From 696a8260d9320b50e28fc61ee6b14a4588f987ce Mon Sep 17 00:00:00 2001 From: Eduard Abdullin Date: Tue, 25 Aug 2026 02:17:56 +0000 Subject: [PATCH] Debrand for AlmaLinux OS Use AlmaLinux OS secure boot cert Enable Btrfs support for all kernel variants hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 qla4xxx: bring back deprecated PCI ids be2iscsi: bring back deprecated PCI ids kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained --- Makefile.rhelver | 2 +- kernel-aarch64-64k-debug-rhel.config | 2 +- kernel-aarch64-64k-rhel.config | 2 +- kernel-aarch64-debug-rhel.config | 2 +- kernel-aarch64-rhel.config | 2 +- kernel-aarch64-rt-64k-debug-rhel.config | 2 +- kernel-aarch64-rt-64k-rhel.config | 2 +- kernel-aarch64-rt-debug-rhel.config | 2 +- kernel-aarch64-rt-rhel.config | 2 +- kernel-ppc64le-debug-rhel.config | 2 +- kernel-ppc64le-rhel.config | 2 +- kernel-riscv64-debug-rhel.config | 2 +- kernel-riscv64-rhel.config | 2 +- kernel-s390x-debug-rhel.config | 2 +- kernel-s390x-rhel.config | 2 +- kernel-s390x-zfcpdump-rhel.config | 2 +- kernel-x86_64-debug-rhel.config | 2 +- kernel-x86_64-rhel.config | 2 +- kernel-x86_64-rt-debug-rhel.config | 2 +- kernel-x86_64-rt-rhel.config | 2 +- kernel.changelog | 188 ++++++++++++++++++++++ kernel.spec | 201 +++++++++++++++++++++++- sources | 6 +- 23 files changed, 405 insertions(+), 30 deletions(-) diff --git a/Makefile.rhelver b/Makefile.rhelver index c91669722..d3aa230a1 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 3 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 263 +RHEL_RELEASE = 264 # # RHEL_REBASE_NUM diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config index ecd1a54f6..7c66b211c 100644 --- a/kernel-aarch64-64k-debug-rhel.config +++ b/kernel-aarch64-64k-debug-rhel.config @@ -5614,7 +5614,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m # CONFIG_PTP_1588_CLOCK_OCP is not set CONFIG_PTP_1588_CLOCK_QORIQ=m CONFIG_PTP_1588_CLOCK=y -# CONFIG_PT_RECLAIM is not set +CONFIG_PT_RECLAIM=y # CONFIG_PUNIT_ATOM_DEBUG is not set # CONFIG_PVPANIC_MMIO is not set CONFIG_PVPANIC_PCI=m diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config index 543a4549e..37198bbc3 100644 --- a/kernel-aarch64-64k-rhel.config +++ b/kernel-aarch64-64k-rhel.config @@ -5591,7 +5591,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m # CONFIG_PTP_1588_CLOCK_OCP is not set CONFIG_PTP_1588_CLOCK_QORIQ=m CONFIG_PTP_1588_CLOCK=y -# CONFIG_PT_RECLAIM is not set +CONFIG_PT_RECLAIM=y # CONFIG_PUNIT_ATOM_DEBUG is not set # CONFIG_PVPANIC_MMIO is not set CONFIG_PVPANIC_PCI=m diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config index fff926a04..8d2e4102b 100644 --- a/kernel-aarch64-debug-rhel.config +++ b/kernel-aarch64-debug-rhel.config @@ -5610,7 +5610,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m # CONFIG_PTP_1588_CLOCK_OCP is not set CONFIG_PTP_1588_CLOCK_QORIQ=m CONFIG_PTP_1588_CLOCK=y -# CONFIG_PT_RECLAIM is not set +CONFIG_PT_RECLAIM=y # CONFIG_PUNIT_ATOM_DEBUG is not set # CONFIG_PVPANIC_MMIO is not set CONFIG_PVPANIC_PCI=m diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config index b9c2ac5fe..1bbec99fe 100644 --- a/kernel-aarch64-rhel.config +++ b/kernel-aarch64-rhel.config @@ -5587,7 +5587,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m # CONFIG_PTP_1588_CLOCK_OCP is not set CONFIG_PTP_1588_CLOCK_QORIQ=m CONFIG_PTP_1588_CLOCK=y -# CONFIG_PT_RECLAIM is not set +CONFIG_PT_RECLAIM=y # CONFIG_PUNIT_ATOM_DEBUG is not set # CONFIG_PVPANIC_MMIO is not set CONFIG_PVPANIC_PCI=m diff --git a/kernel-aarch64-rt-64k-debug-rhel.config b/kernel-aarch64-rt-64k-debug-rhel.config index ac17e094e..a06281975 100644 --- a/kernel-aarch64-rt-64k-debug-rhel.config +++ b/kernel-aarch64-rt-64k-debug-rhel.config @@ -5658,7 +5658,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m # CONFIG_PTP_1588_CLOCK_OCP is not set CONFIG_PTP_1588_CLOCK_QORIQ=m CONFIG_PTP_1588_CLOCK=y -# CONFIG_PT_RECLAIM is not set +CONFIG_PT_RECLAIM=y # CONFIG_PUNIT_ATOM_DEBUG is not set # CONFIG_PVPANIC_MMIO is not set CONFIG_PVPANIC_PCI=m diff --git a/kernel-aarch64-rt-64k-rhel.config b/kernel-aarch64-rt-64k-rhel.config index 91b3fe20e..daa31525b 100644 --- a/kernel-aarch64-rt-64k-rhel.config +++ b/kernel-aarch64-rt-64k-rhel.config @@ -5635,7 +5635,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m # CONFIG_PTP_1588_CLOCK_OCP is not set CONFIG_PTP_1588_CLOCK_QORIQ=m CONFIG_PTP_1588_CLOCK=y -# CONFIG_PT_RECLAIM is not set +CONFIG_PT_RECLAIM=y # CONFIG_PUNIT_ATOM_DEBUG is not set # CONFIG_PVPANIC_MMIO is not set CONFIG_PVPANIC_PCI=m diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config index 50f38792a..83c6f742d 100644 --- a/kernel-aarch64-rt-debug-rhel.config +++ b/kernel-aarch64-rt-debug-rhel.config @@ -5654,7 +5654,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m # CONFIG_PTP_1588_CLOCK_OCP is not set CONFIG_PTP_1588_CLOCK_QORIQ=m CONFIG_PTP_1588_CLOCK=y -# CONFIG_PT_RECLAIM is not set +CONFIG_PT_RECLAIM=y # CONFIG_PUNIT_ATOM_DEBUG is not set # CONFIG_PVPANIC_MMIO is not set CONFIG_PVPANIC_PCI=m diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config index d9240d038..9b37419c9 100644 --- a/kernel-aarch64-rt-rhel.config +++ b/kernel-aarch64-rt-rhel.config @@ -5631,7 +5631,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m # CONFIG_PTP_1588_CLOCK_OCP is not set CONFIG_PTP_1588_CLOCK_QORIQ=m CONFIG_PTP_1588_CLOCK=y -# CONFIG_PT_RECLAIM is not set +CONFIG_PT_RECLAIM=y # CONFIG_PUNIT_ATOM_DEBUG is not set # CONFIG_PVPANIC_MMIO is not set CONFIG_PVPANIC_PCI=m diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config index 8dcd48fe3..08c9a47d7 100644 --- a/kernel-ppc64le-debug-rhel.config +++ b/kernel-ppc64le-debug-rhel.config @@ -4978,7 +4978,7 @@ CONFIG_PTP_1588_CLOCK_KVM=m CONFIG_PTP_1588_CLOCK_MOCK=m # CONFIG_PTP_1588_CLOCK_OCP is not set CONFIG_PTP_1588_CLOCK=y -# CONFIG_PT_RECLAIM is not set +CONFIG_PT_RECLAIM=y # CONFIG_PUNIT_ATOM_DEBUG