From c985060fcb0b5e75de50a7fa273c93eb75203660 Mon Sep 17 00:00:00 2001 From: CKI KWF Bot Date: Tue, 27 Jan 2026 11:55:28 +0000 Subject: [PATCH] kernel-5.14.0-668.el9 * Tue Jan 27 2026 CKI KWF Bot [5.14.0-668.el9] - bonding: don't set oif to bond dev when getting NS target destination (CKI Backport Bot) [RHEL-128764] - thunderbolt: Add support for Intel Wildcat Lake (Desnes Nunes) [RHEL-95661] - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt (Xin Long) [RHEL-118175] - redhat: hsr: Remove tech preview tainting (Felix Maurer) [RHEL-100941] - redhat: Package net/hsr selftests (Felix Maurer) [RHEL-127796] - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (Felix Maurer) [RHEL-127794] - hsr: Follow standard for HSRv0 supervision frames (Felix Maurer) [RHEL-127794] - hsr: Fix supervision frame sending on HSRv0 (Felix Maurer) [RHEL-127794] - net: hsr: prevent creation of HSR device with slaves from another netns (Felix Maurer) [RHEL-127794] - net/hsr: add interlink to fill_info output (Felix Maurer) [RHEL-127764 RHEL-127794] - net/hsr: add protocol version to fill_info output (Felix Maurer) [RHEL-127764 RHEL-127794] - hsr: hold rcu and dev lock for hsr_get_port_ndev (Felix Maurer) [RHEL-127794] - hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr (Felix Maurer) [RHEL-127794] - hsr: use rtnl lock when iterating over ports (Felix Maurer) [RHEL-127794] - hsr: use netdev_master_upper_dev_link() when linking lower ports (Felix Maurer) [RHEL-127794] - net, hsr: reject HSR frame if skb can't hold tag (Felix Maurer) [RHEL-127794] {CVE-2025-39703} - net: hsr: sync hw addr of slave2 according to slave1 hw addr on PRP (Felix Maurer) [RHEL-127794 RHEL-130474] - redhat: hsr: Enable KUnit test for PRP duplicate discard (Felix Maurer) [RHEL-127794] - net: hsr: Add KUnit test for PRP (Felix Maurer) [RHEL-127794] - net: hsr: Fix PRP duplicate detection (Felix Maurer) [RHEL-127794] - net: hsr: Create and export hsr_get_port_ndev() (Felix Maurer) [RHEL-127794] - net: hsr: remove synchronize_rcu() from hsr_add_port() (Felix Maurer) [RHEL-127794] - net: hsr: remove one synchronize_rcu() from hsr_del_port() (Felix Maurer) [RHEL-127794] - net: hsr: must allocate more bytes for RedBox support (Felix Maurer) [RHEL-127794] - selftests: hsr: Add test for VLAN (Felix Maurer) [RHEL-127794 RHEL-130476] - net: hsr: Add VLAN CTAG filter support (Felix Maurer) [RHEL-127794 RHEL-130476] - net: hsr: Add VLAN support (Felix Maurer) [RHEL-127794 RHEL-130476] - tests: hsr: Increase timeout to 50 seconds (Felix Maurer) [RHEL-127794] - net: hsr: convert to use new timer APIs (Felix Maurer) [RHEL-127794] - net: hsr: Remove interlink_sequence_nr. (Felix Maurer) [RHEL-127794] - net: hsr: Use the seqnr lock for frames received via interlink port. (Felix Maurer) [RHEL-127794] - net: hsr: prevent NULL pointer dereference in hsr_proxy_announce() (Felix Maurer) [RHEL-127794] - net: hsr: cosmetic: Remove extra white space (Felix Maurer) [RHEL-127794] - treewide, timers: Rename from_timer() to timer_container_of() (Felix Maurer) [RHEL-100940 RHEL-127794] - net: hsr: Send supervisory frames to HSR network with ProxyNodeTable data (Felix Maurer) [RHEL-100940 RHEL-127794] - selftests: hsr: Extend the hsr_ping.sh test to use fixed MAC addresses (Felix Maurer) [RHEL-127794] - selftests: hsr: Extend the hsr_redbox.sh test to use fixed MAC addresses (Felix Maurer) [RHEL-127794] - selftests: hsr: Fix "File exists" errors for hsr_ping (Felix Maurer) [RHEL-127794] - test: hsr: Extend the hsr_redbox.sh to have more SAN devices connected (Felix Maurer) [RHEL-127794] - test: hsr: Call cleanup_all_ns when hsr_redbox.sh script exits (Felix Maurer) [RHEL-100940 RHEL-127794] - net: hsr: init prune_proxy_timer sooner (Felix Maurer) [RHEL-100940 RHEL-127794] - test: hsr: Add test for HSR RedBOX (HSR-SAN) mode of operation (Felix Maurer) [RHEL-100940 RHEL-127794] - test: hsr: Extract version agnostic information from ping command output (Felix Maurer) [RHEL-100940 RHEL-127794] - test: hsr: Move common code to hsr_common.sh file (Felix Maurer) [RHEL-100940 RHEL-127794] - test: hsr: Remove script code already implemented in lib.sh (Felix Maurer) [RHEL-100940 RHEL-127794] - net: hsr: Provide RedBox support (HSR-SAN) (Felix Maurer) [RHEL-100940 RHEL-127794] - net: hsr: Use full string description when opening HSR network device (Felix Maurer) [RHEL-127794] - net: hsr: Fix typo in the hsr_forward_do() function comment (Felix Maurer) [RHEL-127794] - net: hsr: constify the struct device_type usage (Felix Maurer) [RHEL-127794] - net: fill in MODULE_DESCRIPTION()s for HSR (Felix Maurer) [RHEL-127794] - selftests: hsr: Extend the testsuite to also cover HSRv1. (Felix Maurer) [RHEL-127794] - selftests: hsr: Reorder the testsuite. (Felix Maurer) [RHEL-127794] - selftests: hsr: Use `let' properly. (Felix Maurer) [RHEL-127794] - net/hsr: Remove unused function declarations (Felix Maurer) [RHEL-127794] - net: ionic: map SKB after pseudo-header checksum prep (Jakub Ramaseuski) [RHEL-127815] - net: ionic: add dma_wmb() before ringing TX doorbell (Jakub Ramaseuski) [RHEL-127815] - ionic: convert to ndo_hwtstamp API (Jakub Ramaseuski) [RHEL-127815] - RDMA/ionic: Fix memory leak of admin q_wr (Jakub Ramaseuski) [RHEL-127815] - RDMA/ionic: Use ether_addr_copy instead of memcpy (Jakub Ramaseuski) [RHEL-127815] - RDMA/ionic: Fix build failure on SPARC due to xchg() operand size (Jakub Ramaseuski) [RHEL-127815] - ionic: use int type for err in ionic_get_module_eeprom_by_page (Jakub Ramaseuski) [RHEL-127815] - RDMA/ionic: Add Makefile/Kconfig to kernel build environment (Jakub Ramaseuski) [RHEL-127815] - RDMA: Add IONIC to rdma_driver_id definition (Jakub Ramaseuski) [RHEL-127815] - RDMA/ionic: Implement device stats ops (Jakub Ramaseuski) [RHEL-127815] - RDMA/ionic: Register device ops for miscellaneous functionality (Jakub Ramaseuski) [RHEL-127815] - RDMA/ionic: Register device ops for datapath (Jakub Ramaseuski) [RHEL-127815] - RDMA/ionic: Register device ops for control path (Jakub Ramaseuski) [RHEL-127815] - RDMA/ionic: Create device queues to support admin operations (Jakub Ramaseuski) [RHEL-127815] - RDMA/ionic: Register auxiliary module for ionic ethernet adapter (Jakub Ramaseuski) [RHEL-127815] - redhat/configs: Disable CONFIG_INFINIBAND_IONIC in generic (Jakub Ramaseuski) [RHEL-127815] - net: ionic: Provide doorbell and CMB region information (Jakub Ramaseuski) [RHEL-127815] - net: ionic: Provide interrupt allocation support for the RDMA driver (Jakub Ramaseuski) [RHEL-127815] - net: ionic: Provide RDMA reset support for the RDMA driver (Jakub Ramaseuski) [RHEL-127815] - net: ionic: Export the APIs from net driver to support device commands (Jakub Ramaseuski) [RHEL-127815] - net: ionic: Update LIF identity with additional RDMA capabilities (Jakub Ramaseuski) [RHEL-127815] - net: ionic: Create an auxiliary device for rdma driver (Jakub Ramaseuski) [RHEL-127815] - ethernet: ionic: Fix DMA mapping tests (Jakub Ramaseuski) [RHEL-127815] - ionic: cancel delayed work earlier in remove (Jakub Ramaseuski) [RHEL-127815] - ionic: clean dbpage in de-init (Jakub Ramaseuski) [RHEL-127815] - ionic: print firmware heartbeat as unsigned (Jakub Ramaseuski) [RHEL-127815] - ionic: Prevent driver/fw getting out of sync on devcmd(s) (Jakub Ramaseuski) [RHEL-127815] - redhat: enable TDX host config (Paolo Bonzini) [RHEL-115482] - KVM: TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-115482] - x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-115482] - x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-115482] - x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-115482] - x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-115482] - x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-115482] - x86/virt/tdx: Avoid indirect calls to TDX assembly functions (Paolo Bonzini) [RHEL-115482] Resolves: RHEL-100940, RHEL-100941, RHEL-115482, RHEL-118175, RHEL-127764, RHEL-127794, RHEL-127796, RHEL-127815, RHEL-128764, RHEL-130474, RHEL-130476, RHEL-95661 Signed-off-by: CKI KWF Bot --- Makefile.rhelver | 2 +- kernel-aarch64-64k-debug-rhel.config | 2 + kernel-aarch64-64k-rhel.config | 2 + kernel-aarch64-debug-rhel.config | 2 + kernel-aarch64-rhel.config | 2 + kernel-aarch64-rt-64k-debug-rhel.config | 2 + kernel-aarch64-rt-64k-rhel.config | 2 + kernel-aarch64-rt-debug-rhel.config | 2 + kernel-aarch64-rt-rhel.config | 2 + kernel-ppc64le-debug-rhel.config | 2 + kernel-ppc64le-rhel.config | 2 + kernel-s390x-debug-rhel.config | 2 + kernel-s390x-rhel.config | 2 + kernel-s390x-zfcpdump-rhel.config | 2 + kernel-x86_64-debug-rhel.config | 5 +- kernel-x86_64-rhel.config | 5 +- kernel-x86_64-rt-debug-rhel.config | 5 +- kernel-x86_64-rt-rhel.config | 5 +- kernel.changelog | 92 ++++++++++++++++++++ kernel.spec | 107 ++++++++++++++++++++++-- mod-internal.list | 1 + sources | 6 +- 22 files changed, 241 insertions(+), 13 deletions(-) diff --git a/Makefile.rhelver b/Makefile.rhelver index e795183fe..d11af1451 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 8 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 667 +RHEL_RELEASE = 668 # # ZSTREAM diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config index 5ccb1563d..cd49d2c72 100644 --- a/kernel-aarch64-64k-debug-rhel.config +++ b/kernel-aarch64-64k-debug-rhel.config @@ -2616,6 +2616,7 @@ CONFIG_INFINIBAND_BNXT_RE=m CONFIG_INFINIBAND_CXGB4=m CONFIG_INFINIBAND_EFA=m # CONFIG_INFINIBAND_HNS is not set +# CONFIG_INFINIBAND_IONIC is not set CONFIG_INFINIBAND_IPOIB_CM=y # CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set CONFIG_INFINIBAND_IPOIB_DEBUG=y @@ -4718,6 +4719,7 @@ CONFIG_PROFILING=y CONFIG_PROVE_LOCKING=y CONFIG_PROVE_NVDIMM_LOCKING=y CONFIG_PROVE_RAW_LOCK_NESTING=y +CONFIG_PRP_DUP_DISCARD_KUNIT_TEST=m CONFIG_PSAMPLE=m # CONFIG_PSE_CONTROLLER is not set CONFIG_PSI_DEFAULT_DISABLED=y diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config index e67f5ec27..e0bf12828 100644 --- a/kernel-aarch64-64k-rhel.config +++ b/kernel-aarch64-64k-rhel.config @@ -2600,6 +2600,7 @@ CONFIG_INFINIBAND_BNXT_RE=m CONFIG_INFINIBAND_CXGB4=m CONFIG_INFINIBAND_EFA=m # CONFIG_INFINIBAND_HNS is not set +# CONFIG_INFINIBAND_IONIC is not set CONFIG_INFINIBAND_IPOIB_CM=y # CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set CONFIG_INFINIBAND_IPOIB_DEBUG=y @@ -4696,6 +4697,7 @@ CONFIG_PROFILING=y # CONFIG_PROVE_LOCKING is not set CONFIG_PROVE_NVDIMM_LOCKING=y # CONFIG_PROVE_RAW_LOCK_NESTING is not set +CONFIG_PRP_DUP_DISCARD_KUNIT_TEST=m CONFIG_PSAMPLE=m # CONFIG_PSE_CONTROLLER is not set CONFIG_PSI_DEFAULT_DISABLED=y diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config index e3db13e8c..b4f438a39 100644 --- a/kernel-aarch64-debug-rhel.config +++ b/kernel-aarch64-debug-rhel.config @@ -2614,6 +2614,7 @@ CONFIG_INFINIBAND_BNXT_RE=m CONFIG_INFINIBAND_CXGB4=m CONFIG_INFINIBAND_EFA=m # CONFIG_INFINIBAND_HNS