From 7a6017ee9e2f907725a197eec413aafeffe03e30 Mon Sep 17 00:00:00 2001 From: CKI KWF Bot Date: Thu, 14 May 2026 08:28:24 +0000 Subject: [PATCH] kernel-5.14.0-706.el9 * Thu May 14 2026 CKI KWF Bot [5.14.0-706.el9] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-142433] - io_uring/kbuf: check if target buffer list is still legacy on recycle (Jeff Moyer) [RHEL-161185] - sctp: discard stale INIT after handshake completion (Xin Long) [RHEL-158357] - netfilter: skip recording stale or retransmitted INIT (Xin Long) [RHEL-158357] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CKI Backport Bot) [RHEL-169733] {CVE-2025-68183} - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-166730] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-166730] {CVE-2025-39766} Resolves: RHEL-142433, RHEL-158357, RHEL-161185, RHEL-166730, RHEL-169733 Signed-off-by: CKI KWF Bot --- Makefile.rhelver | 2 +- kernel.changelog | 10 ++++++++++ kernel.spec | 17 +++++++++++++---- sources | 6 +++--- 4 files changed, 27 insertions(+), 8 deletions(-) diff --git a/Makefile.rhelver b/Makefile.rhelver index 46eff2a7f..58d2b174f 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 9 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 705 +RHEL_RELEASE = 706 # # ZSTREAM diff --git a/kernel.changelog b/kernel.changelog index 370808835..465ac5921 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,13 @@ +* Thu May 14 2026 CKI KWF Bot [5.14.0-706.el9] +- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-142433] +- io_uring/kbuf: check if target buffer list is still legacy on recycle (Jeff Moyer) [RHEL-161185] +- sctp: discard stale INIT after handshake completion (Xin Long) [RHEL-158357] +- netfilter: skip recording stale or retransmitted INIT (Xin Long) [RHEL-158357] +- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CKI Backport Bot) [RHEL-169733] {CVE-2025-68183} +- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-166730] {CVE-2025-39766} +- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-166730] {CVE-2025-39766} +Resolves: RHEL-142433, RHEL-158357, RHEL-161185, RHEL-166730, RHEL-169733 + * Wed May 13 2026 CKI KWF Bot [5.14.0-705.el9] - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172621] {CVE-2026-43027} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171156] {CVE-2026-31685} diff --git a/kernel.spec b/kernel.spec index 57ccda46d..7fa9fb3a2 100644 --- a/kernel.spec +++ b/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 705 +%define pkgrelease 706 %define kversion 5 -%define tarfile_release 5.14.0-705.el9 +%define tarfile_release 5.14.0-706.el9 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 705%{?buildid}%{?dist} +%define specrelease 706%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-705.el9 +%define kabiversion 5.14.0-706.el9 # # End of genspec.sh variables @@ -3753,6 +3753,15 @@ fi # # %changelog +* Thu May 14 2026 CKI KWF Bot [5.14.0-706.el9] +- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-142433] +- io_uring/kbuf: check if target buffer list is still legacy on recycle (Jeff Moyer) [RHEL-161185] +- sctp: discard stale INIT after handshake completion (Xin Long) [RHEL-158357] +- netfilter: skip recording stale or retransmitted INIT (Xin Long) [RHEL-158357] +- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CKI Backport Bot) [RHEL-169733] {CVE-2025-68183} +- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-166730] {CVE-2025-39766} +- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-166730] {CVE-2025-39766} + * Wed May 13 2026 CKI KWF Bot [5.14.0-705.el9] - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172621] {CVE-2026-43027} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171156] {CVE-2026-31685} diff --git a/sources b/sources index 452c81d1d..64a09b3f6 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-705.el9.tar.xz) = 620f18b197dd22744346585580fb302fc17ed60f5e82d6726a1e0eef23bad740eaa94302950ea43cd0026746142df645549b7990e6f1cb78700b7dc9497589f7 -SHA512 (kernel-abi-stablelists-5.14.0-705.el9.tar.bz2) = 3b521350a77854cb2c1266d07bf97d0328d7bdbdcfdcb7df8740fa855faaaa5163202205d493f8546d8201472836c601389147859fde1f435b8f120c0cb72ed4 -SHA512 (kernel-kabi-dw-5.14.0-705.el9.tar.bz2) = 63c9918004235eacfdbd2406153cc02efcc6e514c6ddc561ae21d1913bf451cf5000a7f144b93cae79dfd5558deaae73e00956f586eb3d8ca4bdb9748abee4e2 +SHA512 (linux-5.14.0-706.el9.tar.xz) = dbe1fac35a78b7730a380ffbdeaff3bb8ab367651ea53419aa7bbf1251f380cf03e4e20012a7c369017c867432c9cc22047f1f47bc320bf3f849787fb1cfc7f0 +SHA512 (kernel-abi-stablelists-5.14.0-706.el9.tar.bz2) = 46685ad67e60142604d3adef7bab7d61f82baac8fba9e70d7a5c520cd926b2c981b53917622e3a6cb820d822473d08db682fd2bfe12219abf3fe00295386447c +SHA512 (kernel-kabi-dw-5.14.0-706.el9.tar.bz2) = 406ce30061cbaa9bbbebfb1c97a7ecb6555798dea250c766c31895fadc51a158a13eebc9d81077b8d6c5db89bce883ad4b1045372590f649ff8ae1a841762fe1