diff --git a/.gitignore b/.gitignore index 565c6fc31..bb29b3642 100644 --- a/.gitignore +++ b/.gitignore @@ -1,7 +1,7 @@ fedoraimaca.x509 -kernel-abi-stablelists-6.12.0-124.43.1.el10_1.tar.xz -kernel-kabi-dw-6.12.0-124.43.1.el10_1.tar.xz -linux-6.12.0-124.43.1.el10_1.tar.xz +kernel-abi-stablelists-6.12.0-124.45.1.el10_1.tar.xz +kernel-kabi-dw-6.12.0-124.45.1.el10_1.tar.xz +linux-6.12.0-124.45.1.el10_1.tar.xz nvidiagpuoot001.x509 olima1.x509 olimaca1.x509 diff --git a/Makefile.rhelver b/Makefile.rhelver index 70c165ff5..383b0ea52 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 1 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 124.43.1 +RHEL_RELEASE = 124.45.1 # # RHEL_REBASE_NUM diff --git a/kernel.changelog b/kernel.changelog index 5997ee26b..af764f1ba 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,17 @@ +* Tue Mar 10 2026 CKI KWF Bot [6.12.0-124.45.1.el10_1] +- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010} +Resolves: RHEL-144768 + +* Thu Mar 05 2026 CKI KWF Bot [6.12.0-124.44.1.el10_1] +- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354] +- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824] +- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824] +- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824] +- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362] +- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916] +- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883] +Resolves: RHEL-118883, RHEL-133362, RHEL-144916, RHEL-146354, RHEL-151824 + * Tue Mar 03 2026 CKI KWF Bot [6.12.0-124.43.1.el10_1] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818} - drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703} diff --git a/kernel.spec b/kernel.spec index 0fcf95036..1f7863caa 100644 --- a/kernel.spec +++ b/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel %define specrpmversion 6.12.0 %define specversion 6.12.0 %define patchversion 6.12 -%define pkgrelease 124.43.1 +%define pkgrelease 124.45.1 %define kversion 6 -%define tarfile_release 6.12.0-124.43.1.el10_1 +%define tarfile_release 6.12.0-124.45.1.el10_1 # This is needed to do merge window version magic %define patchlevel 12 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 124.43.1%{?buildid}%{?dist} +%define specrelease 124.45.1%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 6.12.0-124.43.1.el10_1 +%define kabiversion 6.12.0-124.45.1.el10_1 # If this variable is set to 1, a bpf selftests build failure will cause a # fatal kernel package build error @@ -4377,14 +4377,14 @@ fi\ # # %changelog -* Wed Mar 11 2026 Eduard Abdullin - 6.12.0-124.43.1 +* Tue Mar 17 2026 Eduard Abdullin - 6.12.0-124.45.1 - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert -* Wed Mar 11 2026 Neal Gompa - 6.12.0-124.43.1 +* Tue Mar 17 2026 Neal Gompa - 6.12.0-124.45.1 - Enable Btrfs support for all kernel variants -* Wed Mar 11 2026 Andrew Lukoshko - 6.12.0-124.43.1 +* Tue Mar 17 2026 Andrew Lukoshko - 6.12.0-124.45.1 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -4395,6 +4395,18 @@ fi\ - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained +* Tue Mar 10 2026 CKI KWF Bot [6.12.0-124.45.1.el10_1] +- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010} + +* Thu Mar 05 2026 CKI KWF Bot [6.12.0-124.44.1.el10_1] +- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354] +- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824] +- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824] +- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824] +- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362] +- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916] +- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883] + * Tue Mar 03 2026 CKI KWF Bot [6.12.0-124.43.1.el10_1] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818} - drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703} diff --git a/sources b/sources index d5db913c9..303f7fe98 100644 --- a/sources +++ b/sources @@ -1,7 +1,7 @@ SHA512 (fedoraimaca.x509) = e04809394f4472c17e86d7024dee34f03fb68e82a85502fd5b00535202c72e57626a8376b2cf991b7e1e46404aa5ab8d189ebf320e0dd37d49e7efbc925c7a2e -SHA512 (kernel-abi-stablelists-6.12.0-124.43.1.el10_1.tar.xz) = 45d7bb44b76bf664ccb5c3f92a0f1ff27f8b3cd87dc7115cec1c7c151ecc6e5b09afc1394688ec6b9ec3e748d0b22da7e47beee254270ff4f321da4db98f4ac5 -SHA512 (kernel-kabi-dw-6.12.0-124.43.1.el10_1.tar.xz) = 363fa86a8b4843aeda79e2b7e2cf2c25d5b1799b55aa36f320cfe165abddc58b1bab7cbe98d4335c86d6e3dc4dfe90fb8a34e54e1d402868012cf9acb0c4dbf1 -SHA512 (linux-6.12.0-124.43.1.el10_1.tar.xz) = 0b0bd034f7993b71507571574a46cc5555f03db44bf33e61ad3ec46b989e7d8be259704cbb40f715b499b76e039fa6e1aa9bdd7265bf7e8b851f9939501ebc84 +SHA512 (kernel-abi-stablelists-6.12.0-124.45.1.el10_1.tar.xz) = c2e0a7ccf3f5625c54599ef1313f4fde1ac5e9d272032aa015ee59f32175711955c649755d2429735defac4043deac2df2fa7e2ebfe9c40dc9f7c0ef22998d0f +SHA512 (kernel-kabi-dw-6.12.0-124.45.1.el10_1.tar.xz) = 8f403b2e65c8dc3d7aad13c9bfb5f268ed72c40be4b6ac9fe88bdfe325642bcd793bf54d2e546d4e09bd73162b3057f35fcedc9e87c6d3e948b8942cff2b27fd +SHA512 (linux-6.12.0-124.45.1.el10_1.tar.xz) = 257f66a1b86ad460663fea59cd9bda9c97d41bc626b3d239ee844c4b9b566513d04e83257e649f703c3dd6d2b7248a254964f94cc2862f29eff48b6fd343918b SHA512 (nvidiagpuoot001.x509) = b42f836e1cfa07890cb6ca13de9c3950e306c9ec7686c4c09f050bb68869f5d82962b2cd5f3aa0eb7a0f3a3ae54e9c480eafbac5df53aa92c295ff511a8c59fe SHA512 (olima1.x509) = 123c26c1d698cc8523845c6e1103b9c72abf855acd225d37baf1f3388a47f912166d6d786fb367fe46de39e011b586ad7f3963aa2e8923da30a6ea9ae0d76ad3 SHA512 (olimaca1.x509) = 3a779415fad29d6f7250ec97ab1f0a5eb62c351b724feee06b22e17f065bf74a558f32cc524d3222c4485635ae5b9cd5287855c94010fe743b51a4d954340c4c