diff --git a/Makefile.rhelver b/Makefile.rhelver index a8088cd6e..6c16c2a80 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 9 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 724 +RHEL_RELEASE = 725 # # ZSTREAM diff --git a/kernel.changelog b/kernel.changelog index ab714524f..7c4663441 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,79 @@ +* Wed Jul 15 2026 CKI KWF Bot [5.14.0-725.el9] +- crypto: qat - clear AES key schedule from stack (Vladislav Dronov) [RHEL-115837] +- crypto: qat - cancel work on re-enable SR-IOV timeout (Vladislav Dronov) [RHEL-115837] +- crypto: qat - use 2-arg strscpy where destination size is known (Vladislav Dronov) [RHEL-115837] +- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist (Vladislav Dronov) [RHEL-115837] +- crypto: qat - validate RSA CRT component lengths (Vladislav Dronov) [RHEL-115837] +- crypto: qat - simplify adf_service_mask_to_string helper (Vladislav Dronov) [RHEL-115837] +- crypto: qat - add KPT support for GEN6 devices (Vladislav Dronov) [RHEL-115837] +- crypto: qat - use pci logging variants for PCI-specific messages (Vladislav Dronov) [RHEL-115837] +- crypto: qat - protect service table iterations with service_lock (Vladislav Dronov) [RHEL-115837] +- crypto: qat - fix restarting state leak on allocation failure (Vladislav Dronov) [RHEL-115837] +- Documentation: qat_rl: make rate limiting wording clearer (Vladislav Dronov) [RHEL-115837] +- crypto: qat - handle sysfs-triggered reset callbacks (Vladislav Dronov) [RHEL-115837] +- crypto: qat - factor out AER reset helpers (Vladislav Dronov) [RHEL-115837] +- crypto: qat - skip restart for down devices (Vladislav Dronov) [RHEL-115837] +- crypto: qat - centralize bus master enable (Vladislav Dronov) [RHEL-115837] +- crypto: qat - notify fatal error before AER reset preparation (Vladislav Dronov) [RHEL-115837] +- crypto: qat - keep VFs enabled during reset (Vladislav Dronov) [RHEL-115837] +- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-115837] +- crypto: qat - remove MODULE_VERSION (Vladislav Dronov) [RHEL-115837] +- crypto: qat - rename adf_ctl_drv.c to adf_module.c (Vladislav Dronov) [RHEL-115837] +- crypto: qat - remove unused character device and IOCTLs (Vladislav Dronov) [RHEL-115837] +- crypto: qat - fix heartbeat error injection (Vladislav Dronov) [RHEL-115837] +- crypto: qat - fix IRQ cleanup on 6xxx probe failure (Vladislav Dronov) [RHEL-115837] {CVE-2026-46060} +- crypto: qat - use swab32 macro (Vladislav Dronov) [RHEL-115837] +- crypto: qat - replace scnprintf() with sysfs_emit() (Vladislav Dronov) [RHEL-115837] +- crypto: qat - fix type mismatch in RAS sysfs show functions (Vladislav Dronov) [RHEL-115837] +- crypto: qat - fix compression instance leak (Vladislav Dronov) [RHEL-115837] +- crypto: qat - use acomp_tfm_ctx() (Vladislav Dronov) [RHEL-115837] +- crypto: qat - disable 420xx AE cluster when lead engine is fused off (Vladislav Dronov) [RHEL-115837] +- crypto: qat - disable 4xxx AE cluster when lead engine is fused off (Vladislav Dronov) [RHEL-115837] +- crypto: qat - add anti-rollback support for GEN6 devices (Vladislav Dronov) [RHEL-115837] +- crypto: qat - add wireless mode support for QAT GEN6 (Vladislav Dronov) [RHEL-115837] +- crypto: qat - fix firmware loading failure for GEN6 devices (Vladislav Dronov) [RHEL-115837] +- crypto: qat - fix indentation of macros in qat_hal.c (Vladislav Dronov) [RHEL-115837] +- crypto: qat - Drop redundant local variables (Vladislav Dronov) [RHEL-115837] +- zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault (Vladislav Dronov) [RHEL-115837] +- zstd: Import upstream v1.5.7 (Vladislav Dronov) [RHEL-115837] +- lib: zstd: fix null-deref in ZSTD_createCDict_advanced2() (Vladislav Dronov) [RHEL-115837] +- lib: zstd: