diff --git a/.gitignore b/.gitignore
index 9487aa18d..4c04ffc05 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,9 +1,9 @@
-SOURCES/kernel-abi-stablelists-5.14.0-427.40.1.el9_4.tar.bz2
-SOURCES/kernel-kabi-dw-5.14.0-427.40.1.el9_4.tar.bz2
-SOURCES/linux-5.14.0-427.40.1.el9_4.tar.xz
-SOURCES/nvidiagpuoot001.x509
+SOURCES/linux-5.14.0-427.42.1.el9_4.tar.xz
+SOURCES/kernel-kabi-dw-5.14.0-427.42.1.el9_4.tar.bz2
 SOURCES/rheldup3.x509
-SOURCES/rhelima.x509
-SOURCES/rhelima_centos.x509
 SOURCES/rhelimaca1.x509
+SOURCES/rhelima_centos.x509
+SOURCES/nvidiagpuoot001.x509
+SOURCES/rhelima.x509
 SOURCES/rhelkpatch1.x509
+SOURCES/kernel-abi-stablelists-5.14.0-427.42.1.el9_4.tar.bz2
\ No newline at end of file
diff --git a/.kernel.metadata b/.kernel.metadata
index 7c065d6f8..450cf9314 100644
--- a/.kernel.metadata
+++ b/.kernel.metadata
@@ -1,9 +1,9 @@
-fb2296f2b5b5b0d4b0bded3c10523378c7eaa374 SOURCES/kernel-abi-stablelists-5.14.0-427.40.1.el9_4.tar.bz2
-85ae4354a48911a21addb2612e1e0fb5d9e22bcc SOURCES/kernel-kabi-dw-5.14.0-427.40.1.el9_4.tar.bz2
-13a4ac4cd7b2e5353278a1fe44089c0980213980 SOURCES/linux-5.14.0-427.40.1.el9_4.tar.xz
-4fff8080e88afffc06d8ef5004db8d53bb21237f SOURCES/nvidiagpuoot001.x509
+ff999a3b85b6a6d54e1532afbabafc4cf8f2745e SOURCES/linux-5.14.0-427.42.1.el9_4.tar.xz
+5da10471401aad5f2bb7ac9e17b1f2726e031041 SOURCES/kernel-kabi-dw-5.14.0-427.42.1.el9_4.tar.bz2
 95b9b811c7b0a6c98b2eafc4e7d6d24f2cb63289 SOURCES/rheldup3.x509
-99e571f9de4188f3b5fdf1f84ff73f6cc4bb6a0e SOURCES/rhelima.x509
-61d5a223ff0c79189505abae77e0087c4b2d2b47 SOURCES/rhelima_centos.x509
 f882610d2554fef65703e5d3c342f005af0390ad SOURCES/rhelimaca1.x509
+61d5a223ff0c79189505abae77e0087c4b2d2b47 SOURCES/rhelima_centos.x509
+4fff8080e88afffc06d8ef5004db8d53bb21237f SOURCES/nvidiagpuoot001.x509
+99e571f9de4188f3b5fdf1f84ff73f6cc4bb6a0e SOURCES/rhelima.x509
 d90885108d225a234a5a9d054fc80893a5bd54d0 SOURCES/rhelkpatch1.x509
+283fe25f87bb2c2bd477a5f398a79608e5fd1412 SOURCES/kernel-abi-stablelists-5.14.0-427.42.1.el9_4.tar.bz2
diff --git a/SOURCES/Makefile.rhelver b/SOURCES/Makefile.rhelver
index 9e494fb51..7549e83bd 100644
--- a/SOURCES/Makefile.rhelver
+++ b/SOURCES/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 4
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 427.40.1
+RHEL_RELEASE = 427.42.1
 
 #
 # ZSTREAM
diff --git a/SOURCES/kernel-aarch64-64k-debug-rhel.config b/SOURCES/kernel-aarch64-64k-debug-rhel.config
index b15cc9dcd..a674ee5fd 100644
--- a/SOURCES/kernel-aarch64-64k-debug-rhel.config
+++ b/SOURCES/kernel-aarch64-64k-debug-rhel.config
@@ -4155,6 +4155,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y
 # CONFIG_NXP_TJA11XX_PHY is not set
 # CONFIG_OCFS2_FS is not set
 CONFIG_OCTEON_EP=m
+CONFIG_OCTEON_EP_VF=m
 CONFIG_OCTEONTX2_AF=m
 CONFIG_OCTEONTX2_MBOX=m
 CONFIG_OCTEONTX2_PF=m
diff --git a/SOURCES/kernel-aarch64-64k-rhel.config b/SOURCES/kernel-aarch64-64k-rhel.config
index 1e05626b0..d7e975a56 100644
--- a/SOURCES/kernel-aarch64-64k-rhel.config
