From 73fb82a8208f649b55a1070b0ea436c3ab65f79a Mon Sep 17 00:00:00 2001 From: Julio Faracco Date: Thu, 17 Apr 2025 00:52:28 -0300 Subject: [PATCH] kernel-6.12.0-75.el10 * Wed Apr 16 2025 Julio Faracco [6.12.0-75.el10] - zram: fix potential UAF of zram table (Ming Lei) [RHEL-77219] {CVE-2025-21671} - zram: fix uninitialized ZRAM not releasing backing device (Ming Lei) [RHEL-77219] - Revert "nvme_core: scan namespaces asynchronously" (Maurizio Lombardi) [RHEL-85845] - samples/bpf: fix build (Gregory Bell) [RHEL-70466] - ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). (CKI Backport Bot) [RHEL-84540] - ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (CKI Backport Bot) [RHEL-84540] - inet: ipmr: fix data-races (CKI Backport Bot) [RHEL-84540] - netlink: add IPv6 anycast join/leave notifications (CKI Backport Bot) [RHEL-84540] - netlink: correct nlmsg size for multicast notifications (CKI Backport Bot) [RHEL-84540] - netlink: add IGMP/MLD join/leave notifications (CKI Backport Bot) [RHEL-84540] - ipv6: mcast: annotate data-race around psf->sf_count[MCAST_XXX] (CKI Backport Bot) [RHEL-84540] - ipv6: mcast: annotate data-races around mc->mca_sfcount[MCAST_EXCLUDE] (CKI Backport Bot) [RHEL-84540] - ipv6: mcast: reduce ipv6_chk_mcast_addr() indentation (CKI Backport Bot) [RHEL-84540] - ip6mr: Add __init to ip6_mr_cleanup(). (CKI Backport Bot) [RHEL-84540] - ipv6: Remove redundant unlikely() (CKI Backport Bot) [RHEL-84540] - vfio/pci: Handle INTx IRQ_NOTCONNECTED (Alex Williamson) [RHEL-85587 RHEL-85591] - vfio/virtio: Enable support for virtio-block live migration (Alex Williamson) [RHEL-85587] - vfio/type1: Use mapping page mask for pfnmaps (Alex Williamson) [RHEL-85587] - mm: Provide address mask in struct follow_pfnmap_args (Alex Williamson) [RHEL-85587] - vfio/type1: Use consistent types for page counts (Alex Williamson) [RHEL-85587] - vfio/type1: Use vfio_batch for vaddr_get_pfns() (Alex Williamson) [RHEL-85587] - vfio/type1: Convert all vaddr_get_pfns() callers to use vfio_batch (Alex Williamson) [RHEL-85587] - vfio/type1: Catch zero from pin_user_pages_remote() (Alex Williamson) [RHEL-85587] - vfio/pci: match IGD devices in display controller class (Alex Williamson) [RHEL-85587] - vfio/nvgrace-gpu: Add GB200 SKU to the devid table (Alex Williamson) [RHEL-85587] - vfio/nvgrace-gpu: Check the HBM training and C2C link status (Alex Williamson) [RHEL-85587] - vfio/nvgrace-gpu: Expose the blackwell device PF BAR1 to the VM (Alex Williamson) [RHEL-85587] - vfio/nvgrace-gpu: Read dvsec register to determine need for uncached resmem (Alex Williamson) [RHEL-85587] - vfio/platform: check the bounds of read/write syscalls (Alex Williamson) [RHEL-85587] - vfio/pci: Expose setup ROM at ROM bar when needed (Alex Williamson) [RHEL-85587] - vfio/pci: Remove shadow ROM specific code paths (Alex Williamson) [RHEL-85587] - vfio/pci: Remove #ifdef iowrite64 and #ifdef ioread64 (Alex Williamson) [RHEL-85587] - vfio/pci: Enable iowrite64 and ioread64 for vfio pci (Alex Williamson) [RHEL-85587] - vfio/virtio: Enable live migration once VIRTIO_PCI was configured (Alex Williamson) [RHEL-85587] - vfio/virtio: Add PRE_COPY support for live migration (Alex Williamson) [RHEL-85587] - vfio/virtio: Add support for the basic live migration functionality (Alex Williamson) [RHEL-85587] - virtio-pci: Introduce APIs to execute device parts admin commands (Alex Williamson) [RHEL-85587] - virtio: Manage device and driver capabilities via the admin commands (Alex Williamson) [RHEL-85587] - virtio: Extend the admin command to include the result size (Alex Williamson) [RHEL-85587] - virtio_pci: Introduce device parts access commands (Alex Williamson) [RHEL-85587] - Documentation: add debugfs description for hisi migration (Alex Williamson) [RHEL-85587] - hisi_acc_vfio_pci: register debugfs for hisilicon migration driver (Alex Williamson) [RHEL-85587] - hisi_acc_vfio_pci: create subfunction for data reading (Alex Williamson) [RHEL-85587] - hisi_acc_vfio_pci: extract public functions for container_of (Alex Williamson) [RHEL-85587] - vfio/qat: fix overflow check in qat_vf_resume_write() (Alex Williamson) [RHEL-85587] - vfio/nvgrace-gpu: Add a new GH200 SKU to the devid table (Alex Williamson) [RHEL-85587] - kvm/vfio: Constify struct kvm_device_ops (Alex Williamson) [RHEL-85587] - redhat/configs: enable in kernel compression/decompression of compressed modules (Herton R. Krzesinski) [RHEL-79278] - redhat: change compression flags for xz (Herton R. Krzesinski) [RHEL-79278] - dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (Benjamin Marzinski) [RHEL-84777] - dm vdo: add missing spin_lock_init (Benjamin Marzinski) [RHEL-59337] - dm-integrity: Do not emit journal configuration in DM table for Inline mode (Benjamin Marzinski) [RHEL-84777] - dm-integrity: Avoid divide by zero in table status in Inline mode (Benjamin Marzinski) [RHEL-84777] - dm-crypt: