From 398a134ed13461443bdf42c486df59ea708eac13 Mon Sep 17 00:00:00 2001 From: CKI KWF Bot Date: Tue, 11 Aug 2026 17:08:10 +0000 Subject: [PATCH] kernel-5.14.0-736.el9 * Tue Aug 11 2026 CKI KWF Bot [5.14.0-736.el9] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-222801] - i2c: core: fix adapter deregistration race (David Arcari) [RHEL-222902] {CVE-2026-64279} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183626] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183626] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183626] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183626] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183626] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183626] {CVE-2025-10263} - platform/x86/amd/hsmp: Clamp ioctl/send_message indices (Spectre v1) (David Arcari) [RHEL-217011] - pinctrl-amd: Don't clear S4 wake bits at probe (David Arcari) [RHEL-211144] - fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (David Arcari) [RHEL-216442] - fs/resctrl: Fix use-after-free during unmount (David Arcari) [RHEL-216442] - fs/resctrl: Free mon_data structures on rdt_get_tree() failure (David Arcari) [RHEL-216442] - x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled (David Arcari) [RHEL-216442] - kernfs: fix suspicious RCU usage in kernfs_put() (David Arcari) [RHEL-216442] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213339] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213339] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213339] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213339] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-213339] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211279] {CVE-2025-40026} - perf/arm_cspmu: nvidia: Add pmevfiltr2 support (Charles Mirabile) [RHEL-121676] - perf/arm_cspmu: nvidia: Add revision id matching (Charles Mirabile) [RHEL-121676] - perf/arm_cspmu: Add pmpidr support (Charles Mirabile) [RHEL-121676] - perf/arm_cspmu: Add callback to reset filter config (Charles Mirabile) [RHEL-121676] - perf/arm_cspmu: Add PMEVFILT2R support (Charles Mirabile) [RHEL-121676] - perf/arm_cspmu: Fix missing io.h include (Charles Mirabile) [RHEL-121676] - perf/arm_cspmu: Generalise event filtering (Charles Mirabile) [RHEL-121676] - perf/arm_cspmu: Move register definitons to header (Charles Mirabile) [RHEL-121676] - fixup! Merge: s390/entry: Scrub r12 register on kernel entry (Jan Polensky) [RHEL-191803] - redhat/configs: Enable Epson RX8111 RTC driver (Nirmala Dalvi) [RHEL-184760] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (Nirmala Dalvi) [RHEL-184760] - rtc: rx8111: handle VLOW flag (Nirmala Dalvi) [RHEL-184760] - rtc: rx8111: demote warnings to debug level (Nirmala Dalvi) [RHEL-184760] - rtc: Add driver for Epson RX8111 (Nirmala Dalvi) [RHEL-184760] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188213] {CVE-2026-52923} Resolves: RHEL-121676, RHEL-183626, RHEL-184760, RHEL-188213, RHEL-191803, RHEL-211144, RHEL-211279, RHEL-213339, RHEL-216442, RHEL-217011, RHEL-222801, RHEL-222902 