From c08e4e0386eb56139ad8b20ef31659e389b87487 Mon Sep 17 00:00:00 2001 From: CKI KWF Bot Date: Wed, 22 Jul 2026 01:17:16 +0000 Subject: [PATCH] kernel-5.14.0-727.el9 * Tue Jul 21 2026 CKI KWF Bot [5.14.0-727.el9] - s390/sclp: Allow PCI reports for NVMe SMART data (Jan Polensky) [RHEL-188090] - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-190412] - vsock: initialize child_ns_mode_locked in vsock_net_init() (Stefano Garzarella) [RHEL-155389] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Jan Polensky) [RHEL-190426] - s390/pkey: Check length in pkey_pckmo handler implementation (Jan Polensky) [RHEL-190425] - x86/mce: Restore MCA polling interval halving (David Arcari) [RHEL-208634] - powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() (David Arcari) [RHEL-192478] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179295] {CVE-2026-46099} - cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E (Mark Langsdorf) [RHEL-185961] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189960] {CVE-2026-22979} - Bluetooth: btintel_pcie: Fix incorrect MAC access programming (David Marlin) [RHEL-117330] - Bluetooth: btintel_pcie: treat boot stage bit 12 as warning (David Marlin) [RHEL-117330] - Bluetooth: btintel_pcie: use strscpy to copy plain strings (David Marlin) [RHEL-117330] - Bluetooth: btintel_pcie: Align shared DMA memory to 128 bytes (David Marlin) [RHEL-117330] - Bluetooth: btintel_pci: Fix btintel_pcie_read_hwexp code style (David Marlin) [RHEL-117330] - Bluetooth: btintel_pcie: Add device id of Scorpious2, Nova Lake-PCD-S (David Marlin) [RHEL-117330] - Bluetooth: btintel_pcie: Add device id of Scorpius Peak2, Nova Lake-PCD-H (David Marlin) [RHEL-117330] - Bluetooth: btintel_pcie: Add support for exception dump for ScP2F (David Marlin) [RHEL-117330] - Bluetooth: btintel: Add support for Scorpious Peak2F support (David Marlin) [RHEL-117330] - Bluetooth: btintel_pcie: Add support for exception dump for ScP2 (David Marlin) [RHEL-117330] - Bluetooth: btintel: Add DSBR support for ScP2 onwards (David Marlin) [RHEL-117330] - Bluetooth: btintel: Add support for Scorpious Peak2 support (David Marlin) [RHEL-117330] - Bluetooth: btintel: Replace CNVi id with hardware variant (David Marlin) [RHEL-117330] - Bluetooth: btintel: Add support for hybrid signature for ScP2 onwards (David Marlin) [RHEL-117330] - Bluetooth: btintel_pcie: Replace snprintf("%%s") with strscpy (David Marlin) [RHEL-117330] - x86/microcode: Add platform mask to Intel microcode "old" list (Luis Claudio R. Goncalves) [RHEL-184789] - x86/cpu: Add platform ID to CPU matching structure (Luis Claudio R. Goncalves) [RHEL-184789] - x86/cpu: Add platform ID to CPU info structure (Luis Claudio R. Goncalves) [RHEL-184789] - x86/microcode: Refactor platform ID enumeration into a helper (Luis Claudio R. Goncalves) [RHEL-184789] - x86/cpu/intel: Replace early Family 6 checks with VFM ones (Luis Claudio R. Goncalves) [RHEL-184789] - x86/mtrr: Modify a x86_model check to an Intel VFM check (Luis Claudio R. Goncalves) [RHEL-184789] - x86/microcode: Update the Intel processor flag scan check (Luis Claudio R. Goncalves) [RHEL-184789] - x86/cpu/intel: Fix the MOVSL alignment preference for extended Families (Luis Claudio R. Goncalves) [RHEL-184789] - x86/apic: Fix 32-bit APIC initialization for extended Intel Families (Luis Claudio R. Goncalves) [RHEL-184789] - ceph: fix NULL pointer dereference in ceph_mds_auth_match() (Alex Markuze) [RHEL-180666] - ceph: fix multifs mds auth caps issue (Alex Markuze) [RHEL-180666] - ceph: fix memory leak in