From 4b0f82c36dbe25e522539b3397b6226f1e0066c2 Mon Sep 17 00:00:00 2001 From: Eduard Abdullin Date: Thu, 13 Aug 2026 14:08:28 +0000 Subject: [PATCH] Debrand for AlmaLinux OS Use AlmaLinux OS secure boot cert Enable Btrfs support for all kernel variants hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 qla4xxx: bring back deprecated PCI ids be2iscsi: bring back deprecated PCI ids kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained --- Makefile.rhelver | 2 +- kernel-aarch64-64k-debug-rhel.config | 1 - kernel-aarch64-64k-rhel.config | 1 - kernel-aarch64-debug-rhel.config | 1 - kernel-aarch64-rhel.config | 1 - kernel-aarch64-rt-64k-debug-rhel.config | 1 - kernel-aarch64-rt-64k-rhel.config | 1 - kernel-aarch64-rt-debug-rhel.config | 1 - kernel-aarch64-rt-rhel.config | 1 - kernel-ppc64le-debug-rhel.config | 1 - kernel-ppc64le-rhel.config | 1 - kernel-riscv64-debug-rhel.config | 1 - kernel-riscv64-rhel.config | 1 - kernel-s390x-debug-rhel.config | 1 - kernel-s390x-rhel.config | 1 - kernel-s390x-zfcpdump-rhel.config | 1 - kernel-x86_64-debug-rhel.config | 1 - kernel-x86_64-rhel.config | 1 - kernel-x86_64-rt-debug-rhel.config | 1 - kernel-x86_64-rt-rhel.config | 1 - kernel.changelog | 45 ++++++++++++++ kernel.spec | 78 +++++++++++++++++++++---- sources | 6 +- 23 files changed, 117 insertions(+), 33 deletions(-) diff --git a/Makefile.rhelver b/Makefile.rhelver index 78d163c2e..9f46df85f 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 3 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 256 +RHEL_RELEASE = 257 # # RHEL_REBASE_NUM diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config index 80acf30eb..8c5c050af 100644 --- a/kernel-aarch64-64k-debug-rhel.config +++ b/kernel-aarch64-64k-debug-rhel.config @@ -3333,7 +3333,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m # CONFIG_IPACK_BUS is not set CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IPC_NS=y -# CONFIG_IP_DCCP is not set CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IPMB_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config index b7f67c60d..d462ae3a9 100644 --- a/kernel-aarch64-64k-rhel.config +++ b/kernel-aarch64-64k-rhel.config @@ -3317,7 +3317,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m # CONFIG_IPACK_BUS is not set CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IPC_NS=y -# CONFIG_IP_DCCP is not set CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IPMB_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config index 8698e92e0..5405a18d3 100644 --- a/kernel-aarch64-debug-rhel.config +++ b/kernel-aarch64-debug-rhel.config @@ -3330,7 +3330,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m # CONFIG_IPACK_BUS is not set CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IPC_NS=y -# CONFIG_IP_DCCP is not set CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IPMB_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config index 2a4379bba..dff3741ac 100644 --- a/kernel-aarch64-rhel.config +++ b/kernel-aarch64-rhel.config @@ -3314,7 +3314,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m # CONFIG_IPACK_BUS is not set CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IPC_NS=y -# CONFIG_IP_DCCP is not set CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IPMB_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m diff --git a/kernel-aarch64-rt-64k-debug-rhel.config b/kernel-aarch64-rt-64k-debug-rhel.config index a3b1395c4..a9bf9a656 100644 --- a/kernel-aarch64-rt-64k-debug-rhel.config +++ b/kernel-aarch64-rt-64k-debug-rhel.config @@ -3374,7 +3374,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m # CONFIG_IPACK_BUS is not set CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IPC_NS=y -# CONFIG_IP_DCCP is not set CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IPMB_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m diff --git a/kernel-aarch64-rt-64k-rhel.config b/kernel-aarch64-rt-64k-rhel.config index f1407dc82..613c1e234 100644 --- a/kernel-aarch64-rt-64k-rhel.config +++ b/kernel-aarch64-rt-64k-rhel.config @@ -3358,7 +3358,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m # CONFIG_IPACK_BUS is not set CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IPC_NS=y -# CONFIG_IP_DCCP is not set CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IPMB_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config index 9a3e75d56..e1a9ac2da 100644 --- a/kernel-aarch64-rt-debug-rhel.config +++ b/kernel-aarch64-rt-debug-rhel.config @@ -3371,7 +3371,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m # CONFIG_IPACK_BUS is not set CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IPC_NS=y -# CONFIG_IP_DCCP is not set CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IPMB_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config index 1f934c4b3..daacb611c 100644 --- a/kernel-aarch64-rt-rhel.config +++ b/kernel-aarch64-rt-rhel.config @@ -3355,7 +3355,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m # CONFIG_IPACK_BUS is not set CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IPC_NS=y -# CONFIG_IP_DCCP is not set CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IPMB_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config index 33448d1a2..b4da6020f 100644 --- a/kernel-ppc64le-debug-rhel.config +++ b/kernel-ppc64le-debug-rhel.config @@ -2830,7 +2830,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m # CONFIG_IPACK_BUS is not set CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IPC_NS=y -# CONFIG_IP_DCCP is not set CONFIG_IP_FIB_TRIE_STATS=y # CONFIG_IPMB_DEVICE_INTERFACE is not set CONFIG_IPMI_DEVICE_INTERFACE=m diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config index 230118d35..9a803f969 100644 --- a/kernel-ppc64le-rhel.config +++ b/kernel-ppc64le-rhel.config @@ -2814,7 +2814,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m # CONFIG_IPACK_BUS is not set CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IPC_NS=y -# CONFIG_IP_DCCP is not set CONFIG_IP_FIB_TRIE_STATS=y # CONFIG_IPMB_DEVICE_INTERFACE is not set CONFIG_IPMI_DEVICE_INTERFACE=m diff --git a/kernel-riscv64-debug-rhel.config b/kernel-riscv64-debug-rhel.config index b7f1a229b..b78870255 100644 --- a/kernel-riscv64-debug-rhel.config +++ b/kernel-riscv64-debug-rhel.config @@ -2838,7 +2838,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m # CONFIG_IPACK_BUS is not set CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IPC_NS=y -# CONFIG_IP_DCCP is not set CONFIG_IP_FIB_TRIE_STATS=y # CONFIG_IPMB_DEVICE_INTERFACE is not set CONFIG_IPMI_DEVICE_INTERFACE=m diff --git a/kernel-riscv64-rhel.config b/kernel-riscv64-rhel.config index 5c270683d..dd2e3f30a 100644 --- a/kernel-riscv64-rhel.config +++ b/kernel-riscv64-rhel.config @@ -2822,7 +2822,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m # CONFIG_IPACK_BUS is not set CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IPC_NS=y -# CONFIG_IP_DCCP is not set CONFIG_IP_FIB_TRIE_STATS=y # CONFIG_IPMB_DEVICE_INTERFACE is not set CONFIG_IPMI_DEVICE_INTERFACE=m diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config index 3fad9180a..5bdc1218f 100644 --- a/kernel-s390x-debug-rhel.config +++ b/kernel-s390x-debug-rhel.config @@ -2817,7 +2817,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m # CONFIG_IPACK_BUS is not set CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IPC_NS=y -# CONFIG_IP_DCCP is not set CONFIG_IP_FIB_TRIE_STATS=y # CONFIG_IPMB_DEVICE_INTERFACE is not set # CONFIG_IPMI_DEVICE_INTERFACE