is not set +# CONFIG_INFINIBAND_IONIC is not set CONFIG_INFINIBAND_IPOIB_CM=y # CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set CONFIG_INFINIBAND_IPOIB_DEBUG=y @@ -4716,6 +4717,7 @@ CONFIG_PROFILING=y CONFIG_PROVE_LOCKING=y CONFIG_PROVE_NVDIMM_LOCKING=y CONFIG_PROVE_RAW_LOCK_NESTING=y +CONFIG_PRP_DUP_DISCARD_KUNIT_TEST=m CONFIG_PSAMPLE=m # CONFIG_PSE_CONTROLLER is not set CONFIG_PSI_DEFAULT_DISABLED=y diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config index 50189c851..a0a4bedca 100644 --- a/kernel-aarch64-rhel.config +++ b/kernel-aarch64-rhel.config @@ -2598,6 +2598,7 @@ CONFIG_INFINIBAND_BNXT_RE=m CONFIG_INFINIBAND_CXGB4=m CONFIG_INFINIBAND_EFA=m # CONFIG_INFINIBAND_HNS is not set +# CONFIG_INFINIBAND_IONIC is not set CONFIG_INFINIBAND_IPOIB_CM=y # CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set CONFIG_INFINIBAND_IPOIB_DEBUG=y @@ -4694,6 +4695,7 @@ CONFIG_PROFILING=y # CONFIG_PROVE_LOCKING is not set CONFIG_PROVE_NVDIMM_LOCKING=y # CONFIG_PROVE_RAW_LOCK_NESTING is not set +CONFIG_PRP_DUP_DISCARD_KUNIT_TEST=m CONFIG_PSAMPLE=m # CONFIG_PSE_CONTROLLER is not set CONFIG_PSI_DEFAULT_DISABLED=y diff --git a/kernel-aarch64-rt-64k-debug-rhel.config b/kernel-aarch64-rt-64k-debug-rhel.config index 69773e535..feafb8d78 100644 --- a/kernel-aarch64-rt-64k-debug-rhel.config +++ b/kernel-aarch64-rt-64k-debug-rhel.config @@ -2671,6 +2671,7 @@ CONFIG_INFINIBAND_BNXT_RE=m CONFIG_INFINIBAND_CXGB4=m CONFIG_INFINIBAND_EFA=m # CONFIG_INFINIBAND_HNS is not set +# CONFIG_INFINIBAND_IONIC is not set CONFIG_INFINIBAND_IPOIB_CM=y # CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set CONFIG_INFINIBAND_IPOIB_DEBUG=y @@ -4805,6 +4806,7 @@ CONFIG_PROFILING=y CONFIG_PROVE_LOCKING=y CONFIG_PROVE_NVDIMM_LOCKING=y CONFIG_PROVE_RAW_LOCK_NESTING=y +CONFIG_PRP_DUP_DISCARD_KUNIT_TEST=m CONFIG_PSAMPLE=m # CONFIG_PSE_CONTROLLER is not set CONFIG_PSI_DEFAULT_DISABLED=y diff --git a/kernel-aarch64-rt-64k-rhel.config b/kernel-aarch64-rt-64k-rhel.config index 91f36dff8..e61ec3043 100644 --- a/kernel-aarch64-rt-64k-rhel.config +++ b/kernel-aarch64-rt-64k-rhel.config @@ -2655,6 +2655,7 @@ CONFIG_INFINIBAND_BNXT_RE=m CONFIG_INFINIBAND_CXGB4=m CONFIG_INFINIBAND_EFA=m # CONFIG_INFINIBAND_HNS is not set +# CONFIG_INFINIBAND_IONIC is not set CONFIG_INFINIBAND_IPOIB_CM=y # CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set CONFIG_INFINIBAND_IPOIB_DEBUG=y @@ -4783,6 +4784,7 @@ CONFIG_PROFILING=y # CONFIG_PROVE_LOCKING is not set CONFIG_PROVE_NVDIMM_LOCKING=y # CONFIG_PROVE_RAW_LOCK_NESTING is not set +CONFIG_PRP_DUP_DISCARD_KUNIT_TEST=m CONFIG_PSAMPLE=m # CONFIG_PSE_CONTROLLER is not set CONFIG_PSI_DEFAULT_DISABLED=y diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config index 5fb0b66c0..994902577 100644 --- a/kernel-aarch64-rt-debug-rhel.config +++ b/kernel-aarch64-rt-debug-rhel.config @@ -2669,6 +2669,7 @@ CONFIG_INFINIBAND_BNXT_RE=m CONFIG_INFINIBAND_CXGB4=m CONFIG_INFINIBAND_EFA=m # CONFIG_INFINIBAND_HNS is not set +# CONFIG_INFINIBAND_IONIC is not set CONFIG_INFINIBAND_IPOIB_CM=y # CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set CONFIG_INFINIBAND_IPOIB_DEBUG=y @@ -4803,6 +4804,7 @@ CONFIG_PROFILING=y CONFIG_PROVE_LOCKING=y CONFIG_PROVE_NVDIMM_LOCKING=y CONFIG_PROVE_RAW_LOCK_NESTING=y +CONFIG_PRP_DUP_DISCARD_KUNIT_TEST=m CONFIG_PSAMPLE=m # CONFIG_PSE_CONTROLLER is not set CONFIG_PSI_DEFAULT_DISABLED=y diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config index 3cec4d922..326fcf421 100644 --- a/kernel-aarch64-rt-rhel.config +++ b/kernel-aarch64-rt-rhel.config @@ -2653,6 +2653,7 @@ CONFIG_INFINIBAND_BNXT_RE=m CONFIG_INFINIBAND_CXGB4=m CONFIG_INFINIBAND_EFA=m # CONFIG_INFINIBAND_HNS is not set +# CONFIG_INFINIBAND_IONIC is not set CONFIG_INFINIBAND_IPOIB_CM=y # CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set CONFIG_INFINIBAND_IPOIB_DEBUG=y @@ -4781,6 +4782,7 @@ CONFIG_PROFILING=y # CONFIG_PROVE_LOCKING is not set CONFIG_PROVE_NVDIMM_LOCKING=y # CONFIG_PROVE_RAW_LOCK_NESTING is not set +CONFIG_PRP_DUP_DISCARD_KUNIT_TEST=m CONFIG_PSAMPLE=m # CONFIG_PSE_CONTROLLER is not set CONFIG_PSI_DEFAULT_DISABLED=y diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config index a16f1c575..59bf2081f 100644 --- a/kernel-ppc64le-debug-rhel.config +++ b/kernel-ppc64le-debug-rhel.config @@ -2304,6 +2304,7 @@ CONFIG_INFINIBAND_BNXT_RE=m CONFIG_INFINIBAND_CXGB4=m CONFIG_INFINIBAND_EFA=m # CONFIG_INFINIBAND_HNS is not set +# CONFIG_INFINIBAND_IONIC is not set CONFIG_INFINIBAND_IPOIB_CM=y # CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set CONFIG_INFINIBAND_IPOIB_DEBUG=y @@ -4306,6 +4307,7 @@ CONFIG_PROFILING=y CONFIG_PROVE_LOCKING=y CONFIG_PROVE_NVDIMM_LOCKING=y # CONFIG_PROVE_RAW_LOCK_NESTING is not set +CONFIG_PRP_DUP_DISCARD_KUNIT_TEST=m CONFIG_PSAMPLE=m # CONFIG_PSE_CONTROLLER is not set CONFIG_PSERIES_CPUIDLE=y diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config index 6edb65305..ae38a1020 100644 --- a/kernel-ppc64le-rhel.config +++ b/kernel-ppc64le-rhel.config @@ -2288,6 +2288,7 @@ CONFIG_INFINIBAND_BNXT_RE=m CONFIG_INFINIBAND_CXGB4=m CONFIG_INFINIBAND_EFA=m # CONFIG_INFINIBAND_HNS is not set +# CONFIG_INFINIBAND_IONIC is not set CONFIG_INFINIBAND_IPOIB_CM=y # CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set CONFIG_INFINIBAND_IPOIB_DEBUG=y @@ -4286,6 +4287,7 @@ CONFIG_PROFILING=y # CONFIG_PROVE_LOCKING is not set CONFIG_PROVE_NVDIMM_LOCKING=y # CONFIG_PROVE_RAW_LOCK_NESTING is not set +CONFIG_PRP_DUP_DISCARD_KUNIT_TEST=m CONFIG_PSAMPLE=m # CONFIG_PSE_CONTROLLER is not set CONFIG_PSERIES_CPUIDLE=y diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config index 03536fb70..74944a981 100644 --- a/kernel-s390x-debug-rhel.config +++ b/kernel-s390x-debug-rhel.config @@ -2289,6 +2289,7 @@ CONFIG_INFINIBAND_ADDR_TRANS=y CONFIG_INFINIBAND_CXGB4=m CONFIG_INFINIBAND_EFA=m # CONFIG_INFINIBAND_HNS is not set +# CONFIG_INFINIBAND_IONIC is not set CONFIG_INFINIBAND_IPOIB_CM=y # CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set CONFIG_INFINIBAND_IPOIB_DEBUG=y @@ -4257,6 +4258,7 @@ CONFIG_PROTECTED_VIRTUALIZATION_GUEST=y CONFIG_PROVE_LOCKING=y CONFIG_PROVE_NVDIMM_LOCKING=y # CONFIG_PROVE_RAW_LOCK_NESTING is not set +CONFIG_PRP_DUP_DISCARD_KUNIT_TEST=m CONFIG_PSAMPLE=m # CONFIG_PSE_CONTROLLER is not set CONFIG_PSI_DEFAULT_DISABLED=y diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config index 932e9035f..4c944c7e0 100644 --- a/kernel-s390x-rhel.config +++ b/kernel-s390x-rhel.config @@ -2273,6 +2273,7 @@ CONFIG_INFINIBAND_ADDR_TRANS=y CONFIG_INFINIBAND_CXGB4=m CONFIG_INFINIBAND_EFA=m # CONFIG_INFINIBAND_HNS is not set +# CONFIG_INFINIBAND_IONIC is not set CONFIG_INFINIBAND_IPOIB_CM=y # CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set CONFIG_INFINIBAND_IPOIB_DEBUG=y @@ -4237,6 +4238,7 @@ CONFIG_PROTECTED_VIRTUALIZATION_GUEST=y # CONFIG_PROVE_LOCKING is not set CONFIG_PROVE_NVDIMM_LOCKING=y # CONFIG_PROVE_RAW_LOCK_NESTING is not set +CONFIG_PRP_DUP_DISCARD_KUNIT_TEST=m CONFIG_PSAMPLE=m # CONFIG_PSE_CONTROLLER is not set CONFIG_PSI_DEFAULT_DISABLED=y diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config index b80376769..e2a9c200d 100644 --- a/kernel-s390x-zfcpdump-rhel.config +++ b/kernel-s390x-zfcpdump-rhel.config @@ -2283,6 +2283,7 @@ CONFIG_INFINIBAND_ADDR_TRANS=y CONFIG_INFINIBAND_CXGB4=m CONFIG_INFINIBAND_EFA=m # CONFIG_INFINIBAND_HNS is not set +# CONFIG_INFINIBAND_IONIC is not set CONFIG_INFINIBAND_IPOIB_CM=y # CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set CONFIG_INFINIBAND_IPOIB_DEBUG=y @@ -4252,6 +4253,7 @@ CONFIG_PROC_VMCORE=y # CONFIG_PROVE_LOCKING is not set CONFIG_PROVE_NVDIMM_LOCKING=y # CONFIG_PROVE_RAW_LOCK_NESTING is not set +CONFIG_PRP_DUP_DISCARD_KUNIT_TEST=m # CONFIG_PSAMPLE is not set # CONFIG_PSE_CONTROLLER is not set CONFIG_PSI_DEFAULT_DISABLED=y diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config index a2e7b5423..d68070b8a 100644 --- a/kernel-x86_64-debug-rhel.config +++ b/kernel-x86_64-debug-rhel.config @@ -2444,6 +2444,7 @@ CONFIG_INFINIBAND_CXGB4=m CONFIG_INFINIBAND_EFA=m CONFIG_INFINIBAND_HFI1=m # CONFIG_INFINIBAND_HNS is not set +# CONFIG_INFINIBAND_IONIC is not set CONFIG_INFINIBAND_IPOIB_CM=y # CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set CONFIG_INFINIBAND_IPOIB_DEBUG=y @@ -2597,7 +2598,7 @@ CONFIG_INTEL_SDSI=m CONFIG_INTEL_SPEED_SELECT_INTERFACE=m CONFIG_INTEL_TCC_COOLING=m CONFIG_INTEL_TDX_GUEST=y -# CONFIG_INTEL_TDX_HOST is not set +CONFIG_INTEL_TDX_HOST=y CONFIG_INTEL_TH_ACPI=m CONFIG_INTEL_THC_HID=m # CONFIG_INTEL_TH_DEBUG is not set @@ -2925,6 +2926,7 @@ CONFIG_KVM_GUEST=y CONFIG_KVM_HYPERV=y CONFIG_KVM_INTEL=m # CONFIG_KVM_INTEL_PROVE_VE is not set +CONFIG_KVM_INTEL_TDX=y CONFIG_KVM=m CONFIG_KVM_MAX_NR_VCPUS=4096 CONFIG_KVM_PROVE_MMU=y @@ -4541,6 +4543,7 @@ CONFIG_PROVE_LOCKING=y CONFIG_PROVE_NVDIMM_LOCKING=y CONFIG_PROVE_RAW_LOCK_NESTING=y CONFIG_PROVIDE_OHCI1394_DMA_INIT=y +CONFIG_PRP_DUP_DISCARD_KUNIT_TEST=m CONFIG_PSAMPLE=m # CONFIG_PSE_CONTROLLER is not set CONFIG_PSI_DEFAULT_DISABLED=y diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config index 5db724661..cad17bd23 100644 --- a/kernel-x86_64-rhel.config +++ b/kernel-x86_64-rhel.config @@ -2428,6 +2428,7 @@ CONFIG_INFINIBAND_CXGB4=m CONFIG_INFINIBAND_EFA=m CONFIG_INFINIBAND_HFI1=m # CONFIG_INFINIBAND_HNS is not set +# CONFIG_INFINIBAND_IONIC is not set CONFIG_INFINIBAND_IPOIB_CM=y # CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set CONFIG_INFINIBAND_IPOIB_DEBUG=y @@ -2581,7 +2582,7 @@ CONFIG_INTEL_SDSI=m CONFIG_INTEL_SPEED_SELECT_INTERFACE=m CONFIG_INTEL_TCC_COOLING=m CONFIG_INTEL_TDX_GUEST=y -# CONFIG_INTEL_TDX_HOST is not set +CONFIG_INTEL_TDX_HOST=y CONFIG_INTEL_TH_ACPI=m CONFIG_INTEL_THC_HID=m # CONFIG_INTEL_TH_DEBUG is not set @@ -2905,6 +2906,7 @@ CONFIG_KVM_GUEST=y CONFIG_KVM_HYPERV=y CONFIG_KVM_INTEL=m # CONFIG_KVM_INTEL_PROVE_VE is not set +CONFIG_KVM_INTEL_TDX=y CONFIG_KVM=m CONFIG_KVM_MAX_NR_VCPUS=4096 # CONFIG_KVM_PROVE_MMU is not set @@ -4520,6 +4522,7 @@ CONFIG_PROFILING=y CONFIG_PROVE_NVDIMM_LOCKING=y # CONFIG_PROVE_RAW_LOCK_NESTING is not set CONFIG_PROVIDE_OHCI1394_DMA_INIT=y +CONFIG_PRP_DUP_DISCARD_KUNIT_TEST=m CONFIG_PSAMPLE=m # CONFIG_PSE_CONTROLLER is not set CONFIG_PSI_DEFAULT_DISABLED=y diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config index fa947b0ef..10c212d7c 100644 --- a/kernel-x86_64-rt-debug-rhel.config +++ b/kernel-x86_64-rt-debug-rhel.config @@ -2499,6 +2499,7 @@ CONFIG_INFINIBAND_CXGB4=m CONFIG_INFINIBAND_EFA=m CONFIG_INFINIBAND_HFI1=m # CONFIG_INFINIBAND_HNS is not set +# CONFIG_INFINIBAND_IONIC is not set CONFIG_INFINIBAND_IPOIB_CM=y # CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set CONFIG_INFINIBAND_IPOIB_DEBUG=y @@ -2652,7 +2653,7 @@ CONFIG_INTEL_SDSI=m CONFIG_INTEL_SPEED_SELECT_INTERFACE=m CONFIG_INTEL_TCC_COOLING=m CONFIG_INTEL_TDX_GUEST=y -# CONFIG_INTEL_TDX_HOST is not set +CONFIG_INTEL_TDX_HOST=y