track tag_offset in convert_context (Benjamin Marzinski) [RHEL-84777] - dm-crypt: don't initialize cc_sector again (Benjamin Marzinski) [RHEL-84777] - dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit() (Benjamin Marzinski) [RHEL-84777] - dm-crypt: use bi_sector in bio when initialize integrity seed (Benjamin Marzinski) [RHEL-84777] - dm-crypt: fully initialize clone->bi_iter in crypt_alloc_buffer() (Benjamin Marzinski) [RHEL-84777] - dm-crypt: set atomic as false when calling crypt_convert() in kworker (Benjamin Marzinski) [RHEL-84777] - dm-mirror: Support atomic writes (Benjamin Marzinski) [RHEL-84777] - dm-io: Warn on creating multiple atomic write bios for a region (Benjamin Marzinski) [RHEL-84777] - dm-stripe: Enable atomic writes (Benjamin Marzinski) [RHEL-84777] - dm-linear: Enable atomic writes (Benjamin Marzinski) [RHEL-84777] - dm: Ensure cloned bio is same length for atomic write (Benjamin Marzinski) [RHEL-84777] - dm-table: atomic writes support (Benjamin Marzinski) [RHEL-84777] - dm-transaction-manager: use red-black trees instead of linear lists (Benjamin Marzinski) [RHEL-84777] - dm: disable REQ_NOWAIT for flushes (Benjamin Marzinski) [RHEL-84777] - dm: remove useless test in alloc_multiple_bios (Benjamin Marzinski) [RHEL-84777] - dm: change kzalloc to kcalloc (Benjamin Marzinski) [RHEL-84777] - dm raid: fix spelling errors in raid_ctr() (Benjamin Marzinski) [RHEL-84777] - dm thin: make get_first_thin use rcu-safe list first function (Benjamin Marzinski) [RHEL-84777] - dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY (Benjamin Marzinski) [RHEL-84777] - dm-verity FEC: Avoid copying RS parity bytes twice. (Benjamin Marzinski) [RHEL-84777] - dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2) (Benjamin Marzinski) [RHEL-84777] - dm array: fix cursor index when skipping across block boundaries (Benjamin Marzinski) [RHEL-84777] - dm array: fix unreleased btree blocks on closing a faulty array cursor (Benjamin Marzinski) [RHEL-84777] - dm-verity: remove the unused "data_start" variable (Benjamin Marzinski) [RHEL-84777] - dm-bufio: use kmalloc to allocate power-of-two sized buffers (Benjamin Marzinski) [RHEL-84777] - dm thin: Add missing destroy_work_on_stack() (Benjamin Marzinski) [RHEL-84777] - dm: add support for get_unique_id (Benjamin Marzinski) [RHEL-84777] - dm vdo: fix function doc comment formatting (Benjamin Marzinski) [RHEL-84777] - dm vdo int-map: remove unused parameters (Benjamin Marzinski) [RHEL-84777] - dm-vdo: reset bi_ioprio to the default value when the bio is reset (Benjamin Marzinski) [RHEL-84777] - dm-vdo murmurhash: remove u64 alignment requirement (Benjamin Marzinski) [RHEL-84777] - dm: Fix typo in error message (Benjamin Marzinski) [RHEL-84777] - dm ioctl: rate limit a couple of ioctl based error messages (Benjamin Marzinski) [RHEL-84777] - dm vdo: Remove unused uds_compute_index_size (Benjamin Marzinski) [RHEL-84777] - dm vdo: Remove unused functions (Benjamin Marzinski) [RHEL-84777] - dm: zoned: Remove unused functions (Benjamin Marzinski) [RHEL-84777] - dm: Remove unused dm_table_bio_based (Benjamin Marzinski) [RHEL-84777] - dm: Remove unused dm_set_md_type (Benjamin Marzinski) [RHEL-84777] - dm cache: Remove unused functions in bio-prison-v1 (Benjamin Marzinski) [RHEL-84777] - dm cache: Remove unused dm_cache_size (Benjamin Marzinski) [RHEL-84777] - dm cache: Remove unused dm_cache_dump (Benjamin Marzinski) [RHEL-84777] - dm cache: Remove unused btracker_nr_writebacks_queued (Benjamin Marzinski) [RHEL-84777] - redhat/kernel.spec.template: add net packetdrill selftests (Hangbin Liu) [RHEL-84659] - ptp: Properly handle compat ioctls (CKI Backport Bot) [RHEL-84646] - ptp: Ensure info->enable callback is always set (CKI Backport Bot) [RHEL-84646] {CVE-2025-21814} - gitlab-ci: set automotive dist-tag (Scott Weaver) Resolves: RHEL-59337, RHEL-70466, RHEL-77219, RHEL-79278, RHEL-84540, RHEL-84646, RHEL-84659, RHEL-84777, RHEL-85587, RHEL-85591, RHEL-85845 Signed-off-by: Julio Faracco --- Makefile.rhelver | 2 +- kernel-aarch64-64k-debug-rhel.config | 7 +- kernel-aarch64-64k-rhel.config | 7 +- kernel-aarch64-automotive-debug-rhel.config | 7 +- kernel-aarch64-automotive-rhel.config | 7 +- kernel-aarch64-debug-rhel.config | 7 +- kernel-aarch64-rhel.config | 7 +- kernel-aarch64-rt-64k-debug-rhel.config | 7 +- kernel-aarch64-rt-64k-rhel.config | 7 +- kernel-aarch64-rt-debug-rhel.config | 7 +- kernel-aarch64-rt-rhel.config | 7 +- kernel-ppc64le-debug-rhel.config | 7 +- kernel-ppc64le-rhel.config | 7 +- kernel-s390x-debug-rhel.config | 7 +- kernel-s390x-rhel.config | 7 +- kernel-s390x-zfcpdump-rhel.config | 7 +- kernel-x86_64-automotive-debug-rhel.config | 7 +- kernel-x86_64-automotive-rhel.config | 7 +- kernel-x86_64-debug-rhel.config | 7 +- kernel-x86_64-rhel.config | 7 +- kernel-x86_64-rt-debug-rhel.config | 7 +- kernel-x86_64-rt-rhel.config | 7 +- kernel.changelog | 102 ++++++++++++++ kernel.spec | 143 ++++++++++++++++++-- sources | 6 +- 25 files changed, 321 insertions(+), 79 deletions(-) diff --git a/Makefile.rhelver b/Makefile.rhelver index e644749b9..573929873 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 1 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 74 +RHEL_RELEASE = 75 # # RHEL_REBASE_NUM diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config index 5376f9bed..e660932f5 100644 --- a/kernel-aarch64-64k-debug-rhel.config +++ b/kernel-aarch64-64k-debug-rhel.config @@ -3988,12 +3988,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config index 5139761d8..6474f072e 100644 --- a/kernel-aarch64-64k-rhel.config +++ b/kernel-aarch64-64k-rhel.config @@ -3967,12 +3967,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel-aarch64-automotive-debug-rhel.config b/kernel-aarch64-automotive-debug-rhel.config index 1bbcc95b0..985ef2a47 100644 --- a/kernel-aarch64-automotive-debug-rhel.config +++ b/kernel-aarch64-automotive-debug-rhel.config @@ -4238,12 +4238,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel-aarch64-automotive-rhel.config b/kernel-aarch64-automotive-rhel.config index e2600ebf0..bd8beb24f 100644 --- a/kernel-aarch64-automotive-rhel.config +++ b/kernel-aarch64-automotive-rhel.config @@ -4217,12 +4217,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config index 18bd675ed..a8408a7eb 100644 --- a/kernel-aarch64-debug-rhel.config +++ b/kernel-aarch64-debug-rhel.config @@ -3985,12 +3985,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config index 8191b9197..8ba3510a0 100644 --- a/kernel-aarch64-rhel.config +++ b/kernel-aarch64-rhel.config @@ -3964,12 +3964,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel-aarch64-rt-64k-debug-rhel.config b/kernel-aarch64-rt-64k-debug-rhel.config index 14702230d..4a6f5203f 100644 --- a/kernel-aarch64-rt-64k-debug-rhel.config +++ b/kernel-aarch64-rt-64k-debug-rhel.config @@ -4029,12 +4029,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel-aarch64-rt-64k-rhel.config b/kernel-aarch64-rt-64k-rhel.config index 99551e998..92977a684 100644 --- a/kernel-aarch64-rt-64k-rhel.config +++ b/kernel-aarch64-rt-64k-rhel.config @@ -4008,12 +4008,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config index 222186640..d03d0e907 100644 --- a/kernel-aarch64-rt-debug-rhel.config +++ b/kernel-aarch64-rt-debug-rhel.config @@ -4026,12 +4026,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config index 29eebd3b5..49e3f6f2a 100644 --- a/kernel-aarch64-rt-rhel.config +++ b/kernel-aarch64-rt-rhel.config @@ -4005,12 +4005,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config index e67fbf851..072c7dbf2 100644 --- a/kernel-ppc64le-debug-rhel.config +++ b/kernel-ppc64le-debug-rhel.config @@ -3635,12 +3635,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config index f502d5216..aa0dbb839 100644 --- a/kernel-ppc64le-rhel.config +++ b/kernel-ppc64le-rhel.config @@ -3615,12 +3615,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config index 971418a80..8f2661730 100644 --- a/kernel-s390x-debug-rhel.config +++ b/kernel-s390x-debug-rhel.config @@ -3614,12 +3614,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config index 23270a582..4a5ed9f11 100644 --- a/kernel-s390x-rhel.config +++ b/kernel-s390x-rhel.config @@ -3594,12 +3594,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config index 478437157..130cd8ffb 100644 --- a/kernel-s390x-zfcpdump-rhel.config +++ b/kernel-s390x-zfcpdump-rhel.config @@ -3603,12 +3603,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel-x86_64-automotive-debug-rhel.config b/kernel-x86_64-automotive-debug-rhel.config index fb0e52a2a..4a0a3c89a 100644 --- a/kernel-x86_64-automotive-debug-rhel.config +++ b/kernel-x86_64-automotive-debug-rhel.config @@ -4010,12 +4010,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel-x86_64-automotive-rhel.config b/kernel-x86_64-automotive-rhel.config index 9ae484be0..2e4283e35 100644 --- a/kernel-x86_64-automotive-rhel.config +++ b/kernel-x86_64-automotive-rhel.config @@ -3990,12 +3990,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config index 266c5f6cd..f07d73aa7 100644 --- a/kernel-x86_64-debug-rhel.config +++ b/kernel-x86_64-debug-rhel.config @@ -3892,12 +3892,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config index c5b3b3b5e..a08037323 100644 --- a/kernel-x86_64-rhel.config +++ b/kernel-x86_64-rhel.config @@ -3872,12 +3872,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config index dc553ade8..5fbb18682 100644 --- a/kernel-x86_64-rt-debug-rhel.config +++ b/kernel-x86_64-rt-debug-rhel.config @@ -3933,12 +3933,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config index ad608f189..ed824fa39 100644 --- a/kernel-x86_64-rt-rhel.config +++ b/kernel-x86_64-rt-rhel.config @@ -3913,12 +3913,13 @@ CONFIG_MODIFY_LDT_SYSCALL=y CONFIG_MODPROBE_PATH="/usr/sbin/modprobe" # CONFIG_MODULE_ALLOW_BTF_MISMATCH