+++ b/SOURCES/kernel-aarch64-64k-rhel.config
@@ -4134,6 +4134,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y
 # CONFIG_NXP_TJA11XX_PHY is not set
 # CONFIG_OCFS2_FS is not set
 CONFIG_OCTEON_EP=m
+CONFIG_OCTEON_EP_VF=m
 CONFIG_OCTEONTX2_AF=m
 CONFIG_OCTEONTX2_MBOX=m
 CONFIG_OCTEONTX2_PF=m
diff --git a/SOURCES/kernel-aarch64-debug-rhel.config b/SOURCES/kernel-aarch64-debug-rhel.config
index f55d9e381..8954f1a11 100644
--- a/SOURCES/kernel-aarch64-debug-rhel.config
+++ b/SOURCES/kernel-aarch64-debug-rhel.config
@@ -4152,6 +4152,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y
 # CONFIG_NXP_TJA11XX_PHY is not set
 # CONFIG_OCFS2_FS is not set
 CONFIG_OCTEON_EP=m
+CONFIG_OCTEON_EP_VF=m
 CONFIG_OCTEONTX2_AF=m
 CONFIG_OCTEONTX2_MBOX=m
 CONFIG_OCTEONTX2_PF=m
diff --git a/SOURCES/kernel-aarch64-rhel.config b/SOURCES/kernel-aarch64-rhel.config
index 50dfa90dd..a4aa9db19 100644
--- a/SOURCES/kernel-aarch64-rhel.config
+++ b/SOURCES/kernel-aarch64-rhel.config
@@ -4131,6 +4131,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y
 # CONFIG_NXP_TJA11XX_PHY is not set
 # CONFIG_OCFS2_FS is not set
 CONFIG_OCTEON_EP=m
+CONFIG_OCTEON_EP_VF=m
 CONFIG_OCTEONTX2_AF=m
 CONFIG_OCTEONTX2_MBOX=m
 CONFIG_OCTEONTX2_PF=m
diff --git a/SOURCES/kernel-aarch64-rt-debug-rhel.config b/SOURCES/kernel-aarch64-rt-debug-rhel.config
index 319fe3169..360333f62 100644
--- a/SOURCES/kernel-aarch64-rt-debug-rhel.config
+++ b/SOURCES/kernel-aarch64-rt-debug-rhel.config
@@ -4223,6 +4223,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y
 # CONFIG_NXP_TJA11XX_PHY is not set
 # CONFIG_OCFS2_FS is not set
 CONFIG_OCTEON_EP=m
+CONFIG_OCTEON_EP_VF=m
 CONFIG_OCTEONTX2_AF=m
 CONFIG_OCTEONTX2_MBOX=m
 CONFIG_OCTEONTX2_PF=m
diff --git a/SOURCES/kernel-aarch64-rt-rhel.config b/SOURCES/kernel-aarch64-rt-rhel.config
index 26607d575..dd478881b 100644
--- a/SOURCES/kernel-aarch64-rt-rhel.config
+++ b/SOURCES/kernel-aarch64-rt-rhel.config
@@ -4202,6 +4202,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y
 # CONFIG_NXP_TJA11XX_PHY is not set
 # CONFIG_OCFS2_FS is not set
 CONFIG_OCTEON_EP=m
+CONFIG_OCTEON_EP_VF=m
 CONFIG_OCTEONTX2_AF=m
 CONFIG_OCTEONTX2_MBOX=m
 CONFIG_OCTEONTX2_PF=m
diff --git a/SOURCES/kernel-ppc64le-debug-rhel.config b/SOURCES/kernel-ppc64le-debug-rhel.config
index 10a642242..cc62cd48f 100644
--- a/SOURCES/kernel-ppc64le-debug-rhel.config
+++ b/SOURCES/kernel-ppc64le-debug-rhel.config
@@ -3797,6 +3797,7 @@ CONFIG_NVRAM=m
 # CONFIG_NXP_TJA11XX_PHY is not set
 # CONFIG_OCFS2_FS is not set
 CONFIG_OCTEON_EP=m
+CONFIG_OCTEON_EP_VF=m
 CONFIG_OCXL=m
 # CONFIG_OF_OVERLAY is not set
 CONFIG_OF_PMEM=m
diff --git a/SOURCES/kernel-ppc64le-rhel.config b/SOURCES/kernel-ppc64le-rhel.config
index ab64b81ec..bf6ee172a 100644
--- a/SOURCES/kernel-ppc64le-rhel.config
+++ b/SOURCES/kernel-ppc64le-rhel.config
@@ -3777,6 +3777,7 @@ CONFIG_NVRAM=m
 # CONFIG_NXP_TJA11XX_PHY is not set
 # CONFIG_OCFS2_FS is not set
 CONFIG_OCTEON_EP=m
+CONFIG_OCTEON_EP_VF=m
 CONFIG_OCXL=m