CONFIG_INTEL_TH_ACPI=m CONFIG_INTEL_THC_HID=m # CONFIG_INTEL_TH_DEBUG is not set @@ -2983,6 +2984,7 @@ CONFIG_KVM_GUEST=y CONFIG_KVM_HYPERV=y CONFIG_KVM_INTEL=m # CONFIG_KVM_INTEL_PROVE_VE is not set +CONFIG_KVM_INTEL_TDX=y CONFIG_KVM=m CONFIG_KVM_MAX_NR_VCPUS=4096 CONFIG_KVM_PROVE_MMU=y @@ -4627,6 +4629,7 @@ CONFIG_PROVE_LOCKING=y CONFIG_PROVE_NVDIMM_LOCKING=y CONFIG_PROVE_RAW_LOCK_NESTING=y CONFIG_PROVIDE_OHCI1394_DMA_INIT=y +CONFIG_PRP_DUP_DISCARD_KUNIT_TEST=m CONFIG_PSAMPLE=m # CONFIG_PSE_CONTROLLER is not set CONFIG_PSI_DEFAULT_DISABLED=y diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config index 4b1938af6..45c8e7f6f 100644 --- a/kernel-x86_64-rt-rhel.config +++ b/kernel-x86_64-rt-rhel.config @@ -2483,6 +2483,7 @@ CONFIG_INFINIBAND_CXGB4=m CONFIG_INFINIBAND_EFA=m CONFIG_INFINIBAND_HFI1=m # CONFIG_INFINIBAND_HNS is not set +# CONFIG_INFINIBAND_IONIC is not set CONFIG_INFINIBAND_IPOIB_CM=y # CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set CONFIG_INFINIBAND_IPOIB_DEBUG=y @@ -2636,7 +2637,7 @@ CONFIG_INTEL_SDSI=m CONFIG_INTEL_SPEED_SELECT_INTERFACE=m CONFIG_INTEL_TCC_COOLING=m CONFIG_INTEL_TDX_GUEST=y -# CONFIG_INTEL_TDX_HOST is not set +CONFIG_INTEL_TDX_HOST=y CONFIG_INTEL_TH_ACPI=m CONFIG_INTEL_THC_HID=m # CONFIG_INTEL_TH_DEBUG is not set @@ -2963,6 +2964,7 @@ CONFIG_KVM_GUEST=y CONFIG_KVM_HYPERV=y CONFIG_KVM_INTEL=m # CONFIG_KVM_INTEL_PROVE_VE is not set +CONFIG_KVM_INTEL_TDX=y CONFIG_KVM=m CONFIG_KVM_MAX_NR_VCPUS=4096 # CONFIG_KVM_PROVE_MMU is not set @@ -4606,6 +4608,7 @@ CONFIG_PROFILING=y CONFIG_PROVE_NVDIMM_LOCKING=y # CONFIG_PROVE_RAW_LOCK_NESTING is not set CONFIG_PROVIDE_OHCI1394_DMA_INIT=y +CONFIG_PRP_DUP_DISCARD_KUNIT_TEST=m CONFIG_PSAMPLE=m # CONFIG_PSE_CONTROLLER is not set CONFIG_PSI_DEFAULT_DISABLED=y diff --git a/kernel.changelog b/kernel.changelog index 9ea2b75cd..6c2ef3676 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,95 @@ +* Tue Jan 27 2026 CKI KWF Bot [5.14.0-668.el9] +- bonding: don't set oif to bond dev when getting NS target destination (CKI Backport Bot) [RHEL-128764] +- thunderbolt: Add support for Intel Wildcat Lake (Desnes Nunes) [RHEL-95661] +- crypto: seqiv - Do not use req->iv after crypto_aead_encrypt (Xin Long) [RHEL-118175] +- redhat: hsr: Remove tech preview tainting (Felix Maurer) [RHEL-100941] +- redhat: Package net/hsr selftests (Felix Maurer) [RHEL-127796] +- net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (Felix Maurer) [RHEL-127794] +- hsr: Follow standard for HSRv0 supervision frames (Felix Maurer) [RHEL-127794] +- hsr: Fix supervision frame sending on HSRv0 (Felix Maurer) [RHEL-127794] +- net: hsr: prevent creation of HSR device with slaves from another netns (Felix Maurer) [RHEL-127794] +- net/hsr: add interlink to fill_info output (Felix Maurer) [RHEL-127764 RHEL-127794] +- net/hsr: add protocol version to fill_info output (Felix Maurer) [RHEL-127764 RHEL-127794] +- hsr: hold rcu and dev lock for hsr_get_port_ndev (Felix Maurer) [RHEL-127794] +- hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr (Felix Maurer) [RHEL-127794] +- hsr: use rtnl lock when iterating over ports (Felix Maurer) [RHEL-127794] +- hsr: use netdev_master_upper_dev_link() when linking lower ports (Felix Maurer) [RHEL-127794] +- net, hsr: reject HSR frame if skb can't hold tag (Felix Maurer) [RHEL-127794] {CVE-2025-39703} +- net: hsr: sync hw addr of slave2 according to slave1 hw addr on PRP (Felix Maurer) [RHEL-127794 RHEL-130474] +- redhat: hsr: Enable KUnit test for PRP duplicate discard (Felix Maurer) [RHEL-127794] +- net: hsr: Add KUnit test for PRP (Felix Maurer) [RHEL-127794] +- net: hsr: Fix PRP duplicate detection (Felix Maurer) [RHEL-127794] +- net: hsr: Create and export hsr_get_port_ndev() (Felix Maurer) [RHEL-127794] +- net: hsr: remove synchronize_rcu() from hsr_add_port() (Felix Maurer) [RHEL-127794] +- net: hsr: remove one synchronize_rcu() from hsr_del_port() (Felix Maurer) [RHEL-127794] +- net: hsr: must allocate more bytes for RedBox support (Felix Maurer) [RHEL-127794] +- selftests: hsr: Add test for VLAN (Felix Maurer) [RHEL-127794 RHEL-130476] +- net: hsr: Add VLAN CTAG filter support (Felix Maurer) [RHEL-127794 RHEL-130476] +- net: hsr: Add VLAN support (Felix Maurer) [RHEL-127794 RHEL-130476] +- tests: hsr: Increase timeout to 50 seconds (Felix Maurer) [RHEL-127794] +- net: hsr: convert to use new timer APIs (Felix Maurer) [RHEL-127794] +- net: hsr: Remove interlink_sequence_nr. (Felix Maurer) [RHEL-127794] +- net: hsr: Use the seqnr lock for frames received via interlink port. (Felix Maurer) [RHEL-127794] +- net: hsr: prevent NULL pointer dereference in hsr_proxy_announce() (Felix Maurer) [RHEL-127794] +- net: hsr: cosmetic: Remove extra white space (Felix Maurer) [RHEL-127794] +- treewide, timers: Rename from_timer() to timer_container_of() (Felix Maurer) [RHEL-100940 RHEL-127794] +- net: hsr: Send supervisory frames to HSR network with ProxyNodeTable data (Felix Maurer) [RHEL-100940 RHEL-127794] +- selftests: hsr: Extend the hsr_ping.sh test to use fixed MAC addresses (Felix Maurer) [RHEL-127794] +- selftests: hsr: Extend the hsr_redbox.sh test to use fixed MAC addresses (Felix Maurer) [RHEL-127794] +- selftests: hsr: Fix "File exists" errors for hsr_ping (Felix Maurer) [RHEL-127794] +- test: hsr: Extend the hsr_redbox.sh to have more SAN devices connected (Felix Maurer) [RHEL-127794] +- test: hsr: Call cleanup_all_ns when hsr_redbox.sh script exits (Felix