rpms/kernel
9
4
Fork 6
Code Issues Pull Requests Releases Activity

Debrand for AlmaLinux OS

Browse Source 
Use AlmaLinux OS secure boot cert

Enable Btrfs support for all kernel variants

hpsa: bring back deprecated PCI ids #CFHack #CFHack2024

mptsas: bring back deprecated PCI ids #CFHack #CFHack2024

megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024

qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024

qla4xxx: bring back deprecated PCI ids

be2iscsi: bring back deprecated PCI ids

kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained

gve: update QPL page registration logic to honor max_registered_pages (backport from upstream)

gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream)
This commit is contained in:
Eduard Abdullin 2026-08-01 08:07:27 +00:00 committed by root
parent 60b15ef93d
commit 348a4e48c5
5 changed files with 61 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
.gitignore vendored
View File

@ -1,7 +1,7 @@
fedoraimaca.x509
kernel-abi-stablelists-6.12.0-211.39.1.el10_2.tar.xz
kernel-kabi-dw-6.12.0-211.39.1.el10_2.tar.xz
linux-6.12.0-211.39.1.el10_2.tar.xz
kernel-abi-stablelists-6.12.0-211.40.1.el10_2.tar.xz
kernel-kabi-dw-6.12.0-211.40.1.el10_2.tar.xz
linux-6.12.0-211.40.1.el10_2.tar.xz
nvidiabfdpu.x509
nvidiagpuoot001.x509
nvidiajetsonsoc.x509

2
Makefile.rhelver
View File

@ -12,7 +12,7 @@ RHEL_MINOR = 2
#
# Use this spot to avoid future merge conflicts.
# Do not trim this comment.
RHEL_RELEASE = 211.39.1
RHEL_RELEASE = 211.40.1
#
# RHEL_REBASE_NUM

24
kernel.changelog
View File

@ -1,3 +1,27 @@
* Mon Jul 27 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.40.1.el10_2]
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}
Resolves: RHEL-178254, RHEL-179338, RHEL-190344, RHEL-192181, RHEL-192215
* Thu Jul 23 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.39.1.el10_2]
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}

37
kernel.spec
View File

@ -176,15 +176,15 @@ Summary: The Linux kernel
%define specrpmversion 6.12.0
%define specversion 6.12.0
%define patchversion 6.12
%define pkgrelease 211.39.1
%define pkgrelease 211.40.1
%define kversion 6
%define tarfile_release 6.12.0-211.39.1.el10_2
%define tarfile_release 6.12.0-211.40.1.el10_2
# This is needed to do merge window version magic
%define patchlevel 12
# This allows pkg_release to have configurable %%{?dist} tag
%define specrelease 211.39.1%{?buildid}%{?dist}
%define specrelease 211.40.1%{?buildid}%{?dist}
# This defines the kabi tarball version
%define kabiversion 6.12.0-211.39.1.el10_2
%define kabiversion 6.12.0-211.40.1.el10_2
# If this variable is set to 1, a bpf selftests build failure will cause a
# fatal kernel package build error
@ -4515,14 +4515,14 @@ fi\
#
#
%changelog
* Thu Jul 30 2026 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-211.39.1
* Sat Aug 01 2026 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-211.40.1
- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert
* Thu Jul 30 2026 Neal Gompa <ngompa@almalinux.org> - 6.12.0-211.39.1
* Sat Aug 01 2026 Neal Gompa <ngompa@almalinux.org> - 6.12.0-211.40.1
- Enable Btrfs support for all kernel variants
* Thu Jul 30 2026 Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-211.39.1
* Sat Aug 01 2026 Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-211.40.1
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
@ -4536,6 +4536,29 @@ fi\
- gve: enable reading max ring size from the device in DQO-QPL mode (backport
from upstream)
* Mon Jul 27 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.40.1.el10_2]
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}
* Thu Jul 23 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.39.1.el10_2]
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}

6
sources
View File

@ -1,7 +1,7 @@
SHA512 (fedoraimaca.x509) = e04809394f4472c17e86d7024dee34f03fb68e82a85502fd5b00535202c72e57626a8376b2cf991b7e1e46404aa5ab8d189ebf320e0dd37d49e7efbc925c7a2e
SHA512 (kernel-abi-stablelists-6.12.0-211.39.1.el10_2.tar.xz) = 3bd60e7e4d4daae4d638a21dbee37fb18d5a52bdadf8282fff43ab9ead67af170e0928dbb613785c58410d67001a31777dbe74c3b6db268c63a488503cb7f2bf
SHA512 (kernel-kabi-dw-6.12.0-211.39.1.el10_2.tar.xz) = f9ac34c9a475b98b6fc7fc8affb117ea3825eb2974077bc1c61deeaf47703eb57dac8f1142daea1c7a434f4b6b75fe3d3ee7f2bdd4fc51a62880d79032c7eac2
SHA512 (linux-6.12.0-211.39.1.el10_2.tar.xz) = 8ee62c490ba0e9af6bfceae063b4d7bddea568b8f4d38ddf1cd6009bf5c6782b9de92819711d760a0274aae08fa683b636527bcbf035f465d4b80d2013ea339d
SHA512 (kernel-abi-stablelists-6.12.0-211.40.1.el10_2.tar.xz) = 79864502d8adb953108d950af86998be3ed3fa34d12d9673e9582384982b4e40e42b2866fa5e12e22e50e6faba9cd8b9e3afe14e454dedb300e5c22bc5f0e30e
SHA512 (kernel-kabi-dw-6.12.0-211.40.1.el10_2.tar.xz) = 4404d5db660b04d0d38982763e5c2d2d63849f526b49409c0fe0ed9af4a92f6294ece297de105718d00c801959d45f88050481de36de087f17ad5c459a328a2d
SHA512 (linux-6.12.0-211.40.1.el10_2.tar.xz) = f19a139c69198f087f81ae2dab80865c3764f7077d232d1c0db3c9778d7297a6e196f393c71c04f2781f984bd140bd0735d40be67543cbe29d40cd695bc7b5c3
SHA512 (nvidiabfdpu.x509) = d9f4fbafcec66803c5944df1f97d4348968141c968e6537252c9854c89dca8ea3be225a9c40abbbf2b7d4d3cfd8c5012cd2d34d90443fbc0277b7a018622ac4f
SHA512 (nvidiagpuoot001.x509) = b42f836e1cfa07890cb6ca13de9c3950e306c9ec7686c4c09f050bb68869f5d82962b2cd5f3aa0eb7a0f3a3ae54e9c480eafbac5df53aa92c295ff511a8c59fe
SHA512 (nvidiajetsonsoc.x509) = 3c6d4f0800b3fae3c3cc3e5361de31df233e230ea96f0fdd3dcc713e6a71e27309f60e7a98d1a4a90d470f336ce311f22fcc88f219429272e96339717fe001dd