is not set diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config index dfd15dc8d..2e34cf9bf 100644 --- a/kernel-s390x-rhel.config +++ b/kernel-s390x-rhel.config @@ -2801,7 +2801,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m # CONFIG_IPACK_BUS is not set CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IPC_NS=y -# CONFIG_IP_DCCP is not set CONFIG_IP_FIB_TRIE_STATS=y # CONFIG_IPMB_DEVICE_INTERFACE is not set # CONFIG_IPMI_DEVICE_INTERFACE is not set diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config index 4d5e0f605..6a32d0251 100644 --- a/kernel-s390x-zfcpdump-rhel.config +++ b/kernel-s390x-zfcpdump-rhel.config @@ -2807,7 +2807,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m # CONFIG_IPACK_BUS is not set CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IPC_NS=y -# CONFIG_IP_DCCP is not set CONFIG_IP_FIB_TRIE_STATS=y # CONFIG_IPMB_DEVICE_INTERFACE is not set # CONFIG_IPMI_DEVICE_INTERFACE is not set diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config index cf6324a61..c4de9864f 100644 --- a/kernel-x86_64-debug-rhel.config +++ b/kernel-x86_64-debug-rhel.config @@ -3066,7 +3066,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m # CONFIG_IPACK_BUS is not set CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IPC_NS=y -# CONFIG_IP_DCCP is not set CONFIG_IP_FIB_TRIE_STATS=y # CONFIG_IPMB_DEVICE_INTERFACE is not set CONFIG_IPMI_DEVICE_INTERFACE=m diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config index f0c5541d7..df06099e3 100644 --- a/kernel-x86_64-rhel.config +++ b/kernel-x86_64-rhel.config @@ -3050,7 +3050,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m # CONFIG_IPACK_BUS is not set CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IPC_NS=y -# CONFIG_IP_DCCP is not set CONFIG_IP_FIB_TRIE_STATS=y # CONFIG_IPMB_DEVICE_INTERFACE is not set CONFIG_IPMI_DEVICE_INTERFACE=m diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config index 7a9ad90c0..e8b642a4c 100644 --- a/kernel-x86_64-rt-debug-rhel.config +++ b/kernel-x86_64-rt-debug-rhel.config @@ -3107,7 +3107,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m # CONFIG_IPACK_BUS is not set CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IPC_NS=y -# CONFIG_IP_DCCP is not set CONFIG_IP_FIB_TRIE_STATS=y # CONFIG_IPMB_DEVICE_INTERFACE is not set CONFIG_IPMI_DEVICE_INTERFACE=m diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config index fc814bdc1..384edc1c4 100644 --- a/kernel-x86_64-rt-rhel.config +++ b/kernel-x86_64-rt-rhel.config @@ -3091,7 +3091,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m # CONFIG_IPACK_BUS is not set CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IPC_NS=y -# CONFIG_IP_DCCP is not set CONFIG_IP_FIB_TRIE_STATS=y # CONFIG_IPMB_DEVICE_INTERFACE is not set CONFIG_IPMI_DEVICE_INTERFACE=m diff --git a/kernel.changelog b/kernel.changelog index de3c6c1f6..703b61e90 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,48 @@ +* Thu Aug 06 2026 CKI KWF Bot [6.12.0-257.el10] +- redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-222562] +- wifi: ath12k: fix NULL pointer dereference in rhash table destroy (Filip Balluch) [RHEL-213608] +- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-219079] +- rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-207634] +- rtla: Stop the record trace on interrupt (Tomas Glozar) [RHEL-207634] +- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-198358] +- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-190430] +- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190345] {CVE-2026-53281} +- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190345] +- PCI: Update saved_config_space upon resource assignment (Myron Stowe) [RHEL-178011] +- PCI: Align head space better (Myron Stowe) [RHEL-178011] +- PCI: Rename window_alignment() to pci_min_window_alignment() (Myron Stowe) [RHEL-178011] +- parisc/PCI: Clean up align handling (Myron Stowe) [RHEL-178011] +- MIPS: PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011] +- m68k/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011] +- ARM/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011] +- resource: Rename 'tmp' variable to 'full_avail' (Myron Stowe) [RHEL-178011] +- resource: Pass full extent of empty space to resource_alignf callback (Myron Stowe) [RHEL-178011] +- resource: Add __resource_contains_unbound() for internal contains checks (Myron Stowe) [RHEL-178011] +- PCI: Prevent assignment to unsupported bridge windows (Myron Stowe) [RHEL-178011] +- Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" (Myron Stowe) [RHEL-178011] +- resource: improve child resource handling in release_mem_region_adjustable() (Myron Stowe) [RHEL-178011] +- resource: fix false warning in __request_region() (Myron Stowe) [RHEL-178011] +- kernel/resource: simplify API __devm_release_region() implementation (Myron Stowe) [RHEL-178011] +- resource: avoid unnecessary resource tree walking in __region_intersects() (Myron Stowe) [RHEL-178011] +- resource: correct reallocate_resource() documentation (Myron Stowe) [RHEL-178011] +- resource: introduce is_type_match() helper and use it (Myron Stowe) [RHEL-178011] +- resource: replace open coded resource_intersection() (Myron Stowe) [RHEL-178011] +- selinux: suppress warning flood for retired DCCP netlink messages (Ivan Vecera) [RHEL-179873] +- dccp Remove inet_hashinfo2_init_mod(). (Ivan Vecera) [RHEL-179873] +- tcp: Move TCP-specific diag functions to tcp_diag.c. (Ivan Vecera) [RHEL-179873] +- tcp: Don't pass hashinfo to inet_diag helpers. (Ivan Vecera) [RHEL-179873] +- tcp: Don't pass hashinfo to socket lookup helpers. (Ivan Vecera) [RHEL-179873] +- tcp: Remove hashinfo test for inet6?_lookup_run_sk_lookup(). (Ivan Vecera) [RHEL-179873] +- tcp: Remove timewait_sock_ops.twsk_destructor(). (Ivan Vecera) [RHEL-179873] +- tcp: Remove sk_protocol test for tcp_twsk_unique(). (Ivan Vecera) [RHEL-179873] +- tcp: Rename tcp_or_dccp_get_hashinfo(). (Ivan Vecera) [RHEL-179873] +- net: Unexport shared functions for DCCP. (Ivan Vecera) [RHEL-179873] +- net: Retire DCCP socket. (Ivan Vecera) [RHEL-179873] +- selftest: net: Remove DCCP bits. (Ivan Vecera) [RHEL-179873] +- selinux: apply clang format to security/selinux/nlmsgtab.c (Ivan Vecera) [RHEL-179873] +- redhat: sign UKI's inner vmlinuz with modules signing key (Vitaly Kuznetsov) [RHEL-223625] +Resolves: RHEL-178011, RHEL-179873, RHEL-190345, RHEL-190430, RHEL-198358, RHEL-207634, RHEL-213608, RHEL-219079, RHEL-222562, RHEL-223625 + * Wed Aug 05 2026 CKI KWF Bot [6.12.0-256.el10] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219622] {CVE-2026-64320} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-193996] diff --git a/kernel.spec b/kernel.spec index 4b5b71c15..0cbbe9a2e 100644 --- a/kernel.spec +++ b/kernel.spec @@ -179,15 +179,15 @@ Summary: The Linux kernel %define specrpmversion 6.12.0 %define specversion 6.12.0 %define patchversion 6.12 -%define pkgrelease 256 +%define pkgrelease 257 %define kversion 6 -%define tarfile_release 6.12.0-256.el10 +%define tarfile_release 6.12.0-257.el10 # This is needed to do merge window version magic %define patchlevel 12 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 256%{?buildid}%{?dist} +%define specrelease 257%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 6.12.0-256.el10 +%define kabiversion 6.12.0-257.el10 # If this variable is set to 1, a bpf selftests build failure will cause a # fatal kernel package