diff --git a/Makefile.rhelver b/Makefile.rhelver index 9acf421bf..2247a8c58 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 9 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 733 +RHEL_RELEASE = 734 # # ZSTREAM diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config index b8a35f19d..f4ccc4165 100644 --- a/kernel-aarch64-64k-debug-rhel.config +++ b/kernel-aarch64-64k-debug-rhel.config @@ -5747,6 +5747,7 @@ CONFIG_SLUB_KUNIT_TEST=m # CONFIG_SLUB_TINY is not set CONFIG_SLUB=y # CONFIG_SMARTJOYPLUS_FF is not set +# CONFIG_SMB_KUNIT_TESTS is not set CONFIG_SMC91X=m # CONFIG_SMC is not set # CONFIG_SM_FTL is not set diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config index 36809dc8d..db41694a9 100644 --- a/kernel-aarch64-64k-rhel.config +++ b/kernel-aarch64-64k-rhel.config @@ -5724,6 +5724,7 @@ CONFIG_SLUB_KUNIT_TEST=m # CONFIG_SLUB_TINY is not set CONFIG_SLUB=y # CONFIG_SMARTJOYPLUS_FF is not set +# CONFIG_SMB_KUNIT_TESTS is not set CONFIG_SMC91X=m # CONFIG_SMC is not set # CONFIG_SM_FTL is not set diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config index 9dd93a9a2..7a5c89b4f 100644 --- a/kernel-aarch64-debug-rhel.config +++ b/kernel-aarch64-debug-rhel.config @@ -5745,6 +5745,7 @@ CONFIG_SLUB_KUNIT_TEST=m # CONFIG_SLUB_TINY is not set CONFIG_SLUB=y # CONFIG_SMARTJOYPLUS_FF is not set +# CONFIG_SMB_KUNIT_TESTS is not set CONFIG_SMC91X=m # CONFIG_SMC is not set # CONFIG_SM_FTL is not set diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config index 6082d79c2..1f0f9c9d7 100644 --- a/kernel-aarch64-rhel.config +++ b/kernel-aarch64-rhel.config @@ -5722,6 +5722,7 @@ CONFIG_SLUB_KUNIT_TEST=m # CONFIG_SLUB_TINY is not set CONFIG_SLUB=y # CONFIG_SMARTJOYPLUS_FF is not set +# CONFIG_SMB_KUNIT_TESTS is not set CONFIG_SMC91X=m # CONFIG_SMC is not set # CONFIG_SM_FTL is not set diff --git a/kernel-aarch64-rt-64k-debug-rhel.config b/kernel-aarch64-rt-64k-debug-rhel.config index c6002a842..76c35e7f0 100644 --- a/kernel-aarch64-rt-64k-debug-rhel.config +++ b/kernel-aarch64-rt-64k-debug-rhel.config @@ -5843,6 +5843,7 @@ CONFIG_SLUB_KUNIT_TEST=m # CONFIG_SLUB_TINY is not set CONFIG_SLUB=y # CONFIG_SMARTJOYPLUS_FF is not set +# CONFIG_SMB_KUNIT_TESTS is not set CONFIG_SMC91X=m # CONFIG_SMC is not set # CONFIG_SM_FTL is not set diff --git a/kernel-aarch64-rt-64k-rhel.config b/kernel-aarch64-rt-64k-rhel.config index 75906ba00..ad9c04686 100644 --- a/kernel-aarch64-rt-64k-rhel.config +++ b/kernel-aarch64-rt-64k-rhel.config @@ -5820,6 +5820,7 @@ CONFIG_SLUB_KUNIT_TEST=m # CONFIG_SLUB_TINY is not set CONFIG_SLUB=y # CONFIG_SMARTJOYPLUS_FF is not set +# CONFIG_SMB_KUNIT_TESTS is not set CONFIG_SMC91X=m # CONFIG_SMC is not set # CONFIG_SM_FTL is not set diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config index ae7158e0a..50e6670ff 100644 --- a/kernel-aarch64-rt-debug-rhel.config +++ b/kernel-aarch64-rt-debug-rhel.config @@ -5841,6 +5841,7 @@ CONFIG_SLUB_KUNIT_TEST=m # CONFIG_SLUB_TINY is not set CONFIG_SLUB=y # CONFIG_SMARTJOYPLUS_FF is not set +# CONFIG_SMB_KUNIT_TESTS is not set CONFIG_SMC91X=m # CONFIG_SMC is not set # CONFIG_SM_FTL is not set diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config index 454b041c2..a6203066a 100644 --- a/kernel-aarch64-rt-rhel.config +++ b/kernel-aarch64-rt-rhel.config @@ -5818,6 +5818,7 @@ CONFIG_SLUB_KUNIT_TEST=m # CONFIG_SLUB_TINY is not set CONFIG_SLUB=y # CONFIG_SMARTJOYPLUS_FF is not set +# CONFIG_SMB_KUNIT_TESTS is not set CONFIG_SMC91X=m # CONFIG_SMC is not set # CONFIG_SM_FTL is not set diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config index a0f1e479d..1373182ec 100644 --- a/kernel-ppc64le-debug-rhel.config +++ b/kernel-ppc64le-debug-rhel.config @@ -5217,6 +5217,7 @@ CONFIG_SLUB_KUNIT_TEST=m # CONFIG_SLUB_TINY is not set CONFIG_SLUB=y # CONFIG_SMARTJOYPLUS_FF is not set +# CONFIG_SMB_KUNIT_TESTS is not set # CONFIG_SMC is not set # CONFIG_SM_FTL is not set CONFIG_SMP=y diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config index 206419a86..ec0a02080 100644 --- a/kernel-ppc64le-rhel.config +++ b/kernel-ppc64le-rhel.config @@ -5196,6 +5196,7 @@ CONFIG_SLUB_KUNIT_TEST=m # CONFIG_SLUB_TINY is not set CONFIG_SLUB=y # CONFIG_SMARTJOYPLUS_FF is not set +# CONFIG_SMB_KUNIT_TESTS is not set # CONFIG_SMC is not set # CONFIG_SM_FTL is not set CONFIG_SMP=y diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config index bb1451258..3be12b620 100644 --- a/kernel-s390x-debug-rhel.config +++ b/kernel-s390x-debug-rhel.config @@ -5205,6 +5205,7 @@ CONFIG_SLUB_KUNIT_TEST=m # CONFIG_SLUB_TINY is not set CONFIG_SLUB=y # CONFIG_SMARTJOYPLUS_FF is not set +# CONFIG_SMB_KUNIT_TESTS is not set CONFIG_SMC_DIAG=m # CONFIG_SMC_LO is not set CONFIG_SMC=m diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config index bb4aa4475..e62f87a88 100644 --- a/kernel-s390x-rhel.config +++ b/kernel-s390x-rhel.config @@ -5184,6 +5184,7 @@ CONFIG_SLUB_KUNIT_TEST=m # CONFIG_SLUB_TINY is not set CONFIG_SLUB=y # CONFIG_SMARTJOYPLUS_FF is not set +# CONFIG_SMB_KUNIT_TESTS is not set CONFIG_SMC_DIAG=m # CONFIG_SMC_LO is not set CONFIG_SMC=m diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config index fb67604bf..3baf952be 100644 --- a/kernel-s390x-zfcpdump-rhel.config +++ b/kernel-s390x-zfcpdump-rhel.config @@ -5204,6 +5204,7 @@ CONFIG_SLUB_KUNIT_TEST=m # CONFIG_SLUB_TINY is not set CONFIG_SLUB=y # CONFIG_SMARTJOYPLUS_FF is not set +# CONFIG_SMB_KUNIT_TESTS is not set CONFIG_SMC_DIAG=m # CONFIG_SMC_LO is not set CONFIG_SMC=m diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config index f9acf208f..453527c51 100644 --- a/kernel-x86_64-debug-rhel.config +++ b/kernel-x86_64-debug-rhel.config @@ -5485,6 +5485,7 @@ CONFIG_SLUB_KUNIT_TEST=m # CONFIG_SLUB_TINY is not set CONFIG_SLUB=y # CONFIG_SMARTJOYPLUS_FF is not set +# CONFIG_SMB_KUNIT_TESTS is not set # CONFIG_SMC is not set # CONFIG_SM_FTL is not set CONFIG_SMP=y diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config index 1389fab85..3383fecf0 