kernel-5.14.0-528.el9

* Mon Nov 11 2024 Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-528.el9] - net: Fix an unsafe loop on the list (CKI Backport Bot) [RHEL-63844] {CVE-2024-50024} - serial: protect uart_port_dtr_rts() in uart_shutdown() too (CKI Backport Bot) [RHEL-63838] {CVE-2024-50058} - net/sched: accept TCA_STAB only for root qdisc (CKI Backport Bot) [RHEL-63814] {CVE-2024-50039} - s390/crypto: Display Query and Query Authentication Information in sysfs (Mete Durlu) [RHEL-56382] - s390/crypto: Add Support for Query Authentication Information (Mete Durlu) [RHEL-56382] - s390/crypto: Rework RRE and RRF CPACF inline functions (Mete Durlu) [RHEL-56382] - s390/crypto: Add KDSA CPACF Instruction (Mete Durlu) [RHEL-56382] - s390/cpacf: Make use of invalid opcode produce a link error (Mete Durlu) [RHEL-56382] - s390/cpacf: Split and rework cpacf query functions (Mete Durlu) [RHEL-56382] - dma-mapping: fix tracing dma_alloc/free with vmalloc'd memory (Jerry Snitselaar) [RHEL-61942] - mmc: core: Only set maximum DMA segment size if DMA is supported (Jerry Snitselaar) [RHEL-61942] - dma-mapping: fix DMA API tracing for chained scatterlists (Jerry Snitselaar) [RHEL-61942] - dma-mapping: report unlimited DMA addressing in IOMMU DMA path (Jerry Snitselaar) [RHEL-61942] - dma-mapping: fix vmap and mmap of noncontiougs allocations (Jerry Snitselaar) [RHEL-61942] - iommu/dma: remove most stubs in iommu-dma.h (Jerry Snitselaar) [RHEL-61942] - dma-mapping: reflow dma_supported (Jerry Snitselaar) [RHEL-61942] - dma-mapping: reliably inform about DMA support for IOMMU (Jerry Snitselaar) [RHEL-61942] - dma-mapping: add tracing for dma-mapping API calls (Jerry Snitselaar) [RHEL-61942] - dma-mapping: use IOMMU DMA calls for common alloc/free page calls (Jerry Snitselaar) [RHEL-61942] - dma-direct: optimize page freeing when it is not addressable (Jerry Snitselaar) [RHEL-61942] - dma-mapping: clearly mark DMA ops as an architecture feature (Jerry Snitselaar) [RHEL-61942] - vdpa_sim: don't select DMA_OPS (Jerry Snitselaar) [RHEL-61942] - arm64: mm: keep low RAM dma zone (Jerry Snitselaar) [RHEL-61942] - dma-mapping: don't return errors from dma_set_max_seg_size (Jerry Snitselaar) [RHEL-61942] - dma-mapping: don't return errors from dma_set_seg_boundary (Jerry Snitselaar) [RHEL-61942] - dma-mapping: don't return errors from dma_set_min_align_mask (Jerry Snitselaar) [RHEL-61942] - scsi: check that busses support the DMA API before setting dma parameters (Jerry Snitselaar) [RHEL-61942] - arm64: mm: fix DMA zone when dma-ranges is missing (Jerry Snitselaar) [RHEL-61942] - dma-mapping: direct calls for dma-iommu (Jerry Snitselaar) [RHEL-61942] - dma-mapping: call ->unmap_page and ->unmap_sg unconditionally (Jerry Snitselaar) [RHEL-61942] - arm64: support DMA zone above 4GB (Jerry Snitselaar) [RHEL-61942] - dma-mapping: replace zone_dma_bits by zone_dma_limit (Jerry Snitselaar) [RHEL-61942] - dma-mapping: use bit masking to check VM_DMA_COHERENT (Jerry Snitselaar) [RHEL-61942] - iommu: Set iommu_attach_handle->domain in core (Jerry Snitselaar) [RHEL-61942] - iommufd: Avoid duplicated __iommu_group_set_core_domain() call (Jerry Snitselaar) [RHEL-61942] - iommufd: Protect against overflow of ALIGN() during iova allocation (Jerry Snitselaar) [RHEL-61942] - iommufd: Reorder struct forward declarations (Jerry Snitselaar) [RHEL-61942] - iommufd: Check the domain owner of the parent before creating a nesting domain (Jerry Snitselaar) [RHEL-61942] - iommufd/device: Enforce reserved IOVA also when attached to hwpt_nested (Jerry Snitselaar) [RHEL-55215] - iommufd/selftest: Fix buffer read overrrun in the dirty test (Jerry Snitselaar) [RHEL-61942] - iommufd: Reorder include files (Jerry Snitselaar) [RHEL-61942] - iommu: Allow ATS to work on VFs when the PF uses IDENTITY (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Test for PAGING domains before freeing a domain (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Add kernel parameters to limit V1 page-sizes (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Do not set the D bit on AMD v2 table entries (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Correct the reported page sizes from the V1 table (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Remove the confusing dummy iommu_flush_ops tlb ops (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Fix typo of , instead of ; (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Remove conditions from domain free paths (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Narrow the use of struct protection_domain to invalidation (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Store the nid in io_pgtable_cfg instead of the domain (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Remove amd_io_pgtable::pgtbl_cfg (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Rename struct amd_io_pgtable iopt to pgtbl (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Remove the amd_iommu_domain_set_pt_root() and related (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Remove amd_iommu_domain_update() from page table freeing (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Set the pgsize_bitmap correctly (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Allocate the page table root using GFP_KERNEL (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Move allocation of the top table into v1_alloc_pgtable (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Make amd_iommu_dev_update_dte() static (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Rework amd_iommu_update_and_flush_device_table() (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Make amd_iommu_domain_flush_complete() static (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Make amd_iommu_dev_flush_pasid_all() static (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Handle error path in amd_iommu_probe_device() (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Remove unused DTE_GCR3_INDEX_* macros (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Make amd_iommu_is_attach_deferred() static (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Update event log pointer as soon as processing is complete (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Update PASID, GATS, GLX, SNPAVICSUP feature related macros (Jerry Snitselaar) [RHEL-61942] - iommu/amd: Add blocked domain support (Jerry Snitselaar) [RHEL-61942] - sizes.h: Add entries between SZ_32G and SZ_64T (Jerry Snitselaar) [RHEL-61942] - iommu/vt-d: Introduce batched cache invalidation (Jerry Snitselaar) [RHEL-61942] - iommu/vt-d: Add qi_batch for dmar_domain (Jerry Snitselaar) [RHEL-61942] - iommu/vt-d: Refactor IOTLB and Dev-IOTLB flush for batching (Jerry Snitselaar) [RHEL-61942] - iommu/vt-d: Factor out invalidation descriptor composition (Jerry Snitselaar) [RHEL-61942] - iommu/vt-d: Unconditionally flush device TLB for pasid table updates (Jerry Snitselaar) [RHEL-61942] - iommu/vt-d: Move PCI PASID enablement to probe path (Jerry Snitselaar) [RHEL-61942] - iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (Jerry Snitselaar) [RHEL-61942] - iommu/vt-d: Cleanup si_domain (Jerry Snitselaar) [RHEL-61942] - iommu/vt-d: Add support for static identity domain (Jerry Snitselaar) [RHEL-61942] - iommu/vt-d: Factor out helpers from domain_context_mapping_one() (Jerry Snitselaar) [RHEL-61942] - iommu/vt-d: Remove has_iotlb_device flag (Jerry Snitselaar) [RHEL-61942] - iommu/vt-d: Always reserve a domain ID for identity setup (Jerry Snitselaar) [RHEL-61942] - iommu/vt-d: Remove identity mappings from si_domain (Jerry Snitselaar) [RHEL-61942] - iommu/vt-d: Require DMA domain if hardware not support passthrough (Jerry Snitselaar) [RHEL-61942] - hsr: Simplify code for announcing HSR nodes timer setup (Felix Maurer) [RHEL-63082] - net: annotate data-races around dev->if_port (Ivan Vecera) [RHEL-62123] - inet: bring NLM_DONE out to a separate recv() again (Ivan Vecera) [RHEL-62123] - rtnetlink: provide RCU protection to rtnl_fill_prop_list() (Ivan Vecera) [RHEL-62123] - rtnetlink: make rtnl_fill_link_ifmap() RCU ready (Ivan Vecera) [RHEL-62123] - inet: switch inet_dump_fib() to RCU protection (Ivan Vecera) [RHEL-62123] - nexthop: allow nexthop_mpath_fill_node() to be called without RTNL (Ivan Vecera) [RHEL-62123] - inet: allow ip_valid_fib_dump_req() to be called with RTNL or RCU (Ivan Vecera) [RHEL-62123] - ipv6: switch inet6_dump_ifinfo() to RCU protection (Ivan Vecera) [RHEL-62123] - rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag (Ivan Vecera) [RHEL-62123] - rtnetlink: change nlk->cb_mutex role (Ivan Vecera) [RHEL-62123] - netlink: hold nlk->cb_mutex longer in __netlink_dump_start() (Ivan Vecera) [RHEL-62123] - netlink: fix netlink_diag_dump() return value (Ivan Vecera) [RHEL-62123] - ipv6: use xarray iterator to implement inet6_dump_ifinfo() (Ivan Vecera) [RHEL-62123] - ipv6: prepare inet6_fill_ifinfo() for RCU protection (Ivan Vecera) [RHEL-62123] - ipv6: prepare inet6_fill_ifla6_attrs() for RCU (Ivan Vecera) [RHEL-62123] - rtnetlink: prepare nla_put_iflink() to run under RCU (Ivan Vecera) [RHEL-62123] - net: free altname using an RCU callback (Ivan Vecera) [RHEL-62123] - net: fix removing a namespace with conflicting altnames (Ivan Vecera) [RHEL-62123] - selftests: net: add very basic test for netdev names and namespaces (Ivan Vecera) [RHEL-62123] - net: move altnames together with the netdevice (Ivan Vecera) [RHEL-62123] - net: avoid UAF on deleted altname (Ivan Vecera) [RHEL-62123] - net: check for altname conflicts when changing netdev's netns (Ivan Vecera) [RHEL-62123] - net: fix ifname in netlink ntf during netns move (Ivan Vecera) [RHEL-62123] - net: move from strlcpy with unused retval to strscpy (Ivan Vecera) [RHEL-62123] - ipv6: make mc_forwarding atomic (Ivan Vecera) [RHEL-62123] - net: introduce a function to check if a netdev name is in use (Ivan Vecera) [RHEL-62123] - RDMA/bnxt_re: Fix the GID table length (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Change the sequence of updating the CQ toggle value (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Fix an error path in bnxt_re_add_device (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Fix a possible NULL pointer dereference (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Return more meaningful error (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Fix incorrect dereference of srq in async event (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Fix out of bound check (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Fix the max CQ WQEs for older adapters (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Fix the max WQEs used in Static WQE mode (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Add a check for memory allocation (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Fix incorrect AVID type in WQE structure (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Fix a possible memory leak (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Remove the unused variable en_dev (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Recover the device when FW error is detected (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Group all operations under add_device and remove_device (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Use the aux device for L2 ULP callbacks (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Change aux driver data to en_info to hold more information (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Fix the max WQE size for static WQE support (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Fix the compatibility flag for variable size WQE (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Add support for MR Relaxed Ordering (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Avoid an extra hwrm per MR creation (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Rename a variable (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Update HW interface headers (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Share a page to expose per SRQ info with userspace (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Refactor the BNXT_RE_METHOD_GET_TOGGLE_MEM method (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Get the toggle bits from SRQ events (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Enable variable size WQEs for user space applications (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Handle variable WQE support for user applications (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Fix the table size for PSN/MSN entries (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Get the WQE index from slot index while completing the WQEs (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Add support for Variable WQE in Genp7 adapters (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Disable doorbell moderation if hardware register read fails (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Enable DB moderation for genP7 adapters (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Update the correct DB FIFO depth and mask for GenP7 (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Fix the max msix vectors macro (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Expose the MSN table capability for user library (Mohammad Heib) [RHEL-52759 RHEL-54646] - RDMA/bnxt_re: Allow MSN table capability check (Mohammad Heib) [RHEL-52759 RHEL-54646] - sch/netem: fix use after free in netem_dequeue (CKI Backport Bot) [RHEL-59498] {CVE-2024-46800} - net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN (Jamie Bainbridge) [RHEL-57739] - selftests: net: bridge_vlan_aware: test that other TPIDs are seen as untagged (Jamie Bainbridge) [RHEL-57739] - selftests: forwarding: skip if kernel not support setting bridge fdb learning limit (Jamie Bainbridge) [RHEL-57739] - net: bridge: mst: Check vlan state for egress decision (Jamie Bainbridge) [RHEL-57739] - selftests: forwarding: Make vxlan-bridge-1d pass on debug kernels (Jamie Bainbridge) [RHEL-57739] - selftests: libs: Expand "$@" where possible (Jamie Bainbridge) [RHEL-57739] - net: bridge: fix an inconsistent indentation (Jamie Bainbridge) [RHEL-57739] - selftests: net: lib: set 'i' as local (Jamie Bainbridge) [RHEL-57739] - selftests/net: use tc rule to filter the na packet (Jamie Bainbridge) [RHEL-57739] - selftests: net: use upstream mtools (Jamie Bainbridge) [RHEL-57739] - net: bridge: switchdev: Improve error message for port_obj_add/del functions (Jamie Bainbridge) [RHEL-57739] - net: bridge: fix corrupted ethernet header on multicast-to-unicast (Jamie Bainbridge) [RHEL-57739] - net: bridge: fix multicast-to-unicast with fraglist GSO (Jamie Bainbridge) [RHEL-57739] - selftests: forwarding: add ability to assemble NETIFS array by driver name (Jamie Bainbridge) [RHEL-57739] - net: bridge: remove redundant check of f->dst (Jamie Bainbridge) [RHEL-57739] - bridge/br_netlink.c: no need to return void function (Jamie Bainbridge) [RHEL-57739] - selftests: forwarding: bail_on_lldpad() should SKIP (Jamie Bainbridge) [RHEL-57739] - selftests: forwarding: lib.sh: Validate NETIFS (Jamie Bainbridge) [RHEL-57739] - selftests: net: Unify code of busywait() and slowwait() (Jamie Bainbridge) [RHEL-57739] - selftests: forwarding: Support for performance sensitive tests (Jamie Bainbridge) [RHEL-57739] - selftests: forwarding: Convert log_test() to recognize RET values (Jamie Bainbridge) [RHEL-57739] - selftests: forwarding: Have RET track kselftest framework constants (Jamie Bainbridge) [RHEL-57739] - selftests: lib: Define more kselftest exit codes (Jamie Bainbridge) [RHEL-57739] - selftests/net: add variable NS_LIST for lib.sh (Jamie Bainbridge) [RHEL-57739] - selftests: forwarding: README: Document customization (Jamie Bainbridge) [RHEL-57739] - selftests: forwarding.config.sample: Move overrides to lib.sh (Jamie Bainbridge) [RHEL-57739] - selftests: net: libs: Change variable fallback syntax (Jamie Bainbridge) [RHEL-57739] - selftests: forwarding: Make VXLAN ECN encap tests more robust (Jamie Bainbridge) [RHEL-57739] - selftests: forwarding: Make vxlan-bridge-1q pass on debug kernels (Jamie Bainbridge) [RHEL-57739] - selftests: forwarding: Parametrize mausezahn delay (Jamie Bainbridge) [RHEL-57739] - net: bridge: Exit if multicast_init_stats fails (Jamie Bainbridge) [RHEL-57739] - net: bridge: constify the struct device_type usage (Jamie Bainbridge) [RHEL-57739] - bridge: vlan: use synchronize_net() when holding RTNL (Jamie Bainbridge) [RHEL-57739] - selftests: forwarding: Add missing multicast routing config entries (Jamie Bainbridge) [RHEL-57739] - selftests/net/forwarding: add slowwait functions (Jamie Bainbridge) [RHEL-57739] - net: bridge: Use KMEM_CACHE instead of kmem_cache_create (Jamie Bainbridge) [RHEL-57739] - selftests: forwarding: Remove duplicated lib.sh content (Jamie Bainbridge) [RHEL-57739] - selftests: bonding: Add net/forwarding/lib.sh to TEST_INCLUDES (Jamie Bainbridge) [RHEL-57739] - selftests: team: Add shared library scripts to TEST_INCLUDES (Jamie Bainbridge) [RHEL-57739] - selftests: forwarding: Redefine relative_path variable (Jamie Bainbridge) [RHEL-57739] - selftests: forwarding: Add missing config entries (Jamie Bainbridge) [RHEL-57739] - net: bridge: Do not allocate stats in the driver (Jamie Bainbridge) [RHEL-57739] - fscrypt: remove mention of symlink st_size quirk from documentation (Ian Kent) [RHEL-33888] - MAINTAINERS: update idmapping tree (Ian Kent) [RHEL-33888] - Add Seth Forshee as co-maintainer for idmapped mounts (Ian Kent) [RHEL-33888] - ceph: allow idmapped setattr inode op (Ian Kent) [RHEL-33888] - ceph: pass idmap to __ceph_setattr (Ian Kent) [RHEL-33888] - nfsd: use vfs setgid helper (Ian Kent) [RHEL-33888] - nfs: use vfs setgid helper (Ian Kent) [RHEL-33888] - xfs: use consistent uid/gid when grabbing dquots for inodes (Ian Kent) [RHEL-33888] - ovl: fix null pointer dereference in ovl_permission() (Ian Kent) [RHEL-33888] - evm: Complete description of evm_inode_setattr() (Ian Kent) [RHEL-33888] - smb: client: Fix -Wstringop-overflow issues (Ian Kent) [RHEL-33888] - ovl: fix null pointer dereference in ovl_get_acl_rcu() (Ian Kent) [RHEL-33888] - fs: move mnt_idmap (Ian Kent) [RHEL-33888] - MAINTAINERS: add entry for idmapped mounts (Ian Kent) [RHEL-33888] - fs: port vfs{g,u}id helpers to mnt_idmap (Ian Kent) [RHEL-33888] - fs: port fs{g,u}id helpers to mnt_idmap (Ian Kent) [RHEL-33888] - fs: port i_{g,u}id_into_vfs{g,u}id() to mnt_idmap (Ian Kent) [RHEL-33888] - fs: port i_{g,u}id_{needs_}update() to mnt_idmap (Ian Kent) [RHEL-33888] - quota: port to mnt_idmap (Ian Kent) [RHEL-33888] - fs: port privilege checking helpers to mnt_idmap (Ian Kent) [RHEL-33888] - f2fs: port to vfs{g,u}id_t and associated helpers (Ian Kent) [RHEL-33888] - fs: port inode_owner_or_capable() to mnt_idmap (Ian Kent) [RHEL-33888] - fs: port inode_init_owner() to mnt_idmap (Ian Kent) [RHEL-33888] - nilfs2: fix use-after-free bug of struct nilfs_root (Ian Kent) [RHEL-33888] - fs: port acl to mnt_idmap (Ian Kent) [RHEL-33888] - fs: port xattr to mnt_idmap (Ian Kent) [RHEL-33888] - fs: port ->permission() to pass mnt_idmap (Ian Kent) [RHEL-33888] - may_linkat(): constify path (Ian Kent) [RHEL-33888] - fs: port ->fileattr_set() to pass mnt_idmap (Ian Kent) [RHEL-33888] - ovl: support idmapped layers (Ian Kent) [RHEL-33888] - ovl: handle idmappings in layer open helpers (Ian Kent) [RHEL-33888] - ovl: handle idmappings in ovl_permission() (Ian Kent) [RHEL-33888] - ovl: handle idmappings for layer fileattrs (Ian Kent) [RHEL-33888] - ovl: use ovl_lookup_upper() wrapper (Ian Kent) [RHEL-33888] - exportfs: support idmapped mounts (Ian Kent) [RHEL-33888] - fs: port ->set_acl() to pass mnt_idmap (Ian Kent) [RHEL-33888] - fs: port ->get_acl() to pass mnt_idmap (Ian Kent) [RHEL-33888] - fs: port ->tmpfile() to pass mnt_idmap (Ian Kent) [RHEL-33888] - fuse: implement ->tmpfile() (Ian Kent) [RHEL-33888] - fs: port ->mknod() to pass mnt_idmap (Ian Kent) [RHEL-33888] - fs: port ->rename() to pass mnt_idmap (Ian Kent) [RHEL-33888] - selftests/filesystems: grant executable permission to run_fat_tests.sh (Ian Kent) [RHEL-33888] - selftests/filesystems: add a vfat RENAME_EXCHANGE test (Ian Kent) [RHEL-33888] - fat: add renameat2 RENAME_EXCHANGE flag support (Ian Kent) [RHEL-33888] - fat: factor out reusable code in vfat_rename() as helper functions (Ian Kent) [RHEL-33888] - fat: add a vfat_rename2() and make existing .rename callback a helper (Ian Kent) [RHEL-33888] - fs: port ->mkdir() to pass mnt_idmap (Ian Kent) [RHEL-33888] - fs: port ->symlink() to pass mnt_idmap (Ian Kent) [RHEL-33888] - autofs: remove unused ino field inode (Ian Kent) [RHEL-33888] - autofs: add comment about autofs_mountpoint_changed() (Ian Kent) [RHEL-33888] - autofs: use dentry info count instead of simple_empty() (Ian Kent) [RHEL-33888] - autofs: make dentry info count consistent (Ian Kent) [RHEL-33888] - autofs: use inode permission method for write access (Ian Kent) [RHEL-33888] - fs: port ->create() to pass mnt_idmap (Ian Kent) [RHEL-33888] - fs: port ->getattr() to pass mnt_idmap (Ian Kent) [RHEL-33888] - erofs: support idmapped mounts (Ian Kent) [RHEL-33888] - ubifs: Fix AA deadlock when setting xattr for encrypted file (Ian Kent) [RHEL-33888] - ubifs: report correct st_size for encrypted symlinks (Ian Kent) [RHEL-33888] - proc: report open files as size in stat() for /proc/pid/fd (Ian Kent) [RHEL-33888] - f2fs: report correct st_size for encrypted symlinks (Ian Kent) [RHEL-33888] - fs: port ->setattr() to pass mnt_idmap (Ian Kent) [RHEL-33888] - fs: port vfs_*() helpers to struct mnt_idmap (Ian Kent) [RHEL-33888] - f2fs: project ids aren't idmapped (Ian Kent) [RHEL-33888] - acl: conver higher-level helpers to rely on mnt_idmap (Ian Kent) [RHEL-33888] - fs: introduce dedicated idmap type for mounts (Ian Kent) [RHEL-33888] - linux/mount.h: trim includes (Ian