From 91a82f9f40d7e13f8e590319dcf3b3f82cf1fa62 Mon Sep 17 00:00:00 2001 From: "Herton R. Krzesinski" Date: Tue, 23 Aug 2022 20:50:32 +0000 Subject: [PATCH] kernel-5.14.0-155.el9 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * Tue Aug 23 2022 Herton R. Krzesinski [5.14.0-155.el9] - i40e: Fix tunnel checksum offload with fragmented traffic (Ivan Vecera) [2104734] - wait: Fix __wait_event_hrtimeout for RT/DL tasks (Prarit Bhargava) [2112265] - raid1: ensure write behind bio has less than BIO_MAX_VECS sectors (Nigel Croxon) [2117034] - KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 (Vitaly Kuznetsov) [2118955] - iavf: Fix deadlock in initialization (Petr Oros) [2106658] - netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Florian Westphal) [2116355] {CVE-2022-2586} - netfilter: nf_tables: do not allow CHAIN_ID to refer to another table (Florian Westphal) [2116355] {CVE-2022-2586} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2116355] {CVE-2022-2586} - kbuild: expose explicit .symversions targets (Čestmír Kalina) [2066238] - selftests: mptcp: make sendfile selftest work (Florian Westphal) [2109043] - netfilter: nf_queue: do not allow packet truncation below transport header offset (Florian Westphal) [2116161] {CVE-2022-36946} - ASoC: amd: yc: Update DMI table entries for AMD platforms (Jaroslav Kysela) [2114934] - ASoC: amd: yc: Update DMI table entries (Jaroslav Kysela) [2114934] - sfc: fix use after free when disabling sriov (Íñigo Huguet) [2097189] - mm: Fix PASID use-after-free issue (Jerry Snitselaar) [2113044] - ice: Fix VF not able to send tagged traffic with no VLAN filters (Petr Oros) [2116964] - ice: Ignore error message when setting same promiscuous mode (Petr Oros) [2116964] - ice: Fix clearing of promisc mode with bridge over bond (Petr Oros) [2116964] - ice: Ignore EEXIST when setting promisc mode (Petr Oros) [2116964] - ice: Fix double VLAN error when entering promisc mode (Petr Oros) [2116964] - ice: Fix promiscuous mode not turning off (Petr Oros) [2116964] - ice: Introduce enabling promiscuous mode on multiple VF's (Petr Oros) [2116964] - ice: do not setup vlan for loopback VSI (Petr Oros) [2116964] - ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) (Petr Oros) [2116964] - ice: Fix VSIs unable to share unicast MAC (Petr Oros) [2116964] - ice: Fix max VLANs available for VF (Petr Oros) [2116964] - ice: change devlink code to read NVM in blocks (Petr Oros) [2116964] - be2net: Remove useless DMA-32 fallback configuration (Petr Oros) [2051280] - ethernet: constify references to netdev->dev_addr in drivers (Petr Oros) [2051280] - ethernet: Remove redundant 'flush_workqueue()' calls (Petr Oros) [2051280] - be2net: Use irq_update_affinity_hint() (Petr Oros) [2051280] Resolves: rhbz#2104734, rhbz#2112265, rhbz#2117034, rhbz#2118955, rhbz#2106658, rhbz#2116355, rhbz#2066238, rhbz#2109043, rhbz#2116161, rhbz#2114934, rhbz#2097189, rhbz#2113044, rhbz#2116964, rhbz#2051280 Signed-off-by: Herton R. Krzesinski --- Makefile.rhelver | 2 +- check-kabi | 39 ++++++++++++++++++++++++++++----------- kernel.spec | 43 ++++++++++++++++++++++++++++++++++++++----- sources | 6 +++--- 4 files changed, 70 insertions(+), 20 deletions(-) diff --git a/Makefile.rhelver b/Makefile.rhelver index 9ad990cfe..558c28df2 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 1 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 154 +RHEL_RELEASE = 155 # # ZSTREAM diff --git a/check-kabi b/check-kabi index f9d4dcb84..3809209ad 100755 --- a/check-kabi +++ b/check-kabi @@ -41,7 +41,8 @@ def