diff --git a/Makefile.rhelver b/Makefile.rhelver index 9a0345a80..e76ae6ce9 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 2 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 133 +RHEL_RELEASE = 134 # # RHEL_REBASE_NUM diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config index 287efa6f8..7f2a9826a 100644 --- a/kernel-x86_64-debug-rhel.config +++ b/kernel-x86_64-debug-rhel.config @@ -3860,6 +3860,7 @@ CONFIG_MITIGATION_SRBDS=y CONFIG_MITIGATION_SRSO=y CONFIG_MITIGATION_SSB=y CONFIG_MITIGATION_TAA=y +CONFIG_MITIGATION_TSA=y CONFIG_MITIGATION_UNRET_ENTRY=y # CONFIG_MK8 is not set # CONFIG_MLX4_CORE_GEN2 is not set diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config index e1878ae52..5093816c3 100644 --- a/kernel-x86_64-rhel.config +++ b/kernel-x86_64-rhel.config @@ -3840,6 +3840,7 @@ CONFIG_MITIGATION_SRBDS=y CONFIG_MITIGATION_SRSO=y CONFIG_MITIGATION_SSB=y CONFIG_MITIGATION_TAA=y +CONFIG_MITIGATION_TSA=y CONFIG_MITIGATION_UNRET_ENTRY=y # CONFIG_MK8 is not set # CONFIG_MLX4_CORE_GEN2 is not set diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config index a506d9afb..a0e8852fd 100644 --- a/kernel-x86_64-rt-debug-rhel.config +++ b/kernel-x86_64-rt-debug-rhel.config @@ -3901,6 +3901,7 @@ CONFIG_MITIGATION_SRBDS=y CONFIG_MITIGATION_SRSO=y CONFIG_MITIGATION_SSB=y CONFIG_MITIGATION_TAA=y +CONFIG_MITIGATION_TSA=y CONFIG_MITIGATION_UNRET_ENTRY=y # CONFIG_MK8 is not set # CONFIG_MLX4_CORE_GEN2 is not set diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config index 29555a9fa..dd6953b47 100644 --- a/kernel-x86_64-rt-rhel.config +++ b/kernel-x86_64-rt-rhel.config @@ -3881,6 +3881,7 @@ CONFIG_MITIGATION_SRBDS=y CONFIG_MITIGATION_SRSO=y CONFIG_MITIGATION_SSB=y CONFIG_MITIGATION_TAA=y +CONFIG_MITIGATION_TSA=y CONFIG_MITIGATION_UNRET_ENTRY=y # CONFIG_MK8 is not set # CONFIG_MLX4_CORE_GEN2 is not set diff --git a/kernel.changelog b/kernel.changelog index ba675690e..e95aa8507 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,98 @@ +* Wed Sep 24 2025 Scott Weaver [6.12.0-134.el10] +- EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh (Joel Savitz) [RHEL-102253] +- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (Steve Best) [RHEL-115105] +- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-115367] +- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-115367] +- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-115367] +- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-115367] +- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-115367] +- x86/mce: Make sure CMCI banks are cleared during shutdown on Intel (Steve Best) [RHEL-113399] +- x86/mce: Make several functions return bool (Steve Best) [RHEL-113399] +- x86/mce/intel: Use MCG_BANKCNT_MASK instead of 0xff (Steve Best) [RHEL-113399] +- pinctrl: intel: fix build warnings about export.h (Steve Best) [RHEL-113190] +- pinctrl: intel: drop repeated config dependency (Steve Best) [RHEL-113190] +- pinctrl: tangier: use devm_kmemdup_array() (Steve Best) [RHEL-113190] +- pinctrl: cherryview: use devm_kmemdup_array() (Steve Best) [RHEL-113190] +- pinctrl: baytrail: copy communities using devm_kmemdup_array() (Steve Best) [RHEL-113190] +- pinctrl: intel: copy communities using devm_kmemdup_array() (Steve Best) [RHEL-113190] +- pinctrl: intel: Fix wrong bypass assignment in intel_pinctrl_probe_pwm() (Steve Best) [RHEL-113190] +- pinctrl: intel: Import PWM_LPSS namespace for devm_pwm_lpss_probe() (Steve Best) [RHEL-113190] +- pinctrl: lynxpoint: Use dedicated helpers for chained IRQ handlers (Steve Best) [RHEL-113190] +- pinctrl: baytrail: Use dedicated helpers for chained IRQ handlers (Steve Best) [RHEL-113190] +- pinctrl: elkhartlake: Add support for DSW community (Steve Best) [RHEL-113190] +- pinctrl: intel: Add a human readable decoder for pull bias values (Steve Best) [RHEL-113190] +- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-84762] +- octeon_ep: Fix host hang issue during device reboot (Kamal Heib) [RHEL-90058] +- octeon_ep_vf: Resolve netdevice usage count issue (Kamal Heib) [RHEL-90058] +- octeon_ep_vf: update tx/rx stats locally for persistence (Kamal Heib) [RHEL-90058] +- octeon_ep_vf: remove firmware stats fetch in ndo_get_stats64 (Kamal Heib) [RHEL-90058] +- octeon_ep: