From ebd803b285ada13bc8f1bc7c2545aa411317b461 Mon Sep 17 00:00:00 2001 From: Eduard Abdullin Date: Wed, 1 Apr 2026 09:48:28 +0000 Subject: [PATCH] Debrand for AlmaLinux OS Use AlmaLinux OS secure boot cert Enable Btrfs support for all kernel variants hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 qla4xxx: bring back deprecated PCI ids be2iscsi: bring back deprecated PCI ids kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained --- Makefile.rhelver | 2 +- kernel-aarch64-64k-debug-rhel.config | 1 - kernel-aarch64-64k-rhel.config | 1 - kernel-aarch64-debug-rhel.config | 1 - kernel-aarch64-rhel.config | 1 - kernel-aarch64-rt-64k-debug-rhel.config | 1 - kernel-aarch64-rt-64k-rhel.config | 1 - kernel-aarch64-rt-debug-rhel.config | 1 - kernel-aarch64-rt-rhel.config | 1 - kernel-ppc64le-debug-rhel.config | 1 - kernel-riscv64-debug-rhel.config | 1 - kernel-s390x-debug-rhel.config | 1 - kernel-s390x-zfcpdump-rhel.config | 1 - kernel-x86_64-debug-rhel.config | 1 - kernel-x86_64-rt-debug-rhel.config | 1 - kernel-x86_64-rt-rhel.config | 1 - kernel.changelog | 164 ++++++++++++++++++++++ kernel.sbat.template | 1 + kernel.spec | 179 ++++++++++++++++++++++-- nvidiabfdpu.x509 | Bin 0 -> 1426 bytes nvidiajetsonsoc.x509 | Bin 0 -> 1423 bytes sources | 6 +- uki-addons.sbat.template | 1 + uki.sbat.template | 1 + 24 files changed, 339 insertions(+), 30 deletions(-) create mode 100644 nvidiabfdpu.x509 create mode 100644 nvidiajetsonsoc.x509 diff --git a/Makefile.rhelver b/Makefile.rhelver index 8f9764f57..e00491ee0 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 3 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 216 +RHEL_RELEASE = 218 # # RHEL_REBASE_NUM diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config index 222364992..60e564368 100644 --- a/kernel-aarch64-64k-debug-rhel.config +++ b/kernel-aarch64-64k-debug-rhel.config @@ -821,7 +821,6 @@ CONFIG_BT_RFCOMM_TTY=y CONFIG_BTRFS_ASSERT=y # CONFIG_BTRFS_DEBUG is not set CONFIG_BTRFS_FS=m -# CONFIG_BTRFS_FS_CHECK_INTEGRITY is not set CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_REF_VERIFY is not set # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config index 0aed51f4a..d9c957561 100644 --- a/kernel-aarch64-64k-rhel.config +++ b/kernel-aarch64-64k-rhel.config @@ -821,7 +821,6 @@ CONFIG_BT_RFCOMM_TTY=y # CONFIG_BTRFS_ASSERT is not set # CONFIG_BTRFS_DEBUG is not set CONFIG_BTRFS_FS=m -# CONFIG_BTRFS_FS_CHECK_INTEGRITY is not set CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_REF_VERIFY is not set # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config index 86c8bfec4..a54aa6b60 100644 --- a/kernel-aarch64-debug-rhel.config +++ b/kernel-aarch64-debug-rhel.config @@ -819,7 +819,6 @@ CONFIG_BT_RFCOMM_TTY=y CONFIG_BTRFS_ASSERT=y # CONFIG_BTRFS_DEBUG is not set CONFIG_BTRFS_FS=m -# CONFIG_BTRFS_FS_CHECK_INTEGRITY is not set CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_REF_VERIFY is not set # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config index d8c003737..3828b4751 100644 --- a/kernel-aarch64-rhel.config +++ b/kernel-aarch64-rhel.config @@ -819,7 +819,6 @@ CONFIG_BT_RFCOMM_TTY=y # CONFIG_BTRFS_ASSERT is not set # CONFIG_BTRFS_DEBUG is not set CONFIG_BTRFS_FS=m -# CONFIG_BTRFS_FS_CHECK_INTEGRITY is not set CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_REF_VERIFY is not set # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set diff --git a/kernel-aarch64-rt-64k-debug-rhel.config b/kernel-aarch64-rt-64k-debug-rhel.config index 63aa3f731..60e7a6039 100644 --- a/kernel-aarch64-rt-64k-debug-rhel.config +++ b/kernel-aarch64-rt-64k-debug-rhel.config @@ -821,7 +821,6 @@ CONFIG_BT_RFCOMM_TTY=y CONFIG_BTRFS_ASSERT=y # CONFIG_BTRFS_DEBUG is not set CONFIG_BTRFS_FS=m -# CONFIG_BTRFS_FS_CHECK_INTEGRITY is not set CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_REF_VERIFY is not set # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set diff --git a/kernel-aarch64-rt-64k-rhel.config b/kernel-aarch64-rt-64k-rhel.config index 143ac6d0d..430ecbdd2 100644 --- a/kernel-aarch64-rt-64k-rhel.config +++ b/kernel-aarch64-rt-64k-rhel.config @@ -821,7 +821,6 @@ CONFIG_BT_RFCOMM_TTY=y # CONFIG_BTRFS_ASSERT is not set # CONFIG_BTRFS_DEBUG is not set CONFIG_BTRFS_FS=m -# CONFIG_BTRFS_FS_CHECK_INTEGRITY is not set CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_REF_VERIFY is not set # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config index 65e2eac28..8525a7fac 100644 --- a/kernel-aarch64-rt-debug-rhel.config +++ b/kernel-aarch64-rt-debug-rhel.config @@ -819,7 +819,6 @@ CONFIG_BT_RFCOMM_TTY=y CONFIG_BTRFS_ASSERT=y # CONFIG_BTRFS_DEBUG is not set CONFIG_BTRFS_FS=m -# CONFIG_BTRFS_FS_CHECK_INTEGRITY is not set CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_REF_VERIFY is not set # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config index 4ff66b070..00024be68 100644 --- a/kernel-aarch64-rt-rhel.config +++ b/kernel-aarch64-rt-rhel.config @@ -819,7 +819,6 @@ CONFIG_BT_RFCOMM_TTY=y # CONFIG_BTRFS_ASSERT is not set # CONFIG_BTRFS_DEBUG is not set CONFIG_BTRFS_FS=m -# CONFIG_BTRFS_FS_CHECK_INTEGRITY is not set CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_REF_VERIFY