Signed-off-by: CKI KWF Bot --- Makefile.rhelver | 2 +- kernel-aarch64-64k-debug-rhel.config | 2 + kernel-aarch64-64k-rhel.config | 2 + kernel-aarch64-debug-rhel.config | 2 + kernel-aarch64-rhel.config | 2 + kernel-aarch64-rt-64k-debug-rhel.config | 2 + kernel-aarch64-rt-64k-rhel.config | 2 + kernel-aarch64-rt-debug-rhel.config | 2 + kernel-aarch64-rt-rhel.config | 2 + kernel-ppc64le-debug-rhel.config | 1 + kernel-ppc64le-rhel.config | 1 + kernel-s390x-debug-rhel.config | 1 + kernel-s390x-rhel.config | 1 + kernel-s390x-zfcpdump-rhel.config | 1 + kernel-x86_64-debug-rhel.config | 1 + kernel-x86_64-rhel.config | 1 + kernel-x86_64-rt-debug-rhel.config | 1 + kernel-x86_64-rt-rhel.config | 1 + kernel.changelog | 44 +++++++++++++++++++++ kernel.spec | 51 +++++++++++++++++++++++-- sources | 6 +-- 21 files changed, 120 insertions(+), 8 deletions(-) diff --git a/Makefile.rhelver b/Makefile.rhelver index 6c3941d60..359c0a6f6 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 9 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 735 +RHEL_RELEASE = 736 # # ZSTREAM diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config index f4ccc4165..5e321cfa5 100644 --- a/kernel-aarch64-64k-debug-rhel.config +++ b/kernel-aarch64-64k-debug-rhel.config @@ -296,6 +296,7 @@ CONFIG_ARM64_ERRATUM_2658417=y CONFIG_ARM64_ERRATUM_2966298=y CONFIG_ARM64_ERRATUM_3117295=y CONFIG_ARM64_ERRATUM_3194386=y +CONFIG_ARM64_ERRATUM_4118414=y CONFIG_ARM64_ERRATUM_819472=y CONFIG_ARM64_ERRATUM_824069=y CONFIG_ARM64_ERRATUM_826319=y @@ -5163,6 +5164,7 @@ CONFIG_RTC_DRV_RX4581=m # CONFIG_RTC_DRV_RX6110 is not set CONFIG_RTC_DRV_RX8010=m CONFIG_RTC_DRV_RX8025=m +CONFIG_RTC_DRV_RX8111=m CONFIG_RTC_DRV_RX8581=m # CONFIG_RTC_DRV_S35390A is not set # CONFIG_RTC_DRV_SD3078 is not set diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config index db41694a9..981e5db01 100644 --- a/kernel-aarch64-64k-rhel.config +++ b/kernel-aarch64-64k-rhel.config @@ -296,6 +296,7 @@ CONFIG_ARM64_ERRATUM_2658417=y CONFIG_ARM64_ERRATUM_2966298=y CONFIG_ARM64_ERRATUM_3117295=y CONFIG_ARM64_ERRATUM_3194386=y +CONFIG_ARM64_ERRATUM_4118414=y CONFIG_ARM64_ERRATUM_819472=y CONFIG_ARM64_ERRATUM_824069=y CONFIG_ARM64_ERRATUM_826319=y @@ -5141,6 +5142,7 @@ CONFIG_RTC_DRV_RX4581=m # CONFIG_RTC_DRV_RX6110 is not set CONFIG_RTC_DRV_RX8010=m CONFIG_RTC_DRV_RX8025=m +CONFIG_RTC_DRV_RX8111=m CONFIG_RTC_DRV_RX8581=m # CONFIG_RTC_DRV_S35390A is not set # CONFIG_RTC_DRV_SD3078 is not set diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config index 7a5c89b4f..518c1a3fb 100644 --- a/kernel-aarch64-debug-rhel.config +++ b/kernel-aarch64-debug-rhel.config @@ -296,6 +296,7 @@ CONFIG_ARM64_ERRATUM_2658417=y CONFIG_ARM64_ERRATUM_2966298=y CONFIG_ARM64_ERRATUM_3117295=y CONFIG_ARM64_ERRATUM_3194386=y +CONFIG_ARM64_ERRATUM_4118414=y CONFIG_ARM64_ERRATUM_819472=y CONFIG_ARM64_ERRATUM_824069=y CONFIG_ARM64_ERRATUM_826319=y @@ -5161,6 +5162,7 @@ CONFIG_RTC_DRV_RX4581=m # CONFIG_RTC_DRV_RX6110 is