update tx/rx stats locally for persistence (Kamal Heib) [RHEL-90058] +- octeon_ep: remove firmware stats fetch in ndo_get_stats64 (Kamal Heib) [RHEL-90058] +- octeon_ep: add ndo ops for VFs in PF driver (Kamal Heib) [RHEL-90058] +- net: marvell: use ethtool string helpers (Kamal Heib) [RHEL-90058] +- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114338] {CVE-2025-39698} +- net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (CKI Backport Bot) [RHEL-106587] {CVE-2025-38468} +- dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using (Audra Mitchell) [RHEL-106609] {CVE-2025-38369} +- ethtool: Block setting of symmetric RSS when non-symmetric rx-flow-hash is requested (CKI Backport Bot) [RHEL-107023] +- flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Benjamin Coddington) [RHEL-110294] +- pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Benjamin Coddington) [RHEL-110294] +- HID: core: Harden s32ton() against conversion to 0 bits (Benjamin Tissoires) [RHEL-111038] {CVE-2025-38556} +- Revert "KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace" (Eric Auger) [RHEL-112491] +- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-106613] {CVE-2025-38396} +- Revert "e1000e: change k1 configuration on MTP and later platforms" (Michal Schmidt) [RHEL-109782] +- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113560] {CVE-2025-39694} +- idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106059] {CVE-2025-38392} +- redhat/configs: Enable CONFIG_MITIGATION_TSA for x86 (Waiman Long) [RHEL-83893] +- x86/process: Move the buffer clearing before MONITOR (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350} +- x86/microcode/AMD: Add TSA microcode SHAs (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350} +- KVM: SVM: Advertise TSA CPUID bits to guests (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350} +- x86/bugs: Add a Transient Scheduler Attacks mitigation (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350} +- x86/bugs: Rename MDS machinery to something more generic (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350} +- x86/bugs: Fix spectre_v2 mitigation default on Intel (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure ITS mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Fix SRSO reporting on Zen1/2 with SMT disabled (Waiman Long) [RHEL-83893] +- x86/idle: Use MONITOR and MWAIT mnemonics in (Waiman Long) [RHEL-83893] +- x86/idle: Remove .s output beautifying delimiters from simpler asm() templates (Waiman Long) [RHEL-83893] +- x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and prefer_mwait_c1_over_halt() (Waiman Long) [RHEL-83893] +- x86/cpufeatures: Add X86_FEATURE_APX (Waiman Long) [RHEL-83893] +- x86/cpufeatures: Shorten X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-83893] +- x86/cpufeatures: Shorten X86_FEATURE_CLEAR_BHB_LOOP_ON_VMEXIT (Waiman Long) [RHEL-83893] +- x86/cpufeatures: Clean up formatting (Waiman Long) [RHEL-83893] +- x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure SRSO mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure L1TF mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure SSB mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure spectre_v2 mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure BHI mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure spectre_v2_user mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure retbleed mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Allow retbleed=stuff only on Intel (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure spectre_v1 mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure GDS mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure SRBDS mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Remove md_clear_*_mitigation() (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure RFDS mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure MMIO mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure TAA mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure MDS mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Rename mmio_stale_data_clear to cpu_buf_vm_clear (Waiman Long) [RHEL-83893] +- x86/microcode: Consolidate the loader enablement checking (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-83893] {CVE-2025-22047} +- x86: move ZMM exclusion list into CPU feature flag (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Get rid of the _load_microcode_amd() forward declaration (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd() declarations (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Remove ugly linebreak in __verify_patch_section() signature (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Remove ret local var in early_apply_microcode() (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Return bool from find_blobs_in_containers() (Waiman Long) [RHEL-83893] +- x86/cpu: Fix formatting of cpuid_bits[] in scattered.c (Waiman Long) [RHEL-83893] +- x86/cpufeatures: Add X86_FEATURE_AMD_WORKLOAD_CLASS feature bit (Waiman Long) [RHEL-83893] +Resolves: RHEL-102253, RHEL-113190, RHEL-113399, RHEL-115367, RHEL-115105 + * Tue Sep 23 2025 CKI KWF Bot [6.12.0-133.el10] - drm/virtio: implement virtio_gpu_shutdown (Eric Auger) [RHEL-90224] - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114339] {CVE-2025-39698} @@ -1159,6 +1254,82 @@ Resolves: RHEL-101827, RHEL-102692, RHEL-104142, RHEL-104442, RHEL-110366, RHEL- - redhat: bump RHEL_MINOR for 10.2 (Scott Weaver) Resolves: RHEL-102876, RHEL-104319, RHEL-104327, RHEL-105599, RHEL-105606, RHEL-95630 +* Mon Sep 22 2025 Jan Stancek [6.12.0-124.3.1.el10_1] +- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-84762] +- octeon_ep: Fix host hang issue during device reboot (Kamal Heib) [RHEL-90058] +- octeon_ep_vf: Resolve netdevice usage count issue (Kamal Heib) [RHEL-90058] +- octeon_ep_vf: update tx/rx stats locally for persistence (Kamal Heib) [RHEL-90058] +- octeon_ep_vf: remove firmware stats fetch in ndo_get_stats64 (Kamal Heib) [RHEL-90058] +- octeon_ep: update tx/rx stats locally for persistence (Kamal Heib) [RHEL-90058] +- octeon_ep: remove firmware stats fetch in ndo_get_stats64 (Kamal Heib) [RHEL-90058] +- octeon_ep: add ndo ops for VFs in PF driver (Kamal Heib) [RHEL-90058] +- net: marvell: use ethtool string helpers (Kamal Heib) [RHEL-90058] +- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114338] {CVE-2025-39698} +- net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (CKI Backport Bot) [RHEL-106587] {CVE-2025-38468} +- dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using (Audra Mitchell) [RHEL-106609] {CVE-2025-38369} +- ethtool: Block setting of symmetric RSS when non-symmetric rx-flow-hash is requested (CKI Backport Bot) [RHEL-107023] +Resolves: RHEL-106587, RHEL-106609, RHEL-107023, RHEL-114338, RHEL-84762, RHEL-90058 + +* Mon Sep 15 2025 Julio Faracco [6.12.0-124.2.1.el10_1] +- flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Benjamin Coddington) [RHEL-110294] +- pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Benjamin Coddington) [RHEL-110294] +- HID: core: Harden s32ton() against conversion to 0 bits (Benjamin Tissoires) [RHEL-111038] {CVE-2025-38556} +- Revert "KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace" (Eric Auger) [RHEL-112491] +- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-106613] {CVE-2025-38396} +- Revert "e1000e: change k1 configuration on MTP and later platforms" (Michal Schmidt) [RHEL-109782] +- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113560] {CVE-2025-39694} +- idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106059] {CVE-2025-38392} +- redhat/configs: Enable CONFIG_MITIGATION_TSA for x86 (Waiman Long) [RHEL-83893] +- x86/process: Move the buffer clearing before MONITOR (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350} +- x86/microcode/AMD: Add TSA microcode SHAs (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350} +- KVM: SVM: Advertise TSA CPUID bits to guests (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350} +- x86/bugs: Add a Transient Scheduler Attacks mitigation (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350} +- x86/bugs: Rename MDS machinery to something more generic (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350} +- x86/bugs: Fix spectre_v2 mitigation default on Intel (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure ITS mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Fix SRSO