100644 --- a/kernel-x86_64-rhel.config +++ b/kernel-x86_64-rhel.config @@ -5463,6 +5463,7 @@ CONFIG_SLUB_KUNIT_TEST=m # CONFIG_SLUB_TINY is not set CONFIG_SLUB=y # CONFIG_SMARTJOYPLUS_FF is not set +# CONFIG_SMB_KUNIT_TESTS is not set # CONFIG_SMC is not set # CONFIG_SM_FTL is not set CONFIG_SMP=y diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config index edc422a7c..9ad8e732a 100644 --- a/kernel-x86_64-rt-debug-rhel.config +++ b/kernel-x86_64-rt-debug-rhel.config @@ -5580,6 +5580,7 @@ CONFIG_SLUB_KUNIT_TEST=m # CONFIG_SLUB_TINY is not set CONFIG_SLUB=y # CONFIG_SMARTJOYPLUS_FF is not set +# CONFIG_SMB_KUNIT_TESTS is not set # CONFIG_SMC is not set # CONFIG_SM_FTL is not set CONFIG_SMP=y diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config index f98e68c00..dd8b0a899 100644 --- a/kernel-x86_64-rt-rhel.config +++ b/kernel-x86_64-rt-rhel.config @@ -5558,6 +5558,7 @@ CONFIG_SLUB_KUNIT_TEST=m # CONFIG_SLUB_TINY is not set CONFIG_SLUB=y # CONFIG_SMARTJOYPLUS_FF is not set +# CONFIG_SMB_KUNIT_TESTS is not set # CONFIG_SMC is not set # CONFIG_SM_FTL is not set CONFIG_SMP=y diff --git a/kernel.changelog b/kernel.changelog index 2d8e63c60..0cb10c31e 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,230 @@ +* Thu Aug 06 2026 CKI KWF Bot [5.14.0-734.el9] +- redhat/configs: disable CONFIG_SMB_KUNIT_TESTS (Paulo Alcantara) [RHEL-216926] +- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-216926] +- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-216926] +- smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-216926] +- cifs: validate idmap key payload length (Paulo Alcantara) [RHEL-216926] +- smb: client: remove conditional return with no effect (Paulo Alcantara) [RHEL-216926] +- smb: client: fix buffer leaks in SMB1 read and write (Paulo Alcantara) [RHEL-216926] +- smb: client: use GFP_KERNEL for registry allocation (Paulo Alcantara) [RHEL-216926] +- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-216926] +- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-216926] +- smb: client: handle STATUS_STOPPED_ON_SYMLINK responses without a symlink target (Paulo Alcantara) [RHEL-216926] +- smb: client: bound dirent name against end of SMB response in cifs_filldir (Paulo Alcantara) [RHEL-216926] +- smb: client: validate DFS referral PathConsumed (Paulo Alcantara) [RHEL-216926] +- smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-216926] +- smb: client: reject overlapping data areas in SMB2 responses (Paulo Alcantara) [RHEL-216926] +- smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-216926] +- smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-216926] +- smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-216926] +- smb/client: handle overlapping allocated ranges in fallocate (Paulo Alcantara) [RHEL-216926] +- smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-216926] +- smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-216926] +- smb: client: mask server-provided mode to 07777 in modefromsid (Paulo Alcantara) [RHEL-216926] +- smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-216926] +- smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-216926] +- smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-216926] +- smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-216926] +- smb: client: fix overflow in passthrough ioctl bounds check (Paulo Alcantara) [RHEL-216926] +- cifs: Fix support for creating SFU fifo (Paulo Alcantara) [RHEL-216926] +- cifs: Fix support for creating SFU socket (Paulo Alcantara) [RHEL-216926] +- cifs: validate DFS referral string offsets (Paulo Alcantara) [RHEL-216926] +- smb: client: use GFP_KERNEL for DFS cache allocations (Paulo Alcantara) [RHEL-216926] +- smb: client: restrict implied bcc[0] exemption to responses without data area (Paulo Alcantara) [RHEL-216926] +- smb: client: preserve leading slash for POSIX absolute symlink targets (Paulo Alcantara) [RHEL-216926] +- smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-216926] +- smb: client: use unaligned reads in parse_posix_ctxt() (Paulo Alcantara) [RHEL-216926] +- smb: client: harden POSIX SID length parsing (Paulo Alcantara) [RHEL-216926] +- cifs: define variable sized buffer for querydir responses (Paulo Alcantara) [RHEL-216926] +- smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-216926] +- smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-216926] +- smb: client: Fix next buffer leak in receive_encrypted_standard() (Paulo Alcantara) [RHEL-216926] +- smb/client: use %%pe to print error pointer (Paulo Alcantara) [RHEL-216926] +- smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-216926] +- smb common: add missing AAPL defines (Paulo Alcantara) [RHEL-216926] +- smb/client: fix chown/chgrp with SMB3 POSIX Extensions (Paulo Alcantara) [RHEL-216926] +- smb/client: fix security flag calculation when setting security descriptors (Paulo Alcantara) [RHEL-216926] +- smb: client: refactor ACL setting control flow in id_mode_to_cifs_acl() (Paulo Alcantara) [RHEL-216926] +- smb: client: fix query directory replay double-free (Paulo Alcantara) [RHEL-216926] +- smb: client: fix change notify replay double-free (Paulo Alcantara) [RHEL-216926] +- smb: client: fix query_info() replay double-free (Paulo Alcantara) [RHEL-216926] +- smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-216926] +- smb: client: fix double-free in SMB2_ioctl() replay (Paulo Alcantara) [RHEL-216926] +- smb: client: fix double-free in SMB2_open() replay (Paulo Alcantara) [RHEL-216926] +- smb: client: fix double-free in SMB2_flush() replay (Paulo Alcantara) [RHEL-216926] +- smb: move compression definitions into common/fscc.h (Paulo Alcantara) [RHEL-216926] +- smb: client: Use more common code in SMB2_tcon() (Paulo Alcantara) [RHEL-216926] +- smb: client: Use more common error handling code in smb3_reconfigure() (Paulo Alcantara) [RHEL-216926] +- smb/client: clean up a type issue in cifs_xattr_get() (Paulo