Maurer) [RHEL-100940 RHEL-127794] +- net: hsr: init prune_proxy_timer sooner (Felix Maurer) [RHEL-100940 RHEL-127794] +- test: hsr: Add test for HSR RedBOX (HSR-SAN) mode of operation (Felix Maurer) [RHEL-100940 RHEL-127794] +- test: hsr: Extract version agnostic information from ping command output (Felix Maurer) [RHEL-100940 RHEL-127794] +- test: hsr: Move common code to hsr_common.sh file (Felix Maurer) [RHEL-100940 RHEL-127794] +- test: hsr: Remove script code already implemented in lib.sh (Felix Maurer) [RHEL-100940 RHEL-127794] +- net: hsr: Provide RedBox support (HSR-SAN) (Felix Maurer) [RHEL-100940 RHEL-127794] +- net: hsr: Use full string description when opening HSR network device (Felix Maurer) [RHEL-127794] +- net: hsr: Fix typo in the hsr_forward_do() function comment (Felix Maurer) [RHEL-127794] +- net: hsr: constify the struct device_type usage (Felix Maurer) [RHEL-127794] +- net: fill in MODULE_DESCRIPTION()s for HSR (Felix Maurer) [RHEL-127794] +- selftests: hsr: Extend the testsuite to also cover HSRv1. (Felix Maurer) [RHEL-127794] +- selftests: hsr: Reorder the testsuite. (Felix Maurer) [RHEL-127794] +- selftests: hsr: Use `let' properly. (Felix Maurer) [RHEL-127794] +- net/hsr: Remove unused function declarations (Felix Maurer) [RHEL-127794] +- net: ionic: map SKB after pseudo-header checksum prep (Jakub Ramaseuski) [RHEL-127815] +- net: ionic: add dma_wmb() before ringing TX doorbell (Jakub Ramaseuski) [RHEL-127815] +- ionic: convert to ndo_hwtstamp API (Jakub Ramaseuski) [RHEL-127815] +- RDMA/ionic: Fix memory leak of admin q_wr (Jakub Ramaseuski) [RHEL-127815] +- RDMA/ionic: Use ether_addr_copy instead of memcpy (Jakub Ramaseuski) [RHEL-127815] +- RDMA/ionic: Fix build failure on SPARC due to xchg() operand size (Jakub Ramaseuski) [RHEL-127815] +- ionic: use int type for err in ionic_get_module_eeprom_by_page (Jakub Ramaseuski) [RHEL-127815] +- RDMA/ionic: Add Makefile/Kconfig to kernel build environment (Jakub Ramaseuski) [RHEL-127815] +- RDMA: Add IONIC to rdma_driver_id definition (Jakub Ramaseuski) [RHEL-127815] +- RDMA/ionic: Implement device stats ops (Jakub Ramaseuski) [RHEL-127815] +- RDMA/ionic: Register device ops for miscellaneous functionality (Jakub Ramaseuski) [RHEL-127815] +- RDMA/ionic: Register device ops for datapath (Jakub Ramaseuski) [RHEL-127815] +- RDMA/ionic: Register device ops for control path (Jakub Ramaseuski) [RHEL-127815] +- RDMA/ionic: Create device queues to support admin operations (Jakub Ramaseuski) [RHEL-127815] +- RDMA/ionic: Register auxiliary module for ionic ethernet adapter (Jakub Ramaseuski) [RHEL-127815] +- redhat/configs: Disable CONFIG_INFINIBAND_IONIC in generic (Jakub Ramaseuski) [RHEL-127815] +- net: ionic: Provide doorbell and CMB region information (Jakub Ramaseuski) [RHEL-127815] +- net: ionic: Provide interrupt allocation support for the RDMA driver (Jakub Ramaseuski) [RHEL-127815] +- net: ionic: Provide RDMA reset support for the RDMA driver (Jakub Ramaseuski) [RHEL-127815] +- net: ionic: Export the APIs from net driver to support device commands (Jakub Ramaseuski) [RHEL-127815] +- net: ionic: Update LIF identity with additional RDMA capabilities (Jakub Ramaseuski) [RHEL-127815] +- net: ionic: Create an auxiliary device for rdma driver (Jakub Ramaseuski) [RHEL-127815] +- ethernet: ionic: Fix DMA mapping tests (Jakub Ramaseuski) [RHEL-127815] +- ionic: cancel delayed work earlier in remove (Jakub Ramaseuski) [RHEL-127815] +- ionic: clean dbpage in de-init (Jakub Ramaseuski) [RHEL-127815] +- ionic: print firmware heartbeat as unsigned (Jakub Ramaseuski) [RHEL-127815] +- ionic: Prevent driver/fw getting out of sync on devcmd(s) (Jakub Ramaseuski) [RHEL-127815] +- redhat: enable TDX host config (Paolo Bonzini) [RHEL-115482] +- KVM: TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-115482] +- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-115482] +- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-115482] +- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-115482] +- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-115482] +- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-115482] +- x86/virt/tdx: Avoid indirect calls to TDX assembly functions (Paolo Bonzini) [RHEL-115482] +Resolves: RHEL-100940, RHEL-100941, RHEL-115482, RHEL-118175, RHEL-127764, RHEL-127794, RHEL-127796, RHEL-127815, RHEL-128764, RHEL-130474, RHEL-130476, RHEL-95661 + * Mon Jan 26 2026 CKI KWF Bot [5.14.0-667.el9] - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() (Maurizio Lombardi) [RHEL-87800] - ata: libata-scsi: Fix system suspend for a security locked drive (Tomas Henzl) [RHEL-106827] diff --git a/kernel.spec b/kernel.spec index 892b8bcb9..8dfdf4ed6 100644 --- a/kernel.spec +++ b/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 667 +%define pkgrelease 668 %define kversion 5 -%define tarfile_release 5.14.0-667.el9 +%define tarfile_release 5.14.0-668.el9 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 667%{?buildid}%{?dist} +%define specrelease 668%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-667.el9 +%define kabiversion 5.14.0-668.el9 # # End of genspec.sh variables @@ -2725,7 +2725,7 @@ fi pushd tools/testing/selftests # We need to install here because we need to call make with ARCH set which # doesn't seem possible to do in the install section. -%{make} %{?