kernel-6.12.0-257.el10

* Thu Aug 06 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-257.el10]
- redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-222562]
- wifi: ath12k: fix NULL pointer dereference in rhash table destroy (Filip Balluch) [RHEL-213608]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-219079]
- rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-207634]
- rtla: Stop the record trace on interrupt (Tomas Glozar) [RHEL-207634]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-198358]
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-190430]
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190345] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190345]
- PCI: Update saved_config_space upon resource assignment (Myron Stowe) [RHEL-178011]
- PCI: Align head space better (Myron Stowe) [RHEL-178011]
- PCI: Rename window_alignment() to pci_min_window_alignment() (Myron Stowe) [RHEL-178011]
- parisc/PCI: Clean up align handling (Myron Stowe) [RHEL-178011]
- MIPS: PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
- m68k/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
- ARM/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
- resource: Rename 'tmp' variable to 'full_avail' (Myron Stowe) [RHEL-178011]
- resource: Pass full extent of empty space to resource_alignf callback (Myron Stowe) [RHEL-178011]
- resource: Add __resource_contains_unbound() for internal contains checks (Myron Stowe) [RHEL-178011]
- PCI: Prevent assignment to unsupported bridge windows (Myron Stowe) [RHEL-178011]
- Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" (Myron Stowe) [RHEL-178011]
- resource: improve child resource handling in release_mem_region_adjustable() (Myron Stowe) [RHEL-178011]
- resource: fix false warning in __request_region() (Myron Stowe) [RHEL-178011]
- kernel/resource: simplify API __devm_release_region() implementation (Myron Stowe) [RHEL-178011]
- resource: avoid unnecessary resource tree walking in __region_intersects() (Myron Stowe) [RHEL-178011]
- resource: correct reallocate_resource() documentation (Myron Stowe) [RHEL-178011]
- resource: introduce is_type_match() helper and use it (Myron Stowe) [RHEL-178011]
- resource: replace open coded resource_intersection() (Myron Stowe) [RHEL-178011]
- selinux: suppress warning flood for retired DCCP netlink messages (Ivan Vecera) [RHEL-179873]
- dccp Remove inet_hashinfo2_init_mod(). (Ivan Vecera) [RHEL-179873]
- tcp: Move TCP-specific diag functions to tcp_diag.c. (Ivan Vecera) [RHEL-179873]
- tcp: Don't pass hashinfo to inet_diag helpers. (Ivan Vecera) [RHEL-179873]
- tcp: Don't pass hashinfo to socket lookup helpers. (Ivan Vecera) [RHEL-179873]
- tcp: Remove hashinfo test for inet6?_lookup_run_sk_lookup(). (Ivan Vecera) [RHEL-179873]
- tcp: Remove timewait_sock_ops.twsk_destructor(). (Ivan Vecera) [RHEL-179873]
- tcp: Remove sk_protocol test for tcp_twsk_unique(). (Ivan Vecera) [RHEL-179873]
- tcp: Rename tcp_or_dccp_get_hashinfo(). (Ivan Vecera) [RHEL-179873]
- net: Unexport shared functions for DCCP. (Ivan Vecera) [RHEL-179873]
- net: Retire DCCP socket. (Ivan Vecera) [RHEL-179873]
- selftest: net: Remove DCCP bits. (Ivan Vecera) [RHEL-179873]
- selinux: apply clang format to security/selinux/nlmsgtab.c (Ivan Vecera) [RHEL-179873]
- redhat: sign UKI's inner vmlinuz with modules signing key (Vitaly Kuznetsov) [RHEL-223625]
Resolves: RHEL-178011, RHEL-179873, RHEL-190345, RHEL-190430, RHEL-198358, RHEL-207634, RHEL-213608, RHEL-219079, RHEL-222562, RHEL-223625

Signed-off-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>
This commit is contained in:
CKI KWF Bot 2026-08-06 12:02:00 +00:00
parent 780a155808
commit ccdb89bbbb
23 changed files with 112 additions and 28 deletions

View File

@ -12,7 +12,7 @@ RHEL_MINOR = 3
# #
# Use this spot to avoid future merge conflicts. # Use this spot to avoid future merge conflicts.
# Do not trim this comment. # Do not trim this comment.
RHEL_RELEASE = 256 RHEL_RELEASE = 257
# #
# RHEL_REBASE_NUM # RHEL_REBASE_NUM

