From f01a6317203cb712434ba8a59039d0c4bc1658a5 Mon Sep 17 00:00:00 2001 From: CKI KWF Bot Date: Fri, 17 Oct 2025 20:57:31 +0000 Subject: [PATCH] kernel-5.14.0-626.el9 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * Fri Oct 17 2025 CKI KWF Bot [5.14.0-626.el9] - redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková) - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114300] {CVE-2025-39718} - vfs: fix copy_file_range() averts filesystem freeze protection (Benjamin Coddington) [RHEL-76048] - gfs2: Fix unlikely race in gdlm_put_lock (Andreas Gruenbacher) [RHEL-116886] - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-116886] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-116886] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-116886] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-116886] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-116886] - gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote (Andreas Gruenbacher) [RHEL-116886] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-116886] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-116886] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-116886] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-116886] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-116886] - gfs2: Do not use atomic operations unnecessarily (Andreas Gruenbacher) [RHEL-116886] - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-116886] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-116886] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-116886] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-116886] - gfs2: Sanitize gfs2_meta_check, gfs2_metatype_check, gfs2_io_error (Andreas Gruenbacher) [RHEL-116886] - gfs2: Remove unnecessary gfs2_meta_check_ii argument (Andreas Gruenbacher) [RHEL-116886] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-116886] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-116886] - gfs2: Partially revert "gfs2: do_xmote fixes" (Andreas Gruenbacher) [RHEL-116886] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-116886] - gfs2: Minor gfs2_ail1_empty cleanup (Andreas Gruenbacher) [RHEL-116886] - gfs2: Rename gfs2_withdrawn to gfs2_withdrawing_or_withdrawn (Andreas Gruenbacher) [RHEL-116886] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Juntong Deng) [RHEL-116886] - gfs2: No more quota complaints after withdraw (Andreas Gruenbacher) [RHEL-116886] - gfs2: Rename "freeze_workqueue" to "gfs2_freeze" (Andreas Gruenbacher) [RHEL-116886] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-116886] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-116886] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-116886] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-116886] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-116886] - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-116886] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-116886] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-116886] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-116886] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-116886] - gfs2: Remove space before newline (Colin Ian King) [RHEL-116886] - gfs2: Remove unused sd_withdraw_wait field (Andreas Gruenbacher) [RHEL-116886] - gfs2: Remove unused GIF_FREE_VFS_INODE flag (Andreas Gruenbacher) [RHEL-116886] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-116886] - gfs2: Unlock fewer glocks on unmount (Andreas Gruenbacher) [RHEL-116886] - ptp: prevent possible ABBA deadlock in ptp_clock_freerun() (CKI Backport Bot) [RHEL-115644] - ptp: allow reading of currently dialed frequency to succeed on free-running clocks (CKI Backport Bot) [RHEL-115644] - ptp: fix breakage after ptp_vclock_in_use() rework (CKI Backport Bot) [RHEL-115644] - ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() (CKI Backport Bot) [RHEL-115644] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106002] {CVE-2025-38461} Resolves: RHEL-106002, RHEL-114300, RHEL-115644, RHEL-116886, RHEL-76048 Signed-off-by: CKI KWF Bot --- Makefile.rhelver | 2 +- kernel.changelog | 54 ++++++++++++++++++++++++++++++++++++++++++ kernel.spec | 61 ++++++++++++++++++++++++++++++++++++++++++++---- rpminspect.yaml | 15 +++++++++++- sources | 6 ++--- 5 files changed, 129 insertions(+), 9 deletions(-) diff --git a/Makefile.rhelver b/Makefile.rhelver index 55af383d7..cb4f1e2ab 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 8 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 625 +RHEL_RELEASE = 626 # # ZSTREAM diff --git a/kernel.changelog b/kernel.changelog index 35a75de0b..b76e4122f 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,57 @@ +* Fri Oct 17 2025 CKI KWF Bot [5.14.0-626.el9] +- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková) +- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114300] {CVE-2025-39718} +- vfs: fix copy_file_range() averts filesystem freeze protection (Benjamin Coddington) [RHEL-76048] +- gfs2: Fix unlikely race in gdlm_put_lock (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-116886] +- gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Do not use atomic operations unnecessarily (Andreas Gruenbacher) [RHEL-116886] +- gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-116886] +- gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-116886] +- gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Sanitize gfs2_meta_check, gfs2_metatype_check, gfs2_io_error (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Remove unnecessary gfs2_meta_check_ii argument (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Partially revert "gfs2: do_xmote fixes" (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Minor gfs2_ail1_empty cleanup (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Rename gfs2_withdrawn to gfs2_withdrawing_or_withdrawn (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Juntong Deng) [RHEL-116886] +- gfs2: No more quota complaints after withdraw (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Rename "freeze_workqueue" to "gfs2_freeze" (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-116886] +- gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Remove