kernel-5.14.0-723.el9
* Tue Jul 14 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-723.el9]
- Reapply "Bluetooth: revert TX timestamping" for kernel v6.18.y update (David Marlin) [RHEL-176415]
- Bluetooth: btmtk: accept too short WMT FUNC_CTRL events (David Marlin) [RHEL-176415]
- Bluetooth: virtio_bt: validate rx pkt_type header length (David Marlin) [RHEL-176415]
- Bluetooth: virtio_bt: clamp rx length before skb_put (David Marlin) [RHEL-176415]
- Bluetooth: btmtk: validate WMT event SKB length before struct access (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() (David Marlin) [RHEL-176415]
- Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt (David Marlin) [RHEL-176415]
- Bluetooth: hci_conn: fix potential UAF in create_big_sync (David Marlin) [RHEL-176415]
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (David Marlin) [RHEL-176415]
- Bluetooth: SCO: check for codecs->num_codecs == 1 before assigning to sco_pi(sk)->codec (David Marlin) [RHEL-176415]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (David Marlin) [RHEL-176415]
- Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (David Marlin) [RHEL-176415]
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU (David Marlin) [RHEL-176415]
- Bluetooth: SMP: derive legacy responder STK authentication from MITM state (David Marlin) [RHEL-176415]
- Bluetooth: SMP: force responder MITM requirements before building the pairing response (David Marlin) [RHEL-176415]
- Bluetooth: MGMT: validate mesh send advertising payload length (David Marlin) [RHEL-176415]
- Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt (David Marlin) [RHEL-176415]
- Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (David Marlin) [RHEL-176415]
- Bluetooth: hci_h4: Fix race during initialization (David Marlin) [RHEL-176415]
- Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate (David Marlin) [RHEL-176415]
- Bluetooth: btusb: clamp SCO altsetting table indices (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (David Marlin) [RHEL-176415]
- Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Fix send LE flow credits in ACL link (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Fix regressions caused by reusing ident (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (David Marlin) [RHEL-176415]
- Bluetooth: hci_ll: Fix firmware leak on error path (David Marlin) [RHEL-176415]
- Bluetooth: hci_sync: annotate data-races around hdev->req_status (David Marlin) [RHEL-176415]
- Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req (David Marlin) [RHEL-176415]
- Bluetooth: qca: fix ROM version reading on WCN3998 chips (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (David Marlin) [RHEL-176415]
- Bluetooth: HIDP: Fix possible UAF (David Marlin) [RHEL-176415]
- Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-176415]
- Bluetooth: hci_sync: Fix hci_le_create_conn_sync (David Marlin) [RHEL-176415]
- Bluetooth: ISO: Fix defer tests being unstable (David Marlin) [RHEL-176415]
- Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy (David Marlin) [RHEL-176415]
- Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU (David Marlin) [RHEL-176415]
- Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-176415]
- Bluetooth: Fix CIS host feature condition (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-176415]
- Bluetooth: hci_qca: Cleanup on all setup failures (David Marlin) [RHEL-176415]
- Bluetooth: purge error queues in socket destructors (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Fix result of L2CAP_ECRED_CONN_RSP when MTU is too short (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ (David Marlin) [RHEL-176415]
- Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB (David Marlin) [RHEL-176415]
- Bluetooth: L2CAP: Fix not tracking outstanding TX ident (David Marlin) [RHEL-176415]
- Bluetooth: btusb: Add device ID for Realtek RTL8761BU (David Marlin) [RHEL-176415]
- Bluetooth: btusb: Add new VID/PID for RTL8852CE (David Marlin) [RHEL-176415]
- Bluetooth: btusb: Add USB ID 0489:e112 for Realtek 8851BE (David Marlin) [RHEL-176415]
- Bluetooth: hci_conn: Set link_policy on incoming ACL connections (David Marlin) [RHEL-176415]
- Bluetooth: hci_conn: use mod_delayed_work for active mode timeout (David Marlin) [RHEL-176415]
- Bluetooth: btusb: Add support for MediaTek7920 0489:e158 (David Marlin) [RHEL-176415]
- Bluetooth: hci_qca: Fix SSR (SubSystem Restart) fail when BT_EN is pulled up by hw (David Marlin) [RHEL-176415]
- Bluetooth: btintel_pcie: Use IRQF_ONESHOT and default primary handler (David Marlin) [RHEL-176415]
- Bluetooth: MGMT: report BIS capability flags in supported settings (David Marlin) [RHEL-176415]
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE (David Marlin) [RHEL-176415]
- Bluetooth: btusb: add new custom firmwares (David Marlin) [RHEL-176415]
- Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT (David Marlin) [RHEL-176415]
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV (David Marlin) [RHEL-176415]
