rpms/kernel
8
2
Fork 6
Code Issues Pull Requests Releases Activity

import OSE kernel-5.14.0-427.42.1.el9_4

Browse Source
This commit is contained in:
eabdullin 2024-10-30 12:21:17 +03:00
parent 1e0511f8b2
commit 3bcf6da5b7
19 changed files with 116 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
.gitignore vendored
View File

@ -1,9 +1,9 @@
SOURCES/kernel-abi-stablelists-5.14.0-427.40.1.el9_4.tar.bz2 SOURCES/linux-5.14.0-427.42.1.el9_4.tar.xz
SOURCES/kernel-kabi-dw-5.14.0-427.40.1.el9_4.tar.bz2 SOURCES/kernel-kabi-dw-5.14.0-427.42.1.el9_4.tar.bz2
SOURCES/linux-5.14.0-427.40.1.el9_4.tar.xz
SOURCES/nvidiagpuoot001.x509
SOURCES/rheldup3.x509 SOURCES/rheldup3.x509
SOURCES/rhelima.x509
SOURCES/rhelima_centos.x509
SOURCES/rhelimaca1.x509 SOURCES/rhelimaca1.x509
SOURCES/rhelima_centos.x509
SOURCES/nvidiagpuoot001.x509
SOURCES/rhelima.x509
SOURCES/rhelkpatch1.x509 SOURCES/rhelkpatch1.x509
SOURCES/kernel-abi-stablelists-5.14.0-427.42.1.el9_4.tar.bz2

12
.kernel.metadata
View File

@ -1,9 +1,9 @@
fb2296f2b5b5b0d4b0bded3c10523378c7eaa374 SOURCES/kernel-abi-stablelists-5.14.0-427.40.1.el9_4.tar.bz2 ff999a3b85b6a6d54e1532afbabafc4cf8f2745e SOURCES/linux-5.14.0-427.42.1.el9_4.tar.xz
85ae4354a48911a21addb2612e1e0fb5d9e22bcc SOURCES/kernel-kabi-dw-5.14.0-427.40.1.el9_4.tar.bz2 5da10471401aad5f2bb7ac9e17b1f2726e031041 SOURCES/kernel-kabi-dw-5.14.0-427.42.1.el9_4.tar.bz2
13a4ac4cd7b2e5353278a1fe44089c0980213980 SOURCES/linux-5.14.0-427.40.1.el9_4.tar.xz
4fff8080e88afffc06d8ef5004db8d53bb21237f SOURCES/nvidiagpuoot001.x509
95b9b811c7b0a6c98b2eafc4e7d6d24f2cb63289 SOURCES/rheldup3.x509 95b9b811c7b0a6c98b2eafc4e7d6d24f2cb63289 SOURCES/rheldup3.x509
99e571f9de4188f3b5fdf1f84ff73f6cc4bb6a0e SOURCES/rhelima.x509
61d5a223ff0c79189505abae77e0087c4b2d2b47 SOURCES/rhelima_centos.x509
f882610d2554fef65703e5d3c342f005af0390ad SOURCES/rhelimaca1.x509 f882610d2554fef65703e5d3c342f005af0390ad SOURCES/rhelimaca1.x509
61d5a223ff0c79189505abae77e0087c4b2d2b47 SOURCES/rhelima_centos.x509
4fff8080e88afffc06d8ef5004db8d53bb21237f SOURCES/nvidiagpuoot001.x509
99e571f9de4188f3b5fdf1f84ff73f6cc4bb6a0e SOURCES/rhelima.x509
d90885108d225a234a5a9d054fc80893a5bd54d0 SOURCES/rhelkpatch1.x509 d90885108d225a234a5a9d054fc80893a5bd54d0 SOURCES/rhelkpatch1.x509
283fe25f87bb2c2bd477a5f398a79608e5fd1412 SOURCES/kernel-abi-stablelists-5.14.0-427.42.1.el9_4.tar.bz2

2
SOURCES/Makefile.rhelver
View File

@ -12,7 +12,7 @@ RHEL_MINOR = 4
# #
# Use this spot to avoid future merge conflicts. # Use this spot to avoid future merge conflicts.
# Do not trim this comment. # Do not trim this comment.
RHEL_RELEASE = 427.40.1 RHEL_RELEASE = 427.42.1
# #
# ZSTREAM # ZSTREAM