Alcantara) [RHEL-216926] +- smb/client: allow FS_IOC_SETFLAGS to clear compression (Paulo Alcantara) [RHEL-216926] +- smb/client: use writable handle for FS_IOC_SETFLAGS compression (Paulo Alcantara) [RHEL-216926] +- smb/client: always return a value for FS_IOC_GETFLAGS (Paulo Alcantara) [RHEL-216926] +- smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-216926] +- smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-216926] +- cifs: validate full SID length in security descriptors (Paulo Alcantara) [RHEL-216926] +- smb: client: resolve SWN tcon from live registrations (Paulo Alcantara) [RHEL-216926] +- smb: client: fix conflicting option validation for new mount API (Paulo Alcantara) [RHEL-216926] +- cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-216926] +- smb: client: convert cifs_smb3_do_mount() to sget_fc() (Paulo Alcantara) [RHEL-216926] +- smb: client: change allocation requirements in DUP_CTX_STR macro (Paulo Alcantara) [RHEL-216926] +- smb: client: require net admin for CIFS SWN netlink (Paulo Alcantara) [RHEL-216926] +- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (Paulo Alcantara) [RHEL-216926] +- smb: client: avoid integer overflow in SMB2 READ length check (Paulo Alcantara) [RHEL-216926] +- cifs: client: stage smb3_reconfigure() updates and restore ctx on failure (Paulo Alcantara) [RHEL-216926] +- smb/client: fix possible infinite loop and oob read in symlink_data() (Paulo Alcantara) [RHEL-216926] +- SMB3.1.1: add missing QUERY_DIR info levels (Paulo Alcantara) [RHEL-216926] +- smb/client: fix out-of-bounds read in symlink_data() (Paulo Alcantara) [RHEL-216926] +- smb: client: Zero-pad short GSS session keys per MS-SMB2 (Paulo Alcantara) [RHEL-216926] +- smb: client: Use FullSessionKey for AES-256 encryption key derivation (Paulo Alcantara) [RHEL-216926] +- cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-216926] +- cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-216926] +- smb: client: change allocation requirements in smb2_compound_op (Paulo Alcantara) [RHEL-216926] +- smb/client: remove unused smb3_parse_opt() (Paulo Alcantara) [RHEL-216926] +- smb: common: add SMB3_COMPRESS_MAX_ALGS (Paulo Alcantara) [RHEL-216926] +- smb: client: compress: add code docs to lz77.c (Paulo Alcantara) [RHEL-216926] +- smb: client: compress: LZ77 optimizations (Paulo Alcantara) [RHEL-216926] +- smb: client: compress: increase LZ77_MATCH_MAX_DIST (Paulo Alcantara) [RHEL-216926] +- smb: client: compress: fix counting in LZ77 match finding (Paulo Alcantara) [RHEL-216926] +- smb: client: compress: fix buffer overrun in lz77_compress() (Paulo Alcantara) [RHEL-216926] +- smb: client: fix (remove) drop_dir_cache module parameter (Paulo Alcantara) [RHEL-216926] +- smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (Paulo Alcantara) [RHEL-216926] +- smb: client: compress: fix bad encoding on last LZ77 flag (Paulo Alcantara) [RHEL-216926] +- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-216926] +- smb: client: fix integer underflow in receive_encrypted_read() (Paulo Alcantara) [RHEL-216926] +- smb: client: add tracepoints for deferred handle caching (Paulo Alcantara) [RHEL-216926] +- smb: client: add oplock level to smb3_open_done tracepoint (Paulo Alcantara) [RHEL-216926] +- smb: client: add tracepoint for local lock conflicts (Paulo Alcantara) [RHEL-216926] +- smb: client: add tracepoints for lock operations (Paulo Alcantara) [RHEL-216926] +- smb: client: allow both 'lease' and 'nolease' mount options (Paulo Alcantara) [RHEL-216926] +- smb: move filesystem_vol_info into common/fscc.h (Paulo Alcantara) [RHEL-216926] +- smb: move file_basic_info into common/fscc.h (Paulo Alcantara) [RHEL-216926] +- smb: move some definitions from common/smb2pdu.h into common/fscc.h (Paulo Alcantara) [RHEL-216926] +- vfs: get rid of BUG_ON() in d_mark_tmpfile_name() (Paulo Alcantara) [RHEL-216926] +- smb: client: get rid of d_drop()+d_add() (Paulo Alcantara) [RHEL-216926] +- smb: client: set ATTR_TEMPORARY with O_TMPFILE | O_EXCL (Paulo Alcantara) [RHEL-216926] +- smb: client: add support for O_TMPFILE (Paulo Alcantara) [RHEL-216926] +- vfs: introduce d_mark_tmpfile_name() (Paulo Alcantara) [RHEL-216926] +- smb: client: add missing MODULE_DESCRIPTION() to smb1maperror_test (Paulo Alcantara) [RHEL-216926] +- smb: client: Remove unnecessary selection of CRYPTO_ECB (Paulo Alcantara) [RHEL-216926] +- smb/client: move smb2maperror declarations to smb2proto.h (Paulo Alcantara) [RHEL-216926] +- smb/client: introduce KUnit tests to check DOS/SRV err mapping search (Paulo Alcantara) [RHEL-216926] +- smb/client: check if SMB1 DOS/SRV error mapping arrays are sorted (Paulo Alcantara) [RHEL-216926] +- smb/client: use binary search for SMB1 DOS/SRV error mapping (Paulo Alcantara) [RHEL-216926] +- smb/client: autogenerate SMB1 DOS/SRV to POSIX error mapping (Paulo Alcantara) [RHEL-216926] +- smb/client: annotate smberr.h with POSIX error codes (Paulo Alcantara) [RHEL-216926] +- smb/client: move ERRnetlogonNotStarted to DOS error class (Paulo Alcantara) [RHEL-216926] +- smb/client: introduce KUnit test to check ntstatus_to_dos_map search (Paulo Alcantara) [RHEL-216926] +- smb/client: check if ntstatus_to_dos_map is sorted (Paulo Alcantara) [RHEL-216926] +- smb/client: use binary search for NT status to DOS mapping (Paulo Alcantara) [RHEL-216926] +- smb/client: refactor ntstatus_to_dos() to return mapping entry (Paulo Alcantara) [RHEL-216926] +- smb/client: replace nt_errs with ntstatus_to_dos_map (Paulo Alcantara) [RHEL-216926] +- smb/client: autogenerate SMB1 NT status to DOS error mapping (Paulo Alcantara) [RHEL-216926] +- smb/client: annotate nterr.h with DOS error codes (Paulo Alcantara) [RHEL-216926] +- smb/client: avoid null-ptr-deref when tests fail in test_cmp_map() (Paulo Alcantara) [RHEL-216926] +- fs/smb/client: add verbose error logging for UNC parsing (Paulo Alcantara) [RHEL-216926] +- smb/client: ensure smb2_mapping_table rebuild on cmd changes (Paulo