not set CONFIG_RTC_DRV_RX8010=m CONFIG_RTC_DRV_RX8025=m +CONFIG_RTC_DRV_RX8111=m CONFIG_RTC_DRV_RX8581=m # CONFIG_RTC_DRV_S35390A is not set # CONFIG_RTC_DRV_SD3078 is not set diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config index 1f0f9c9d7..88348c8c7 100644 --- a/kernel-aarch64-rhel.config +++ b/kernel-aarch64-rhel.config @@ -296,6 +296,7 @@ CONFIG_ARM64_ERRATUM_2658417=y CONFIG_ARM64_ERRATUM_2966298=y CONFIG_ARM64_ERRATUM_3117295=y CONFIG_ARM64_ERRATUM_3194386=y +CONFIG_ARM64_ERRATUM_4118414=y CONFIG_ARM64_ERRATUM_819472=y CONFIG_ARM64_ERRATUM_824069=y CONFIG_ARM64_ERRATUM_826319=y @@ -5139,6 +5140,7 @@ CONFIG_RTC_DRV_RX4581=m # CONFIG_RTC_DRV_RX6110 is not set CONFIG_RTC_DRV_RX8010=m CONFIG_RTC_DRV_RX8025=m +CONFIG_RTC_DRV_RX8111=m CONFIG_RTC_DRV_RX8581=m # CONFIG_RTC_DRV_S35390A is not set # CONFIG_RTC_DRV_SD3078 is not set diff --git a/kernel-aarch64-rt-64k-debug-rhel.config b/kernel-aarch64-rt-64k-debug-rhel.config index 76c35e7f0..959734526 100644 --- a/kernel-aarch64-rt-64k-debug-rhel.config +++ b/kernel-aarch64-rt-64k-debug-rhel.config @@ -301,6 +301,7 @@ CONFIG_ARM64_ERRATUM_2658417=y CONFIG_ARM64_ERRATUM_2966298=y CONFIG_ARM64_ERRATUM_3117295=y CONFIG_ARM64_ERRATUM_3194386=y +CONFIG_ARM64_ERRATUM_4118414=y CONFIG_ARM64_ERRATUM_819472=y CONFIG_ARM64_ERRATUM_824069=y CONFIG_ARM64_ERRATUM_826319=y @@ -5256,6 +5257,7 @@ CONFIG_RTC_DRV_RX4581=m # CONFIG_RTC_DRV_RX6110 is not set CONFIG_RTC_DRV_RX8010=m CONFIG_RTC_DRV_RX8025=m +CONFIG_RTC_DRV_RX8111=m CONFIG_RTC_DRV_RX8581=m # CONFIG_RTC_DRV_S35390A is not set # CONFIG_RTC_DRV_SD3078 is not set diff --git a/kernel-aarch64-rt-64k-rhel.config b/kernel-aarch64-rt-64k-rhel.config index ad9c04686..d17742c3e 100644 --- a/kernel-aarch64-rt-64k-rhel.config +++ b/kernel-aarch64-rt-64k-rhel.config @@ -301,6 +301,7 @@ CONFIG_ARM64_ERRATUM_2658417=y CONFIG_ARM64_ERRATUM_2966298=y CONFIG_ARM64_ERRATUM_3117295=y CONFIG_ARM64_ERRATUM_3194386=y +CONFIG_ARM64_ERRATUM_4118414=y CONFIG_ARM64_ERRATUM_819472=y CONFIG_ARM64_ERRATUM_824069=y CONFIG_ARM64_ERRATUM_826319=y @@ -5234,6 +5235,7 @@ CONFIG_RTC_DRV_RX4581=m # CONFIG_RTC_DRV_RX6110 is not set CONFIG_RTC_DRV_RX8010=m CONFIG_RTC_DRV_RX8025=m +CONFIG_RTC_DRV_RX8111=m CONFIG_RTC_DRV_RX8581=m # CONFIG_RTC_DRV_S35390A is not set # CONFIG_RTC_DRV_SD3078 is not set diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config index 50e6670ff..ebfc98079 100644 --- a/kernel-aarch64-rt-debug-rhel.config +++ b/kernel-aarch64-rt-debug-rhel.config @@ -301,6 +301,7 @@ CONFIG_ARM64_ERRATUM_2658417=y CONFIG_ARM64_ERRATUM_2966298=y CONFIG_ARM64_ERRATUM_3117295=y CONFIG_ARM64_ERRATUM_3194386=y +CONFIG_ARM64_ERRATUM_4118414=y CONFIG_ARM64_ERRATUM_819472=y CONFIG_ARM64_ERRATUM_824069=y CONFIG_ARM64_ERRATUM_826319=y @@ -5254,6 +5255,7 @@ CONFIG_RTC_DRV_RX4581=m # CONFIG_RTC_DRV_RX6110 is not set CONFIG_RTC_DRV_RX8010=m CONFIG_RTC_DRV_RX8025=m +CONFIG_RTC_DRV_RX8111=m CONFIG_RTC_DRV_RX8581=m # CONFIG_RTC_DRV_S35390A is not set # CONFIG_RTC_DRV_SD3078 is not set diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config index a6203066a..47c7bac56 100644 --- a/kernel-aarch64-rt-rhel.config +++ b/kernel-aarch64-rt-rhel.config @@ -301,6 +301,7 @@ CONFIG_ARM64_ERRATUM_2658417=y CONFIG_ARM64_ERRATUM_2966298=y CONFIG_ARM64_ERRATUM_3117295=y CONFIG_ARM64_ERRATUM_3194386=y +CONFIG_ARM64_ERRATUM_4118414=y CONFIG_ARM64_ERRATUM_819472=y CONFIG_ARM64_ERRATUM_824069=y CONFIG_ARM64_ERRATUM_826319=y @@ -5232,6 +5233,7 @@ CONFIG_RTC_DRV_RX4581=m # CONFIG_RTC_DRV_RX6110 is not set CONFIG_RTC_DRV_RX8010=m CONFIG_RTC_DRV_RX8025=m +CONFIG_RTC_DRV_RX8111=m CONFIG_RTC_DRV_RX8581=m # CONFIG_RTC_DRV_S35390A is not set # CONFIG_RTC_DRV_SD3078 is not set diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config index 1373182ec..1af7784b3 100644 --- a/kernel-ppc64le-debug-rhel.config +++ b/kernel-ppc64le-debug-rhel.config @@ -4641,6 +4641,7 @@ CONFIG_RTC_DRV_RV3029C2=m # CONFIG_RTC_DRV_RX6110 is not set # CONFIG_RTC_DRV_RX8010 is not set CONFIG_RTC_DRV_RX8025=m +# CONFIG_RTC_DRV_RX8111 is not set CONFIG_RTC_DRV_RX8581=m # CONFIG_RTC_DRV_S35390A is not set # CONFIG_RTC_DRV_SD3078 is not set diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config index ec0a02080..ce23ddb96 100644 --- a/kernel-ppc64le-rhel.config +++ b/kernel-ppc64le-rhel.config @@ -4621,6 +4621,7 @@ CONFIG_RTC_DRV_RV3029C2=m # CONFIG_RTC_DRV_RX6110 is not set # CONFIG_RTC_DRV_RX8010 is not set CONFIG_RTC_DRV_RX8025=m +# CONFIG_RTC_DRV_RX8111 is not set CONFIG_RTC_DRV_RX8581=m # CONFIG_RTC_DRV_S35390A is not set # CONFIG_RTC_DRV_SD3078 is not set diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config index 3be12b620..c3a804e20 100644 --- a/kernel-s390x-debug-rhel.config +++ b/kernel-s390x-debug-rhel.config @@ -4592,6 +4592,7 @@ CONFIG_RTC_DRV_RV3029C2=m # CONFIG_RTC_DRV_RX6110 is not set # CONFIG_RTC_DRV_RX8010 is not set CONFIG_RTC_DRV_RX8025=m +# CONFIG_RTC_DRV_RX8111 is not set CONFIG_RTC_DRV_RX8581=m # CONFIG_RTC_DRV_S35390A is not set # CONFIG_RTC_DRV_SD3078 is not set diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config index e62f87a88..3eb3a8157 100644 --- a/kernel-s390x-rhel.config +++ b/kernel-s390x-rhel.config @@ -4572,6 +4572,7 @@ CONFIG_RTC_DRV_RV3029C2=m # CONFIG_RTC_DRV_RX6110 is not set # CONFIG_RTC_DRV_RX8010 is not set CONFIG_RTC_DRV_RX8025=m +# CONFIG_RTC_DRV_RX8111 is not set CONFIG_RTC_DRV_RX8581=m # CONFIG_RTC_DRV_S35390A is not set # CONFIG_RTC_DRV_SD3078 is not set diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config index 3baf952be..61e36b330 100644 --- a/kernel-s390x-zfcpdump-rhel.config +++ b/kernel-s390x-zfcpdump-rhel.config @@ -4587,6 +4587,7 @@ CONFIG_RTC_DRV_RV3029C2=m # CONFIG_RTC_DRV_RX6110 is not set # CONFIG_RTC_DRV_RX8010 is not set CONFIG_RTC_DRV_RX8025=m +# CONFIG_RTC_DRV_RX8111 is not set CONFIG_RTC_DRV_RX8581=m # CONFIG_RTC_DRV_S35390A is not set # CONFIG_RTC_DRV_SD3078 is not set diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config index 453527c51..dd5b59b83 100644 --- a/kernel-x86_64-debug-rhel.config +++ b/kernel-x86_64-debug-rhel.config @@ -4875,6 +4875,7 @@ CONFIG_RTC_DRV_RX4581=m # CONFIG_RTC_DRV_RX6110 is not set # CONFIG_RTC_DRV_RX8010 is not set CONFIG_RTC_DRV_RX8025=m +# CONFIG_RTC_DRV_RX8111 is not set CONFIG_RTC_DRV_RX8581=m # CONFIG_RTC_DRV_S35390A is not set # CONFIG_RTC_DRV_SD3078 is not set diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config index 3383fecf0..d0d76ae19 100644 --- a/kernel-x86_64-rhel.config +++ b/kernel-x86_64-rhel.config @@ -4854,6 +4854,7 @@ CONFIG_RTC_DRV_RX4581=m # CONFIG_RTC_DRV_RX6110 is not set # CONFIG_RTC_DRV_RX8010 is not set CONFIG_RTC_DRV_RX8025=m +# CONFIG_RTC_DRV_RX8111 is not set CONFIG_RTC_DRV_RX8581=m # CONFIG_RTC_DRV_S35390A is not set # CONFIG_RTC_DRV_SD3078 is not set diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config index 9ad8e732a..bc9107837 100644 --- a/kernel-x86_64-rt-debug-rhel.config +++ b/kernel-x86_64-rt-debug-rhel.config @@ -4967,6 +4967,7 @@ CONFIG_RTC_DRV_RX4581=m # CONFIG_RTC_DRV_RX6110 is not set # CONFIG_RTC_DRV_RX8010 is not set CONFIG_RTC_DRV_RX8025=m +# CONFIG_RTC_DRV_RX8111 is not set CONFIG_RTC_DRV_RX8581=m # CONFIG_RTC_DRV_S35390A is not set # CONFIG_RTC_DRV_SD3078 is not set diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config index dd8b0a899..ac4da972b 100644 --- a/kernel-x86_64-rt-rhel.config +++ b/kernel-x86_64-rt-rhel.config @@ -4946,6 +4946,7 @@ CONFIG_RTC_DRV_RX4581=m # CONFIG_RTC_DRV_RX6110 is not set # CONFIG_RTC_DRV_RX8010 is not set CONFIG_RTC_DRV_RX8025=m +# CONFIG_RTC_DRV_RX8111 is not set CONFIG_RTC_DRV_RX8581=m # CONFIG_RTC_DRV_S35390A is not set # CONFIG_RTC_DRV_SD3078 is not set diff --git a/kernel.changelog b/kernel.changelog index 49f98ea2c..81790a5db 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,47 @@ +* Tue Aug 11 2026 CKI KWF Bot [5.14.0-736.el9] +- selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-222801] +- i2c: core: fix adapter deregistration race (David Arcari) [RHEL-222902] {CVE-2026-64279} +- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- platform/x86/amd/hsmp: Clamp ioctl/send_message indices (Spectre v1) (David Arcari) [RHEL-217011] +- pinctrl-amd: Don't clear S4 wake bits at probe (David Arcari) [RHEL-211144] +- fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (David Arcari) [RHEL-216442] +- fs/resctrl: Fix use-after-free during unmount (David Arcari) [RHEL-216442] +- fs/resctrl: Free mon_data structures on rdt_get_tree() failure (David Arcari) [RHEL-216442] +- x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled (David Arcari) [RHEL-216442] +- kernfs: fix suspicious RCU usage in kernfs_put() (David Arcari) [RHEL-216442] +- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213339] {CVE-2026-63807} +- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213339] +- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213339] +- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213339] +- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-213339] +- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211279] {CVE-2025-40026} +- perf/arm_cspmu: nvidia: Add pmevfiltr2 support (Charles Mirabile) [RHEL-121676] +- perf/arm_cspmu: nvidia: Add revision id matching (Charles Mirabile) [RHEL-121676] +- perf/arm_cspmu: Add pmpidr support (Charles Mirabile) [RHEL-121676] +- perf/arm_cspmu: Add callback to reset filter config (Charles Mirabile) [RHEL-121676] +- perf/arm_cspmu: Add PMEVFILT2R support (Charles Mirabile) [RHEL-121676] +- perf/arm_cspmu: Fix missing io.h include (Charles Mirabile) [RHEL-121676] +- perf/arm_cspmu: Generalise event filtering (Charles Mirabile) [RHEL-121676] +- perf/arm_cspmu: Move register definitons to header (Charles Mirabile) [RHEL-121676] +- fixup! Merge: s390/entry: Scrub r12 register on kernel entry (Jan Polensky) [RHEL-191803] +- redhat/configs: Enable Epson RX8111 RTC driver (Nirmala Dalvi) [RHEL-184760] +- rtc: rx8111: Adapt upstream driver for kernel 5.14 (Nirmala Dalvi) [RHEL-184760] +- rtc: rx8111: handle VLOW flag (Nirmala Dalvi) [RHEL-184760] +- rtc: rx8111: demote warnings to debug level (Nirmala Dalvi) [RHEL-184760] +- rtc: Add driver for Epson RX8111 (Nirmala Dalvi) [RHEL-184760] +- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188213] {CVE-2026-52923} +Resolves: RHEL-121676, RHEL-183626, RHEL-184760, RHEL-188213, RHEL-191803, RHEL-211144, RHEL-211279, RHEL-213339, RHEL-216442, RHEL-217011, RHEL-222801, RHEL-222902 + * Mon Aug 10 2026 CKI KWF Bot [5.14.0-735.el9] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222498] {CVE-2026-64531} - hung_task: explicitly report I/O wait state in log output (Luiz Capitulino) [RHEL-146503] diff --git a/kernel.spec b/kernel.spec index 4db6b69e9..e1c597ea5 100644 --- a/kernel.spec +++ b/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 735 +%define pkgrelease 736 %define kversion 5 -%define tarfile_release 5.14.0-735.el9 +%define tarfile_release 5.14.0-736.el9 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 735%{?buildid}%{?dist} +%define specrelease 736%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-735.el9 +%define kabiversion 5.14.0-736.el9 # # End of genspec.sh variables @@ -3875,6 +3875,49 @@ fi # # %changelog +* Tue Aug 11 2026 CKI KWF Bot [5.14.0-736.el9] +- selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-222801] +- i2c: core: fix adapter deregistration race (David Arcari) [RHEL-222902] {CVE-2026-64279} +- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183626] {CVE-2025-10263} +- platform/x86/amd/hsmp: Clamp ioctl/send_message indices (Spectre v1) (David Arcari) [RHEL-217011] +- pinctrl-amd: Don't clear S4 wake bits at probe (David Arcari) [RHEL-211144] +- fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (David Arcari) [RHEL-216442] +- fs/resctrl: Fix use-after-free during unmount (David Arcari) [RHEL-216442] +- fs/resctrl: Free mon_data structures on rdt_get_tree() failure (David Arcari) [RHEL-216442] +- x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled (David Arcari) [RHEL-216442] +- kernfs: fix suspicious RCU usage in