kernel-5.14.0-665.el9

* Thu Jan 22 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-665.el9] - sched: Fix build for modules using set_tsk_need_resched() (Gabriele Monaco) [RHEL-141542] - sched: Export hidden tracepoints to modules (Gabriele Monaco) [RHEL-141542] - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-138326] - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (Petr Oros) [RHEL-121722] - devlink: Introduce switchdev_inactive eswitch mode (Petr Oros) [RHEL-121722] - devlink: Add new "max_mac_per_vf" generic device param (Petr Oros) [RHEL-121722] - devlink: region: correct port region lookup to use port_ops (Petr Oros) [RHEL-121722] - devlink rate: Remove unnecessary 'static' from a couple places (Petr Oros) [RHEL-121722] - devlink: Add a 'num_doorbells' driverinit param (Petr Oros) [RHEL-121722] - devlink: Add 'total_vfs' generic device param (Petr Oros) [RHEL-121722] - devlink: Make health reporter burst period configurable (Petr Oros) [RHEL-121722] - devlink: Introduce burst period for health reporter (Petr Oros) [RHEL-121722] - devlink: Move health reporter recovery abort logic to a separate function (Petr Oros) [RHEL-121722] - devlink: Move graceful period parameter to reporter ops (Petr Oros) [RHEL-121722] - devlink/port: Check attributes early and constify (Petr Oros) [RHEL-121722] - devlink/port: Simplify return checks (Petr Oros) [RHEL-121722] - netdevsim: add fw_update_flash_chunk_time_ms debugfs knobs (Petr Oros) [RHEL-121722] - devlink: Fix excessive stack usage in rate TC bandwidth parsing (Petr Oros) [RHEL-121722] - selftest: netdevsim: Add devlink rate tc-bw test (Petr Oros) [RHEL-121722] - devlink: Extend devlink rate API with traffic classes bandwidth management (Petr Oros) [RHEL-121722] - netlink: introduce type-checking attribute iteration for nlmsg (Petr Oros) [RHEL-121722] - docs: netdevsim: fixe typo in netdevsim documentation (Petr Oros) [RHEL-121722] - selftests: drv-net: import things in lib one by one (Petr Oros) [RHEL-121722] - documentation: networking: devlink: Fix a typo in devlink-trap.rst (Petr Oros) [RHEL-121722] - devlink: add value check to devlink_info_version_put() (Petr Oros) [RHEL-121722] - x86/bugs: Report correct retbleed mitigation status (Waiman Long) [RHEL-119225] - x86/bugs: Fix reporting of LFENCE retpoline (Waiman Long) [RHEL-119225] - x86/bugs: Fix spectre_v2 forcing (Waiman Long) [RHEL-119225] - x86/bugs: Remove uses of cpu_mitigations_off() (Waiman Long) [RHEL-119225] - x86/bugs: Simplify SSB cmdline parsing (Waiman Long) [RHEL-119225] - x86/bugs: Use early_param() for spectre_v2 (Waiman Long) [RHEL-119225] - x86/bugs: Use early_param() for spectre_v2_user (Waiman Long) [RHEL-119225] - x86/bugs: Add attack vector controls for VMSCAPE (Waiman Long) [RHEL-119225] - x86/bugs: Add attack vector controls for SSB (Waiman Long) [RHEL-119225] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-119225] - x86/bugs: Fix GDS mitigation selecting when mitigation is off (Waiman Long) [RHEL-119225] - x86/bugs: Select best SRSO mitigation (Waiman Long) [RHEL-119225] - x86/bugs: Print enabled attack vectors (Waiman Long) [RHEL-119225] - x86/bugs: Add attack vector controls for TSA (Waiman Long) [RHEL-119225] - x86/pti: Add attack vector controls for PTI (Waiman Long) [RHEL-119225] - x86/bugs: Add attack vector controls for ITS (Waiman Long) [RHEL-119225] - x86/bugs: Add attack vector controls for SRSO (Waiman Long) [RHEL-119225] - x86/bugs: Add attack vector controls for L1TF (Waiman Long) [RHEL-119225] - x86/bugs: Add attack vector controls for spectre_v2 (Waiman Long) [RHEL-119225] - x86/bugs: Add attack vector controls for BHI (Waiman Long) [RHEL-119225] - x86/bugs: Add attack vector controls for spectre_v2_user (Waiman Long) [RHEL-119225] - x86/bugs: Add attack vector controls for