diff --git a/Makefile.rhelver b/Makefile.rhelver index d11af1451..5322d7b32 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 8 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 668 +RHEL_RELEASE = 669 # # ZSTREAM diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config index 59bf2081f..106f22440 100644 --- a/kernel-ppc64le-debug-rhel.config +++ b/kernel-ppc64le-debug-rhel.config @@ -4231,6 +4231,7 @@ CONFIG_PPC_DT_CPU_FTRS=y CONFIG_PPC_EMULATED_STATS=y # CONFIG_PPC_EPAPR_HV_BYTECHAN is not set # CONFIG_PPC_FAST_ENDIAN_SWITCH is not set +CONFIG_PPC_FTRACE_OUT_OF_LINE_NUM_RESERVE=32768 # CONFIG_PPC_IRQ_SOFT_MASK_DEBUG is not set CONFIG_PPC_KUAP_DEBUG=y CONFIG_PPC_KUAP=y diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config index ae38a1020..69b053538 100644 --- a/kernel-ppc64le-rhel.config +++ b/kernel-ppc64le-rhel.config @@ -4211,6 +4211,7 @@ CONFIG_PPC_DT_CPU_FTRS=y CONFIG_PPC_EMULATED_STATS=y # CONFIG_PPC_EPAPR_HV_BYTECHAN is not set # CONFIG_PPC_FAST_ENDIAN_SWITCH is not set +CONFIG_PPC_FTRACE_OUT_OF_LINE_NUM_RESERVE=32768 # CONFIG_PPC_IRQ_SOFT_MASK_DEBUG is not set # CONFIG_PPC_KUAP_DEBUG is not set CONFIG_PPC_KUAP=y diff --git a/kernel.changelog b/kernel.changelog index 6c2ef3676..ee04104fb 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,67 @@ +* Wed Jan 28 2026 CKI KWF Bot [5.14.0-669.el9] +- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144333] {CVE-2026-22998} +- NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-141483] +- virtio-net: remove unused delayed refill worker (Laurent Vivier) [RHEL-139819] +- virtio-net: don't schedule delayed refill worker (Laurent Vivier) [RHEL-139819] +- virtio-net: don't re-enable refill work too early when NAPI is disabled (Laurent Vivier) [RHEL-139819] +- virtio-net: disable delayed refill when pausing rx (Laurent Vivier) [RHEL-139819] +- virtio-net: Refactor napi_disable paths (Laurent Vivier) [RHEL-139819] +- virtio-net: Refactor napi_enable paths (Laurent Vivier) [RHEL-139819] +- virtio_net: separate virtnet_tx_resize() (Laurent Vivier) [RHEL-139819] +- virtio_net: separate virtnet_rx_resize() (Laurent Vivier) [RHEL-139819] +- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137698] {CVE-2025-38403} +- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Mamatha Inamdar) [RHEL-14156] +- ftrace: Fix BPF fexit with livepatch (Mamatha Inamdar) [RHEL-14156] +- powerpc64/modules: replace stub allocation sentinel with an explicit counter (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: ensure ftrace record ops are always set for NOPs (Mamatha Inamdar) [RHEL-14156] +- redhat: Add CONFIG_PPC_FTRACE_OUT_OF_LINE_NUM_RESERVE (Mamatha Inamdar) [RHEL-14156] +- ftrace: fix incorrect hash size in register_ftrace_direct() (Mamatha Inamdar) [RHEL-14156] +- kbuild: dummy-tools: pretend we understand -fpatchable-function-entry (Mamatha Inamdar) [RHEL-14156] +- ftrace: Fix modification of direct_function hash while in use (Mamatha Inamdar) [RHEL-14156] +- powerpc64/ftrace: fix module loading without patchable function entries (Mamatha Inamdar) [RHEL-14156] +- powerpc: Replace kretprobe code with rethook on powerpc (Mamatha Inamdar) [RHEL-14156] +- powerpc64/ftrace: fix clobbered r15 during livepatching (Mamatha Inamdar) [RHEL-14156] +- powerpc/bpf: fix JIT code size calculation of bpf trampoline (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Fix ftrace bug with KASAN=y (Mamatha Inamdar) [RHEL-14156] +- powerpc64/bpf: Add support for bpf trampolines (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Add support for DYNAMIC_FTRACE_WITH_DIRECT_CALLS (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Add support for DYNAMIC_FTRACE_WITH_CALL_OPS (Mamatha Inamdar) [RHEL-14156] +- powerpc64/ftrace: Support .text larger than 32MB with out-of-line stubs (Mamatha Inamdar) [RHEL-14156] +- powerpc64/ftrace: Move ftrace sequence out of line (Mamatha Inamdar) [RHEL-14156] +- kbuild: Add generic hook for architectures to use before the final vmlinux link (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Add a postlink script to validate function tracer (Mamatha Inamdar) [RHEL-14156] +- powerpc64/bpf: Fold bpf_jit_emit_func_call_hlp() into bpf_jit_emit_func_call_rel() (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Move ftrace stub used for init text before _einittext (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Skip instruction patching if the instructions are the same (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Remove pointer to struct module from dyn_arch_ftrace (Mamatha Inamdar) [RHEL-14156] +- powerpc64/ftrace: Nop out additional 'std' instruction emitted by gcc v5.x (Mamatha Inamdar) [RHEL-14156] +- powerpc/kprobes: Use ftrace to determine if a probe is at function entry (Mamatha Inamdar) [RHEL-14156] +- powerpc/trace: Account for -fpatchable-function-entry support by toolchain (Mamatha Inamdar) [RHEL-14156] +- kbuild: move vmlinux.o rule to the top Makefile (Mamatha Inamdar) [RHEL-14156] +- powerpc/code-patching: Use dedicated memory routines for patching (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Ignore ftrace locations in exit text sections (Mamatha Inamdar) [RHEL-14156] +- powerpc: Fix build issue with LD_DEAD_CODE_DATA_ELIMINATION and FTRACE_MCOUNT_USE_PATCHABLE_FUNCTION_ENTRY (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Add support for -fpatchable-function-entry (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Implement ftrace_replace_code() (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Replace use of ftrace_call_replace() with ftrace_create_branch_inst() (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Simplify ftrace_modify_call() (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Simplify ftrace_make_call() (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Simplify ftrace_make_nop() (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Add separate ftrace_init_nop() with additional validation (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Stop re-purposing linker generated long branches for ftrace (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Refactor ftrace_modify_code() (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Simplify function_graph support in ftrace.c (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Use patch_instruction() return directly (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Refactor prepare_ftrace_return() (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Have arch_ftrace_get_regs() return NULL unless FL_SAVE_REGS is set (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Add recursion protection in prepare_ftrace_return() (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Also save r1 in ftrace_caller() (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: directly call of function graph tracer by ftrace caller (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Refactor ftrace_{en/dis}able_ftrace_graph_caller (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Implement CONFIG_DYNAMIC_FTRACE_WITH_ARGS (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Prepare PPC64's ftrace_caller() for CONFIG_DYNAMIC_FTRACE_WITH_ARGS (Mamatha Inamdar) [RHEL-14156] +Resolves: RHEL-137698, RHEL-139819, RHEL-141483, RHEL-14156, RHEL-144333 + * Tue Jan 27 2026 CKI KWF Bot [5.14.0-668.el9] - bonding: don't set oif to bond dev when getting NS target destination (CKI Backport Bot) [RHEL-128764] - thunderbolt: Add support for Intel Wildcat Lake (Desnes Nunes) [RHEL-95661] diff --git a/kernel.spec b/kernel.spec index 8dfdf4ed6..cb70e146b 100644 --- a/kernel.spec +++ b/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 668 +%define