ceph_mds_auth_match() (Alex Markuze) [RHEL-180666] - ceph: fix cred leak in ceph_mds_check_access() (Alex Markuze) [RHEL-180666] - ceph: pass cred pointer to ceph_mds_auth_match() (Alex Markuze) [RHEL-180666] - ceph: fix a memory leak on cap_auths in MDS client (Alex Markuze) [RHEL-180666] - doc: ceph: update userspace command to get CephFS metadata (Alex Markuze) [RHEL-180666] - ceph: add CEPHFS_FEATURE_MDS_AUTH_CAPS_CHECK feature bit (Alex Markuze) [RHEL-180666] - ceph: check the cephx mds auth access for async dirop (Alex Markuze) [RHEL-180666] - ceph: check the cephx mds auth access for open (Alex Markuze) [RHEL-180666] - ceph: check the cephx mds auth access for setattr (Alex Markuze) [RHEL-180666] - ceph: add ceph_mds_check_access() helper (Alex Markuze) [RHEL-180666] - ceph: save cap_auths in MDS client when session is opened (Alex Markuze) [RHEL-180666] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180065] {CVE-2026-46150} - efi: Allow to expose the workqueue via sysfs (Luis Claudio R. Goncalves) [RHEL-175657] - workqueue: Allow to expose ordered workqueues via sysfs (Luis Claudio R. Goncalves) [RHEL-175657] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168069] {CVE-2026-31419} - net: add proper RCU protection to /proc/net/ptype (Paolo Abeni) [RHEL-152699] - net: sock: fix hardened usercopy panic in sock_recv_errqueue (Paolo Abeni) [RHEL-152699] Resolves: RHEL-117330, RHEL-152699, RHEL-155389, RHEL-168069, RHEL-175657, RHEL-179295, RHEL-180065, RHEL-180666, RHEL-184789, RHEL-185961, RHEL-188090, RHEL-189960, RHEL-190412, RHEL-190425, RHEL-190426, RHEL-192478, RHEL-208634 Signed-off-by: CKI KWF Bot --- Makefile.rhelver | 2 +- kernel.changelog | 56 ++++++++++++++++++++++++++++++++++++++++++ kernel.spec | 63 +++++++++++++++++++++++++++++++++++++++++++++--- sources | 6 ++--- 4 files changed, 119 insertions(+), 8 deletions(-) diff --git a/Makefile.rhelver b/Makefile.rhelver index 1f96a7125..0fde905fe 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 9 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 726 +RHEL_RELEASE = 727 # # ZSTREAM diff --git a/kernel.changelog b/kernel.changelog index 46dbcf3c4..6e752f594 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,59 @@ +* Tue Jul 21 2026 CKI KWF Bot [5.14.0-727.el9] +- s390/sclp: Allow PCI reports for NVMe SMART data (Jan Polensky) [RHEL-188090] +- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-190412] +- vsock: initialize child_ns_mode_locked in vsock_net_init() (Stefano Garzarella) [RHEL-155389] +- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Jan Polensky) [RHEL-190426] +- s390/pkey: Check length in pkey_pckmo handler implementation (Jan Polensky) [RHEL-190425] +- x86/mce: Restore MCA polling interval halving (David Arcari) [RHEL-208634] +- powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() (David Arcari) [RHEL-192478] +- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179295] {CVE-2026-46099} +- cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E (Mark Langsdorf) [RHEL-185961] +- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189960] {CVE-2026-22979} +- Bluetooth: btintel_pcie: Fix incorrect MAC access programming (David Marlin) [RHEL-117330] +- Bluetooth: btintel_pcie: treat boot stage bit 12 as warning (David Marlin) [RHEL-117330] +- Bluetooth: btintel_pcie: use strscpy to copy plain strings (David Marlin) [RHEL-117330] +- Bluetooth: btintel_pcie: Align shared DMA memory to 128 bytes (David Marlin) [RHEL-117330] +- Bluetooth: btintel_pci: Fix btintel_pcie_read_hwexp code style (David Marlin) [RHEL-117330] +- Bluetooth: btintel_pcie: Add device id of Scorpious2, Nova Lake-PCD-S (David Marlin) [RHEL-117330] +- Bluetooth: btintel_pcie: Add device id of Scorpius Peak2, Nova Lake-PCD-H (David Marlin) [RHEL-117330] +- Bluetooth: btintel_pcie: Add support for exception dump for ScP2F (David Marlin) [RHEL-117330] +- Bluetooth: btintel: Add support for Scorpious Peak2F support (David Marlin) [RHEL-117330] +- Bluetooth: btintel_pcie: Add support for exception dump for ScP2 (David Marlin) [RHEL-117330] +- Bluetooth: btintel: Add DSBR support for ScP2 onwards (David Marlin) [RHEL-117330] +- Bluetooth: btintel: Add support for Scorpious Peak2 support (David Marlin) [RHEL-117330] +- Bluetooth: btintel: Replace CNVi id with hardware variant (David Marlin) [RHEL-117330] +- Bluetooth: btintel: Add support for hybrid signature for ScP2 onwards (David Marlin) [RHEL-117330] +- Bluetooth: btintel_pcie: Replace snprintf("%%s") with strscpy (David Marlin) [RHEL-117330] +- x86/microcode: Add platform mask to Intel microcode "old" list (Luis Claudio R. Goncalves) [RHEL-184789] +- x86/cpu: Add platform ID to CPU matching structure (Luis Claudio R. Goncalves) [RHEL-184789] +- x86/cpu: Add platform ID to CPU info structure (Luis Claudio R. Goncalves) [RHEL-184789] +- x86/microcode: Refactor platform ID enumeration into a helper (Luis Claudio R. Goncalves) [RHEL-184789] +- x86/cpu/intel: Replace early Family 6 checks with VFM ones (Luis Claudio R. Goncalves) [RHEL-184789] +- x86/mtrr: Modify a x86_model check to an Intel VFM check (Luis Claudio R. Goncalves) [RHEL-184789] +- x86/microcode: Update the Intel processor flag scan check (Luis Claudio R. Goncalves) [RHEL-184789] +- x86/cpu/intel: Fix the MOVSL alignment preference for extended Families (Luis Claudio R. Goncalves) [RHEL-184789] +- x86/apic: Fix 32-bit APIC initialization for extended Intel Families (Luis Claudio R. Goncalves) [RHEL-184789] +- ceph: fix NULL pointer dereference in ceph_mds_auth_match() (Alex Markuze) [RHEL-180666] +- ceph: fix multifs mds auth caps issue (Alex Markuze) [RHEL-180666] +- ceph: fix memory leak in ceph_mds_auth_match() (Alex Markuze) [RHEL-180666] +- ceph: fix cred leak in ceph_mds_check_access() (Alex Markuze) [RHEL-180666] +- ceph: pass cred pointer to ceph_mds_auth_match() (Alex Markuze) [RHEL-180666] +- ceph: fix a memory leak on cap_auths in MDS client (Alex Markuze) [RHEL-180666] +- doc: ceph: update userspace command to get CephFS metadata (Alex Markuze) [RHEL-180666] +- ceph: add CEPHFS_FEATURE_MDS_AUTH_CAPS_CHECK feature bit (Alex Markuze) [RHEL-180666] +- ceph: check the cephx mds auth access for async dirop (Alex Markuze) [RHEL-180666] +- ceph: check the cephx mds auth access for open (Alex Markuze) [RHEL-180666] +- ceph: check the cephx mds auth access for setattr (Alex Markuze) [RHEL-180666] +- ceph: add ceph_mds_check_access() helper (Alex Markuze) [RHEL-180666] +- ceph: save cap_auths in MDS client when session is opened (Alex Markuze) [RHEL-180666] +- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180065] {CVE-2026-46150} +- efi: Allow to expose the workqueue via sysfs (Luis Claudio R. Goncalves) [RHEL-175657] +- workqueue: Allow to expose ordered workqueues via sysfs (Luis Claudio R. Goncalves) [RHEL-175657] +- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168069] {CVE-2026-31419} +- net: add proper RCU protection to /proc/net/ptype (Paolo Abeni) [RHEL-152699] +- net: sock: fix hardened usercopy panic in sock_recv_errqueue (Paolo Abeni) [RHEL-152699] +Resolves: RHEL-117330, RHEL-152699, RHEL-155389, RHEL-168069, RHEL-175657, RHEL-179295, RHEL-180065, RHEL-180666, RHEL-184789, RHEL-185961, RHEL-188090, RHEL-189960, RHEL-190412, RHEL-190425, RHEL-190426, RHEL-192478, RHEL-208634 + * Thu Jul 16 2026 CKI KWF Bot [5.14.0-726.el9] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189954] {CVE-2025-71147} - nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks (Maurizio Lombardi) [RHEL-177561] diff --git a/kernel.spec b/kernel.spec index 57fbb36f0..fc2cac059 100644 --- a/kernel.spec +++ b/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 726 +%define pkgrelease 727 %define kversion 5 -%define tarfile_release 5.14.0-726.el9 +%define tarfile_release 5.14.0-727.el9 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 726%{?buildid}%{?dist} +%define specrelease 727%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-726.el9 +%define kabiversion 5.14.0-727.el9 # # End of genspec.sh variables @@ -3753,6 +3753,61 @@ fi # # %changelog +* Tue Jul 21 2026 CKI KWF Bot [5.14.0-727.el9] +- s390/sclp: Allow PCI reports for NVMe SMART data (Jan Polensky) [RHEL-188090] +- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-190412] +- vsock: initialize child_ns_mode_locked in vsock_net_init() (Stefano Garzarella) [RHEL-155389] +- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Jan Polensky) [RHEL-190426] +- s390/pkey: Check length in pkey_pckmo handler implementation (Jan Polensky) [RHEL-190425] +- x86/mce: Restore MCA polling interval halving (David Arcari) [RHEL-208634] +- powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() (David Arcari) [RHEL-192478] +- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179295] {CVE-2026-46099} +- cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E (Mark Langsdorf) [RHEL-185961] +- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189960] {CVE-2026-22979} +- Bluetooth: btintel_pcie: Fix incorrect MAC access programming (David Marlin) [RHEL-117330] +- Bluetooth: btintel_pcie: treat boot stage bit 12 as warning (David Marlin) [RHEL-117330] +- Bluetooth: btintel_pcie: use strscpy to copy plain strings (David Marlin) [RHEL-117330] +- Bluetooth: btintel_pcie: Align shared DMA memory to 128 bytes (David Marlin) [RHEL-117330] +- Bluetooth: btintel_pci: Fix btintel_pcie_read_hwexp code style (David Marlin) [RHEL-117330] +- Bluetooth: btintel_pcie: Add device id of Scorpious2, Nova Lake-PCD-S (David Marlin) [RHEL-117330] +- Bluetooth: btintel_pcie: Add device id of Scorpius Peak2, Nova Lake-PCD-H (David Marlin) [RHEL-117330] +- Bluetooth: btintel_pcie: Add support for exception dump for ScP2F (David Marlin) [RHEL-117330] +- Bluetooth: btintel: Add support for Scorpious Peak2F support (David Marlin) [RHEL-117330] +- Bluetooth: btintel_pcie: Add support for exception dump for ScP2 (David Marlin) [RHEL-117330] +- Bluetooth: btintel: Add DSBR support for ScP2 onwards (David Marlin) [RHEL-117330] +- Bluetooth: btintel: Add support for Scorpious Peak2 support (David Marlin) [RHEL-117330] +- Bluetooth: btintel: Replace CNVi id with hardware variant (David Marlin) [RHEL-117330] +- Bluetooth: btintel: Add support for hybrid signature for ScP2 onwards (David Marlin) [RHEL-117330] +- Bluetooth: btintel_pcie: Replace snprintf("%%s") with strscpy (David Marlin) [RHEL-117330] +- x86/microcode: Add platform mask to Intel microcode "old" list (Luis Claudio R. Goncalves) [RHEL-184789] +- x86/cpu: Add platform ID to CPU matching structure (Luis Claudio R. Goncalves) [RHEL-184789] +- x86/cpu: Add platform ID to CPU info structure (Luis Claudio R. Goncalves) [RHEL-184789] +- x86/microcode: Refactor platform ID enumeration