retbleed (Waiman Long) [RHEL-119225] - x86/bugs: Add attack vector controls for spectre_v1 (Waiman Long) [RHEL-119225] - x86/bugs: Add attack vector controls for GDS (Waiman Long) [RHEL-119225] - x86/bugs: Add attack vector controls for SRBDS (Waiman Long) [RHEL-119225] - x86/bugs: Add attack vector controls for RFDS (Waiman Long) [RHEL-119225] - x86/bugs: Add attack vector controls for MMIO (Waiman Long) [RHEL-119225] - x86/bugs: Add attack vector controls for TAA (Waiman Long) [RHEL-119225] - x86/bugs: Add attack vector controls for MDS (Waiman Long) [RHEL-119225] - x86/bugs: Define attack vectors relevant for each bug (Waiman Long) [RHEL-119225] - x86/Kconfig: Add arch attack vector support (Waiman Long) [RHEL-119225] - cpu: Define attack vectors (Waiman Long) [RHEL-119225] - Documentation/x86: Document new attack vector controls (Waiman Long) [RHEL-119225] - x86/bugs: Clean up SRSO microcode handling (Waiman Long) [RHEL-119225] - x86/bugs: Use IBPB for retbleed if used by SRSO (Waiman Long) [RHEL-119225] - x86/bugs: Add SRSO_MITIGATION_NOSMT (Waiman Long) [RHEL-119225] - x86/bugs: Allow ITS stuffing in eIBRS+retpoline mode also (Waiman Long) [RHEL-119225] - x86/bugs: Remove its=stuff dependency on retbleed (Waiman Long) [RHEL-119225] - x86/bugs: Introduce cdt_possible() (Waiman Long) [RHEL-119225] - x86/bugs: Use switch/case in its_apply_mitigation() (Waiman Long) [RHEL-119225] - x86/bugs: Avoid warning when overriding return thunk (Waiman Long) [RHEL-119225] - x86/bugs: Simplify the retbleed=stuff checks (Waiman Long) [RHEL-119225] - x86/bugs: Avoid AUTO after the select step in the retbleed mitigation (Waiman Long) [RHEL-119225] - x86/bugs: Fix spectre_v2 mitigation default on Intel (Waiman Long) [RHEL-119225] - x86/bugs: Restructure ITS mitigation (Waiman Long) [RHEL-119225] - x86/bugs: Fix SRSO reporting on Zen1/2 with SMT disabled (Waiman Long) [RHEL-119225] - x86/cpu: Add "Old Microcode" docs to hw-vuln toctree (Waiman Long) [RHEL-119225] - x86/cpu: Help users notice when running old Intel microcode (Waiman Long) [RHEL-119225] - x86/cpufeatures: Shorten X86_FEATURE_CLEAR_BHB_LOOP_ON_VMEXIT (Waiman Long) [RHEL-119225] - x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (Waiman Long) [RHEL-119225] - x86/bugs: Restructure SRSO mitigation (Waiman Long) [RHEL-119225] - x86/bugs: Restructure L1TF mitigation (Waiman Long) [RHEL-119225] - x86/bugs: Restructure SSB mitigation (Waiman Long) [RHEL-119225] - x86/bugs: Restructure spectre_v2 mitigation (Waiman Long) [RHEL-119225] - x86/bugs: Restructure BHI mitigation (Waiman Long) [RHEL-119225] - x86/bugs: Restructure spectre_v2_user mitigation (Waiman Long) [RHEL-119225] - x86/bugs: Restructure retbleed mitigation (Waiman Long) [RHEL-119225] - x86/bugs: Allow retbleed=stuff only on Intel (Waiman Long) [RHEL-119225] - x86/bugs: Restructure spectre_v1 mitigation (Waiman Long) [RHEL-119225] - x86/bugs: Restructure GDS mitigation (Waiman Long) [RHEL-119225] - x86/bugs: Restructure SRBDS mitigation (Waiman Long) [RHEL-119225] - x86/bugs: Remove md_clear_*_mitigation() (Waiman Long) [RHEL-119225] - x86/bugs: Restructure RFDS mitigation (Waiman Long) [RHEL-119225] - x86/bugs: Restructure MMIO mitigation (Waiman Long) [RHEL-119225] - x86/bugs: Restructure TAA mitigation (Waiman Long) [RHEL-119225] - x86/bugs: Restructure MDS mitigation (Waiman Long) [RHEL-119225] - KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions (Waiman Long) [RHEL-119225] - Documentation/x86: Update the naming of CPU features for /proc/cpuinfo (Waiman Long) [RHEL-119225] - redhat/configs: Enable CONFIG_CPU_MITIGATIONS (Waiman Long) [RHEL-119225] - cpu: Ignore "mitigations" kernel parameter if CPU_MITIGATIONS=n (Waiman Long) [RHEL-119225] - cpu: Re-enable CPU mitigations by default for !X86 architectures (Waiman Long) [RHEL-119225] - x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n (Waiman Long) [RHEL-119225] Resolves: RHEL-119225, RHEL-121722, RHEL-138326, RHEL-141542 Signed-off-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>