space before newline (Colin Ian King) [RHEL-116886] +- gfs2: Remove unused sd_withdraw_wait field (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Remove unused GIF_FREE_VFS_INODE flag (Andreas Gruenbacher) [RHEL-116886] +- gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-116886] +- gfs2: Unlock fewer glocks on unmount (Andreas Gruenbacher) [RHEL-116886] +- ptp: prevent possible ABBA deadlock in ptp_clock_freerun() (CKI Backport Bot) [RHEL-115644] +- ptp: allow reading of currently dialed frequency to succeed on free-running clocks (CKI Backport Bot) [RHEL-115644] +- ptp: fix breakage after ptp_vclock_in_use() rework (CKI Backport Bot) [RHEL-115644] +- ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() (CKI Backport Bot) [RHEL-115644] +- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106002] {CVE-2025-38461} +Resolves: RHEL-106002, RHEL-114300, RHEL-115644, RHEL-116886, RHEL-76048 + * Wed Oct 15 2025 Patrick Talbert [5.14.0-625.el9] - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-113838] {CVE-2022-50087} - NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate() (Benjamin Coddington) [RHEL-117497] diff --git a/kernel.spec b/kernel.spec index 155e06ae9..daacc26ab 100644 --- a/kernel.spec +++ b/kernel.spec @@ -165,15 +165,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 625 +%define pkgrelease 626 %define kversion 5 -%define tarfile_release 5.14.0-625.el9 +%define tarfile_release 5.14.0-626.el9 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 625%{?buildid}%{?dist} +%define specrelease 626%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-625.el9 +%define kabiversion 5.14.0-626.el9 # # End of genspec.sh variables @@ -3684,6 +3684,59 @@ fi # # %changelog +* Fri Oct 17 2025 CKI KWF Bot [5.14.0-626.el9] +- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková) +- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114300] {CVE-2025-39718} +- vfs: fix copy_file_range() averts filesystem freeze protection (Benjamin Coddington) [RHEL-76048] +- gfs2: Fix unlikely race in gdlm_put_lock (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-116886] +- gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Do not use atomic operations unnecessarily (Andreas Gruenbacher) [RHEL-116886] +- gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-116886] +- gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-116886] +- gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Sanitize gfs2_meta_check, gfs2_metatype_check, gfs2_io_error (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Remove unnecessary gfs2_meta_check_ii argument (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Partially revert "gfs2: do_xmote fixes" (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Minor gfs2_ail1_empty cleanup (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Rename gfs2_withdrawn to gfs2_withdrawing_or_withdrawn (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Juntong Deng) [RHEL-116886] +- gfs2: No more quota complaints after withdraw (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Rename "freeze_workqueue" to "gfs2_freeze" (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-116886] +- gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Remove space before newline (Colin Ian King) [RHEL-116886] +- gfs2: Remove unused sd_withdraw_wait field (Andreas Gruenbacher) [RHEL-116886] +- gfs2: Remove unused GIF_FREE_VFS_INODE flag (Andreas Gruenbacher) [RHEL-116886] +- gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-116886] +- gfs2: Unlock fewer glocks on unmount (Andreas Gruenbacher) [RHEL-116886] +- ptp: prevent possible ABBA deadlock in ptp_clock_freerun() (CKI Backport Bot) [RHEL-115644] +- ptp: allow reading of currently dialed frequency to succeed on free-running clocks (CKI Backport Bot) [RHEL-115644] +- ptp: fix breakage after ptp_vclock_in_use() rework (CKI Backport Bot) [RHEL-115644] +- ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() (CKI Backport Bot) [RHEL-115644] +- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106002] {CVE-2025-38461} + * Wed Oct 15 2025 Patrick Talbert [5.14.0-625.el9] - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-113838] {CVE-2022-50087} - NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate() (Benjamin Coddington) [RHEL-117497] diff --git a/rpminspect.yaml b/rpminspect.yaml index baf5134a1..98a913e5d 100644 --- a/rpminspect.yaml +++ b/rpminspect.yaml @@ -21,10 +21,23 @@ emptyrpm: - kernel-debug - kernel-debug-devel-matched - kernel-devel-matched - - kernel-lpae - kernel-zfcpdump - kernel-zfcpdump-devel-matched - kernel-zfcpdump-modules + - kernel-rt + - kernel-rt-debug + - kernel-rt-debug-devel-matched + - kernel-rt-devel-matched + - kernel-64k + - kernel-64k-debug + - kernel-64k-debug-devel-matched + - kernel-64k-devel-matched + - kernel-rt-64k + - kernel-rt-64k-debug + - kernel-rt-64k-debug-devel-matched + - kernel-rt-64k-devel-matched + + patches: ignore_list: diff --git a/sources b/sources index 17c7c90c2..f3bfdf391 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-625.el9.tar.xz) = 1aa74620ca748e20230640456d7fcc6674ba716c7770ddaf9dacc35925cd35664968d0a17008732ebe6eae0a9aebbe7c9ff67e86a6e31cf77b6df5c310368558 -SHA512 (kernel-abi-stablelists-5.14.0-625.el9.tar.bz2) = cf5d46ec95161403715805522e2aea8a05154f656635e08dfe8fd63d068609f44d87d6eadd345a74d0efcfdb0e279b7e0d5c4bb2ac7f818c1908cd8e766282ce -SHA512 (kernel-kabi-dw-5.14.0-625.el9.tar.bz2) = ff3357fa5572b2558a6e39245d8ab35a4e1a74a33ca02a85ca20a2b97a93e202078515275dc7d8097291af45ceab78636ed836a43f7fbb987fd91b476265a7f3 +SHA512 (linux-5.14.0-626.el9.tar.xz) = fe05e7df4f57c1e279031f545ce1b6168a26fa708c3c11ca1b0ab97b4376d2fd405b315c4465780205cf2f20786d001e285a3bcad2886ee569a901cec6edc9a7 +SHA512 (kernel-abi-stablelists-5.14.0-626.el9.tar.bz2) = 33d41961e03276ac97de15aabef43ff2184cd7eac16bc82209238e5e34acc87cd82f6b39a785fa744880c6d2885cbf73db7de692fdc491da9dd5f085fbb4afd1 +SHA512 (kernel-kabi-dw-5.14.0-626.el9.tar.bz2) = f9296dd49d54e10cf429a9ea3aedcc37adc910f426078c831fe0ae1681253ec004ace691d86fce4b980ae9199521eee94374cd5385add1e912e187d9b2783dc9