diff --git a/Makefile.rhelver b/Makefile.rhelver index 0808dc11a..22b6bbb53 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 7 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 600 +RHEL_RELEASE = 601 # # ZSTREAM diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config index a55de96bf..ba1049ecf 100644 --- a/kernel-aarch64-64k-debug-rhel.config +++ b/kernel-aarch64-64k-debug-rhel.config @@ -3146,7 +3146,7 @@ CONFIG_LOCKDEP_CIRCULAR_QUEUE_BITS=12 CONFIG_LOCKDEP_STACK_TRACE_BITS=20 CONFIG_LOCKDEP_STACK_TRACE_HASH_BITS=14 CONFIG_LOCKD=m -# CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT is not set +CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set # CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config index fc26ccffc..19d178cb2 100644 --- a/kernel-aarch64-64k-rhel.config +++ b/kernel-aarch64-64k-rhel.config @@ -3125,7 +3125,7 @@ CONFIG_LOCKDEP_CIRCULAR_QUEUE_BITS=12 CONFIG_LOCKDEP_STACK_TRACE_BITS=19 CONFIG_LOCKDEP_STACK_TRACE_HASH_BITS=14 CONFIG_LOCKD=m -# CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT is not set +CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set # CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config index 8c8c692f9..655e490d9 100644 --- a/kernel-aarch64-debug-rhel.config +++ b/kernel-aarch64-debug-rhel.config @@ -3144,7 +3144,7 @@ CONFIG_LOCKDEP_CIRCULAR_QUEUE_BITS=12 CONFIG_LOCKDEP_STACK_TRACE_BITS=20 CONFIG_LOCKDEP_STACK_TRACE_HASH_BITS=14 CONFIG_LOCKD=m -# CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT is not set +CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set # CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config index 385cd9857..de5f66c48 100644 --- a/kernel-aarch64-rhel.config +++ b/kernel-aarch64-rhel.config @@ -3123,7 +3123,7 @@ CONFIG_LOCKDEP_CIRCULAR_QUEUE_BITS=12 CONFIG_LOCKDEP_STACK_TRACE_BITS=19 CONFIG_LOCKDEP_STACK_TRACE_HASH_BITS=14 CONFIG_LOCKD=m -# CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT is not set +CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set # CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y diff --git a/kernel-aarch64-rt-64k-debug-rhel.config b/kernel-aarch64-rt-64k-debug-rhel.config index 3234969bd..0c2c2c9b7 100644 --- a/kernel-aarch64-rt-64k-debug-rhel.config +++ b/kernel-aarch64-rt-64k-debug-rhel.config @@ -3206,7 +3206,7 @@ CONFIG_LOCKDEP_CIRCULAR_QUEUE_BITS=13 CONFIG_LOCKDEP_STACK_TRACE_BITS=20 CONFIG_LOCKDEP_STACK_TRACE_HASH_BITS=14 CONFIG_LOCKD=m -# CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT is not set +CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set # CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y diff --git a/kernel-aarch64-rt-64k-rhel.config b/kernel-aarch64-rt-64k-rhel.config index 698038cd7..1ad7a8dbd 100644 --- a/kernel-aarch64-rt-64k-rhel.config +++ b/kernel-aarch64-rt-64k-rhel.config @@ -3185,7 +3185,7 @@ CONFIG_LOCKDEP_CIRCULAR_QUEUE_BITS=12 CONFIG_LOCKDEP_STACK_TRACE_BITS=19 CONFIG_LOCKDEP_STACK_TRACE_HASH_BITS=14 CONFIG_LOCKD=m -# CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT is not set +CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set # CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config index 2ae218c99..142dcacc0 100644 --- a/kernel-aarch64-rt-debug-rhel.config +++ b/kernel-aarch64-rt-debug-rhel.config @@ -3204,7 +3204,7 @@ CONFIG_LOCKDEP_CIRCULAR_QUEUE_BITS=13 