 # CONFIG_OF_OVERLAY is not set
 CONFIG_OF_PMEM=m
diff --git a/SOURCES/kernel-s390x-debug-rhel.config b/SOURCES/kernel-s390x-debug-rhel.config
index edff9eceb..6fabf97a5 100644
--- a/SOURCES/kernel-s390x-debug-rhel.config
+++ b/SOURCES/kernel-s390x-debug-rhel.config
@@ -3783,6 +3783,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y
 # CONFIG_NXP_TJA11XX_PHY is not set
 # CONFIG_OCFS2_FS is not set
 CONFIG_OCTEON_EP=m
+CONFIG_OCTEON_EP_VF=m
 CONFIG_OCXL=m
 # CONFIG_OF is not set
 # CONFIG_OF_OVERLAY is not set
diff --git a/SOURCES/kernel-s390x-rhel.config b/SOURCES/kernel-s390x-rhel.config
index e051d0364..82b201ece 100644
--- a/SOURCES/kernel-s390x-rhel.config
+++ b/SOURCES/kernel-s390x-rhel.config
@@ -3763,6 +3763,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y
 # CONFIG_NXP_TJA11XX_PHY is not set
 # CONFIG_OCFS2_FS is not set
 CONFIG_OCTEON_EP=m
+CONFIG_OCTEON_EP_VF=m
 CONFIG_OCXL=m
 # CONFIG_OF is not set
 # CONFIG_OF_OVERLAY is not set
diff --git a/SOURCES/kernel-s390x-zfcpdump-rhel.config b/SOURCES/kernel-s390x-zfcpdump-rhel.config
index 44b6a504a..475643c71 100644
--- a/SOURCES/kernel-s390x-zfcpdump-rhel.config
+++ b/SOURCES/kernel-s390x-zfcpdump-rhel.config
@@ -3778,6 +3778,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y
 # CONFIG_NXP_TJA11XX_PHY is not set
 # CONFIG_OCFS2_FS is not set
 CONFIG_OCTEON_EP=m
+CONFIG_OCTEON_EP_VF=m
 CONFIG_OCXL=m
 # CONFIG_OF is not set
 # CONFIG_OF_OVERLAY is not set
diff --git a/SOURCES/kernel-x86_64-debug-rhel.config b/SOURCES/kernel-x86_64-debug-rhel.config
index e1e821b66..132da7caa 100644
--- a/SOURCES/kernel-x86_64-debug-rhel.config
+++ b/SOURCES/kernel-x86_64-debug-rhel.config
@@ -3231,6 +3231,7 @@ CONFIG_MISC_FILESYSTEMS=y
 CONFIG_MISC_RTSX_PCI=m
 CONFIG_MISC_RTSX_USB=m
 CONFIG_MITIGATION_RFDS=y
+CONFIG_MITIGATION_SPECTRE_BHI=y
 # CONFIG_MK8 is not set
 # CONFIG_MLX4_CORE_GEN2 is not set
 CONFIG_MLX4_EN_DCB=y
@@ -3992,6 +3993,7 @@ CONFIG_NVSW_SN2201=m
 # CONFIG_NXP_TJA11XX_PHY is not set
 # CONFIG_OCFS2_FS is not set
 CONFIG_OCTEON_EP=m
+CONFIG_OCTEON_EP_VF=m
 CONFIG_OCXL=m
 # CONFIG_OF is not set
 # CONFIG_OF_OVERLAY is not set
diff --git a/SOURCES/kernel-x86_64-rhel.config b/SOURCES/kernel-x86_64-rhel.config
index 8b91cf268..fe5aefc66 100644
--- a/SOURCES/kernel-x86_64-rhel.config
+++ b/SOURCES/kernel-x86_64-rhel.config
@@ -3211,6 +3211,7 @@ CONFIG_MISC_FILESYSTEMS=y
 CONFIG_MISC_RTSX_PCI=m
 CONFIG_MISC_RTSX_USB=m
 CONFIG_MITIGATION_RFDS=y
+CONFIG_MITIGATION_SPECTRE_BHI=y
 # CONFIG_MK8 is not set
 # CONFIG_MLX4_CORE_GEN2 is not set
 CONFIG_MLX4_EN_DCB=y
@@ -3972,6 +3973,7 @@ CONFIG_NVSW_SN2201=m
 # CONFIG_NXP_TJA11XX_PHY is not set
 # CONFIG_OCFS2_FS is not set
 CONFIG_OCTEON_EP=m
+CONFIG_OCTEON_EP_VF=m
 CONFIG_OCXL=m
 # CONFIG_OF is not set
 # CONFIG_OF_OVERLAY is not set
diff --git a/SOURCES/kernel-x86_64-rt-debug-rhel.config b/SOURCES/kernel-x86_64-rt-debug-rhel.config
index 59a095418..b434f4604 100644
--- a/SOURCES/kernel-x86_64-rt-debug-rhel.config
