rpms/kernel
9
4
Fork 6
Code Issues Pull Requests Releases Activity

kernel-5.14.0-729.el9

Browse Source 
* Mon Jul 27 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-729.el9]
- ppc/fadump: invoke kmsg_dump in fadump panic path (Mamatha Inamdar) [RHEL-211104]
- selinux: fix incorrect execmem checks on overlayfs (Ondrej Mosnacek) [RHEL-210856]
- Revert "selinux: RHEL-only hotfix for execmem regression" (Ondrej Mosnacek) [RHEL-210856]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189963] {CVE-2026-23002}
- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-185518]
- icmp: fix NULL pointer dereference in icmp_tag_validation() (Guillaume Nault) [RHEL-152680]
- net: nexthop: fix percpu use-after-free in remove_nh_grp_entry (Guillaume Nault) [RHEL-152680]
- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Guillaume Nault) [RHEL-152680]
- dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Guillaume Nault) [RHEL-152680]
- ipv4: Fix reference count leak when using error routes with nexthop objects (Guillaume Nault) [RHEL-152680]
- ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (Guillaume Nault) [RHEL-152680]
- arp: use RCU protection in arp_xmit() (Guillaume Nault) [RHEL-152680]
- ipv4: icmp: convert to dev_net_rcu() (Guillaume Nault) [RHEL-152680]
Resolves: RHEL-152680, RHEL-185518, RHEL-189963, RHEL-210856, RHEL-211104

Signed-off-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>
This commit is contained in:
CKI KWF Bot 2026-07-27 08:27:20 +00:00
parent 95101d4bbf
commit 4c75b8a2be
4 changed files with 39 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Makefile.rhelver
View File

@ -12,7 +12,7 @@ RHEL_MINOR = 9
#
# Use this spot to avoid future merge conflicts.
# Do not trim this comment.
RHEL_RELEASE = 728
RHEL_RELEASE = 729
#
# ZSTREAM

16
kernel.changelog
View File

@ -1,3 +1,19 @@
* Mon Jul 27 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-729.el9]
- ppc/fadump: invoke kmsg_dump in fadump panic path (Mamatha Inamdar) [RHEL-211104]
- selinux: fix incorrect execmem checks on overlayfs (Ondrej Mosnacek) [RHEL-210856]
- Revert "selinux: RHEL-only hotfix for execmem regression" (Ondrej Mosnacek) [RHEL-210856]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189963] {CVE-2026-23002}
- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-185518]
- icmp: fix NULL pointer dereference in icmp_tag_validation() (Guillaume Nault) [RHEL-152680]
- net: nexthop: fix percpu use-after-free in remove_nh_grp_entry (Guillaume Nault) [RHEL-152680]
- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Guillaume Nault) [RHEL-152680]
- dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Guillaume Nault) [RHEL-152680]
- ipv4: Fix reference count leak when using error routes with nexthop objects (Guillaume Nault) [RHEL-152680]
- ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (Guillaume Nault) [RHEL-152680]
- arp: use RCU protection in arp_xmit() (Guillaume Nault) [RHEL-152680]
- ipv4: icmp: convert to dev_net_rcu() (Guillaume Nault) [RHEL-152680]
Resolves: RHEL-152680, RHEL-185518, RHEL-189963, RHEL-210856, RHEL-211104
* Thu Jul 23 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-728.el9]
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193519] {CVE-2026-52973}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190343] {CVE-2026-53281}

23
kernel.spec
View File

@ -176,15 +176,15 @@ Summary: The Linux kernel
# define buildid .local
%define specversion 5.14.0
%define patchversion 5.14
%define pkgrelease 728
%define pkgrelease 729
%define kversion 5
%define tarfile_release 5.14.0-728.el9
%define tarfile_release 5.14.0-729.el9
# This is needed to do merge window version magic
%define patchlevel 14
# This allows pkg_release to have configurable %%{?dist} tag
%define specrelease 728%{?buildid}%{?dist}
%define specrelease 729%{?buildid}%{?dist}
# This defines the kabi tarball version
%define kabiversion 5.14.0-728.el9
%define kabiversion 5.14.0-729.el9
#
# End of genspec.sh variables
@ -3753,6 +3753,21 @@ fi
#
#
%changelog
* Mon Jul 27 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-729.el9]
- ppc/fadump: invoke kmsg_dump in fadump panic path (Mamatha Inamdar) [RHEL-211104]
- selinux: fix incorrect execmem checks on overlayfs (Ondrej Mosnacek) [RHEL-210856]
- Revert "selinux: RHEL-only hotfix for execmem regression" (Ondrej Mosnacek) [RHEL-210856]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189963] {CVE-2026-23002}
- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-185518]
- icmp: fix NULL pointer dereference in icmp_tag_validation() (Guillaume Nault) [RHEL-152680]
- net: nexthop: fix percpu use-after-free in remove_nh_grp_entry (Guillaume Nault) [RHEL-152680]
- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Guillaume Nault) [RHEL-152680]
- dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Guillaume Nault) [RHEL-152680]
- ipv4: Fix reference count leak when using error routes with nexthop objects (Guillaume Nault) [RHEL-152680]
- ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (Guillaume Nault) [RHEL-152680]
- arp: use RCU protection in arp_xmit() (Guillaume Nault) [RHEL-152680]
- ipv4: icmp: convert to dev_net_rcu() (Guillaume Nault) [RHEL-152680]
* Thu Jul 23 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-728.el9]
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193519] {CVE-2026-52973}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190343] {CVE-2026-53281}

6
sources
View File

@ -1,3 +1,3 @@
SHA512 (linux-5.14.0-728.el9.tar.xz) = e763d560a8822f5cd755d63271be49f2382fda14ce4e1f148f7e9d0e060a7fe19147c06e1a824864045fbba14a3b43daffe722253bc8b2ce9b6bd10ea0271490
SHA512 (kernel-abi-stablelists-5.14.0-728.el9.tar.bz2) = bd42966bf269b77bd721159516ac7f97a058b291d775d75533a5412f8eae0aff727f2d187a3e7c3ec48e45f1763b91a972717152a9630c6568318eeef6015818
SHA512 (kernel-kabi-dw-5.14.0-728.el9.tar.bz2) = d4029d7674ef2decef6d08bb6e09814464b33ffdc52f1cc8dbaeafbd2d83a16463feab06f677da9c059a4aeaa4ab035435dc9b51ea45a71bc3a89b690c5d0b42
SHA512 (linux-5.14.0-729.el9.tar.xz) = 0071dafb43ffb5a7758c212f7ce412e96c351c511bb8e6d751dde0711091215ea125673c862e1942a8759ea35d629f728ed8b50389d7fc5e29f642643ccccdf4
SHA512 (kernel-abi-stablelists-5.14.0-729.el9.tar.bz2) = 70e085aec4f1f6a9b7494db19c64d68f9948cda4bafc74a13548114268c9bf3a4f477b4e3b8c99d47b27d8d30c0bb951a756315ea33bcc562e84a478a78711a1
SHA512 (kernel-kabi-dw-5.14.0-729.el9.tar.bz2) = 6bd1190f4ee7cfc31a37b6e048f5a0aada25ffb8031d4085aa15819ef4b738b13db4b70385b7ecf02deecefae18ea9a7f4a5340e0528fe58dc7e31562468d3b3