1
SOURCES/kernel-aarch64-64k-debug-rhel.config
View File

@ -4155,6 +4155,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y
# CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_NXP_TJA11XX_PHY is not set
# CONFIG_OCFS2_FS is not set # CONFIG_OCFS2_FS is not set
CONFIG_OCTEON_EP=m CONFIG_OCTEON_EP=m
CONFIG_OCTEON_EP_VF=m
CONFIG_OCTEONTX2_AF=m CONFIG_OCTEONTX2_AF=m
CONFIG_OCTEONTX2_MBOX=m CONFIG_OCTEONTX2_MBOX=m
CONFIG_OCTEONTX2_PF=m CONFIG_OCTEONTX2_PF=m

1
SOURCES/kernel-aarch64-64k-rhel.config
View File

@ -4134,6 +4134,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y
# CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_NXP_TJA11XX_PHY is not set
# CONFIG_OCFS2_FS is not set # CONFIG_OCFS2_FS is not set
CONFIG_OCTEON_EP=m CONFIG_OCTEON_EP=m
CONFIG_OCTEON_EP_VF=m
CONFIG_OCTEONTX2_AF=m CONFIG_OCTEONTX2_AF=m
CONFIG_OCTEONTX2_MBOX=m CONFIG_OCTEONTX2_MBOX=m
CONFIG_OCTEONTX2_PF=m CONFIG_OCTEONTX2_PF=m

1
SOURCES/kernel-aarch64-debug-rhel.config
View File

@ -4152,6 +4152,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y
# CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_NXP_TJA11XX_PHY is not set
# CONFIG_OCFS2_FS is not set # CONFIG_OCFS2_FS is not set
CONFIG_OCTEON_EP=m CONFIG_OCTEON_EP=m
CONFIG_OCTEON_EP_VF=m
CONFIG_OCTEONTX2_AF=m CONFIG_OCTEONTX2_AF=m
CONFIG_OCTEONTX2_MBOX=m CONFIG_OCTEONTX2_MBOX=m
CONFIG_OCTEONTX2_PF=m CONFIG_OCTEONTX2_PF=m

1
SOURCES/kernel-aarch64-rhel.config
View File

@ -4131,6 +4131,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y
# CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_NXP_TJA11XX_PHY is not set
# CONFIG_OCFS2_FS is not set # CONFIG_OCFS2_FS is not set
CONFIG_OCTEON_EP=m CONFIG_OCTEON_EP=m
CONFIG_OCTEON_EP_VF=m
CONFIG_OCTEONTX2_AF=m CONFIG_OCTEONTX2_AF=m
CONFIG_OCTEONTX2_MBOX=m CONFIG_OCTEONTX2_MBOX=m
CONFIG_OCTEONTX2_PF=m CONFIG_OCTEONTX2_PF=m

1
SOURCES/kernel-aarch64-rt-debug-rhel.config
View File

@ -4223,6 +4223,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y
# CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_NXP_TJA11XX_PHY is not set
# CONFIG_OCFS2_FS is not set # CONFIG_OCFS2_FS is not set
CONFIG_OCTEON_EP=m CONFIG_OCTEON_EP=m
CONFIG_OCTEON_EP_VF=m
CONFIG_OCTEONTX2_AF=m CONFIG_OCTEONTX2_AF=m
CONFIG_OCTEONTX2_MBOX=m CONFIG_OCTEONTX2_MBOX=m
CONFIG_OCTEONTX2_PF=m CONFIG_OCTEONTX2_PF=m

1
SOURCES/kernel-aarch64-rt-rhel.config
View File

@ -4202,6 +4202,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y
# CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_NXP_TJA11XX_PHY is not set
# CONFIG_OCFS2_FS is not set # CONFIG_OCFS2_FS is not set
CONFIG_OCTEON_EP=m CONFIG_OCTEON_EP=m
CONFIG_OCTEON_EP_VF=m
CONFIG_OCTEONTX2_AF=m CONFIG_OCTEONTX2_AF=m
CONFIG_OCTEONTX2_MBOX=m CONFIG_OCTEONTX2_MBOX=m
CONFIG_OCTEONTX2_PF=m CONFIG_OCTEONTX2_PF=m

