diff --git a/Makefile.rhelver b/Makefile.rhelver index c6bac109a..b4ec48ec6 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 8 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 630 +RHEL_RELEASE = 631 # # ZSTREAM diff --git a/kernel.changelog b/kernel.changelog index 97742137c..9ee9fe929 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,42 @@ +* Mon Oct 27 2025 CKI KWF Bot [5.14.0-631.el9] +- md: delete mddev kobj before deleting gendisk kobj (Nigel Croxon) [RHEL-94433] +- md: fix how device node is created and removed (Nigel Croxon) [RHEL-94433] +- md: prevent incorrect update of resync/recovery offset (Nigel Croxon) [RHEL-94433] +- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-94433] +- md: fix sync_action incorrect display during resync (Nigel Croxon) [RHEL-94433] +- md: add helper rdev_needs_recovery() (Nigel Croxon) [RHEL-94433] +- md: keep recovery_cp in mdp_superblock_s (Nigel Croxon) [RHEL-94433] +- md: add legacy_async_del_gendisk mode (Nigel Croxon) [RHEL-20191 RHEL-94433 RHEL-9656] +- md: make rdev_addable usable for rcu mode (Nigel Croxon) [RHEL-94433] {CVE-2025-38621} +- md/raid1: remove struct pool_info and related code (Nigel Croxon) [RHEL-94433] +- md/raid1: change r1conf->r1bio_pool to a pointer type (Nigel Croxon) [RHEL-94433] +- md: rename recovery_cp to resync_offset (Nigel Croxon) [RHEL-94433] +- md/md-cluster: handle REMOVE message earlier (Nigel Croxon) [RHEL-94433] +- md: fix create on open mddev lifetime regression (Nigel Croxon) [RHEL-94433] +- md/raid10: set chunk_sectors limit (Nigel Croxon) [RHEL-94433] +- md/raid0: set chunk_sectors limit (Nigel Croxon) [RHEL-94433] +- md: allow removing faulty rdev during resync (Nigel Croxon) [RHEL-94433] +- md/raid5: unset WQ_CPU_INTENSIVE for raid5 unbound workqueue (Nigel Croxon) [RHEL-94433] +- md: remove/add redundancy group only in level change (Nigel Croxon) [RHEL-20191 RHEL-94433 RHEL-9656] +- md: Don't clear MD_CLOSING until mddev is freed (Nigel Croxon) [RHEL-20191 RHEL-94433 RHEL-9656] +- md: call del_gendisk in control path (Nigel Croxon) [RHEL-20191 RHEL-94433 RHEL-9656] +- md/md-bitmap: fix GPF in bitmap_get_stats() (Nigel Croxon) [RHEL-94433] {CVE-2025-38451} +- md/raid1,raid10: strip REQ_NOWAIT from member bios (Nigel Croxon) [RHEL-94433] +- raid10: cleanup memleak at raid10_make_request (Nigel Croxon) [RHEL-94433] {CVE-2025-38444} +- md/raid1: Fix stack memory use after return in raid1_reshape (Nigel Croxon) [RHEL-94433] {CVE-2025-38445} +- md/md-bitmap: remove parameter slot from bitmap_create() (Nigel Croxon) [RHEL-94433] +- md/md-bitmap: cleanup bitmap_ops->startwrite() (Nigel Croxon) [RHEL-94433] +- md/dm-raid: remove max_write_behind setting limit (Nigel Croxon) [RHEL-94433] +- md/md-bitmap: fix dm-raid max_write_behind setting (Nigel Croxon) [RHEL-94433] +- md/raid1,raid10: don't handle IO error for REQ_RAHEAD and REQ_NOWAIT (Nigel Croxon) [RHEL-94433] +- md/md-bitmap: fix stats collection for external bitmaps (Nigel Croxon) [RHEL-94433] +- md/raid10: fix missing discard IO accounting (Nigel Croxon) [RHEL-94433] +- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Paolo Abeni) [RHEL-115628] +- tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Paolo Abeni) [RHEL-115628] {CVE-2025-39955} +- tcp: check space before adding MPTCP SYN options (Paolo