is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set +# CONFIG_MODULE_COMPRESS_ALL is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS is not set -CONFIG_MODULE_COMPRESS_NONE=y -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y +CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_DEBUG is not set +CONFIG_MODULE_DECOMPRESS=y CONFIG_MODULE_FORCE_LOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODULE_SIG_ALL=y diff --git a/kernel.changelog b/kernel.changelog index 5dc494197..dc7a5e085 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,105 @@ +* Wed Apr 16 2025 Julio Faracco [6.12.0-75.el10] +- zram: fix potential UAF of zram table (Ming Lei) [RHEL-77219] {CVE-2025-21671} +- zram: fix uninitialized ZRAM not releasing backing device (Ming Lei) [RHEL-77219] +- Revert "nvme_core: scan namespaces asynchronously" (Maurizio Lombardi) [RHEL-85845] +- samples/bpf: fix build (Gregory Bell) [RHEL-70466] +- ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). (CKI Backport Bot) [RHEL-84540] +- ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (CKI Backport Bot) [RHEL-84540] +- inet: ipmr: fix data-races (CKI Backport Bot) [RHEL-84540] +- netlink: add IPv6 anycast join/leave notifications (CKI Backport Bot) [RHEL-84540] +- netlink: correct nlmsg size for multicast notifications (CKI Backport Bot) [RHEL-84540] +- netlink: add IGMP/MLD join/leave notifications (CKI Backport Bot) [RHEL-84540] +- ipv6: mcast: annotate data-race around psf->sf_count[MCAST_XXX] (CKI Backport Bot) [RHEL-84540] +- ipv6: mcast: annotate data-races around mc->mca_sfcount[MCAST_EXCLUDE] (CKI Backport Bot) [RHEL-84540] +- ipv6: mcast: reduce ipv6_chk_mcast_addr() indentation (CKI Backport Bot) [RHEL-84540] +- ip6mr: Add __init to ip6_mr_cleanup(). (CKI Backport Bot) [RHEL-84540] +- ipv6: Remove redundant unlikely() (CKI Backport Bot) [RHEL-84540] +- vfio/pci: Handle INTx IRQ_NOTCONNECTED (Alex Williamson) [RHEL-85587 RHEL-85591] +- vfio/virtio: Enable support for virtio-block live migration (Alex Williamson) [RHEL-85587] +- vfio/type1: Use mapping page mask for pfnmaps (Alex Williamson) [RHEL-85587] +- mm: Provide address mask in struct follow_pfnmap_args (Alex Williamson) [RHEL-85587] +- vfio/type1: Use consistent types for page counts (Alex Williamson) [RHEL-85587] +- vfio/type1: Use vfio_batch for vaddr_get_pfns() (Alex Williamson) [RHEL-85587] +- vfio/type1: Convert all vaddr_get_pfns() callers to use vfio_batch (Alex Williamson) [RHEL-85587] +- vfio/type1: Catch zero from pin_user_pages_remote() (Alex Williamson) [RHEL-85587] +- vfio/pci: match IGD devices in display controller class (Alex Williamson) [RHEL-85587] +- vfio/nvgrace-gpu: Add GB200 SKU to the devid table (Alex Williamson) [RHEL-85587] +- vfio/nvgrace-gpu: Check the HBM training and C2C link status (Alex Williamson) [RHEL-85587] +- vfio/nvgrace-gpu: Expose the blackwell device PF BAR1 to the VM (Alex Williamson) [RHEL-85587] +- vfio/nvgrace-gpu: Read dvsec register to determine need for uncached resmem (Alex Williamson) [RHEL-85587] +- vfio/platform: check the bounds of read/write syscalls (Alex Williamson) [RHEL-85587] +- vfio/pci: Expose setup ROM at ROM bar when needed (Alex Williamson) [RHEL-85587] +- vfio/pci: Remove shadow ROM specific code paths (Alex Williamson) [RHEL-85587] +- vfio/pci: Remove #ifdef iowrite64 and #ifdef ioread64 (Alex Williamson) [RHEL-85587] +- vfio/pci: Enable iowrite64 and ioread64 for vfio pci (Alex Williamson) [RHEL-85587] +- vfio/virtio: Enable live migration once VIRTIO_PCI was configured (Alex Williamson) [RHEL-85587] +- vfio/virtio: Add PRE_COPY support for live migration (Alex Williamson) [RHEL-85587] +- vfio/virtio: Add support for the basic live migration functionality (Alex Williamson) [RHEL-85587] +- virtio-pci: Introduce APIs to execute device parts admin commands (Alex Williamson) [RHEL-85587] +- virtio: Manage device and driver capabilities via the admin commands (Alex Williamson) [RHEL-85587] +- virtio: Extend the admin command to include the result size (Alex Williamson) [RHEL-85587] +- virtio_pci: Introduce device parts access commands (Alex Williamson) [RHEL-85587] +- Documentation: add debugfs description for hisi migration (Alex Williamson) [RHEL-85587] +- hisi_acc_vfio_pci: register debugfs for hisilicon migration driver (Alex Williamson) [RHEL-85587] +- hisi_acc_vfio_pci: create subfunction for data reading (Alex Williamson) [RHEL-85587] +- hisi_acc_vfio_pci: extract public functions for container_of (Alex Williamson) [RHEL-85587] +- vfio/qat: fix overflow check in qat_vf_resume_write() (Alex Williamson) [RHEL-85587] +- vfio/nvgrace-gpu: Add a new GH200 SKU to the devid table (Alex Williamson) [RHEL-85587] +- kvm/vfio: Constify struct kvm_device_ops (Alex Williamson) [RHEL-85587] +- redhat/configs: enable in kernel compression/decompression of compressed modules (Herton