_smp_mflags} ARCH=$Arch V=1 TARGETS="bpf cgroup kmod mm livepatch net net/forwarding net/mptcp net/netfilter tc-testing memfd drivers/net/bonding iommu cachestat drivers/net" SKIP_TARGETS="" FORCE_TARGETS=1 INSTALL_PATH=%{buildroot}%{_libexecdir}/kselftests VMLINUX_H="${RPM_VMLINUX_H}" DEFAULT_INSTALL_HDR_PATH=0 install +%{make} %{?_smp_mflags} ARCH=$Arch V=1 TARGETS="bpf cgroup kmod mm livepatch net net/forwarding net/hsr net/mptcp net/netfilter tc-testing memfd drivers/net/bonding iommu cachestat drivers/net" SKIP_TARGETS="" FORCE_TARGETS=1 INSTALL_PATH=%{buildroot}%{_libexecdir}/kselftests VMLINUX_H="${RPM_VMLINUX_H}" DEFAULT_INSTALL_HDR_PATH=0 install # 'make install' for bpf is broken and upstream refuses to fix it. # Install the needed files manually. @@ -3085,6 +3085,12 @@ find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/net/forwardi find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/net/forwarding/{} \; find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/net/forwarding/{} \; popd +# install net/hsr selftests +pushd tools/testing/selftests/net/hsr +find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/net/hsr/{} \; +find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/net/hsr/{} \; +find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/net/hsr/{} \; +popd # install net/mptcp selftests pushd tools/testing/selftests/net/mptcp find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/net/mptcp/{} \; @@ -3705,6 +3711,97 @@ fi # # %changelog +* Tue Jan 27 2026 CKI KWF Bot [5.14.0-668.el9] +- bonding: don't set oif to bond dev when getting NS target destination (CKI Backport Bot) [RHEL-128764] +- thunderbolt: Add support for Intel Wildcat Lake (Desnes Nunes) [RHEL-95661] +- crypto: seqiv - Do not use req->iv after crypto_aead_encrypt (Xin Long) [RHEL-118175] +- redhat: hsr: Remove tech preview tainting (Felix Maurer) [RHEL-100941] +- redhat: Package net/hsr selftests (Felix Maurer) [RHEL-127796] +- net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (Felix Maurer) [RHEL-127794] +- hsr: Follow standard for HSRv0 supervision frames (Felix Maurer) [RHEL-127794] +- hsr: Fix supervision frame sending on HSRv0 (Felix Maurer) [RHEL-127794] +- net: hsr: prevent creation of HSR device with slaves from another netns (Felix Maurer) [RHEL-127794] +- net/hsr: add interlink to fill_info output (Felix Maurer) [RHEL-127764 RHEL-127794] +- net/hsr: add protocol version to fill_info output (Felix Maurer) [RHEL-127764 RHEL-127794] +- hsr: hold rcu and dev lock for hsr_get_port_ndev (Felix Maurer) [RHEL-127794] +- hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr (Felix Maurer) [RHEL-127794] +- hsr: use rtnl lock when iterating over ports (Felix Maurer) [RHEL-127794] +- hsr: use netdev_master_upper_dev_link() when linking lower ports (Felix Maurer) [RHEL-127794] +- net, hsr: reject HSR frame if skb can't hold tag (Felix Maurer) [RHEL-127794] {CVE-2025-39703} +- net: hsr: sync hw addr of slave2 according to slave1 hw addr on PRP (Felix Maurer) [RHEL-127794 RHEL-130474] +- redhat: hsr: Enable KUnit test for PRP duplicate discard (Felix Maurer) [RHEL-127794] +- net: hsr: Add KUnit test for PRP (Felix Maurer) [RHEL-127794] +- net: hsr: Fix PRP duplicate detection (Felix Maurer) [RHEL-127794] +- net: hsr: Create and export hsr_get_port_ndev() (Felix Maurer) [RHEL-127794] +- net: hsr: remove synchronize_rcu() from hsr_add_port() (Felix Maurer) [RHEL-127794] +- net: hsr: remove one synchronize_rcu() from hsr_del_port() (Felix Maurer) [RHEL-127794] +- net: hsr: must allocate more bytes for RedBox support (Felix Maurer) [RHEL-127794] +- selftests: hsr: Add test for VLAN (Felix Maurer) [RHEL-127794 RHEL-130476] +- net: hsr: Add VLAN CTAG filter support (Felix Maurer) [RHEL-127794 RHEL-130476] +- net: hsr: Add VLAN support (Felix Maurer) [RHEL-127794 RHEL-130476] +- tests: hsr: Increase timeout to 50 seconds (Felix Maurer) [RHEL-127794] +- net: hsr: convert to use new timer APIs (Felix Maurer) [RHEL-127794] +- net: hsr: Remove interlink_sequence_nr. (Felix Maurer) [RHEL-127794] +- net: hsr: Use the seqnr lock for frames received via interlink port. (Felix Maurer) [RHEL-127794] +- net: hsr: prevent NULL pointer dereference in hsr_proxy_announce() (Felix Maurer) [RHEL-127794] +- net: hsr: cosmetic: Remove extra white space (Felix Maurer) [RHEL-127794] +- treewide, timers: Rename from_timer() to timer_container_of() (Felix Maurer) [RHEL-100940 RHEL-127794] +- net: hsr: Send supervisory frames to HSR network with ProxyNodeTable data (Felix Maurer) [RHEL-100940 RHEL-127794] +- selftests: hsr: Extend the hsr_ping.sh test to use fixed MAC addresses (Felix Maurer) [RHEL-127794] +- selftests: hsr: Extend the hsr_redbox.sh test to use fixed MAC addresses (Felix Maurer) [RHEL-127794] +- selftests: hsr: Fix "File exists" errors for hsr_ping (Felix Maurer) [RHEL-127794] +- test: hsr: Extend the hsr_redbox.sh to have more SAN devices connected (Felix Maurer) [RHEL-127794] +- test: hsr: Call cleanup_all_ns when hsr_redbox.sh script exits (Felix Maurer) [RHEL-100940 RHEL-127794] +- net: hsr: init prune_proxy_timer sooner (Felix Maurer) [RHEL-100940 RHEL-127794] +- test: hsr: Add test for HSR RedBOX (HSR-SAN) mode of operation (Felix Maurer) [RHEL-100940 RHEL-127794] +- test: hsr: Extract version agnostic information from ping command output (Felix Maurer) [RHEL-100940 RHEL-127794] +- test: hsr: Move common code to hsr_common.sh file (Felix Maurer) [RHEL-100940 RHEL-127794] +- test: hsr: Remove script code already