kernfs_put() (David Arcari) [RHEL-216442] +- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213339] {CVE-2026-63807} +- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213339] +- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213339] +- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213339] +- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-213339] +- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211279] {CVE-2025-40026} +- perf/arm_cspmu: nvidia: Add pmevfiltr2 support (Charles Mirabile) [RHEL-121676] +- perf/arm_cspmu: nvidia: Add revision id matching (Charles Mirabile) [RHEL-121676] +- perf/arm_cspmu: Add pmpidr support (Charles Mirabile) [RHEL-121676] +- perf/arm_cspmu: Add callback to reset filter config (Charles Mirabile) [RHEL-121676] +- perf/arm_cspmu: Add PMEVFILT2R support (Charles Mirabile) [RHEL-121676] +- perf/arm_cspmu: Fix missing io.h include (Charles Mirabile) [RHEL-121676] +- perf/arm_cspmu: Generalise event filtering (Charles Mirabile) [RHEL-121676] +- perf/arm_cspmu: Move register definitons to header (Charles Mirabile) [RHEL-121676] +- fixup! Merge: s390/entry: Scrub r12 register on kernel entry (Jan Polensky) [RHEL-191803] +- redhat/configs: Enable Epson RX8111 RTC driver (Nirmala Dalvi) [RHEL-184760] +- rtc: rx8111: Adapt upstream driver for kernel 5.14 (Nirmala Dalvi) [RHEL-184760] +- rtc: rx8111: handle VLOW flag (Nirmala Dalvi) [RHEL-184760] +- rtc: rx8111: demote warnings to debug level (Nirmala Dalvi) [RHEL-184760] +- rtc: Add driver for Epson RX8111 (Nirmala Dalvi) [RHEL-184760] +- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188213] {CVE-2026-52923} + * Mon Aug 10 2026 CKI KWF Bot [5.14.0-735.el9] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222498] {CVE-2026-64531} - hung_task: explicitly report I/O wait state in log output (Luiz Capitulino) [RHEL-146503] diff --git a/sources b/sources index 85e715c80..dc5a74a1c 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-735.el9.tar.xz) = f2d120959679bfe98b38029a850c2fb222be944f9909df1d91a12fe7d8874f8d7cae8b95bd03e2cfcfae0b6455395533aefec1cd28ebe5b4a51a19ad4138b56f -SHA512 (kernel-abi-stablelists-5.14.0-735.el9.tar.bz2) = 0c4fda217eb23b23eef31d9aa5029a1dd02bcd934316267c4986b88e44ef9881b7acb5b1deaffa8dc432148b4f680ca8a3b29559f26c5462520801a76ae666b7 -SHA512 (kernel-kabi-dw-5.14.0-735.el9.tar.bz2) = 1daec47429fa52189fd633c7bd87269965ac897cc9778fc63457ea86924d7eae2d328ff86823a8603c1c30211f2f57ab73a2e823d6931f7c8c55c2af1881d48e +SHA512 (linux-5.14.0-736.el9.tar.xz) = d53d23b102eac48a2fe87c9d931c5f5222d18872fd0b9733057fc1fad3a3075e5798f34f63f31cdbf458e9643398c3bce088abef44a319da809732eb1f6aa3a2 +SHA512 (kernel-abi-stablelists-5.14.0-736.el9.tar.bz2) = 6ed12d8953ffcc7be5503f727f361344385dacb46a07949633fd59d3b1276c73a8247981c341af593249a7633fbb8ec623a9b399811b7ac7f0acc5eed2ab07bf +SHA512 (kernel-kabi-dw-5.14.0-736.el9.tar.bz2) = 4a31383b4c2e266d86ba969d6b72360c5ddd20f6e8d0b64acc87cb1db1c800f82b5cd07b438b2d24166abd969a3f45407749235ffd052655040961c07b3af0fc