R. Krzesinski) [RHEL-79278] +- redhat: change compression flags for xz (Herton R. Krzesinski) [RHEL-79278] +- dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (Benjamin Marzinski) [RHEL-84777] +- dm vdo: add missing spin_lock_init (Benjamin Marzinski) [RHEL-59337] +- dm-integrity: Do not emit journal configuration in DM table for Inline mode (Benjamin Marzinski) [RHEL-84777] +- dm-integrity: Avoid divide by zero in table status in Inline mode (Benjamin Marzinski) [RHEL-84777] +- dm-crypt: track tag_offset in convert_context (Benjamin Marzinski) [RHEL-84777] +- dm-crypt: don't initialize cc_sector again (Benjamin Marzinski) [RHEL-84777] +- dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit() (Benjamin Marzinski) [RHEL-84777] +- dm-crypt: use bi_sector in bio when initialize integrity seed (Benjamin Marzinski) [RHEL-84777] +- dm-crypt: fully initialize clone->bi_iter in crypt_alloc_buffer() (Benjamin Marzinski) [RHEL-84777] +- dm-crypt: set atomic as false when calling crypt_convert() in kworker (Benjamin Marzinski) [RHEL-84777] +- dm-mirror: Support atomic writes (Benjamin Marzinski) [RHEL-84777] +- dm-io: Warn on creating multiple atomic write bios for a region (Benjamin Marzinski) [RHEL-84777] +- dm-stripe: Enable atomic writes (Benjamin Marzinski) [RHEL-84777] +- dm-linear: Enable atomic writes (Benjamin Marzinski) [RHEL-84777] +- dm: Ensure cloned bio is same length for atomic write (Benjamin Marzinski) [RHEL-84777] +- dm-table: atomic writes support (Benjamin Marzinski) [RHEL-84777] +- dm-transaction-manager: use red-black trees instead of linear lists (Benjamin Marzinski) [RHEL-84777] +- dm: disable REQ_NOWAIT for flushes (Benjamin Marzinski) [RHEL-84777] +- dm: remove useless test in alloc_multiple_bios (Benjamin Marzinski) [RHEL-84777] +- dm: change kzalloc to kcalloc (Benjamin Marzinski) [RHEL-84777] +- dm raid: fix spelling errors in raid_ctr() (Benjamin Marzinski) [RHEL-84777] +- dm thin: make get_first_thin use rcu-safe list first function (Benjamin Marzinski) [RHEL-84777] +- dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY (Benjamin Marzinski) [RHEL-84777] +- dm-verity FEC: Avoid copying RS parity bytes twice. (Benjamin Marzinski) [RHEL-84777] +- dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2) (Benjamin Marzinski) [RHEL-84777] +- dm array: fix cursor index when skipping across block boundaries (Benjamin Marzinski) [RHEL-84777] +- dm array: fix unreleased btree blocks on closing a faulty array cursor (Benjamin Marzinski) [RHEL-84777] +- dm-verity: remove the unused "data_start" variable (Benjamin Marzinski) [RHEL-84777] +- dm-bufio: use kmalloc to allocate power-of-two sized buffers (Benjamin Marzinski) [RHEL-84777] +- dm thin: Add missing destroy_work_on_stack() (Benjamin Marzinski) [RHEL-84777] +- dm: add support for get_unique_id (Benjamin Marzinski) [RHEL-84777] +- dm vdo: fix function doc comment formatting (Benjamin Marzinski) [RHEL-84777] +- dm vdo int-map: remove unused parameters (Benjamin Marzinski) [RHEL-84777] +- dm-vdo: reset bi_ioprio to the default value when the bio is reset (Benjamin Marzinski) [RHEL-84777] +- dm-vdo murmurhash: remove u64 alignment requirement (Benjamin Marzinski) [RHEL-84777] +- dm: Fix typo in error message (Benjamin Marzinski) [RHEL-84777] +- dm ioctl: rate limit a couple of ioctl based error messages (Benjamin Marzinski) [RHEL-84777] +- dm vdo: Remove unused uds_compute_index_size (Benjamin Marzinski) [RHEL-84777] +- dm vdo: Remove unused functions (Benjamin Marzinski) [RHEL-84777] +- dm: zoned: Remove unused functions (Benjamin Marzinski) [RHEL-84777] +- dm: Remove unused dm_table_bio_based (Benjamin Marzinski) [RHEL-84777] +- dm: Remove unused dm_set_md_type (Benjamin Marzinski) [RHEL-84777] +- dm cache: Remove unused functions in bio-prison-v1 (Benjamin Marzinski) [RHEL-84777] +- dm cache: Remove unused dm_cache_size (Benjamin Marzinski) [RHEL-84777] +- dm cache: Remove unused dm_cache_dump (Benjamin Marzinski) [RHEL-84777] +- dm cache: Remove unused btracker_nr_writebacks_queued (Benjamin Marzinski) [RHEL-84777] +- redhat/kernel.spec.template: add net packetdrill selftests (Hangbin Liu) [RHEL-84659] +- ptp: Properly handle compat ioctls (CKI Backport Bot) [RHEL-84646] +- ptp: Ensure info->enable callback is always set (CKI Backport Bot) [RHEL-84646] {CVE-2025-21814} +- gitlab-ci: set automotive dist-tag (Scott Weaver) +Resolves: RHEL-59337, RHEL-70466, RHEL-77219, RHEL-79278, RHEL-84540, RHEL-84646, RHEL-84659, RHEL-84777, RHEL-85587, RHEL-85591, RHEL-85845 + * Mon Apr 14 2025 Julio Faracco [6.12.0-74.el10] - sched/core: Prevent rescheduling when interrupts are disabled (Phil Auld) [RHEL-78822] - sched: Don't define sched_clock_irqtime as static key (Phil Auld) [RHEL-78822] diff --git a/kernel.spec b/kernel.spec index dddc1ff61..f12653ebf 100644 --- a/kernel.spec +++ b/kernel.spec @@ -120,7 +120,7 @@ Summary: The Linux kernel # Default compression algorithm %global compression xz -%global compression_flags --compress +%global compression_flags --compress --check=crc32 --lzma2=dict=1MiB %global compext xz %if 0%{?fedora} @@ -162,15 +162,15 @@ Summary: The Linux kernel %define specrpmversion 6.12.0 %define specversion 6.12.0 %define patchversion 6.12 -%define pkgrelease 74 +%define pkgrelease 75 %define kversion 6 -%define tarfile_release 6.12.0-74.el10 +%define tarfile_release 6.12.0-75.el10 # This is needed to do merge window version magic %define patchlevel 12 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 74%{?buildid}%{?dist} +%define specrelease 75%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 6.12.0-74.el10 +%define kabiversion 6.12.0-75.el10 # If this variable is set to 1, a bpf selftests build failure will cause a # fatal kernel package build error @@ -2220,6 +2220,13 @@ InitBuildVars() { fi } +#Build bootstrap bpftool +BuildBpftool(){ + export BPFBOOTSTRAP_CFLAGS=$(echo "%{__global_compiler_flags}" | sed -r "s/\-specs=[^\ ]+\/redhat-annobin-cc1//") + export BPFBOOTSTRAP_LDFLAGS=$(echo "%{__global_ldflags}" | sed -r "s/\-specs=[^\ ]+\/redhat-annobin-cc1//") + CFLAGS="" LDFLAGS="" make EXTRA_CFLAGS="${BPFBOOTSTRAP_CFLAGS}" EXTRA_CXXFLAGS="${BPFBOOTSTRAP_CFLAGS}" EXTRA_LDFLAGS="${BPFBOOTSTRAP_LDFLAGS}" %{?make_opts} %{?clang_make_opts} V=1 -C tools/bpf/bpftool bootstrap +} + BuildKernel() { %{log_msg "BuildKernel for $4"} MakeTarget=$1 @@ -2953,10 +2960,7 @@ BuildKernel() { if [ "$Variant" != "zfcpdump" ]; then %{log_msg "Build the bootstrap bpftool to generate vmlinux.h"} # Build the bootstrap bpftool to generate vmlinux.h - export BPFBOOTSTRAP_CFLAGS=$(echo "%{__global_compiler_flags}" | sed -r "s/\-specs=[^\ ]+\/redhat-annobin-cc1//") - export BPFBOOTSTRAP_LDFLAGS=$(echo "%{__global_ldflags}" | sed -r "s/\-specs=[^\ ]+\/redhat-annobin-cc1//") - CFLAGS="" LDFLAGS="" make EXTRA_CFLAGS="${BPFBOOTSTRAP_CFLAGS}" EXTRA_CXXFLAGS="${BPFBOOTSTRAP_CFLAGS}" EXTRA_LDFLAGS="${BPFBOOTSTRAP_LDFLAGS}" %{?make_opts} %{?clang_make_opts} V=1 -C tools/bpf/bpftool bootstrap - + BuildBpftool tools/bpf/bpftool/bootstrap/bpftool btf dump file vmlinux format c > $RPM_BUILD_ROOT/$DevelDir/vmlinux.h fi %endif @@ -3201,7 +3205,10 @@ pushd tools/tracing/rtla popd %endif -if [ -f $DevelDir/vmlinux.h ]; then +#set RPM_VMLINUX_H +if [ -f $RPM_BUILD_ROOT/$DevelDir/vmlinux.h ]; then + RPM_VMLINUX_H=$RPM_BUILD_ROOT/$DevelDir/vmlinux.h +elif [ -f $DevelDir/vmlinux.h ]; then RPM_VMLINUX_H=$DevelDir/vmlinux.h fi echo "${RPM_VMLINUX_H}" > ../vmlinux_h_path @@ -3222,8 +3229,13 @@ if [ ! -f include/generated/autoconf.h ]; then %{make} %{?_smp_mflags} modules_prepare fi +# Build BPFtool for samples/bpf +if [ ! -f tools/bpf/bpftool/bootstrap/bpftool ]; then + BuildBpftool +fi + %{log_msg "build samples/bpf"} -%{make} %{?_smp_mflags} EXTRA_CXXFLAGS="${RPM_OPT_FLAGS}" ARCH=$Arch V=1 M=samples/bpf/ VMLINUX_H="${RPM_VMLINUX_H}" || true +%{make} %{?_smp_mflags} EXTRA_CXXFLAGS="${RPM_OPT_FLAGS}" ARCH=$Arch BPFTOOL=$(pwd)/tools/bpf/bpftool/bootstrap/bpftool V=1 M=samples/bpf/ VMLINUX_H="${RPM_VMLINUX_H}" || true pushd tools/testing/selftests # We need to install here because we need to call make with ARCH set which @@ -3242,7 +3254,7 @@ pushd tools/testing/selftests %undefine _fortify_level export CFLAGS="%{build_cflags}" -TARGETS="bpf cgroup mm net net/forwarding net/mptcp net/netfilter tc-testing memfd drivers/net/bonding iommu cachestat" +TARGETS="bpf cgroup mm net net/forwarding net/mptcp net/netfilter net/packetdrill tc-testing memfd drivers/net/bonding iommu cachestat" %{make} %{?_smp_mflags} EXTRA_CFLAGS="${RPM_OPT_FLAGS}" EXTRA_CXXFLAGS="${RPM_OPT_FLAGS}" EXTRA_LDFLAGS="%{__global_ldflags}" ARCH=$Arch V=1 TARGETS="$TARGETS" SKIP_TARGETS="" $force_targets VMLINUX_H="${RPM_VMLINUX_H}" # Restore the original level of source fortification @@ -3624,6 +3636,12 @@ find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/net/netfilte find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/net/netfilter/{} \; find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/net/netfilter/{} \; popd +# install net/packetdrill selftests +pushd tools/testing/selftests/net/packetdrill +find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/net/packetdrill/{} \; +find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/net/packetdrill/{} \; +find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/net/packetdrill/{} \; +popd # install memfd selftests pushd tools/testing/selftests/memfd @@ -4316,6 +4334,107 @@ fi\ # # %changelog +* Wed Apr 16 2025 Julio Faracco [6.12.0-75.el10] +- zram: fix potential UAF of zram table (Ming Lei) [RHEL-77219] {CVE-2025-21671} +- zram: fix uninitialized ZRAM not releasing backing device (Ming Lei) [RHEL-77219] +- Revert "nvme_core: scan namespaces asynchronously" (Maurizio Lombardi) [RHEL-85845] +- samples/bpf: fix build (Gregory