+++ b/SOURCES/kernel-x86_64-rt-debug-rhel.config
@@ -3288,6 +3288,7 @@ CONFIG_MISC_FILESYSTEMS=y
 CONFIG_MISC_RTSX_PCI=m
 CONFIG_MISC_RTSX_USB=m
 CONFIG_MITIGATION_RFDS=y
+CONFIG_MITIGATION_SPECTRE_BHI=y
 # CONFIG_MK8 is not set
 # CONFIG_MLX4_CORE_GEN2 is not set
 CONFIG_MLX4_DEBUG=y
@@ -4061,6 +4062,7 @@ CONFIG_NVSW_SN2201=m
 # CONFIG_NXP_TJA11XX_PHY is not set
 # CONFIG_OCFS2_FS is not set
 CONFIG_OCTEON_EP=m
+CONFIG_OCTEON_EP_VF=m
 CONFIG_OCXL=m
 # CONFIG_OF is not set
 # CONFIG_OF_OVERLAY is not set
diff --git a/SOURCES/kernel-x86_64-rt-rhel.config b/SOURCES/kernel-x86_64-rt-rhel.config
index 8a2c15805..1c9025f70 100644
--- a/SOURCES/kernel-x86_64-rt-rhel.config
+++ b/SOURCES/kernel-x86_64-rt-rhel.config
@@ -3268,6 +3268,7 @@ CONFIG_MISC_FILESYSTEMS=y
 CONFIG_MISC_RTSX_PCI=m
 CONFIG_MISC_RTSX_USB=m
 CONFIG_MITIGATION_RFDS=y
+CONFIG_MITIGATION_SPECTRE_BHI=y
 # CONFIG_MK8 is not set
 # CONFIG_MLX4_CORE_GEN2 is not set
 CONFIG_MLX4_DEBUG=y
@@ -4041,6 +4042,7 @@ CONFIG_NVSW_SN2201=m
 # CONFIG_NXP_TJA11XX_PHY is not set
 # CONFIG_OCFS2_FS is not set
 CONFIG_OCTEON_EP=m
+CONFIG_OCTEON_EP_VF=m
 CONFIG_OCXL=m
 # CONFIG_OF is not set
 # CONFIG_OF_OVERLAY is not set
diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec
index a0b78d6b5..f1cd51ea4 100644
--- a/SPECS/kernel.spec
+++ b/SPECS/kernel.spec
@@ -165,15 +165,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 427.40.1
+%define pkgrelease 427.42.1
 %define kversion 5
-%define tarfile_release 5.14.0-427.40.1.el9_4
+%define tarfile_release 5.14.0-427.42.1.el9_4
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 427.40.1%{?buildid}%{?dist}
+%define specrelease 427.42.1%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-427.40.1.el9_4
+%define kabiversion 5.14.0-427.42.1.el9_4
 
 #
 # End of genspec.sh variables
@@ -3732,6 +3732,86 @@ fi
 #
 #
 %changelog
+* Fri Oct 18 2024 Scott Weaver <scweaver@redhat.com> [5.14.0-427.42.1.el9_4]
+- redhat/configs: Add CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
+- x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
+- x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
+- x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
+- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
+- x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
+- x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
+- x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
+- x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
+- x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
+- x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
+- KVM: x86: Add BHI_NO (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
+- x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
+- x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
+- x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
+- x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
+- x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
+- x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
+- perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
+- Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
+- KVM: x86: Use a switch statement and macros in __feature_translate() (Maxim Levitsky) [RHEL-45492 RHEL-32430]
+- KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Maxim Levitsky) [RHEL-45492 RHEL-32430]
+- x86/entry/32: Convert do_fast_syscall_32() to bool return type (Prarit Bhargava) [RHEL-45492 RHEL-25415]
+- x86/entry: Add do_SYSENTER_32() prototype (Prarit Bhargava) [RHEL-45492 RHEL-25415]
+- x86/bugs: Reset speculation control settings on init (Prarit Bhargava) [RHEL-45492 RHEL-25415]
+- mpls: Reduce skb re-allocations due to skb_cow() (Guillaume Nault) [RHEL-61696 RHEL-55145]
+- scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-39539 RHEL-39601 RHEL-33543 RHEL-35000] {CVE-2024-26935}
+- tty: Fix out-of-bound vmalloc access in imageblit (Andrew Halaney) [RHEL-42095 RHEL-24205] {CVE-2021-47383}
+- block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54769 RHEL-54768] {CVE-2024-43854}
+- block: cleanup bio_integrity_prep (Ming Lei) [RHEL-54769 RHEL-25988]
+- block: refactor to use helper (Ming Lei) [RHEL-54769 RHEL-25988]
+- ceph: fix cap ref leak via netfs init_request (Patrick Donnelly) [RHEL-62666 RHEL-61459]
+- redhat/configs: Enable CONFIG_OCTEON_EP_VF (CKI Backport Bot) [RHEL-61744 RHEL-25860]
+- octeon_ep_vf: add ethtool support (CKI Backport Bot) [RHEL-61744 RHEL-25860]
+- octeon_ep_vf: add Tx/Rx processing and interrupt support (CKI Backport Bot) [RHEL-61744 RHEL-25860]
+- octeon_ep_vf: add support for ndo ops (CKI Backport Bot) [RHEL-61744 RHEL-25860]
+- octeon_ep_vf: add Tx/Rx ring resource setup and cleanup (CKI Backport Bot) [RHEL-61744 RHEL-25860]
+- octeon_ep_vf: add VF-PF mailbox communication. (CKI Backport Bot) [RHEL-61744 RHEL-25860]
+- octeon_ep_vf: add hardware configuration APIs (CKI Backport Bot) [RHEL-61744 RHEL-25860]
+- octeon_ep_vf: Add driver framework and device initialization (CKI Backport Bot) [RHEL-61744 RHEL-25860]
+- octeon_ep: support firmware notifications for VFs (CKI Backport Bot) [RHEL-61744 RHEL-25860]
+- octeon_ep: control net framework to support VF offloads (CKI Backport Bot) [RHEL-61744 RHEL-25860]
+- octeon_ep: PF-VF mailbox version support (CKI Backport Bot) [RHEL-61744 RHEL-25860]
+- octeon_ep: add PF-VF mailbox communication (CKI Backport Bot) [RHEL-61744 RHEL-25860]
+- x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Chris von Recklinghausen) [RHEL-62209 RHEL-26268]
+- netfilter: nfnetlink_queue: un-break NF_REPEAT (Phil Sutter) [RHEL-62299]
+
+* Fri Oct 11 2024 Scott Weaver <scweaver@redhat.com> [5.14.0-427.41.1.el9_4]
+- iommu/amd: Fix panic accessing amd_iommu_enable_faulting (Jerry Snitselaar) [RHEL-55507 RHEL-37320 RHEL-40344]
+- iommu/vt-d: Allocate DMAR fault interrupts locally (Jerry Snitselaar) [RHEL-55507 RHEL-28780]
+- netfilter: nft_inner: validate mandatory meta and payload (Phil Sutter) [RHEL-47488 RHEL-47486] {CVE-2024-39504}
