rpms/kernel
9
3
Fork 6
Code Issues Pull Requests Releases Activity

import CS kernel-6.12.0-211.7.1.el10_2

Browse Source
This commit is contained in:
Andrew Lukoshko 2026-04-14 20:58:43 +00:00
parent 208e0f850a
commit ce05a54567
13 changed files with 12428 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
.gitignore vendored
View File

@ -1,8 +1,10 @@
fedoraimaca.x509
kernel-abi-stablelists-6.12.0-211.3.1.el10_2.tar.xz
kernel-kabi-dw-6.12.0-211.3.1.el10_2.tar.xz
linux-6.12.0-211.3.1.el10_2.tar.xz
kernel-abi-stablelists-6.12.0-211.7.1.el10_2.tar.xz
kernel-kabi-dw-6.12.0-211.7.1.el10_2.tar.xz
linux-6.12.0-211.7.1.el10_2.tar.xz
nvidiabfdpu.x509
nvidiagpuoot001.x509
nvidiajetsonsoc.x509
redhatsecureboot501.cer
redhatsecureboot504.cer
redhatsecurebootca5.cer

2
Makefile.rhelver
View File

@ -12,7 +12,7 @@ RHEL_MINOR = 2
#
# Use this spot to avoid future merge conflicts.
# Do not trim this comment.
RHEL_RELEASE = 211.3.1
RHEL_RELEASE = 211.7.1
#
# RHEL_REBASE_NUM

3063
Module.kabi_aarch64
View File

File diff suppressed because it is too large Load Diff

3038
Module.kabi_ppc64le
View File

File diff suppressed because it is too large Load Diff

2902
Module.kabi_s390x
View File

File diff suppressed because it is too large Load Diff

3197
Module.kabi_x86_64
View File

File diff suppressed because it is too large Load Diff

3
kernel-x86_64-debug-rhel.config
View File

@ -1446,7 +1446,8 @@ CONFIG_DRIVER_PE_KUNIT_TEST=m
# CONFIG_DRM_ACCEL_HABANALABS is not set
# CONFIG_DRM_ACCEL_IVPU_DEBUG is not set
CONFIG_DRM_ACCEL_IVPU=m
# CONFIG_DRM_ACCEL_QAIC is not set
# CONFIG_DRM_ACCEL_QAIC_DEBUG is not set
CONFIG_DRM_ACCEL_QAIC=m
CONFIG_DRM_ACCEL=y
CONFIG_DRM_AMD_ACP=y
# CONFIG_DRM_AMD_DC_HDCP is not set

3
kernel-x86_64-rhel.config
View File

@ -1438,7 +1438,8 @@ CONFIG_DRIVER_PE_KUNIT_TEST=m
# CONFIG_DRM_ACCEL_HABANALABS is not set
# CONFIG_DRM_ACCEL_IVPU_DEBUG is not set
CONFIG_DRM_ACCEL_IVPU=m
# CONFIG_DRM_ACCEL_QAIC is not set
# CONFIG_DRM_ACCEL_QAIC_DEBUG is not set
CONFIG_DRM_ACCEL_QAIC=m
CONFIG_DRM_ACCEL=y
CONFIG_DRM_AMD_ACP=y
# CONFIG_DRM_AMD_DC_HDCP is not set

3
kernel-x86_64-rt-debug-rhel.config
View File

@ -1448,7 +1448,8 @@ CONFIG_DRIVER_PE_KUNIT_TEST=m
# CONFIG_DRM_ACCEL_HABANALABS is not set
# CONFIG_DRM_ACCEL_IVPU_DEBUG is not set
CONFIG_DRM_ACCEL_IVPU=m
# CONFIG_DRM_ACCEL_QAIC is not set
# CONFIG_DRM_ACCEL_QAIC_DEBUG is not set
CONFIG_DRM_ACCEL_QAIC=m
CONFIG_DRM_ACCEL=y
CONFIG_DRM_AMD_ACP=y
# CONFIG_DRM_AMD_DC_HDCP is not set

