kernel-5.14.0-40.el9

* Mon Jan 10 2022 Herton R. Krzesinski <herton@redhat.com> [5.14.0-40.el9]
- cpu/hotplug: Remove deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
- livepatch: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
- coresight: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
- hwmon: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
- tracing: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
- padata: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
- crypto: virtio - Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
- platform/x86: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
- powerpc: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
- x86/mce/inject: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
- x86/microcode: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
- x86/mtrr: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
- x86/mmiotrace: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
- workqueue: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
- net/iucv: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
- s390/sclp: replace deprecated CPU-hotplug functions (Prarit Bhargava) [2023079]
- s390: replace deprecated CPU-hotplug functions (Prarit Bhargava) [2023079]
- net: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
- virtio_net: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
- ACPI: processor: Replace deprecated CPU-hotplug functions (Prarit Bhargava) [2023079]
- PM: sleep: s2idle: Replace deprecated CPU-hotplug functions (Prarit Bhargava) [2023079]
- cpufreq: Replace deprecated CPU-hotplug functions (Prarit Bhargava) [2023079]
- powercap: intel_rapl: Replace deprecated CPU-hotplug functions (Prarit Bhargava) [2023079]
- sgi-xpc: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
- Input: i8042 - Add quirk for Fujitsu Lifebook T725 (Neal Gompa) [2019937]
- sctp: remove unreachable code from sctp_sf_violation_chunk() (Xin Long) [2024909]
- sctp: return true only for pathmtu update in sctp_transport_pl_toobig (Xin Long) [2024909]
- sctp: subtract sctphdr len in sctp_transport_pl_hlen (Xin Long) [2024909]
- sctp: reset probe_timer in sctp_transport_pl_update (Xin Long) [2024909]
- sctp: allow IP fragmentation when PLPMTUD enters Error state (Xin Long) [2024909]
- sctp: fix transport encap_port update in sctp_vtag_verify (Xin Long) [2024909]
- sctp: account stream padding length for reconf chunk (Xin Long) [2024909]
- sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb (Xin Long) [2024909]
- sctp: add vtag check in sctp_sf_ootb (Xin Long) [2003494] {CVE-2021-3772}
- sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (Xin Long) [2003494] {CVE-2021-3772}
- sctp: add vtag check in sctp_sf_violation (Xin Long) [2003494] {CVE-2021-3772}
- sctp: fix the processing for COOKIE_ECHO chunk (Xin Long) [2003494] {CVE-2021-3772}
- sctp: fix the processing for INIT_ACK chunk (Xin Long) [2003494] {CVE-2021-3772}
- sctp: fix the processing for INIT chunk (Xin Long) [2003494] {CVE-2021-3772}
- sctp: use init_tag from inithdr for ABORT chunk (Xin Long) [2003494] {CVE-2021-3772}
- drm/nouveau: clean up all clients on device removal (Karol Herbst) [1911185] {CVE-2020-27820}
- drm/nouveau: Add a dedicated mutex for the clients list (Karol Herbst) [1911185] {CVE-2020-27820}
- drm/nouveau: use drm_dev_unplug() during device removal (Karol Herbst) [1911185] {CVE-2020-27820}
- redhat/configs: NFS: disable UDP, insecure enctypes (Benjamin Coddington) [1952863]
Resolves: rhbz#1911185, rhbz#1952863, rhbz#2003494, rhbz#2019937, rhbz#2023079, rhbz#2024909

Signed-off-by: Herton R. Krzesinski <herton@redhat.com>

Makefile.rhelver

@@ -12,7 +12,7 @@ RHEL_MINOR = 0
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 39
+RHEL_RELEASE = 40
 