+- netfilter: flowtable: initialise extack before use (CKI Backport Bot) [RHEL-58546 RHEL-58544] {CVE-2024-45018}
+- ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48285 RHEL-48282] {CVE-2024-40972}
+- ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48285 RHEL-48282] {CVE-2024-40972}
+- ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48519 RHEL-48517] {CVE-2024-40998}
+- ext4: turn quotas off if mount failed after enabling quotas (Carlos Maiolino) [RHEL-48519 RHEL-48517] {CVE-2024-40998}
+- mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-59920 RHEL-32669] {CVE-2024-26826}
+- xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50864 RHEL-50862] {CVE-2024-41014}
+- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Davide Caratti) [RHEL-42771 RHEL-33410]
+- af_unix: Fix garbage collector racing against connect() (Davide Caratti) [RHEL-42771 RHEL-33410] {CVE-2024-26923}
+- af_unix: fix lockdep positive in sk_diag_dump_icons() (Davide Caratti) [RHEL-42771 RHEL-33410]
+- xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50887 RHEL-50885] {CVE-2024-41013}
+- ipv6: prevent possible NULL dereference in rt6_probe() (Hangbin Liu) [RHEL-48161 RHEL-45826] {CVE-2024-40960}
+- mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-42795 RHEL-34969] {CVE-2024-26961}
+- mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47945 RHEL-47943] {CVE-2024-40931}
+- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47560 RHEL-47558] {CVE-2024-40904}
+- nvme-multipath: fix io accounting on failover (John Meneghini) [RHEL-59646 RHEL-56635]
+- nvme: fix multipath batched completion accounting (John Meneghini) [RHEL-59646 RHEL-56635]
+- xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46481 RHEL-46479] {CVE-2024-39472}
+- tcp: add sanity checks to rx zerocopy (Paolo Abeni) [RHEL-58403 RHEL-29496] {CVE-2024-26640}
+- netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49373 RHEL-49371] {CVE-2024-41005}
+- wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48321 RHEL-48319] {CVE-2024-40977}
+- smb: client: fix hang in wait_for_response() for negproto (Jay Shin) [RHEL-61606 RHEL-57983]
+- NFSv4.1/pnfs: fix NFS with TLS in pnfs (Benjamin Coddington) [RHEL-61467 RHEL-34576]
+- ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [RHEL-61415 RHEL-60255]
+- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Davide Caratti) [RHEL-48483 RHEL-44375] {CVE-2024-40995}
+- net/sched: taprio: extend minimum interval restriction to entire cycle too (Davide Caratti) [RHEL-44377 RHEL-44375] {CVE-2024-36244}
+- net/sched: taprio: make q->picos_per_byte available to fill_sched_entry() (Davide Caratti) [RHEL-44377 RHEL-44375] {CVE-2024-36244}
+
 * Fri Oct 04 2024 Scott Weaver <scweaver@redhat.com> [5.14.0-427.40.1.el9_4]
 - gfs2: Fix NULL pointer dereference in gfs2_log_flush (CKI Backport Bot) [RHEL-51561 RHEL-51559] {CVE-2024-42079}
 - net: stmmac: Separate C22 and C45 transactions for xgmac (CKI Backport Bot) [RHEL-60274 RHEL-6297]