From 3b0a001aaf16c6f3badbf56f94b2307fc954baea Mon Sep 17 00:00:00 2001 From: Eduard Abdullin Date: Thu, 26 Feb 2026 13:33:44 +0000 Subject: [PATCH] Debrand for AlmaLinux OS Use AlmaLinux OS secure boot cert Enable Btrfs support for all kernel variants hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 qla4xxx: bring back deprecated PCI ids lpfc: bring back deprecated PCI ids be2iscsi: bring back deprecated PCI ids kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained --- .gitignore | 6 +++--- Makefile.rhelver | 2 +- kernel.changelog | 7 +++++++ kernel.spec | 20 +++++++++++++------- sources | 6 +++--- 5 files changed, 27 insertions(+), 14 deletions(-) diff --git a/.gitignore b/.gitignore index b8ea3a1c9..4577be970 100644 --- a/.gitignore +++ b/.gitignore @@ -1,7 +1,7 @@ fedoraimaca.x509 -kernel-abi-stablelists-6.12.0-124.38.1.el10_1.tar.xz -kernel-kabi-dw-6.12.0-124.38.1.el10_1.tar.xz -linux-6.12.0-124.38.1.el10_1.tar.xz +kernel-abi-stablelists-6.12.0-124.39.1.el10_1.tar.xz +kernel-kabi-dw-6.12.0-124.39.1.el10_1.tar.xz +linux-6.12.0-124.39.1.el10_1.tar.xz nvidiagpuoot001.x509 olima1.x509 olimaca1.x509 diff --git a/Makefile.rhelver b/Makefile.rhelver index 69a8a5046..49caf47c9 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 1 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 124.38.1 +RHEL_RELEASE = 124.39.1 # # RHEL_REBASE_NUM diff --git a/kernel.changelog b/kernel.changelog index b6b67d13a..5cd136764 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,10 @@ +* Tue Feb 17 2026 CKI KWF Bot [6.12.0-124.39.1.el10_1] +- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206} +- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800} +- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096} +- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168} +Resolves: RHEL-125464, RHEL-130020, RHEL-143196, RHEL-146406 + * Sat Feb 07 2026 CKI KWF Bot [6.12.0-124.38.1.el10_1] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288] - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998} diff --git a/kernel.spec b/kernel.spec index 0cbec1f99..c4010031b 100644 --- a/kernel.spec +++ b/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel %define specrpmversion 6.12.0 %define specversion 6.12.0 %define patchversion 6.12 -%define pkgrelease 124.38.1 +%define pkgrelease 124.39.1 %define kversion 6 -%define tarfile_release 6.12.0-124.38.1.el10_1 +%define tarfile_release 6.12.0-124.39.1.el10_1 # This is needed to do merge window version magic %define patchlevel 12 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 124.38.1%{?buildid}%{?dist} +%define specrelease 124.39.1%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 6.12.0-124.38.1.el10_1 +%define kabiversion 6.12.0-124.39.1.el10_1 # If this variable is set to 1, a bpf selftests build failure will cause a # fatal kernel package build error @@ -4389,14 +4389,14 @@ fi\ # # %changelog -* Tue Feb 17 2026 Eduard Abdullin - 6.12.0-124.38.1 +* Thu Feb 26 2026 Eduard Abdullin - 6.12.0-124.39.1 - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert -* Tue Feb 17 2026 Neal Gompa - 6.12.0-124.38.1 +* Thu Feb 26 2026 Neal Gompa - 6.12.0-124.39.1 - Enable Btrfs support for all kernel variants -* Tue Feb 17 2026 Andrew Lukoshko - 6.12.0-124.38.1 +* Thu Feb 26 2026 Andrew Lukoshko - 6.12.0-124.39.1 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -4407,6 +4407,12 @@ fi\ - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained +* Tue Feb 17 2026 CKI KWF Bot [6.12.0-124.39.1.el10_1] +- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206} +- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800} +- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096} +- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168} + * Sat Feb 07 2026 CKI KWF Bot [6.12.0-124.38.1.el10_1] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288] - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998} diff --git a/sources b/sources index 6234f1a09..9aad9bb5c 100644 --- a/sources +++ b/sources @@ -1,7 +1,7 @@ SHA512 (fedoraimaca.x509) = e04809394f4472c17e86d7024dee34f03fb68e82a85502fd5b00535202c72e57626a8376b2cf991b7e1e46404aa5ab8d189ebf320e0dd37d49e7efbc925c7a2e -SHA512 (kernel-abi-stablelists-6.12.0-124.38.1.el10_1.tar.xz) = c4b25331387d38f54e986f53c063bba663957eb85462154cddbe913a699586fde1be9b53e472738e1637f1163f869b0d6421409541e1d0c58567b2743af8d3a4 -SHA512 (kernel-kabi-dw-6.12.0-124.38.1.el10_1.tar.xz) = b1474c7499439f86fed359b8c0d4efb0e042e25d6bff74adea64fb1446e8bf5dd835a900e5f4f54df20520cced3cc0833c599e16ce98150178b39bc69a4be92e -SHA512 (linux-6.12.0-124.38.1.el10_1.tar.xz) = 94b2d67587cf56261401fe20a5f5c61d6ee7f98c68b98a8b1d59975e785123f174e29bae923a059dfaae3036dca8346e7aef8227ca13397634d94a90249a3781 +SHA512 (kernel-abi-stablelists-6.12.0-124.39.1.el10_1.tar.xz) = 2ca864e940ea064b618e48f7e95502e01b7cdcb1c8aee0b0c0b184eb0b238890f9b774da0b0f64c914a8459c2361eb94d916180070a61953c5e82441e316352e +SHA512 (kernel-kabi-dw-6.12.0-124.39.1.el10_1.tar.xz) = 1503aac6e90061e5ec34116cf7d61bcab8042af68240f47819c9aa11b50406cc2bd0e034c2b87e400bd18fdfd63cec41ea251bb53d47b8f56ba2303accfc57e0 +SHA512 (linux-6.12.0-124.39.1.el10_1.tar.xz) = 40f990062114790700a22eeda2d03a1ea365aebf652e2b7404bd93edd61c9b0f0a9dfdf25a19608458ce5bd11b9094e352afd50b15f4e63b891e40bacdb7201f SHA512 (nvidiagpuoot001.x509) = b42f836e1cfa07890cb6ca13de9c3950e306c9ec7686c4c09f050bb68869f5d82962b2cd5f3aa0eb7a0f3a3ae54e9c480eafbac5df53aa92c295ff511a8c59fe SHA512 (olima1.x509) = 123c26c1d698cc8523845c6e1103b9c72abf855acd225d37baf1f3388a47f912166d6d786fb367fe46de39e011b586ad7f3963aa2e8923da30a6ea9ae0d76ad3 SHA512 (olimaca1.x509) = 3a779415fad29d6f7250ec97ab1f0a5eb62c351b724feee06b22e17f065bf74a558f32cc524d3222c4485635ae5b9cd5287855c94010fe743b51a4d954340c4c