pkgrelease 669 %define kversion 5 -%define tarfile_release 5.14.0-668.el9 +%define tarfile_release 5.14.0-669.el9 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 668%{?buildid}%{?dist} +%define specrelease 669%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-668.el9 +%define kabiversion 5.14.0-669.el9 # # End of genspec.sh variables @@ -3711,6 +3711,69 @@ fi # # %changelog +* Wed Jan 28 2026 CKI KWF Bot [5.14.0-669.el9] +- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144333] {CVE-2026-22998} +- NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-141483] +- virtio-net: remove unused delayed refill worker (Laurent Vivier) [RHEL-139819] +- virtio-net: don't schedule delayed refill worker (Laurent Vivier) [RHEL-139819] +- virtio-net: don't re-enable refill work too early when NAPI is disabled (Laurent Vivier) [RHEL-139819] +- virtio-net: disable delayed refill when pausing rx (Laurent Vivier) [RHEL-139819] +- virtio-net: Refactor napi_disable paths (Laurent Vivier) [RHEL-139819] +- virtio-net: Refactor napi_enable paths (Laurent Vivier) [RHEL-139819] +- virtio_net: separate virtnet_tx_resize() (Laurent Vivier) [RHEL-139819] +- virtio_net: separate virtnet_rx_resize() (Laurent Vivier) [RHEL-139819] +- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137698] {CVE-2025-38403} +- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Mamatha Inamdar) [RHEL-14156] +- ftrace: Fix BPF fexit with livepatch (Mamatha Inamdar) [RHEL-14156] +- powerpc64/modules: replace stub allocation sentinel with an explicit counter (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: ensure ftrace record ops are always set for NOPs (Mamatha Inamdar) [RHEL-14156] +- redhat: Add CONFIG_PPC_FTRACE_OUT_OF_LINE_NUM_RESERVE (Mamatha Inamdar) [RHEL-14156] +- ftrace: fix incorrect hash size in register_ftrace_direct() (Mamatha Inamdar) [RHEL-14156] +- kbuild: dummy-tools: pretend we understand -fpatchable-function-entry (Mamatha Inamdar) [RHEL-14156] +- ftrace: Fix modification of direct_function hash while in use (Mamatha Inamdar) [RHEL-14156] +- powerpc64/ftrace: fix module loading without patchable function entries (Mamatha Inamdar) [RHEL-14156] +- powerpc: Replace kretprobe code with rethook on powerpc (Mamatha Inamdar) [RHEL-14156] +- powerpc64/ftrace: fix clobbered r15 during livepatching (Mamatha Inamdar) [RHEL-14156] +- powerpc/bpf: fix JIT code size calculation of bpf trampoline (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Fix ftrace bug with KASAN=y (Mamatha Inamdar) [RHEL-14156] +- powerpc64/bpf: Add support for bpf trampolines (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Add support for DYNAMIC_FTRACE_WITH_DIRECT_CALLS (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Add support for DYNAMIC_FTRACE_WITH_CALL_OPS (Mamatha Inamdar) [RHEL-14156] +- powerpc64/ftrace: Support .text larger than 32MB with out-of-line stubs (Mamatha Inamdar) [RHEL-14156] +- powerpc64/ftrace: Move ftrace sequence out of line (Mamatha Inamdar) [RHEL-14156] +- kbuild: Add generic hook for architectures to use before the final vmlinux link (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Add a postlink script to validate function tracer (Mamatha Inamdar) [RHEL-14156] +- powerpc64/bpf: Fold bpf_jit_emit_func_call_hlp() into bpf_jit_emit_func_call_rel() (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Move ftrace stub used for init text before _einittext (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Skip instruction patching if the instructions are the same (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Remove pointer to struct module from dyn_arch_ftrace (Mamatha Inamdar) [RHEL-14156] +- powerpc64/ftrace: Nop out additional 'std' instruction emitted by gcc v5.x (Mamatha Inamdar) [RHEL-14156] +- powerpc/kprobes: Use ftrace to determine if a probe is at function