- Bluetooth: btintel_pcie: Support for S4 (Hibernate) (David Marlin) [RHEL-176415]
- Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (David Marlin) [RHEL-176415]
- Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (David Marlin) [RHEL-176415]
- Revert "Reapply "Bluetooth: revert TX timestamping" for kernel v6.18 rebase." (David Marlin) [RHEL-176415]
- tg3: Fix race for querying speed/duplex (Thomas Walsh) [RHEL-182531]
- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180774]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180774]
- eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180774]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180774]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180774]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180774]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180774] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180774]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180774]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180774]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180774]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180774]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180774]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173835] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180774]
- tools/power turbostat: v2026.04.21 (David Arcari) [RHEL-171741]
- tools/power turbostat: Process HT siblings in CPU order (David Arcari) [RHEL-171741]
- tools/power turbostat: Show module_id column (David Arcari) [RHEL-171741]
- tools/power turbostat: Print core_id and apic_id in hex (David Arcari) [RHEL-171741]
- tools/power turbostat: Cleanup print helper functions (David Arcari) [RHEL-171741]
- tools/power turbostat: Fix --cpu-set 1 regression on HT systems (David Arcari) [RHEL-171741]
- tools/power turbostat: Fix --cpu-set 0 regression on HT systems (David Arcari) [RHEL-171741]
- tools/power turbostat: Fix AMD RAPL regression on big systems (David Arcari) [RHEL-171741]
Resolves: RHEL-171741, RHEL-173835, RHEL-176415, RHEL-180774, RHEL-182531
Signed-off-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>
This commit is contained in:
CKI KWF Bot
parent
bc6b33d61c
commit
1362045eb7
@ -12,7 +12,7 @@ RHEL_MINOR = 9
|
||||
#
|
||||
# Use this spot to avoid future merge conflicts.
|
||||
# Do not trim this comment.
|
||||
RHEL_RELEASE = 722
|
||||
RHEL_RELEASE = 723
|
||||
|
||||
#
|
||||
# ZSTREAM
|
||||
|
||||
101
kernel.changelog
101
kernel.changelog
@ -1,3 +1,104 @@
|
||||
* Tue Jul 14 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-723.el9]
|
||||
- Reapply "Bluetooth: revert TX timestamping" for kernel v6.18.y update (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btmtk: accept too short WMT FUNC_CTRL events (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: virtio_bt: validate rx pkt_type header length (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: virtio_bt: clamp rx length before skb_put (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btmtk: validate WMT event SKB length before struct access (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_conn: fix potential UAF in create_big_sync (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: SCO: check for codecs->num_codecs == 1 before assigning to sco_pi(sk)->codec (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: SMP: derive legacy responder STK authentication from MITM state (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: SMP: force responder MITM requirements before building the pairing response (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: MGMT: validate mesh send advertising payload length (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_h4: Fix race during initialization (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: clamp SCO altsetting table indices (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix send LE flow credits in ACL link (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix regressions caused by reusing ident (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_ll: Fix firmware leak on error path (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_sync: annotate data-races around hdev->req_status (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: qca: fix ROM version reading on WCN3998 chips (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: HIDP: Fix possible UAF (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_sync: Fix hci_le_create_conn_sync (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: ISO: Fix defer tests being unstable (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: Fix CIS host feature condition (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_qca: Cleanup on all setup failures (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: purge error queues in socket destructors (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix result of L2CAP_ECRED_CONN_RSP when MTU is too short (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix not tracking outstanding TX ident (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: Add device ID for Realtek RTL8761BU (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: Add new VID/PID for RTL8852CE (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: Add USB ID 0489:e112 for Realtek 8851BE (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_conn: Set link_policy on incoming ACL connections (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_conn: use mod_delayed_work for active mode timeout (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: Add support for MediaTek7920 0489:e158 (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_qca: Fix SSR (SubSystem Restart) fail when BT_EN is pulled up by hw (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btintel_pcie: Use IRQF_ONESHOT and default primary handler (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: MGMT: report BIS capability flags in supported settings (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: add new custom firmwares (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btintel_pcie: Support for S4 (Hibernate) (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (David Marlin) [RHEL-176415]
|
||||
- Revert "Reapply "Bluetooth: revert TX timestamping" for kernel v6.18 rebase." (David Marlin) [RHEL-176415]
|
||||
- tg3: Fix race for querying speed/duplex (Thomas Walsh) [RHEL-182531]
|
||||
- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180774] {CVE-2026-46242}
|
||||
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173835] {CVE-2026-43074}
|
||||
- epoll: annotate racy check (Ian Kent) [RHEL-180774]
|
||||
- tools/power turbostat: v2026.04.21 (David Arcari) [RHEL-171741]
|
||||
- tools/power turbostat: Process HT siblings in CPU order (David Arcari) [RHEL-171741]
|
||||
- tools/power turbostat: Show module_id column (David Arcari) [RHEL-171741]
|
||||
- tools/power turbostat: Print core_id and apic_id in hex (David Arcari) [RHEL-171741]
|
||||
- tools/power turbostat: Cleanup print helper functions (David Arcari) [RHEL-171741]
|
||||
- tools/power turbostat: Fix --cpu-set 1 regression on HT systems (David Arcari) [RHEL-171741]
|
||||
- tools/power turbostat: Fix --cpu-set 0 regression on HT systems (David Arcari) [RHEL-171741]
|
||||
- tools/power turbostat: Fix AMD RAPL regression on big systems (David Arcari) [RHEL-171741]
|
||||
Resolves: RHEL-171741, RHEL-173835, RHEL-176415, RHEL-180774, RHEL-182531
|
||||
|
||||
* Mon Jul 06 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-722.el9]
|
||||
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180044] {CVE-2026-46155}
|
||||
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180044]
|
||||
|
||||
108
kernel.spec
108
kernel.spec
@ -176,15 +176,15 @@ Summary: The Linux kernel
|
||||
# define buildid .local
|
||||
%define specversion 5.14.0
|
||||
%define patchversion 5.14
|
||||
%define pkgrelease 722
|
||||
%define pkgrelease 723
|
||||
%define kversion 5
|
||||
%define tarfile_release 5.14.0-722.el9
|
||||
%define tarfile_release 5.14.0-723.el9
|
||||
# This is needed to do merge window version magic
|
||||
%define patchlevel 14
|
||||
# This allows pkg_release to have configurable %%{?dist} tag
|
||||
%define specrelease 722%{?buildid}%{?dist}
|
||||
%define specrelease 723%{?buildid}%{?dist}
|
||||
# This defines the kabi tarball version
|
||||
%define kabiversion 5.14.0-722.el9
|
||||
%define kabiversion 5.14.0-723.el9
|
||||
|
||||
#
|
||||
# End of genspec.sh variables
|
||||
@ -3753,6 +3753,106 @@ fi
|
||||
#
|
||||
#
|
||||
%changelog
|
||||
* Tue Jul 14 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-723.el9]
|
||||
- Reapply "Bluetooth: revert TX timestamping" for kernel v6.18.y update (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btmtk: accept too short WMT FUNC_CTRL events (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: virtio_bt: validate rx pkt_type header length (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: virtio_bt: clamp rx length before skb_put (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btmtk: validate WMT event SKB length before struct access (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_conn: fix potential UAF in create_big_sync (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: SCO: check for codecs->num_codecs == 1 before assigning to sco_pi(sk)->codec (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: SMP: derive legacy responder STK authentication from MITM state (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: SMP: force responder MITM requirements before building the pairing response (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: MGMT: validate mesh send advertising payload length (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_h4: Fix race during initialization (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: clamp SCO altsetting table indices (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix send LE flow credits in ACL link (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix regressions caused by reusing ident (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_ll: Fix firmware leak on error path (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_sync: annotate data-races around hdev->req_status (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: qca: fix ROM version reading on WCN3998 chips (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: HIDP: Fix possible UAF (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_sync: Fix hci_le_create_conn_sync (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: ISO: Fix defer tests being unstable (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: Fix CIS host feature condition (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_qca: Cleanup on all setup failures (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: purge error queues in socket destructors (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix result of L2CAP_ECRED_CONN_RSP when MTU is too short (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: L2CAP: Fix not tracking outstanding TX ident (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: Add device ID for Realtek RTL8761BU (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: Add new VID/PID for RTL8852CE (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: Add USB ID 0489:e112 for Realtek 8851BE (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_conn: Set link_policy on incoming ACL connections (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_conn: use mod_delayed_work for active mode timeout (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: Add support for MediaTek7920 0489:e158 (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: hci_qca: Fix SSR (SubSystem Restart) fail when BT_EN is pulled up by hw (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btintel_pcie: Use IRQF_ONESHOT and default primary handler (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: MGMT: report BIS capability flags in supported settings (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: add new custom firmwares (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btintel_pcie: Support for S4 (Hibernate) (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (David Marlin) [RHEL-176415]
|
||||
- Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (David Marlin) [RHEL-176415]
|
||||
- Revert "Reapply "Bluetooth: revert TX timestamping" for kernel v6.18 rebase." (David Marlin) [RHEL-176415]
|
||||
- tg3: Fix race for querying speed/duplex (Thomas Walsh) [RHEL-182531]
|
||||
- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180774] {CVE-2026-46242}
|
||||
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180774]
|
||||
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173835] {CVE-2026-43074}
|
||||
- epoll: annotate racy check (Ian Kent) [RHEL-180774]
|
||||
- tools/power turbostat: v2026.04.21 (David Arcari) [RHEL-171741]
|
||||
- tools/power turbostat: Process HT siblings in CPU order (David Arcari) [RHEL-171741]
|
||||
- tools/power turbostat: Show module_id column (David Arcari) [RHEL-171741]
|
||||
- tools/power turbostat: Print core_id and apic_id in hex (David Arcari) [RHEL-171741]
|
||||
- tools/power turbostat: Cleanup print helper functions (David Arcari) [RHEL-171741]
|
||||
- tools/power turbostat: Fix --cpu-set 1 regression on HT systems (David Arcari) [RHEL-171741]
|
||||
- tools/power turbostat: Fix --cpu-set 0 regression on HT systems (David Arcari) [RHEL-171741]
|
||||
- tools/power turbostat: Fix AMD RAPL regression on big systems (David Arcari) [RHEL-171741]
|
||||
|
||||
* Mon Jul 06 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-722.el9]
|
||||
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180044] {CVE-2026-46155}
|
||||
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180044]
|
||||
|
||||
6
sources
6
sources
@ -1,3 +1,3 @@
|
||||
SHA512 (linux-5.14.0-722.el9.tar.xz) = 5884100f21308a26f8966891801b019c50033661f5d5557a6f49cc467ba0734f625b6f22f95dc15551295bb041da7c7c1b8651bc8d3bafbf6dd1a09d3d6cac6b
|
||||
SHA512 (kernel-abi-stablelists-5.14.0-722.el9.tar.bz2) = bd2d46b2f6210f9ecc1122f8de8be64e8d81714ee94dec081b29462be5e242804deeebd6034c068ede7d403d51329d37cfc1002e9d401cd8956e8402edd16652
|
||||
SHA512 (kernel-kabi-dw-5.14.0-722.el9.tar.bz2) = ccb624b45203e0b7a25500be82479a06cfc4f45028710ac9a37d920c7fac0f07ce313f94796dcaa9a9fd77a6b23e6be5cc26c4bdef8c608056535ac11815e2a1
|
||||
SHA512 (linux-5.14.0-723.el9.tar.xz) = 16fb090e4c4c672a86e8f3361e136e63d44a2b30a046e6830ff4cdd3fcf897091fedadcd8767e97f9cf480a87ac4f1d39669fd0b53325be7676f6cd20e2ecc52
|
||||
SHA512 (kernel-abi-stablelists-5.14.0-723.el9.tar.bz2) = e44b3b7ebb815a2468ca4b2b1a0562ec67d5874dad1eb4002eed2235bd58d95d0e6cccb050ca25be17c96183cbdce66a2980fbb2636898a2ccc803ef6738656e
|
||||
SHA512 (kernel-kabi-dw-5.14.0-723.el9.tar.bz2) = 5d74306776a0cf8907ac4be935a9eb38eafc6cbd0ef0910f5f50748c1d6cb8331128533882781df05fc32a476cc9259fad091b079dc248cfcc4849bb4c838c81
|
||||
|
||||
Loading…
Reference in New Issue
Block a user