export API needed for dictionary support (Vladislav Dronov) [RHEL-115837] +- zstd: Fix array-index-out-of-bounds UBSAN warning (Vladislav Dronov) [RHEL-115837] +- add intptr_t (Vladislav Dronov) [RHEL-115837] +- zstd: Fix definition of assert() (Vladislav Dronov) [RHEL-115837] +- lib: zstd: Backport fix for in-place decompression (Vladislav Dronov) [RHEL-115837] +- lib: zstd: Fix -Wstringop-overflow warning (Vladislav Dronov) [RHEL-115837] +- zstd: import usptream v1.5.2 (Vladislav Dronov) [RHEL-115837] +- zstd: Move zstd-common module exports to zstd_common_module.c (Vladislav Dronov) [RHEL-115837] +- lib: zstd: Fix comment typo (Vladislav Dronov) [RHEL-115837] +- lib: zstd: fix repeated words in comments (Vladislav Dronov) [RHEL-115837] +- zstd: Fixing mixed module-builtin objects (Vladislav Dronov) [RHEL-115837] +- lib: zstd: clean up double word in comment. (Vladislav Dronov) [RHEL-115837] +- crypto: qat - convert to common field_get() helper (Vladislav Dronov) [RHEL-115837] +- crypto: qat - #undef field_get() before local definition (Vladislav Dronov) [RHEL-115837] +- bitfield: Add non-constant field_{prep,get}() helpers (Vladislav Dronov) [RHEL-115837] +- bitfield: Add less-checking __FIELD_{GET,PREP}() (Vladislav Dronov) [RHEL-115837] +- bitfield: Ensure the return values of helper functions are checked (Vladislav Dronov) [RHEL-115837] +- bitfield: suppress "dubious: x & !y" sparse warning (Vladislav Dronov) [RHEL-115837] +- bitfield: add explicit inclusions to the example (Vladislav Dronov) [RHEL-115837] +- crypto: qat - Remove dst_null support (Vladislav Dronov) [RHEL-115837] +- qat: don't mess with ->d_name (Vladislav Dronov) [RHEL-115837] +- crypto: qat - Annotate struct adf_fw_counters with __counted_by (Vladislav Dronov) [RHEL-115837] +- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183960] +- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183960] +- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-183589] +- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-183589] {CVE-2026-31554} +- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-183589] {CVE-2026-31555} +- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-183589] {CVE-2026-23415} +- amd/iommu: Preserve domain ids inside the kdump kernel (Eder Zulian) [RHEL-179518] +- iommu/amd: Use maximum PPR log buffer size when SNP is enabled on Family 0x19 (Eder Zulian) [RHEL-179518] +- iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (Eder Zulian) [RHEL-179518] +- iommu/amd: Skip enabling command/event buffers for kdump (Eder Zulian) [RHEL-179518] +- crypto: ccp: Skip SEV and SNP INIT for kdump boot (Eder Zulian) [RHEL-179518] +- iommu/amd: Reuse device table for kdump (Eder Zulian) [RHEL-179518] +- iommu/amd: Add support to remap/unmap IOMMU buffers for kdump (Eder Zulian) [RHEL-179518] +Resolves: RHEL-115837, RHEL-179518, RHEL-183589, RHEL-183960 + * Tue Jul 14 2026 CKI KWF Bot [5.14.0-724.el9] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Waiman Long) [RHEL-193243] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Waiman Long) [RHEL-193243] {CVE-2026-53166} diff --git a/kernel.spec b/kernel.spec index 3944d29d6..5323e3643 100644 --- a/kernel.spec +++ b/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 724 +%define pkgrelease 725 %define kversion 5 -%define tarfile_release 5.14.0-724.el9 +%define tarfile_release 5.14.0-725.el9 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 724%{?buildid}%{?dist} +%define specrelease 725%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-724.el9 +%define kabiversion 5.14.0-725.el9 # # End of genspec.sh variables @@ -3753,6 +3753,81 @@ fi # # %changelog +* Wed Jul 15 2026 CKI KWF Bot [5.14.0-725.el9] +- crypto: qat - clear AES key schedule from