Alcantara) [RHEL-216926] +- smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-216926] +- cifs: smb1: fix comment typo (Paulo Alcantara) [RHEL-216926] +- smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-216926] +- smb: client: fix iface port assignment in parse_server_interfaces (Paulo Alcantara) [RHEL-216926] +- smb/client: only export symbol for 'smb2maperror-test' module (Paulo Alcantara) [RHEL-216926] +- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-216926] +- smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-216926] +- smb/client: make SMB2 maperror KUnit tests a separate module (Paulo Alcantara) [RHEL-216926] +- smb: client: Use snprintf in cifs_set_cifscreds (Paulo Alcantara) [RHEL-216926] +- smb: client: Don't log plaintext credentials in cifs_set_cifscreds (Paulo Alcantara) [RHEL-216926] +- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-216926] +- smb: client: fix cifs_pick_channel when channels are equally loaded (Paulo Alcantara) [RHEL-216926] +- smb: client: terminate session upon failed client required signing (Paulo Alcantara) [RHEL-216926] +- smb/client: move NT_STATUS_MORE_ENTRIES (Paulo Alcantara) [RHEL-216926] +- smb/client: rename to NT_ERROR_INVALID_DATATYPE (Paulo Alcantara) [RHEL-216926] +- smb/client: rename to NT_STATUS_SOME_NOT_MAPPED (Paulo Alcantara) [RHEL-216926] +- smb/client: map NT_STATUS_PRIVILEGE_NOT_HELD (Paulo Alcantara) [RHEL-216926] +- smb/client: map NT_STATUS_MORE_PROCESSING_REQUIRED (Paulo Alcantara) [RHEL-216926] +- smb/client: map NT_STATUS_BUFFER_OVERFLOW (Paulo Alcantara) [RHEL-216926] +- smb/client: map NT_STATUS_NOTIFY_ENUM_DIR (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Remove duplicate include of cifs_debug.h (Paulo Alcantara) [RHEL-216926] +- smb client: Add generated file to gitignore file (Paulo Alcantara) [RHEL-216926] +- cifs: Fix the copyright banner on smb1maperror.c (Paulo Alcantara) [RHEL-216926] +- smb: common: add header guards to fs/smb/common/smb2status.h (Paulo Alcantara) [RHEL-216926] +- smb: client: Avoid a dozen -Wflex-array-member-not-at-end warnings (Paulo Alcantara) [RHEL-216926] +- smb/client: remove useless comment in mapping_table_ERRSRV (Paulo Alcantara) [RHEL-216926] +- smb/client: remove some literal NT error codes from ntstatus_to_dos_map (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_VOLUME_NOT_UPGRADED (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_NO_USER_KEYS (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_WRONG_EFS (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_NO_EFS (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_NO_RECOVERY_POLICY (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_RANGE_NOT_FOUND (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_DECRYPTION_FAILED (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_ENCRYPTION_FAILED (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_DIRECTORY_IS_A_REPARSE_POINT (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_VOLUME_DISMOUNTED (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_BIOS_FAILED_TO_CONNECT_INTERRUPT (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_VARIABLE_NOT_FOUND (Paulo Alcantara) [RHEL-216926] +- smb/client: rename ERRinvlevel to ERRunknownlevel (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_OS2_INVALID_LEVEL (Paulo Alcantara) [RHEL-216926] +- smb/client: map NT_STATUS_INVALID_INFO_CLASS to ERRbadpipe (Paulo Alcantara) [RHEL-216926] +- smb/client: introduce KUnit test to check search result of smb2_error_map_table (Paulo Alcantara) [RHEL-216926] +- smb/client: use bsearch() to find target in smb2_error_map_table (Paulo Alcantara) [RHEL-216926] +- smb/client: check whether smb2_error_map_table is sorted in ascending order (Paulo Alcantara) [RHEL-216926] +- cifs: Autogenerate SMB2 error mapping table (Paulo Alcantara) [RHEL-216926] +- smb: client: correct value for smbd_max_fragmented_recv_size (Paulo Alcantara) [RHEL-216926] +- smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-216926] +- smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-216926] +- cifs: Label SMB2 statuses with errors (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Make BCC accessors conditional (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: connect.c (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: sess.c (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: cifsencrypt.c (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: netmisc.c (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: misc.c (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: cifs_debug.c (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Move inline funcs (Paulo Alcantara) [RHEL-216926] +- cifs: Fix cifs_dump_mids() to call ->dump_detail (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Don't return smb_hdr from cifs_{,small_}buf_get() (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Move BCC access functions (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Adjust #includes (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Split SMB1 protocol defs into smb1pdu.h (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Add some #includes (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Move some SMB1 received PDU checking bits to smb1transport.c (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Move some SMB1 receive bits to smb1transport.c (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Separate out SMB1 decls into smb1proto.h (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Create smb1proto.h for SMB1 declarations (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Rename cifstransport.c (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/ntlmssp.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/reparse.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/smb2proto.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/cifs_debug.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/cifs_swn.