3
kernel-x86_64-rt-rhel.config
View File

@ -1440,7 +1440,8 @@ CONFIG_DRIVER_PE_KUNIT_TEST=m
# CONFIG_DRM_ACCEL_HABANALABS is not set
# CONFIG_DRM_ACCEL_IVPU_DEBUG is not set
CONFIG_DRM_ACCEL_IVPU=m
# CONFIG_DRM_ACCEL_QAIC is not set
# CONFIG_DRM_ACCEL_QAIC_DEBUG is not set
CONFIG_DRM_ACCEL_QAIC=m
CONFIG_DRM_ACCEL=y
CONFIG_DRM_AMD_ACP=y
# CONFIG_DRM_AMD_DC_HDCP is not set

98
kernel.changelog
View File

@ -1,3 +1,101 @@
* Wed Apr 01 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.7.1.el10_2]
- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}
Resolves: RHEL-104053, RHEL-112270, RHEL-150133, RHEL-152392, RHEL-153673, RHEL-154415
* Fri Mar 27 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.6.1.el10_2]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]
Resolves: RHEL-142546, RHEL-145936, RHEL-148654, RHEL-154278, RHEL-155441, RHEL-156881
* Tue Mar 24 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.5.1.el10_2]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
Resolves: RHEL-143323, RHEL-145265, RHEL-146632, RHEL-149722, RHEL-150117, RHEL-150249, RHEL-150408, RHEL-150482, RHEL-155461
* Fri Mar 20 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.4.1.el10_2]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}
Resolves: RHEL-120700, RHEL-145815, RHEL-147272, RHEL-149753, RHEL-150231, RHEL-152652, RHEL-153273, RHEL-155353
* Tue Mar 17 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.3.1.el10_2]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908]

120
kernel.spec
View File

@ -176,15 +176,15 @@ Summary: The Linux kernel
%define specrpmversion 6.12.0
%define specversion 6.12.0
%define patchversion 6.12
%define pkgrelease 211.3.1
%define pkgrelease 211.7.1
%define kversion 6
%define tarfile_release 6.12.0-211.3.1.el10_2
%define tarfile_release 6.12.0-211.7.1.el10_2
# This is needed to do merge window version magic
%define patchlevel 12
# This allows pkg_release to have configurable %%{?dist} tag
%define specrelease 211.3.1%{?buildid}%{?dist}
%define specrelease 211.7.1%{?buildid}%{?dist}
# This defines the kabi tarball version
%define kabiversion 6.12.0-211.3.1.el10_2
%define kabiversion 6.12.0-211.7.1.el10_2
# If this variable is set to 1, a bpf selftests build failure will cause a
# fatal kernel package build error
@ -270,8 +270,6 @@ Summary: The Linux kernel
%define with_automotive_build %{?_with_automotive_build: 1} %{?!_with_automotive_build: 0}
# Control whether we perform a compat. check against published ABI.
%define with_kabichk %{?_without_kabichk: 0} %{?!_without_kabichk: 1}
# Temporarily disable kabi checks until RC.
%define with_kabichk 0
# Control whether we perform a compat. check against DUP ABI.
%define with_kabidupchk %{?_with_kabidupchk: 1} %{?!_with_kabidupchk: 0}
#
@ -1030,6 +1028,8 @@ Source103: rhelimaca1.x509
Source104: rhelima.x509
Source105: rhelima_centos.x509
Source106: fedoraimaca.x509
Source107: nvidiajetsonsoc.x509
Source108: nvidiabfdpu.x509
%if 0%{?fedora}%{?eln}
%define ima_ca_cert %{SOURCE106}
@ -2090,7 +2090,9 @@ truncate -s0 ../certs/rhel.pem
openssl x509 -inform der -in %{SOURCE100} -out rheldup3.pem
openssl x509 -inform der -in %{SOURCE101} -out rhelkpatch1.pem
openssl x509 -inform der -in %{SOURCE102} -out nvidiagpuoot001.pem
cat rheldup3.pem rhelkpatch1.pem nvidiagpuoot001.pem >> ../certs/rhel.pem
openssl x509 -inform der -in %{SOURCE107} -out nvidiajetsonsoc.pem
openssl x509 -inform der -in %{SOURCE108} -out nvidiabfdpu.pem
cat rheldup3.pem rhelkpatch1.pem nvidiagpuoot001.pem nvidiajetsonsoc.pem nvidiabfdpu.pem >> ../certs/rhel.pem
# rhelkeys
%endif
%if %{signkernel}
@ -4482,12 +4484,112 @@ fi\
#
#
%changelog
* Mon Mar 30 2026 Andrew Lukoshko <alukoshko@almalinux.org> [6.12.0-211.3.1.el10_2]
- AlmaLinux changes (Andrew Lukoshko)
* Tue Apr 14 2026 Andrew Lukoshko <alukoshko@almalinux.org> [6.12.0-211.7.1.el10_2]
- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)
* Wed Apr 01 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.7.1.el10_2]
- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}
* Fri Mar 27 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.6.1.el10_2]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]
* Tue Mar 24 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.5.1.el10_2]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
* Fri Mar 20 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.4.1.el10_2]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}
* Tue Mar 17 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.3.1.el10_2]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908]