Kent) [RHEL-33888] - fs: unset MNT_WRITE_HOLD on failure (Ian Kent) [RHEL-33888] - mount_setattr(): clean the control flow and calling conventions (Ian Kent) [RHEL-33888] - fs: clean up mount_setattr control flow (Ian Kent) [RHEL-33888] - fs: don't open-code mnt_hold_writers() (Ian Kent) [RHEL-33888] - fs: add mnt_allow_writers() and simplify mount_setattr_prepare() (Ian Kent) [RHEL-33888] - fs: remove unused idmapping helpers (Ian Kent) [RHEL-33888] - filelocks: use mount idmapping for setlease permission check (Ian Kent) [RHEL-33888] - ovl: port to vfs{g,u}id_t and associated helpers (Ian Kent) [RHEL-33888] - ima: use type safe idmapping helpers (Ian Kent) [RHEL-33888] - ima: add gid support (Ian Kent) [RHEL-33888] - ima: fix uid code style problems (Ian Kent) [RHEL-33888] - apparmor: use type safe idmapping helpers (Ian Kent) [RHEL-33888] - LSM: Remove double path_rename hook calls for RENAME_EXCHANGE (Ian Kent) [RHEL-33888] - landlock: Format with clang-format (Ian Kent) [RHEL-33888] - caps: use type safe idmapping helpers (Ian Kent) [RHEL-33888] - fs: use type safe idmapping helpers (Ian Kent) [RHEL-33888] - bprm_fill_uid(): don't open-code file_inode() (Ian Kent) [RHEL-33888] - mnt_idmapping: add missing helpers (Ian Kent) [RHEL-33888] - fs: use consistent setgid checks in is_sxid() (Ian Kent) [RHEL-33888] - attr: use consistent sgid stripping checks (Ian Kent) [RHEL-33888] - attr: add setattr_should_drop_sgid() (Ian Kent) [RHEL-33888] - fs: move should_remove_suid() (Ian Kent) [RHEL-33888] - attr: add in_group_or_capable() (Ian Kent) [RHEL-33888] - posix_acl: Fix the type of sentinel in get_acl (Ian Kent) [RHEL-33888] - orangefs: fix mode handling (Ian Kent) [RHEL-33888] - ovl: call posix_acl_release() after error checking (Ian Kent) [RHEL-33888] - evm: remove dead code in evm_inode_set_acl() (Ian Kent) [RHEL-33888] - cifs: check whether acl is valid early (Ian Kent) [RHEL-33888] - acl: make vfs_posix_acl_to_xattr() static (Ian Kent) [RHEL-33888] - acl: remove a slew of now unused helpers (Ian Kent) [RHEL-33888] - 9p: use stub posix acl handlers (Ian Kent) [RHEL-33888] - cifs: use stub posix acl handlers (Ian Kent) [RHEL-33888] - ovl: use stub posix acl handlers (Ian Kent) [RHEL-33888] - ecryptfs: use stub posix acl handlers (Ian Kent) [RHEL-33888] - evm: remove evm_xattr_acl_change() (Ian Kent) [RHEL-33888] - xattr: use posix acl api (Ian Kent) [RHEL-33888] - fuse: fixes after adapting to new posix acl api (Ian Kent) [RHEL-33888] - fuse: port to vfs{g,u}id_t and associated helpers (Ian Kent) [RHEL-33888] - ovl: use posix acl api (Ian Kent) [RHEL-33888] - ovl: implement set acl method (Ian Kent) [RHEL-33888] - ovl: implement get acl method (Ian Kent) [RHEL-33888] - ovl: improve ovl_get_acl() if POSIX ACL support is off (Ian Kent) [RHEL-33888] - ecryptfs: implement set acl method (Ian Kent) [RHEL-33888] - ecryptfs: implement get acl method (Ian Kent) [RHEL-33888] - acl: add vfs_remove_acl() (Ian Kent) [RHEL-33888] - acl: add vfs_get_acl() (Ian Kent) [RHEL-33888] - fs/posix_acl.c: avoid -Wempty-body warning (Ian Kent) [RHEL-33888] - acl: add vfs_set_acl() (Ian Kent) [RHEL-33888] - internal: add may_write_xattr() (Ian Kent) [RHEL-33888] - evm: add post set acl hook (Ian Kent) [RHEL-33888] - integrity: implement get and set acl hook (Ian Kent) [RHEL-33888] - smack: implement get, set and remove acl hook (Ian Kent) [RHEL-33888] - Smack: fix W=1 build warnings (Ian Kent) [RHEL-33888] - selinux: implement get, set and remove acl hook (Ian Kent) [RHEL-33888] - security: add get, remove and set acl hook (Ian Kent) [RHEL-33888] - 9p: implement set acl method (Ian Kent) [RHEL-33888] - 9p: implement get acl method (Ian Kent) [RHEL-33888] - cifs: implement set acl method (Ian Kent) [RHEL-33888] - cifs: implement get acl method (Ian Kent) [RHEL-33888] - fs: add new get acl method (Ian Kent) [RHEL-33888] - fs: rename current get acl method (Ian Kent) [RHEL-33888] - fs: pass dentry to set acl method (Ian Kent) [RHEL-33888] - f2fs: support idmapped mounts (Ian Kent) [RHEL-33888] - orangefs: rework posix acl handling when creating new filesystem objects (Ian Kent) [RHEL-33888] - xattr: always us is_posix_acl_xattr() helper (Ian Kent) [RHEL-33888] - acl: fix the comments of posix_acl_xattr_set (Ian Kent) [RHEL-33888] - xattr: constify value argument in vfs_setxattr() (Ian Kent) [RHEL-33888] - ovl: use vfs_set_acl_prepare() (Ian Kent) [RHEL-33888] - acl: move idmapping handling into posix_acl_xattr_set() (Ian Kent) [RHEL-33888] - acl: add vfs_set_acl_prepare() (Ian Kent) [RHEL-33888] - acl: return EOPNOTSUPP in posix_acl_fix_xattr_common() (Ian Kent) [RHEL-33888] - open: always initialize ownership fields (Ian Kent) [RHEL-33888] - acl: handle idmapped mounts for idmapped filesystems (Ian Kent) [RHEL-33888] - ovl: handle idmappings in ovl_get_acl() (Ian Kent) [RHEL-33888] - acl: make posix_acl_clone() available to overlayfs (Ian Kent) [RHEL-33888] - ovl: enable RCU'd ->get_acl() (Ian Kent) [RHEL-33888] - vfs: add rcu argument to ->get_acl() callback (Ian Kent) [RHEL-33888] - acl: port to vfs{g,u}id_t (Ian Kent) [RHEL-33888] - acl: move idmapped mount fixup into vfs_{g,s}etxattr() (Ian Kent) [RHEL-33888] - mnt_idmapping: align kernel doc and parameter order (Ian Kent) [RHEL-33888] - mnt_idmapping: return false when comparing two invalid ids (Ian Kent) [RHEL-33888] - attr: fix kernel doc (Ian Kent) [RHEL-33888] - attr: port attribute changes to new types (Ian Kent) [RHEL-33888] - quota: port quota helpers mount ids (Ian Kent) [RHEL-33888] - fs: port to iattr ownership update helpers (Ian Kent) [RHEL-33888] - fs: introduce tiny iattr ownership update helpers (Ian Kent) [RHEL-33888] - fs: use mount types in iattr (Ian Kent) [RHEL-33888] - docs: Add small intro to idmap examples (Ian Kent) [RHEL-33888] - fs: remove unused low-level mapping helpers (Ian Kent) [RHEL-33888] - docs: update mapping documentation (Ian Kent) [RHEL-33888] - doc: give a more thorough id handling explanation (Ian Kent) [RHEL-33888] Resolves: RHEL-33888, RHEL-52759, RHEL-54646, RHEL-55215, RHEL-56382, RHEL-57739, RHEL-59498, RHEL-61942, RHEL-62123, RHEL-63082, RHEL-63814, RHEL-63838, RHEL-63844 Signed-off-by: Rado Vrbovsky <rvrbovsk@redhat.com>
2024-11-11 08:53:22 +00:00 · 2024-11-11 08:53:22 +00:00 · 2d7f955cc6
commit 2d7f955cc6
parent 3926f48323
4 changed files with 711 additions and 8 deletions
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@ -12,7 +12,7 @@ RHEL_MINOR = 6
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 527
+RHEL_RELEASE = 528
 #
 # ZSTREAM
--- a/kernel.changelog
+++ b/kernel.changelog
@ -1,3 +1,355 @@
 * Mon Nov 11 2024 Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-528.el9]
 - net: Fix an unsafe loop on the list (CKI Backport Bot) [RHEL-63844] {CVE-2024-50024}
 - serial: protect uart_port_dtr_rts() in uart_shutdown() too (CKI Backport Bot) [RHEL-63838] {CVE-2024-50058}
 - net/sched: accept TCA_STAB only for root qdisc (CKI Backport Bot) [RHEL-63814] {CVE-2024-50039}
 - s390/crypto: Display Query and Query Authentication Information in sysfs (Mete Durlu) [RHEL-56382]
 - s390/crypto: Add Support for Query Authentication Information (Mete Durlu) [RHEL-56382]
 - s390/crypto: Rework RRE and RRF CPACF inline functions (Mete Durlu) [RHEL-56382]
 - s390/crypto: Add KDSA CPACF Instruction (Mete Durlu) [RHEL-56382]
 - s390/cpacf: Make use of invalid opcode produce a link error (Mete Durlu) [RHEL-56382]
 - s390/cpacf: Split and rework cpacf query functions (Mete Durlu) [RHEL-56382]
 - dma-mapping: fix tracing dma_alloc/free with vmalloc'd memory (Jerry Snitselaar) [RHEL-61942]
 - mmc: core: Only set maximum DMA segment size if DMA is supported (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: fix DMA API tracing for chained scatterlists (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: report unlimited DMA addressing in IOMMU DMA path (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: fix vmap and mmap of noncontiougs allocations (Jerry Snitselaar) [RHEL-61942]
 - iommu/dma: remove most stubs in iommu-dma.h (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: reflow dma_supported (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: reliably inform about DMA support for IOMMU (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: add tracing for dma-mapping API calls (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: use IOMMU DMA calls for common alloc/free page calls (Jerry Snitselaar) [RHEL-61942]
 - dma-direct: optimize page freeing when it is not addressable (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: clearly mark DMA ops as an architecture feature (Jerry Snitselaar) [RHEL-61942]
 - vdpa_sim: don't select DMA_OPS (Jerry Snitselaar) [RHEL-61942]
 - arm64: mm: keep low RAM dma zone (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: don't return errors from dma_set_max_seg_size (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: don't return errors from dma_set_seg_boundary (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: don't return errors from dma_set_min_align_mask (Jerry Snitselaar) [RHEL-61942]
 - scsi: check that busses support the DMA API before setting dma parameters (Jerry Snitselaar) [RHEL-61942]
 - arm64: mm: fix DMA zone when dma-ranges is missing (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: direct calls for dma-iommu (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: call ->unmap_page and ->unmap_sg unconditionally (Jerry Snitselaar) [RHEL-61942]
 - arm64: support DMA zone above 4GB (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: replace zone_dma_bits by zone_dma_limit (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: use bit masking to check VM_DMA_COHERENT (Jerry Snitselaar) [RHEL-61942]
 - iommu: Set iommu_attach_handle->domain in core (Jerry Snitselaar) [RHEL-61942]
 - iommufd: Avoid duplicated __iommu_group_set_core_domain() call (Jerry Snitselaar) [RHEL-61942]
 - iommufd: Protect against overflow of ALIGN() during iova allocation (Jerry Snitselaar) [RHEL-61942]
 - iommufd: Reorder struct forward declarations (Jerry Snitselaar) [RHEL-61942]
 - iommufd: Check the domain owner of the parent before creating a nesting domain (Jerry Snitselaar) [RHEL-61942]
 - iommufd/device: Enforce reserved IOVA also when attached to hwpt_nested (Jerry Snitselaar) [RHEL-55215]
 - iommufd/selftest: Fix buffer read overrrun in the dirty test (Jerry Snitselaar) [RHEL-61942]
 - iommufd: Reorder include files (Jerry Snitselaar) [RHEL-61942]