is not set # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config index b7f0cdc49..cb3cd0d96 100644 --- a/kernel-ppc64le-debug-rhel.config +++ b/kernel-ppc64le-debug-rhel.config @@ -656,7 +656,6 @@ CONFIG_BT_RFCOMM_TTY=y CONFIG_BTRFS_ASSERT=y # CONFIG_BTRFS_DEBUG is not set CONFIG_BTRFS_FS=m -# CONFIG_BTRFS_FS_CHECK_INTEGRITY is not set CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_REF_VERIFY is not set # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set diff --git a/kernel-riscv64-debug-rhel.config b/kernel-riscv64-debug-rhel.config index 12b16e561..d2be0c6b1 100644 --- a/kernel-riscv64-debug-rhel.config +++ b/kernel-riscv64-debug-rhel.config @@ -668,7 +668,6 @@ CONFIG_BT_RFCOMM_TTY=y CONFIG_BTRFS_ASSERT=y # CONFIG_BTRFS_DEBUG is not set CONFIG_BTRFS_FS=m -# CONFIG_BTRFS_FS_CHECK_INTEGRITY is not set CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_REF_VERIFY is not set # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config index 7e15a4907..b787001ab 100644 --- a/kernel-s390x-debug-rhel.config +++ b/kernel-s390x-debug-rhel.config @@ -656,7 +656,6 @@ CONFIG_BT_RFCOMM_TTY=y CONFIG_BTRFS_ASSERT=y # CONFIG_BTRFS_DEBUG is not set CONFIG_BTRFS_FS=m -# CONFIG_BTRFS_FS_CHECK_INTEGRITY is not set CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_REF_VERIFY is not set # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config index 064944563..31c0e7646 100644 --- a/kernel-s390x-zfcpdump-rhel.config +++ b/kernel-s390x-zfcpdump-rhel.config @@ -657,7 +657,6 @@ CONFIG_BT_RFCOMM_TTY=y # CONFIG_BTRFS_ASSERT is not set # CONFIG_BTRFS_DEBUG is not set CONFIG_BTRFS_FS=y -# CONFIG_BTRFS_FS_CHECK_INTEGRITY is not set CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_REF_VERIFY is not set # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config index 9f0dd37c3..0a7a3a334 100644 --- a/kernel-x86_64-debug-rhel.config +++ b/kernel-x86_64-debug-rhel.config @@ -685,7 +685,6 @@ CONFIG_BT_RFCOMM_TTY=y CONFIG_BTRFS_ASSERT=y # CONFIG_BTRFS_DEBUG is not set CONFIG_BTRFS_FS=m -# CONFIG_BTRFS_FS_CHECK_INTEGRITY is not set CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_REF_VERIFY is not set # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config index 0240d61de..69b41abb3 100644 --- a/kernel-x86_64-rt-debug-rhel.config +++ b/kernel-x86_64-rt-debug-rhel.config @@ -685,7 +685,6 @@ CONFIG_BT_RFCOMM_TTY=y CONFIG_BTRFS_ASSERT=y # CONFIG_BTRFS_DEBUG is not set CONFIG_BTRFS_FS=m -# CONFIG_BTRFS_FS_CHECK_INTEGRITY is not set CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_REF_VERIFY is not set # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config index 733832828..a6d5a8640 100644 --- a/kernel-x86_64-rt-rhel.config +++ b/kernel-x86_64-rt-rhel.config @@ -685,7 +685,6 @@ CONFIG_BT_RFCOMM_TTY=y # CONFIG_BTRFS_ASSERT is not set # CONFIG_BTRFS_DEBUG is not set CONFIG_BTRFS_FS=m -# CONFIG_BTRFS_FS_CHECK_INTEGRITY is not set CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_REF_VERIFY is not set # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set diff --git a/kernel.changelog b/kernel.changelog index 87fc1986b..e7a0f92e4 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,157 @@ +* Tue Mar 31 2026 CKI KWF Bot [6.12.0-218.el10] +- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371] +- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968] +- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968] +- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968] +- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968] +- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968] +- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968] +- sparc/PCI: Correct 64-bit non-pref -> pref BAR resources (Myron Stowe) [RHEL-139968] +- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968] +- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968] +- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968] +- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968] +- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968] +- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968] +- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968] +- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968] +- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968] +- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968] +- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968] +- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968] +- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968] +- PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation (Myron