1
SOURCES/kernel-ppc64le-debug-rhel.config
View File

@ -3797,6 +3797,7 @@ CONFIG_NVRAM=m
# CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_NXP_TJA11XX_PHY is not set
# CONFIG_OCFS2_FS is not set # CONFIG_OCFS2_FS is not set
CONFIG_OCTEON_EP=m CONFIG_OCTEON_EP=m
CONFIG_OCTEON_EP_VF=m
CONFIG_OCXL=m CONFIG_OCXL=m
# CONFIG_OF_OVERLAY is not set # CONFIG_OF_OVERLAY is not set
CONFIG_OF_PMEM=m CONFIG_OF_PMEM=m

1
SOURCES/kernel-ppc64le-rhel.config
View File

@ -3777,6 +3777,7 @@ CONFIG_NVRAM=m
# CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_NXP_TJA11XX_PHY is not set
# CONFIG_OCFS2_FS is not set # CONFIG_OCFS2_FS is not set
CONFIG_OCTEON_EP=m CONFIG_OCTEON_EP=m
CONFIG_OCTEON_EP_VF=m
CONFIG_OCXL=m CONFIG_OCXL=m
# CONFIG_OF_OVERLAY is not set # CONFIG_OF_OVERLAY is not set
CONFIG_OF_PMEM=m CONFIG_OF_PMEM=m

1
SOURCES/kernel-s390x-debug-rhel.config
View File

@ -3783,6 +3783,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y
# CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_NXP_TJA11XX_PHY is not set
# CONFIG_OCFS2_FS is not set # CONFIG_OCFS2_FS is not set
CONFIG_OCTEON_EP=m CONFIG_OCTEON_EP=m
CONFIG_OCTEON_EP_VF=m
CONFIG_OCXL=m CONFIG_OCXL=m
# CONFIG_OF is not set # CONFIG_OF is not set
# CONFIG_OF_OVERLAY is not set # CONFIG_OF_OVERLAY is not set

1
SOURCES/kernel-s390x-rhel.config
View File

@ -3763,6 +3763,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y
# CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_NXP_TJA11XX_PHY is not set
# CONFIG_OCFS2_FS is not set # CONFIG_OCFS2_FS is not set
CONFIG_OCTEON_EP=m CONFIG_OCTEON_EP=m
CONFIG_OCTEON_EP_VF=m
CONFIG_OCXL=m CONFIG_OCXL=m
# CONFIG_OF is not set # CONFIG_OF is not set
# CONFIG_OF_OVERLAY is not set # CONFIG_OF_OVERLAY is not set

1
SOURCES/kernel-s390x-zfcpdump-rhel.config
View File

@ -3778,6 +3778,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y
# CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_NXP_TJA11XX_PHY is not set
# CONFIG_OCFS2_FS is not set # CONFIG_OCFS2_FS is not set
CONFIG_OCTEON_EP=m CONFIG_OCTEON_EP=m
CONFIG_OCTEON_EP_VF=m
CONFIG_OCXL=m CONFIG_OCXL=m
# CONFIG_OF is not set # CONFIG_OF is not set
# CONFIG_OF_OVERLAY is not set # CONFIG_OF_OVERLAY is not set

2
SOURCES/kernel-x86_64-debug-rhel.config
View File

@ -3231,6 +3231,7 @@ CONFIG_MISC_FILESYSTEMS=y
CONFIG_MISC_RTSX_PCI=m CONFIG_MISC_RTSX_PCI=m
CONFIG_MISC_RTSX_USB=m CONFIG_MISC_RTSX_USB=m
CONFIG_MITIGATION_RFDS=y CONFIG_MITIGATION_RFDS=y
CONFIG_MITIGATION_SPECTRE_BHI=y
# CONFIG_MK8 is not set # CONFIG_MK8 is not set
# CONFIG_MLX4_CORE_GEN2 is not set # CONFIG_MLX4_CORE_GEN2 is not set
CONFIG_MLX4_EN_DCB=y CONFIG_MLX4_EN_DCB=y
@ -3992,6 +3993,7 @@ CONFIG_NVSW_SN2201=m
# CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_NXP_TJA11XX_PHY is not set
# CONFIG_OCFS2_FS is not set # CONFIG_OCFS2_FS is not set
CONFIG_OCTEON_EP=m CONFIG_OCTEON_EP=m
CONFIG_OCTEON_EP_VF=m
CONFIG_OCXL=m CONFIG_OCXL=m
# CONFIG_OF is not set # CONFIG_OF is not set
# CONFIG_OF_OVERLAY is not set # CONFIG_OF_OVERLAY is not set