 - iommu: Allow ATS to work on VFs when the PF uses IDENTITY (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Test for PAGING domains before freeing a domain (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Add kernel parameters to limit V1 page-sizes (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Do not set the D bit on AMD v2 table entries (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Correct the reported page sizes from the V1 table (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Remove the confusing dummy iommu_flush_ops tlb ops (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Fix typo of , instead of ; (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Remove conditions from domain free paths (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Narrow the use of struct protection_domain to invalidation (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Store the nid in io_pgtable_cfg instead of the domain (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Remove amd_io_pgtable::pgtbl_cfg (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Rename struct amd_io_pgtable iopt to pgtbl (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Remove the amd_iommu_domain_set_pt_root() and related (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Remove amd_iommu_domain_update() from page table freeing (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Set the pgsize_bitmap correctly (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Allocate the page table root using GFP_KERNEL (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Move allocation of the top table into v1_alloc_pgtable (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Make amd_iommu_dev_update_dte() static (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Rework amd_iommu_update_and_flush_device_table() (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Make amd_iommu_domain_flush_complete() static (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Make amd_iommu_dev_flush_pasid_all() static (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Handle error path in amd_iommu_probe_device() (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Remove unused DTE_GCR3_INDEX_* macros (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Make amd_iommu_is_attach_deferred() static (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Update event log pointer as soon as processing is complete (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Update PASID, GATS, GLX, SNPAVICSUP feature related macros (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Add blocked domain support (Jerry Snitselaar) [RHEL-61942]
 - sizes.h: Add entries between SZ_32G and SZ_64T (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Introduce batched cache invalidation (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Add qi_batch for dmar_domain (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Refactor IOTLB and Dev-IOTLB flush for batching (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Factor out invalidation descriptor composition (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Unconditionally flush device TLB for pasid table updates (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Move PCI PASID enablement to probe path (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Cleanup si_domain (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Add support for static identity domain (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Factor out helpers from domain_context_mapping_one() (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Remove has_iotlb_device flag (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Always reserve a domain ID for identity setup (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Remove identity mappings from si_domain (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Require DMA domain if hardware not support passthrough (Jerry Snitselaar) [RHEL-61942]
 - hsr: Simplify code for announcing HSR nodes timer setup (Felix Maurer) [RHEL-63082]
 - net: annotate data-races around dev->if_port (Ivan Vecera) [RHEL-62123]
 - inet: bring NLM_DONE out to a separate recv() again (Ivan Vecera) [RHEL-62123]
 - rtnetlink: provide RCU protection to rtnl_fill_prop_list() (Ivan Vecera) [RHEL-62123]
 - rtnetlink: make rtnl_fill_link_ifmap() RCU ready (Ivan Vecera) [RHEL-62123]
 - inet: switch inet_dump_fib() to RCU protection (Ivan Vecera) [RHEL-62123]
 - nexthop: allow nexthop_mpath_fill_node() to be called without RTNL (Ivan Vecera) [RHEL-62123]
 - inet: allow ip_valid_fib_dump_req() to be called with RTNL or RCU (Ivan Vecera) [RHEL-62123]
 - ipv6: switch inet6_dump_ifinfo() to RCU protection (Ivan Vecera) [RHEL-62123]
 - rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag (Ivan Vecera) [RHEL-62123]
 - rtnetlink: change nlk->cb_mutex role (Ivan Vecera) [RHEL-62123]
 - netlink: hold nlk->cb_mutex longer in __netlink_dump_start() (Ivan Vecera) [RHEL-62123]
 - netlink: fix netlink_diag_dump() return value (Ivan Vecera) [RHEL-62123]
 - ipv6: use xarray iterator to implement inet6_dump_ifinfo() (Ivan Vecera) [RHEL-62123]
 - ipv6: prepare inet6_fill_ifinfo() for RCU protection (Ivan Vecera) [RHEL-62123]
 - ipv6: prepare inet6_fill_ifla6_attrs() for RCU (Ivan Vecera) [RHEL-62123]
 - rtnetlink: prepare nla_put_iflink() to run under RCU (Ivan Vecera) [RHEL-62123]
 - net: free altname using an RCU callback (Ivan Vecera) [RHEL-62123]
 - net: fix removing a namespace with conflicting altnames (Ivan Vecera) [RHEL-62123]
 - selftests: net: add very basic test for netdev names and namespaces (Ivan Vecera) [RHEL-62123]
 - net: move altnames together with the netdevice (Ivan Vecera) [RHEL-62123]
 - net: avoid UAF on deleted altname (Ivan Vecera) [RHEL-62123]
 - net: check for altname conflicts when changing netdev's netns (Ivan Vecera) [RHEL-62123]
 - net: fix ifname in netlink ntf during netns move (Ivan Vecera) [RHEL-62123]
 - net: move from strlcpy with unused retval to strscpy (Ivan Vecera) [RHEL-62123]
 - ipv6: make mc_forwarding atomic (Ivan Vecera) [RHEL-62123]
 - net: introduce a function to check if a netdev name is in use (Ivan Vecera) [RHEL-62123]
 - RDMA/bnxt_re: Fix the GID table length (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Change the sequence of updating the CQ toggle value (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix an error path in bnxt_re_add_device (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix a possible NULL pointer dereference (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Return more meaningful error (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix incorrect dereference of srq in async event (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix out of bound check (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix the max CQ WQEs for older adapters (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix the max WQEs used in Static WQE mode (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Add a check for memory allocation (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix incorrect AVID type in WQE structure (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix a possible memory leak (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Remove the unused variable en_dev (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Recover the device when FW error is detected (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Group all operations under add_device and remove_device (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Use the aux device for L2 ULP callbacks (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Change aux driver data to en_info to hold more information (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix the max WQE size for static WQE support (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix the compatibility flag for variable size WQE (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Add support for MR Relaxed Ordering (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Avoid an extra hwrm per MR creation (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Rename a variable (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Update HW interface headers (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Share a page to expose per SRQ info with userspace (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Refactor the BNXT_RE_METHOD_GET_TOGGLE_MEM method (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Get the toggle bits from SRQ events (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Enable variable size WQEs for user space applications (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Handle variable WQE support for user applications (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix the table size for PSN/MSN entries (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Get the WQE index from slot index while completing the WQEs (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Add support for Variable WQE in Genp7 adapters (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Disable doorbell moderation if hardware register read fails (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Enable DB moderation for genP7 adapters (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Update the correct DB FIFO depth and mask for GenP7 (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix the max msix vectors macro (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Expose the MSN table capability for user library (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Allow MSN table capability check (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - sch/netem: fix use after free in netem_dequeue (CKI Backport Bot) [RHEL-59498] {CVE-2024-46800}
 - net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN (Jamie Bainbridge) [RHEL-57739]
 - selftests: net: bridge_vlan_aware: test that other TPIDs are seen as untagged (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: skip if kernel not support setting bridge fdb learning limit (Jamie Bainbridge) [RHEL-57739]
 - net: bridge: mst: Check vlan state for egress decision (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Make vxlan-bridge-1d pass on debug kernels (Jamie Bainbridge) [RHEL-57739]
 - selftests: libs: Expand "$@" where possible (Jamie Bainbridge) [RHEL-57739]
 - net: bridge: fix an inconsistent indentation (Jamie Bainbridge) [RHEL-57739]
 - selftests: net: lib: set 'i' as local (Jamie Bainbridge) [RHEL-57739]
 - selftests/net: use tc rule to filter the na packet (Jamie Bainbridge) [RHEL-57739]
 - selftests: net: use upstream mtools (Jamie Bainbridge) [RHEL-57739]
 - net: bridge: switchdev: Improve error message for port_obj_add/del functions (Jamie Bainbridge) [RHEL-57739]
 - net: bridge: fix corrupted ethernet header on multicast-to-unicast (Jamie Bainbridge) [RHEL-57739]
 - net: bridge: fix multicast-to-unicast with fraglist GSO (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: add ability to assemble NETIFS array by driver name (Jamie Bainbridge) [RHEL-57739]
 - net: bridge: remove redundant check of f->dst (Jamie Bainbridge) [RHEL-57739]
 - bridge/br_netlink.c: no need to return void function (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: bail_on_lldpad() should SKIP (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: lib.sh: Validate NETIFS (Jamie Bainbridge) [RHEL-57739]