Stowe) [RHEL-139968] +- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968] +- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968] +- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968] +- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968] +- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968] +- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968] +- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968] +- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968] +- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968] +- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968] +- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968] +- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968] +- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968] +- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968] +- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968] +- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968] +- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968] +- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968] +- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968] +- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968] +- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968] +- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968] +- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968] +- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968] +- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968] +- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968] +- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968] +- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968] +- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968] +- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968] +- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968] +- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968] +- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968] +- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968] +- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968] +- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968] +- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968] +- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968] +- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968] +- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968] +- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968] +- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968] +- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968] +- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968] +- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968] +- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968] +- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968] +- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968] +- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968] +- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968] +- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968] +- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968] +- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968] +- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968] +- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968] +- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968] +- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968] +- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968] +- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968] +- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968] +- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968] +- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968] +- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968] +- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968] +- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968] +- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968] +- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968] +- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968] +- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968] +- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968] +- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968] +- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968] +- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968] +- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968] +- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968] +- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968] +- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968] +- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968] +- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968] +- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968] +- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968] +- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968] +- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968] +- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968] +- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968] +- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968] +- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968] +- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968] +- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968] +- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968] +- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968] +- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968] +- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968] +- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968] +- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968] +- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968] +- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968] +- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968] +- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968] +- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968] +- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968] +- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968] +- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968] +- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968] +- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968] +Resolves: RHEL-139968, RHEL-152371 + +* Mon Mar 30 2026 Alexandra Hájková [6.12.0-217.el10] +- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397] +- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397] +- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397] +- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397] +- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893] +- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473] +- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213] +- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213] +- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213] +- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213] +- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213] +- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531] +- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531] +- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154] +- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] +- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} +- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] +- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] +- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} +- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] +- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] +Resolves: RHEL-111893, RHEL-123213, RHEL-142546, RHEL-145154, RHEL-145936, RHEL-148654, RHEL-154278, RHEL-154397, RHEL-155441, RHEL-156881, RHEL-157473, RHEL-161531 + * Thu Mar 26 2026 Alexandra Hájková [6.12.0-216.el10] - redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155] - net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155] @@ -1356,6 +1510,16 @@ Resolves: RHEL-138728, RHEL-151838, RHEL-152643, RHEL-153335 - cache: sifive_ccache: Add ESWIN EIC7700 support (Jennifer Berringer) [RHEL-129062] Resolves: RHEL-129062, RHEL-135095, RHEL-145975, RHEL-150776, RHEL-97168 +* Fri Mar 27 2026 CKI KWF Bot [6.12.0-211.6.1.el10_2] +- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] +- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} +- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] +- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] +- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} +- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] +- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] +Resolves: RHEL-142546, RHEL-145936, RHEL-148654, RHEL-154278, RHEL-155441, RHEL-156881 + * Tue Mar 24 2026 CKI KWF Bot [6.12.0-211.5.1.el10_2] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] diff --git a/kernel.sbat.template b/kernel.sbat.template index ec409e655..6c50037cd 100644 --- a/kernel.sbat.template +++ b/kernel.sbat.template @@ -1,2 +1,3 @@ sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md +kernel.@SBAT_SUFFIX,1,Red Hat,kernel-core,@KVER,mailto:secalert@redhat.com kernel.almalinux,1,AlmaLinux,kernel-core,@KVER,mailto:security@almalinux.org diff --git a/kernel.spec b/kernel.spec index 776ce4ea2..38e5cef50 100644 --- a/kernel.spec +++ b/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel %define specrpmversion 6.12.0 %define specversion 6.12.0 %define patchversion 6.12 -%define pkgrelease 216 +%define pkgrelease 218 %define kversion 6 -%define tarfile_release 6.12.0-216.el10 +%define tarfile_release 6.12.0-218.el10 # This is needed to do merge window version magic %define patchlevel 12 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 216%{?buildid}%{?dist} +%define specrelease 218%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 6.12.0-216.el10 +%define kabiversion 6.12.0-218.el10 # If this variable is set to 1, a bpf selftests build failure will cause a # fatal kernel package build error @@ -713,7 +713,7 @@ Release: %{pkg_release} %if 0%{?fedora} ExclusiveArch: noarch x86_64 s390x aarch64 ppc64le riscv64 %else -ExclusiveArch: noarch i386 i686 x86_64 s390x aarch64 ppc64le x86_64_v2 riscv64 +ExclusiveArch: noarch i386 i686 x86_64 s390x aarch64 ppc64le riscv64 x86_64_v2 %endif ExclusiveOS: Linux %ifnarch %{nobuildarches} @@ -803,6 +803,7 @@ BuildRequires: lld %endif BuildRequires: libcap-devel libcap-ng-devel rsync libmnl-devel libxml2-devel BuildRequires: numactl-devel +BuildRequires: xxd %endif BuildConflicts: rhbuildsys(DiskFree) < 500Mb %if %{with_debuginfo} @@ -1017,6 +1018,8 @@ Source152: uki_addons.json Source102: nvidiagpuoot001.x509 +Source107: nvidiajetsonsoc.x509 +Source108: nvidiabfdpu.x509 %if 0%{?fedora}%{?eln} %define ima_ca_cert %{SOURCE106} @@ -1115,7 +1118,7 @@ Source103: almalinuximaca1.x509 Source104: almalinuxima.x509 Source105: almalinuxima.x509 Source106: almalinuxima.x509 -Source107: almalinuxnvidia1.x509 +Source109: almalinuxnvidia1.x509 ## Patches needed for building this package @@ -2116,8 +2119,10 @@ truncate -s0 ../certs/rhel.pem openssl x509 -inform der -in %{SOURCE100} -out rheldup3.pem openssl x509 -inform der -in %{SOURCE101} -out rhelkpatch1.pem openssl x509 -inform der -in %{SOURCE102} -out nvidiagpuoot001.pem -openssl x509 -inform der -in %{SOURCE107} -out almalinuxnvidia.pem -cat rheldup3.pem rhelkpatch1.pem nvidiagpuoot001.pem almalinuxnvidia.pem > ../certs/rhel.pem +openssl x509 -inform der -in %{SOURCE107} -out nvidiajetsonsoc.pem +openssl x509 -inform der -in %{SOURCE108} -out nvidiabfdpu.pem +openssl x509 -inform der -in %{SOURCE109} -out almalinuxnvidia.pem +cat rheldup3.pem rhelkpatch1.pem nvidiagpuoot001.pem nvidiajetsonsoc.pem nvidiabfdpu.pem almalinuxnvidia.pem > ../certs/rhel.pem # rhelkeys %endif %if %{signkernel} @@ -4503,14 +4508,14 @@ fi\ # # %changelog -* Fri Mar 27 2026 Eduard Abdullin - 6.12.0-216 +* Wed Apr 01 2026 Eduard Abdullin - 6.12.0-218 - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert -* Fri Mar 27 2026 Neal Gompa - 6.12.0-216 +* Wed Apr 01 2026 Neal Gompa - 6.12.0-218 - Enable Btrfs support for all kernel variants -* Fri Mar 27 2026 Andrew Lukoshko - 6.12.0-216 +* Wed Apr 01 2026 Andrew Lukoshko - 6.12.0-218 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -4520,6 +4525,158 @@ fi\ - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained +* Tue Mar 31 2026 CKI KWF Bot [6.12.0-218.el10] +- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371] +- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968] +- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968] +- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968] +- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968] +- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968] +- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968] +- sparc/PCI: Correct 64-bit non-pref -> pref BAR resources (Myron Stowe) [RHEL-139968] +- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968] +- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968] +- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968] +- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968] +- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968] +- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968] +- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968] +- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968] +- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968] +- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968] +- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968] +- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968] +- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968] +- PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation (Myron Stowe) [RHEL-139968] +- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968] +- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968] +- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968] +- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968] +- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968] +- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968] +- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968] +- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968] +- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968] +- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968] +- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968] +- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968] +- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968] +- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968] +- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968] +- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968] +- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968] +- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968] +- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968] +- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968] +- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968] +- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968] +- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968] +- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968] +- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968] +- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968] +- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968] +- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968] +- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968] +- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968] +- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968] +- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968] +- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968] +- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968] +- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968] +- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968] +- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968] +- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968] +- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