2
SOURCES/kernel-x86_64-rhel.config
View File

@ -3211,6 +3211,7 @@ CONFIG_MISC_FILESYSTEMS=y
CONFIG_MISC_RTSX_PCI=m CONFIG_MISC_RTSX_PCI=m
CONFIG_MISC_RTSX_USB=m CONFIG_MISC_RTSX_USB=m
CONFIG_MITIGATION_RFDS=y CONFIG_MITIGATION_RFDS=y
CONFIG_MITIGATION_SPECTRE_BHI=y
# CONFIG_MK8 is not set # CONFIG_MK8 is not set
# CONFIG_MLX4_CORE_GEN2 is not set # CONFIG_MLX4_CORE_GEN2 is not set
CONFIG_MLX4_EN_DCB=y CONFIG_MLX4_EN_DCB=y
@ -3972,6 +3973,7 @@ CONFIG_NVSW_SN2201=m
# CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_NXP_TJA11XX_PHY is not set
# CONFIG_OCFS2_FS is not set # CONFIG_OCFS2_FS is not set
CONFIG_OCTEON_EP=m CONFIG_OCTEON_EP=m
CONFIG_OCTEON_EP_VF=m
CONFIG_OCXL=m CONFIG_OCXL=m
# CONFIG_OF is not set # CONFIG_OF is not set
# CONFIG_OF_OVERLAY is not set # CONFIG_OF_OVERLAY is not set

2
SOURCES/kernel-x86_64-rt-debug-rhel.config
View File

@ -3288,6 +3288,7 @@ CONFIG_MISC_FILESYSTEMS=y
CONFIG_MISC_RTSX_PCI=m CONFIG_MISC_RTSX_PCI=m
CONFIG_MISC_RTSX_USB=m CONFIG_MISC_RTSX_USB=m
CONFIG_MITIGATION_RFDS=y CONFIG_MITIGATION_RFDS=y
CONFIG_MITIGATION_SPECTRE_BHI=y
# CONFIG_MK8 is not set # CONFIG_MK8 is not set
# CONFIG_MLX4_CORE_GEN2 is not set # CONFIG_MLX4_CORE_GEN2 is not set
CONFIG_MLX4_DEBUG=y CONFIG_MLX4_DEBUG=y
@ -4061,6 +4062,7 @@ CONFIG_NVSW_SN2201=m
# CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_NXP_TJA11XX_PHY is not set
# CONFIG_OCFS2_FS is not set # CONFIG_OCFS2_FS is not set
CONFIG_OCTEON_EP=m CONFIG_OCTEON_EP=m
CONFIG_OCTEON_EP_VF=m
CONFIG_OCXL=m CONFIG_OCXL=m
# CONFIG_OF is not set # CONFIG_OF is not set
# CONFIG_OF_OVERLAY is not set # CONFIG_OF_OVERLAY is not set

2
SOURCES/kernel-x86_64-rt-rhel.config
View File

@ -3268,6 +3268,7 @@ CONFIG_MISC_FILESYSTEMS=y
CONFIG_MISC_RTSX_PCI=m CONFIG_MISC_RTSX_PCI=m
CONFIG_MISC_RTSX_USB=m CONFIG_MISC_RTSX_USB=m
CONFIG_MITIGATION_RFDS=y CONFIG_MITIGATION_RFDS=y
CONFIG_MITIGATION_SPECTRE_BHI=y
# CONFIG_MK8 is not set # CONFIG_MK8 is not set
# CONFIG_MLX4_CORE_GEN2 is not set # CONFIG_MLX4_CORE_GEN2 is not set
CONFIG_MLX4_DEBUG=y CONFIG_MLX4_DEBUG=y
@ -4041,6 +4042,7 @@ CONFIG_NVSW_SN2201=m
# CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_NXP_TJA11XX_PHY is not set
# CONFIG_OCFS2_FS is not set # CONFIG_OCFS2_FS is not set
CONFIG_OCTEON_EP=m CONFIG_OCTEON_EP=m
CONFIG_OCTEON_EP_VF=m
CONFIG_OCXL=m CONFIG_OCXL=m
# CONFIG_OF is not set # CONFIG_OF is not set
# CONFIG_OF_OVERLAY is not set # CONFIG_OF_OVERLAY is not set