reporting on Zen1/2 with SMT disabled (Waiman Long) [RHEL-83893] +- x86/idle: Use MONITOR and MWAIT mnemonics in (Waiman Long) [RHEL-83893] +- x86/idle: Remove .s output beautifying delimiters from simpler asm() templates (Waiman Long) [RHEL-83893] +- x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and prefer_mwait_c1_over_halt() (Waiman Long) [RHEL-83893] +- x86/cpufeatures: Add X86_FEATURE_APX (Waiman Long) [RHEL-83893] +- x86/cpufeatures: Shorten X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-83893] +- x86/cpufeatures: Shorten X86_FEATURE_CLEAR_BHB_LOOP_ON_VMEXIT (Waiman Long) [RHEL-83893] +- x86/cpufeatures: Clean up formatting (Waiman Long) [RHEL-83893] +- x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure SRSO mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure L1TF mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure SSB mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure spectre_v2 mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure BHI mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure spectre_v2_user mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure retbleed mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Allow retbleed=stuff only on Intel (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure spectre_v1 mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure GDS mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure SRBDS mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Remove md_clear_*_mitigation() (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure RFDS mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure MMIO mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure TAA mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure MDS mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Rename mmio_stale_data_clear to cpu_buf_vm_clear (Waiman Long) [RHEL-83893] +- x86/microcode: Consolidate the loader enablement checking (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-83893] {CVE-2025-22047} +- x86: move ZMM exclusion list into CPU feature flag (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Get rid of the _load_microcode_amd() forward declaration (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd() declarations (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Remove ugly linebreak in __verify_patch_section() signature (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Remove ret local var in early_apply_microcode() (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Return bool from find_blobs_in_containers() (Waiman Long) [RHEL-83893] +- x86/cpu: Fix formatting of cpuid_bits[] in scattered.c (Waiman Long) [RHEL-83893] +- x86/cpufeatures: Add X86_FEATURE_AMD_WORKLOAD_CLASS feature bit (Waiman Long) [RHEL-83893] +Resolves: RHEL-106059, RHEL-106613, RHEL-109782, RHEL-110294, RHEL-111038, RHEL-112491, RHEL-113560, RHEL-83893, RHEL-83903 + * Mon Sep 08 2025 Julio Faracco [6.12.0-124.1.1.el10_1] - cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107880] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112787] {CVE-2025-38352} diff --git a/kernel.spec b/kernel.spec index 6b426a985..dd410c10b 100644 --- a/kernel.spec +++ b/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel %define specrpmversion 6.12.0 %define specversion 6.12.0 %define patchversion 6.12 -%define pkgrelease 133 +%define pkgrelease 134 %define kversion 6 -%define tarfile_release 6.12.0-133.el10 +%define tarfile_release 6.12.0-134.el10 # This is needed to do merge window version magic %define patchlevel 12 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 133%{?buildid}%{?dist} +%define specrelease 134%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 6.12.0-133.el10 +%define kabiversion 6.12.0-134.el10 # If this variable is set to 1, a bpf selftests build failure will cause a # fatal kernel package build error @@ -4346,6 +4346,100 @@ fi\ # # %changelog +* Wed Sep 24 2025 Scott Weaver [6.12.0-134.el10] +- EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh (Joel Savitz) [RHEL-102253] +- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (Steve