View File

@ -3332,7 +3332,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
# CONFIG_IPACK_BUS is not set # CONFIG_IPACK_BUS is not set
CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IPC_NS=y CONFIG_IPC_NS=y
# CONFIG_IP_DCCP is not set
CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IP_FIB_TRIE_STATS=y
CONFIG_IPMB_DEVICE_INTERFACE=m CONFIG_IPMB_DEVICE_INTERFACE=m
CONFIG_IPMI_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m

View File

@ -3316,7 +3316,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
# CONFIG_IPACK_BUS is not set # CONFIG_IPACK_BUS is not set
CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IPC_NS=y CONFIG_IPC_NS=y
# CONFIG_IP_DCCP is not set
CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IP_FIB_TRIE_STATS=y
CONFIG_IPMB_DEVICE_INTERFACE=m CONFIG_IPMB_DEVICE_INTERFACE=m
CONFIG_IPMI_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m

View File

@ -3329,7 +3329,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
# CONFIG_IPACK_BUS is not set # CONFIG_IPACK_BUS is not set
CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IPC_NS=y CONFIG_IPC_NS=y
# CONFIG_IP_DCCP is not set
CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IP_FIB_TRIE_STATS=y
CONFIG_IPMB_DEVICE_INTERFACE=m CONFIG_IPMB_DEVICE_INTERFACE=m
CONFIG_IPMI_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m

View File

@ -3313,7 +3313,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
# CONFIG_IPACK_BUS is not set # CONFIG_IPACK_BUS is not set
CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IPC_NS=y CONFIG_IPC_NS=y
# CONFIG_IP_DCCP is not set
CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IP_FIB_TRIE_STATS=y
CONFIG_IPMB_DEVICE_INTERFACE=m CONFIG_IPMB_DEVICE_INTERFACE=m
CONFIG_IPMI_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m

View File

@ -3373,7 +3373,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
# CONFIG_IPACK_BUS is not set # CONFIG_IPACK_BUS is not set
CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IPC_NS=y CONFIG_IPC_NS=y
# CONFIG_IP_DCCP is not set
CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IP_FIB_TRIE_STATS=y
CONFIG_IPMB_DEVICE_INTERFACE=m CONFIG_IPMB_DEVICE_INTERFACE=m
CONFIG_IPMI_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m

View File

@ -3357,7 +3357,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
# CONFIG_IPACK_BUS is not set # CONFIG_IPACK_BUS is not set
CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IPC_NS=y CONFIG_IPC_NS=y
# CONFIG_IP_DCCP is not set
CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IP_FIB_TRIE_STATS=y
CONFIG_IPMB_DEVICE_INTERFACE=m CONFIG_IPMB_DEVICE_INTERFACE=m
CONFIG_IPMI_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m

View File

@ -3370,7 +3370,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
# CONFIG_IPACK_BUS is not set # CONFIG_IPACK_BUS is not set
CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IPC_NS=y CONFIG_IPC_NS=y
# CONFIG_IP_DCCP is not set
CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IP_FIB_TRIE_STATS=y
CONFIG_IPMB_DEVICE_INTERFACE=m CONFIG_IPMB_DEVICE_INTERFACE=m
CONFIG_IPMI_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m

View File

@ -3354,7 +3354,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
# CONFIG_IPACK_BUS is not set # CONFIG_IPACK_BUS is not set
CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IPC_NS=y CONFIG_IPC_NS=y
# CONFIG_IP_DCCP is not set
CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IP_FIB_TRIE_STATS=y
CONFIG_IPMB_DEVICE_INTERFACE=m CONFIG_IPMB_DEVICE_INTERFACE=m
CONFIG_IPMI_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m

View File

@ -2829,7 +2829,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
# CONFIG_IPACK_BUS is not set # CONFIG_IPACK_BUS is not set
CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IPC_NS=y CONFIG_IPC_NS=y
# CONFIG_IP_DCCP is not set
CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IP_FIB_TRIE_STATS=y
# CONFIG_IPMB_DEVICE_INTERFACE is not set # CONFIG_IPMB_DEVICE_INTERFACE is not set
CONFIG_IPMI_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m

View File

@ -2813,7 +2813,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
# CONFIG_IPACK_BUS is not set # CONFIG_IPACK_BUS is not set
CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IPC_NS=y CONFIG_IPC_NS=y
# CONFIG_IP_DCCP is not set
CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IP_FIB_TRIE_STATS=y
# CONFIG_IPMB_DEVICE_INTERFACE is not set # CONFIG_IPMB_DEVICE_INTERFACE is not set
CONFIG_IPMI_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m