build error @@ -2467,6 +2467,11 @@ BuildKernel() { cp arch/$Arch/boot/zImage.stub $RPM_BUILD_ROOT/lib/modules/$KernelVer/zImage.stub-$KernelVer || : fi +%if %{with_efiuki} + # Preserve unsigned kernel for the UKI + cp $KernelImage $KernelImage.unsigned +%endif + %if %{signkernel} %{log_msg "Copy kernel for signing"} if [ "$KernelImage" = vmlinux ]; then @@ -2509,7 +2514,7 @@ BuildKernel() { basename "$1" .cer } - pesign_name_0=$(get_pesign_name %{secureboot_key_0}) + pesign_name_0=almalinuxsecureboot0 %{log_msg "kernel signing: secureboot_key_0=%{secureboot_key_0} pesign_name_0=$pesign_name_0"} %ifarch x86_64 aarch64 @@ -2904,6 +2909,15 @@ BuildKernel() { %{log_msg "Skipping efiuki build"} else %if %{with_efiuki} + +%if %{signkernel}%{signmodules} + # Sign inner vmlinuz with the transient modules signing key to allow kexec + KernelUnifiedVmlinuz="$KernelImage.signed.trans" + /lib/systemd/systemd-sbsign sign --certificate certs/signing_key.pem --private-key certs/signing_key.pem "$KernelImage.unsigned" --output $KernelUnifiedVmlinuz +%else + KernelUnifiedVmlinuz="$KernelImage.unsigned" +%endif + %{log_msg "Setup the EFI UKI kernel"} KernelUnifiedImageDir="$RPM_BUILD_ROOT/lib/modules/$KernelVer" @@ -2921,7 +2935,7 @@ BuildKernel() { --logfile=$(mktemp) \ $KernelUnifiedInitrd - ukify build --linux $(realpath $KernelImage) --initrd $KernelUnifiedInitrd \ + ukify build --linux $KernelUnifiedVmlinuz --initrd $KernelUnifiedInitrd \ --sbat @uki.sbat --os-release @/etc/os-release --uname $KernelVer \ --cmdline 'console=tty0 console=ttyS0' --output $KernelUnifiedImage @@ -2933,7 +2947,7 @@ BuildKernel() { %if %{signkernel} %{log_msg "Sign the EFI UKI kernel"} - pesign_name_uki_0=$(get_pesign_name %{secureboot_key_uki_0}) + pesign_name_uki_0=almalinuxsecureboot0 %{log_msg "UKI signing: secureboot_key_uki_0=%{secureboot_key_uki_0} pesign_name_uki_0=$pesign_name_uki_0"} %pesign -s -i $KernelUnifiedImage -o $KernelUnifiedImage.signed -a %{secureboot_ca_0} -c %{secureboot_key_uki_0} -n $pesign_name_uki_0 if [ ! -s $KernelUnifiedImage.signed ]; then @@ -4683,14 +4697,14 @@ fi\ # # %changelog -* Fri Aug 07 2026 Eduard Abdullin - 6.12.0-256 +* Thu Aug 13 2026 Eduard Abdullin - 6.12.0-257 - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert -* Fri Aug 07 2026 Neal Gompa - 6.12.0-256 +* Thu Aug 13 2026 Neal Gompa - 6.12.0-257 - Enable Btrfs support for all kernel variants -* Fri Aug 07 2026 Andrew Lukoshko - 6.12.0-256 +* Thu Aug 13 2026 Andrew Lukoshko - 6.12.0-257 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -4700,6 +4714,50 @@ fi\ - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained +* Thu Aug 06 2026 CKI KWF Bot [6.12.0-257.el10] +- redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-222562] +- wifi: ath12k: fix NULL pointer dereference in rhash table destroy (Filip Balluch) [RHEL-213608] +- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-219079] +- rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-207634] +- rtla: Stop the record trace on interrupt (Tomas Glozar) [RHEL-207634] +- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-198358] +- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-190430] +- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190345] {CVE-2026-53281} +- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190345] +- PCI: Update saved_config_space upon resource assignment (Myron Stowe) [RHEL-178011] +- PCI: Align head space better (Myron Stowe) [RHEL-178011] +- PCI: Rename window_alignment() to pci_min_window_alignment() (Myron Stowe) [RHEL-178011] +- parisc/PCI: Clean up align handling (Myron Stowe) [RHEL-178011] +- MIPS: PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011] +- m68k/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011] +- ARM/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011] +- resource: Rename 'tmp' variable to 'full_avail' (Myron Stowe) [RHEL-178011] +- resource: Pass full extent of empty space to resource_alignf callback (Myron Stowe) [RHEL-178011] +- resource: Add __resource_contains_unbound() for internal contains checks (Myron Stowe) [RHEL-178011] +- PCI: Prevent assignment to unsupported bridge windows (Myron Stowe) [RHEL-178011] +- Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" (Myron Stowe) [RHEL-178011] +- resource: improve child resource handling in release_mem_region_adjustable() (Myron Stowe) [RHEL-178011] +- resource: fix false warning in __request_region() (Myron Stowe) [RHEL-178011] +- kernel/resource: simplify API __devm_release_region() implementation (Myron Stowe) [RHEL-178011] +- resource: avoid unnecessary resource tree walking in __region_intersects() (Myron Stowe) [RHEL-178011] +- resource: correct reallocate_resource() documentation (Myron Stowe) [RHEL-178011] +- resource: introduce is_type_match() helper and use it (Myron Stowe) [RHEL-178011] +- resource: replace open coded resource_intersection() (Myron Stowe) [RHEL-178011] +- selinux: suppress warning flood for retired DCCP netlink messages (Ivan Vecera) [RHEL-179873] +- dccp Remove inet_hashinfo2_init_mod(). (Ivan Vecera) [RHEL-179873] +- tcp: Move TCP-specific diag functions to tcp_diag.c. (Ivan Vecera) [RHEL-179873] +- tcp: Don't pass hashinfo to inet_diag helpers. (Ivan Vecera) [RHEL-179873] +- tcp: Don't pass hashinfo to socket lookup helpers. (Ivan Vecera) [RHEL-179873] +- tcp: Remove hashinfo test for inet6?_lookup_run_sk_lookup(). (Ivan Vecera) [RHEL-179873] +- tcp: Remove timewait_sock_ops.twsk_destructor(). (Ivan Vecera) [RHEL-179873] +- tcp: Remove sk_protocol test for tcp_twsk_unique(). (Ivan Vecera) [RHEL-179873] +- tcp: Rename tcp_or_dccp_get_hashinfo(). (Ivan Vecera) [RHEL-179873] +- net: Unexport shared functions for DCCP. (Ivan Vecera) [RHEL-179873] +- net: Retire DCCP socket. (Ivan Vecera) [RHEL-179873] +- selftest: net: Remove DCCP bits. (Ivan Vecera) [RHEL-179873] +- selinux: apply clang format to security/selinux/nlmsgtab.c (Ivan Vecera) [RHEL-179873] +- redhat: sign UKI's inner vmlinuz with modules signing key (Vitaly Kuznetsov) [RHEL-223625] + * Wed Aug 05 2026 CKI KWF Bot [6.12.0-256.el10] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219622] {CVE-2026-64320} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-193996] diff --git a/sources b/sources index 4f47b4449..db6938ca5 100644 --- a/sources +++ b/sources @@ -1,5 +1,5 @@ SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6 -SHA512 (linux-6.12.0-256.el10.tar.xz) = 960a3d7b045eab2878601744f07b8014de57b4a3e19b8fe310cfd246f79262c7d2e0352704fb575ee896b214aa86b8ed17958e1f8558e964bf0c273c22736bc9 -SHA512 (kernel-abi-stablelists-6.12.0-256.el10.tar.xz) = 86a77e2a1c9a12e0de075a3ca16851434c51b9637b0b26e017055fb9372aae80d1fe94890f727b5e8c7f9034d5b0ba2bdb7daf0ab1fa4c3f54fc2fa46cd7e456 -SHA512 (kernel-kabi-dw-6.12.0-256.el10.tar.xz) = 1042a04361c42ab837d7cc400136ddee9270c8c74e0ed62d87ec7e1c56475a5229323bafb4b4d5459584a4d534fc8f289daa9cfe70ebf650df7bee551ef19e49 +SHA512 (linux-6.12.0-257.el10.tar.xz) = e5b22b41dadfdfb71dd8fd2fbb20be034f1af3779c2c830bdb1efce5adf148d180193f59f601dc05f3862ca3ce58a6f02a26b3ab6c5f0b75363332449d2295bf +SHA512 (kernel-abi-stablelists-6.12.0-257.el10.tar.xz) = 7db20f040da3b45776201505cf3e008a2a96fc148f6eed9e3bd7105e96f6ec660cbbea12defa4b115a853d5c1a87ddd5eef6e60e80679d0b02a3c39ba1e35c22 +SHA512 (kernel-kabi-dw-6.12.0-257.el10.tar.xz) = bad09a6a6d276865c522910c4ef3e607e183eeaa09561fb9061bd52dc6aaf7aefae0b58d55028eb8a71fe3c23edb9205d0d709bb156ec0e0a87718b72dd79ddc