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/compress.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/cifs_spnego.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/fs_context.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/dns_resolve.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/dfs_cache.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/netlink.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/cifs_unicode.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/dfs.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/cached_dir.h (Paulo Alcantara) [RHEL-216926] +- smb: client: introduce multichannel async work during mount (Paulo Alcantara) [RHEL-216926] +- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-216926] +- rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-207773] +- rtla: Stop the record trace on interrupt (Tomas Glozar) [RHEL-207773] +- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213219] {CVE-2026-63888} +- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212062] +- ice: implement E825 TX ref clock control and TXC hardware sync status (Michal Schmidt) [RHEL-193816] +- ice: add Tx reference clock index handling to AN restart command (Michal Schmidt) [RHEL-193816] +- ice: implement CPI support for E825C (Michal Schmidt) [RHEL-193816] +- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Michal Schmidt) [RHEL-193816] +- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193044] +- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188795] {CVE-2025-54518} +- redhat: sign UKI's inner vmlinuz with modules signing key (Vitaly Kuznetsov) [RHEL-223629] +Resolves: RHEL-188795, RHEL-193044, RHEL-193816, RHEL-207773, RHEL-212062, RHEL-213219, RHEL-216926, RHEL-223629 + * Wed Aug 05 2026 CKI KWF Bot [5.14.0-733.el9] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219617] {CVE-2026-64320} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-212990] diff --git a/kernel.spec b/kernel.spec index fdf73110d..3eab57ffc 100644 --- a/kernel.spec +++ b/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 733 +%define pkgrelease 734 %define kversion 5 -%define tarfile_release 5.14.0-733.el9 +%define tarfile_release 5.14.0-734.el9 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 733%{?buildid}%{?dist} +%define specrelease 734%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-733.el9 +%define kabiversion 5.14.0-734.el9 # # End of genspec.sh variables @@ -2011,6 +2011,11 @@ BuildKernel() { cp arch/$Arch/boot/zImage.stub $RPM_BUILD_ROOT/lib/modules/$KernelVer/zImage.stub-$KernelVer || : fi +%if %{efiuki} + # Preserve unsigned kernel for the UKI + cp $KernelImage $KernelImage.unsigned +%endif + %if %{signkernel} if [ "$KernelImage" = vmlinux ]; then # We can't strip and sign $KernelImage in place, because @@ -2464,6 +2469,20 @@ BuildKernel() { if [ "$Variant" != "rt" ] && [ "$Variant" != "rt-debug" ] && [ "$Variant" != "rt-64k" ] && [ "$Variant" != "rt-64k-debug" ]; then popd +%if %{signkernel}%{signmodules} + # Sign inner vmlinuz with the transient modules signing key to allow kexec + KernelUnifiedVmlinuz="$KernelImage.signed.trans" + rm -f "$KernelUnifiedVmlinuz" + UKI_nss_dir=$(mktemp -d) + certutil -N -d "$UKI_nss_dir" --empty-password + openssl pkcs12 -export -in certs/signing_key.pem -passout pass: -out certs/signing_key.p12 + pk12util -i certs/signing_key.p12 -d "$UKI_nss_dir" -W "" + NSS_certname=$(certutil -L -d "$UKI_nss_dir" | tail -1 | sed -e 's/u,u,u//' -e 's/^[ \t]*//' -e 's/[ \t]*$//') + pesign -n "$UKI_nss_dir" -i "$KernelImage.unsigned" -o "$KernelUnifiedVmlinuz" -c "$NSS_certname" -s -f +%else + KernelUnifiedVmlinuz="$KernelImage.unsigned" +%endif + SBAT=$(cat <<- EOF linux,1,Red Hat,linux,$KernelVer,mailto:secalert@redhat.com linux.%{sbat_suffix},1,Red Hat,linux,$KernelVer,mailto:secalert@redhat.com @@ -2490,7 +2509,7 @@ BuildKernel() { --logfile=$(mktemp) \ --uefi \ --sbat "$SBAT" \ - --kernel-image $(realpath $KernelImage) \ + --kernel-image $(realpath $KernelUnifiedVmlinuz) \ --kernel-cmdline 'console=tty0 console=ttyS0' \ $KernelUnifiedImage @@ -3856,6 +3875,232 @@ fi # # %changelog +* Thu Aug 06 2026 CKI KWF Bot [5.14.0-734.el9] +- redhat/configs: disable CONFIG_SMB_KUNIT_TESTS (Paulo Alcantara) [RHEL-216926] +- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-216926] +- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-216926] +- smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-216926] +- cifs: validate idmap key payload length (Paulo Alcantara) [RHEL-216926] +- smb: client: remove conditional return with no effect (Paulo Alcantara) [RHEL-216926] +- smb: client: fix buffer leaks in SMB1 read and write (Paulo Alcantara) [RHEL-216926] +- smb: client: use GFP_KERNEL for registry allocation (Paulo Alcantara) [RHEL-216926] +- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-216926] +- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-216926] +- smb: client: handle STATUS_STOPPED_ON_SYMLINK responses without a symlink target (Paulo Alcantara) [RHEL-216926] +- smb: client: bound dirent name against end of SMB response in cifs_filldir (Paulo Alcantara) [RHEL-216926] +- smb: client: validate DFS referral PathConsumed (Paulo Alcantara) [RHEL-216926] +- smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-216926] +- smb: client: reject overlapping data areas in SMB2 responses (Paulo Alcantara) [RHEL-216926] +- smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-216926] +- smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-216926] +- smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-216926] +- smb/client: handle overlapping allocated ranges in fallocate (Paulo Alcantara) [RHEL-216926] +- smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-216926] +- smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-216926] +- smb: client: mask server-provided mode to 07777 in modefromsid (Paulo