8
sources
View File

@ -1,8 +1,10 @@
SHA512 (fedoraimaca.x509) = e04809394f4472c17e86d7024dee34f03fb68e82a85502fd5b00535202c72e57626a8376b2cf991b7e1e46404aa5ab8d189ebf320e0dd37d49e7efbc925c7a2e
SHA512 (kernel-abi-stablelists-6.12.0-211.3.1.el10_2.tar.xz) = 479d0433cbf8db36ed58d2ec7862f7336be626a53fd14a330d4ca11c9204631a3bf5aecf863eb24f5c6791c4d33d68551570a48552baa446f07b422765f14218
SHA512 (kernel-kabi-dw-6.12.0-211.3.1.el10_2.tar.xz) = e31b06851dda0ac91691ec40e6ac269708cb0789cb071590c8f288b106c50086a05751dbc1674f60176ef2ac1f0001f4f525f2c090630c2ea79075da0be35165
SHA512 (linux-6.12.0-211.3.1.el10_2.tar.xz) = f4e9d1f2e459ef9a371db3ffa565ab303762fcffc38fd848bba2731e6aadbfb9d6b14912de04564ff1cf431126279de38bc82404c450db1b7d03009ff29b79eb
SHA512 (kernel-abi-stablelists-6.12.0-211.7.1.el10_2.tar.xz) = 6b9fe86277f9ec0eb36d00072f07c4b4b00e5defafd20b452775774d62b1f0f18e1e3944c9ac75b87b12766f9db6be0218820a70db9f9e75bae6617124a32987
SHA512 (kernel-kabi-dw-6.12.0-211.7.1.el10_2.tar.xz) = 2c1fba48a87f1c4457fd7f4ba03b2c837e1e7ae4ff244478af5a8eae74334c2d3bad6d60128b1ab9fb485dbceacd8cd9550ef944b8491c063599dc81e31d3ad9
SHA512 (linux-6.12.0-211.7.1.el10_2.tar.xz) = 69904b430476a12fc2308928d16801a4254396777f06aa16426ebe53ff1ac056456948be1c20a246b76772764bcbfc8b7ab9d9b907bd6078abb8f2a93013daf2
SHA512 (nvidiabfdpu.x509) = d9f4fbafcec66803c5944df1f97d4348968141c968e6537252c9854c89dca8ea3be225a9c40abbbf2b7d4d3cfd8c5012cd2d34d90443fbc0277b7a018622ac4f
SHA512 (nvidiagpuoot001.x509) = b42f836e1cfa07890cb6ca13de9c3950e306c9ec7686c4c09f050bb68869f5d82962b2cd5f3aa0eb7a0f3a3ae54e9c480eafbac5df53aa92c295ff511a8c59fe
SHA512 (nvidiajetsonsoc.x509) = 3c6d4f0800b3fae3c3cc3e5361de31df233e230ea96f0fdd3dcc713e6a71e27309f60e7a98d1a4a90d470f336ce311f22fcc88f219429272e96339717fe001dd
SHA512 (redhatsecureboot501.cer) = eb2c2d342680d4c3453d3e4f30abdd1f6b0e98292e1be0410d0163afd01552a863b70ffaabeecd6e3981cd4d167198091a837c7d70f96a3a06de2d28b3355308
SHA512 (redhatsecureboot504.cer) = d6e9b54c378769bb934ead996c1003b495bde48a17d02c8880124f36a529ef799f1e3a97202f9536c71c0d2cefe20a3532053ab73ce798ba550934eedce23ff9
SHA512 (redhatsecurebootca5.cer) = 0285fd7cb1755b399cdd2d848d9eba51b72ef2dd8ea5d40d7061c29685a12e15bf8eb083cb2f8c14eb69d248cb3af2c2332e06f80e19ed4cc029070198c0d522