Bell) [RHEL-70466] +- ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). (CKI Backport Bot) [RHEL-84540] +- ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (CKI Backport Bot) [RHEL-84540] +- inet: ipmr: fix data-races (CKI Backport Bot) [RHEL-84540] +- netlink: add IPv6 anycast join/leave notifications (CKI Backport Bot) [RHEL-84540] +- netlink: correct nlmsg size for multicast notifications (CKI Backport Bot) [RHEL-84540] +- netlink: add IGMP/MLD join/leave notifications (CKI Backport Bot) [RHEL-84540] +- ipv6: mcast: annotate data-race around psf->sf_count[MCAST_XXX] (CKI Backport Bot) [RHEL-84540] +- ipv6: mcast: annotate data-races around mc->mca_sfcount[MCAST_EXCLUDE] (CKI Backport Bot) [RHEL-84540] +- ipv6: mcast: reduce ipv6_chk_mcast_addr() indentation (CKI Backport Bot) [RHEL-84540] +- ip6mr: Add __init to ip6_mr_cleanup(). (CKI Backport Bot) [RHEL-84540] +- ipv6: Remove redundant unlikely() (CKI Backport Bot) [RHEL-84540] +- vfio/pci: Handle INTx IRQ_NOTCONNECTED (Alex Williamson) [RHEL-85587 RHEL-85591] +- vfio/virtio: Enable support for virtio-block live migration (Alex Williamson) [RHEL-85587] +- vfio/type1: Use mapping page mask for pfnmaps (Alex Williamson) [RHEL-85587] +- mm: Provide address mask in struct follow_pfnmap_args (Alex Williamson) [RHEL-85587] +- vfio/type1: Use consistent types for page counts (Alex Williamson) [RHEL-85587] +- vfio/type1: Use vfio_batch for vaddr_get_pfns() (Alex Williamson) [RHEL-85587] +- vfio/type1: Convert all vaddr_get_pfns() callers to use vfio_batch (Alex Williamson) [RHEL-85587] +- vfio/type1: Catch zero from pin_user_pages_remote() (Alex Williamson) [RHEL-85587] +- vfio/pci: match IGD devices in display controller class (Alex Williamson) [RHEL-85587] +- vfio/nvgrace-gpu: Add GB200 SKU to the devid table (Alex Williamson) [RHEL-85587] +- vfio/nvgrace-gpu: Check the HBM training and C2C link status (Alex Williamson) [RHEL-85587] +- vfio/nvgrace-gpu: Expose the blackwell device PF BAR1 to the VM (Alex Williamson) [RHEL-85587] +- vfio/nvgrace-gpu: Read dvsec register to determine need for uncached resmem (Alex Williamson) [RHEL-85587] +- vfio/platform: check the bounds of read/write syscalls (Alex Williamson) [RHEL-85587] +- vfio/pci: Expose setup ROM at ROM bar when needed (Alex Williamson) [RHEL-85587] +- vfio/pci: Remove shadow ROM specific code paths (Alex Williamson) [RHEL-85587] +- vfio/pci: Remove #ifdef iowrite64 and #ifdef ioread64 (Alex Williamson) [RHEL-85587] +- vfio/pci: Enable iowrite64 and ioread64 for vfio pci (Alex Williamson) [RHEL-85587] +- vfio/virtio: Enable live migration once VIRTIO_PCI was configured (Alex Williamson) [RHEL-85587] +- vfio/virtio: Add PRE_COPY support for live migration (Alex Williamson) [RHEL-85587] +- vfio/virtio: Add support for the basic live migration functionality (Alex Williamson) [RHEL-85587] +- virtio-pci: Introduce APIs to execute device parts admin commands (Alex Williamson) [RHEL-85587] +- virtio: Manage device and driver capabilities via the admin commands (Alex Williamson) [RHEL-85587] +- virtio: Extend the admin command to include the result size (Alex Williamson) [RHEL-85587] +- virtio_pci: Introduce device parts access commands (Alex Williamson) [RHEL-85587] +- Documentation: add debugfs description for hisi migration (Alex Williamson) [RHEL-85587] +- hisi_acc_vfio_pci: register debugfs for hisilicon migration driver (Alex Williamson) [RHEL-85587] +- hisi_acc_vfio_pci: create subfunction for data reading (Alex Williamson) [RHEL-85587] +- hisi_acc_vfio_pci: extract public functions for container_of (Alex Williamson) [RHEL-85587] +- vfio/qat: fix overflow check in qat_vf_resume_write() (Alex Williamson) [RHEL-85587] +- vfio/nvgrace-gpu: Add a new GH200 SKU to the devid table (Alex Williamson) [RHEL-85587] +- kvm/vfio: Constify struct kvm_device_ops (Alex Williamson) [RHEL-85587] +- redhat/configs: enable in kernel compression/decompression of compressed modules (Herton R. Krzesinski) [RHEL-79278] +- redhat: change compression flags for xz (Herton R. Krzesinski) [RHEL-79278] +- dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (Benjamin Marzinski) [RHEL-84777] +- dm vdo: add missing spin_lock_init (Benjamin Marzinski) [RHEL-59337] +- dm-integrity: Do not emit journal configuration in DM table for Inline mode (Benjamin Marzinski) [RHEL-84777] +- dm-integrity: Avoid divide by zero in table status in Inline mode (Benjamin Marzinski) [RHEL-84777] +- dm-crypt: track tag_offset in convert_context (Benjamin Marzinski) [RHEL-84777] +- dm-crypt: don't initialize cc_sector again (Benjamin Marzinski) [RHEL-84777] +- dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit() (Benjamin Marzinski) [RHEL-84777] +- dm-crypt: use bi_sector in bio when initialize integrity seed (Benjamin Marzinski) [RHEL-84777] +- dm-crypt: fully initialize clone->bi_iter in crypt_alloc_buffer() (Benjamin