View File

@ -2837,7 +2837,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
# CONFIG_IPACK_BUS is not set # CONFIG_IPACK_BUS is not set
CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IPC_NS=y CONFIG_IPC_NS=y
# CONFIG_IP_DCCP is not set
CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IP_FIB_TRIE_STATS=y
# CONFIG_IPMB_DEVICE_INTERFACE is not set # CONFIG_IPMB_DEVICE_INTERFACE is not set
CONFIG_IPMI_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m

View File

@ -2821,7 +2821,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
# CONFIG_IPACK_BUS is not set # CONFIG_IPACK_BUS is not set
CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IPC_NS=y CONFIG_IPC_NS=y
# CONFIG_IP_DCCP is not set
CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IP_FIB_TRIE_STATS=y
# CONFIG_IPMB_DEVICE_INTERFACE is not set # CONFIG_IPMB_DEVICE_INTERFACE is not set
CONFIG_IPMI_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m

View File

@ -2816,7 +2816,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
# CONFIG_IPACK_BUS is not set # CONFIG_IPACK_BUS is not set
CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IPC_NS=y CONFIG_IPC_NS=y
# CONFIG_IP_DCCP is not set
CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IP_FIB_TRIE_STATS=y
# CONFIG_IPMB_DEVICE_INTERFACE is not set # CONFIG_IPMB_DEVICE_INTERFACE is not set
# CONFIG_IPMI_DEVICE_INTERFACE is not set # CONFIG_IPMI_DEVICE_INTERFACE is not set

View File

@ -2800,7 +2800,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
# CONFIG_IPACK_BUS is not set # CONFIG_IPACK_BUS is not set
CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IPC_NS=y CONFIG_IPC_NS=y
# CONFIG_IP_DCCP is not set
CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IP_FIB_TRIE_STATS=y
# CONFIG_IPMB_DEVICE_INTERFACE is not set # CONFIG_IPMB_DEVICE_INTERFACE is not set
# CONFIG_IPMI_DEVICE_INTERFACE is not set # CONFIG_IPMI_DEVICE_INTERFACE is not set

View File

@ -2807,7 +2807,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
# CONFIG_IPACK_BUS is not set # CONFIG_IPACK_BUS is not set
CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IPC_NS=y CONFIG_IPC_NS=y
# CONFIG_IP_DCCP is not set
CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IP_FIB_TRIE_STATS=y
# CONFIG_IPMB_DEVICE_INTERFACE is not set # CONFIG_IPMB_DEVICE_INTERFACE is not set
# CONFIG_IPMI_DEVICE_INTERFACE is not set # CONFIG_IPMI_DEVICE_INTERFACE is not set

View File

@ -3065,7 +3065,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
# CONFIG_IPACK_BUS is not set # CONFIG_IPACK_BUS is not set
CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IPC_NS=y CONFIG_IPC_NS=y
# CONFIG_IP_DCCP is not set
CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IP_FIB_TRIE_STATS=y
# CONFIG_IPMB_DEVICE_INTERFACE is not set # CONFIG_IPMB_DEVICE_INTERFACE is not set
CONFIG_IPMI_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m

View File

@ -3049,7 +3049,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
# CONFIG_IPACK_BUS is not set # CONFIG_IPACK_BUS is not set
CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IPC_NS=y CONFIG_IPC_NS=y
# CONFIG_IP_DCCP is not set
CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IP_FIB_TRIE_STATS=y
# CONFIG_IPMB_DEVICE_INTERFACE is not set # CONFIG_IPMB_DEVICE_INTERFACE is not set
CONFIG_IPMI_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m

View File

@ -3106,7 +3106,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
# CONFIG_IPACK_BUS is not set # CONFIG_IPACK_BUS is not set
CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IPC_NS=y CONFIG_IPC_NS=y
# CONFIG_IP_DCCP is not set
CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IP_FIB_TRIE_STATS=y
# CONFIG_IPMB_DEVICE_INTERFACE is not set # CONFIG_IPMB_DEVICE_INTERFACE is not set
CONFIG_IPMI_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m

View File

@ -3090,7 +3090,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
# CONFIG_IPACK_BUS is not set # CONFIG_IPACK_BUS is not set
CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IPC_NS=y CONFIG_IPC_NS=y
# CONFIG_IP_DCCP is not set
CONFIG_IP_FIB_TRIE_STATS=y CONFIG_IP_FIB_TRIE_STATS=y
# CONFIG_IPMB_DEVICE_INTERFACE is not set # CONFIG_IPMB_DEVICE_INTERFACE is not set
CONFIG_IPMI_DEVICE_INTERFACE=m CONFIG_IPMI_DEVICE_INTERFACE=m