load_symvers(symvers, filename): break if in_line == "\n": continue - checksum, symbol, directory, type = in_line.split() + checksum, symbol, directory, type, *ns = in_line.split() + ns = ns[0] if ns else None symvers[symbol] = in_line[0:-1] @@ -57,7 +58,8 @@ def load_kabi(kabi, filename): break if in_line == "\n": continue - checksum, symbol, directory, type = in_line.split() + checksum, symbol, directory, type, *ns = in_line.split() + ns = ns[0] if ns else None kabi[symbol] = in_line[0:-1] @@ -69,11 +71,14 @@ def check_kabi(symvers, kabi): warn = 0 changed_symbols = [] moved_symbols = [] + ns_symbols = [] for symbol in kabi: - abi_hash, abi_sym, abi_dir, abi_type = kabi[symbol].split() + abi_hash, abi_sym, abi_dir, abi_type, *abi_ns = kabi[symbol].split() + abi_ns = abi_ns[0] if abi_ns else None if symbol in symvers: - sym_hash, sym_sym, sym_dir, sym_type = symvers[symbol].split() + sym_hash, sym_sym, sym_dir, sym_type, *sym_ns = symvers[symbol].split() + sym_ns = sym_ns[0] if sym_ns else None if abi_hash != sym_hash: fail = 1 changed_symbols.append(symbol) @@ -81,6 +86,10 @@ def check_kabi(symvers, kabi): if abi_dir != sym_dir: warn = 1 moved_symbols.append(symbol) + + if abi_ns != sym_ns: + warn = 1 + ns_symbols.append(symbol) else: fail = 1 changed_symbols.append(symbol) @@ -96,13 +105,21 @@ def check_kabi(symvers, kabi): if warn: print("*** WARNING - ABI SYMBOLS MOVED ***") - print("") - print("The following symbols moved (typically caused by moving a symbol from being") - print("provided by the kernel vmlinux out to a loadable module):") - print("") - for symbol in moved_symbols: - print(symbol) - print("") + if moved_symbols: + print("") + print("The following symbols moved (typically caused by moving a symbol from being") + print("provided by the kernel vmlinux out to a loadable module):") + print("") + for symbol in moved_symbols: + print(symbol) + print("") + if ns_symbols: + print("") + print("The following symbols changed symbol namespaces:") + print("") + for symbol in ns_symbols: + print(symbol) + print("") """Halt the build, if we got errors and/or warnings. In either case, double-checkig is required to avoid introducing / concealing diff --git a/kernel.spec b/kernel.spec index bf48bb47c..6190a2b05 100755 --- a/kernel.spec +++ b/kernel.spec @@ -121,13 +121,13 @@ Summary: The Linux kernel %define kversion 5.14 %define rpmversion 5.14.0 -%define pkgrelease 154.el9 +%define pkgrelease 155.el9 # This is needed to do merge window version magic %define patchlevel 14 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 154%{?buildid}%{?dist} +%define specrelease 155%{?buildid}%{?dist} %define pkg_release %{specrelease} @@ -679,7 +679,7 @@ BuildRequires: lld # exact git commit you can run # # xzcat -qq ${TARBALL} | git get-tar-commit-id -Source0: linux-5.14.0-154.el9.tar.xz +Source0: linux-5.14.0-155.el9.tar.xz Source1: Makefile.rhelver @@ -1351,8 +1351,8 @@ ApplyOptionalPatch() fi } -%setup -q -n kernel-5.14.0-154.el9 -c -mv linux-5.14.0-154.el9 linux-%{KVERREL} +%setup -q -n kernel-5.14.0-155.el9 -c +mv linux-5.14.0-155.el9 linux-%{KVERREL} cd linux-%{KVERREL} cp -a %{SOURCE1} . @@ -3018,6 +3018,39 @@ fi # # %changelog +* Tue Aug 23 2022 Herton R. Krzesinski [5.14.0-155.el9] +- i40e: Fix tunnel checksum offload with fragmented traffic (Ivan Vecera) [2104734] +- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Prarit Bhargava) [2112265] +- raid1: ensure write behind bio has less than BIO_MAX_VECS sectors (Nigel Croxon) [2117034] +- KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 (Vitaly