Abeni) [RHEL-115628] +- octeon_ep: Validate the VF ID (Kamal Heib) [RHEL-113707] +Resolves: RHEL-113707, RHEL-115628, RHEL-121921, RHEL-20191, RHEL-94433, RHEL-9656 + * Sat Oct 25 2025 CKI KWF Bot [5.14.0-630.el9] - crypto: xts - Handle EBUSY correctly (CKI Backport Bot) [RHEL-119237] {CVE-2023-53494} - xfrm: use kfree_sensitive() for SA secret zeroization (Sabrina Dubroca) [RHEL-115629] diff --git a/kernel.spec b/kernel.spec index e11f95b4e..3d2bc7931 100644 --- a/kernel.spec +++ b/kernel.spec @@ -165,15 +165,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 630 +%define pkgrelease 631 %define kversion 5 -%define tarfile_release 5.14.0-630.el9 +%define tarfile_release 5.14.0-631.el9 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 630%{?buildid}%{?dist} +%define specrelease 631%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-630.el9 +%define kabiversion 5.14.0-631.el9 # # End of genspec.sh variables @@ -644,7 +644,6 @@ BuildRequires: sparse BuildRequires: zlib-devel binutils-devel newt-devel perl(ExtUtils::Embed) bison flex xz-devel BuildRequires: audit-libs-devel python3-setuptools BuildRequires: java-devel -BuildRequires: libbpf-devel >= 0.6.0-1 BuildRequires: libbabeltrace-devel BuildRequires: libtraceevent-devel %ifnarch %{arm} s390x @@ -2623,7 +2622,7 @@ InitBuildVars %global perf_build_extra_opts CORESIGHT=1 %endif %global perf_make \ - %{__make} %{?make_opts} EXTRA_CFLAGS="${RPM_OPT_FLAGS}" EXTRA_CXXFLAGS="${RPM_OPT_FLAGS}" LDFLAGS="%{__global_ldflags} -Wl,-E" %{?cross_opts} -C tools/perf V=1 NO_PERF_READ_VDSO32=1 NO_PERF_READ_VDSOX32=1 WERROR=0 NO_LIBUNWIND=1 NO_GTK2=1 NO_STRLCPY=1 NO_BIONIC=1 LIBBPF_DYNAMIC=1 LIBTRACEEVENT_DYNAMIC=1 %{?perf_build_extra_opts} prefix=%{_prefix} PYTHON=%{__python3} + %{__make} %{?make_opts} EXTRA_CFLAGS="${RPM_OPT_FLAGS}" EXTRA_CXXFLAGS="${RPM_OPT_FLAGS}" LDFLAGS="%{__global_ldflags} -Wl,-E" %{?cross_opts} -C tools/perf V=1 NO_PERF_READ_VDSO32=1 NO_PERF_READ_VDSOX32=1 WERROR=0 NO_LIBUNWIND=1 NO_GTK2=1 NO_STRLCPY=1 NO_BIONIC=1 LIBTRACEEVENT_DYNAMIC=1 %{?perf_build_extra_opts} prefix=%{_prefix} PYTHON=%{__python3} %if %{with_perf} # perf # make sure check-headers.sh is executable @@ -3694,6 +3693,44 @@ fi # # %changelog +* Mon Oct 27 2025 CKI KWF Bot [5.14.0-631.el9] +- md: delete mddev kobj before deleting gendisk kobj (Nigel Croxon) [RHEL-94433] +- md: fix how device node is created and removed (Nigel Croxon) [RHEL-94433] +- md: prevent incorrect update of resync/recovery offset (Nigel Croxon) [RHEL-94433] +- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-94433] +- md: fix sync_action incorrect display during resync (Nigel Croxon) [RHEL-94433] +- md: add helper rdev_needs_recovery() (Nigel Croxon) [RHEL-94433] +- md: keep recovery_cp in mdp_superblock_s (Nigel Croxon) [RHEL-94433] +- md: add legacy_async_del_gendisk mode (Nigel Croxon) [RHEL-20191 RHEL-94433 RHEL-9656] +- md: make rdev_addable usable for rcu mode (Nigel Croxon) [RHEL-94433] {CVE-2025-38621} +- md/raid1: remove struct pool_info and related code (Nigel Croxon) [RHEL-94433] +- md/raid1: change r1conf->r1bio_pool to a pointer type (Nigel Croxon) [RHEL-94433] +- md: rename recovery_cp to resync_offset (Nigel Croxon) [RHEL-94433] +- md/md-cluster: handle REMOVE message earlier (Nigel Croxon) [RHEL-94433] +- md: fix create on open mddev