Marzinski) [RHEL-84777] +- dm-crypt: set atomic as false when calling crypt_convert() in kworker (Benjamin Marzinski) [RHEL-84777] +- dm-mirror: Support atomic writes (Benjamin Marzinski) [RHEL-84777] +- dm-io: Warn on creating multiple atomic write bios for a region (Benjamin Marzinski) [RHEL-84777] +- dm-stripe: Enable atomic writes (Benjamin Marzinski) [RHEL-84777] +- dm-linear: Enable atomic writes (Benjamin Marzinski) [RHEL-84777] +- dm: Ensure cloned bio is same length for atomic write (Benjamin Marzinski) [RHEL-84777] +- dm-table: atomic writes support (Benjamin Marzinski) [RHEL-84777] +- dm-transaction-manager: use red-black trees instead of linear lists (Benjamin Marzinski) [RHEL-84777] +- dm: disable REQ_NOWAIT for flushes (Benjamin Marzinski) [RHEL-84777] +- dm: remove useless test in alloc_multiple_bios (Benjamin Marzinski) [RHEL-84777] +- dm: change kzalloc to kcalloc (Benjamin Marzinski) [RHEL-84777] +- dm raid: fix spelling errors in raid_ctr() (Benjamin Marzinski) [RHEL-84777] +- dm thin: make get_first_thin use rcu-safe list first function (Benjamin Marzinski) [RHEL-84777] +- dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY (Benjamin Marzinski) [RHEL-84777] +- dm-verity FEC: Avoid copying RS parity bytes twice. (Benjamin Marzinski) [RHEL-84777] +- dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2) (Benjamin Marzinski) [RHEL-84777] +- dm array: fix cursor index when skipping across block boundaries (Benjamin Marzinski) [RHEL-84777] +- dm array: fix unreleased btree blocks on closing a faulty array cursor (Benjamin Marzinski) [RHEL-84777] +- dm-verity: remove the unused "data_start" variable (Benjamin Marzinski) [RHEL-84777] +- dm-bufio: use kmalloc to allocate power-of-two sized buffers (Benjamin Marzinski) [RHEL-84777] +- dm thin: Add missing destroy_work_on_stack() (Benjamin Marzinski) [RHEL-84777] +- dm: add support for get_unique_id (Benjamin Marzinski) [RHEL-84777] +- dm vdo: fix function doc comment formatting (Benjamin Marzinski) [RHEL-84777] +- dm vdo int-map: remove unused parameters (Benjamin Marzinski) [RHEL-84777] +- dm-vdo: reset bi_ioprio to the default value when the bio is reset (Benjamin Marzinski) [RHEL-84777] +- dm-vdo murmurhash: remove u64 alignment requirement (Benjamin Marzinski) [RHEL-84777] +- dm: Fix typo in error message (Benjamin Marzinski) [RHEL-84777] +- dm ioctl: rate limit a couple of ioctl based error messages (Benjamin Marzinski) [RHEL-84777] +- dm vdo: Remove unused uds_compute_index_size (Benjamin Marzinski) [RHEL-84777] +- dm vdo: Remove unused functions (Benjamin Marzinski) [RHEL-84777] +- dm: zoned: Remove unused functions (Benjamin Marzinski) [RHEL-84777] +- dm: Remove unused dm_table_bio_based (Benjamin Marzinski) [RHEL-84777] +- dm: Remove unused dm_set_md_type (Benjamin Marzinski) [RHEL-84777] +- dm cache: Remove unused functions in bio-prison-v1 (Benjamin Marzinski) [RHEL-84777] +- dm cache: Remove unused dm_cache_size (Benjamin Marzinski) [RHEL-84777] +- dm cache: Remove unused dm_cache_dump (Benjamin Marzinski) [RHEL-84777] +- dm cache: Remove unused btracker_nr_writebacks_queued (Benjamin Marzinski) [RHEL-84777] +- redhat/kernel.spec.template: add net packetdrill selftests (Hangbin Liu) [RHEL-84659] +- ptp: Properly handle compat ioctls (CKI Backport Bot) [RHEL-84646] +- ptp: Ensure info->enable callback is always set (CKI Backport Bot) [RHEL-84646] {CVE-2025-21814} +- gitlab-ci: set automotive dist-tag (Scott Weaver) + * Mon Apr 14 2025 Julio Faracco [6.12.0-74.el10] - sched/core: Prevent rescheduling when interrupts are disabled (Phil Auld) [RHEL-78822] - sched: Don't define sched_clock_irqtime as static key (Phil Auld) [RHEL-78822] diff --git a/sources b/sources index 23cec6066..faa599c2c 100644 --- a/sources +++ b/sources @@ -1,5 +1,5 @@ SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6 -SHA512 (linux-6.12.0-74.el10.tar.xz) = 7c38d5b007ae3ba2c237f8c0b3bd5f88caa311d85e5be12bd341ea7edde26e3b81637392e584de2c736f4fa756d15ad82a8e361a93872394f41574d66e58bf75 -SHA512 (kernel-abi-stablelists-6.12.0-74.el10.tar.xz) = fc0bd47a91632d7b7e8cd4fa4e2c8eff7f0dbefdb8b1ca8434b3b5cccddac57d89495ad8d4ce27b9292bdfb77c07312f412064b8405cdd8fb2e2e9788fb02c7c -SHA512 (kernel-kabi-dw-6.12.0-74.el10.tar.xz) = 363638a37d0822f41ee10a642eba36b7442adc8697b96afc32d0dfe7cdfef25279d16621d6a9d75e29ec659a379ba2be6b7a92e59255bdeb00c17b5d4b54690d +SHA512 (linux-6.12.0-75.el10.tar.xz) = d824affdf98844156d871ed2bb884df1f69cf1107a9fbf73e14c5506ca09cc6a18b93d9e34f9469d85cd5946d11e9b795ad115cf380fe42ba5722ff38c8015cd +SHA512 (kernel-abi-stablelists-6.12.0-75.el10.tar.xz) = 8ef25446892478404b3001154fd750990717f7b9c3720b4296f1ac928f228ca445d8545c61fdc98c9aa83ef17f1d3bdc5914e8a483a49b2c315ecf442da00a66 +SHA512 (kernel-kabi-dw-6.12.0-75.el10.tar.xz) = 363638a37d0822f41ee10a642eba36b7442adc8697b96afc32d0dfe7cdfef25279d16621d6a9d75e29ec659a379ba2be6b7a92e59255bdeb00c17b5d4b54690d