diff --git a/.gitignore b/.gitignore index cfd5d0777..0fe387e81 100644 --- a/.gitignore +++ b/.gitignore @@ -1,6 +1,6 @@ -SOURCES/kernel-abi-stablelists-5.14.0-687.34.1.el9_8.tar.bz2 -SOURCES/kernel-kabi-dw-5.14.0-687.34.1.el9_8.tar.bz2 -SOURCES/linux-5.14.0-687.34.1.el9_8.tar.xz +SOURCES/kernel-abi-stablelists-5.14.0-687.36.1.el9_8.tar.bz2 +SOURCES/kernel-kabi-dw-5.14.0-687.36.1.el9_8.tar.bz2 +SOURCES/linux-5.14.0-687.36.1.el9_8.tar.xz SOURCES/nvidiabfdpu.x509 SOURCES/nvidiagpuoot001.x509 SOURCES/nvidiajetsonsoc.x509 diff --git a/.kernel.metadata b/.kernel.metadata index 88d09d0ec..1cff92dae 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,6 +1,6 @@ -0358490f1fecf51bc56cc0fd770793fd9cec54b6 SOURCES/kernel-abi-stablelists-5.14.0-687.34.1.el9_8.tar.bz2 -fd3b4a5ea1f0a2b4b796b9d80d098aefa3732e12 SOURCES/kernel-kabi-dw-5.14.0-687.34.1.el9_8.tar.bz2 -192fe3aae0d12a08f309c57977b18beda18d0bdf SOURCES/linux-5.14.0-687.34.1.el9_8.tar.xz +0ba384f8e1dd565339b3e139d9c2cbb5e7ac4db1 SOURCES/kernel-abi-stablelists-5.14.0-687.36.1.el9_8.tar.bz2 +e2fb3b35cd695ebc51b9d9c67d009785aed413d2 SOURCES/kernel-kabi-dw-5.14.0-687.36.1.el9_8.tar.bz2 +d81c0aea0998d685beb2ad98bc9671fcb223a01e SOURCES/linux-5.14.0-687.36.1.el9_8.tar.xz 3dc4997e0273ca116d52a52238a57403aba5dafb SOURCES/nvidiabfdpu.x509 4fff8080e88afffc06d8ef5004db8d53bb21237f SOURCES/nvidiagpuoot001.x509 18378ab150ef13ef65609224e10a2e8501d82915 SOURCES/nvidiajetsonsoc.x509 diff --git a/SOURCES/Makefile.rhelver b/SOURCES/Makefile.rhelver index a3dec62c1..2716a4b32 100644 --- a/SOURCES/Makefile.rhelver +++ b/SOURCES/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 8 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 687.34.1 +RHEL_RELEASE = 687.36.1 # # ZSTREAM diff --git a/SOURCES/kernel.changelog b/SOURCES/kernel.changelog index 337b52dab..633f97054 100644 --- a/SOURCES/kernel.changelog +++ b/SOURCES/kernel.changelog @@ -1,3 +1,25 @@ +* Wed Aug 05 2026 CKI KWF Bot [5.14.0-687.36.1.el9_8] +- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] +- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] +- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] +- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] +- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] +- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} +- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} +- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} +- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} +Resolves: RHEL-193526, RHEL-211058, RHEL-215575 + +* Tue Aug 04 2026 CKI KWF Bot [5.14.0-687.35.1.el9_8] +- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] +- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] +- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] +- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] +- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] +- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] +- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} +Resolves: RHEL-179745, RHEL-186331 + * Mon Aug 03 2026 CKI KWF Bot [5.14.0-687.34.1.el9_8] - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index d341dcac2..d00155d7a 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 687.34.1 +%define pkgrelease 687.36.1 %define kversion 5 -%define tarfile_release 5.14.0-687.34.1.el9_8 +%define tarfile_release 5.14.0-687.36.1.el9_8 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 687.34.1%{?buildid}%{?dist} +%define specrelease 687.36.1%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-687.34.1.el9_8 +%define kabiversion 5.14.0-687.36.1.el9_8 # # End of genspec.sh variables @@ -3795,7 +3795,7 @@ fi # # %changelog -* Thu Aug 06 2026 Andrew Lukoshko - 5.14.0-687.34.1 +* Fri Aug 07 2026 Andrew Lukoshko - 5.14.0-687.36.1 - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -3807,12 +3807,32 @@ fi - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained -* Thu Aug 06 2026 Eduard Abdullin - 5.14.0-687.34.1 +* Fri Aug 07 2026 Eduard Abdullin - 5.14.0-687.36.1 - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds +* Wed Aug 05 2026 CKI KWF Bot [5.14.0-687.36.1.el9_8] +- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] +- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] +- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] +- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] +- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] +- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} +- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} +- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} +- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} + +* Tue Aug 04 2026 CKI KWF Bot [5.14.0-687.35.1.el9_8] +- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] +- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] +- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] +- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] +- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] +- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] +- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} + * Mon Aug 03 2026 CKI KWF Bot [5.14.0-687.34.1.el9_8] - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]