88
SPECS/kernel.spec
View File

@ -165,15 +165,15 @@ Summary: The Linux kernel
# define buildid .local # define buildid .local
%define specversion 5.14.0 %define specversion 5.14.0
%define patchversion 5.14 %define patchversion 5.14
%define pkgrelease 427.40.1 %define pkgrelease 427.42.1
%define kversion 5 %define kversion 5
%define tarfile_release 5.14.0-427.40.1.el9_4 %define tarfile_release 5.14.0-427.42.1.el9_4
# This is needed to do merge window version magic # This is needed to do merge window version magic
%define patchlevel 14 %define patchlevel 14
# This allows pkg_release to have configurable %%{?dist} tag # This allows pkg_release to have configurable %%{?dist} tag
%define specrelease 427.40.1%{?buildid}%{?dist} %define specrelease 427.42.1%{?buildid}%{?dist}
# This defines the kabi tarball version # This defines the kabi tarball version
%define kabiversion 5.14.0-427.40.1.el9_4 %define kabiversion 5.14.0-427.42.1.el9_4
# #
# End of genspec.sh variables # End of genspec.sh variables
@ -3732,6 +3732,86 @@ fi
# #
# #
%changelog %changelog
* Fri Oct 18 2024 Scott Weaver <scweaver@redhat.com> [5.14.0-427.42.1.el9_4]
- redhat/configs: Add CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
- x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
- x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
- x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
- x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
- x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
- x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
- x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
- x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
- x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
- KVM: x86: Add BHI_NO (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
- x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
- x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
- x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
- x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
- x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
- x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
- perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
- Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
- KVM: x86: Use a switch statement and macros in __feature_translate() (Maxim Levitsky) [RHEL-45492 RHEL-32430]
- KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Maxim Levitsky) [RHEL-45492 RHEL-32430]
- x86/entry/32: Convert do_fast_syscall_32() to bool return type (Prarit Bhargava) [RHEL-45492 RHEL-25415]
- x86/entry: Add do_SYSENTER_32() prototype (Prarit Bhargava) [RHEL-45492 RHEL-25415]
- x86/bugs: Reset speculation control settings on init (Prarit Bhargava) [RHEL-45492 RHEL-25415]
- mpls: Reduce skb re-allocations due to skb_cow() (Guillaume Nault) [RHEL-61696 RHEL-55145]
- scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-39539 RHEL-39601 RHEL-33543 RHEL-35000] {CVE-2024-26935}
- tty: Fix out-of-bound vmalloc access in imageblit (Andrew Halaney) [RHEL-42095 RHEL-24205] {CVE-2021-47383}
- block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54769 RHEL-54768] {CVE-2024-43854}
- block: cleanup bio_integrity_prep (Ming Lei) [RHEL-54769 RHEL-25988]
- block: refactor to use helper (Ming Lei) [RHEL-54769 RHEL-25988]
- ceph: fix cap ref leak via netfs init_request (Patrick Donnelly) [RHEL-62666 RHEL-61459]
- redhat/configs: Enable CONFIG_OCTEON_EP_VF (CKI Backport Bot) [RHEL-61744 RHEL-25860]
- octeon_ep_vf: add ethtool support (CKI Backport Bot) [RHEL-61744 RHEL-25860]
- octeon_ep_vf: add Tx/Rx processing and interrupt support (CKI Backport Bot) [RHEL-61744 RHEL-25860]
- octeon_ep_vf: add support for ndo ops (CKI Backport Bot) [RHEL-61744 RHEL-25860]
- octeon_ep_vf: add Tx/Rx ring resource setup and cleanup (CKI Backport Bot) [RHEL-61744 RHEL-25860]
- octeon_ep_vf: add VF-PF mailbox communication. (CKI Backport Bot) [RHEL-61744 RHEL-25860]
- octeon_ep_vf: add hardware configuration APIs (CKI Backport Bot) [RHEL-61744 RHEL-25860]
- octeon_ep_vf: Add driver framework and device initialization (CKI Backport Bot) [RHEL-61744 RHEL-25860]