2026-01-22 11:29:38 +00:00 · 2026-01-22 11:29:38 +00:00 · c37f61650b
commit c37f61650b
parent 25473d0035
21 changed files with 224 additions and 8 deletions
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@ -12,7 +12,7 @@ RHEL_MINOR = 8
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 664
+RHEL_RELEASE = 665

 #
 # ZSTREAM
--- a/kernel-aarch64-64k-debug-rhel.config
+++ b/kernel-aarch64-64k-debug-rhel.config
@ -1003,6 +1003,7 @@ CONFIG_CPU_ISOLATION=y
 CONFIG_CPU_LITTLE_ENDIAN=y
 CONFIG_CPUMASK_KUNIT_TEST=m
 CONFIG_CPUMASK_OFFSTACK=y
+CONFIG_CPU_MITIGATIONS=y
 CONFIG_CPUSETS_V1=y
 CONFIG_CPUSETS=y
 CONFIG_CPU_THERMAL=y
--- a/kernel-aarch64-64k-rhel.config
+++ b/kernel-aarch64-64k-rhel.config
@ -1003,6 +1003,7 @@ CONFIG_CPU_ISOLATION=y
 CONFIG_CPU_LITTLE_ENDIAN=y
 CONFIG_CPUMASK_KUNIT_TEST=m
 # CONFIG_CPUMASK_OFFSTACK is not set
+CONFIG_CPU_MITIGATIONS=y
 CONFIG_CPUSETS_V1=y
 CONFIG_CPUSETS=y
 CONFIG_CPU_THERMAL=y
--- a/kernel-aarch64-debug-rhel.config
+++ b/kernel-aarch64-debug-rhel.config
@ -1001,6 +1001,7 @@ CONFIG_CPU_ISOLATION=y
 CONFIG_CPU_LITTLE_ENDIAN=y
 CONFIG_CPUMASK_KUNIT_TEST=m
 CONFIG_CPUMASK_OFFSTACK=y
+CONFIG_CPU_MITIGATIONS=y
 CONFIG_CPUSETS_V1=y
 CONFIG_CPUSETS=y
 CONFIG_CPU_THERMAL=y
--- a/kernel-aarch64-rhel.config
+++ b/kernel-aarch64-rhel.config
@ -1001,6 +1001,7 @@ CONFIG_CPU_ISOLATION=y
 CONFIG_CPU_LITTLE_ENDIAN=y
 CONFIG_CPUMASK_KUNIT_TEST=m
 # CONFIG_CPUMASK_OFFSTACK is not set
+CONFIG_CPU_MITIGATIONS=y
 CONFIG_CPUSETS_V1=y
 CONFIG_CPUSETS=y
 CONFIG_CPU_THERMAL=y
--- a/kernel-aarch64-rt-64k-debug-rhel.config
+++ b/kernel-aarch64-rt-64k-debug-rhel.config
@ -1016,6 +1016,7 @@ CONFIG_CPU_ISOLATION=y
 CONFIG_CPU_LITTLE_ENDIAN=y
 CONFIG_CPUMASK_KUNIT_TEST=m
 CONFIG_CPUMASK_OFFSTACK=y
+CONFIG_CPU_MITIGATIONS=y
 CONFIG_CPUSETS_V1=y
 CONFIG_CPUSETS=y
 CONFIG_CPU_THERMAL=y
--- a/kernel-aarch64-rt-64k-rhel.config
+++ b/kernel-aarch64-rt-64k-rhel.config
@ -1016,6 +1016,7 @@ CONFIG_CPU_ISOLATION=y
 CONFIG_CPU_LITTLE_ENDIAN=y
 CONFIG_CPUMASK_KUNIT_TEST=m
 # CONFIG_CPUMASK_OFFSTACK is not set
+CONFIG_CPU_MITIGATIONS=y
 CONFIG_CPUSETS_V1=y
 CONFIG_CPUSETS=y
 CONFIG_CPU_THERMAL=y
--- a/kernel-aarch64-rt-debug-rhel.config
+++ b/kernel-aarch64-rt-debug-rhel.config
@ -1014,6 +1014,7 @@ CONFIG_CPU_ISOLATION=y
 CONFIG_CPU_LITTLE_ENDIAN=y
 CONFIG_CPUMASK_KUNIT_TEST=m
 CONFIG_CPUMASK_OFFSTACK=y
+CONFIG_CPU_MITIGATIONS=y
 CONFIG_CPUSETS_V1=y
 CONFIG_CPUSETS=y
 CONFIG_CPU_THERMAL=y
--- a/kernel-aarch64-rt-rhel.config
+++ b/kernel-aarch64-rt-rhel.config
@ -1014,6 +1014,7 @@ CONFIG_CPU_ISOLATION=y
 CONFIG_CPU_LITTLE_ENDIAN=y
 CONFIG_CPUMASK_KUNIT_TEST=m
 # CONFIG_CPUMASK_OFFSTACK is not set
+CONFIG_CPU_MITIGATIONS=y
 CONFIG_CPUSETS_V1=y
 CONFIG_CPUSETS=y
 CONFIG_CPU_THERMAL=y
--- a/kernel-ppc64le-debug-rhel.config
+++ b/kernel-ppc64le-debug-rhel.config
@ -793,6 +793,7 @@ CONFIG_CPU_ISOLATION=y
 CONFIG_CPU_LITTLE_ENDIAN=y
 CONFIG_CPUMASK_KUNIT_TEST=m
 CONFIG_CPUMASK_OFFSTACK=y
+CONFIG_CPU_MITIGATIONS=y
 CONFIG_CPUSETS_V1=y
 CONFIG_CPUSETS=y
 # CONFIG_CPU_THERMAL is not set
--- a/kernel-ppc64le-rhel.config
+++ b/kernel-ppc64le-rhel.config
@ -793,6 +793,7 @@ CONFIG_CPU_ISOLATION=y
 CONFIG_CPU_LITTLE_ENDIAN=y
 CONFIG_CPUMASK_KUNIT_TEST=m
 # CONFIG_CPUMASK_OFFSTACK is not set
+CONFIG_CPU_MITIGATIONS=y
 CONFIG_CPUSETS_V1=y
 CONFIG_CPUSETS=y
 # CONFIG_CPU_THERMAL is not set
--- a/kernel-s390x-debug-rhel.config
+++ b/kernel-s390x-debug-rhel.config
@ -796,6 +796,7 @@ CONFIG_CPU_ISOLATION=y
 CONFIG_CPU_LITTLE_ENDIAN=y
 CONFIG_CPUMASK_KUNIT_TEST=m
 CONFIG_CPUMASK_OFFSTACK=y
+CONFIG_CPU_MITIGATIONS=y
 CONFIG_CPUSETS_V1=y