CONFIG_LOCKDEP_STACK_TRACE_BITS=20 CONFIG_LOCKDEP_STACK_TRACE_HASH_BITS=14 CONFIG_LOCKD=m -# CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT is not set +CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set # CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config index af3862ac3..eeb52e22d 100644 --- a/kernel-aarch64-rt-rhel.config +++ b/kernel-aarch64-rt-rhel.config @@ -3183,7 +3183,7 @@ CONFIG_LOCKDEP_CIRCULAR_QUEUE_BITS=12 CONFIG_LOCKDEP_STACK_TRACE_BITS=19 CONFIG_LOCKDEP_STACK_TRACE_HASH_BITS=14 CONFIG_LOCKD=m -# CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT is not set +CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set # CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y diff --git a/kernel.changelog b/kernel.changelog index 3d083b17d..04cf31cd1 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,123 @@ +* Mon Jul 21 2025 Augusto Caringi [5.14.0-601.el9] +- skbuff: Optimization of SKB coalescing for page pool (Ivan Vecera) [RHEL-91107] +- page_pool: halve BIAS_MAX for multiple user references of a fragment (Ivan Vecera) [RHEL-91107] +- perf trace: Set errpid to false for rseq and set_robust_list (Anubhav Shelat) [RHEL-78308] +- perf trace: Always print return value for syscalls returning a pid (Anubhav Shelat) [RHEL-78308] +- fanotify: limit reporting of event with non-decodeable file handles (Miklos Szeredi) [RHEL-102134] +- fanotify: delete useless parenthesis in FANOTIFY_INLINE_FH macro (Miklos Szeredi) [RHEL-102134] +- fanotify: Remove unused extern declaration fsnotify_get_conn_fsid() (Miklos Szeredi) [RHEL-102134] +- dnotify: Pass argument of fcntl_dirnotify as int (Miklos Szeredi) [RHEL-102134] +- fanotify: disallow mount/sb marks on kernel internal pseudo fs (Miklos Szeredi) [RHEL-102134] +- fanotify: support reporting non-decodeable file handles (Miklos Szeredi) [RHEL-102134] +- inotify: Avoid reporting event with invalid wd (Miklos Szeredi) [RHEL-102134] +- fanotify: Remove obsoleted fanotify_event_has_path() (Miklos Szeredi) [RHEL-102134] +- fsnotify: remove unused declaration (Miklos Szeredi) [RHEL-102134] +- fsnotify: Fix comment typo (Miklos Szeredi) [RHEL-102134] +- fanotify: introduce FAN_MARK_IGNORE (Miklos Szeredi) [RHEL-102134] +- fanotify: cleanups for fanotify_mark() input validations (Miklos Szeredi) [RHEL-102134] +- fanotify: prepare for setting event flags in ignore mask (Miklos Szeredi) [RHEL-102134] +- fanotify: refine the validation checks on non-dir inode mask (Miklos Szeredi) [RHEL-102134] +- fanotify: fix incorrect fmode_t casts (Miklos Szeredi) [RHEL-102134] +- fsnotify: consistent behavior for parent not watching children (Miklos Szeredi) [RHEL-102134] +- fsnotify: introduce mark type iterator (Miklos Szeredi) [RHEL-102134] +- fanotify: do not allow setting dirent events in mask of non-dir (Miklos Szeredi) [RHEL-102134] +- fanotify: enable "evictable" inode marks (Miklos Szeredi) [RHEL-102134] +- fanotify: use fsnotify group lock helpers (Miklos Szeredi) [RHEL-102134] +- fanotify: implement "evictable" inode marks (Miklos Szeredi) [RHEL-102134] +- fanotify: factor out helper fanotify_mark_update_flags() (Miklos Szeredi) [RHEL-102134] +- fanotify: create helper fanotify_mark_user_flags() (Miklos Szeredi) [RHEL-102134] +- fsnotify: allow adding an inode mark without pinning inode (Miklos Szeredi) [RHEL-102134] +- dnotify: use fsnotify