View File

@ -1,3 +1,48 @@
* Thu Aug 06 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-257.el10]
- redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-222562]
- wifi: ath12k: fix NULL pointer dereference in rhash table destroy (Filip Balluch) [RHEL-213608]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-219079]
- rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-207634]
- rtla: Stop the record trace on interrupt (Tomas Glozar) [RHEL-207634]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-198358]
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-190430]
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190345] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190345]
- PCI: Update saved_config_space upon resource assignment (Myron Stowe) [RHEL-178011]
- PCI: Align head space better (Myron Stowe) [RHEL-178011]
- PCI: Rename window_alignment() to pci_min_window_alignment() (Myron Stowe) [RHEL-178011]
- parisc/PCI: Clean up align handling (Myron Stowe) [RHEL-178011]
- MIPS: PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
- m68k/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
- ARM/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
- resource: Rename 'tmp' variable to 'full_avail' (Myron Stowe) [RHEL-178011]
- resource: Pass full extent of empty space to resource_alignf callback (Myron Stowe) [RHEL-178011]
- resource: Add __resource_contains_unbound() for internal contains checks (Myron Stowe) [RHEL-178011]
- PCI: Prevent assignment to unsupported bridge windows (Myron Stowe) [RHEL-178011]
- Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" (Myron Stowe) [RHEL-178011]
- resource: improve child resource handling in release_mem_region_adjustable() (Myron Stowe) [RHEL-178011]
- resource: fix false warning in __request_region() (Myron Stowe) [RHEL-178011]
- kernel/resource: simplify API __devm_release_region() implementation (Myron Stowe) [RHEL-178011]
- resource: avoid unnecessary resource tree walking in __region_intersects() (Myron Stowe) [RHEL-178011]
- resource: correct reallocate_resource() documentation (Myron Stowe) [RHEL-178011]
- resource: introduce is_type_match() helper and use it (Myron Stowe) [RHEL-178011]
- resource: replace open coded resource_intersection() (Myron Stowe) [RHEL-178011]
- selinux: suppress warning flood for retired DCCP netlink messages (Ivan Vecera) [RHEL-179873]
- dccp Remove inet_hashinfo2_init_mod(). (Ivan Vecera) [RHEL-179873]
- tcp: Move TCP-specific diag functions to tcp_diag.c. (Ivan Vecera) [RHEL-179873]
- tcp: Don't pass hashinfo to inet_diag helpers. (Ivan Vecera) [RHEL-179873]
- tcp: Don't pass hashinfo to socket lookup helpers. (Ivan Vecera) [RHEL-179873]
- tcp: Remove hashinfo test for inet6?_lookup_run_sk_lookup(). (Ivan Vecera) [RHEL-179873]
- tcp: Remove timewait_sock_ops.twsk_destructor(). (Ivan Vecera) [RHEL-179873]
- tcp: Remove sk_protocol test for tcp_twsk_unique(). (Ivan Vecera) [RHEL-179873]
- tcp: Rename tcp_or_dccp_get_hashinfo(). (Ivan Vecera) [RHEL-179873]
- net: Unexport shared functions for DCCP. (Ivan Vecera) [RHEL-179873]
- net: Retire DCCP socket. (Ivan Vecera) [RHEL-179873]
- selftest: net: Remove DCCP bits. (Ivan Vecera) [RHEL-179873]
- selinux: apply clang format to security/selinux/nlmsgtab.c (Ivan Vecera) [RHEL-179873]
- redhat: sign UKI's inner vmlinuz with modules signing key (Vitaly Kuznetsov) [RHEL-223625]
Resolves: RHEL-178011, RHEL-179873, RHEL-190345, RHEL-190430, RHEL-198358, RHEL-207634, RHEL-213608, RHEL-219079, RHEL-222562, RHEL-223625
* Wed Aug 05 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-256.el10] * Wed Aug 05 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-256.el10]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219622] {CVE-2026-64320} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219622] {CVE-2026-64320}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-193996] - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-193996]