 - selftests: net: Unify code of busywait() and slowwait() (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Support for performance sensitive tests (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Convert log_test() to recognize RET values (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Have RET track kselftest framework constants (Jamie Bainbridge) [RHEL-57739]
 - selftests: lib: Define more kselftest exit codes (Jamie Bainbridge) [RHEL-57739]
 - selftests/net: add variable NS_LIST for lib.sh (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: README: Document customization (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding.config.sample: Move overrides to lib.sh (Jamie Bainbridge) [RHEL-57739]
 - selftests: net: libs: Change variable fallback syntax (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Make VXLAN ECN encap tests more robust (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Make vxlan-bridge-1q pass on debug kernels (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Parametrize mausezahn delay (Jamie Bainbridge) [RHEL-57739]
 - net: bridge: Exit if multicast_init_stats fails (Jamie Bainbridge) [RHEL-57739]
 - net: bridge: constify the struct device_type usage (Jamie Bainbridge) [RHEL-57739]
 - bridge: vlan: use synchronize_net() when holding RTNL (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Add missing multicast routing config entries (Jamie Bainbridge) [RHEL-57739]
 - selftests/net/forwarding: add slowwait functions (Jamie Bainbridge) [RHEL-57739]
 - net: bridge: Use KMEM_CACHE instead of kmem_cache_create (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Remove duplicated lib.sh content (Jamie Bainbridge) [RHEL-57739]
 - selftests: bonding: Add net/forwarding/lib.sh to TEST_INCLUDES (Jamie Bainbridge) [RHEL-57739]
 - selftests: team: Add shared library scripts to TEST_INCLUDES (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Redefine relative_path variable (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Add missing config entries (Jamie Bainbridge) [RHEL-57739]
 - net: bridge: Do not allocate stats in the driver (Jamie Bainbridge) [RHEL-57739]
 - fscrypt: remove mention of symlink st_size quirk from documentation (Ian Kent) [RHEL-33888]
 - MAINTAINERS: update idmapping tree (Ian Kent) [RHEL-33888]
 - Add Seth Forshee as co-maintainer for idmapped mounts (Ian Kent) [RHEL-33888]
 - ceph: allow idmapped setattr inode op (Ian Kent) [RHEL-33888]
 - ceph: pass idmap to __ceph_setattr (Ian Kent) [RHEL-33888]
 - nfsd: use vfs setgid helper (Ian Kent) [RHEL-33888]
 - nfs: use vfs setgid helper (Ian Kent) [RHEL-33888]
 - xfs: use consistent uid/gid when grabbing dquots for inodes (Ian Kent) [RHEL-33888]
 - ovl: fix null pointer dereference in ovl_permission() (Ian Kent) [RHEL-33888]
 - evm: Complete description of evm_inode_setattr() (Ian Kent) [RHEL-33888]
 - smb: client: Fix -Wstringop-overflow issues (Ian Kent) [RHEL-33888]
 - ovl: fix null pointer dereference in ovl_get_acl_rcu() (Ian Kent) [RHEL-33888]
 - fs: move mnt_idmap (Ian Kent) [RHEL-33888]
 - MAINTAINERS: add entry for idmapped mounts (Ian Kent) [RHEL-33888]
 - fs: port vfs{g,u}id helpers to mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port fs{g,u}id helpers to mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port i_{g,u}id_into_vfs{g,u}id() to mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port i_{g,u}id_{needs_}update() to mnt_idmap (Ian Kent) [RHEL-33888]
 - quota: port to mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port privilege checking helpers to mnt_idmap (Ian Kent) [RHEL-33888]
 - f2fs: port to vfs{g,u}id_t and associated helpers (Ian Kent) [RHEL-33888]
 - fs: port inode_owner_or_capable() to mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port inode_init_owner() to mnt_idmap (Ian Kent) [RHEL-33888]
 - nilfs2: fix use-after-free bug of struct nilfs_root (Ian Kent) [RHEL-33888]
 - fs: port acl to mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port xattr to mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port ->permission() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - may_linkat(): constify path (Ian Kent) [RHEL-33888]
 - fs: port ->fileattr_set() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - ovl: support idmapped layers (Ian Kent) [RHEL-33888]
 - ovl: handle idmappings in layer open helpers (Ian Kent) [RHEL-33888]
 - ovl: handle idmappings in ovl_permission() (Ian Kent) [RHEL-33888]
 - ovl: handle idmappings for layer fileattrs (Ian Kent) [RHEL-33888]
 - ovl: use ovl_lookup_upper() wrapper (Ian Kent) [RHEL-33888]
 - exportfs: support idmapped mounts (Ian Kent) [RHEL-33888]
 - fs: port ->set_acl() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port ->get_acl() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port ->tmpfile() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - fuse: implement ->tmpfile() (Ian Kent) [RHEL-33888]
 - fs: port ->mknod() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port ->rename() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - selftests/filesystems: grant executable permission to run_fat_tests.sh (Ian Kent) [RHEL-33888]
 - selftests/filesystems: add a vfat RENAME_EXCHANGE test (Ian Kent) [RHEL-33888]
 - fat: add renameat2 RENAME_EXCHANGE flag support (Ian Kent) [RHEL-33888]
 - fat: factor out reusable code in vfat_rename() as helper functions (Ian Kent) [RHEL-33888]
 - fat: add a vfat_rename2() and make existing .rename callback a helper (Ian Kent) [RHEL-33888]
 - fs: port ->mkdir() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port ->symlink() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - autofs: remove unused ino field inode (Ian Kent) [RHEL-33888]
 - autofs: add comment about autofs_mountpoint_changed() (Ian Kent) [RHEL-33888]
 - autofs: use dentry info count instead of simple_empty() (Ian Kent) [RHEL-33888]
 - autofs: make dentry info count consistent (Ian Kent) [RHEL-33888]
 - autofs: use inode permission method for write access (Ian Kent) [RHEL-33888]
 - fs: port ->create() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port ->getattr() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - erofs: support idmapped mounts (Ian Kent) [RHEL-33888]
 - ubifs: Fix AA deadlock when setting xattr for encrypted file (Ian Kent) [RHEL-33888]
 - ubifs: report correct st_size for encrypted symlinks (Ian Kent) [RHEL-33888]
 - proc: report open files as size in stat() for /proc/pid/fd (Ian Kent) [RHEL-33888]
 - f2fs: report correct st_size for encrypted symlinks (Ian Kent) [RHEL-33888]
 - fs: port ->setattr() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port vfs_*() helpers to struct mnt_idmap (Ian Kent) [RHEL-33888]
 - f2fs: project ids aren't idmapped (Ian Kent) [RHEL-33888]
 - acl: conver higher-level helpers to rely on mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: introduce dedicated idmap type for mounts (Ian Kent) [RHEL-33888]
 - linux/mount.h: trim includes (Ian Kent) [RHEL-33888]
 - fs: unset MNT_WRITE_HOLD on failure (Ian Kent) [RHEL-33888]
 - mount_setattr(): clean the control flow and calling conventions (Ian Kent) [RHEL-33888]
 - fs: clean up mount_setattr control flow (Ian Kent) [RHEL-33888]
 - fs: don't open-code mnt_hold_writers() (Ian Kent) [RHEL-33888]
 - fs: add mnt_allow_writers() and simplify mount_setattr_prepare() (Ian Kent) [RHEL-33888]
 - fs: remove unused idmapping helpers (Ian Kent) [RHEL-33888]
 - filelocks: use mount idmapping for setlease permission check (Ian Kent) [RHEL-33888]
 - ovl: port to vfs{g,u}id_t and associated helpers (Ian Kent) [RHEL-33888]
 - ima: use type safe idmapping helpers (Ian Kent) [RHEL-33888]
 - ima: add gid support (Ian Kent) [RHEL-33888]
 - ima: fix uid code style problems (Ian Kent) [RHEL-33888]
 - apparmor: use type safe idmapping helpers (Ian Kent) [RHEL-33888]
 - LSM: Remove double path_rename hook calls for RENAME_EXCHANGE (Ian Kent) [RHEL-33888]
 - landlock: Format with clang-format (Ian Kent) [RHEL-33888]
 - caps: use type safe idmapping helpers (Ian Kent) [RHEL-33888]
 - fs: use type safe idmapping helpers (Ian Kent) [RHEL-33888]
 - bprm_fill_uid(): don't open-code file_inode() (Ian Kent) [RHEL-33888]
 - mnt_idmapping: add missing helpers (Ian Kent) [RHEL-33888]
 - fs: use consistent setgid checks in is_sxid() (Ian Kent) [RHEL-33888]
 - attr: use consistent sgid stripping checks (Ian Kent) [RHEL-33888]
 - attr: add setattr_should_drop_sgid() (Ian Kent) [RHEL-33888]
 - fs: move should_remove_suid() (Ian Kent) [RHEL-33888]
 - attr: add in_group_or_capable() (Ian Kent) [RHEL-33888]
 - posix_acl: Fix the type of sentinel in get_acl (Ian Kent) [RHEL-33888]
 - orangefs: fix mode handling (Ian Kent) [RHEL-33888]
 - ovl: call posix_acl_release() after error checking (Ian Kent) [RHEL-33888]
 - evm: remove dead code in evm_inode_set_acl() (Ian Kent) [RHEL-33888]
 - cifs: check whether acl is valid early (Ian Kent) [RHEL-33888]
 - acl: make vfs_posix_acl_to_xattr() static (Ian Kent) [RHEL-33888]
 - acl: remove a slew of now unused helpers (Ian Kent) [RHEL-33888]
 - 9p: use stub posix acl handlers (Ian Kent) [RHEL-33888]
 - cifs: use stub posix acl handlers (Ian Kent) [RHEL-33888]
 - ovl: use stub posix acl handlers (Ian Kent) [RHEL-33888]
 - ecryptfs: use stub posix acl handlers (Ian Kent) [RHEL-33888]
 - evm: remove evm_xattr_acl_change() (Ian Kent) [RHEL-33888]
 - xattr: use posix acl api (Ian Kent) [RHEL-33888]
 - fuse: fixes after adapting to new posix acl api (Ian Kent) [RHEL-33888]
 - fuse: port to vfs{g,u}id_t and associated helpers (Ian Kent) [RHEL-33888]
 - ovl: use posix acl api (Ian Kent) [RHEL-33888]
 - ovl: implement set acl method (Ian Kent) [RHEL-33888]
 - ovl: implement get acl method (Ian Kent) [RHEL-33888]
 - ovl: improve ovl_get_acl() if POSIX ACL support is off (Ian Kent) [RHEL-33888]
 - ecryptfs: implement set acl method (Ian Kent) [RHEL-33888]
 - ecryptfs: implement get acl method (Ian Kent) [RHEL-33888]
 - acl: add vfs_remove_acl() (Ian Kent) [RHEL-33888]
 - acl: add vfs_get_acl() (Ian Kent) [RHEL-33888]
 - fs/posix_acl.c: avoid -Wempty-body warning (Ian Kent) [RHEL-33888]
 - acl: add vfs_set_acl() (Ian Kent) [RHEL-33888]
 - internal: add may_write_xattr() (Ian Kent) [RHEL-33888]
 - evm: add post set acl hook (Ian Kent) [RHEL-33888]
 - integrity: implement get and set acl hook (Ian Kent) [RHEL-33888]
 - smack: implement get, set and remove acl hook (Ian Kent) [RHEL-33888]
 - Smack: fix W=1 build warnings (Ian Kent) [RHEL-33888]
 - selinux: implement get, set and remove acl hook (Ian Kent) [RHEL-33888]
 - security: add get, remove and set acl hook (Ian Kent) [RHEL-33888]
 - 9p: implement set acl method (Ian Kent) [RHEL-33888]
 - 9p: implement get acl method (Ian Kent) [RHEL-33888]
 - cifs: implement set acl method (Ian Kent) [RHEL-33888]
 - cifs: implement get acl method (Ian Kent) [RHEL-33888]
 - fs: add new get acl method (Ian Kent) [RHEL-33888]