group lock helpers (Miklos Szeredi) [RHEL-102134] +- inotify: use fsnotify group lock helpers (Miklos Szeredi) [RHEL-102134] +- fsnotify: create helpers for group mark_mutex lock (Miklos Szeredi) [RHEL-102134] +- fsnotify: make allow_dups a property of the group (Miklos Szeredi) [RHEL-102134] +- fsnotify: pass flags argument to fsnotify_alloc_group() (Miklos Szeredi) [RHEL-102134] +- fsnotify: fix wrong lockdep annotations (Miklos Szeredi) [RHEL-102134] +- inotify: move control flags from mask to mark flags (Miklos Szeredi) [RHEL-102134] +- fsnotify: remove redundant parameter judgment (Miklos Szeredi) [RHEL-102134] +- fsnotify: optimize FS_MODIFY events with no ignored masks (Miklos Szeredi) [RHEL-102134] +- fsnotify: fix merge with parent's ignored mask (Miklos Szeredi) [RHEL-102134] +- fanotify: remove variable set but not used (Miklos Szeredi) [RHEL-102134] +- fanotify: wire up FAN_RENAME event (Miklos Szeredi) [RHEL-102134] +- fanotify: report old and/or new parent+name in FAN_RENAME event (Miklos Szeredi) [RHEL-102134] +- fanotify: record either old name new name or both for FAN_RENAME (Miklos Szeredi) [RHEL-102134] +- fanotify: record old and new parent and name in FAN_RENAME event (Miklos Szeredi) [RHEL-102134] +- fanotify: support secondary dir fh and name in fanotify_info (Miklos Szeredi) [RHEL-102134] +- fanotify: use helpers to parcel fanotify_info buffer (Miklos Szeredi) [RHEL-102134] +- fanotify: use macros to get the offset to fanotify_info buffer (Miklos Szeredi) [RHEL-102134] +- fsnotify: generate FS_RENAME event with rich information (Miklos Szeredi) [RHEL-102134] +- fanotify: introduce group flag FAN_REPORT_TARGET_FID (Miklos Szeredi) [RHEL-102134] +- fsnotify: separate mark iterator type from object type enum (Miklos Szeredi) [RHEL-102134] +- fsnotify: clarify object type argument (Miklos Szeredi) [RHEL-102134] +- fanotify: Allow users to request FAN_FS_ERROR events (Miklos Szeredi) [RHEL-102134] +- fanotify: Emit generic error info for error event (Miklos Szeredi) [RHEL-102134] +- fanotify: Report fid info for file related file system errors (Miklos Szeredi) [RHEL-102134] +- fanotify: WARN_ON against too large file handles (Miklos Szeredi) [RHEL-102134] +- fanotify: Add helpers to decide whether to report FID/DFID (Miklos Szeredi) [RHEL-102134] +- fanotify: Wrap object_fh inline space in a creator macro (Miklos Szeredi) [RHEL-102134] +- fanotify: Support merging of error events (Miklos Szeredi) [RHEL-102134] +- fanotify: Support enqueueing of error events (Miklos Szeredi) [RHEL-102134] +- fanotify: Pre-allocate pool of error events (Miklos Szeredi) [RHEL-102134] +- fanotify: Reserve UAPI bits for FAN_FS_ERROR (Miklos Szeredi) [RHEL-102134] +- fsnotify: Support FS_ERROR event type (Miklos Szeredi) [RHEL-102134] +- fanotify: Require fid_mode for any non-fd event (Miklos Szeredi) [RHEL-102134] +- fanotify: Encode empty file handle when no inode is provided (Miklos Szeredi) [RHEL-102134] +- fanotify: Allow file handle encoding for unhashed events (Miklos Szeredi) [RHEL-102134] +- fanotify: Support null inode event in fanotify_dfid_inode (Miklos Szeredi) [RHEL-102134] +- fsnotify: Pass group argument to free_event (Miklos Szeredi) [RHEL-102134] +- fsnotify: Retrieve super block from the data field (Miklos Szeredi) [RHEL-102134] +- fsnotify: Add wrapper around fsnotify_add_event (Miklos