Best) [RHEL-115105] +- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-115367] +- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-115367] +- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-115367] +- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-115367] +- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-115367] +- x86/mce: Make sure CMCI banks are cleared during shutdown on Intel (Steve Best) [RHEL-113399] +- x86/mce: Make several functions return bool (Steve Best) [RHEL-113399] +- x86/mce/intel: Use MCG_BANKCNT_MASK instead of 0xff (Steve Best) [RHEL-113399] +- pinctrl: intel: fix build warnings about export.h (Steve Best) [RHEL-113190] +- pinctrl: intel: drop repeated config dependency (Steve Best) [RHEL-113190] +- pinctrl: tangier: use devm_kmemdup_array() (Steve Best) [RHEL-113190] +- pinctrl: cherryview: use devm_kmemdup_array() (Steve Best) [RHEL-113190] +- pinctrl: baytrail: copy communities using devm_kmemdup_array() (Steve Best) [RHEL-113190] +- pinctrl: intel: copy communities using devm_kmemdup_array() (Steve Best) [RHEL-113190] +- pinctrl: intel: Fix wrong bypass assignment in intel_pinctrl_probe_pwm() (Steve Best) [RHEL-113190] +- pinctrl: intel: Import PWM_LPSS namespace for devm_pwm_lpss_probe() (Steve Best) [RHEL-113190] +- pinctrl: lynxpoint: Use dedicated helpers for chained IRQ handlers (Steve Best) [RHEL-113190] +- pinctrl: baytrail: Use dedicated helpers for chained IRQ handlers (Steve Best) [RHEL-113190] +- pinctrl: elkhartlake: Add support for DSW community (Steve Best) [RHEL-113190] +- pinctrl: intel: Add a human readable decoder for pull bias values (Steve Best) [RHEL-113190] +- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-84762] +- octeon_ep: Fix host hang issue during device reboot (Kamal Heib) [RHEL-90058] +- octeon_ep_vf: Resolve netdevice usage count issue (Kamal Heib) [RHEL-90058] +- octeon_ep_vf: update tx/rx stats locally for persistence (Kamal Heib) [RHEL-90058] +- octeon_ep_vf: remove firmware stats fetch in ndo_get_stats64 (Kamal Heib) [RHEL-90058] +- octeon_ep: update tx/rx stats locally for persistence (Kamal Heib) [RHEL-90058] +- octeon_ep: remove firmware stats fetch in ndo_get_stats64 (Kamal Heib) [RHEL-90058] +- octeon_ep: add ndo ops for VFs in PF driver (Kamal Heib) [RHEL-90058] +- net: marvell: use ethtool string helpers (Kamal Heib) [RHEL-90058] +- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114338] {CVE-2025-39698} +- net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (CKI Backport Bot) [RHEL-106587] {CVE-2025-38468} +- dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using (Audra Mitchell) [RHEL-106609] {CVE-2025-38369} +- ethtool: Block setting of symmetric RSS when non-symmetric rx-flow-hash is requested (CKI Backport Bot) [RHEL-107023] +- flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Benjamin Coddington) [RHEL-110294] +- pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Benjamin Coddington) [RHEL-110294] +- HID: core: Harden s32ton() against conversion to 0 bits (Benjamin Tissoires) [RHEL-111038] {CVE-2025-38556} +- Revert "KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace" (Eric Auger) [RHEL-112491] +- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-106613] {CVE-2025-38396} +- Revert "e1000e: change k1 configuration on MTP and later platforms" (Michal Schmidt) [RHEL-109782] +- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113560] {CVE-2025-39694} +- idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106059] {CVE-2025-38392} +- redhat/configs: Enable CONFIG_MITIGATION_TSA for x86 (Waiman Long) [RHEL-83893] +- x86/process: Move the buffer clearing before MONITOR (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350} +- x86/microcode/AMD: Add TSA microcode SHAs (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350} +- KVM: SVM: Advertise TSA CPUID bits to guests (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350} +- x86/bugs: Add a Transient Scheduler Attacks mitigation (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350} +- x86/bugs: Rename MDS machinery to something more generic (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350} +- x86/bugs: Fix spectre_v2 mitigation default on Intel (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure ITS mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Fix SRSO reporting