 - fs: rename current get acl method (Ian Kent) [RHEL-33888]
 - fs: pass dentry to set acl method (Ian Kent) [RHEL-33888]
 - f2fs: support idmapped mounts (Ian Kent) [RHEL-33888]
 - orangefs: rework posix acl handling when creating new filesystem objects (Ian Kent) [RHEL-33888]
 - xattr: always us is_posix_acl_xattr() helper (Ian Kent) [RHEL-33888]
 - acl: fix the comments of posix_acl_xattr_set (Ian Kent) [RHEL-33888]
 - xattr: constify value argument in vfs_setxattr() (Ian Kent) [RHEL-33888]
 - ovl: use vfs_set_acl_prepare() (Ian Kent) [RHEL-33888]
 - acl: move idmapping handling into posix_acl_xattr_set() (Ian Kent) [RHEL-33888]
 - acl: add vfs_set_acl_prepare() (Ian Kent) [RHEL-33888]
 - acl: return EOPNOTSUPP in posix_acl_fix_xattr_common() (Ian Kent) [RHEL-33888]
 - open: always initialize ownership fields (Ian Kent) [RHEL-33888]
 - acl: handle idmapped mounts for idmapped filesystems (Ian Kent) [RHEL-33888]
 - ovl: handle idmappings in ovl_get_acl() (Ian Kent) [RHEL-33888]
 - acl: make posix_acl_clone() available to overlayfs (Ian Kent) [RHEL-33888]
 - ovl: enable RCU'd ->get_acl() (Ian Kent) [RHEL-33888]
 - vfs: add rcu argument to ->get_acl() callback (Ian Kent) [RHEL-33888]
 - acl: port to vfs{g,u}id_t (Ian Kent) [RHEL-33888]
 - acl: move idmapped mount fixup into vfs_{g,s}etxattr() (Ian Kent) [RHEL-33888]
 - mnt_idmapping: align kernel doc and parameter order (Ian Kent) [RHEL-33888]
 - mnt_idmapping: return false when comparing two invalid ids (Ian Kent) [RHEL-33888]
 - attr: fix kernel doc (Ian Kent) [RHEL-33888]
 - attr: port attribute changes to new types (Ian Kent) [RHEL-33888]
 - quota: port quota helpers mount ids (Ian Kent) [RHEL-33888]
 - fs: port to iattr ownership update helpers (Ian Kent) [RHEL-33888]
 - fs: introduce tiny iattr ownership update helpers (Ian Kent) [RHEL-33888]
 - fs: use mount types in iattr (Ian Kent) [RHEL-33888]
 - docs: Add small intro to idmap examples (Ian Kent) [RHEL-33888]
 - fs: remove unused low-level mapping helpers (Ian Kent) [RHEL-33888]
 - docs: update mapping documentation (Ian Kent) [RHEL-33888]
 - doc: give a more thorough id handling explanation (Ian Kent) [RHEL-33888]
 Resolves: RHEL-33888, RHEL-52759, RHEL-54646, RHEL-55215, RHEL-56382, RHEL-57739, RHEL-59498, RHEL-61942, RHEL-62123, RHEL-63082, RHEL-63814, RHEL-63838, RHEL-63844
 * Wed Nov 06 2024 Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-527.el9]
 - dt-bindings: soc: qcom: pmic-glink: allow orientation-gpios (Desnes Nunes) [RHEL-59050]
 - dt-bindings: soc: qcom: qcom,pmic-glink: document QCM6490 compatible (Desnes Nunes) [RHEL-59050]
--- a/kernel.spec
+++ b/kernel.spec
@ -165,15 +165,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 527
+%define pkgrelease 528
 %define kversion 5
-%define tarfile_release 5.14.0-527.el9
+%define tarfile_release 5.14.0-528.el9
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 527%{?buildid}%{?dist}
+%define specrelease 528%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-527.el9
+%define kabiversion 5.14.0-528.el9
 #
 # End of genspec.sh variables
@ -3806,6 +3806,357 @@ fi
 #
 #
 %changelog
 * Mon Nov 11 2024 Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-528.el9]
 - net: Fix an unsafe loop on the list (CKI Backport Bot) [RHEL-63844] {CVE-2024-50024}
 - serial: protect uart_port_dtr_rts() in uart_shutdown() too (CKI Backport Bot) [RHEL-63838] {CVE-2024-50058}
 - net/sched: accept TCA_STAB only for root qdisc (CKI Backport Bot) [RHEL-63814] {CVE-2024-50039}
 - s390/crypto: Display Query and Query Authentication Information in sysfs (Mete Durlu) [RHEL-56382]
 - s390/crypto: Add Support for Query Authentication Information (Mete Durlu) [RHEL-56382]
 - s390/crypto: Rework RRE and RRF CPACF inline functions (Mete Durlu) [RHEL-56382]
 - s390/crypto: Add KDSA CPACF Instruction (Mete Durlu) [RHEL-56382]
 - s390/cpacf: Make use of invalid opcode produce a link error (Mete Durlu) [RHEL-56382]
 - s390/cpacf: Split and rework cpacf query functions (Mete Durlu) [RHEL-56382]
 - dma-mapping: fix tracing dma_alloc/free with vmalloc'd memory (Jerry Snitselaar) [RHEL-61942]
 - mmc: core: Only set maximum DMA segment size if DMA is supported (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: fix DMA API tracing for chained scatterlists (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: report unlimited DMA addressing in IOMMU DMA path (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: fix vmap and mmap of noncontiougs allocations (Jerry Snitselaar) [RHEL-61942]
 - iommu/dma: remove most stubs in iommu-dma.h (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: reflow dma_supported (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: reliably inform about DMA support for IOMMU (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: add tracing for dma-mapping API calls (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: use IOMMU DMA calls for common alloc/free page calls (Jerry Snitselaar) [RHEL-61942]
 - dma-direct: optimize page freeing when it is not addressable (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: clearly mark DMA ops as an architecture feature (Jerry Snitselaar) [RHEL-61942]
 - vdpa_sim: don't select DMA_OPS (Jerry Snitselaar) [RHEL-61942]
 - arm64: mm: keep low RAM dma zone (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: don't return errors from dma_set_max_seg_size (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: don't return errors from dma_set_seg_boundary (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: don't return errors from dma_set_min_align_mask (Jerry Snitselaar) [RHEL-61942]
 - scsi: check that busses support the DMA API before setting dma parameters (Jerry Snitselaar) [RHEL-61942]
 - arm64: mm: fix DMA zone when dma-ranges is missing (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: direct calls for dma-iommu (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: call ->unmap_page and ->unmap_sg unconditionally (Jerry Snitselaar) [RHEL-61942]
 - arm64: support DMA zone above 4GB (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: replace zone_dma_bits by zone_dma_limit (Jerry Snitselaar) [RHEL-61942]
 - dma-mapping: use bit masking to check VM_DMA_COHERENT (Jerry Snitselaar) [RHEL-61942]
 - iommu: Set iommu_attach_handle->domain in core (Jerry Snitselaar) [RHEL-61942]
 - iommufd: Avoid duplicated __iommu_group_set_core_domain() call (Jerry Snitselaar) [RHEL-61942]
 - iommufd: Protect against overflow of ALIGN() during iova allocation (Jerry Snitselaar) [RHEL-61942]
 - iommufd: Reorder struct forward declarations (Jerry Snitselaar) [RHEL-61942]
 - iommufd: Check the domain owner of the parent before creating a nesting domain (Jerry Snitselaar) [RHEL-61942]
 - iommufd/device: Enforce reserved IOVA also when attached to hwpt_nested (Jerry Snitselaar) [RHEL-55215]
 - iommufd/selftest: Fix buffer read overrrun in the dirty test (Jerry Snitselaar) [RHEL-61942]
 - iommufd: Reorder include files (Jerry Snitselaar) [RHEL-61942]
 - iommu: Allow ATS to work on VFs when the PF uses IDENTITY (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Test for PAGING domains before freeing a domain (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Add kernel parameters to limit V1 page-sizes (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Do not set the D bit on AMD v2 table entries (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Correct the reported page sizes from the V1 table (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Remove the confusing dummy iommu_flush_ops tlb ops (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Fix typo of , instead of ; (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Remove conditions from domain free paths (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Narrow the use of struct protection_domain to invalidation (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Store the nid in io_pgtable_cfg instead of the domain (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Remove amd_io_pgtable::pgtbl_cfg (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Rename struct amd_io_pgtable iopt to pgtbl (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Remove the amd_iommu_domain_set_pt_root() and related (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Remove amd_iommu_domain_update() from page table freeing (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Set the pgsize_bitmap correctly (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Allocate the page table root using GFP_KERNEL (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Move allocation of the top table into v1_alloc_pgtable (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Make amd_iommu_dev_update_dte() static (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Rework amd_iommu_update_and_flush_device_table() (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Make amd_iommu_domain_flush_complete() static (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Make amd_iommu_dev_flush_pasid_all() static (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Handle error path in amd_iommu_probe_device() (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Remove unused DTE_GCR3_INDEX_* macros (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Make amd_iommu_is_attach_deferred() static (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Update event log pointer as soon as processing is complete (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Update PASID, GATS, GLX, SNPAVICSUP feature related macros (Jerry Snitselaar) [RHEL-61942]
 - iommu/amd: Add blocked domain support (Jerry Snitselaar) [RHEL-61942]
 - sizes.h: Add entries between SZ_32G and SZ_64T (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Introduce batched cache invalidation (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Add qi_batch for dmar_domain (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Refactor IOTLB and Dev-IOTLB flush for batching (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Factor out invalidation descriptor composition (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Unconditionally flush device TLB for pasid table updates (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Move PCI PASID enablement to probe path (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Cleanup si_domain (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Add support for static identity domain (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Factor out helpers from domain_context_mapping_one() (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Remove has_iotlb_device flag (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Always reserve a domain ID for identity setup (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Remove identity mappings from si_domain (Jerry Snitselaar) [RHEL-61942]
 - iommu/vt-d: Require DMA domain if hardware not support passthrough (Jerry Snitselaar) [RHEL-61942]