Szeredi) [RHEL-102134] +- fsnotify: Add helper to detect overflow_event (Miklos Szeredi) [RHEL-102134] +- inotify: Don't force FS_IN_IGNORED (Miklos Szeredi) [RHEL-102134] +- fanotify: Split fsid check from other fid mode checks (Miklos Szeredi) [RHEL-102134] +- fanotify: Fold event size calculation to its own function (Miklos Szeredi) [RHEL-102134] +- fsnotify: Don't insert unmergeable events in hashtable (Miklos Szeredi) [RHEL-102134] +- fanotify: introduce a generic info record copying helper (Miklos Szeredi) [RHEL-102134] +- fanotify: minor cosmetic adjustments to fid labels (Miklos Szeredi) [RHEL-102134] +- mm: fix the inaccurate memory statistics issue for users (Luiz Capitulino) [RHEL-97601] +- loop: move lo_set_size() out of queue freeze (Ming Lei) [RHEL-96168] +- mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked" (CKI Backport Bot) [RHEL-101832] +- sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-88083] {CVE-2025-21919} +- exportfs: Remove EXPORT_OP_ASYNC_LOCK (Benjamin Coddington) [RHEL-94440] +- NFSD: Clean up unused variable (Benjamin Coddington) [RHEL-94440] +- NLM/NFSD: Fix lock notifications for async-capable filesystems (Benjamin Coddington) [RHEL-94440] +- gfs2/ocfs2: set FOP_ASYNC_LOCK (Benjamin Coddington) [RHEL-94440] +- fs: Introduce FOP_ASYNC_LOCK (Benjamin Coddington) [RHEL-94440] +- selftests/bpf: Adjust btf_dump test to reflect recent change in file_operations (Benjamin Coddington) [RHEL-94440] +- fs: claw back a few FMODE_* bits (Benjamin Coddington) [RHEL-94440] +- filelock: move file locking definitions to separate header file (Benjamin Coddington) [RHEL-94440] +- block/blk-throttle: silence !BLK_DEV_IO_TRACE variable warnings (Ming Lei) [RHEL-97189] +- blk-throttle: Prevents the bps restricted io from entering the bps queue again (Ming Lei) [RHEL-97189] +- blk-throttle: Split the service queue (Ming Lei) [RHEL-97189] +- blk-throttle: Split the blkthrotl queue (Ming Lei) [RHEL-97189] +- blk-throttle: Introduce flag "BIO_TG_BPS_THROTTLED" (Ming Lei) [RHEL-97189] +- blk-throttle: Split throtl_charge_bio() into bps and iops functions (Ming Lei) [RHEL-97189] +- blk-throttle: Refactor tg_dispatch_time by extracting tg_dispatch_bps/iops_time (Ming Lei) [RHEL-97189] +- blk-throttle: Rename tg_may_dispatch() to tg_dispatch_time() (Ming Lei) [RHEL-97189] +- blk-throttle: Add an additional overflow check to the call calculate_bytes/io_allowed (Ming Lei) [RHEL-97189] +- blk-throttle: Delete unnecessary carryover-related fields from throtl_grp (Ming Lei) [RHEL-97189] +- blk-throttle: Fix wrong tg->[bytes/io]_disp update in __tg_update_carryover() (Ming Lei) [RHEL-97189] +- blk-throttle: carry over directly (Ming Lei) [RHEL-97189] +- blk-throttle: don't take carryover for prioritized processing of metadata (Ming Lei) [RHEL-97189] +- blk-throttle: remove last_bytes_disp and last_ios_disp (Ming Lei) [RHEL-97189] +- bpf: Allow to use kfunc XDP hints and frags together (Felix Maurer) [RHEL-101559] +- redhat/configs: Enable early lockdown for Arm (Mark Salter) [RHEL-1927] +- arm64: add early lockdown for secure boot (Mark Salter) [RHEL-1927] +- efi: pass secure boot mode to kernel proper (Mark Salter) [RHEL-1927] +- RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" (CKI Backport Bot) [RHEL-82503] {CVE-2025-21829} +- iommu/s390: allow larger region tables (Christoph