 CONFIG_CPUSETS=y
 # CONFIG_CPU_THERMAL is not set
--- a/kernel-s390x-rhel.config
+++ b/kernel-s390x-rhel.config
@ -796,6 +796,7 @@ CONFIG_CPU_ISOLATION=y
 CONFIG_CPU_LITTLE_ENDIAN=y
 CONFIG_CPUMASK_KUNIT_TEST=m
 CONFIG_CPUMASK_OFFSTACK=y
+CONFIG_CPU_MITIGATIONS=y
 CONFIG_CPUSETS_V1=y
 CONFIG_CPUSETS=y
 # CONFIG_CPU_THERMAL is not set
--- a/kernel-s390x-zfcpdump-rhel.config
+++ b/kernel-s390x-zfcpdump-rhel.config
@ -800,6 +800,7 @@ CONFIG_CPU_ISOLATION=y
 CONFIG_CPU_LITTLE_ENDIAN=y
 CONFIG_CPUMASK_KUNIT_TEST=m
 CONFIG_CPUMASK_OFFSTACK=y
+CONFIG_CPU_MITIGATIONS=y
 # CONFIG_CPUSETS is not set
 CONFIG_CPUSETS_V1=y
 # CONFIG_CPU_THERMAL is not set
--- a/kernel-x86_64-debug-rhel.config
+++ b/kernel-x86_64-debug-rhel.config
@ -829,6 +829,7 @@ CONFIG_CPU_ISOLATION=y
 CONFIG_CPU_LITTLE_ENDIAN=y
 CONFIG_CPUMASK_KUNIT_TEST=m
 CONFIG_CPUMASK_OFFSTACK=y
+CONFIG_CPU_MITIGATIONS=y
 CONFIG_CPUSETS_V1=y
 CONFIG_CPUSETS=y
 # CONFIG_CPU_THERMAL is not set
--- a/kernel-x86_64-rhel.config
+++ b/kernel-x86_64-rhel.config
@ -829,6 +829,7 @@ CONFIG_CPU_ISOLATION=y
 CONFIG_CPU_LITTLE_ENDIAN=y
 CONFIG_CPUMASK_KUNIT_TEST=m
 CONFIG_CPUMASK_OFFSTACK=y
+CONFIG_CPU_MITIGATIONS=y
 CONFIG_CPUSETS_V1=y
 CONFIG_CPUSETS=y
 # CONFIG_CPU_THERMAL is not set
--- a/kernel-x86_64-rt-debug-rhel.config
+++ b/kernel-x86_64-rt-debug-rhel.config
@ -844,6 +844,7 @@ CONFIG_CPU_ISOLATION=y
 CONFIG_CPU_LITTLE_ENDIAN=y
 CONFIG_CPUMASK_KUNIT_TEST=m
 CONFIG_CPUMASK_OFFSTACK=y
+CONFIG_CPU_MITIGATIONS=y
 CONFIG_CPUSETS_V1=y
 CONFIG_CPUSETS=y
 # CONFIG_CPU_THERMAL is not set
--- a/kernel-x86_64-rt-rhel.config
+++ b/kernel-x86_64-rt-rhel.config
@ -844,6 +844,7 @@ CONFIG_CPU_ISOLATION=y
 CONFIG_CPU_LITTLE_ENDIAN=y
 CONFIG_CPUMASK_KUNIT_TEST=m
 CONFIG_CPUMASK_OFFSTACK=y
+CONFIG_CPU_MITIGATIONS=y
 CONFIG_CPUSETS_V1=y
 CONFIG_CPUSETS=y
 # CONFIG_CPU_THERMAL is not set
--- a/kernel.changelog
+++ b/kernel.changelog
@ -1,3 +1,103 @@
+* Thu Jan 22 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-665.el9]
+- sched: Fix build for modules using set_tsk_need_resched() (Gabriele Monaco) [RHEL-141542]
+- sched: Export hidden tracepoints to modules (Gabriele Monaco) [RHEL-141542]
+- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-138326]
+- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (Petr Oros) [RHEL-121722]
+- devlink: Introduce switchdev_inactive eswitch mode (Petr Oros) [RHEL-121722]
+- devlink: Add new "max_mac_per_vf" generic device param (Petr Oros) [RHEL-121722]
+- devlink: region: correct port region lookup to use port_ops (Petr Oros) [RHEL-121722]
+- devlink rate: Remove unnecessary 'static' from a couple places (Petr Oros) [RHEL-121722]
+- devlink: Add a 'num_doorbells' driverinit param (Petr Oros) [RHEL-121722]
+- devlink: Add 'total_vfs' generic device param (Petr Oros) [RHEL-121722]
+- devlink: Make health reporter burst period configurable (Petr Oros) [RHEL-121722]
+- devlink: Introduce burst period for health reporter (Petr Oros) [RHEL-121722]
+- devlink: Move health reporter recovery abort logic to a separate function (Petr Oros) [RHEL-121722]
+- devlink: Move graceful period parameter to reporter ops (Petr Oros) [RHEL-121722]
+- devlink/port: Check attributes early and constify (Petr Oros) [RHEL-121722]
+- devlink/port: Simplify return checks (Petr Oros) [RHEL-121722]
+- netdevsim: add fw_update_flash_chunk_time_ms debugfs knobs (Petr Oros) [RHEL-121722]
+- devlink: Fix excessive stack usage in rate TC bandwidth parsing (Petr Oros) [RHEL-121722]
+- selftest: netdevsim: Add devlink rate tc-bw test (Petr Oros) [RHEL-121722]
+- devlink: Extend devlink rate API with traffic classes bandwidth management (Petr Oros) [RHEL-121722]
+- netlink: introduce type-checking attribute iteration for nlmsg (Petr Oros) [RHEL-121722]
+- docs: netdevsim: fixe typo in netdevsim documentation (Petr Oros) [RHEL-121722]