on Zen1/2 with SMT disabled (Waiman Long) [RHEL-83893] +- x86/idle: Use MONITOR and MWAIT mnemonics in (Waiman Long) [RHEL-83893] +- x86/idle: Remove .s output beautifying delimiters from simpler asm() templates (Waiman Long) [RHEL-83893] +- x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and prefer_mwait_c1_over_halt() (Waiman Long) [RHEL-83893] +- x86/cpufeatures: Add X86_FEATURE_APX (Waiman Long) [RHEL-83893] +- x86/cpufeatures: Shorten X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-83893] +- x86/cpufeatures: Shorten X86_FEATURE_CLEAR_BHB_LOOP_ON_VMEXIT (Waiman Long) [RHEL-83893] +- x86/cpufeatures: Clean up formatting (Waiman Long) [RHEL-83893] +- x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure SRSO mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure L1TF mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure SSB mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure spectre_v2 mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure BHI mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure spectre_v2_user mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure retbleed mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Allow retbleed=stuff only on Intel (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure spectre_v1 mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure GDS mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure SRBDS mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Remove md_clear_*_mitigation() (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure RFDS mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure MMIO mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure TAA mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Restructure MDS mitigation (Waiman Long) [RHEL-83893] +- x86/bugs: Rename mmio_stale_data_clear to cpu_buf_vm_clear (Waiman Long) [RHEL-83893] +- x86/microcode: Consolidate the loader enablement checking (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-83893] {CVE-2025-22047} +- x86: move ZMM exclusion list into CPU feature flag (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Get rid of the _load_microcode_amd() forward declaration (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd() declarations (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Remove ugly linebreak in __verify_patch_section() signature (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Remove ret local var in early_apply_microcode() (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-83893] +- x86/microcode/AMD: Return bool from find_blobs_in_containers() (Waiman Long) [RHEL-83893] +- x86/cpu: Fix formatting of cpuid_bits[] in scattered.c (Waiman Long) [RHEL-83893] +- x86/cpufeatures: Add X86_FEATURE_AMD_WORKLOAD_CLASS feature bit (Waiman Long) [RHEL-83893] + * Tue Sep 23 2025 CKI KWF Bot [6.12.0-133.el10] - drm/virtio: implement virtio_gpu_shutdown (Eric Auger) [RHEL-90224] - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114339] {CVE-2025-39698} diff --git a/sources b/sources index 1519a4f4d..3e2c41e78 100644 --- a/sources +++ b/sources @@ -1,5 +1,5 @@ SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6 -SHA512 (linux-6.12.0-133.el10.tar.xz) = c4fe6a8b3241a0a05908d30086bb1db7bb82c723797cefa88dd01cfbd80d0cb3a1b1ac1e26ec3c11f382906346a444b101c3285a21e3c33b2ad2c067928b9aa4 -SHA512 (kernel-abi-stablelists-6.12.0-133.el10.tar.xz) = 2584c042ae05e3a3a00cdc40a482149abf17f7f5c4e6d2ea58e527820464dbc1df026c803bc59ab5769498088da4a41c4332425ea537f24a0332c22312f2ca20 -SHA512 (kernel-kabi-dw-6.12.0-133.el10.tar.xz) = e61515de9fd5ff4706541249a78fa1534f504bd6d59567c71413b63654bb0638f5ec97da38b508560c2ad67b2c06e36408e784116d666262ce18b4118699052b +SHA512 (linux-6.12.0-134.el10.tar.xz) = f3da7feaa75329dbfe1f8b762bdf8a0b1818aee1567dcc850bf2b9c062958464d8d74138450b9565847ef2d02f871a88e57e30805bc9011d0840bd012405882b +SHA512 (kernel-abi-stablelists-6.12.0-134.el10.tar.xz) = 4d77620e30b159db85a566d0b3da74da3829d3ea9cc67ff8d2c9d2db830cac1fff74cb6ff373fb09b9b31b0303801c2320b1948ada9370a9058018720bafffee +SHA512 (kernel-kabi-dw-6.12.0-134.el10.tar.xz) = c636c256eadcae3e5367cc4534781d3bae6350c031878aa355fd62ab454f1f007eb6a698994c01d84711e9d26b739fed953171d9c7c017ea1c1c0a6aedc2f009