Alcantara) [RHEL-216926] +- smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-216926] +- smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-216926] +- smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-216926] +- smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-216926] +- smb: client: fix overflow in passthrough ioctl bounds check (Paulo Alcantara) [RHEL-216926] +- cifs: Fix support for creating SFU fifo (Paulo Alcantara) [RHEL-216926] +- cifs: Fix support for creating SFU socket (Paulo Alcantara) [RHEL-216926] +- cifs: validate DFS referral string offsets (Paulo Alcantara) [RHEL-216926] +- smb: client: use GFP_KERNEL for DFS cache allocations (Paulo Alcantara) [RHEL-216926] +- smb: client: restrict implied bcc[0] exemption to responses without data area (Paulo Alcantara) [RHEL-216926] +- smb: client: preserve leading slash for POSIX absolute symlink targets (Paulo Alcantara) [RHEL-216926] +- smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-216926] +- smb: client: use unaligned reads in parse_posix_ctxt() (Paulo Alcantara) [RHEL-216926] +- smb: client: harden POSIX SID length parsing (Paulo Alcantara) [RHEL-216926] +- cifs: define variable sized buffer for querydir responses (Paulo Alcantara) [RHEL-216926] +- smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-216926] +- smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-216926] +- smb: client: Fix next buffer leak in receive_encrypted_standard() (Paulo Alcantara) [RHEL-216926] +- smb/client: use %%pe to print error pointer (Paulo Alcantara) [RHEL-216926] +- smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-216926] +- smb common: add missing AAPL defines (Paulo Alcantara) [RHEL-216926] +- smb/client: fix chown/chgrp with SMB3 POSIX Extensions (Paulo Alcantara) [RHEL-216926] +- smb/client: fix security flag calculation when setting security descriptors (Paulo Alcantara) [RHEL-216926] +- smb: client: refactor ACL setting control flow in id_mode_to_cifs_acl() (Paulo Alcantara) [RHEL-216926] +- smb: client: fix query directory replay double-free (Paulo Alcantara) [RHEL-216926] +- smb: client: fix change notify replay double-free (Paulo Alcantara) [RHEL-216926] +- smb: client: fix query_info() replay double-free (Paulo Alcantara) [RHEL-216926] +- smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-216926] +- smb: client: fix double-free in SMB2_ioctl() replay (Paulo Alcantara) [RHEL-216926] +- smb: client: fix double-free in SMB2_open() replay (Paulo Alcantara) [RHEL-216926] +- smb: client: fix double-free in SMB2_flush() replay (Paulo Alcantara) [RHEL-216926] +- smb: move compression definitions into common/fscc.h (Paulo Alcantara) [RHEL-216926] +- smb: client: Use more common code in SMB2_tcon() (Paulo Alcantara) [RHEL-216926] +- smb: client: Use more common error handling code in smb3_reconfigure() (Paulo Alcantara) [RHEL-216926] +- smb/client: clean up a type issue in cifs_xattr_get() (Paulo Alcantara) [RHEL-216926] +- smb/client: allow FS_IOC_SETFLAGS to clear compression (Paulo Alcantara) [RHEL-216926] +- smb/client: use writable handle for FS_IOC_SETFLAGS compression (Paulo Alcantara) [RHEL-216926] +- smb/client: always return a value for FS_IOC_GETFLAGS (Paulo Alcantara) [RHEL-216926] +- smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-216926] +- smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-216926] +- cifs: validate full SID length in security descriptors (Paulo Alcantara) [RHEL-216926] +- smb: client: resolve SWN tcon from live registrations (Paulo Alcantara) [RHEL-216926] +- smb: client: fix conflicting option validation for new mount API (Paulo Alcantara) [RHEL-216926] +- cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-216926] +- smb: client: convert cifs_smb3_do_mount() to sget_fc() (Paulo Alcantara) [RHEL-216926] +- smb: client: change allocation requirements in DUP_CTX_STR macro (Paulo Alcantara) [RHEL-216926] +- smb: client: require net admin for CIFS SWN netlink (Paulo Alcantara) [RHEL-216926] +- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (Paulo Alcantara) [RHEL-216926] +- smb: client: avoid integer overflow in SMB2 READ length check (Paulo Alcantara) [RHEL-216926] +- cifs: client: stage smb3_reconfigure() updates and restore ctx on failure (Paulo Alcantara) [RHEL-216926] +- smb/client: fix possible infinite loop and oob read in symlink_data() (Paulo Alcantara) [RHEL-216926] +- SMB3.1.1: add missing QUERY_DIR info levels (Paulo Alcantara) [RHEL-216926] +- smb/client: fix out-of-bounds read in symlink_data() (Paulo Alcantara) [RHEL-216926] +- smb: client: Zero-pad short GSS session keys per MS-SMB2 (Paulo Alcantara) [RHEL-216926] +- smb: client: Use FullSessionKey for AES-256 encryption key derivation (Paulo Alcantara) [RHEL-216926] +- cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-216926] +- cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-216926] +- smb: client: change allocation requirements in smb2_compound_op (Paulo Alcantara) [RHEL-216926] +- smb/client: remove unused smb3_parse_opt() (Paulo Alcantara) [RHEL-216926] +- smb: common: add SMB3_COMPRESS_MAX_ALGS (Paulo Alcantara) [RHEL-216926] +- smb: client: compress: add code docs to lz77.c (Paulo Alcantara) [RHEL-216926] +- smb: client: compress: LZ77 optimizations (Paulo Alcantara) [RHEL-216926] +- smb: client: compress: increase LZ77_MATCH_MAX_DIST (Paulo Alcantara) [RHEL-216926] +- smb: client: compress: fix counting in LZ77 match finding (Paulo Alcantara) [RHEL-216926] +- smb: client: compress: fix buffer overrun in lz77_compress() (Paulo Alcantara) [RHEL-216926] +- smb: client: fix (remove) drop_dir_cache module parameter (Paulo Alcantara) [RHEL-216926] +- smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (Paulo Alcantara) [RHEL-216926] +- smb: client: compress: fix bad encoding on last LZ77 flag (Paulo Alcantara) [RHEL-216926] +- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-216926] +- smb: client: fix integer underflow in receive_encrypted_read() (Paulo