From 4c4128a147b99bca60a212d467873fb83db89a17 Mon Sep 17 00:00:00 2001 From: CKI KWF Bot Date: Mon, 18 May 2026 08:25:07 +0000 Subject: [PATCH] kernel-5.14.0-707.el9 * Mon May 18 2026 CKI KWF Bot [5.14.0-707.el9] - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176447] {CVE-2026-46333} - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174754] {CVE-2026-43303} - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172822] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172822] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172822] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172822] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172822] {CVE-2026-31709} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167274] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167274] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167274] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167274] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167834] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167834] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167834] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172939] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172939] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172939] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172939] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172939] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172939] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172939] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172939] - blk-cgroup: wait for blkcg cleanup before initializing new disk (Ming Lei) [RHEL-105810] - scsi: ses: Fix devices attaching to different hosts (Tomas Henzl) [RHEL-68372] Resolves: RHEL-105810, RHEL-167274, RHEL-167834, RHEL-172822, RHEL-172939, RHEL-174754, RHEL-176447, RHEL-68372 Signed-off-by: CKI KWF Bot --- Makefile.rhelver | 2 +- kernel.changelog | 27 +++++++++++++++++++++++++++ kernel.spec | 34 ++++++++++++++++++++++++++++++---- sources | 6 +++--- 4 files changed, 61 insertions(+), 8 deletions(-) diff --git a/Makefile.rhelver b/Makefile.rhelver index 58d2b174f..8e3132f66 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 9 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 706 +RHEL_RELEASE = 707 # # ZSTREAM diff --git a/kernel.changelog b/kernel.changelog index 465ac5921..6d4fac731 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,30 @@ +* Mon May 18 2026 CKI KWF Bot [5.14.0-707.el9] +- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176447] {CVE-2026-46333} +- mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174754] {CVE-2026-43303} +- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172822] +- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172822] +- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172822] +- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172822] +- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172822] {CVE-2026-31709} +- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167274] +- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167274] +- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167274] +- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167274] +- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167834] +- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167834] +- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167834] +- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172939] +- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172939] +- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172939] +- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172939] +- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172939] +- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172939] +- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172939] +- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172939] +- blk-cgroup: wait for blkcg cleanup before initializing new disk (Ming Lei) [RHEL-105810] +- scsi: ses: Fix devices attaching to different hosts (Tomas Henzl) [RHEL-68372] +Resolves: RHEL-105810, RHEL-167274, RHEL-167834, RHEL-172822, RHEL-172939, RHEL-174754, RHEL-176447, RHEL-68372 + * Thu May 14 2026 CKI KWF Bot [5.14.0-706.el9] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-142433] - io_uring/kbuf: check if target buffer list is still legacy on recycle (Jeff Moyer) [RHEL-161185] diff --git a/kernel.spec b/kernel.spec index 7fa9fb3a2..93a3d1222 100644 --- a/kernel.spec +++ b/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 706 +%define pkgrelease 707 %define kversion 5 -%define tarfile_release 5.14.0-706.el9 +%define tarfile_release 5.14.0-707.el9 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 706%{?buildid}%{?dist} +%define specrelease 707%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-706.el9 +%define kabiversion 5.14.0-707.el9 # # End of genspec.sh variables @@ -3753,6 +3753,32 @@ fi # # %changelog +* Mon May 18 2026 CKI KWF Bot [5.14.0-707.el9] +- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176447] {CVE-2026-46333} +- mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174754] {CVE-2026-43303} +- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172822] +- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172822] +- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172822] +- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172822] +- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172822] {CVE-2026-31709} +- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167274] +- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167274] +- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167274] +- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167274] +- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167834] +- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167834] +- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167834] +- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172939] +- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172939] +- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172939] +- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172939] +- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172939] +- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172939] +- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172939] +- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172939] +- blk-cgroup: wait for blkcg cleanup before initializing new disk (Ming Lei) [RHEL-105810] +- scsi: ses: Fix devices attaching to different hosts (Tomas Henzl) [RHEL-68372] + * Thu May 14 2026 CKI KWF Bot [5.14.0-706.el9] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-142433] - io_uring/kbuf: check if target buffer list is still legacy on recycle (Jeff Moyer) [RHEL-161185] diff --git a/sources b/sources index 64a09b3f6..30d326e32 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-706.el9.tar.xz) = dbe1fac35a78b7730a380ffbdeaff3bb8ab367651ea53419aa7bbf1251f380cf03e4e20012a7c369017c867432c9cc22047f1f47bc320bf3f849787fb1cfc7f0 -SHA512 (kernel-abi-stablelists-5.14.0-706.el9.tar.bz2) = 46685ad67e60142604d3adef7bab7d61f82baac8fba9e70d7a5c520cd926b2c981b53917622e3a6cb820d822473d08db682fd2bfe12219abf3fe00295386447c -SHA512 (kernel-kabi-dw-5.14.0-706.el9.tar.bz2) = 406ce30061cbaa9bbbebfb1c97a7ecb6555798dea250c766c31895fadc51a158a13eebc9d81077b8d6c5db89bce883ad4b1045372590f649ff8ae1a841762fe1 +SHA512 (linux-5.14.0-707.el9.tar.xz) = f3bb09ccef3ee99b87b8138eb1f4da43021e3e1dfb4eb99624698ea14ecb1cf41057077b1b2462485b59b8035aa6fa64f8cbf025e3da9096a0b178a880d1e43f +SHA512 (kernel-abi-stablelists-5.14.0-707.el9.tar.bz2) = ae128c9db95d0cc905014fbced6afcc11d9cc4541d79e135c704cc08fc8c4ff0d071f48a7f10110c46a8cd82ce07836d9287d4872eef89b575420c95518733fa +SHA512 (kernel-kabi-dw-5.14.0-707.el9.tar.bz2) = 2f9229196bcb36d5acb8c4347b43fe570aa9977531450d6a828d17955c54eeabdfa1fd71319ed3ca8c78e4f8315f49e1ae04d64fde1572ba375b72f22a92bf52