968] +- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968] +- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968] +- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968] +- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968] +- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968] +- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968] +- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968] +- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968] +- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968] +- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968] +- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968] +- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968] +- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968] +- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968] +- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968] +- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968] +- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968] +- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968] +- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968] +- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968] +- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968] +- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968] +- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968] +- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968] +- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968] +- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968] +- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968] +- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968] +- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968] +- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968] +- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968] +- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968] +- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968] +- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968] +- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968] +- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968] +- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968] +- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968] +- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968] +- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968] +- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968] +- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968] +- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968] +- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968] +- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968] +- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968] +- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968] +- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968] +- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968] +- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968] +- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968] +- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968] +- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968] +- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968] +- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968] +- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968] +- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968] +- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968] +- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968] +- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968] +- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968] +- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968] +- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968] +- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968] +- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968] +- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968] + +* Mon Mar 30 2026 Alexandra Hájková [6.12.0-217.el10] +- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397] +- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397] +- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397] +- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397] +- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893] +- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473] +- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213] +- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213] +- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213] +- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213] +- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213] +- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531] +- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531] +- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154] +- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] +- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} +- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] +- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] +- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} +- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] +- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] + * Thu Mar 26 2026 Alexandra Hájková [6.12.0-216.el10] - redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155] - net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155] diff --git a/nvidiabfdpu.x509 b/nvidiabfdpu.x509 new file mode 100644 index 0000000000000000000000000000000000000000..18b9b005827c96992192e8000e1c00823e84e09b GIT binary patch literal 1426 zcmXqLV(l|%VlG?2%*4pV#K~|}Ylp<_GrJ`Wc-c6$+C196^D;7WvoaVs7)lvPurY_S zF!Kodm1U-6CMviGgev&^hbTBZ8Y&qmz?E|{iU}8|CMV{k7L_;@rKV&gmgptt=Nia~ z^BS2M7#bNH85)_H8b*op8e13`8o;;)!G^j9+7KI5{K7n4JRKFBa!OOvGE;L>6kMQo z6=$aBW#*+T7#J85WoZ+W60%PiSs9p{nD`kCnwYqlnwS_F_SP+0vFe&h2;as?w$81! z_4n_{`|j44Sbjl|Pie;vxx4wp)3f&es#{fV*_{azsQ4WzVmf!