From 95101d4bbfc815a0ce74e9078574f7a306ae0a8d Mon Sep 17 00:00:00 2001 From: CKI KWF Bot Date: Thu, 23 Jul 2026 08:24:04 +0000 Subject: [PATCH] kernel-5.14.0-728.el9 * Thu Jul 23 2026 CKI KWF Bot [5.14.0-728.el9] - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193519] {CVE-2026-52973} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190343] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190343] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191440] {CVE-2026-53185} - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-100912] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-100912] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-100912] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188545] {CVE-2026-53059} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188460] {CVE-2026-53016} - RAS/AMD/ATL: Require PRM support for future systems (Joel Savitz) [RHEL-122804] Resolves: RHEL-100912, RHEL-122804, RHEL-188460, RHEL-188545, RHEL-190343, RHEL-191440, RHEL-193519 Signed-off-by: CKI KWF Bot --- Makefile.rhelver | 2 +- kernel.changelog | 13 +++++++++++++ kernel.spec | 20 ++++++++++++++++---- sources | 6 +++--- 4 files changed, 33 insertions(+), 8 deletions(-) diff --git a/Makefile.rhelver b/Makefile.rhelver index 0fde905fe..4dde5c995 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 9 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 727 +RHEL_RELEASE = 728 # # ZSTREAM diff --git a/kernel.changelog b/kernel.changelog index 6e752f594..ced29ee5c 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,16 @@ +* Thu Jul 23 2026 CKI KWF Bot [5.14.0-728.el9] +- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193519] {CVE-2026-52973} +- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190343] {CVE-2026-53281} +- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190343] +- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191440] {CVE-2026-53185} +- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-100912] +- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-100912] +- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-100912] +- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188545] {CVE-2026-53059} +- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188460] {CVE-2026-53016} +- RAS/AMD/ATL: Require PRM support for future systems (Joel Savitz) [RHEL-122804] +Resolves: RHEL-100912, RHEL-122804, RHEL-188460, RHEL-188545, RHEL-190343, RHEL-191440, RHEL-193519 + * Tue Jul 21 2026 CKI KWF Bot [5.14.0-727.el9] - s390/sclp: Allow PCI reports for NVMe SMART data (Jan Polensky) [RHEL-188090] - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-190412] diff --git a/kernel.spec b/kernel.spec index fc2cac059..bd0d8ec29 100644 --- a/kernel.spec +++ b/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 727 +%define pkgrelease 728 %define kversion 5 -%define tarfile_release 5.14.0-727.el9 +%define tarfile_release 5.14.0-728.el9 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 727%{?buildid}%{?dist} +%define specrelease 728%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-727.el9 +%define kabiversion 5.14.0-728.el9 # # End of genspec.sh variables @@ -3753,6 +3753,18 @@ fi # # %changelog +* Thu Jul 23 2026 CKI KWF Bot [5.14.0-728.el9] +- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193519] {CVE-2026-52973} +- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190343] {CVE-2026-53281} +- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190343] +- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191440] {CVE-2026-53185} +- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-100912] +- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-100912] +- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-100912] +- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188545] {CVE-2026-53059} +- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188460] {CVE-2026-53016} +- RAS/AMD/ATL: Require PRM support for future systems (Joel Savitz) [RHEL-122804] + * Tue Jul 21 2026 CKI KWF Bot [5.14.0-727.el9] - s390/sclp: Allow PCI reports for NVMe SMART data (Jan Polensky) [RHEL-188090] - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-190412] diff --git a/sources b/sources index 03fbfb73f..2c2e66c62 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-727.el9.tar.xz) = acc79b74e11c9819f0b11f930cd7ce48dad11e47269fc9b0a3c6dad220904e894bc0e94eaca5a643876108d3ab66eaee08ec1d2829be7731a72735e6076a167a -SHA512 (kernel-abi-stablelists-5.14.0-727.el9.tar.bz2) = 7f6889441f657b68de1a1735019eaa372caca7e949ae7da0bc99483a45bb0fdc75397f2059a5fab94dfa12adc358b587dad80ce1b47e8408efd370378a10e2c5 -SHA512 (kernel-kabi-dw-5.14.0-727.el9.tar.bz2) = 399345c4001889d9812b091f62746b03426592864b9200894a4d7b419040a36bc593504235f60a544dfc7635affa18a21c12140a83ff71b752f1bc8213803322 +SHA512 (linux-5.14.0-728.el9.tar.xz) = e763d560a8822f5cd755d63271be49f2382fda14ce4e1f148f7e9d0e060a7fe19147c06e1a824864045fbba14a3b43daffe722253bc8b2ce9b6bd10ea0271490 +SHA512 (kernel-abi-stablelists-5.14.0-728.el9.tar.bz2) = bd42966bf269b77bd721159516ac7f97a058b291d775d75533a5412f8eae0aff727f2d187a3e7c3ec48e45f1763b91a972717152a9630c6568318eeef6015818 +SHA512 (kernel-kabi-dw-5.14.0-728.el9.tar.bz2) = d4029d7674ef2decef6d08bb6e09814464b33ffdc52f1cc8dbaeafbd2d83a16463feab06f677da9c059a4aeaa4ab035435dc9b51ea45a71bc3a89b690c5d0b42