into a helper (Luis Claudio R. Goncalves) [RHEL-184789] +- x86/cpu/intel: Replace early Family 6 checks with VFM ones (Luis Claudio R. Goncalves) [RHEL-184789] +- x86/mtrr: Modify a x86_model check to an Intel VFM check (Luis Claudio R. Goncalves) [RHEL-184789] +- x86/microcode: Update the Intel processor flag scan check (Luis Claudio R. Goncalves) [RHEL-184789] +- x86/cpu/intel: Fix the MOVSL alignment preference for extended Families (Luis Claudio R. Goncalves) [RHEL-184789] +- x86/apic: Fix 32-bit APIC initialization for extended Intel Families (Luis Claudio R. Goncalves) [RHEL-184789] +- ceph: fix NULL pointer dereference in ceph_mds_auth_match() (Alex Markuze) [RHEL-180666] +- ceph: fix multifs mds auth caps issue (Alex Markuze) [RHEL-180666] +- ceph: fix memory leak in ceph_mds_auth_match() (Alex Markuze) [RHEL-180666] +- ceph: fix cred leak in ceph_mds_check_access() (Alex Markuze) [RHEL-180666] +- ceph: pass cred pointer to ceph_mds_auth_match() (Alex Markuze) [RHEL-180666] +- ceph: fix a memory leak on cap_auths in MDS client (Alex Markuze) [RHEL-180666] +- doc: ceph: update userspace command to get CephFS metadata (Alex Markuze) [RHEL-180666] +- ceph: add CEPHFS_FEATURE_MDS_AUTH_CAPS_CHECK feature bit (Alex Markuze) [RHEL-180666] +- ceph: check the cephx mds auth access for async dirop (Alex Markuze) [RHEL-180666] +- ceph: check the cephx mds auth access for open (Alex Markuze) [RHEL-180666] +- ceph: check the cephx mds auth access for setattr (Alex Markuze) [RHEL-180666] +- ceph: add ceph_mds_check_access() helper (Alex Markuze) [RHEL-180666] +- ceph: save cap_auths in MDS client when session is opened (Alex Markuze) [RHEL-180666] +- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180065] {CVE-2026-46150} +- efi: Allow to expose the workqueue via sysfs (Luis Claudio R. Goncalves) [RHEL-175657] +- workqueue: Allow to expose ordered workqueues via sysfs (Luis Claudio R. Goncalves) [RHEL-175657] +- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168069] {CVE-2026-31419} +- net: add proper RCU protection to /proc/net/ptype (Paolo Abeni) [RHEL-152699] +- net: sock: fix hardened usercopy panic in sock_recv_errqueue (Paolo Abeni) [RHEL-152699] + * Thu Jul 16 2026 CKI KWF Bot [5.14.0-726.el9] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189954] {CVE-2025-71147} - nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks (Maurizio Lombardi) [RHEL-177561] diff --git a/sources b/sources index a5a11d90d..03fbfb73f 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-726.el9.tar.xz) = 9b3f76682f3b1d81b451de14035688822e51869cfce5aab1fd9123411b63daeef76c91d31a1514300047a4b06e538292b72c5c023c9e85a41e966d7cfddaf52e -SHA512 (kernel-abi-stablelists-5.14.0-726.el9.tar.bz2) = 63e9b58f46ff411cca032680e64aa57ea705923faf3985230c0e30b4c29e0a8f9440963f95890f87f792c9a42c5b5d349af3310ce3e3c090787dd26b12c6d9a2 -SHA512 (kernel-kabi-dw-5.14.0-726.el9.tar.bz2) = 3756b0a5a907123fa8d28178d960cfeff9b2b2227420c95a87acb055271b687eae32707e36af2adf3780238b23842fd62b6357ccf89cc6dae20b0022ab5a738c +SHA512 (linux-5.14.0-727.el9.tar.xz) = acc79b74e11c9819f0b11f930cd7ce48dad11e47269fc9b0a3c6dad220904e894bc0e94eaca5a643876108d3ab66eaee08ec1d2829be7731a72735e6076a167a +SHA512 (kernel-abi-stablelists-5.14.0-727.el9.tar.bz2) = 7f6889441f657b68de1a1735019eaa372caca7e949ae7da0bc99483a45bb0fdc75397f2059a5fab94dfa12adc358b587dad80ce1b47e8408efd370378a10e2c5 +SHA512 (kernel-kabi-dw-5.14.0-727.el9.tar.bz2) = 399345c4001889d9812b091f62746b03426592864b9200894a4d7b419040a36bc593504235f60a544dfc7635affa18a21c12140a83ff71b752f1bc8213803322