From 5c58f1571e5101aa956a708da323a401ee01dcc6 Mon Sep 17 00:00:00 2001 From: CentOS Sources Date: Tue, 11 Apr 2023 19:50:56 +0000 Subject: [PATCH] import kernel-rt-4.18.0-425.19.2.rt7.230.el8_7 --- .gitignore | 2 +- .kernel-rt.metadata | 2 +- SOURCES/kernel-rt-x86_64-debug.config | 2 +- SOURCES/kernel-rt-x86_64.config | 2 +- SPECS/kernel.spec | 115 ++++++++++++++++++++++++-- 5 files changed, 114 insertions(+), 9 deletions(-) diff --git a/.gitignore b/.gitignore index 0f14827..ca13d8f 100644 --- a/.gitignore +++ b/.gitignore @@ -1,3 +1,3 @@ -SOURCES/linux-4.18.0-425.13.1.rt7.223.el8_7.tar.xz +SOURCES/linux-4.18.0-425.19.2.rt7.230.el8_7.tar.xz SOURCES/rheldup3.x509 SOURCES/rhelkpatch1.x509 diff --git a/.kernel-rt.metadata b/.kernel-rt.metadata index 73b2dee..e99d026 100644 --- a/.kernel-rt.metadata +++ b/.kernel-rt.metadata @@ -1,3 +1,3 @@ -77694aed8a7616681471d4a10d35772b57d9ccad SOURCES/linux-4.18.0-425.13.1.rt7.223.el8_7.tar.xz +98abb0da3b6671700f0e27f08d04ce0a76ddb061 SOURCES/linux-4.18.0-425.19.2.rt7.230.el8_7.tar.xz 95b9b811c7b0a6c98b2eafc4e7d6d24f2cb63289 SOURCES/rheldup3.x509 d90885108d225a234a5a9d054fc80893a5bd54d0 SOURCES/rhelkpatch1.x509 diff --git a/SOURCES/kernel-rt-x86_64-debug.config b/SOURCES/kernel-rt-x86_64-debug.config index dd96e15..fe0868c 100644 --- a/SOURCES/kernel-rt-x86_64-debug.config +++ b/SOURCES/kernel-rt-x86_64-debug.config @@ -5836,7 +5836,7 @@ CONFIG_X86_ACPI_CPUFREQ=m CONFIG_X86_ACPI_CPUFREQ_CPB=y CONFIG_X86_AMD_FREQ_SENSITIVITY=m CONFIG_X86_AMD_PLATFORM_DEVICE=y -CONFIG_X86_AMD_PSTATE=y +CONFIG_X86_AMD_PSTATE=m CONFIG_X86_BOOTPARAM_MEMORY_CORRUPTION_CHECK=y CONFIG_X86_CHECK_BIOS_CORRUPTION=y CONFIG_X86_CMOV=y diff --git a/SOURCES/kernel-rt-x86_64.config b/SOURCES/kernel-rt-x86_64.config index 7c5302a..5c23862 100644 --- a/SOURCES/kernel-rt-x86_64.config +++ b/SOURCES/kernel-rt-x86_64.config @@ -5811,7 +5811,7 @@ CONFIG_X86_ACPI_CPUFREQ=m CONFIG_X86_ACPI_CPUFREQ_CPB=y CONFIG_X86_AMD_FREQ_SENSITIVITY=m CONFIG_X86_AMD_PLATFORM_DEVICE=y -CONFIG_X86_AMD_PSTATE=y +CONFIG_X86_AMD_PSTATE=m CONFIG_X86_CHECK_BIOS_CORRUPTION=y CONFIG_X86_CMOV=y CONFIG_X86_CMPXCHG64=y diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index 19f6bd8..02fa52c 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define rpmversion 4.18.0 -%define pkgrelease 425.13.1.rt7.223.el8_7 +%define pkgrelease 425.19.2.rt7.230.el8_7 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 425.13.1.rt7.223%{?dist} +%define specrelease 425.19.2.rt7.230%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -148,7 +148,7 @@ # The preempt RT patch level %global rttag .rt7 # realtimeN -%global rtbuild .223 +%global rtbuild .230 %define with_doc 0 %define with_headers 0 %define with_cross_headers 0 @@ -2688,6 +2688,111 @@ fi # # %changelog +* Fri Mar 17 2023 Jarod Wilson [4.18.0-425.19.2.rt7.230.el8_7] +- [rt] build kernel-rt-4.18.0-425.19.2.rt7.230.el8_7.geb93 [2172278] +- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386} + +* Thu Mar 16 2023 Jarod Wilson [4.18.0-425.19.1.rt7.229.el8_7] +- [rt] build kernel-rt-4.18.0-425.19.1.rt7.229.el8_7 [2172278] +- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270] +- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139] +- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139] +- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139] +- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139] +- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139] +- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139] +- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139] +- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139] +- locking: Make owner_on_cpu() into (Waiman Long) [2170939 2162139] +- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139] +- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139] +- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139] +- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139] +- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308] +- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308] +- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163405 2163406] {CVE-2023-0266} +- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925] +- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925] +- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925] +- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925] + +* Mon Mar 13 2023 Jarod Wilson [4.18.0-425.18.1.rt7.228.el8_7] +- [rt] build kernel-rt-4.18.0-425.18.1.rt7.228.el8_7 [2172278] +- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054] +- irq_work: Move lazy work execution to dedicated irq_work kthreads (Valentin Schneider) [2172163] +- irq_work: Sync the patches (Valentin Schneider) [2172163] +- irq_work: Also rcuwait for !IRQ_WORK_HARD_IRQ on PREEMPT_RT (Valentin Schneider) [2172163] +- irq_work: Allow irq_work_sync() to sleep if irq_work() no IRQ support. (Valentin Schneider) [2172163] + +* Fri Mar 03 2023 Jarod Wilson [4.18.0-425.17.1.rt7.227.el8_7] +- [rt] build kernel-rt-4.18.0-425.17.1.rt7.227.el8_7 [2172278] +- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462] +- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462] +- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462] +- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215] + +* Thu Feb 23 2023 Jarod Wilson [4.18.0-425.16.1.rt7.226.el8_7] +- [rt] build kernel-rt-4.18.0-425.16.1.rt7.226.el8_7 [2172278] +- ipv6: fix panic when fib_lookup_arg->result is fib6_info (Jiri Benc) [2167602 2140599] +- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414] +- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414] +- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328] +- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309] +- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659] +- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726] + +* Thu Feb 16 2023 Jarod Wilson [4.18.0-425.15.1.rt7.225.el8_7] +- [rt] build kernel-rt-4.18.0-425.15.1.rt7.225.el8_7 [2172278] +- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927] +- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249] +- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850] +- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850] +- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850] +- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850] +- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850] +- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109] +- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529] + +* Fri Feb 10 2023 Jarod Wilson [4.18.0-425.14.1.rt7.224.el8_7] +- [rt] build kernel-rt-4.18.0-425.14.1.rt7.224.el8_7 [2172278] +- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653] +- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149] +- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149] +- kvm: x86: SVM: use vmcb* instead of svm->vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149] +- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149] +- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676] +- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269} +- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269} +- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246] +- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144] +- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144] +- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144] +- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144] +- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144] +- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144] +- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144] +- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144] +- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144] +- KVM: x86: do not go through ctxt->ops when emulating rsm (Maxim Levitsky) [2166368 2097144] +- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144] +- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144] +- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144] +- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144] +- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144] +- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144] +- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144] +- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144] +- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144] +- KVM: x86: emulator: em_sysexit should update ctxt->mode (Maxim Levitsky) [2166368 2097144] +- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144] +- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144] +- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144] +- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144] +- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144] +- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144] +- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378} +- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378} + * Thu Feb 02 2023 Jarod Wilson [4.18.0-425.13.1.rt7.223.el8_7] - [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806] - mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221] @@ -2776,7 +2881,7 @@ fi * Thu Jan 19 2023 Jarod Wilson [4.18.0-425.12.1.rt7.222.el8_7] - [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806] - x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890] -- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549] +- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154469 2153549] - kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954] - mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886] - memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886] @@ -2802,7 +2907,7 @@ fi - NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945} - SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945} - SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945} -- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580] +- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139851] - kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580] - kexec: move locking into do_kexec_load (Valentin Schneider) [2139580] - vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]