diff --git a/Makefile.rhelver b/Makefile.rhelver index 1f00bdd91..ce7d5af69 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 8 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 638 +RHEL_RELEASE = 639 # # ZSTREAM diff --git a/kernel.changelog b/kernel.changelog index 271971b83..06bdf2b7f 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,35 @@ +* Sat Nov 15 2025 CKI KWF Bot [5.14.0-639.el9] +- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-114699] +- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-114699] +- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-114699] +- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-114699] +- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-114699] +- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-114699] +- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-114699] +- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-114699] +- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-114699] +- smb: client: remove pointless cfid->has_lease check (Paulo Alcantara) [RHEL-114699] +- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-114699] +- smb: client: update cfid->last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-114699] +- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-114699] +- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-114699] +- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-114699] +- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-114699] +- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-114699] +- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-114699] +- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-114699] +- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-119582] +- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-123665] +- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-111104] +- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-119900] +- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-119900] +- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-119900] +- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-119900] +- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-119900] +- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-119900] +- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-119900] +Resolves: RHEL-111104, RHEL-114699, RHEL-119582, RHEL-119900, RHEL-123665 + * Thu Nov 13 2025 CKI KWF Bot [5.14.0-638.el9] - cpufreq: powernv: Stop setting common freq attributes (Yunming Yang) [RHEL-121364] - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123617] diff --git a/kernel.spec b/kernel.spec index 650b58e74..e3add7355 100644 --- a/kernel.spec +++ b/kernel.spec @@ -165,15 +165,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 638 +%define pkgrelease 639 %define kversion 5 -%define tarfile_release 5.14.0-638.el9 +%define tarfile_release 5.14.0-639.el9 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 638%{?buildid}%{?dist} +%define specrelease 639%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-638.el9 +%define kabiversion 5.14.0-639.el9 # # End of genspec.sh variables @@ -3693,6 +3693,37 @@ fi # # %changelog +* Sat Nov 15 2025 CKI KWF Bot [5.14.0-639.el9] +- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-114699] +- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-114699] +- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-114699] +- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-114699] +- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-114699] +- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-114699] +- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-114699] +- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-114699] +- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-114699] +- smb: client: remove pointless cfid->has_lease check (Paulo Alcantara) [RHEL-114699] +- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-114699] +- smb: client: update cfid->last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-114699] +- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-114699] +- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-114699] +- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-114699] +- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-114699] +- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-114699] +- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-114699] +- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-114699] +- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-119582] +- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-123665] +- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-111104] +- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-119900] +- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-119900] +- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-119900] +- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-119900] +- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-119900] +- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-119900] +- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-119900] + * Thu Nov 13 2025 CKI KWF Bot [5.14.0-638.el9] - cpufreq: powernv: Stop setting common freq attributes (Yunming Yang) [RHEL-121364] - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123617] diff --git a/sources b/sources index f73301df8..54c187a4e 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-638.el9.tar.xz) = daa448a4b9435398aecb0b72bdbf1f66b4070993000aef06dd7f6e20a3debc95376d41ff1a67afef997b12b9dc7ee04f2bfb4963fb4976ba811da48c222f715e -SHA512 (kernel-abi-stablelists-5.14.0-638.el9.tar.bz2) = a6c1391af3bbb72ae2a502debd02d9a522b290ba3be38fe53ed0066f533fd32c5414a7e436d56d48f6f835dc862688ac4067d95789798c7dbcfc5b807dbc6f4e -SHA512 (kernel-kabi-dw-5.14.0-638.el9.tar.bz2) = 44884825b66754de73e31bacae49bf7888dd41efae9bc22abb34ad8bfa7eac740cb9a1250f3dd7cff3c107b69057b827c806f5e7fedad9b41af12e55c7d16bfc +SHA512 (linux-5.14.0-639.el9.tar.xz) = 79c09abc6df058616126ca51ded69606b72b79fcbd313dd478fc0bea87bb77b8b257f1aff16ee57be31bfaabd2f5659983f85d1c79a711b8c57ed67337d43409 +SHA512 (kernel-abi-stablelists-5.14.0-639.el9.tar.bz2) = d2d21bc517d6109141228cad70ba6426bde77991f0d347cb6e0808f743a7f82a708bdafb9ea606d184dc0ae3b8194f284253d56f6d71eb06001bbaac56d3b502 +SHA512 (kernel-kabi-dw-5.14.0-639.el9.tar.bz2) = a5dab0c35722e98a4659cb74d402c785f554cb577c341f4e2d148c331285592de3907cd067339d010658a5f57a2244bc6b8398ca9b4a04ef91ea717708fbc18a