 #
 # Early y+1 numbering

kernel-aarch64-debug-rhel.config

@@ -3817,7 +3817,7 @@ CONFIG_NFS_COMMON=y
 CONFIG_NFS_DEBUG=y
 CONFIG_NFSD_FAULT_INJECTION=y
 # CONFIG_NFSD_FLEXFILELAYOUT is not set
-# CONFIG_NFS_DISABLE_UDP_SUPPORT is not set
+CONFIG_NFS_DISABLE_UDP_SUPPORT=y
 CONFIG_NFSD=m
 CONFIG_NFSD_PNFS=y
 CONFIG_NFSD_SCSILAYOUT=y
@@ -5969,7 +5969,7 @@ CONFIG_STRIP_ASM_SYMS=y
 # CONFIG_SUN50I_IOMMU is not set
 # CONFIG_SUN_PARTITION is not set
 CONFIG_SUNRPC_DEBUG=y
-# CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES is not set
+CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES=y
 CONFIG_SUNRPC_GSS=m
 CONFIG_SUNRPC=m
 CONFIG_SUNRPC_XPRT_RDMA=m

kernel-aarch64-rhel.config

@@ -3797,7 +3797,7 @@ CONFIG_NFS_COMMON=y
 CONFIG_NFS_DEBUG=y
 # CONFIG_NFSD_FAULT_INJECTION is not set
 # CONFIG_NFSD_FLEXFILELAYOUT is not set
-# CONFIG_NFS_DISABLE_UDP_SUPPORT is not set
+CONFIG_NFS_DISABLE_UDP_SUPPORT=y
 CONFIG_NFSD=m
 CONFIG_NFSD_PNFS=y
 CONFIG_NFSD_SCSILAYOUT=y
@@ -5946,7 +5946,7 @@ CONFIG_STRIP_ASM_SYMS=y
 # CONFIG_SUN50I_IOMMU is not set
 # CONFIG_SUN_PARTITION is not set
 CONFIG_SUNRPC_DEBUG=y
-# CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES is not set
+CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES=y
 CONFIG_SUNRPC_GSS=m
 CONFIG_SUNRPC=m
 CONFIG_SUNRPC_XPRT_RDMA=m

kernel-ppc64le-debug-rhel.config

@@ -3625,7 +3625,7 @@ CONFIG_NF_REJECT_IPV6=m
 # CONFIG_NFSD_BLOCKLAYOUT is not set
 CONFIG_NFSD_FAULT_INJECTION=y
 # CONFIG_NFSD_FLEXFILELAYOUT is not set
-# CONFIG_NFS_DISABLE_UDP_SUPPORT is not set
+CONFIG_NFS_DISABLE_UDP_SUPPORT=y
 CONFIG_NFSD=m
 CONFIG_NFSD_PNFS=y
 CONFIG_NFSD_SCSILAYOUT=y
@@ -5731,7 +5731,7 @@ CONFIG_STRIP_ASM_SYMS=y
 # CONFIG_SUN50I_IOMMU is not set
 CONFIG_SUN_PARTITION=y
 CONFIG_SUNRPC_DEBUG=y
-# CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES is not set
+CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES=y
 CONFIG_SUNRPC_GSS=m
 CONFIG_SUNRPC=m
 CONFIG_SUNRPC_XPRT_RDMA=m

kernel-ppc64le-rhel.config

@@ -3608,7 +3608,7 @@ CONFIG_NF_REJECT_IPV6=m
 # CONFIG_NFSD_BLOCKLAYOUT is not set
 # CONFIG_NFSD_FAULT_INJECTION is not set
 # CONFIG_NFSD_FLEXFILELAYOUT is not set
-# CONFIG_NFS_DISABLE_UDP_SUPPORT is not set
+CONFIG_NFS_DISABLE_UDP_SUPPORT=y
 CONFIG_NFSD=m
 CONFIG_NFSD_PNFS=y
 CONFIG_NFSD_SCSILAYOUT=y
@@ -5712,7 +5712,7 @@ CONFIG_STRIP_ASM_SYMS=y
 # CONFIG_SUN50I_IOMMU is not set
 CONFIG_SUN_PARTITION=y
 CONFIG_SUNRPC_DEBUG=y
-# CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES is not set
+CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES=y
 CONFIG_SUNRPC_GSS=m
 CONFIG_SUNRPC=m
 CONFIG_SUNRPC_XPRT_RDMA=m