is not set # CONFIG_PVPANIC is not set # CONFIG_PVPANIC_MMIO is not set diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config index 9733ccc57..9990612c0 100644 --- a/kernel-ppc64le-rhel.config +++ b/kernel-ppc64le-rhel.config @@ -4957,7 +4957,7 @@ CONFIG_PTP_1588_CLOCK_KVM=m CONFIG_PTP_1588_CLOCK_MOCK=m # CONFIG_PTP_1588_CLOCK_OCP is not set CONFIG_PTP_1588_CLOCK=y -# CONFIG_PT_RECLAIM is not set +CONFIG_PT_RECLAIM=y # CONFIG_PUNIT_ATOM_DEBUG is not set # CONFIG_PVPANIC is not set # CONFIG_PVPANIC_MMIO is not set diff --git a/kernel-riscv64-debug-rhel.config b/kernel-riscv64-debug-rhel.config index 871c52c25..209714d5e 100644 --- a/kernel-riscv64-debug-rhel.config +++ b/kernel-riscv64-debug-rhel.config @@ -4959,7 +4959,7 @@ CONFIG_PTP_1588_CLOCK_KVM=m CONFIG_PTP_1588_CLOCK_MOCK=m # CONFIG_PTP_1588_CLOCK_OCP is not set CONFIG_PTP_1588_CLOCK=y -# CONFIG_PT_RECLAIM is not set +CONFIG_PT_RECLAIM=y # CONFIG_PUNIT_ATOM_DEBUG is not set # CONFIG_PVPANIC is not set # CONFIG_PVPANIC_MMIO is not set diff --git a/kernel-riscv64-rhel.config b/kernel-riscv64-rhel.config index 6824239d7..7fba6b1bb 100644 --- a/kernel-riscv64-rhel.config +++ b/kernel-riscv64-rhel.config @@ -4938,7 +4938,7 @@ CONFIG_PTP_1588_CLOCK_KVM=m CONFIG_PTP_1588_CLOCK_MOCK=m # CONFIG_PTP_1588_CLOCK_OCP is not set CONFIG_PTP_1588_CLOCK=y -# CONFIG_PT_RECLAIM is not set +CONFIG_PT_RECLAIM=y # CONFIG_PUNIT_ATOM_DEBUG is not set # CONFIG_PVPANIC is not set # CONFIG_PVPANIC_MMIO is not set diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config index 908132bcc..60adea570 100644 --- a/kernel-s390x-debug-rhel.config +++ b/kernel-s390x-debug-rhel.config @@ -4917,7 +4917,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m # CONFIG_PTP_1588_CLOCK_OCP is not set CONFIG_PTP_1588_CLOCK=y CONFIG_PTP_S390=y -# CONFIG_PT_RECLAIM is not set +CONFIG_PT_RECLAIM=y # CONFIG_PUNIT_ATOM_DEBUG is not set # CONFIG_PVPANIC is not set # CONFIG_PVPANIC_MMIO is not set diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config index d27e4b299..e68728e2a 100644 --- a/kernel-s390x-rhel.config +++ b/kernel-s390x-rhel.config @@ -4896,7 +4896,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m # CONFIG_PTP_1588_CLOCK_OCP is not set CONFIG_PTP_1588_CLOCK=y CONFIG_PTP_S390=y -# CONFIG_PT_RECLAIM is not set +CONFIG_PT_RECLAIM=y # CONFIG_PUNIT_ATOM_DEBUG is not set # CONFIG_PVPANIC is not set # CONFIG_PVPANIC_MMIO is not set diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config index 919ccc2c1..64f476129 100644 --- a/kernel-s390x-zfcpdump-rhel.config +++ b/kernel-s390x-zfcpdump-rhel.config @@ -4907,7 +4907,7 @@ CONFIG_PTP_1588_CLOCK_KVM=m # CONFIG_PTP_1588_CLOCK_OCP is not set CONFIG_PTP_1588_CLOCK=y # CONFIG_PTP_S390 is not set -# CONFIG_PT_RECLAIM is not set +CONFIG_PT_RECLAIM=y # CONFIG_PUNIT_ATOM_DEBUG is not set # CONFIG_PVPANIC is not set # CONFIG_PVPANIC_MMIO is not set diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config index 65fc0b089..456580560 100644 --- a/kernel-x86_64-debug-rhel.config +++ b/kernel-x86_64-debug-rhel.config @@ -5256,7 +5256,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m # CONFIG_PTP_1588_CLOCK_OCP is not set CONFIG_PTP_1588_CLOCK_VMW=m CONFIG_PTP_1588_CLOCK=y -# CONFIG_PT_RECLAIM is not set +CONFIG_PT_RECLAIM=y # CONFIG_PUNIT_ATOM_DEBUG is not set CONFIG_PVH=y CONFIG_PVPANIC_MMIO=m diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config index 62290b51a..a454d69d3 100644 --- a/kernel-x86_64-rhel.config +++ b/kernel-x86_64-rhel.config @@ -5234,7 +5234,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m # CONFIG_PTP_1588_CLOCK_OCP is not set CONFIG_PTP_1588_CLOCK_VMW=m CONFIG_PTP_1588_CLOCK=y -# CONFIG_PT_RECLAIM is not set +CONFIG_PT_RECLAIM=y # CONFIG_PUNIT_ATOM_DEBUG is not set CONFIG_PVH=y CONFIG_PVPANIC_MMIO=m diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config index 899862f37..2ef74edeb 100644 --- a/kernel-x86_64-rt-debug-rhel.config +++ b/kernel-x86_64-rt-debug-rhel.config @@ -5300,7 +5300,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m # CONFIG_PTP_1588_CLOCK_OCP is not set CONFIG_PTP_1588_CLOCK_VMW=m CONFIG_PTP_1588_CLOCK=y -# CONFIG_PT_RECLAIM is not set +CONFIG_PT_RECLAIM=y # CONFIG_PUNIT_ATOM_DEBUG is not set CONFIG_PVH=y CONFIG_PVPANIC_MMIO=m diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config index ea986061d..55a18c2f8 100644 --- a/kernel-x86_64-rt-rhel.config +++ b/kernel-x86_64-rt-rhel.config @@ -5278,7 +5278,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m # CONFIG_PTP_1588_CLOCK_OCP is not set CONFIG_PTP_1588_CLOCK_VMW=m CONFIG_PTP_1588_CLOCK=y -# CONFIG_PT_RECLAIM is not set +CONFIG_PT_RECLAIM=y # CONFIG_PUNIT_ATOM_DEBUG is not set CONFIG_PVH=y CONFIG_PVPANIC_MMIO=m diff --git a/kernel.changelog b/kernel.changelog index 1dcbc56cd..9ba0ff733 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,191 @@ +* Sun Aug 23 2026 CKI KWF Bot [6.12.0-264.el10] +- ip6_gre: Use cached t->net in ip6erspan_changelink(). (Guillaume Nault) [RHEL-144808] +- selftests: net: Add test cases for link and peer netns (Guillaume Nault) [RHEL-144808] +- selftests: net: Add python context manager for netns entering (Guillaume Nault) [RHEL-144808] +- rtnetlink: Create link directly in target net namespace (Guillaume Nault) [RHEL-144808] +- rtnetlink: Remove "net" from newlink params (Guillaume Nault) [RHEL-144808] +- net: xfrm: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808] +- net: ipv6: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808] +- net: ipv6: Init tunnel link-netns before registering dev (Guillaume Nault) [RHEL-144808] +- net: ip_tunnel: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808] +- net: ip_tunnel: Don't set tunnel->net in ip_tunnel_init() (Guillaume Nault) [RHEL-144808] +- ieee802154: 6lowpan: Validate link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808] +- net: Use link/peer netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808] +- rtnetlink: Pack newlink() params into struct (Guillaume Nault) [RHEL-144808] +- rtnetlink: Lookup device in target netns when creating link (Guillaume Nault) [RHEL-144808] +- accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range() (Peter Colberg) [RHEL-222546] +- accel/amdxdna: fix missing newline in pr_err message (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix runtime suspend deadlock when there is pending job (Peter Colberg) [RHEL-222546] {CVE-2026-43446} +- accel/amdxdna: Split mailbox channel create function (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix major version check on NPU1 platform (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix NULL pointer dereference of mgmt_chann (Peter Colberg) [RHEL-222546] {CVE-2026-23328} +- accel/amdxdna: Fill invalid payload for failed command (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Use a different name for latest firmware (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Validate command buffer payload count (Peter Colberg) [RHEL-222546] {CVE-2026-23424} +- accel/amdxdna: Prevent ubuf size overflow (Peter Colberg) [RHEL-222546] {CVE-2026-23280} +- accel/amdxdna: Fix out-of-bounds memset in command slot handling (Peter Colberg) [RHEL-222546] {CVE-2026-23288} +- accel/amdxdna: Fix command hang on suspended hardware context (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix suspend failure after enabling turbo mode (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix dead lock for suspend and resume (Peter Colberg) [RHEL-222546] {CVE-2026-23295} +- accel/amdxdna: Reduce log noise during process termination (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix crash when destroying a suspended hardware context (Peter Colberg) [RHEL-222546] {CVE-2026-23341} +- accel/amdxdna: Switch to always use chained command (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Remove buffer size check when creating command BO (Peter Colberg) [RHEL-222546] +- Convert more 'alloc_obj' cases to default GFP_KERNEL arguments (Peter Colberg) [RHEL-222546] +- Convert 'alloc_flex' family to use the new default GFP_KERNEL argument (Peter Colberg) [RHEL-222546] +- Convert 'alloc_obj' family to use the new default GFP_KERNEL argument (Peter Colberg) [RHEL-222546] +- treewide: Replace kmalloc with kmalloc_obj for non-scalar types (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Move RPM resume into job run function (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix incorrect DPM level after suspend/resume (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix incorrect error code returned for failed chain command (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Remove hardware context status (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix memory leak in amdxdna_ubuf_map (Peter Colberg) [RHEL-222546] {CVE-2026-45908} +- accel/amdxdna: Stop job scheduling across aie2_release_resource() (Peter Colberg) [RHEL-222546] {CVE-2026-45980} +- accel/amdxdna: Hold mm structure across iommu_sva_unbind_device() (Peter Colberg) [RHEL-222546] {CVE-2026-45931} +- accel/amdxdna: Fix notifier_wq flushing warning (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Update firmware version check for latest firmware (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Update message DMA buffer allocation (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Enable hardware context priority (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Enable temporal sharing only mode (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Remove NPU2 support (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Remove amdxdna_flush() (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix potential NULL pointer dereference in context cleanup (Peter Colberg) [RHEL-222546] {CVE-2025-71308} +- accel/amdxdna: Fix race where send ring appears full due to delayed head update (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix cu_idx being cleared by memset() during command setup (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix race condition when checking rpm_on (Peter Colberg) [RHEL-222546] {CVE-2025-71303} +- accel/amdxdna: Fix tail-pointer polling in mailbox_get_msg() (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Poll MPNPU_PWAITMODE after requesting firmware suspend (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Block running under a hypervisor (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix deadlock between context destroy and job timeout (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Clear mailbox interrupt register during channel creation (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Treat power-off failure as unrecoverable error (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix dma_fence leak when job is canceled (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Support preemption requests (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add IOCTL parameter for telemetry data (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add IOCTL parameter for resource data (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add hardware specific attributes (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Use MSG_OP_CHAIN_EXEC_NPU when supported (Peter Colberg) [RHEL-222546] +- drm: include drm_print.h where needed (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix incorrect command state for timed out job (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix uninitialized return value (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix incorrect return value in aie2_hwctx_sync_debug_bo() (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Support firmware debug buffer (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Support getting last hardware error (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Resume power