entry (Mamatha Inamdar) [RHEL-14156] +- powerpc/trace: Account for -fpatchable-function-entry support by toolchain (Mamatha Inamdar) [RHEL-14156] +- kbuild: move vmlinux.o rule to the top Makefile (Mamatha Inamdar) [RHEL-14156] +- powerpc/code-patching: Use dedicated memory routines for patching (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Ignore ftrace locations in exit text sections (Mamatha Inamdar) [RHEL-14156] +- powerpc: Fix build issue with LD_DEAD_CODE_DATA_ELIMINATION and FTRACE_MCOUNT_USE_PATCHABLE_FUNCTION_ENTRY (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Add support for -fpatchable-function-entry (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Implement ftrace_replace_code() (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Replace use of ftrace_call_replace() with ftrace_create_branch_inst() (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Simplify ftrace_modify_call() (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Simplify ftrace_make_call() (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Simplify ftrace_make_nop() (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Add separate ftrace_init_nop() with additional validation (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Stop re-purposing linker generated long branches for ftrace (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Refactor ftrace_modify_code() (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Simplify function_graph support in ftrace.c (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Use patch_instruction() return directly (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Refactor prepare_ftrace_return() (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Have arch_ftrace_get_regs() return NULL unless FL_SAVE_REGS is set (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Add recursion protection in prepare_ftrace_return() (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Also save r1 in ftrace_caller() (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: directly call of function graph tracer by ftrace caller (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Refactor ftrace_{en/dis}able_ftrace_graph_caller (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Implement CONFIG_DYNAMIC_FTRACE_WITH_ARGS (Mamatha Inamdar) [RHEL-14156] +- powerpc/ftrace: Prepare PPC64's ftrace_caller() for CONFIG_DYNAMIC_FTRACE_WITH_ARGS (Mamatha Inamdar) [RHEL-14156] + * Tue Jan 27 2026 CKI KWF Bot [5.14.0-668.el9] - bonding: don't set oif to bond dev when getting NS target destination (CKI Backport Bot) [RHEL-128764] - thunderbolt: Add support for Intel Wildcat Lake (Desnes Nunes) [RHEL-95661] diff --git a/sources b/sources index 6a5871da7..e6b338e3c 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-668.el9.tar.xz) = 25adfc2dbe58e7b7d34efc20454f8fde5a7f9776633a593c7263d2ba11a1ef89477d8a5c820b9f48f8aa6464fc94e15694a293f42bfcca737ae1f852749a7019 -SHA512 (kernel-abi-stablelists-5.14.0-668.el9.tar.bz2) = ef833287081da2a486415de8df58b41d351954de5ea17caa0f6bd46487402f3f8fd49701ffb976c727940ee8c73a6e1c2964ad5dc3d06189d1ee0806ba870b27 -SHA512 (kernel-kabi-dw-5.14.0-668.el9.tar.bz2) = 131cb4153ce934bc65cb05029a4622531d91bb6d41b4c9e77d2980436b392c88047164dd8e1102c3cd582ecdfc85fbd8203ab86cb5d4b172f1c03107c44d95aa +SHA512 (linux-5.14.0-669.el9.tar.xz) = 8bfb3e73722edcfaba328dd02de2392475082f6aee16b6a961117da27e02faf499b8cfe704f2c8131ee24f9e3ee708c8fd4b7e03c1552a7ac1052c14cc629efe +SHA512 (kernel-abi-stablelists-5.14.0-669.el9.tar.bz2) = 5060b1e2ee0a786f399fff42381a29467e35b53ecb34e1a7ec726bc9aab97dafada3353c1970eaba042612d3e9baec64a363d9a03a8c7446782ecb73bf02e70f +SHA512 (kernel-kabi-dw-5.14.0-669.el9.tar.bz2) = feb3b126fed7effe77c62e57cac0370b8b4502105004f5566cf551f28036eb09c3ced40eaa9c645286ef91df47dc81552e3c7c79d4fedd547790fdbe2cc78125