diff --git a/Makefile.rhelver b/Makefile.rhelver index 2d5828d7f..bfb4181e7 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 2 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 147 +RHEL_RELEASE = 148 # # RHEL_REBASE_NUM diff --git a/kernel.changelog b/kernel.changelog index 693fad9aa..113729715 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,71 @@ +* Wed Oct 29 2025 CKI KWF Bot [6.12.0-148.el10] +- vrf: Drop existing dst reference in vrf_ip6_input_dst (Antoine Tenart) [RHEL-115588] +- redhat/kernel.spec: make python3-perf glob more specific (Jan Stancek) [RHEL-119658] +- net/packet: fix a race in packet_set_ring() and packet_notifier() (Davide Caratti) [RHEL-115601] +- af_packet: fix soft lockup issue caused by tpacket_snd() (Davide Caratti) [RHEL-115601] +- af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd() (Davide Caratti) [RHEL-115601] +- net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (Davide Caratti) [RHEL-115601] +- net: loopback: Avoid sending IP packets without an Ethernet header (Davide Caratti) [RHEL-115601] +- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-115581] +- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-115581] +- xfrm: Skip redundant statistics update for crypto offload (Sabrina Dubroca) [RHEL-115581] +- xfrm: use kfree_sensitive() for SA secret zeroization (Sabrina Dubroca) [RHEL-115581] +- espintcp: remove encap socket caching to avoid reference leak (Sabrina Dubroca) [RHEL-115581] +- espintcp: fix skb leaks (Sabrina Dubroca) [RHEL-115581] +- xfrm: Use nested-BH locking for nat_keepalive_sk_ipv[46] (Sabrina Dubroca) [RHEL-115581] +- tracing: Silence warning when chunk allocation fails in trace_pid_write (Jerome Marchand) [RHEL-115358] {CVE-2025-39914} +- trace/fgraph: Fix error handling (Jerome Marchand) [RHEL-115358] +- ftrace: Also allocate and copy hash for reading of filter files (Jerome Marchand) [RHEL-115358] {CVE-2025-39689} +- ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (Jerome Marchand) [RHEL-115358] {CVE-2025-39813} +- tracing: Fix tracing_marker may trigger page fault during preempt_disable (Jerome Marchand) [RHEL-115358] +- trace/fgraph: Fix the warning caused by missing unregister notifier (Jerome Marchand) [RHEL-115358] {CVE-2025-39829} +- tracing: fprobe-event: Sanitize wildcard for fprobe event name (Jerome Marchand) [RHEL-115358] +- tracing: Limit access to parser->buffer when trace_get_user failed (Jerome Marchand) [RHEL-115358] {CVE-2025-39683} +- tracing: Remove unneeded goto out logic (Jerome Marchand) [RHEL-115358] +- tracing: Add down_write(trace_event_sem) when adding trace event (Jerome Marchand) [RHEL-115358] {CVE-2025-38539} +- tracing/osnoise: Fix crash in timerlat_dump_stack() (Jerome Marchand) [RHEL-115358] {CVE-2025-38493} +- tracing/probes: Avoid using params uninitialized in parse_btf_arg() (Jerome Marchand) [RHEL-115358] +- ring-buffer: Remove ring_buffer_read_prepare_sync() (Jerome Marchand) [RHEL-115358] +- kernel: trace: preemptirq_delay_test: use offstack cpu mask (Jerome Marchand) [RHEL-115358] +- tracefs: Add d_delete to remove negative dentries (Jerome Marchand) [RHEL-115358] +- ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (Jerome Marchand) [RHEL-115358] {CVE-2025-38101} +- ftrace: Fix UAF when lookup kallsym after ftrace disabled (Jerome Marchand) [RHEL-115358] {CVE-2025-38346} +- ring-buffer: Do not trigger WARN_ON() due to a commit_overrun (Jerome Marchand) [RHEL-115358] {CVE-2025-38267} +- ring-buffer: Move cpus_read_lock() outside of buffer->mutex (Jerome Marchand) [RHEL-115358] +- tracing: Fix compilation warning on arm32 (Jerome Marchand) [RHEL-115358] +- ring-buffer: Fix persistent buffer when commit page is the reader page (Jerome Marchand) [RHEL-115358] +- ftrace: Fix preemption accounting for stacktrace filter command (Jerome Marchand) [RHEL-115358] +- ftrace: Fix preemption accounting for stacktrace trigger command (Jerome Marchand) [RHEL-115358] +- tracing: probes: Fix a possible race in trace_probe_log APIs (Jerome Marchand) [RHEL-115358] +- tracing: samples: Initialize trace_array_printk() with the correct function (Jerome Marchand) [RHEL-115358] +- tracing: Fix error handling in event_trigger_parse() (Jerome Marchand) [RHEL-115358] +- tracing: Rename event_trigger_alloc() to trigger_data_alloc() (Jerome Marchand) [RHEL-115358] +- tracing: Do not take trace_event_sem in print_event_fields() (Jerome Marchand) [RHEL-115358] +- tracing: Fix oob write in trace_seq_to_buffer() (Jerome Marchand) [RHEL-115358] {CVE-2025-37923} +- tracing: Fix filter string testing (Jerome Marchand) [RHEL-115358] +- ftrace: fix incorrect hash size in register_ftrace_direct() (Jerome Marchand) [RHEL-115358] +- ftrace: Properly merge notrace hashes (Jerome Marchand) [RHEL-115358] +- tracing: Do not add length to print format in synthetic events (Jerome Marchand) [RHEL-115358] +- tracing: Move histogram trigger variables from stack to per CPU structure (Jerome Marchand) [RHEL-115358] +- tracing: Constify struct event_trigger_ops (Jerome Marchand) [RHEL-115358] +- ring-buffer: Use flush_kernel_vmap_range() over flush_dcache_folio() (Jerome Marchand) [RHEL-115358] +- ftrace: Add cond_resched() to ftrace_graph_set_hash() (Jerome Marchand) [RHEL-115358] {CVE-2025-37940} +- tracing: Verify event formats that have "%%*p.." (Jerome Marchand) [RHEL-115358] {CVE-2025-37938} +- tracing: Add __print_dynamic_array() helper (Jerome Marchand) [RHEL-115358] +- tracing: probe-events: Add comments about entry data storing code (Jerome Marchand) [RHEL-115358] +- tracing: Fix synth event printk format for str fields (Jerome Marchand) [RHEL-115358] +- tracing: Do not use PERF enums when perf is not defined (Jerome Marchand) [RHEL-115358] +- tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER (Jerome Marchand) [RHEL-115358] +- tracing/osnoise: Fix possible recursive locking for cpus_read_lock() (Jerome Marchand) [RHEL-115358] +- tracing: Fix use-after-free in print_graph_function_flags during tracer switching (Jerome Marchand) [RHEL-115358] {CVE-2025-22035} +- tracing: Ensure module defining synth event cannot be unloaded while tracing (Jerome Marchand) [RHEL-115358] +- tracing: Correct the refcount if the hist/hist_debug file fails to open (Jerome Marchand) [RHEL-115358] +- ring-buffer: Fix bytes_dropped calculation issue (Jerome Marchand) [RHEL-115358] +- tracing/hist: Support POLLPRI event for poll on histogram (Jerome Marchand) [RHEL-115358] +- tracing/hist: Add poll(POLLIN) support on hist file (Jerome Marchand) [RHEL-115358] +- tracing: Switch trace_events_hist.c code over to use guard() (Jerome Marchand) [RHEL-115358] +Resolves: RHEL-115358, RHEL-115581, RHEL-115588, RHEL-115601, RHEL-119658, RHEL-121919 + * Tue Oct 28 2025 CKI KWF Bot [6.12.0-147.el10] - redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124088] - blk-mq: fix blk_mq_tags double free while nr_requests grown (Ming Lei) [RHEL-118047] diff --git a/kernel.spec b/kernel.spec index 6fbb0f473..a618ccf0b 100644 --- a/kernel.spec +++ b/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel %define specrpmversion 6.12.0 %define specversion 6.12.0 %define patchversion 6.12 -%define pkgrelease 147 +%define pkgrelease 148 %define kversion 6 -%define tarfile_release 6.12.0-147.el10 +%define tarfile_release 6.12.0-148.el10 # This is needed to do merge window version magic %define patchlevel 12 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 147%{?buildid}%{?dist} +%define specrelease 148%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 6.12.0-147.el10 +%define kabiversion 6.12.0-148.el10 # If this variable is set to 1, a bpf selftests build failure will cause a # fatal kernel package build error @@ -756,7 +756,6 @@ BuildRequires: sparse BuildRequires: zlib-devel binutils-devel newt-devel perl(ExtUtils::Embed) bison flex xz-devel BuildRequires: audit-libs-devel python3-setuptools BuildRequires: java-devel -BuildRequires: libbpf-devel >= 0.6.0-1 BuildRequires: libbabeltrace-devel BuildRequires: libtraceevent-devel %ifnarch s390x @@ -3141,7 +3140,7 @@ fi %global perf_build_extra_opts CORESIGHT=1 %endif %global perf_make \ - %{__make} %{?make_opts} EXTRA_CFLAGS="${RPM_OPT_FLAGS}" EXTRA_CXXFLAGS="${RPM_OPT_FLAGS}" LDFLAGS="%{__global_ldflags} -Wl,-E" %{?cross_opts} -C tools/perf V=1 NO_PERF_READ_VDSO32=1 NO_PERF_READ_VDSOX32=1 WERROR=0 NO_LIBUNWIND=1 HAVE_CPLUS_DEMANGLE=1 NO_GTK2=1 NO_STRLCPY=1 NO_BIONIC=1 LIBBPF_DYNAMIC=1 LIBTRACEEVENT_DYNAMIC=1 %{?perf_build_extra_opts} prefix=%{_prefix} PYTHON=%{__python3} + %{__make} %{?make_opts} EXTRA_CFLAGS="${RPM_OPT_FLAGS}" EXTRA_CXXFLAGS="${RPM_OPT_FLAGS}" LDFLAGS="%{__global_ldflags} -Wl,-E" %{?cross_opts} -C tools/perf V=1 NO_PERF_READ_VDSO32=1 NO_PERF_READ_VDSOX32=1 WERROR=0 NO_LIBUNWIND=1 HAVE_CPLUS_DEMANGLE=1 NO_GTK2=1 NO_STRLCPY=1 NO_BIONIC=1 LIBTRACEEVENT_DYNAMIC=1 %{?perf_build_extra_opts} prefix=%{_prefix} PYTHON=%{__python3} %if %{with_perf} %{log_msg "Build perf"} # perf @@ -4086,7 +4085,7 @@ fi\ %{_docdir}/perf-tip/tips.txt %files -n python3-perf -%{python3_sitearch}/* +%{python3_sitearch}/perf* %if %{with_debuginfo} %files -f perf-debuginfo.list -n perf-debuginfo @@ -4194,6 +4193,8 @@ fi\ # libcpupower Python bindings %{python3_sitearch}/_raw_pylibcpupower.so %{python3_sitearch}/raw_pylibcpupower.py +%{python3_sitearch}/__pycache__/raw_pylibcpupower* + %endif %if %{with_ynl} %{_libdir}/libynl* @@ -4402,14 +4403,14 @@ fi\ # # %changelog -* Wed Oct 29 2025 Eduard Abdullin - 6.12.0-147 +* Thu Oct 30 2025 Eduard Abdullin - 6.12.0-148 - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert -* Wed Oct 29 2025 Neal Gompa - 6.12.0-147 +* Thu Oct 30 2025 Neal Gompa - 6.12.0-148 - Enable Btrfs support for all kernel variants -* Wed Oct 29 2025 Andrew Lukoshko - 6.12.0-147 +* Thu Oct 30 2025 Andrew Lukoshko - 6.12.0-148 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -4420,6 +4421,73 @@ fi\ - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained +* Wed Oct 29 2025 CKI KWF Bot [6.12.0-148.el10] +- vrf: Drop existing dst reference in vrf_ip6_input_dst (Antoine Tenart) [RHEL-115588] +- redhat/kernel.spec: make python3-perf glob more specific (Jan Stancek) [RHEL-119658] +- net/packet: fix a race in packet_set_ring() and packet_notifier() (Davide Caratti) [RHEL-115601] +- af_packet: fix soft lockup issue caused by tpacket_snd() (Davide Caratti) [RHEL-115601] +- af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd() (Davide Caratti) [RHEL-115601] +- net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (Davide Caratti) [RHEL-115601] +- net: loopback: Avoid sending IP packets without