View File

@ -179,15 +179,15 @@ Summary: The Linux kernel
%define specrpmversion 6.12.0 %define specrpmversion 6.12.0
%define specversion 6.12.0 %define specversion 6.12.0
%define patchversion 6.12 %define patchversion 6.12
%define pkgrelease 256 %define pkgrelease 257
%define kversion 6 %define kversion 6
%define tarfile_release 6.12.0-256.el10 %define tarfile_release 6.12.0-257.el10
# This is needed to do merge window version magic # This is needed to do merge window version magic
%define patchlevel 12 %define patchlevel 12
# This allows pkg_release to have configurable %%{?dist} tag # This allows pkg_release to have configurable %%{?dist} tag
%define specrelease 256%{?buildid}%{?dist} %define specrelease 257%{?buildid}%{?dist}
# This defines the kabi tarball version # This defines the kabi tarball version
%define kabiversion 6.12.0-256.el10 %define kabiversion 6.12.0-257.el10
# If this variable is set to 1, a bpf selftests build failure will cause a # If this variable is set to 1, a bpf selftests build failure will cause a
# fatal kernel package build error # fatal kernel package build error
@ -2429,6 +2429,11 @@ BuildKernel() {
cp arch/$Arch/boot/zImage.stub $RPM_BUILD_ROOT/lib/modules/$KernelVer/zImage.stub-$KernelVer || : cp arch/$Arch/boot/zImage.stub $RPM_BUILD_ROOT/lib/modules/$KernelVer/zImage.stub-$KernelVer || :
fi fi
%if %{with_efiuki}
# Preserve unsigned kernel for the UKI
cp $KernelImage $KernelImage.unsigned
%endif
%if %{signkernel} %if %{signkernel}
%{log_msg "Copy kernel for signing"} %{log_msg "Copy kernel for signing"}
if [ "$KernelImage" = vmlinux ]; then if [ "$KernelImage" = vmlinux ]; then
@ -2866,6 +2871,15 @@ BuildKernel() {
%{log_msg "Skipping efiuki build"} %{log_msg "Skipping efiuki build"}
else else
%if %{with_efiuki} %if %{with_efiuki}
%if %{signkernel}%{signmodules}
# Sign inner vmlinuz with the transient modules signing key to allow kexec
KernelUnifiedVmlinuz="$KernelImage.signed.trans"
/lib/systemd/systemd-sbsign sign --certificate certs/signing_key.pem --private-key certs/signing_key.pem "$KernelImage.unsigned" --output $KernelUnifiedVmlinuz
%else
KernelUnifiedVmlinuz="$KernelImage.unsigned"
%endif
%{log_msg "Setup the EFI UKI kernel"} %{log_msg "Setup the EFI UKI kernel"}
KernelUnifiedImageDir="$RPM_BUILD_ROOT/lib/modules/$KernelVer" KernelUnifiedImageDir="$RPM_BUILD_ROOT/lib/modules/$KernelVer"
@ -2883,7 +2897,7 @@ BuildKernel() {
--logfile=$(mktemp) \ --logfile=$(mktemp) \
$KernelUnifiedInitrd $KernelUnifiedInitrd
ukify build --linux $(realpath $KernelImage) --initrd $KernelUnifiedInitrd \ ukify build --linux $KernelUnifiedVmlinuz --initrd $KernelUnifiedInitrd \
--sbat @uki.sbat --os-release @/etc/os-release --uname $KernelVer \ --sbat @uki.sbat --os-release @/etc/os-release --uname $KernelVer \
--cmdline 'console=tty0 console=ttyS0' --output $KernelUnifiedImage --cmdline 'console=tty0 console=ttyS0' --output $KernelUnifiedImage
@ -4645,6 +4659,50 @@ fi\
# #
# #
%changelog %changelog
* Thu Aug 06 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-257.el10]
- redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-222562]
- wifi: ath12k: fix NULL pointer dereference in rhash table destroy (Filip Balluch) [RHEL-213608]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-219079]
- rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-207634]
- rtla: Stop the record trace on interrupt (Tomas Glozar) [RHEL-207634]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-198358]
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-190430]
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190345] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190345]
- PCI: Update saved_config_space upon resource assignment (Myron Stowe) [RHEL-178011]
- PCI: Align head space better (Myron Stowe) [RHEL-178011]
- PCI: Rename window_alignment() to pci_min_window_alignment() (Myron Stowe) [RHEL-178011]
- parisc/PCI: Clean up align handling (Myron Stowe) [RHEL-178011]
- MIPS: PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
- m68k/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
- ARM/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
- resource: Rename 'tmp' variable to 'full_avail' (Myron Stowe) [RHEL-178011]
- resource: Pass full extent of empty space to resource_alignf callback (Myron Stowe) [RHEL-178011]
- resource: Add __resource_contains_unbound() for internal contains checks (Myron Stowe) [RHEL-178011]
- PCI: Prevent assignment to unsupported bridge windows (Myron Stowe) [RHEL-178011]
- Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" (Myron Stowe) [RHEL-178011]
- resource: improve child resource handling in release_mem_region_adjustable() (Myron Stowe) [RHEL-178011]
- resource: fix false warning in __request_region() (Myron Stowe) [RHEL-178011]
- kernel/resource: simplify API __devm_release_region() implementation (Myron Stowe) [RHEL-178011]
- resource: avoid unnecessary resource tree walking in __region_intersects() (Myron Stowe) [RHEL-178011]
- resource: correct reallocate_resource() documentation (Myron Stowe) [RHEL-178011]
- resource: introduce is_type_match() helper and use it (Myron Stowe) [RHEL-178011]
- resource: replace open coded resource_intersection() (Myron Stowe) [RHEL-178011]
- selinux: suppress warning flood for retired DCCP netlink messages (Ivan Vecera) [RHEL-179873]
- dccp Remove inet_hashinfo2_init_mod(). (Ivan Vecera) [RHEL-179873]
- tcp: Move TCP-specific diag functions to tcp_diag.c. (Ivan Vecera) [RHEL-179873]
- tcp: Don't pass hashinfo to inet_diag helpers. (Ivan Vecera) [RHEL-179873]
- tcp: Don't pass hashinfo to socket lookup helpers. (Ivan Vecera) [RHEL-179873]
- tcp: Remove hashinfo test for inet6?_lookup_run_sk_lookup(). (Ivan Vecera) [RHEL-179873]
- tcp: Remove timewait_sock_ops.twsk_destructor(). (Ivan Vecera) [RHEL-179873]
- tcp: Remove sk_protocol test for tcp_twsk_unique(). (Ivan Vecera) [RHEL-179873]
- tcp: Rename tcp_or_dccp_get_hashinfo(). (Ivan Vecera) [RHEL-179873]
- net: Unexport shared functions for DCCP. (Ivan Vecera) [RHEL-179873]
- net: Retire DCCP socket. (Ivan Vecera) [RHEL-179873]
- selftest: net: Remove DCCP bits. (Ivan Vecera) [RHEL-179873]
- selinux: apply clang format to security/selinux/nlmsgtab.c (Ivan Vecera) [RHEL-179873]
- redhat: sign UKI's inner vmlinuz with modules signing key (Vitaly Kuznetsov) [RHEL-223625]
* Wed Aug 05 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-256.el10] * Wed Aug 05 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-256.el10]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219622] {CVE-2026-64320} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219622] {CVE-2026-64320}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-193996] - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-193996]