+- selftests: drv-net: import things in lib one by one (Petr Oros) [RHEL-121722]
+- documentation: networking: devlink: Fix a typo in devlink-trap.rst (Petr Oros) [RHEL-121722]
+- devlink: add value check to devlink_info_version_put() (Petr Oros) [RHEL-121722]
+- x86/bugs: Report correct retbleed mitigation status (Waiman Long) [RHEL-119225]
+- x86/bugs: Fix reporting of LFENCE retpoline (Waiman Long) [RHEL-119225]
+- x86/bugs: Fix spectre_v2 forcing (Waiman Long) [RHEL-119225]
+- x86/bugs: Remove uses of cpu_mitigations_off() (Waiman Long) [RHEL-119225]
+- x86/bugs: Simplify SSB cmdline parsing (Waiman Long) [RHEL-119225]
+- x86/bugs: Use early_param() for spectre_v2 (Waiman Long) [RHEL-119225]
+- x86/bugs: Use early_param() for spectre_v2_user (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for VMSCAPE (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for SSB (Waiman Long) [RHEL-119225]
+- x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-119225]
+- x86/bugs: Fix GDS mitigation selecting when mitigation is off (Waiman Long) [RHEL-119225]
+- x86/bugs: Select best SRSO mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Print enabled attack vectors (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for TSA (Waiman Long) [RHEL-119225]
+- x86/pti: Add attack vector controls for PTI (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for ITS (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for SRSO (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for L1TF (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for spectre_v2 (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for BHI (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for spectre_v2_user (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for retbleed (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for spectre_v1 (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for GDS (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for SRBDS (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for RFDS (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for MMIO (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for TAA (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for MDS (Waiman Long) [RHEL-119225]
+- x86/bugs: Define attack vectors relevant for each bug (Waiman Long) [RHEL-119225]
+- x86/Kconfig: Add arch attack vector support (Waiman Long) [RHEL-119225]
+- cpu: Define attack vectors (Waiman Long) [RHEL-119225]
+- Documentation/x86: Document new attack vector controls (Waiman Long) [RHEL-119225]
+- x86/bugs: Clean up SRSO microcode handling (Waiman Long) [RHEL-119225]
+- x86/bugs: Use IBPB for retbleed if used by SRSO (Waiman Long) [RHEL-119225]
+- x86/bugs: Add SRSO_MITIGATION_NOSMT (Waiman Long) [RHEL-119225]
+- x86/bugs: Allow ITS stuffing in eIBRS+retpoline mode also (Waiman Long) [RHEL-119225]
+- x86/bugs: Remove its=stuff dependency on retbleed (Waiman Long) [RHEL-119225]
+- x86/bugs: Introduce cdt_possible() (Waiman Long) [RHEL-119225]
+- x86/bugs: Use switch/case in its_apply_mitigation() (Waiman Long) [RHEL-119225]
+- x86/bugs: Avoid warning when overriding return thunk (Waiman Long) [RHEL-119225]
+- x86/bugs: Simplify the retbleed=stuff checks (Waiman Long) [RHEL-119225]
+- x86/bugs: Avoid AUTO after the select step in the retbleed mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Fix spectre_v2 mitigation default on Intel (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure ITS mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Fix SRSO reporting on Zen1/2 with SMT disabled (Waiman Long) [RHEL-119225]
+- x86/cpu: Add "Old Microcode" docs to hw-vuln toctree (Waiman Long) [RHEL-119225]
+- x86/cpu: Help users notice when running old Intel microcode (Waiman Long) [RHEL-119225]