 - hsr: Simplify code for announcing HSR nodes timer setup (Felix Maurer) [RHEL-63082]
 - net: annotate data-races around dev->if_port (Ivan Vecera) [RHEL-62123]
 - inet: bring NLM_DONE out to a separate recv() again (Ivan Vecera) [RHEL-62123]
 - rtnetlink: provide RCU protection to rtnl_fill_prop_list() (Ivan Vecera) [RHEL-62123]
 - rtnetlink: make rtnl_fill_link_ifmap() RCU ready (Ivan Vecera) [RHEL-62123]
 - inet: switch inet_dump_fib() to RCU protection (Ivan Vecera) [RHEL-62123]
 - nexthop: allow nexthop_mpath_fill_node() to be called without RTNL (Ivan Vecera) [RHEL-62123]
 - inet: allow ip_valid_fib_dump_req() to be called with RTNL or RCU (Ivan Vecera) [RHEL-62123]
 - ipv6: switch inet6_dump_ifinfo() to RCU protection (Ivan Vecera) [RHEL-62123]
 - rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag (Ivan Vecera) [RHEL-62123]
 - rtnetlink: change nlk->cb_mutex role (Ivan Vecera) [RHEL-62123]
 - netlink: hold nlk->cb_mutex longer in __netlink_dump_start() (Ivan Vecera) [RHEL-62123]
 - netlink: fix netlink_diag_dump() return value (Ivan Vecera) [RHEL-62123]
 - ipv6: use xarray iterator to implement inet6_dump_ifinfo() (Ivan Vecera) [RHEL-62123]
 - ipv6: prepare inet6_fill_ifinfo() for RCU protection (Ivan Vecera) [RHEL-62123]
 - ipv6: prepare inet6_fill_ifla6_attrs() for RCU (Ivan Vecera) [RHEL-62123]
 - rtnetlink: prepare nla_put_iflink() to run under RCU (Ivan Vecera) [RHEL-62123]
 - net: free altname using an RCU callback (Ivan Vecera) [RHEL-62123]
 - net: fix removing a namespace with conflicting altnames (Ivan Vecera) [RHEL-62123]
 - selftests: net: add very basic test for netdev names and namespaces (Ivan Vecera) [RHEL-62123]
 - net: move altnames together with the netdevice (Ivan Vecera) [RHEL-62123]
 - net: avoid UAF on deleted altname (Ivan Vecera) [RHEL-62123]
 - net: check for altname conflicts when changing netdev's netns (Ivan Vecera) [RHEL-62123]
 - net: fix ifname in netlink ntf during netns move (Ivan Vecera) [RHEL-62123]
 - net: move from strlcpy with unused retval to strscpy (Ivan Vecera) [RHEL-62123]
 - ipv6: make mc_forwarding atomic (Ivan Vecera) [RHEL-62123]
 - net: introduce a function to check if a netdev name is in use (Ivan Vecera) [RHEL-62123]
 - RDMA/bnxt_re: Fix the GID table length (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Change the sequence of updating the CQ toggle value (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix an error path in bnxt_re_add_device (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix a possible NULL pointer dereference (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Return more meaningful error (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix incorrect dereference of srq in async event (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix out of bound check (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix the max CQ WQEs for older adapters (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix the max WQEs used in Static WQE mode (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Add a check for memory allocation (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix incorrect AVID type in WQE structure (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix a possible memory leak (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Remove the unused variable en_dev (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Recover the device when FW error is detected (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Group all operations under add_device and remove_device (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Use the aux device for L2 ULP callbacks (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Change aux driver data to en_info to hold more information (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix the max WQE size for static WQE support (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix the compatibility flag for variable size WQE (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Add support for MR Relaxed Ordering (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Avoid an extra hwrm per MR creation (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Rename a variable (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Update HW interface headers (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Share a page to expose per SRQ info with userspace (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Refactor the BNXT_RE_METHOD_GET_TOGGLE_MEM method (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Get the toggle bits from SRQ events (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Enable variable size WQEs for user space applications (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Handle variable WQE support for user applications (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix the table size for PSN/MSN entries (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Get the WQE index from slot index while completing the WQEs (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Add support for Variable WQE in Genp7 adapters (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Disable doorbell moderation if hardware register read fails (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Enable DB moderation for genP7 adapters (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Update the correct DB FIFO depth and mask for GenP7 (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Fix the max msix vectors macro (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Expose the MSN table capability for user library (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - RDMA/bnxt_re: Allow MSN table capability check (Mohammad Heib) [RHEL-52759 RHEL-54646]
 - sch/netem: fix use after free in netem_dequeue (CKI Backport Bot) [RHEL-59498] {CVE-2024-46800}
 - net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN (Jamie Bainbridge) [RHEL-57739]
 - selftests: net: bridge_vlan_aware: test that other TPIDs are seen as untagged (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: skip if kernel not support setting bridge fdb learning limit (Jamie Bainbridge) [RHEL-57739]
 - net: bridge: mst: Check vlan state for egress decision (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Make vxlan-bridge-1d pass on debug kernels (Jamie Bainbridge) [RHEL-57739]
 - selftests: libs: Expand "$@" where possible (Jamie Bainbridge) [RHEL-57739]
 - net: bridge: fix an inconsistent indentation (Jamie Bainbridge) [RHEL-57739]
 - selftests: net: lib: set 'i' as local (Jamie Bainbridge) [RHEL-57739]
 - selftests/net: use tc rule to filter the na packet (Jamie Bainbridge) [RHEL-57739]
 - selftests: net: use upstream mtools (Jamie Bainbridge) [RHEL-57739]
 - net: bridge: switchdev: Improve error message for port_obj_add/del functions (Jamie Bainbridge) [RHEL-57739]
 - net: bridge: fix corrupted ethernet header on multicast-to-unicast (Jamie Bainbridge) [RHEL-57739]
 - net: bridge: fix multicast-to-unicast with fraglist GSO (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: add ability to assemble NETIFS array by driver name (Jamie Bainbridge) [RHEL-57739]
 - net: bridge: remove redundant check of f->dst (Jamie Bainbridge) [RHEL-57739]
 - bridge/br_netlink.c: no need to return void function (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: bail_on_lldpad() should SKIP (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: lib.sh: Validate NETIFS (Jamie Bainbridge) [RHEL-57739]
 - selftests: net: Unify code of busywait() and slowwait() (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Support for performance sensitive tests (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Convert log_test() to recognize RET values (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Have RET track kselftest framework constants (Jamie Bainbridge) [RHEL-57739]
 - selftests: lib: Define more kselftest exit codes (Jamie Bainbridge) [RHEL-57739]
 - selftests/net: add variable NS_LIST for lib.sh (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: README: Document customization (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding.config.sample: Move overrides to lib.sh (Jamie Bainbridge) [RHEL-57739]
 - selftests: net: libs: Change variable fallback syntax (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Make VXLAN ECN encap tests more robust (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Make vxlan-bridge-1q pass on debug kernels (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Parametrize mausezahn delay (Jamie Bainbridge) [RHEL-57739]
 - net: bridge: Exit if multicast_init_stats fails (Jamie Bainbridge) [RHEL-57739]
 - net: bridge: constify the struct device_type usage (Jamie Bainbridge) [RHEL-57739]
 - bridge: vlan: use synchronize_net() when holding RTNL (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Add missing multicast routing config entries (Jamie Bainbridge) [RHEL-57739]
 - selftests/net/forwarding: add slowwait functions (Jamie Bainbridge) [RHEL-57739]
 - net: bridge: Use KMEM_CACHE instead of kmem_cache_create (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Remove duplicated lib.sh content (Jamie Bainbridge) [RHEL-57739]
 - selftests: bonding: Add net/forwarding/lib.sh to TEST_INCLUDES (Jamie Bainbridge) [RHEL-57739]
 - selftests: team: Add shared library scripts to TEST_INCLUDES (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Redefine relative_path variable (Jamie Bainbridge) [RHEL-57739]
 - selftests: forwarding: Add missing config entries (Jamie Bainbridge) [RHEL-57739]
 - net: bridge: Do not allocate stats in the driver (Jamie Bainbridge) [RHEL-57739]
 - fscrypt: remove mention of symlink st_size quirk from documentation (Ian Kent) [RHEL-33888]
 - MAINTAINERS: update idmapping tree (Ian Kent) [RHEL-33888]
 - Add Seth Forshee as co-maintainer for idmapped mounts (Ian Kent) [RHEL-33888]
 - ceph: allow idmapped setattr inode op (Ian Kent) [RHEL-33888]
 - ceph: pass idmap to __ceph_setattr (Ian Kent) [RHEL-33888]
 - nfsd: use vfs setgid helper (Ian Kent) [RHEL-33888]
 - nfs: use vfs setgid helper (Ian Kent) [RHEL-33888]
 - xfs: use consistent uid/gid when grabbing dquots for inodes (Ian Kent) [RHEL-33888]
 - ovl: fix null pointer dereference in ovl_permission() (Ian Kent) [RHEL-33888]
 - evm: Complete description of evm_inode_setattr() (Ian Kent) [RHEL-33888]
 - smb: client: Fix -Wstringop-overflow issues (Ian Kent) [RHEL-33888]
 - ovl: fix null pointer dereference in ovl_get_acl_rcu() (Ian Kent) [RHEL-33888]
 - fs: move mnt_idmap (Ian Kent) [RHEL-33888]
 - MAINTAINERS: add entry for idmapped mounts (Ian Kent) [RHEL-33888]
 - fs: port vfs{g,u}id helpers to mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port fs{g,u}id helpers to mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port i_{g,u}id_into_vfs{g,u}id() to mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port i_{g,u}id_{needs_}update() to mnt_idmap (Ian Kent) [RHEL-33888]