View File

@ -1,5 +1,5 @@
SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd
SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6 SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6
SHA512 (linux-6.12.0-256.el10.tar.xz) = 960a3d7b045eab2878601744f07b8014de57b4a3e19b8fe310cfd246f79262c7d2e0352704fb575ee896b214aa86b8ed17958e1f8558e964bf0c273c22736bc9 SHA512 (linux-6.12.0-257.el10.tar.xz) = e5b22b41dadfdfb71dd8fd2fbb20be034f1af3779c2c830bdb1efce5adf148d180193f59f601dc05f3862ca3ce58a6f02a26b3ab6c5f0b75363332449d2295bf
SHA512 (kernel-abi-stablelists-6.12.0-256.el10.tar.xz) = 86a77e2a1c9a12e0de075a3ca16851434c51b9637b0b26e017055fb9372aae80d1fe94890f727b5e8c7f9034d5b0ba2bdb7daf0ab1fa4c3f54fc2fa46cd7e456 SHA512 (kernel-abi-stablelists-6.12.0-257.el10.tar.xz) = 7db20f040da3b45776201505cf3e008a2a96fc148f6eed9e3bd7105e96f6ec660cbbea12defa4b115a853d5c1a87ddd5eef6e60e80679d0b02a3c39ba1e35c22
SHA512 (kernel-kabi-dw-6.12.0-256.el10.tar.xz) = 1042a04361c42ab837d7cc400136ddee9270c8c74e0ed62d87ec7e1c56475a5229323bafb4b4d5459584a4d534fc8f289daa9cfe70ebf650df7bee551ef19e49 SHA512 (kernel-kabi-dw-6.12.0-257.el10.tar.xz) = bad09a6a6d276865c522910c4ef3e607e183eeaa09561fb9061bd52dc6aaf7aefae0b58d55028eb8a71fe3c23edb9205d0d709bb156ec0e0a87718b72dd79ddc