- md/raid1: factor out helper to handle blocked rdev from raid1_write_request() (Nigel Croxon) [RHEL-73721] +- md: don't record new badblocks for faulty rdev (Nigel Croxon) [RHEL-73721] +- md: don't wait faulty rdev in md_wait_for_blocked_rdev() (Nigel Croxon) [RHEL-73721] +- md: add a new helper rdev_blocked() (Nigel Croxon) [RHEL-73721] +- md/raid5-ppl: Use atomic64_inc_return() in ppl_new_iounit() (Nigel Croxon) [RHEL-73721] +- RDMA/mlx5: Fix a WARN during dereg_mr for DM type (Benjamin Poirier) [RHEL-41204] +- arm64: mm: Fix zone_dma_limit calculation (Luiz Capitulino) [RHEL-71568] +- uki: enable FIPS mode (Vitaly Kuznetsov) [RHEL-80149] + * Wed Mar 05 2025 Julio Faracco [6.12.0-60.el10] - idpf: call set_real_num_queues in idpf_open (CKI Backport Bot) [RHEL-79464] - tracing: Fix bad hist from corrupting named_triggers list (Tomas Glozar) [RHEL-80060] diff --git a/sources b/sources index 5ead86eb6..494347e03 100644 --- a/sources +++ b/sources @@ -1,5 +1,5 @@ SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6 -SHA512 (linux-6.12.0-60.el10.tar.xz) = bcf332841ebeeb49fe8f13f0f1d8fcd8bf8aff67f6221239f201716628ef6ebc5d68ee2c8f580ddadbdd1f9a9d1919d9c0e6da73fa908a853937f46332287cd0 -SHA512 (kernel-abi-stablelists-6.12.0-60.el10.tar.xz) = 058b391a7b243a2332b1df3a20bc9524c39ffd88d50627c6910391669bf35369f613cb6ccfa9b9716d27c5bbc5b965c468f5661ee3836a4205b7d566fd5a6d02 -SHA512 (kernel-kabi-dw-6.12.0-60.el10.tar.xz) = 363638a37d0822f41ee10a642eba36b7442adc8697b96afc32d0dfe7cdfef25279d16621d6a9d75e29ec659a379ba2be6b7a92e59255bdeb00c17b5d4b54690d +SHA512 (linux-6.12.0-61.el10.tar.xz) = 09b8e8c2b7951950991c1f21b3f50d780d49091a8068d46d2dfdd4a319f52fd2141933690e3e18aa12b6011a0e423c8c9f196592839f95674b29730ac69a9264 +SHA512 (kernel-abi-stablelists-6.12.0-61.el10.tar.xz) = d2894b00368042115f2060dfd9e46f08cb46862582816f869980ec62533036d37d6b45113d21bd6bb6bab7c265824cd6623a132c80fcf0c996e8d5e7b386d480 +SHA512 (kernel-kabi-dw-6.12.0-61.el10.tar.xz) = 363638a37d0822f41ee10a642eba36b7442adc8697b96afc32d0dfe7cdfef25279d16621d6a9d75e29ec659a379ba2be6b7a92e59255bdeb00c17b5d4b54690d