 - quota: port to mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port privilege checking helpers to mnt_idmap (Ian Kent) [RHEL-33888]
 - f2fs: port to vfs{g,u}id_t and associated helpers (Ian Kent) [RHEL-33888]
 - fs: port inode_owner_or_capable() to mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port inode_init_owner() to mnt_idmap (Ian Kent) [RHEL-33888]
 - nilfs2: fix use-after-free bug of struct nilfs_root (Ian Kent) [RHEL-33888]
 - fs: port acl to mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port xattr to mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port ->permission() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - may_linkat(): constify path (Ian Kent) [RHEL-33888]
 - fs: port ->fileattr_set() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - ovl: support idmapped layers (Ian Kent) [RHEL-33888]
 - ovl: handle idmappings in layer open helpers (Ian Kent) [RHEL-33888]
 - ovl: handle idmappings in ovl_permission() (Ian Kent) [RHEL-33888]
 - ovl: handle idmappings for layer fileattrs (Ian Kent) [RHEL-33888]
 - ovl: use ovl_lookup_upper() wrapper (Ian Kent) [RHEL-33888]
 - exportfs: support idmapped mounts (Ian Kent) [RHEL-33888]
 - fs: port ->set_acl() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port ->get_acl() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port ->tmpfile() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - fuse: implement ->tmpfile() (Ian Kent) [RHEL-33888]
 - fs: port ->mknod() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port ->rename() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - selftests/filesystems: grant executable permission to run_fat_tests.sh (Ian Kent) [RHEL-33888]
 - selftests/filesystems: add a vfat RENAME_EXCHANGE test (Ian Kent) [RHEL-33888]
 - fat: add renameat2 RENAME_EXCHANGE flag support (Ian Kent) [RHEL-33888]
 - fat: factor out reusable code in vfat_rename() as helper functions (Ian Kent) [RHEL-33888]
 - fat: add a vfat_rename2() and make existing .rename callback a helper (Ian Kent) [RHEL-33888]
 - fs: port ->mkdir() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port ->symlink() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - autofs: remove unused ino field inode (Ian Kent) [RHEL-33888]
 - autofs: add comment about autofs_mountpoint_changed() (Ian Kent) [RHEL-33888]
 - autofs: use dentry info count instead of simple_empty() (Ian Kent) [RHEL-33888]
 - autofs: make dentry info count consistent (Ian Kent) [RHEL-33888]
 - autofs: use inode permission method for write access (Ian Kent) [RHEL-33888]
 - fs: port ->create() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port ->getattr() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - erofs: support idmapped mounts (Ian Kent) [RHEL-33888]
 - ubifs: Fix AA deadlock when setting xattr for encrypted file (Ian Kent) [RHEL-33888]
 - ubifs: report correct st_size for encrypted symlinks (Ian Kent) [RHEL-33888]
 - proc: report open files as size in stat() for /proc/pid/fd (Ian Kent) [RHEL-33888]
 - f2fs: report correct st_size for encrypted symlinks (Ian Kent) [RHEL-33888]
 - fs: port ->setattr() to pass mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: port vfs_*() helpers to struct mnt_idmap (Ian Kent) [RHEL-33888]
 - f2fs: project ids aren't idmapped (Ian Kent) [RHEL-33888]
 - acl: conver higher-level helpers to rely on mnt_idmap (Ian Kent) [RHEL-33888]
 - fs: introduce dedicated idmap type for mounts (Ian Kent) [RHEL-33888]
 - linux/mount.h: trim includes (Ian Kent) [RHEL-33888]
 - fs: unset MNT_WRITE_HOLD on failure (Ian Kent) [RHEL-33888]
 - mount_setattr(): clean the control flow and calling conventions (Ian Kent) [RHEL-33888]
 - fs: clean up mount_setattr control flow (Ian Kent) [RHEL-33888]
 - fs: don't open-code mnt_hold_writers() (Ian Kent) [RHEL-33888]
 - fs: add mnt_allow_writers() and simplify mount_setattr_prepare() (Ian Kent) [RHEL-33888]
 - fs: remove unused idmapping helpers (Ian Kent) [RHEL-33888]
 - filelocks: use mount idmapping for setlease permission check (Ian Kent) [RHEL-33888]
 - ovl: port to vfs{g,u}id_t and associated helpers (Ian Kent) [RHEL-33888]
 - ima: use type safe idmapping helpers (Ian Kent) [RHEL-33888]
 - ima: add gid support (Ian Kent) [RHEL-33888]
 - ima: fix uid code style problems (Ian Kent) [RHEL-33888]
 - apparmor: use type safe idmapping helpers (Ian Kent) [RHEL-33888]
 - LSM: Remove double path_rename hook calls for RENAME_EXCHANGE (Ian Kent) [RHEL-33888]
 - landlock: Format with clang-format (Ian Kent) [RHEL-33888]
 - caps: use type safe idmapping helpers (Ian Kent) [RHEL-33888]
 - fs: use type safe idmapping helpers (Ian Kent) [RHEL-33888]
 - bprm_fill_uid(): don't open-code file_inode() (Ian Kent) [RHEL-33888]
 - mnt_idmapping: add missing helpers (Ian Kent) [RHEL-33888]
 - fs: use consistent setgid checks in is_sxid() (Ian Kent) [RHEL-33888]
 - attr: use consistent sgid stripping checks (Ian Kent) [RHEL-33888]
 - attr: add setattr_should_drop_sgid() (Ian Kent) [RHEL-33888]
 - fs: move should_remove_suid() (Ian Kent) [RHEL-33888]
 - attr: add in_group_or_capable() (Ian Kent) [RHEL-33888]
 - posix_acl: Fix the type of sentinel in get_acl (Ian Kent) [RHEL-33888]
 - orangefs: fix mode handling (Ian Kent) [RHEL-33888]
 - ovl: call posix_acl_release() after error checking (Ian Kent) [RHEL-33888]
 - evm: remove dead code in evm_inode_set_acl() (Ian Kent) [RHEL-33888]
 - cifs: check whether acl is valid early (Ian Kent) [RHEL-33888]
 - acl: make vfs_posix_acl_to_xattr() static (Ian Kent) [RHEL-33888]
 - acl: remove a slew of now unused helpers (Ian Kent) [RHEL-33888]
 - 9p: use stub posix acl handlers (Ian Kent) [RHEL-33888]
 - cifs: use stub posix acl handlers (Ian Kent) [RHEL-33888]
 - ovl: use stub posix acl handlers (Ian Kent) [RHEL-33888]
 - ecryptfs: use stub posix acl handlers (Ian Kent) [RHEL-33888]
 - evm: remove evm_xattr_acl_change() (Ian Kent) [RHEL-33888]
 - xattr: use posix acl api (Ian Kent) [RHEL-33888]
 - fuse: fixes after adapting to new posix acl api (Ian Kent) [RHEL-33888]
 - fuse: port to vfs{g,u}id_t and associated helpers (Ian Kent) [RHEL-33888]
 - ovl: use posix acl api (Ian Kent) [RHEL-33888]
 - ovl: implement set acl method (Ian Kent) [RHEL-33888]
 - ovl: implement get acl method (Ian Kent) [RHEL-33888]
 - ovl: improve ovl_get_acl() if POSIX ACL support is off (Ian Kent) [RHEL-33888]
 - ecryptfs: implement set acl method (Ian Kent) [RHEL-33888]
 - ecryptfs: implement get acl method (Ian Kent) [RHEL-33888]
 - acl: add vfs_remove_acl() (Ian Kent) [RHEL-33888]
 - acl: add vfs_get_acl() (Ian Kent) [RHEL-33888]
 - fs/posix_acl.c: avoid -Wempty-body warning (Ian Kent) [RHEL-33888]
 - acl: add vfs_set_acl() (Ian Kent) [RHEL-33888]
 - internal: add may_write_xattr() (Ian Kent) [RHEL-33888]
 - evm: add post set acl hook (Ian Kent) [RHEL-33888]
 - integrity: implement get and set acl hook (Ian Kent) [RHEL-33888]
 - smack: implement get, set and remove acl hook (Ian Kent) [RHEL-33888]
 - Smack: fix W=1 build warnings (Ian Kent) [RHEL-33888]
 - selinux: implement get, set and remove acl hook (Ian Kent) [RHEL-33888]
 - security: add get, remove and set acl hook (Ian Kent) [RHEL-33888]
 - 9p: implement set acl method (Ian Kent) [RHEL-33888]
 - 9p: implement get acl method (Ian Kent) [RHEL-33888]
 - cifs: implement set acl method (Ian Kent) [RHEL-33888]
 - cifs: implement get acl method (Ian Kent) [RHEL-33888]
 - fs: add new get acl method (Ian Kent) [RHEL-33888]
 - fs: rename current get acl method (Ian Kent) [RHEL-33888]
 - fs: pass dentry to set acl method (Ian Kent) [RHEL-33888]
 - f2fs: support idmapped mounts (Ian Kent) [RHEL-33888]
 - orangefs: rework posix acl handling when creating new filesystem objects (Ian Kent) [RHEL-33888]
 - xattr: always us is_posix_acl_xattr() helper (Ian Kent) [RHEL-33888]
 - acl: fix the comments of posix_acl_xattr_set (Ian Kent) [RHEL-33888]
 - xattr: constify value argument in vfs_setxattr() (Ian Kent) [RHEL-33888]
 - ovl: use vfs_set_acl_prepare() (Ian Kent) [RHEL-33888]
 - acl: move idmapping handling into posix_acl_xattr_set() (Ian Kent) [RHEL-33888]
 - acl: add vfs_set_acl_prepare() (Ian Kent) [RHEL-33888]
 - acl: return EOPNOTSUPP in posix_acl_fix_xattr_common() (Ian Kent) [RHEL-33888]
 - open: always initialize ownership fields (Ian Kent) [RHEL-33888]
 - acl: handle idmapped mounts for idmapped filesystems (Ian Kent) [RHEL-33888]
 - ovl: handle idmappings in ovl_get_acl() (Ian Kent) [RHEL-33888]
 - acl: make posix_acl_clone() available to overlayfs (Ian Kent) [RHEL-33888]
 - ovl: enable RCU'd ->get_acl() (Ian Kent) [RHEL-33888]
 - vfs: add rcu argument to ->get_acl() callback (Ian Kent) [RHEL-33888]
 - acl: port to vfs{g,u}id_t (Ian Kent) [RHEL-33888]
 - acl: move idmapped mount fixup into vfs_{g,s}etxattr() (Ian Kent) [RHEL-33888]
 - mnt_idmapping: align kernel doc and parameter order (Ian Kent) [RHEL-33888]
 - mnt_idmapping: return false when comparing two invalid ids (Ian Kent) [RHEL-33888]
 - attr: fix kernel doc (Ian Kent) [RHEL-33888]
 - attr: port attribute changes to new types (Ian Kent) [RHEL-33888]
 - quota: port quota helpers mount ids (Ian Kent) [RHEL-33888]
 - fs: port to iattr ownership update helpers (Ian Kent) [RHEL-33888]
 - fs: introduce tiny iattr ownership update helpers (Ian Kent) [RHEL-33888]
 - fs: use mount types in iattr (Ian Kent) [RHEL-33888]
 - docs: Add small intro to idmap examples (Ian Kent) [RHEL-33888]
 - fs: remove unused low-level mapping helpers (Ian Kent) [RHEL-33888]
 - docs: update mapping documentation (Ian Kent) [RHEL-33888]
 - doc: give a more thorough id handling explanation (Ian Kent) [RHEL-33888]
 * Wed Nov 06 2024 Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-527.el9]
 - dt-bindings: soc: qcom: pmic-glink: allow orientation-gpios (Desnes Nunes) [RHEL-59050]
 - dt-bindings: soc: qcom: qcom,pmic-glink: document QCM6490 compatible (Desnes Nunes) [RHEL-59050]
--- a/6
+++ b/6
@ -1,3 +1,3 @@
-SHA512 (linux-5.14.0-527.el9.tar.xz) = 937e5fc4b77f44697056918b98aad24c19005f4d28bebe8682dd2c2a9bd96e0fa0b58848829b72116d4931fe0896f3b94c21001714bafc0d88d44c2c9f01fd10
+SHA512 (linux-5.14.0-528.el9.tar.xz) = f9c7f037d9e83f9419f595eb3e7a33c2c72c2cbc8ccbda45301fbc55b4ae9d291655391a9cd3713d2c346a0e408ccb22e64e1be53005c533f132c9c91063b3cd
-SHA512 (kernel-abi-stablelists-5.14.0-527.el9.tar.bz2) = e48ee94e40e8614f70d11a366e5f6bd4ba317af6c3a5f160adb0d5752bdbc5cfb9412b7f849c24be2bbb2abe33c58bd25b1f1ba2c0d9d0a3227bed6da4fa43ca
+SHA512 (kernel-abi-stablelists-5.14.0-528.el9.tar.bz2) = 3963c748de1d4a67318557cbd8d27dba95912f5bc86e988e9a3750508fec4f1922455e37fa873e08cc72890f386ac69180b818ad05d5b4478879d3e22b629f6a
-SHA512 (kernel-kabi-dw-5.14.0-527.el9.tar.bz2) = 3d08f838767b27b87724fed347ce3be63fce15e5eded0576121c474d14db4a6d07895b350c635e343d5522ac237dfd982d1f39b8480c4129f4eb79f6a64115cb
+SHA512 (kernel-kabi-dw-5.14.0-528.el9.tar.bz2) = 3d08f838767b27b87724fed347ce3be63fce15e5eded0576121c474d14db4a6d07895b350c635e343d5522ac237dfd982d1f39b8480c4129f4eb79f6a64115cb