kernel-s390x-debug-rhel.config

@@ -3605,7 +3605,7 @@ CONFIG_NF_REJECT_IPV6=m
 # CONFIG_NFSD_BLOCKLAYOUT is not set
 CONFIG_NFSD_FAULT_INJECTION=y
 # CONFIG_NFSD_FLEXFILELAYOUT is not set
-# CONFIG_NFS_DISABLE_UDP_SUPPORT is not set
+CONFIG_NFS_DISABLE_UDP_SUPPORT=y
 CONFIG_NFSD=m
 CONFIG_NFSD_PNFS=y
 CONFIG_NFSD_SCSILAYOUT=y
@@ -5679,7 +5679,7 @@ CONFIG_STRIP_ASM_SYMS=y
 # CONFIG_SUN50I_IOMMU is not set
 # CONFIG_SUN_PARTITION is not set
 CONFIG_SUNRPC_DEBUG=y
-# CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES is not set
+CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES=y
 CONFIG_SUNRPC_GSS=m
 CONFIG_SUNRPC=m
 CONFIG_SUNRPC_XPRT_RDMA=m

kernel-s390x-rhel.config

@@ -3588,7 +3588,7 @@ CONFIG_NF_REJECT_IPV6=m
 # CONFIG_NFSD_BLOCKLAYOUT is not set
 # CONFIG_NFSD_FAULT_INJECTION is not set
 # CONFIG_NFSD_FLEXFILELAYOUT is not set
-# CONFIG_NFS_DISABLE_UDP_SUPPORT is not set
+CONFIG_NFS_DISABLE_UDP_SUPPORT=y
 CONFIG_NFSD=m
 CONFIG_NFSD_PNFS=y
 CONFIG_NFSD_SCSILAYOUT=y
@@ -5660,7 +5660,7 @@ CONFIG_STRIP_ASM_SYMS=y
 # CONFIG_SUN50I_IOMMU is not set
 # CONFIG_SUN_PARTITION is not set
 CONFIG_SUNRPC_DEBUG=y
-# CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES is not set
+CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES=y
 CONFIG_SUNRPC_GSS=m
 CONFIG_SUNRPC=m
 CONFIG_SUNRPC_XPRT_RDMA=m

kernel-s390x-zfcpdump-rhel.config

@@ -3610,7 +3610,7 @@ CONFIG_NF_REJECT_IPV6=m
 # CONFIG_NFSD_BLOCKLAYOUT is not set
 # CONFIG_NFSD_FAULT_INJECTION is not set
 # CONFIG_NFSD_FLEXFILELAYOUT is not set
-# CONFIG_NFS_DISABLE_UDP_SUPPORT is not set
+CONFIG_NFS_DISABLE_UDP_SUPPORT=y
 CONFIG_NFSD=m
 CONFIG_NFSD_PNFS=y
 CONFIG_NFSD_SCSILAYOUT=y
@@ -5691,7 +5691,7 @@ CONFIG_STRIP_ASM_SYMS=y
 # CONFIG_SUN50I_IOMMU is not set
 # CONFIG_SUN_PARTITION is not set
 CONFIG_SUNRPC_DEBUG=y
-# CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES is not set
+CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES=y
 CONFIG_SUNRPC_GSS=m
 CONFIG_SUNRPC=m
 CONFIG_SUNRPC_XPRT_RDMA=m

kernel-x86_64-debug-rhel.config

@@ -3811,7 +3811,7 @@ CONFIG_NF_REJECT_IPV6=m
 # CONFIG_NFSD_BLOCKLAYOUT is not set
 CONFIG_NFSD_FAULT_INJECTION=y
 # CONFIG_NFSD_FLEXFILELAYOUT is not set
-# CONFIG_NFS_DISABLE_UDP_SUPPORT is not set
+CONFIG_NFS_DISABLE_UDP_SUPPORT=y
 CONFIG_NFSD=m
 CONFIG_NFSD_PNFS=y
 CONFIG_NFSD_SCSILAYOUT=y
@@ -5923,7 +5923,7 @@ CONFIG_STRIP_ASM_SYMS=y
 # CONFIG_SUNDANCE is not set
 CONFIG_SUN_PARTITION=y
 CONFIG_SUNRPC_DEBUG=y
-# CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES is not set
+CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES=y
 CONFIG_SUNRPC_GSS=m
 CONFIG_SUNRPC=m
 CONFIG_SUNRPC_XPRT_RDMA=m