an Ethernet header (Davide Caratti) [RHEL-115601] +- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-115581] +- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-115581] +- xfrm: Skip redundant statistics update for crypto offload (Sabrina Dubroca) [RHEL-115581] +- xfrm: use kfree_sensitive() for SA secret zeroization (Sabrina Dubroca) [RHEL-115581] +- espintcp: remove encap socket caching to avoid reference leak (Sabrina Dubroca) [RHEL-115581] +- espintcp: fix skb leaks (Sabrina Dubroca) [RHEL-115581] +- xfrm: Use nested-BH locking for nat_keepalive_sk_ipv[46] (Sabrina Dubroca) [RHEL-115581] +- tracing: Silence warning when chunk allocation fails in trace_pid_write (Jerome Marchand) [RHEL-115358] {CVE-2025-39914} +- trace/fgraph: Fix error handling (Jerome Marchand) [RHEL-115358] +- ftrace: Also allocate and copy hash for reading of filter files (Jerome Marchand) [RHEL-115358] {CVE-2025-39689} +- ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (Jerome Marchand) [RHEL-115358] {CVE-2025-39813} +- tracing: Fix tracing_marker may trigger page fault during preempt_disable (Jerome Marchand) [RHEL-115358] +- trace/fgraph: Fix the warning caused by missing unregister notifier (Jerome Marchand) [RHEL-115358] {CVE-2025-39829} +- tracing: fprobe-event: Sanitize wildcard for fprobe event name (Jerome Marchand) [RHEL-115358] +- tracing: Limit access to parser->buffer when trace_get_user failed (Jerome Marchand) [RHEL-115358] {CVE-2025-39683} +- tracing: Remove unneeded goto out logic (Jerome Marchand) [RHEL-115358] +- tracing: Add down_write(trace_event_sem) when adding trace event (Jerome Marchand) [RHEL-115358] {CVE-2025-38539} +- tracing/osnoise: Fix crash in timerlat_dump_stack() (Jerome Marchand) [RHEL-115358] {CVE-2025-38493} +- tracing/probes: Avoid using params uninitialized in parse_btf_arg() (Jerome Marchand) [RHEL-115358] +- ring-buffer: Remove ring_buffer_read_prepare_sync() (Jerome Marchand) [RHEL-115358] +- kernel: trace: preemptirq_delay_test: use offstack cpu mask (Jerome Marchand) [RHEL-115358] +- tracefs: Add d_delete to remove negative dentries (Jerome Marchand) [RHEL-115358] +- ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (Jerome Marchand) [RHEL-115358] {CVE-2025-38101} +- ftrace: Fix UAF when lookup kallsym after ftrace disabled (Jerome Marchand) [RHEL-115358] {CVE-2025-38346} +- ring-buffer: Do not trigger WARN_ON() due to a commit_overrun (Jerome Marchand) [RHEL-115358] {CVE-2025-38267} +- ring-buffer: Move cpus_read_lock() outside of buffer->mutex (Jerome Marchand) [RHEL-115358] +- tracing: Fix compilation warning on arm32 (Jerome Marchand) [RHEL-115358] +- ring-buffer: Fix persistent buffer when commit page is the reader page (Jerome Marchand) [RHEL-115358] +- ftrace: Fix preemption accounting for stacktrace filter command (Jerome Marchand) [RHEL-115358] +- ftrace: Fix preemption accounting for stacktrace trigger command (Jerome Marchand) [RHEL-115358] +- tracing: probes: Fix a possible race in trace_probe_log APIs (Jerome Marchand) [RHEL-115358] +- tracing: samples: Initialize trace_array_printk() with the correct function (Jerome Marchand) [RHEL-115358] +- tracing: Fix error handling in event_trigger_parse() (Jerome Marchand) [RHEL-115358] +- tracing: Rename event_trigger_alloc() to trigger_data_alloc() (Jerome Marchand) [RHEL-115358] +- tracing: Do not take trace_event_sem in print_event_fields() (Jerome Marchand) [RHEL-115358] +- tracing: Fix oob write in trace_seq_to_buffer() (Jerome Marchand) [RHEL-115358] {CVE-2025-37923} +- tracing: Fix filter string testing (Jerome Marchand) [RHEL-115358] +- ftrace: fix incorrect hash size in register_ftrace_direct() (Jerome Marchand) [RHEL-115358] +- ftrace: Properly merge notrace hashes (Jerome Marchand) [RHEL-115358] +- tracing: Do not add length to print format in synthetic events (Jerome Marchand) [RHEL-115358] +- tracing: Move histogram trigger variables from stack to per CPU structure (Jerome Marchand) [RHEL-115358] +- tracing: Constify struct event_trigger_ops (Jerome Marchand) [RHEL-115358] +- ring-buffer: Use flush_kernel_vmap_range() over flush_dcache_folio() (Jerome Marchand) [RHEL-115358] +- ftrace: Add cond_resched() to ftrace_graph_set_hash() (Jerome Marchand) [RHEL-115358] {CVE-2025-37940} +- tracing: Verify event formats that have "%%*p.." (Jerome Marchand) [RHEL-115358] {CVE-2025-37938} +- tracing: Add __print_dynamic_array() helper (Jerome Marchand) [RHEL-115358] +- tracing: probe-events: Add comments about entry data storing code (Jerome Marchand) [RHEL-115358] +- tracing: Fix synth event printk format for str fields (Jerome Marchand) [RHEL-115358] +- tracing: Do not use PERF enums when perf is not defined (Jerome Marchand) [RHEL-115358] +- tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER (Jerome Marchand) [RHEL-115358] +- tracing/osnoise: Fix possible recursive locking for cpus_read_lock() (Jerome Marchand) [RHEL-115358] +- tracing: Fix use-after-free in print_graph_function_flags during tracer switching (Jerome Marchand) [RHEL-115358] {CVE-2025-22035} +- tracing: Ensure module defining synth event cannot be unloaded while tracing (Jerome Marchand) [RHEL-115358] +- tracing: Correct the refcount if the hist/hist_debug file fails to open (Jerome Marchand) [RHEL-115358] +- ring-buffer: Fix bytes_dropped calculation issue (Jerome Marchand) [RHEL-115358] +- tracing/hist: Support POLLPRI event for poll on histogram (Jerome Marchand) [RHEL-115358] +- tracing/hist: Add poll(POLLIN) support on hist file (Jerome Marchand) [RHEL-115358] +- tracing: Switch trace_events_hist.c code over to use guard() (Jerome Marchand) [RHEL-115358] + * Tue Oct 28 2025 CKI KWF Bot [6.12.0-147.el10] - redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124088] - blk-mq: fix blk_mq_tags double free while nr_requests grown (Ming Lei) [RHEL-118047] diff --git a/sources b/sources index 0f8009977..817091463 100644 --- a/sources +++ b/sources @@ -1,5 +1,5 @@ SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6 -SHA512 (linux-6.12.0-147.el10.tar.xz) = f12cd1a1ebaa40c1e16c3e689028b259b56afa9f852db76917a6b5c1376f5ff9878504f24739f34d2e5277a00ee3c94e78e26a38732b751edc16a8e99817b160 -SHA512 (kernel-abi-stablelists-6.12.0-147.el10.tar.xz) = 8fb485810c179fa5d08d8402e21f4e56576ff53336c247a6f76e72a100608942b35b71bd8a66cc4202ea3bf3df6ec21c912fcc698dd3412cf0ab276c46f6c699 -SHA512 (kernel-kabi-dw-6.12.0-147.el10.tar.xz) = 4ae60ee2ff92dfbc0cb0f7450b0b81fb59ff0ff02221e9f158052db8db8c5a030e1fd01fc77bab46adc1ce117f39cd1b12f87ccc7143272d2615aa79be827a13 +SHA512 (linux-6.12.0-148.el10.tar.xz) = 546720c1752857fb464b9712410799a15a85bea45e4dfe60d887bf83b89e888dd9999d7a2586598cb90bd0e7e9e0ee955a9ea08237f1b27fb248524aef642500 +SHA512 (kernel-abi-stablelists-6.12.0-148.el10.tar.xz) = 43d5b75d2cef4c4362f66cb22875b2132c2c7e28d48e830c23225bf9e3b3284bf51530a2e1569c9f9978ee3800a80da052fe49075fb0499129a19aa7b946547a +SHA512 (kernel-kabi-dw-6.12.0-148.el10.tar.xz) = 47f29c88206d8c33627b4a4b7e8c7eb0a131ae2a3bad2cfbf730a8448b28fd817bcd107e9306634e0af403da097febeede421691d1c79021c91a533ad7450158