({?0YU^VjzLt~+j#cy7nK zU)rg?7d?M^sjl6vRubp?^;cW?A)NzD17yP|ZFqZd(rg<}j|a@I3+3Yv+b&FB=T%`) zy3lUT7xk~kUo>WZwD0JAWT(DzK6AO&cZJ*a7AlO|=}XS9tO__=I$h=RG9A7w1GAm$ z>o@YeLQXN8{zu-o3@_CiZcfeSzM`G zdP+BXw_#&3zw}AZiU1F@m1Xu7mo|SnV)QLzZhVb%^N#%a>mNR}$`bZ`c=2Mx;m_{c z5ylz+Q$3@PuF=Z6y1Pqh?Zrv$yXrP~M|S$I6Ny>;Mm?#vQ1pD?tsSb*cl{Kc%GH1G znXth~tBA{O z;XK2~Ow5c7jEgG_$_#jbNl#Xok?}tZlL3PPABe{f;;}F@u{Riqf%vK*K92zx8;3R< zBP%OAGqZs#NSu#Fj78*8;JJg|qFb*VcoJ03vnW$dZb{l619_0NGK++PSc6F1wcmpF ztN%Vv{vcfZ^3lb>-+wUH$8aL_ro)-!y zO<%+p_ilVM>>07c^BEnr&WP5kBjE083_U z#%jj6qaLb@}QCu zna&fc@y~!GXzR7vW`9CjlR*)9#PaQlmHpCe))D_vdtI!c9`yJnK*k0@^2^##jQw#3IpEYr8@ xcMTT0w0XCDD#y#~>5cQe7qfRbELrvJ?vnY3+Y2lfiEzE$$@SGq%kiO@BLEN0UWEVv literal 0 HcmV?d00001 diff --git a/nvidiajetsonsoc.x509 b/nvidiajetsonsoc.x509 new file mode 100644 index 0000000000000000000000000000000000000000..0978d60dd7fd139fa93b078f78e20dc89001b964 GIT binary patch literal 1423 zcmXqLV(m6)VlH05%*4pV#K~|}Ylp<_GrPqNc-c6$+C196^D;7WvoaVs7)lvPurY_S zF!Kodm1U-6CMviGgev&^hbTBZ8Y&qmz?E|{iU}8|CMV{k7L_;@rKV&gmgptt=Nia~ z^BS2M7#bNH85$WHSVoES8e13`8o;;)0ft%z8W0;4{lYw5JRKFhQcH^S^Av*foxv6r zXQt<6=A|nb7#I>|V-u4SvNsr68JL@x_!$hEn7Ejlm>3z_e`HJ9$J;&LzGL1+uXYj5 ze+uRoEF7OM=XlXQE$7wT%PdvX)hsOz#I6skJQY{={bJkI-SZ`drmuB~OFOwxv(akz zj>Q>rnxem^P4d%u*gJ1p!bzc*Q904GBt2e==H5`KXE~kp=XRc#&eZ5dW+%<`gXXSx zKXrEbp_67!E`M8;_cZC5E}S;WS1Q-=shfTEsTF(~vR9*h+?P1&qF?jo;s1x@|v4B^w^Vw%zI&BdFUes9)WaiYeU>GI2livbz;nJ&mgz6oEo?^>(pD)|lEB}UdQ zj(S25`c}l8N&b?4S-k1d@`*F9p0EDUsea!0`qO(;R_%D3{kJ~NO|6!{CDGLW@roogmc@lx9`B}VYwJA1Wh2Wl*N#AkiazT(pVf1%MzzPtZJ zHpe!wGchwVFfOhzC^O&zraM_-M#ldvOa=@Fd>|e_h{wXr#NJ>a2I8xN_&f$&Y#iEb zjI6Be%*+O|AaOnxF&2@!go|N|Iv+$!eCIl{=!RxaOxO152J#?jWflnou?CU2Yrh5U zSO0yU{6V<*<)e#%zc;rEA*W4X76YbDMuxVch=OY?j8+7@#BBQhubrK%>&F$D?!CGv zY?6Nlg*AN)TN%Qyr8s5R*G%1Ij)`9{Ihf1{zh!h%e$Nf>Q-{uIUY)b_%=E;KGNe>dCYy%;$eT=$DG7Nm1nd4BR#7x>)g7#&uqq8 z9{XvY2h?&SVml%Bo!%$FC(B*G>;J8<0Iq$Lxg zy0Sf;?aDI#bfZlI>n6Orr1x^-l$$&@2K-SUk4klTxT}cVEq-$1eeVhbU!glXubf>p zeKNSUw=ep5Hqz$s@4vlgxVBkspUihcid)updga2;7Rj64PxtO{+5R-$JZOhS%~$5X z`BzM9sx}L3x$r5xp{RvyS-_+w;Ag=eC2!SJZ(YCc zS@$;N&atEFEB7DDkTu&bcqT97<(06{dDrD6_7#iYD?OMgx>S6IulZ_gyGqY#S5|jj zyZ^WO-l|=(9OtG_dl+)x;f-BwsG|6%rwS#W9MVckc3bii@^gQxbj+-D=ZN%+2{jgK z`BNhQIE7*3Or@Bu4Bt9G8HCv#UUannklstNxY)z7zpqc*yzm#_GG(V3zw}QF9{Q{A xDp)A4uPmmh(4;fVZh7Im--aJj_D?fqt*UX*ayvC&duQiC$%2dx;v2dI>Hx2IUjhIC literal 0 HcmV?d00001 diff --git a/sources b/sources index d0b1a72e2..46f535202 100644 --- a/sources +++ b/sources @@ -1,5 +1,5 @@ SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6 -SHA512 (linux-6.12.0-216.el10.tar.xz) = 6b51512f1d8b8aa2a0776d489b4399c871bd48adf862e5180c005ba6d7ad65a3b80c898e92616f81d067770584427c7e53cf670a32b509f6fca746763afa5ca6 -SHA512 (kernel-abi-stablelists-6.12.0-216.el10.tar.xz) = 456a8e02ff6086157a538557ff4c762790102b48d08176d009b8bb4505b771e5faa89b51308030c8a0f2df5a955fa20c636450c3cef5483024920f56e9a25be1 -SHA512 (kernel-kabi-dw-6.12.0-216.el10.tar.xz) = e81b8cd9f08c77147d95b281f43f38af27f378a2fcb7811923244a50ffc9ca3286f9f5ae496f6448152d45d37afb66e56a542a2ea5ca93c624bcb2c02ac1d619 +SHA512 (linux-6.12.0-218.el10.tar.xz) = a5fb75fe11575eed21a97d82e35333f814435a6bea3217dad575ff798e16181de657fb04797d1e22993ea965b7ba2572bec951e0e8b84739427661f470a6a377 +SHA512 (kernel-abi-stablelists-6.12.0-218.el10.tar.xz) = b5d35da9c2d4500362738f777c6dc1d04ca263515f130e9ca92667627057f5e1558798f5cb840a27ec4ae2c99fd361951fb68238d05474d541de524559f08a25 +SHA512 (kernel-kabi-dw-6.12.0-218.el10.tar.xz) = 4558ac8888fbfe2d2c8870ac14d1f0b2712544c2f4355187e9e08af02cdb156e9dfff2f248ed5fe8eaf572fb0abd997db115bdc78cbaae04b522a885b53b86a7 diff --git a/uki-addons.sbat.template b/uki-addons.sbat.template index 88636cc56..c8b787d6d 100644 --- a/uki-addons.sbat.template +++ b/uki-addons.sbat.template @@ -1,2 +1,3 @@ sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md +kernel-uki-virt-addons.@SBAT_SUFFIX,1,Red Hat,kernel-uki-virt-addons,@KVER,mailto:secalert@redhat.com kernel-uki-virt-addons.almalinux,1,AlmaLinux,kernel-uki-virt-addons,@KVER,mailto:security@almalinux.org diff --git a/uki.sbat.template b/uki.sbat.template index 6a1123564..c4780ed4d 100644 --- a/uki.sbat.template +++ b/uki.sbat.template @@ -1,2 +1,3 @@ sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md +kernel-uki-virt.@SBAT_SUFFIX,1,Red Hat,kernel-uki-virt,@KVER,mailto:secalert@redhat.com kernel-uki-virt.almalinux,1,AlmaLinux,kernel-uki-virt,@KVER,mailto:security@almalinux.org