diff --git a/.gitignore b/.gitignore index 83e9caaab..ef646d2c0 100644 --- a/.gitignore +++ b/.gitignore @@ -1,7 +1,7 @@ fedoraimaca.x509 -kernel-abi-stablelists-6.12.0-211.40.1.el10_2.tar.xz -kernel-kabi-dw-6.12.0-211.40.1.el10_2.tar.xz -linux-6.12.0-211.40.1.el10_2.tar.xz +kernel-abi-stablelists-6.12.0-211.42.1.el10_2.tar.xz +kernel-kabi-dw-6.12.0-211.42.1.el10_2.tar.xz +linux-6.12.0-211.42.1.el10_2.tar.xz nvidiabfdpu.x509 nvidiagpuoot001.x509 nvidiajetsonsoc.x509 diff --git a/Makefile.rhelver b/Makefile.rhelver index e03f8e4e7..03c8283a4 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 2 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 211.40.1 +RHEL_RELEASE = 211.42.1 # # RHEL_REBASE_NUM diff --git a/kernel.changelog b/kernel.changelog index 9e2c56563..d898c6934 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,14 @@ +* Wed Jul 29 2026 CKI KWF Bot [6.12.0-211.42.1.el10_2] +- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} +- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} +- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} +Resolves: RHEL-187415, RHEL-189554, RHEL-214082 + +* Tue Jul 28 2026 CKI KWF Bot [6.12.0-211.41.1.el10_2] +- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] +- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] +Resolves: RHEL-185669, RHEL-212063 + * Mon Jul 27 2026 CKI KWF Bot [6.12.0-211.40.1.el10_2] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} diff --git a/kernel.spec b/kernel.spec index ec9ad79d0..949904afc 100644 --- a/kernel.spec +++ b/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel %define specrpmversion 6.12.0 %define specversion 6.12.0 %define patchversion 6.12 -%define pkgrelease 211.40.1 +%define pkgrelease 211.42.1 %define kversion 6 -%define tarfile_release 6.12.0-211.40.1.el10_2 +%define tarfile_release 6.12.0-211.42.1.el10_2 # This is needed to do merge window version magic %define patchlevel 12 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 211.40.1%{?buildid}%{?dist} +%define specrelease 211.42.1%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 6.12.0-211.40.1.el10_2 +%define kabiversion 6.12.0-211.42.1.el10_2 # If this variable is set to 1, a bpf selftests build failure will cause a # fatal kernel package build error @@ -4515,14 +4515,14 @@ fi\ # # %changelog -* Sat Aug 01 2026 Eduard Abdullin - 6.12.0-211.40.1 +* Wed Aug 05 2026 Eduard Abdullin - 6.12.0-211.42.1 - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert -* Sat Aug 01 2026 Neal Gompa - 6.12.0-211.40.1 +* Wed Aug 05 2026 Neal Gompa - 6.12.0-211.42.1 - Enable Btrfs support for all kernel variants -* Sat Aug 01 2026 Andrew Lukoshko - 6.12.0-211.40.1 +* Wed Aug 05 2026 Andrew Lukoshko - 6.12.0-211.42.1 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -4536,6 +4536,15 @@ fi\ - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) +* Wed Jul 29 2026 CKI KWF Bot [6.12.0-211.42.1.el10_2] +- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} +- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} +- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} + +* Tue Jul 28 2026 CKI KWF Bot [6.12.0-211.41.1.el10_2] +- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] +- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] + * Mon Jul 27 2026 CKI KWF Bot [6.12.0-211.40.1.el10_2] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} diff --git a/sources b/sources index dc2ccc3f1..2afb827c3 100644 --- a/sources +++ b/sources @@ -1,7 +1,7 @@ SHA512 (fedoraimaca.x509) = e04809394f4472c17e86d7024dee34f03fb68e82a85502fd5b00535202c72e57626a8376b2cf991b7e1e46404aa5ab8d189ebf320e0dd37d49e7efbc925c7a2e -SHA512 (kernel-abi-stablelists-6.12.0-211.40.1.el10_2.tar.xz) = 79864502d8adb953108d950af86998be3ed3fa34d12d9673e9582384982b4e40e42b2866fa5e12e22e50e6faba9cd8b9e3afe14e454dedb300e5c22bc5f0e30e -SHA512 (kernel-kabi-dw-6.12.0-211.40.1.el10_2.tar.xz) = 4404d5db660b04d0d38982763e5c2d2d63849f526b49409c0fe0ed9af4a92f6294ece297de105718d00c801959d45f88050481de36de087f17ad5c459a328a2d -SHA512 (linux-6.12.0-211.40.1.el10_2.tar.xz) = f19a139c69198f087f81ae2dab80865c3764f7077d232d1c0db3c9778d7297a6e196f393c71c04f2781f984bd140bd0735d40be67543cbe29d40cd695bc7b5c3 +SHA512 (kernel-abi-stablelists-6.12.0-211.42.1.el10_2.tar.xz) = 06cb39f9d84a3a9aecd557764a7ab53d9844fc473fc16a364c4346c6aba288a5a690e5b5f01e19df72ab0cd501b0090f0238a6112359ca1555b17d1ffc88cb45 +SHA512 (kernel-kabi-dw-6.12.0-211.42.1.el10_2.tar.xz) = 35a40a067608d3d1ea48739562d7a8187cb9753ff7a46f4a2a6db299742caea141630ceb44dda001ed8d2b66d80d0ca5edb7792b415c1f66e0b8b04447c028d5 +SHA512 (linux-6.12.0-211.42.1.el10_2.tar.xz) = cfde817ca54769365254dbc21877d2d1b6feab6e602b8d11b4c776c1a9738e6db582e31eb264a4c6260ccd424b5e9a6fa286650590a9c2900ff607615311f20e SHA512 (nvidiabfdpu.x509) = d9f4fbafcec66803c5944df1f97d4348968141c968e6537252c9854c89dca8ea3be225a9c40abbbf2b7d4d3cfd8c5012cd2d34d90443fbc0277b7a018622ac4f SHA512 (nvidiagpuoot001.x509) = b42f836e1cfa07890cb6ca13de9c3950e306c9ec7686c4c09f050bb68869f5d82962b2cd5f3aa0eb7a0f3a3ae54e9c480eafbac5df53aa92c295ff511a8c59fe SHA512 (nvidiajetsonsoc.x509) = 3c6d4f0800b3fae3c3cc3e5361de31df233e230ea96f0fdd3dcc713e6a71e27309f60e7a98d1a4a90d470f336ce311f22fcc88f219429272e96339717fe001dd