+- x86/cpufeatures: Shorten X86_FEATURE_CLEAR_BHB_LOOP_ON_VMEXIT (Waiman Long) [RHEL-119225]
+- x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure SRSO mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure L1TF mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure SSB mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure spectre_v2 mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure BHI mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure spectre_v2_user mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure retbleed mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Allow retbleed=stuff only on Intel (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure spectre_v1 mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure GDS mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure SRBDS mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Remove md_clear_*_mitigation() (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure RFDS mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure MMIO mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure TAA mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure MDS mitigation (Waiman Long) [RHEL-119225]
+- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions (Waiman Long) [RHEL-119225]
+- Documentation/x86: Update the naming of CPU features for /proc/cpuinfo (Waiman Long) [RHEL-119225]
+- redhat/configs: Enable CONFIG_CPU_MITIGATIONS (Waiman Long) [RHEL-119225]
+- cpu: Ignore "mitigations" kernel parameter if CPU_MITIGATIONS=n (Waiman Long) [RHEL-119225]
+- cpu: Re-enable CPU mitigations by default for !X86 architectures (Waiman Long) [RHEL-119225]
+- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n (Waiman Long) [RHEL-119225]
+Resolves: RHEL-119225, RHEL-121722, RHEL-138326, RHEL-141542
+
 * Wed Jan 21 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-664.el9]
 - nvme: fix PCIe subsystem reset controller state transition (John Meneghini) [RHEL-137435]
 - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling (John Meneghini) [RHEL-137435]
--- a/kernel.spec
+++ b/kernel.spec
@ -176,15 +176,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 664
+%define pkgrelease 665
 %define kversion 5
-%define tarfile_release 5.14.0-664.el9
+%define tarfile_release 5.14.0-665.el9
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 664%{?buildid}%{?dist}
+%define specrelease 665%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-664.el9
+%define kabiversion 5.14.0-665.el9

 #
 # End of genspec.sh variables
@ -3705,6 +3705,105 @@ fi
 #
 #
 %changelog
+* Thu Jan 22 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-665.el9]
+- sched: Fix build for modules using set_tsk_need_resched() (Gabriele Monaco) [RHEL-141542]
+- sched: Export hidden tracepoints to modules (Gabriele Monaco) [RHEL-141542]
+- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-138326]
+- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (Petr Oros) [RHEL-121722]
+- devlink: Introduce switchdev_inactive eswitch mode (Petr Oros) [RHEL-121722]
+- devlink: Add new "max_mac_per_vf" generic device param (Petr Oros) [RHEL-121722]
+- devlink: region: correct port region lookup to use port_ops (Petr Oros) [RHEL-121722]
+- devlink rate: Remove unnecessary 'static' from a couple places (Petr Oros) [RHEL-121722]
+- devlink: Add a 'num_doorbells' driverinit param (Petr Oros) [RHEL-121722]
+- devlink: Add 'total_vfs' generic device param (Petr Oros) [RHEL-121722]
+- devlink: Make health reporter burst period configurable (Petr Oros) [RHEL-121722]
+- devlink: Introduce burst period for health reporter (Petr Oros) [RHEL-121722]
+- devlink: Move health reporter recovery abort logic to a separate function (Petr Oros) [RHEL-121722]
+- devlink: Move graceful period parameter to reporter ops (Petr Oros) [RHEL-121722]