- octeon_ep: support firmware notifications for VFs (CKI Backport Bot) [RHEL-61744 RHEL-25860]
- octeon_ep: control net framework to support VF offloads (CKI Backport Bot) [RHEL-61744 RHEL-25860]
- octeon_ep: PF-VF mailbox version support (CKI Backport Bot) [RHEL-61744 RHEL-25860]
- octeon_ep: add PF-VF mailbox communication (CKI Backport Bot) [RHEL-61744 RHEL-25860]
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Chris von Recklinghausen) [RHEL-62209 RHEL-26268]
- netfilter: nfnetlink_queue: un-break NF_REPEAT (Phil Sutter) [RHEL-62299]
* Fri Oct 11 2024 Scott Weaver <scweaver@redhat.com> [5.14.0-427.41.1.el9_4]
- iommu/amd: Fix panic accessing amd_iommu_enable_faulting (Jerry Snitselaar) [RHEL-55507 RHEL-37320 RHEL-40344]
- iommu/vt-d: Allocate DMAR fault interrupts locally (Jerry Snitselaar) [RHEL-55507 RHEL-28780]
- netfilter: nft_inner: validate mandatory meta and payload (Phil Sutter) [RHEL-47488 RHEL-47486] {CVE-2024-39504}
- netfilter: flowtable: initialise extack before use (CKI Backport Bot) [RHEL-58546 RHEL-58544] {CVE-2024-45018}
- ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48285 RHEL-48282] {CVE-2024-40972}
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48285 RHEL-48282] {CVE-2024-40972}
- ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48519 RHEL-48517] {CVE-2024-40998}
- ext4: turn quotas off if mount failed after enabling quotas (Carlos Maiolino) [RHEL-48519 RHEL-48517] {CVE-2024-40998}
- mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-59920 RHEL-32669] {CVE-2024-26826}
- xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50864 RHEL-50862] {CVE-2024-41014}
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Davide Caratti) [RHEL-42771 RHEL-33410]
- af_unix: Fix garbage collector racing against connect() (Davide Caratti) [RHEL-42771 RHEL-33410] {CVE-2024-26923}
- af_unix: fix lockdep positive in sk_diag_dump_icons() (Davide Caratti) [RHEL-42771 RHEL-33410]
- xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50887 RHEL-50885] {CVE-2024-41013}
- ipv6: prevent possible NULL dereference in rt6_probe() (Hangbin Liu) [RHEL-48161 RHEL-45826] {CVE-2024-40960}
- mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-42795 RHEL-34969] {CVE-2024-26961}
- mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47945 RHEL-47943] {CVE-2024-40931}
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47560 RHEL-47558] {CVE-2024-40904}
- nvme-multipath: fix io accounting on failover (John Meneghini) [RHEL-59646 RHEL-56635]
- nvme: fix multipath batched completion accounting (John Meneghini) [RHEL-59646 RHEL-56635]
- xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46481 RHEL-46479] {CVE-2024-39472}
- tcp: add sanity checks to rx zerocopy (Paolo Abeni) [RHEL-58403 RHEL-29496] {CVE-2024-26640}
- netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49373 RHEL-49371] {CVE-2024-41005}
- wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48321 RHEL-48319] {CVE-2024-40977}
- smb: client: fix hang in wait_for_response() for negproto (Jay Shin) [RHEL-61606 RHEL-57983]
- NFSv4.1/pnfs: fix NFS with TLS in pnfs (Benjamin Coddington) [RHEL-61467 RHEL-34576]
- ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [RHEL-61415 RHEL-60255]
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Davide Caratti) [RHEL-48483 RHEL-44375] {CVE-2024-40995}
- net/sched: taprio: extend minimum interval restriction to entire cycle too (Davide Caratti) [RHEL-44377 RHEL-44375] {CVE-2024-36244}
- net/sched: taprio: make q->picos_per_byte available to fill_sched_entry() (Davide Caratti) [RHEL-44377 RHEL-44375] {CVE-2024-36244}
* Fri Oct 04 2024 Scott Weaver <scweaver@redhat.com> [5.14.0-427.40.1.el9_4] * Fri Oct 04 2024 Scott Weaver <scweaver@redhat.com> [5.14.0-427.40.1.el9_4]
- gfs2: Fix NULL pointer dereference in gfs2_log_flush (CKI Backport Bot) [RHEL-51561 RHEL-51559] {CVE-2024-42079} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (CKI Backport Bot) [RHEL-51561 RHEL-51559] {CVE-2024-42079}
- net: stmmac: Separate C22 and C45 transactions for xgmac (CKI Backport Bot) [RHEL-60274 RHEL-6297] - net: stmmac: Separate C22 and C45 transactions for xgmac (CKI Backport Bot) [RHEL-60274 RHEL-6297]