stack (Vladislav Dronov) [RHEL-115837] +- crypto: qat - cancel work on re-enable SR-IOV timeout (Vladislav Dronov) [RHEL-115837] +- crypto: qat - use 2-arg strscpy where destination size is known (Vladislav Dronov) [RHEL-115837] +- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist (Vladislav Dronov) [RHEL-115837] +- crypto: qat - validate RSA CRT component lengths (Vladislav Dronov) [RHEL-115837] +- crypto: qat - simplify adf_service_mask_to_string helper (Vladislav Dronov) [RHEL-115837] +- crypto: qat - add KPT support for GEN6 devices (Vladislav Dronov) [RHEL-115837] +- crypto: qat - use pci logging variants for PCI-specific messages (Vladislav Dronov) [RHEL-115837] +- crypto: qat - protect service table iterations with service_lock (Vladislav Dronov) [RHEL-115837] +- crypto: qat - fix restarting state leak on allocation failure (Vladislav Dronov) [RHEL-115837] +- Documentation: qat_rl: make rate limiting wording clearer (Vladislav Dronov) [RHEL-115837] +- crypto: qat - handle sysfs-triggered reset callbacks (Vladislav Dronov) [RHEL-115837] +- crypto: qat - factor out AER reset helpers (Vladislav Dronov) [RHEL-115837] +- crypto: qat - skip restart for down devices (Vladislav Dronov) [RHEL-115837] +- crypto: qat - centralize bus master enable (Vladislav Dronov) [RHEL-115837] +- crypto: qat - notify fatal error before AER reset preparation (Vladislav Dronov) [RHEL-115837] +- crypto: qat - keep VFs enabled during reset (Vladislav Dronov) [RHEL-115837] +- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-115837] +- crypto: qat - remove MODULE_VERSION (Vladislav Dronov) [RHEL-115837] +- crypto: qat - rename adf_ctl_drv.c to adf_module.c (Vladislav Dronov) [RHEL-115837] +- crypto: qat - remove unused character device and IOCTLs (Vladislav Dronov) [RHEL-115837] +- crypto: qat - fix heartbeat error injection (Vladislav Dronov) [RHEL-115837] +- crypto: qat - fix IRQ cleanup on 6xxx probe failure (Vladislav Dronov) [RHEL-115837] {CVE-2026-46060} +- crypto: qat - use swab32 macro (Vladislav Dronov) [RHEL-115837] +- crypto: qat - replace scnprintf() with sysfs_emit() (Vladislav Dronov) [RHEL-115837] +- crypto: qat - fix type mismatch in RAS sysfs show functions (Vladislav Dronov) [RHEL-115837] +- crypto: qat - fix compression instance leak (Vladislav Dronov) [RHEL-115837] +- crypto: qat - use acomp_tfm_ctx() (Vladislav Dronov) [RHEL-115837] +- crypto: qat - disable 420xx AE cluster when lead engine is fused off (Vladislav Dronov) [RHEL-115837] +- crypto: qat - disable 4xxx AE cluster when lead engine is fused off (Vladislav Dronov) [RHEL-115837] +- crypto: qat - add anti-rollback support for GEN6 devices (Vladislav Dronov) [RHEL-115837] +- crypto: qat - add wireless mode support for QAT GEN6 (Vladislav Dronov) [RHEL-115837] +- crypto: qat - fix firmware loading failure for GEN6 devices (Vladislav Dronov) [RHEL-115837] +- crypto: qat - fix indentation of macros in qat_hal.c (Vladislav Dronov) [RHEL-115837] +- crypto: qat - Drop redundant local variables (Vladislav Dronov) [RHEL-115837] +- zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault (Vladislav Dronov) [RHEL-115837] +- zstd: Import upstream v1.5.7 (Vladislav Dronov) [RHEL-115837] +- lib: zstd: fix null-deref in ZSTD_createCDict_advanced2() (Vladislav Dronov) [RHEL-115837] +- lib: zstd: export API needed for dictionary support (Vladislav Dronov) [RHEL-115837] +- zstd: Fix array-index-out-of-bounds UBSAN warning (Vladislav Dronov) [RHEL-115837] +- add intptr_t (Vladislav Dronov) [RHEL-115837] +- zstd: Fix definition of assert() (Vladislav Dronov) [RHEL-115837] +- lib: zstd: Backport fix for in-place decompression (Vladislav Dronov) [RHEL-115837] +- lib: zstd: Fix -Wstringop-overflow warning (Vladislav Dronov) [RHEL-115837] +- zstd: import usptream v1.5.2 (Vladislav Dronov) [RHEL-115837] +- zstd: Move zstd-common module exports to zstd_common_module.c (Vladislav Dronov) [RHEL-115837] +- lib: zstd: Fix comment typo (Vladislav Dronov) [RHEL-115837] +- lib: zstd: fix repeated words in comments (Vladislav Dronov) [RHEL-115837] +- zstd: Fixing mixed module-builtin objects (Vladislav Dronov) [RHEL-115837] +- lib: zstd: clean up double word in comment. (Vladislav Dronov) [RHEL-115837] +- crypto: qat - convert to common field_get() helper (Vladislav Dronov) [RHEL-115837] +- crypto: qat - #undef field_get() before local definition (Vladislav Dronov) [RHEL-115837] +- bitfield: Add non-constant field_{prep,get}() helpers (Vladislav Dronov) [RHEL-115837] +- bitfield: Add less-checking __FIELD_{GET,PREP}() (Vladislav Dronov) [RHEL-115837] +- bitfield: Ensure the return values of helper functions are checked (Vladislav Dronov) [RHEL-115837] +- bitfield: suppress "dubious: x & !y" sparse warning (Vladislav Dronov) [RHEL-115837] +- bitfield: add explicit inclusions to the example (Vladislav Dronov) [RHEL-115837] +- crypto: qat - Remove dst_null support (Vladislav Dronov) [RHEL-115837] +- qat: don't mess with ->d_name (Vladislav Dronov) [RHEL-115837] +- crypto: qat - Annotate struct adf_fw_counters with __counted_by (Vladislav Dronov) [RHEL-115837] +- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183960] +- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183960] +- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-183589] +- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-183589] {CVE-2026-31554} +- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-183589] {CVE-2026-31555} +- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-183589] {CVE-2026-23415} +- amd/iommu: Preserve domain ids inside the kdump kernel (Eder Zulian) [RHEL-179518] +- iommu/amd: Use maximum PPR log buffer size when SNP is enabled on Family 0x19 (Eder Zulian) [RHEL-179518] +- iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (Eder Zulian) [RHEL-179518] +- iommu/amd: Skip enabling command/event buffers for kdump (Eder Zulian) [RHEL-179518] +- crypto: ccp: Skip SEV and SNP INIT for kdump boot (Eder Zulian) [RHEL-179518] +- iommu/amd: Reuse device table for kdump (Eder Zulian) [RHEL-179518] +- iommu/amd: Add support to remap/unmap IOMMU buffers for kdump (Eder Zulian) [RHEL-179518] + * Tue Jul 14 2026 CKI KWF Bot [5.14.0-724.el9] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Waiman Long) [RHEL-193243] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Waiman Long) [RHEL-193243] {CVE-2026-53166} diff --git a/sources b/sources index 595e6e5f2..e093d93fb 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-724.el9.tar.xz) = 66e4c61f11c1e2ccda0040cac5b8e34ac37393278ff9b7c6edc2ee679a505c7ade41ff543accce17fa038c5bf29e93af814be6ab45881f9de29fd04677f80dca -SHA512 (kernel-abi-stablelists-5.14.0-724.el9.tar.bz2) = 40cc22320d1f71030eb60f21f612deae347888d8b662c7bfdad8fa6b2278cfb71229c4c7a484f74201fe4c5591a8b4881ca765dd5b3ba5e50bd0e0d45f6a28d4 -SHA512 (kernel-kabi-dw-5.14.0-724.el9.tar.bz2) = d5bb9919e2c67f0e369d982c33b2aad258f9fb5876827b10fe4c500600e374b3b27772c11837b1fee6e3e8eca84ccdb71761ebd242186b4fc7e411ef0885c45f +SHA512 (linux-5.14.0-725.el9.tar.xz) = 0c07cedce1694d32f73cee57e652538baf3a9da72ae1ff6ed837728a3615ab96ed787ffc331edb94e611d27d34c65a70db621d8ee2dbae659b0be60fbd80aae5 +SHA512 (kernel-abi-stablelists-5.14.0-725.el9.tar.bz2) = f212819e889852268ae044c7134b6ccf956bd2e4aab8c3b35113be0c8dac187aeaba81b22e5dce3d29fef7b0d9b72d8ec694be0837343aa7b551995a6678fb3e +SHA512 (kernel-kabi-dw-5.14.0-725.el9.tar.bz2) = 8d0a106676ec28dac2a635323a208a3437a54bf8b02ad0612eaa98606bcb328fccc06c1865c8d8de6e3799f9da74d75295ba869fa6576fb6724088f119439aeb