for creating and destroying hardware context (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Enhance runtime power management (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Call dma_buf_vmap_unlocked() for imported object (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix an integer overflow in aie2_query_ctx_status_array() (Peter Colberg) [RHEL-222546] {CVE-2025-68731} +- accel/amdxdna: Add ioctl DRM_IOCTL_AMDXDNA_GET_ARRAY (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Use int instead of u32 to store error codes (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix incorrect type used for a local variable (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add a function to walk hardware contexts (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Unify pm and rpm suspend and resume callbacks (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Delete pci_free_irq_vectors() (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Support user space allocated buffer (Peter Colberg) [RHEL-222546] +- drm/sched: Rename DRM_GPU_SCHED_STAT_NOMINAL to DRM_GPU_SCHED_STAT_RESET (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Revise device bo creation and free (Peter Colberg) [RHEL-222546] +- drm/sched: Store the drm client_id in drm_sched_fence (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix incorrect PSP firmware size (Peter Colberg) [RHEL-222546] +- iommu: Remove IOMMU_DEV_FEAT_SVA (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Support submit commands without arguments (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix incorrect size of ERT_START_NPU commands (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add BO import and export (Peter Colberg) [RHEL-222546] +- accel/amdxdna: s/drm_gem_v[un]map_unlocked/drm_gem_v[un]map/ (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Check interrupt register before mailbox_rx_worker exits (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add missing include linux/slab.h (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add MODULE_FIRMWARE() declarations (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Refactor hardware context destroy routine (Peter Colberg) [RHEL-222546] +- drm/sched: Use struct for drm_sched_init() params (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Declare sched_ops as static (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Remove casting mailbox payload pointer (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Return error when setting clock failed for npu1 (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Declare npu6_dev_priv as static (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add __user to second parameter of aie2_query_status (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Declare force_cmdlist as static (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Use rcu_access_pointer for __rcu pointer (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Declare aie2_max_col as static (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Declare mailbox register base as __iomem pointer (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Declare npu device profile as static variables (Peter Colberg) [RHEL-222546] +- accel/amdxdna: include linux/slab.h (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add zero check for pad in ioctl input structures (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Read firmware interface version from registers (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Enhance power management settings (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Replace idr api with xarray (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add RyzenAI-npu6 support (Peter Colberg) [RHEL-222546] +- accel/amdxdna: use modern PM helpers (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add include interrupt.h to amdxdna_mailbox.c (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add query firmware version (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Replace mmput with mmput_async to avoid dead lock (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add device status for aie2 devices (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add query functions (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add error handling (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add suspend and resume (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add command execution (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add GEM buffer object management (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add hardware context (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add hardware resource solver (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Support hardware mailbox (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add a new driver for AMD AI Engine (Peter Colberg) [RHEL-222546] +- sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190192] +- sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190192] {CVE-2026-53246} +- sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234289] {CVE-2026-64564} +- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230267] {CVE-2026-64276} +- sctp: prevent peer transport count overflow (CKI Backport Bot) [RHEL-214458] +- redhat/configs: re-enable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186753] +- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-137943] +- rh_message.h: Disable ConnectX-10 NVLink-C2C device (Benjamin Poirier) [RHEL-211847] +- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Aidan Wallace) [RHEL-192401] {CVE-2026-53359} +- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186699] {CVE-2026-46113} +- tpm_ffa_crb: access tpm service over FF-A direct message request v2 (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit() (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits (Jennifer Berringer) [RHEL-183180] +- firmware: arm_ffa: Treat missing FF-A feature on a platform as a probe miss (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Honor partition info descriptor size (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Defer probe until pKVM is initialized (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Set the core device as FF-A device parent (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Register core as a platform driver (Jennifer Berringer) [RHEL-179031] +- Revert "firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall" (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Fix sched-recv callback partition lookup (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Snapshot notifier callbacks under lock (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Align RxTx buffer size before mapping (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Validate framework notification message layout (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Keep framework RX release under lock (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0 (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Avoid collapsing NPI work from different CPUs (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Skip free_pages on RX buffer alloc failure (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Check for NULL FF-A ID table while driver registration (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Use the correct buffer size during RXTX_MAP (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap() (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Correct 32-bit response handling in NOTIFICATION_INFO_GET (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Tie FF-A version checks to specific features (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Unmap Rx/Tx buffers on init failure (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Add support for IMPDEF value in the memory access descriptor (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Helper to check if a partition can receive REQUEST2 messages (Jennifer Berringer) [RHEL-179031] +- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188204] {CVE-2026-52924} +- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171511] {CVE-2026-31669} +- net: add prefetch() in skb_defer_free_flush() (Antoine Tenart) [RHEL-123212] +- net: add NUMA awareness to skb_attempt_defer_free() (Antoine Tenart) [RHEL-123212] +- net: use llist for sd->defer_list (Antoine Tenart) [RHEL-123212] +- net: make softnet_data.defer_count an atomic (Antoine Tenart) [RHEL-123212] +- l2tp: Drop large packets with UDP encap (Guillaume Nault) [RHEL-152732] +- l2tp: avoid one data-race in l2tp_tunnel_del_work() (Guillaume Nault) [RHEL-152732] +- l2tp: Fix memleak in l2tp_udp_encap_recv(). (Guillaume Nault) [RHEL-152732] +- mpls: add missing unregister_netdevice_notifier to mpls_init (Guillaume Nault) [RHEL-152709] +- ppp: fix race conditions in ppp_fill_forward_path (Guillaume Nault) [RHEL-152724] +- ipv6: add NULL checks for idev in SRv6 paths (CKI Backport Bot) [RHEL-152736] +- selftests: seg6: fix instaces typo in comments (CKI Backport Bot) [RHEL-152736] +- seg6: fix lenghts typo in a comment (CKI Backport Bot) [RHEL-152736] +- selftests: seg6: Add test cases for End.X with link-local nexthop (CKI Backport Bot) [RHEL-152736] +- seg6: Allow End.X behavior to accept an oif (CKI Backport Bot) [RHEL-152736] +- seg6: Call seg6_lookup_any_nexthop() from End.X behavior (CKI Backport Bot) [RHEL-152736] +- seg6: Extend seg6_lookup_any_nexthop() with an oif argument (CKI Backport Bot) [RHEL-152736] +Resolves: RHEL-123212, RHEL-137943, RHEL-144808, RHEL-152709, RHEL-152724, RHEL-152732, RHEL-152736, RHEL-171511, RHEL-179031, RHEL-183180, RHEL-186699, RHEL-186753, RHEL-188204, RHEL-190192, RHEL-192401, RHEL-211847, RHEL-214458, RHEL-222546, RHEL-230267, RHEL-234289 + * Fri Aug 21 2026 CKI KWF Bot [6.12.0-263.el10] - mm: consider non-anon swap cache folios in folio_expected_ref_count() (Gavin Shan) [RHEL-224504] - dm cache policy smq: check allocation under invalidate lock (Benjamin Marzinski) [RHEL-231823] {CVE-2026-53062} diff --git a/kernel.spec b/kernel.spec index 23209f02d..f00768b76 100644 --- a/kernel.spec +++ b/kernel.spec @@ -179,15 +179,15 @@ Summary: The Linux kernel %define specrpmversion 6.12.0 %define specversion 6.12.0 %define patchversion 6.12 -%define pkgrelease 263 +%define pkgrelease 264 %define kversion 6 -%define tarfile_release 6.12.0-263.el10 +%define tarfile_release 6.12.0-264.el10 # This is needed to do merge window version magic %define patchlevel 12 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 263%{?buildid}%{?dist} +%define specrelease 264%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 6.12.0-263.el10 +%define kabiversion 6.12.0-264.el10 # If this variable is set to 1, a bpf selftests build failure will cause a # fatal kernel package build error @@ -4697,14 +4697,14 @@ fi\ # # %changelog -* Sun Aug 23 2026 Eduard Abdullin - 6.12.0-263 +* Tue Aug 25 2026 Eduard Abdullin - 6.12.0-264 - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert -* Sun Aug 23 2026 Neal Gompa - 6.12.0-263 +* Tue Aug 25 2026 Neal Gompa - 6.12.0-264 - Enable Btrfs support for all kernel variants -* Sun Aug 23 2026 Andrew Lukoshko - 6.12.0-263 +* Tue Aug 25 2026 Andrew Lukoshko - 6.12.0-264 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -4714,6 +4714,193 @@ fi\ - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained +* Sun Aug 23 2026 CKI KWF Bot [6.12.0-264.el10] +- ip6_gre: Use cached t->net in ip6erspan_changelink(). (Guillaume Nault) [RHEL-144808] +- selftests: net: Add test cases for link and peer netns (Guillaume Nault) [RHEL-144808] +- selftests: net: Add python context manager for netns entering (Guillaume Nault) [RHEL-144808] +- rtnetlink: Create link directly in target