Kuznetsov) [2118955] +- iavf: Fix deadlock in initialization (Petr Oros) [2106658] +- netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Florian Westphal) [2116355] {CVE-2022-2586} +- netfilter: nf_tables: do not allow CHAIN_ID to refer to another table (Florian Westphal) [2116355] {CVE-2022-2586} +- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2116355] {CVE-2022-2586} +- kbuild: expose explicit .symversions targets (Čestmír Kalina) [2066238] +- selftests: mptcp: make sendfile selftest work (Florian Westphal) [2109043] +- netfilter: nf_queue: do not allow packet truncation below transport header offset (Florian Westphal) [2116161] {CVE-2022-36946} +- ASoC: amd: yc: Update DMI table entries for AMD platforms (Jaroslav Kysela) [2114934] +- ASoC: amd: yc: Update DMI table entries (Jaroslav Kysela) [2114934] +- sfc: fix use after free when disabling sriov (Íñigo Huguet) [2097189] +- mm: Fix PASID use-after-free issue (Jerry Snitselaar) [2113044] +- ice: Fix VF not able to send tagged traffic with no VLAN filters (Petr Oros) [2116964] +- ice: Ignore error message when setting same promiscuous mode (Petr Oros) [2116964] +- ice: Fix clearing of promisc mode with bridge over bond (Petr Oros) [2116964] +- ice: Ignore EEXIST when setting promisc mode (Petr Oros) [2116964] +- ice: Fix double VLAN error when entering promisc mode (Petr Oros) [2116964] +- ice: Fix promiscuous mode not turning off (Petr Oros) [2116964] +- ice: Introduce enabling promiscuous mode on multiple VF's (Petr Oros) [2116964] +- ice: do not setup vlan for loopback VSI (Petr Oros) [2116964] +- ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) (Petr Oros) [2116964] +- ice: Fix VSIs unable to share unicast MAC (Petr Oros) [2116964] +- ice: Fix max VLANs available for VF (Petr Oros) [2116964] +- ice: change devlink code to read NVM in blocks (Petr Oros) [2116964] +- be2net: Remove useless DMA-32 fallback configuration (Petr Oros) [2051280] +- ethernet: constify references to netdev->dev_addr in drivers (Petr Oros) [2051280] +- ethernet: Remove redundant 'flush_workqueue()' calls (Petr Oros) [2051280] +- be2net: Use irq_update_affinity_hint() (Petr Oros) [2051280] + * Tue Aug 23 2022 Herton R. Krzesinski [5.14.0-154.el9] - Revert "x86/sev: Expose sev_es_ghcb_hv_call() for use by HyperV" (John Allen) [2081424] - virt: sev-guest: Pass the appropriate argument type to iounmap() (John Allen) [2081424] diff --git a/sources b/sources index ece3c7a7a..a3440a6cf 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-154.el9.tar.xz) = 6e61f5fa250196df162e8ccf5d60347b0c71f96ea051eccdad36d510b1c00b8a555da546a37dc6845ba1971d92f076fc0db1ebdab5f89f0527db443c50a455ca -SHA512 (kernel-abi-stablelists-5.14.0-154.el9.tar.bz2) = e944eca08b8e1fee3122aa14df5559e49ee9910700fafa829303b21dcc3f279264d7c8224aef9fc4b98d42c0ec4a153b543638a382f18198074ba8daa57f2d3e -SHA512 (kernel-kabi-dw-5.14.0-154.el9.tar.bz2) = 9ab07294b81e0fa4977f7f66f975108274716ea2ce13cd51bfd77a879fabd4f696e51bb2593abd2a029d05ae609123f94ac2a73f2b268e164ac2100d19df69c0 +SHA512 (linux-5.14.0-155.el9.tar.xz) = 1fba4b009fdabbf87104ff58dde516481953398532749b1100a9f7f82648dd27fc41665bfe0ab053d5614008e6cf1ef684607550c818b3222d7dd607258b821b +SHA512 (kernel-abi-stablelists-5.14.0-155.el9.tar.bz2) = 88285e5f62f80dc0c436c42e3b28bc9fc098c19540c9b31c95f4adad174dc747f5caf1c9e5cacccc324ed4f6ac00b245b0b66f2877d278276cc5833784154ac0 +SHA512 (kernel-kabi-dw-5.14.0-155.el9.tar.bz2) = 9eb7eb2d31389cfe217dbc68011f3ad1bd84fddc3b42d04aa0690ff9b9a02bc8e09e1ce5ec39e63d59ec270d0abfa149c1e0fc90ba7d511dc0126ec65f4e2e41