+- devlink/port: Check attributes early and constify (Petr Oros) [RHEL-121722]
+- devlink/port: Simplify return checks (Petr Oros) [RHEL-121722]
+- netdevsim: add fw_update_flash_chunk_time_ms debugfs knobs (Petr Oros) [RHEL-121722]
+- devlink: Fix excessive stack usage in rate TC bandwidth parsing (Petr Oros) [RHEL-121722]
+- selftest: netdevsim: Add devlink rate tc-bw test (Petr Oros) [RHEL-121722]
+- devlink: Extend devlink rate API with traffic classes bandwidth management (Petr Oros) [RHEL-121722]
+- netlink: introduce type-checking attribute iteration for nlmsg (Petr Oros) [RHEL-121722]
+- docs: netdevsim: fixe typo in netdevsim documentation (Petr Oros) [RHEL-121722]
+- selftests: drv-net: import things in lib one by one (Petr Oros) [RHEL-121722]
+- documentation: networking: devlink: Fix a typo in devlink-trap.rst (Petr Oros) [RHEL-121722]
+- devlink: add value check to devlink_info_version_put() (Petr Oros) [RHEL-121722]
+- x86/bugs: Report correct retbleed mitigation status (Waiman Long) [RHEL-119225]
+- x86/bugs: Fix reporting of LFENCE retpoline (Waiman Long) [RHEL-119225]
+- x86/bugs: Fix spectre_v2 forcing (Waiman Long) [RHEL-119225]
+- x86/bugs: Remove uses of cpu_mitigations_off() (Waiman Long) [RHEL-119225]
+- x86/bugs: Simplify SSB cmdline parsing (Waiman Long) [RHEL-119225]
+- x86/bugs: Use early_param() for spectre_v2 (Waiman Long) [RHEL-119225]
+- x86/bugs: Use early_param() for spectre_v2_user (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for VMSCAPE (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for SSB (Waiman Long) [RHEL-119225]
+- x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-119225]
+- x86/bugs: Fix GDS mitigation selecting when mitigation is off (Waiman Long) [RHEL-119225]
+- x86/bugs: Select best SRSO mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Print enabled attack vectors (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for TSA (Waiman Long) [RHEL-119225]
+- x86/pti: Add attack vector controls for PTI (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for ITS (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for SRSO (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for L1TF (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for spectre_v2 (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for BHI (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for spectre_v2_user (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for retbleed (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for spectre_v1 (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for GDS (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for SRBDS (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for RFDS (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for MMIO (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for TAA (Waiman Long) [RHEL-119225]
+- x86/bugs: Add attack vector controls for MDS (Waiman Long) [RHEL-119225]
+- x86/bugs: Define attack vectors relevant for each bug (Waiman Long) [RHEL-119225]
+- x86/Kconfig: Add arch attack vector support (Waiman Long) [RHEL-119225]
+- cpu: Define attack vectors (Waiman Long) [RHEL-119225]
+- Documentation/x86: Document new attack vector controls (Waiman Long) [RHEL-119225]
+- x86/bugs: Clean up SRSO microcode handling (Waiman Long) [RHEL-119225]
+- x86/bugs: Use IBPB for retbleed if used by SRSO (Waiman Long) [RHEL-119225]
+- x86/bugs: Add SRSO_MITIGATION_NOSMT (Waiman Long) [RHEL-119225]
+- x86/bugs: Allow ITS stuffing in eIBRS+retpoline mode also (Waiman Long) [RHEL-119225]
+- x86/bugs: Remove its=stuff dependency on retbleed (Waiman Long) [RHEL-119225]
+- x86/bugs: Introduce cdt_possible() (Waiman Long) [RHEL-119225]
+- x86/bugs: Use switch/case in its_apply_mitigation() (Waiman Long) [RHEL-119225]