kernel-x86_64-rhel.config

@@ -3792,7 +3792,7 @@ CONFIG_NF_REJECT_IPV6=m
 # CONFIG_NFSD_BLOCKLAYOUT is not set
 # CONFIG_NFSD_FAULT_INJECTION is not set
 # CONFIG_NFSD_FLEXFILELAYOUT is not set
-# CONFIG_NFS_DISABLE_UDP_SUPPORT is not set
+CONFIG_NFS_DISABLE_UDP_SUPPORT=y
 CONFIG_NFSD=m
 CONFIG_NFSD_PNFS=y
 CONFIG_NFSD_SCSILAYOUT=y
@@ -5901,7 +5901,7 @@ CONFIG_STRIP_ASM_SYMS=y
 # CONFIG_SUNDANCE is not set
 CONFIG_SUN_PARTITION=y
 CONFIG_SUNRPC_DEBUG=y
-# CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES is not set
+CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES=y
 CONFIG_SUNRPC_GSS=m
 CONFIG_SUNRPC=m
 CONFIG_SUNRPC_XPRT_RDMA=m

kernel.spec

@@ -85,7 +85,7 @@ Summary: The Linux kernel
 #  the --with-release option overrides this setting.)
 %define debugbuildsenabled 1
 
-%global distro_build 39
+%global distro_build 40
 
 %if 0%{?fedora}
 %define secure_boot_arch x86_64
@@ -129,13 +129,13 @@ Summary: The Linux kernel
 %define kversion 5.14
 
 %define rpmversion 5.14.0
-%define pkgrelease 39.el9
+%define pkgrelease 40.el9
 
 # This is needed to do merge window version magic
 %define patchlevel 14
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 39%{?buildid}%{?dist}
+%define specrelease 40%{?buildid}%{?dist}
 
 %define pkg_release %{specrelease}
 
@@ -677,7 +677,7 @@ BuildRequires: lld
 # exact git commit you can run
 #
 # xzcat -qq ${TARBALL} | git get-tar-commit-id
-Source0: linux-5.14.0-39.el9.tar.xz
+Source0: linux-5.14.0-40.el9.tar.xz
 
 Source1: Makefile.rhelver
 
@@ -1362,8 +1362,8 @@ ApplyOptionalPatch()
   fi
 }
 
-%setup -q -n kernel-5.14.0-39.el9 -c
-mv linux-5.14.0-39.el9 linux-%{KVERREL}
+%setup -q -n kernel-5.14.0-40.el9 -c
+mv linux-5.14.0-40.el9 linux-%{KVERREL}
 