lifetime regression (Nigel Croxon) [RHEL-94433] +- md/raid10: set chunk_sectors limit (Nigel Croxon) [RHEL-94433] +- md/raid0: set chunk_sectors limit (Nigel Croxon) [RHEL-94433] +- md: allow removing faulty rdev during resync (Nigel Croxon) [RHEL-94433] +- md/raid5: unset WQ_CPU_INTENSIVE for raid5 unbound workqueue (Nigel Croxon) [RHEL-94433] +- md: remove/add redundancy group only in level change (Nigel Croxon) [RHEL-20191 RHEL-94433 RHEL-9656] +- md: Don't clear MD_CLOSING until mddev is freed (Nigel Croxon) [RHEL-20191 RHEL-94433 RHEL-9656] +- md: call del_gendisk in control path (Nigel Croxon) [RHEL-20191 RHEL-94433 RHEL-9656] +- md/md-bitmap: fix GPF in bitmap_get_stats() (Nigel Croxon) [RHEL-94433] {CVE-2025-38451} +- md/raid1,raid10: strip REQ_NOWAIT from member bios (Nigel Croxon) [RHEL-94433] +- raid10: cleanup memleak at raid10_make_request (Nigel Croxon) [RHEL-94433] {CVE-2025-38444} +- md/raid1: Fix stack memory use after return in raid1_reshape (Nigel Croxon) [RHEL-94433] {CVE-2025-38445} +- md/md-bitmap: remove parameter slot from bitmap_create() (Nigel Croxon) [RHEL-94433] +- md/md-bitmap: cleanup bitmap_ops->startwrite() (Nigel Croxon) [RHEL-94433] +- md/dm-raid: remove max_write_behind setting limit (Nigel Croxon) [RHEL-94433] +- md/md-bitmap: fix dm-raid max_write_behind setting (Nigel Croxon) [RHEL-94433] +- md/raid1,raid10: don't handle IO error for REQ_RAHEAD and REQ_NOWAIT (Nigel Croxon) [RHEL-94433] +- md/md-bitmap: fix stats collection for external bitmaps (Nigel Croxon) [RHEL-94433] +- md/raid10: fix missing discard IO accounting (Nigel Croxon) [RHEL-94433] +- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Paolo Abeni) [RHEL-115628] +- tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Paolo Abeni) [RHEL-115628] {CVE-2025-39955} +- tcp: check space before adding MPTCP SYN options (Paolo Abeni) [RHEL-115628] +- octeon_ep: Validate the VF ID (Kamal Heib) [RHEL-113707] + * Sat Oct 25 2025 CKI KWF Bot [5.14.0-630.el9] - crypto: xts - Handle EBUSY correctly (CKI Backport Bot) [RHEL-119237] {CVE-2023-53494} - xfrm: use kfree_sensitive() for SA secret zeroization (Sabrina Dubroca) [RHEL-115629] diff --git a/sources b/sources index 569f07c2b..856bb1bea 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-630.el9.tar.xz) = 3fed1a836d1550cc0d53a25719e9d76d1bb74f77ae60bd7cefa8aafd8a1578b07c8fd33357f50c4b7c974c859e7bd40a374f0e04318269491faf7a921c8ced4e -SHA512 (kernel-abi-stablelists-5.14.0-630.el9.tar.bz2) = 7cb3140929e251d58fc621b7e10f2fedf5cea61c5d67c3bcb7f47eaa61c2100ba940b7d44070dcf4c99f43a26c83b2041aa9bc7330106ce5b0338ec3719d6e1f -SHA512 (kernel-kabi-dw-5.14.0-630.el9.tar.bz2) = 9dd76e1e999abd3b9c64ec645bccab7a42b6e38698fcb375ff636b2cc35517b0d9c9e4b40ad0e1f8de74ef98586d2eae762a88b9708ae93e9e78d9c437acf2ad +SHA512 (linux-5.14.0-631.el9.tar.xz) = ddaa43c16bfec3eb1bc2533774521449482f5e7d83cf3f29a6618ad6be7c049656f92c44a55057c31b8b83834ca5e989fb38f0da0315b126a4b429c35ea9a603 +SHA512 (kernel-abi-stablelists-5.14.0-631.el9.tar.bz2) = 6a867aa67a95c83cdfe04e90148e89376b4f50efc320eafaad8bcc6047a9ae11b7648dcf8641cb403f56feecbc272f6420685a8d921053bd433cbb755e52a4f8 +SHA512 (kernel-kabi-dw-5.14.0-631.el9.tar.bz2) = 3951fc90738feedd2cf8df1db028bf8b395ca24a2b273315d53ea40f98e84063d5f342889b151a53c20b1d86e2943cc854706a23ba5cfdcd28aa45a741f24851