net namespace (Guillaume Nault) [RHEL-144808] +- rtnetlink: Remove "net" from newlink params (Guillaume Nault) [RHEL-144808] +- net: xfrm: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808] +- net: ipv6: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808] +- net: ipv6: Init tunnel link-netns before registering dev (Guillaume Nault) [RHEL-144808] +- net: ip_tunnel: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808] +- net: ip_tunnel: Don't set tunnel->net in ip_tunnel_init() (Guillaume Nault) [RHEL-144808] +- ieee802154: 6lowpan: Validate link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808] +- net: Use link/peer netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808] +- rtnetlink: Pack newlink() params into struct (Guillaume Nault) [RHEL-144808] +- rtnetlink: Lookup device in target netns when creating link (Guillaume Nault) [RHEL-144808] +- accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range() (Peter Colberg) [RHEL-222546] +- accel/amdxdna: fix missing newline in pr_err message (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix runtime suspend deadlock when there is pending job (Peter Colberg) [RHEL-222546] {CVE-2026-43446} +- accel/amdxdna: Split mailbox channel create function (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix major version check on NPU1 platform (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix NULL pointer dereference of mgmt_chann (Peter Colberg) [RHEL-222546] {CVE-2026-23328} +- accel/amdxdna: Fill invalid payload for failed command (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Use a different name for latest firmware (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Validate command buffer payload count (Peter Colberg) [RHEL-222546] {CVE-2026-23424} +- accel/amdxdna: Prevent ubuf size overflow (Peter Colberg) [RHEL-222546] {CVE-2026-23280} +- accel/amdxdna: Fix out-of-bounds memset in command slot handling (Peter Colberg) [RHEL-222546] {CVE-2026-23288} +- accel/amdxdna: Fix command hang on suspended hardware context (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix suspend failure after enabling turbo mode (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix dead lock for suspend and resume (Peter Colberg) [RHEL-222546] {CVE-2026-23295} +- accel/amdxdna: Reduce log noise during process termination (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix crash when destroying a suspended hardware context (Peter Colberg) [RHEL-222546] {CVE-2026-23341} +- accel/amdxdna: Switch to always use chained command (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Remove buffer size check when creating command BO (Peter Colberg) [RHEL-222546] +- Convert more 'alloc_obj' cases to default GFP_KERNEL arguments (Peter Colberg) [RHEL-222546] +- Convert 'alloc_flex' family to use the new default GFP_KERNEL argument (Peter Colberg) [RHEL-222546] +- Convert 'alloc_obj' family to use the new default GFP_KERNEL argument (Peter Colberg) [RHEL-222546] +- treewide: Replace kmalloc with kmalloc_obj for non-scalar types (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Move RPM resume into job run function (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix incorrect DPM level after suspend/resume (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix incorrect error code returned for failed chain command (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Remove hardware context status (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix memory leak in amdxdna_ubuf_map (Peter Colberg) [RHEL-222546] {CVE-2026-45908} +- accel/amdxdna: Stop job scheduling across aie2_release_resource() (Peter Colberg) [RHEL-222546] {CVE-2026-45980} +- accel/amdxdna: Hold mm structure across iommu_sva_unbind_device() (Peter Colberg) [RHEL-222546] {CVE-2026-45931} +- accel/amdxdna: Fix notifier_wq flushing warning (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Update firmware version check for latest firmware (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Update message DMA buffer allocation (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Enable hardware context priority (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Enable temporal sharing only mode (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Remove NPU2 support (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Remove amdxdna_flush() (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix potential NULL pointer dereference in context cleanup (Peter Colberg) [RHEL-222546] {CVE-2025-71308} +- accel/amdxdna: Fix race where send ring appears full due to delayed head update (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix cu_idx being cleared by memset() during command setup (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix race condition when checking rpm_on (Peter Colberg) [RHEL-222546] {CVE-2025-71303} +- accel/amdxdna: Fix tail-pointer polling in mailbox_get_msg() (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Poll MPNPU_PWAITMODE after requesting firmware suspend (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Block running under a hypervisor (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix deadlock between context destroy and job timeout (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Clear mailbox interrupt register during channel creation (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Treat power-off failure as unrecoverable error (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix dma_fence leak when job is canceled (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Support preemption requests (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add IOCTL parameter for telemetry data (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add IOCTL parameter for resource data (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add hardware specific attributes (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Use MSG_OP_CHAIN_EXEC_NPU when supported (Peter Colberg) [RHEL-222546] +- drm: include drm_print.h where needed (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix incorrect command state for timed out job (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix uninitialized return value (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix incorrect return value in aie2_hwctx_sync_debug_bo() (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Support firmware debug buffer (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Support getting last hardware error (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Resume power for creating and destroying hardware context (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Enhance runtime power management (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Call dma_buf_vmap_unlocked() for imported object (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix an integer overflow in aie2_query_ctx_status_array() (Peter Colberg) [RHEL-222546] {CVE-2025-68731} +- accel/amdxdna: Add ioctl DRM_IOCTL_AMDXDNA_GET_ARRAY (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Use int instead of u32 to store error codes (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix incorrect type used for a local variable (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add a function to walk hardware contexts (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Unify pm and rpm suspend and resume callbacks (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Delete pci_free_irq_vectors() (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Support user space allocated buffer (Peter Colberg) [RHEL-222546] +- drm/sched: Rename DRM_GPU_SCHED_STAT_NOMINAL to DRM_GPU_SCHED_STAT_RESET (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Revise device bo creation and free (Peter Colberg) [RHEL-222546] +- drm/sched: Store the drm client_id in drm_sched_fence (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix incorrect PSP firmware size (Peter Colberg) [RHEL-222546] +- iommu: Remove IOMMU_DEV_FEAT_SVA (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Support submit commands without arguments (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Fix incorrect size of ERT_START_NPU commands (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add BO import and export (Peter Colberg) [RHEL-222546] +- accel/amdxdna: s/drm_gem_v[un]map_unlocked/drm_gem_v[un]map/ (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Check interrupt register before mailbox_rx_worker exits (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add missing include linux/slab.h (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add MODULE_FIRMWARE() declarations (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Refactor hardware context destroy routine (Peter Colberg) [RHEL-222546] +- drm/sched: Use struct for drm_sched_init() params (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Declare sched_ops as static (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Remove casting mailbox payload pointer (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Return error when setting clock failed for npu1 (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Declare npu6_dev_priv as static (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add __user to second parameter of aie2_query_status (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Declare force_cmdlist as static (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Use rcu_access_pointer for __rcu pointer (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Declare aie2_max_col as static (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Declare mailbox register base as __iomem pointer (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Declare npu device profile as static variables (Peter Colberg) [RHEL-222546] +- accel/amdxdna: include linux/slab.h (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add zero check for pad in ioctl input structures (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Read firmware interface version from registers (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Enhance power management settings (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Replace idr api with xarray (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add RyzenAI-npu6 support (Peter Colberg) [RHEL-222546] +- accel/amdxdna: use modern PM helpers (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add include interrupt.h to amdxdna_mailbox.c (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add query firmware version (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Replace mmput with mmput_async to avoid dead lock (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add device status for aie2 devices (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add query functions (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add error handling (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add suspend and resume (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add command execution (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add GEM buffer object management (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add hardware context (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add hardware resource solver (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Support hardware mailbox (Peter Colberg) [RHEL-222546] +- accel/amdxdna: Add a new driver for AMD AI Engine (Peter Colberg) [RHEL-222546] +- sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190192] +- sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190192] {CVE-2026-53246} +- sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234289] {CVE-2026-64564} +- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230267] {CVE-2026-64276} +- sctp: prevent peer transport count overflow (CKI Backport Bot) [RHEL-214458] +- redhat/configs: re-enable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186753] +- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-137943] +- rh_message.h: Disable ConnectX-10 NVLink-C2C device (Benjamin Poirier) [RHEL-211847] +- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Aidan Wallace) [RHEL-192401] {CVE-2026-53359} +- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186699] {CVE-2026-46113} +- tpm_ffa_crb: access tpm service over FF-A direct message request v2 (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit() (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits (Jennifer Berringer) [RHEL-183180] +- firmware: arm_ffa: Treat missing FF-A feature on a platform as a probe miss (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Honor partition info descriptor size (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Defer probe until pKVM is initialized (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Set the core device as FF-A device parent (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Register core as a platform driver (Jennifer Berringer) [RHEL-179031] +- Revert "firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall" (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Fix sched-recv callback partition lookup (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Snapshot notifier callbacks under lock (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Align RxTx buffer size before mapping (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Validate framework notification message layout (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Keep framework RX release under lock (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0 (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Avoid collapsing NPI work from different CPUs (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Skip free_pages on RX buffer alloc failure (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Check for NULL FF-A ID table while driver registration (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Use the correct buffer size during RXTX_MAP (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap() (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Correct 32-bit response handling in NOTIFICATION_INFO_GET (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Tie FF-A version checks to specific features (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Unmap Rx/Tx buffers on init failure (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Add support for IMPDEF value in the memory access descriptor (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall (Jennifer Berringer) [RHEL-179031] +- firmware: arm_ffa: Helper to check if a partition can receive REQUEST2 messages (Jennifer Berringer) [RHEL-179031] +- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188204] {CVE-2026-52924} +- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171511] {CVE-2026-31669} +- net: add prefetch() in skb_defer_free_flush() (Antoine Tenart) [RHEL-123212] +- net: add NUMA awareness to skb_attempt_defer_free() (Antoine Tenart) [RHEL-123212] +- net: use llist for sd->defer_list (Antoine Tenart) [RHEL-123212] +- net: make softnet_data.defer_count an atomic (Antoine Tenart) [RHEL-123212] +- l2tp: Drop large packets with UDP encap (Guillaume Nault) [RHEL-152732] +- l2tp: avoid one data-race in l2tp_tunnel_del_work() (Guillaume Nault) [RHEL-152732] +- l2tp: Fix memleak in l2tp_udp_encap_recv(). (Guillaume Nault) [RHEL-152732] +- mpls: add missing unregister_netdevice_notifier to mpls_init (Guillaume Nault) [RHEL-152709] +- ppp: fix race conditions in ppp_fill_forward_path (Guillaume Nault) [RHEL-152724] +- ipv6: add NULL checks for idev in SRv6 paths (CKI Backport Bot) [RHEL-152736] +- selftests: seg6: fix instaces typo in comments (CKI Backport Bot) [RHEL-152736] +- seg6: fix lenghts typo in a comment (CKI Backport Bot) [RHEL-152736] +- selftests: seg6: Add test cases for End.X with link-local nexthop (CKI Backport Bot) [RHEL-152736] +- seg6: Allow End.X behavior to accept an oif (CKI Backport Bot) [RHEL-152736] +- seg6: Call seg6_lookup_any_nexthop() from End.X behavior (CKI Backport Bot) [RHEL-152736] +- seg6: Extend seg6_lookup_any_nexthop() with an oif argument (CKI Backport Bot) [RHEL-152736] + * Fri Aug 21 2026 CKI KWF Bot [6.12.0-263.el10] - mm: consider non-anon swap cache folios in folio_expected_ref_count() (Gavin Shan) [RHEL-224504] - dm cache policy smq: check allocation under invalidate lock (Benjamin Marzinski) [RHEL-231823] {CVE-2026-53062} diff --git a/sources b/sources index 0ce717ee9..b3b64569d 100644 --- a/sources +++ b/sources @@ -1,5 +1,5 @@ SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6 -SHA512 (linux-6.12.0-263.el10.tar.xz) = 6109a6f6fffa86bf74c15da10525e9679c5adc0ff5febf53a77e8b45b213ccd6cbfc6983c654e8a3df641763e1e8ba0f7fce4fb2a4bd6bc69fe5ea4d809c30b7 -SHA512 (kernel-abi-stablelists-6.12.0-263.el10.tar.xz) = b1d4c8cd420325f19907889761109da4d61923dd0a85dc0e62e3afe8afa103023c50538619e859ab612eec1cb0ac12619f9afd5aeb41d50af0de8c5dbe268d03 -SHA512 (kernel-kabi-dw-6.12.0-263.el10.tar.xz) = 29d9302c1a109732bf83d673d37820cb2af777a092e51b7d3f09641e4c289b4896ba40f12d3b6396591ffdd7f8738cc32479c71a4842f18fa5ef82a8db183f71 +SHA512 (linux-6.12.0-264.el10.tar.xz) = c7b988514d672161308926170e748a9358525086142311b4b1c7d30d639dd6ee73cd993d66a77761a83f3916e2415c252f6eb7d9eb6fa05037cc18ecac06a749 +SHA512 (kernel-abi-stablelists-6.12.0-264.el10.tar.xz) = 2c8ef1f3b59f8954b1bcecf8fb6470992f6d11bf19d9361843249c0411e3f4a447884855b6ea0591829698ceac5808633a8290b9b17bec90df9a0c4653ad9448 +SHA512 (kernel-kabi-dw-6.12.0-264.el10.tar.xz) = 5a78fad3973c1c31e860cc3e73717d194ed074852845f3ac1341797ce767ecf5fdf0a2fcd0f9537bc9d0358310fe7d72472d6ad1178c932dac29a99e7acb27be