+- x86/bugs: Avoid warning when overriding return thunk (Waiman Long) [RHEL-119225]
+- x86/bugs: Simplify the retbleed=stuff checks (Waiman Long) [RHEL-119225]
+- x86/bugs: Avoid AUTO after the select step in the retbleed mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Fix spectre_v2 mitigation default on Intel (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure ITS mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Fix SRSO reporting on Zen1/2 with SMT disabled (Waiman Long) [RHEL-119225]
+- x86/cpu: Add "Old Microcode" docs to hw-vuln toctree (Waiman Long) [RHEL-119225]
+- x86/cpu: Help users notice when running old Intel microcode (Waiman Long) [RHEL-119225]
+- x86/cpufeatures: Shorten X86_FEATURE_CLEAR_BHB_LOOP_ON_VMEXIT (Waiman Long) [RHEL-119225]
+- x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure SRSO mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure L1TF mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure SSB mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure spectre_v2 mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure BHI mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure spectre_v2_user mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure retbleed mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Allow retbleed=stuff only on Intel (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure spectre_v1 mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure GDS mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure SRBDS mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Remove md_clear_*_mitigation() (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure RFDS mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure MMIO mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure TAA mitigation (Waiman Long) [RHEL-119225]
+- x86/bugs: Restructure MDS mitigation (Waiman Long) [RHEL-119225]
+- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions (Waiman Long) [RHEL-119225]
+- Documentation/x86: Update the naming of CPU features for /proc/cpuinfo (Waiman Long) [RHEL-119225]
+- redhat/configs: Enable CONFIG_CPU_MITIGATIONS (Waiman Long) [RHEL-119225]
+- cpu: Ignore "mitigations" kernel parameter if CPU_MITIGATIONS=n (Waiman Long) [RHEL-119225]
+- cpu: Re-enable CPU mitigations by default for !X86 architectures (Waiman Long) [RHEL-119225]
+- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n (Waiman Long) [RHEL-119225]
+
 * Wed Jan 21 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-664.el9]
 - nvme: fix PCIe subsystem reset controller state transition (John Meneghini) [RHEL-137435]
 - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling (John Meneghini) [RHEL-137435]
--- a/6
+++ b/6
@ -1,3 +1,3 @@
-SHA512 (linux-5.14.0-664.el9.tar.xz) = 975995a3b02d8510759cada2040f1d01a4f7d75c558d22fba0bee12cabb05a53ac64969bb8fb2e50bac6e35c87d8489316b0cce99b4b4d033d53f664b0fc7461
-SHA512 (kernel-abi-stablelists-5.14.0-664.el9.tar.bz2) = d5ba40b4f9af67b7c828a7b98f8f5b2463572ac5e83467484ccb55c38b266ddf95fdd0aca4a5b8f465ecbb08d51b4d51acdb18b3b1127ed227c6000e29917b78
-SHA512 (kernel-kabi-dw-5.14.0-664.el9.tar.bz2) = ddee1324e4247c0677af07b225b021e77a435c6608d44232b0b37c6d65c266e18627d7d4b617ae699800ddfcd79f89cb2bcbe18b0134f03f75c5728314c20ad6
+SHA512 (linux-5.14.0-665.el9.tar.xz) = bc595ad925714d902fe9d57da48a1f6471a3fa6510f157105ae63be0d3064dd5459e4d675cca1146067978ce83a1e275b2006c703599f4809154cb81fbd2e08a
+SHA512 (kernel-abi-stablelists-5.14.0-665.el9.tar.bz2) = 509f893d4d1430cb845eb4bb24eacaa868a297aba77e2ca54712138e9e3416557e239a54cb02b43addf03d3b3da9d06c5a36a6dc227095375c95a3c905e3c098
+SHA512 (kernel-kabi-dw-5.14.0-665.el9.tar.bz2) = 21159c1c705d5a8ebb37e6db6e12c5696ea50b90dccbd8ee0d676bc713dcda65c286f1dbdafd1b7148385870146a3d9c1554313c7f0d57d657fed32667cd24af