Schlameuss) [RHEL-11431] +- iommu/s390: support map/unmap for additional table regions (Christoph Schlameuss) [RHEL-11431] +- iommu/s390: support iova_to_phys for additional table regions (Christoph Schlameuss) [RHEL-11431] +- iommu/s390: support cleanup of additional table regions (Christoph Schlameuss) [RHEL-11431] +- iommu/s390: set appropriate IOTA region type (Christoph Schlameuss) [RHEL-11431] +- s390/pci: Fix dev.dma_range_map missing sentinel element (Christoph Schlameuss) [RHEL-11431] +- iommu/s390: implement iommu passthrough via identity domain (Christoph Schlameuss) [RHEL-11431] +- iommu/s390: handle IOAT registration based on domain (Christoph Schlameuss) [RHEL-11431] +- s390/pci: store DMA offset in bus_dma_region (Christoph Schlameuss) [RHEL-11431] +- s390/pci: check for relaxed translation capability (Christoph Schlameuss) [RHEL-11431] +- misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-97498] {CVE-2022-49788} +Resolves: RHEL-101559, RHEL-101832, RHEL-102134, RHEL-11431, RHEL-1927, RHEL-78308, RHEL-82503, RHEL-88083, RHEL-91107, RHEL-94440, RHEL-96168, RHEL-97189, RHEL-97498, RHEL-97601 + * Tue Jul 15 2025 Augusto Caringi [5.14.0-600.el9] - net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-80096] - net: mana: Add support for auxiliary device servicing events (Maxim Levitsky) [RHEL-80096] diff --git a/kernel.spec b/kernel.spec index 3526e9b00..8c4b69b43 100755 --- a/kernel.spec +++ b/kernel.spec @@ -165,15 +165,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 600 +%define pkgrelease 601 %define kversion 5 -%define tarfile_release 5.14.0-600.el9 +%define tarfile_release 5.14.0-601.el9 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 600%{?buildid}%{?dist} +%define specrelease 601%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-600.el9 +%define kabiversion 5.14.0-601.el9 # # End of genspec.sh variables @@ -3677,6 +3677,125 @@ fi # # %changelog +* Mon Jul 21 2025 Augusto Caringi [5.14.0-601.el9] +- skbuff: Optimization of SKB coalescing for page pool (Ivan Vecera) [RHEL-91107] +- page_pool: halve BIAS_MAX for multiple user references of a fragment (Ivan Vecera) [RHEL-91107] +- perf trace: Set errpid to false for rseq and set_robust_list (Anubhav Shelat) [RHEL-78308] +- perf trace: Always print return value for syscalls returning a pid (Anubhav Shelat) [RHEL-78308] +- fanotify: limit reporting of event with non-decodeable file handles (Miklos Szeredi) [RHEL-102134] +- fanotify: delete useless parenthesis in FANOTIFY_INLINE_FH macro (Miklos Szeredi) [RHEL-102134] +- fanotify: Remove unused extern declaration fsnotify_get_conn_fsid() (Miklos Szeredi) [RHEL-102134] +- dnotify: Pass argument of fcntl_dirnotify as int (Miklos Szeredi) [RHEL-102134] +- fanotify: disallow mount/sb marks on kernel internal pseudo fs (Miklos Szeredi) [RHEL-102134] +- fanotify: support reporting non-decodeable file handles (Miklos Szeredi) [RHEL-102134] +- inotify: Avoid reporting event with invalid wd (Miklos Szeredi) [RHEL-102134] +- fanotify: Remove obsoleted fanotify_event_has_path() (Miklos Szeredi) [RHEL-102134] +- fsnotify: remove unused declaration (Miklos Szeredi) [RHEL-102134] +- fsnotify: Fix comment typo (Miklos Szeredi) [RHEL-102134] +- fanotify: introduce FAN_MARK_IGNORE (Miklos Szeredi) [RHEL-102134] +- fanotify: cleanups for fanotify_mark() input validations (Miklos