Alcantara) [RHEL-216926] +- smb: client: add tracepoints for deferred handle caching (Paulo Alcantara) [RHEL-216926] +- smb: client: add oplock level to smb3_open_done tracepoint (Paulo Alcantara) [RHEL-216926] +- smb: client: add tracepoint for local lock conflicts (Paulo Alcantara) [RHEL-216926] +- smb: client: add tracepoints for lock operations (Paulo Alcantara) [RHEL-216926] +- smb: client: allow both 'lease' and 'nolease' mount options (Paulo Alcantara) [RHEL-216926] +- smb: move filesystem_vol_info into common/fscc.h (Paulo Alcantara) [RHEL-216926] +- smb: move file_basic_info into common/fscc.h (Paulo Alcantara) [RHEL-216926] +- smb: move some definitions from common/smb2pdu.h into common/fscc.h (Paulo Alcantara) [RHEL-216926] +- vfs: get rid of BUG_ON() in d_mark_tmpfile_name() (Paulo Alcantara) [RHEL-216926] +- smb: client: get rid of d_drop()+d_add() (Paulo Alcantara) [RHEL-216926] +- smb: client: set ATTR_TEMPORARY with O_TMPFILE | O_EXCL (Paulo Alcantara) [RHEL-216926] +- smb: client: add support for O_TMPFILE (Paulo Alcantara) [RHEL-216926] +- vfs: introduce d_mark_tmpfile_name() (Paulo Alcantara) [RHEL-216926] +- smb: client: add missing MODULE_DESCRIPTION() to smb1maperror_test (Paulo Alcantara) [RHEL-216926] +- smb: client: Remove unnecessary selection of CRYPTO_ECB (Paulo Alcantara) [RHEL-216926] +- smb/client: move smb2maperror declarations to smb2proto.h (Paulo Alcantara) [RHEL-216926] +- smb/client: introduce KUnit tests to check DOS/SRV err mapping search (Paulo Alcantara) [RHEL-216926] +- smb/client: check if SMB1 DOS/SRV error mapping arrays are sorted (Paulo Alcantara) [RHEL-216926] +- smb/client: use binary search for SMB1 DOS/SRV error mapping (Paulo Alcantara) [RHEL-216926] +- smb/client: autogenerate SMB1 DOS/SRV to POSIX error mapping (Paulo Alcantara) [RHEL-216926] +- smb/client: annotate smberr.h with POSIX error codes (Paulo Alcantara) [RHEL-216926] +- smb/client: move ERRnetlogonNotStarted to DOS error class (Paulo Alcantara) [RHEL-216926] +- smb/client: introduce KUnit test to check ntstatus_to_dos_map search (Paulo Alcantara) [RHEL-216926] +- smb/client: check if ntstatus_to_dos_map is sorted (Paulo Alcantara) [RHEL-216926] +- smb/client: use binary search for NT status to DOS mapping (Paulo Alcantara) [RHEL-216926] +- smb/client: refactor ntstatus_to_dos() to return mapping entry (Paulo Alcantara) [RHEL-216926] +- smb/client: replace nt_errs with ntstatus_to_dos_map (Paulo Alcantara) [RHEL-216926] +- smb/client: autogenerate SMB1 NT status to DOS error mapping (Paulo Alcantara) [RHEL-216926] +- smb/client: annotate nterr.h with DOS error codes (Paulo Alcantara) [RHEL-216926] +- smb/client: avoid null-ptr-deref when tests fail in test_cmp_map() (Paulo Alcantara) [RHEL-216926] +- fs/smb/client: add verbose error logging for UNC parsing (Paulo Alcantara) [RHEL-216926] +- smb/client: ensure smb2_mapping_table rebuild on cmd changes (Paulo Alcantara) [RHEL-216926] +- smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-216926] +- cifs: smb1: fix comment typo (Paulo Alcantara) [RHEL-216926] +- smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-216926] +- smb: client: fix iface port assignment in parse_server_interfaces (Paulo Alcantara) [RHEL-216926] +- smb/client: only export symbol for 'smb2maperror-test' module (Paulo Alcantara) [RHEL-216926] +- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-216926] +- smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-216926] +- smb/client: make SMB2 maperror KUnit tests a separate module (Paulo Alcantara) [RHEL-216926] +- smb: client: Use snprintf in cifs_set_cifscreds (Paulo Alcantara) [RHEL-216926] +- smb: client: Don't log plaintext credentials in cifs_set_cifscreds (Paulo Alcantara) [RHEL-216926] +- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-216926] +- smb: client: fix cifs_pick_channel when channels are equally loaded (Paulo Alcantara) [RHEL-216926] +- smb: client: terminate session upon failed client required signing (Paulo Alcantara) [RHEL-216926] +- smb/client: move NT_STATUS_MORE_ENTRIES (Paulo Alcantara) [RHEL-216926] +- smb/client: rename to NT_ERROR_INVALID_DATATYPE (Paulo Alcantara) [RHEL-216926] +- smb/client: rename to NT_STATUS_SOME_NOT_MAPPED (Paulo Alcantara) [RHEL-216926] +- smb/client: map NT_STATUS_PRIVILEGE_NOT_HELD (Paulo Alcantara) [RHEL-216926] +- smb/client: map NT_STATUS_MORE_PROCESSING_REQUIRED (Paulo Alcantara) [RHEL-216926] +- smb/client: map NT_STATUS_BUFFER_OVERFLOW (Paulo Alcantara) [RHEL-216926] +- smb/client: map NT_STATUS_NOTIFY_ENUM_DIR (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Remove duplicate include of cifs_debug.h (Paulo Alcantara) [RHEL-216926] +- smb client: Add generated file to gitignore file (Paulo Alcantara) [RHEL-216926] +- cifs: Fix the copyright banner on smb1maperror.c (Paulo Alcantara) [RHEL-216926] +- smb: common: add header guards to fs/smb/common/smb2status.h (Paulo Alcantara) [RHEL-216926] +- smb: client: Avoid a dozen -Wflex-array-member-not-at-end warnings (Paulo Alcantara) [RHEL-216926] +- smb/client: remove useless comment in mapping_table_ERRSRV (Paulo Alcantara) [RHEL-216926] +- smb/client: remove some literal NT error codes from ntstatus_to_dos_map (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_VOLUME_NOT_UPGRADED (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_NO_USER_KEYS (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_WRONG_EFS (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_NO_EFS (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_NO_RECOVERY_POLICY (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_RANGE_NOT_FOUND (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_DECRYPTION_FAILED (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_ENCRYPTION_FAILED (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_DIRECTORY_IS_A_REPARSE_POINT (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_VOLUME_DISMOUNTED (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_BIOS_FAILED_TO_CONNECT_INTERRUPT (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_VARIABLE_NOT_FOUND (Paulo Alcantara) [RHEL-216926] +- smb/client: rename ERRinvlevel to ERRunknownlevel (Paulo Alcantara) [RHEL-216926] +- smb/client: add NT_STATUS_OS2_INVALID_LEVEL (Paulo Alcantara) [RHEL-216926] +- smb/client: map NT_STATUS_INVALID_INFO_CLASS to ERRbadpipe (Paulo Alcantara) [RHEL-216926] +- smb/client: introduce KUnit test to check search result of smb2_error_map_table (Paulo Alcantara) [RHEL-216926] +- smb/client: use bsearch() to find target in smb2_error_map_table (Paulo Alcantara) [RHEL-216926] +- smb/client: check whether smb2_error_map_table is sorted in ascending order (Paulo Alcantara) [RHEL-216926] +- cifs: Autogenerate SMB2 error mapping table (Paulo Alcantara) [RHEL-216926] +- smb: client: correct value for smbd_max_fragmented_recv_size (Paulo Alcantara) [RHEL-216926] +- smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-216926] +- smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-216926] +- cifs: Label SMB2 statuses with errors (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Make BCC accessors conditional (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: connect.c (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: sess.c (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: cifsencrypt.c (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: netmisc.c (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: misc.c (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: cifs_debug.c (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Move inline funcs (Paulo Alcantara) [RHEL-216926] +- cifs: Fix cifs_dump_mids() to call ->dump_detail (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Don't return smb_hdr from cifs_{,small_}buf_get() (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Move BCC access functions (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Adjust #includes (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Split SMB1 protocol defs into smb1pdu.h (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Add some #includes (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Move some SMB1 received PDU checking bits to smb1transport.c (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Move some SMB1 receive bits to smb1transport.c (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Separate out SMB1 decls into smb1proto.h (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Create smb1proto.h for SMB1 declarations (Paulo Alcantara) [RHEL-216926] +- cifs: SMB1 split: Rename cifstransport.c (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/ntlmssp.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/reparse.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/smb2proto.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/cifs_debug.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/cifs_swn.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/compress.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/cifs_spnego.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/fs_context.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/dns_resolve.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/dfs_cache.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/netlink.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/cifs_unicode.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/dfs.h (Paulo Alcantara) [RHEL-216926] +- cifs: Scripted clean up fs/smb/client/cached_dir.h (Paulo Alcantara) [RHEL-216926] +- smb: client: introduce multichannel async work during mount (Paulo Alcantara) [RHEL-216926] +- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-216926] +- rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-207773] +- rtla: Stop the record trace on interrupt (Tomas Glozar) [RHEL-207773] +- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213219] {CVE-2026-63888} +- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212062] +- ice: implement E825 TX ref clock control and TXC hardware sync status (Michal Schmidt) [RHEL-193816] +- ice: add Tx reference clock index handling to AN restart command (Michal Schmidt) [RHEL-193816] +- ice: implement CPI support for E825C (Michal Schmidt) [RHEL-193816] +- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Michal Schmidt) [RHEL-193816] +- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193044] +- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188795] {CVE-2025-54518} +- redhat: sign UKI's inner vmlinuz with modules signing key (Vitaly Kuznetsov) [RHEL-223629] + * Wed Aug 05 2026 CKI KWF Bot [5.14.0-733.el9] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219617] {CVE-2026-64320} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-212990] diff --git a/sources b/sources index ff8fc6053..a432381a0 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-733.el9.tar.xz) = bf8fd5d83fa255f767f73ee3e0a93b39dd66cb3011723bbd24e948b072f318a88a6d9599c221c3a922133471cd91cfb23ffee051406f5b383c2996d29b1d6b97 -SHA512 (kernel-abi-stablelists-5.14.0-733.el9.tar.bz2) = 56fa3ff396bd06ac2f6c802d9e7297fd02e4a2b658b2ca834a2eb22184882d507aa9c40ea1beb6abcd77b0356ac9bd174d7517a20dfeabde4463f14b9019354b -SHA512 (kernel-kabi-dw-5.14.0-733.el9.tar.bz2) = a88a0b757bb87dbd5c1d5fb6277341c0ab2d7b6b7de63a2ed8f436f3c171edb181689860f5f07566eace6786abd5e2a118802e923a9718da147bc8ab61dfa831 +SHA512 (linux-5.14.0-734.el9.tar.xz) = 34c0aeda58e7e4059228fcb0ff03c875d0e8f83b0aee27c05ad7fabce6b1098da5374400d5c73617914bfb67f09527b20bf589c1e47e936f8639a9c39cf9fbeb +SHA512 (kernel-abi-stablelists-5.14.0-734.el9.tar.bz2) = 0ceded6eb897714722a96d0e18adf6a04bfb1cb6b0ae3feedea7791614f49fda5b07b803c37f53f643a3279184761f0d112cc760404ff1bf5338b119549ee583 +SHA512 (kernel-kabi-dw-5.14.0-734.el9.tar.bz2) = ce510c514b27bcb3cd4985b0f9054a96fd64a9d93854dbab34a7f5628ae08fb43d9408c5700f7df5b2775b0648e22a1208f501e8ac3d87a5d83f4e68416f3180