implemented in lib.sh (Felix Maurer) [RHEL-100940 RHEL-127794] +- net: hsr: Provide RedBox support (HSR-SAN) (Felix Maurer) [RHEL-100940 RHEL-127794] +- net: hsr: Use full string description when opening HSR network device (Felix Maurer) [RHEL-127794] +- net: hsr: Fix typo in the hsr_forward_do() function comment (Felix Maurer) [RHEL-127794] +- net: hsr: constify the struct device_type usage (Felix Maurer) [RHEL-127794] +- net: fill in MODULE_DESCRIPTION()s for HSR (Felix Maurer) [RHEL-127794] +- selftests: hsr: Extend the testsuite to also cover HSRv1. (Felix Maurer) [RHEL-127794] +- selftests: hsr: Reorder the testsuite. (Felix Maurer) [RHEL-127794] +- selftests: hsr: Use `let' properly. (Felix Maurer) [RHEL-127794] +- net/hsr: Remove unused function declarations (Felix Maurer) [RHEL-127794] +- net: ionic: map SKB after pseudo-header checksum prep (Jakub Ramaseuski) [RHEL-127815] +- net: ionic: add dma_wmb() before ringing TX doorbell (Jakub Ramaseuski) [RHEL-127815] +- ionic: convert to ndo_hwtstamp API (Jakub Ramaseuski) [RHEL-127815] +- RDMA/ionic: Fix memory leak of admin q_wr (Jakub Ramaseuski) [RHEL-127815] +- RDMA/ionic: Use ether_addr_copy instead of memcpy (Jakub Ramaseuski) [RHEL-127815] +- RDMA/ionic: Fix build failure on SPARC due to xchg() operand size (Jakub Ramaseuski) [RHEL-127815] +- ionic: use int type for err in ionic_get_module_eeprom_by_page (Jakub Ramaseuski) [RHEL-127815] +- RDMA/ionic: Add Makefile/Kconfig to kernel build environment (Jakub Ramaseuski) [RHEL-127815] +- RDMA: Add IONIC to rdma_driver_id definition (Jakub Ramaseuski) [RHEL-127815] +- RDMA/ionic: Implement device stats ops (Jakub Ramaseuski) [RHEL-127815] +- RDMA/ionic: Register device ops for miscellaneous functionality (Jakub Ramaseuski) [RHEL-127815] +- RDMA/ionic: Register device ops for datapath (Jakub Ramaseuski) [RHEL-127815] +- RDMA/ionic: Register device ops for control path (Jakub Ramaseuski) [RHEL-127815] +- RDMA/ionic: Create device queues to support admin operations (Jakub Ramaseuski) [RHEL-127815] +- RDMA/ionic: Register auxiliary module for ionic ethernet adapter (Jakub Ramaseuski) [RHEL-127815] +- redhat/configs: Disable CONFIG_INFINIBAND_IONIC in generic (Jakub Ramaseuski) [RHEL-127815] +- net: ionic: Provide doorbell and CMB region information (Jakub Ramaseuski) [RHEL-127815] +- net: ionic: Provide interrupt allocation support for the RDMA driver (Jakub Ramaseuski) [RHEL-127815] +- net: ionic: Provide RDMA reset support for the RDMA driver (Jakub Ramaseuski) [RHEL-127815] +- net: ionic: Export the APIs from net driver to support device commands (Jakub Ramaseuski) [RHEL-127815] +- net: ionic: Update LIF identity with additional RDMA capabilities (Jakub Ramaseuski) [RHEL-127815] +- net: ionic: Create an auxiliary device for rdma driver (Jakub Ramaseuski) [RHEL-127815] +- ethernet: ionic: Fix DMA mapping tests (Jakub Ramaseuski) [RHEL-127815] +- ionic: cancel delayed work earlier in remove (Jakub Ramaseuski) [RHEL-127815] +- ionic: clean dbpage in de-init (Jakub Ramaseuski) [RHEL-127815] +- ionic: print firmware heartbeat as unsigned (Jakub Ramaseuski) [RHEL-127815] +- ionic: Prevent driver/fw getting out of sync on devcmd(s) (Jakub Ramaseuski) [RHEL-127815] +- redhat: enable TDX host config (Paolo Bonzini) [RHEL-115482] +- KVM: TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-115482] +- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-115482] +- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-115482] +- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-115482] +- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-115482] +- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-115482] +- x86/virt/tdx: Avoid indirect calls to TDX assembly functions (Paolo Bonzini) [RHEL-115482] + * Mon Jan 26 2026 CKI KWF Bot [5.14.0-667.el9] - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() (Maurizio Lombardi) [RHEL-87800] - ata: libata-scsi: Fix system suspend for a security locked drive (Tomas Henzl) [RHEL-106827] diff --git a/mod-internal.list b/mod-internal.list index 52fd85cc2..7cef42d7b 100644 --- a/mod-internal.list +++ b/mod-internal.list @@ -6,6 +6,7 @@ list-test sysctl-test mptcp_crypto_test mptcp_token_test +prp_dup_discard_test bitfield_kunit cmdline_kunit property-entry-test diff --git a/sources b/sources index 2eac0e4fe..6a5871da7 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-667.el9.tar.xz) = 1147c0de239dbe2e07a7e99df51d6228008244113b08cc9f3db05ee088a8bce1bd77d739d403d739834a82f7e3cfe2f2af04929d557511073cec365157b1cd9e -SHA512 (kernel-abi-stablelists-5.14.0-667.el9.tar.bz2) = cfba95a8a71e5abd7dedf6b10b27b9dbe7c088044da40cf333b617568da77cbbbfdb131cc98fabcaa99e80460d86a210d8e74a392b5572014db0a37724a565b2 -SHA512 (kernel-kabi-dw-5.14.0-667.el9.tar.bz2) = 3fa00f04144167d208a4be233174393a8e594c51250d9dbaca82576e578d5e960dfb6e2cdd52175ad01900a6ea602b2feadc51deb6ac8a2c2d765f5f2aea6207 +SHA512 (linux-5.14.0-668.el9.tar.xz) = 25adfc2dbe58e7b7d34efc20454f8fde5a7f9776633a593c7263d2ba11a1ef89477d8a5c820b9f48f8aa6464fc94e15694a293f42bfcca737ae1f852749a7019 +SHA512 (kernel-abi-stablelists-5.14.0-668.el9.tar.bz2) = ef833287081da2a486415de8df58b41d351954de5ea17caa0f6bd46487402f3f8fd49701ffb976c727940ee8c73a6e1c2964ad5dc3d06189d1ee0806ba870b27 +SHA512 (kernel-kabi-dw-5.14.0-668.el9.tar.bz2) = 131cb4153ce934bc65cb05029a4622531d91bb6d41b4c9e77d2980436b392c88047164dd8e1102c3cd582ecdfc85fbd8203ab86cb5d4b172f1c03107c44d95aa