 cd linux-%{KVERREL}
 cp -a %{SOURCE1} .
@@ -2952,6 +2952,52 @@ fi
 #
 #
 %changelog
+* Mon Jan 10 2022 Herton R. Krzesinski <herton@redhat.com> [5.14.0-40.el9]
+- cpu/hotplug: Remove deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
+- livepatch: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
+- coresight: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
+- hwmon: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
+- tracing: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
+- padata: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
+- crypto: virtio - Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
+- platform/x86: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
+- powerpc: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
+- x86/mce/inject: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
+- x86/microcode: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
+- x86/mtrr: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
+- x86/mmiotrace: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
+- workqueue: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
+- net/iucv: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
+- s390/sclp: replace deprecated CPU-hotplug functions (Prarit Bhargava) [2023079]
+- s390: replace deprecated CPU-hotplug functions (Prarit Bhargava) [2023079]
+- net: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
+- virtio_net: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
+- ACPI: processor: Replace deprecated CPU-hotplug functions (Prarit Bhargava) [2023079]
+- PM: sleep: s2idle: Replace deprecated CPU-hotplug functions (Prarit Bhargava) [2023079]
+- cpufreq: Replace deprecated CPU-hotplug functions (Prarit Bhargava) [2023079]
+- powercap: intel_rapl: Replace deprecated CPU-hotplug functions (Prarit Bhargava) [2023079]
+- sgi-xpc: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
+- Input: i8042 - Add quirk for Fujitsu Lifebook T725 (Neal Gompa) [2019937]
+- sctp: remove unreachable code from sctp_sf_violation_chunk() (Xin Long) [2024909]
+- sctp: return true only for pathmtu update in sctp_transport_pl_toobig (Xin Long) [2024909]
+- sctp: subtract sctphdr len in sctp_transport_pl_hlen (Xin Long) [2024909]
+- sctp: reset probe_timer in sctp_transport_pl_update (Xin Long) [2024909]
+- sctp: allow IP fragmentation when PLPMTUD enters Error state (Xin Long) [2024909]
+- sctp: fix transport encap_port update in sctp_vtag_verify (Xin Long) [2024909]
+- sctp: account stream padding length for reconf chunk (Xin Long) [2024909]
+- sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb (Xin Long) [2024909]
+- sctp: add vtag check in sctp_sf_ootb (Xin Long) [2003494] {CVE-2021-3772}
+- sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (Xin Long) [2003494] {CVE-2021-3772}
+- sctp: add vtag check in sctp_sf_violation (Xin Long) [2003494] {CVE-2021-3772}
+- sctp: fix the processing for COOKIE_ECHO chunk (Xin Long) [2003494] {CVE-2021-3772}
+- sctp: fix the processing for INIT_ACK chunk (Xin Long) [2003494] {CVE-2021-3772}
+- sctp: fix the processing for INIT chunk (Xin Long) [2003494] {CVE-2021-3772}
+- sctp: use init_tag from inithdr for ABORT chunk (Xin Long) [2003494] {CVE-2021-3772}
+- drm/nouveau: clean up all clients on device removal (Karol Herbst) [1911185] {CVE-2020-27820}
+- drm/nouveau: Add a dedicated mutex for the clients list (Karol Herbst) [1911185] {CVE-2020-27820}
+- drm/nouveau: use drm_dev_unplug() during device removal (Karol Herbst) [1911185] {CVE-2020-27820}
+- redhat/configs: NFS: disable UDP, insecure enctypes (Benjamin Coddington) [1952863]
+
 * Fri Dec 24 2021 Herton R. Krzesinski <herton@redhat.com> [5.14.0-39.el9]
 - cpuidle: pseries: Do not cap the CEDE0 latency in fixup_cede0_latency() (Gustavo Walbon) [2029870]
 - cpuidle: pseries: Fixup CEDE0 latency only for POWER10 onwards (Gustavo Walbon) [2029870]

sources

@@ -1,3 +1,3 @@
-SHA512 (linux-5.14.0-39.el9.tar.xz) = 105680ebeb099180cbb580cfbfddbb1b91b526cb7b9d5610d6e97d51066c0f636eeaa5d9a129efe740ddc99c6426e155779a8d1fbe48c6ca1dc12f9e78d5eed1
-SHA512 (kernel-abi-stablelists-5.14.0-39.tar.bz2) = c3ef62fc2d5c3fdfb66db2fcd55f1ea8b12852292bfeccc435c21c6a22ad320dcf753b60814bde35f7adda5e3b634dfd67a553475dd86d3e5c643edff762401d
-SHA512 (kernel-kabi-dw-5.14.0-39.tar.bz2) = 6e5779cf483b8f32bc659a9faab9f17941517abb174a616342f75d12c82cafc4357087304c048b1ea5f2145972e856eb4e8537e358551b04362b09bfea51b354
+SHA512 (linux-5.14.0-40.el9.tar.xz) = 1f9ff10f2912339ffa12c86b40d559ebe3356adeae453ab6a7b2312591e8275b77c4af0b13e0bce04b4f0305ae50c370783bb5653b9632a22235c97e36709a33
+SHA512 (kernel-abi-stablelists-5.14.0-40.tar.bz2) = c521fc525691f7762180679a2d891a81287d2ca9c391f1de965dd4da16d83aeee19fcfb72607e45074c835cb0b65a34f63682ed95f82d9e481120c0b311815e2
+SHA512 (kernel-kabi-dw-5.14.0-40.tar.bz2) = bafcc6feaca7eb36e872e1f5f8c3bdd6f6471865c84d1d60c6a1aaa311b356890b9d8cd5a5898e04711c50b9ce726c5bdfe8f5c1a75e251632db29761a228d61