Szeredi) [RHEL-102134] +- fanotify: prepare for setting event flags in ignore mask (Miklos Szeredi) [RHEL-102134] +- fanotify: refine the validation checks on non-dir inode mask (Miklos Szeredi) [RHEL-102134] +- fanotify: fix incorrect fmode_t casts (Miklos Szeredi) [RHEL-102134] +- fsnotify: consistent behavior for parent not watching children (Miklos Szeredi) [RHEL-102134] +- fsnotify: introduce mark type iterator (Miklos Szeredi) [RHEL-102134] +- fanotify: do not allow setting dirent events in mask of non-dir (Miklos Szeredi) [RHEL-102134] +- fanotify: enable "evictable" inode marks (Miklos Szeredi) [RHEL-102134] +- fanotify: use fsnotify group lock helpers (Miklos Szeredi) [RHEL-102134] +- fanotify: implement "evictable" inode marks (Miklos Szeredi) [RHEL-102134] +- fanotify: factor out helper fanotify_mark_update_flags() (Miklos Szeredi) [RHEL-102134] +- fanotify: create helper fanotify_mark_user_flags() (Miklos Szeredi) [RHEL-102134] +- fsnotify: allow adding an inode mark without pinning inode (Miklos Szeredi) [RHEL-102134] +- dnotify: use fsnotify group lock helpers (Miklos Szeredi) [RHEL-102134] +- inotify: use fsnotify group lock helpers (Miklos Szeredi) [RHEL-102134] +- fsnotify: create helpers for group mark_mutex lock (Miklos Szeredi) [RHEL-102134] +- fsnotify: make allow_dups a property of the group (Miklos Szeredi) [RHEL-102134] +- fsnotify: pass flags argument to fsnotify_alloc_group() (Miklos Szeredi) [RHEL-102134] +- fsnotify: fix wrong lockdep annotations (Miklos Szeredi) [RHEL-102134] +- inotify: move control flags from mask to mark flags (Miklos Szeredi) [RHEL-102134] +- fsnotify: remove redundant parameter judgment (Miklos Szeredi) [RHEL-102134] +- fsnotify: optimize FS_MODIFY events with no ignored masks (Miklos Szeredi) [RHEL-102134] +- fsnotify: fix merge with parent's ignored mask (Miklos Szeredi) [RHEL-102134] +- fanotify: remove variable set but not used (Miklos Szeredi) [RHEL-102134] +- fanotify: wire up FAN_RENAME event (Miklos Szeredi) [RHEL-102134] +- fanotify: report old and/or new parent+name in FAN_RENAME event (Miklos Szeredi) [RHEL-102134] +- fanotify: record either old name new name or both for FAN_RENAME (Miklos Szeredi) [RHEL-102134] +- fanotify: record old and new parent and name in FAN_RENAME event (Miklos Szeredi) [RHEL-102134] +- fanotify: support secondary dir fh and name in fanotify_info (Miklos Szeredi) [RHEL-102134] +- fanotify: use helpers to parcel fanotify_info buffer (Miklos Szeredi) [RHEL-102134] +- fanotify: use macros to get the offset to fanotify_info buffer (Miklos Szeredi) [RHEL-102134] +- fsnotify: generate FS_RENAME event with rich information (Miklos Szeredi) [RHEL-102134] +- fanotify: introduce group flag FAN_REPORT_TARGET_FID (Miklos Szeredi) [RHEL-102134] +- fsnotify: separate mark iterator type from object type enum (Miklos Szeredi) [RHEL-102134] +- fsnotify: clarify object type argument (Miklos Szeredi) [RHEL-102134] +- fanotify: Allow users to request FAN_FS_ERROR events (Miklos Szeredi) [RHEL-102134] +- fanotify: Emit generic error info for error event (Miklos Szeredi) [RHEL-102134] +- fanotify: Report fid info for file related file system errors (Miklos Szeredi) [RHEL-102134] +- fanotify: WARN_ON against too large file handles (Miklos Szeredi) [RHEL-102134] +- fanotify: Add helpers to decide whether to report FID/DFID (Miklos Szeredi) [RHEL-102134] +- fanotify: Wrap object_fh inline space in a creator macro (Miklos Szeredi) [RHEL-102134] +- fanotify: Support merging of error events (Miklos Szeredi) [RHEL-102134] +- fanotify: Support enqueueing of error events (Miklos Szeredi) [RHEL-102134] +- fanotify: Pre-allocate pool of error events (Miklos Szeredi) [RHEL-102134] +- fanotify: Reserve UAPI bits for FAN_FS_ERROR (Miklos Szeredi) [RHEL-102134] +- fsnotify: Support FS_ERROR event type (Miklos Szeredi) [RHEL-102134] +- fanotify: Require fid_mode for any non-fd event (Miklos Szeredi) [RHEL-102134] +- fanotify: Encode empty file handle when no inode is provided (Miklos Szeredi) [RHEL-102134] +- fanotify: Allow file handle encoding for unhashed events (Miklos Szeredi) [RHEL-102134] +- fanotify: Support null inode event in fanotify_dfid_inode (Miklos Szeredi) [RHEL-102134] +- fsnotify: Pass group argument to free_event (Miklos Szeredi) [RHEL-102134] +- fsnotify: Retrieve super block from the data field (Miklos Szeredi) [RHEL-102134] +- fsnotify: Add wrapper around fsnotify_add_event (Miklos Szeredi) [RHEL-102134] +- fsnotify: Add helper to detect overflow_event (Miklos Szeredi) [RHEL-102134] +- inotify: Don't force FS_IN_IGNORED (Miklos Szeredi) [RHEL-102134] +- fanotify: Split fsid check from other fid mode checks (Miklos Szeredi) [RHEL-102134] +- fanotify: Fold event size calculation to its own function (Miklos Szeredi) [RHEL-102134] +- fsnotify: Don't insert unmergeable events in hashtable (Miklos Szeredi) [RHEL-102134] +- fanotify: introduce a generic info record copying helper (Miklos Szeredi) [RHEL-102134] +- fanotify: minor cosmetic adjustments to fid labels (Miklos Szeredi) [RHEL-102134] +- mm: fix the inaccurate memory statistics issue for users (Luiz Capitulino) [RHEL-97601] +- loop: move lo_set_size() out of queue freeze (Ming Lei) [RHEL-96168] +- mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked" (CKI Backport Bot) [RHEL-101832] +- sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-88083] {CVE-2025-21919} +- exportfs: Remove EXPORT_OP_ASYNC_LOCK (Benjamin Coddington) [RHEL-94440] +- NFSD: Clean up unused variable (Benjamin Coddington) [RHEL-94440] +- NLM/NFSD: Fix lock notifications for async-capable filesystems (Benjamin Coddington) [RHEL-94440] +- gfs2/ocfs2: set FOP_ASYNC_LOCK (Benjamin Coddington) [RHEL-94440] +- fs: Introduce FOP_ASYNC_LOCK (Benjamin Coddington) [RHEL-94440] +- selftests/bpf: Adjust btf_dump test to reflect recent change in file_operations (Benjamin Coddington) [RHEL-94440] +- fs: claw back a few FMODE_* bits (Benjamin Coddington) [RHEL-94440] +- filelock: move file locking definitions to separate header file (Benjamin Coddington) [RHEL-94440] +- block/blk-throttle: silence !BLK_DEV_IO_TRACE variable warnings (Ming Lei) [RHEL-97189] +- blk-throttle: Prevents the bps restricted io from entering the bps queue again (Ming Lei) [RHEL-97189] +- blk-throttle: Split the service queue (Ming Lei) [RHEL-97189] +- blk-throttle: Split the blkthrotl queue (Ming Lei) [RHEL-97189] +- blk-throttle: Introduce flag "BIO_TG_BPS_THROTTLED" (Ming Lei) [RHEL-97189] +- blk-throttle: Split throtl_charge_bio() into bps and iops functions (Ming Lei) [RHEL-97189] +- blk-throttle: Refactor tg_dispatch_time by extracting tg_dispatch_bps/iops_time (Ming Lei) [RHEL-97189] +- blk-throttle: Rename tg_may_dispatch() to tg_dispatch_time() (Ming