From c6cf688535a99bb96668740a04ab3b9384da631e Mon Sep 17 00:00:00 2001 From: Eduard Abdullin Date: Fri, 24 Jul 2026 13:08:45 +0000 Subject: [PATCH] Debrand for AlmaLinux OS Use AlmaLinux OS secure boot cert Enable Btrfs support for all kernel variants hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 qla4xxx: bring back deprecated PCI ids be2iscsi: bring back deprecated PCI ids kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained --- .gitignore | 6 +++--- Makefile.rhelver | 2 +- kernel.changelog | 4 ++++ kernel.spec | 17 ++++++++++------- sources | 6 +++--- 5 files changed, 21 insertions(+), 14 deletions(-) diff --git a/.gitignore b/.gitignore index 36caddb08..edb97d5ca 100644 --- a/.gitignore +++ b/.gitignore @@ -1,7 +1,7 @@ fedoraimaca.x509 -kernel-abi-stablelists-6.12.0-211.37.1.el10_2.tar.xz -kernel-kabi-dw-6.12.0-211.37.1.el10_2.tar.xz -linux-6.12.0-211.37.1.el10_2.tar.xz +kernel-abi-stablelists-6.12.0-211.38.1.el10_2.tar.xz +kernel-kabi-dw-6.12.0-211.38.1.el10_2.tar.xz +linux-6.12.0-211.38.1.el10_2.tar.xz nvidiabfdpu.x509 nvidiagpuoot001.x509 nvidiajetsonsoc.x509 diff --git a/Makefile.rhelver b/Makefile.rhelver index 8193ded8d..470568593 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 2 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 211.37.1 +RHEL_RELEASE = 211.38.1 # # RHEL_REBASE_NUM diff --git a/kernel.changelog b/kernel.changelog index d00cd8062..f2219202a 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,7 @@ +* Wed Jul 22 2026 CKI KWF Bot [6.12.0-211.38.1.el10_2] +- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} +Resolves: RHEL-177856 + * Tue Jul 21 2026 CKI KWF Bot [6.12.0-211.37.1.el10_2] - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} diff --git a/kernel.spec b/kernel.spec index 03d56d26e..ab8c0497f 100644 --- a/kernel.spec +++ b/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel %define specrpmversion 6.12.0 %define specversion 6.12.0 %define patchversion 6.12 -%define pkgrelease 211.37.1 +%define pkgrelease 211.38.1 %define kversion 6 -%define tarfile_release 6.12.0-211.37.1.el10_2 +%define tarfile_release 6.12.0-211.38.1.el10_2 # This is needed to do merge window version magic %define patchlevel 12 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 211.37.1%{?buildid}%{?dist} +%define specrelease 211.38.1%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 6.12.0-211.37.1.el10_2 +%define kabiversion 6.12.0-211.38.1.el10_2 # If this variable is set to 1, a bpf selftests build failure will cause a # fatal kernel package build error @@ -4511,14 +4511,14 @@ fi\ # # %changelog -* Thu Jul 23 2026 Eduard Abdullin - 6.12.0-211.37.1 +* Fri Jul 24 2026 Eduard Abdullin - 6.12.0-211.38.1 - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert -* Thu Jul 23 2026 Neal Gompa - 6.12.0-211.37.1 +* Fri Jul 24 2026 Neal Gompa - 6.12.0-211.38.1 - Enable Btrfs support for all kernel variants -* Thu Jul 23 2026 Andrew Lukoshko - 6.12.0-211.37.1 +* Fri Jul 24 2026 Andrew Lukoshko - 6.12.0-211.38.1 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -4528,6 +4528,9 @@ fi\ - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained +* Wed Jul 22 2026 CKI KWF Bot [6.12.0-211.38.1.el10_2] +- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} + * Tue Jul 21 2026 CKI KWF Bot [6.12.0-211.37.1.el10_2] - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} diff --git a/sources b/sources index 54870529b..f990e129c 100644 --- a/sources +++ b/sources @@ -1,7 +1,7 @@ SHA512 (fedoraimaca.x509) = e04809394f4472c17e86d7024dee34f03fb68e82a85502fd5b00535202c72e57626a8376b2cf991b7e1e46404aa5ab8d189ebf320e0dd37d49e7efbc925c7a2e -SHA512 (kernel-abi-stablelists-6.12.0-211.37.1.el10_2.tar.xz) = 5517b9dcf4db6381f0d576a6160e1bd9b1c4d4c314fd432b15497c8b75ef370b6a8e973912b81f3164c8951d65e89f0ec3b8fc1e5e32fdf399ede683968bcd5b -SHA512 (kernel-kabi-dw-6.12.0-211.37.1.el10_2.tar.xz) = 57aaae94c0eb6ea3a675becaa3eb8a7ec80873ac8b98a6ce2713e2d13e33a4b2b641e93411da06b3b7e2ae9249dc506a64a2796baa37013542a7a7ed97610078 -SHA512 (linux-6.12.0-211.37.1.el10_2.tar.xz) = 93c3524ed4c49c814f58aca7ea6bc72f94fd523083c6afc0671caea64817ecb82ed6688866d851cccc98e495cd3b566c4de5baed7e2e5067036ab01cefabf3ec +SHA512 (kernel-abi-stablelists-6.12.0-211.38.1.el10_2.tar.xz) = 6e1ea95ca9ded288a0b60ceb162e4ad03204e3f2cd5b21229051693ba4d7a8cc48099d6e7dbcebab3aff64f12b96733bebc3f3f351aae9a980759d783a168829 +SHA512 (kernel-kabi-dw-6.12.0-211.38.1.el10_2.tar.xz) = 41f10212678b652f80cc3edb4e2776c897aaf1c1864efcc29b6f8995dd406914be39eb3ef31c808f428cb7f74853bfb976a9bb40cb0069abe0535f87a96e1a7a +SHA512 (linux-6.12.0-211.38.1.el10_2.tar.xz) = 86288b079e583d6f9c319044f9db9d16bc861ac351caa4d83bdc9080b4a021623af1b3424d6a0824e016e75cd523d0da60f98d6fe5005167b245a09d184cb4b8 SHA512 (nvidiabfdpu.x509) = d9f4fbafcec66803c5944df1f97d4348968141c968e6537252c9854c89dca8ea3be225a9c40abbbf2b7d4d3cfd8c5012cd2d34d90443fbc0277b7a018622ac4f SHA512 (nvidiagpuoot001.x509) = b42f836e1cfa07890cb6ca13de9c3950e306c9ec7686c4c09f050bb68869f5d82962b2cd5f3aa0eb7a0f3a3ae54e9c480eafbac5df53aa92c295ff511a8c59fe SHA512 (nvidiajetsonsoc.x509) = 3c6d4f0800b3fae3c3cc3e5361de31df233e230ea96f0fdd3dcc713e6a71e27309f60e7a98d1a4a90d470f336ce311f22fcc88f219429272e96339717fe001dd