Lei) [RHEL-97189] +- blk-throttle: Add an additional overflow check to the call calculate_bytes/io_allowed (Ming Lei) [RHEL-97189] +- blk-throttle: Delete unnecessary carryover-related fields from throtl_grp (Ming Lei) [RHEL-97189] +- blk-throttle: Fix wrong tg->[bytes/io]_disp update in __tg_update_carryover() (Ming Lei) [RHEL-97189] +- blk-throttle: carry over directly (Ming Lei) [RHEL-97189] +- blk-throttle: don't take carryover for prioritized processing of metadata (Ming Lei) [RHEL-97189] +- blk-throttle: remove last_bytes_disp and last_ios_disp (Ming Lei) [RHEL-97189] +- bpf: Allow to use kfunc XDP hints and frags together (Felix Maurer) [RHEL-101559] +- redhat/configs: Enable early lockdown for Arm (Mark Salter) [RHEL-1927] +- arm64: add early lockdown for secure boot (Mark Salter) [RHEL-1927] +- efi: pass secure boot mode to kernel proper (Mark Salter) [RHEL-1927] +- RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" (CKI Backport Bot) [RHEL-82503] {CVE-2025-21829} +- iommu/s390: allow larger region tables (Christoph Schlameuss) [RHEL-11431] +- iommu/s390: support map/unmap for additional table regions (Christoph Schlameuss) [RHEL-11431] +- iommu/s390: support iova_to_phys for additional table regions (Christoph Schlameuss) [RHEL-11431] +- iommu/s390: support cleanup of additional table regions (Christoph Schlameuss) [RHEL-11431] +- iommu/s390: set appropriate IOTA region type (Christoph Schlameuss) [RHEL-11431] +- s390/pci: Fix dev.dma_range_map missing sentinel element (Christoph Schlameuss) [RHEL-11431] +- iommu/s390: implement iommu passthrough via identity domain (Christoph Schlameuss) [RHEL-11431] +- iommu/s390: handle IOAT registration based on domain (Christoph Schlameuss) [RHEL-11431] +- s390/pci: store DMA offset in bus_dma_region (Christoph Schlameuss) [RHEL-11431] +- s390/pci: check for relaxed translation capability (Christoph Schlameuss) [RHEL-11431] +- misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-97498] {CVE-2022-49788} + * Tue Jul 15 2025 Augusto Caringi [5.14.0-600.el9] - net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-80096] - net: mana: Add support for auxiliary device servicing events (Maxim Levitsky) [RHEL-80096] diff --git a/sources b/sources index 47cdf1912..01e383b33 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-600.el9.tar.xz) = b1eb137d5595d0469ce5a68cea38dfa8337f015d5049057edfaf2ec18101dc84ae207b9b5b74bd2c507147d9791d41fc0b833bd225a3af3c595b063362e2f0ac -SHA512 (kernel-abi-stablelists-5.14.0-600.el9.tar.bz2) = 0e85e38714eb24ce1c84a4158e1dfbf032df6dbe240a479e34405d0fbd87d081af5314dadfd2d7dd1d99016085b5174cb3dcfaf643ce8e9e8ea965a2a4b9dd85 -SHA512 (kernel-kabi-dw-5.14.0-600.el9.tar.bz2) = fdc1585f269b6aef07f21b0772899224a158799e77cc1d8cd4b143fc4d1aeaf3c0165be543c3f28c3cd4879160bdb7c16ad3382183d896136650e204fa50fe27 +SHA512 (linux-5.14.0-601.el9.tar.xz) = e9df75fabac7b0981433a8633918c40505c024e14ed96bbfdcd34767af620e3ec649f9188af57ed0a9c6c944d90d233bea8eb9b9b0205c774699e82be97ec1e1 +SHA512 (kernel-abi-stablelists-5.14.0-601.el9.tar.bz2) = 4661b678392f65b16cfa7c5858a734f60a6073c985105bb84b9599da6cb6ea75b3ee3e75a77491ed2111cc92e2e11e16e1d46988d9dee7ace02e53a969df3c12 +SHA512 (kernel-kabi-dw-5.14.0-601.el9.tar.bz2) = fdc1585f269b6aef07f21b0772899224a158799e77cc1d8cd4b143fc4d1aeaf3c0165be543c3f28c3cd4879160bdb7c16ad3382183d896136650e204fa50fe27