diff --git a/.gitignore b/.gitignore index 8fd577f98..007ea6d2a 100644 --- a/.gitignore +++ b/.gitignore @@ -1,6 +1,6 @@ -SOURCES/kernel-abi-stablelists-5.14.0-687.30.1.el9_8.tar.bz2 -SOURCES/kernel-kabi-dw-5.14.0-687.30.1.el9_8.tar.bz2 -SOURCES/linux-5.14.0-687.30.1.el9_8.tar.xz +SOURCES/kernel-abi-stablelists-5.14.0-687.31.1.el9_8.tar.bz2 +SOURCES/kernel-kabi-dw-5.14.0-687.31.1.el9_8.tar.bz2 +SOURCES/linux-5.14.0-687.31.1.el9_8.tar.xz SOURCES/nvidiabfdpu.x509 SOURCES/nvidiagpuoot001.x509 SOURCES/nvidiajetsonsoc.x509 diff --git a/.kernel.metadata b/.kernel.metadata index 013f54560..4bb13245a 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,6 +1,6 @@ -a2203d012022d3a3fabc30371a4c226478311e5c SOURCES/kernel-abi-stablelists-5.14.0-687.30.1.el9_8.tar.bz2 -b124dec682f398acd734edef44f45b4468ca3816 SOURCES/kernel-kabi-dw-5.14.0-687.30.1.el9_8.tar.bz2 -ee8c2b0677d3bd5e11933b08ee4f9b335ff6bf43 SOURCES/linux-5.14.0-687.30.1.el9_8.tar.xz +02bbdbab23b6498fca40617f9172e4194a8df1e7 SOURCES/kernel-abi-stablelists-5.14.0-687.31.1.el9_8.tar.bz2 +19960558459b4b724534799d4e5e786163676ef5 SOURCES/kernel-kabi-dw-5.14.0-687.31.1.el9_8.tar.bz2 +6ccedd203c276d2db35870f7ff93d20503e1db43 SOURCES/linux-5.14.0-687.31.1.el9_8.tar.xz 3dc4997e0273ca116d52a52238a57403aba5dafb SOURCES/nvidiabfdpu.x509 4fff8080e88afffc06d8ef5004db8d53bb21237f SOURCES/nvidiagpuoot001.x509 18378ab150ef13ef65609224e10a2e8501d82915 SOURCES/nvidiajetsonsoc.x509 diff --git a/SOURCES/Makefile.rhelver b/SOURCES/Makefile.rhelver index 3a700f794..0251b016a 100644 --- a/SOURCES/Makefile.rhelver +++ b/SOURCES/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 8 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 687.30.1 +RHEL_RELEASE = 687.31.1 # # ZSTREAM diff --git a/SOURCES/kernel-x86_64-debug-rhel.config b/SOURCES/kernel-x86_64-debug-rhel.config index efa08f0ed..4596593e0 100644 --- a/SOURCES/kernel-x86_64-debug-rhel.config +++ b/SOURCES/kernel-x86_64-debug-rhel.config @@ -6072,6 +6072,7 @@ CONFIG_SOC_CS42L43=m # CONFIG_SOC_TI is not set CONFIG_SOFTLOCKUP_DETECTOR=y CONFIG_SOFT_WATCHDOG=m +# CONFIG_SOFT_WATCHDOG_PRETIMEOUT is not set CONFIG_SOLARIS_X86_PARTITION=y CONFIG_SONY_FF=y CONFIG_SONY_LAPTOP=m @@ -7141,10 +7142,14 @@ CONFIG_WAN=y # CONFIG_WARN_ALL_UNSEEDED_RANDOM is not set CONFIG_WATCHDOG_CORE=y CONFIG_WATCHDOG_HANDLE_BOOT_ENABLED=y -# CONFIG_WATCHDOG_HRTIMER_PRETIMEOUT is not set +CONFIG_WATCHDOG_HRTIMER_PRETIMEOUT=y # CONFIG_WATCHDOG_NOWAYOUT is not set CONFIG_WATCHDOG_OPEN_TIMEOUT=0 -# CONFIG_WATCHDOG_PRETIMEOUT_GOV is not set +# CONFIG_WATCHDOG_PRETIMEOUT_DEFAULT_GOV_NOOP is not set +CONFIG_WATCHDOG_PRETIMEOUT_DEFAULT_GOV_PANIC=y +# CONFIG_WATCHDOG_PRETIMEOUT_GOV_NOOP is not set +CONFIG_WATCHDOG_PRETIMEOUT_GOV_PANIC=y +CONFIG_WATCHDOG_PRETIMEOUT_GOV=y CONFIG_WATCHDOG_SYSFS=y CONFIG_WATCHDOG=y CONFIG_WATCH_QUEUE=y diff --git a/SOURCES/kernel-x86_64-rhel.config b/SOURCES/kernel-x86_64-rhel.config index 24d35c515..aee78e2cb 100644 --- a/SOURCES/kernel-x86_64-rhel.config +++ b/SOURCES/kernel-x86_64-rhel.config @@ -6049,6 +6049,7 @@ CONFIG_SOC_CS42L43=m # CONFIG_SOC_TI is not set CONFIG_SOFTLOCKUP_DETECTOR=y CONFIG_SOFT_WATCHDOG=m +# CONFIG_SOFT_WATCHDOG_PRETIMEOUT is not set CONFIG_SOLARIS_X86_PARTITION=y CONFIG_SONY_FF=y CONFIG_SONY_LAPTOP=m @@ -7118,10 +7119,14 @@ CONFIG_WAN=y # CONFIG_WARN_ALL_UNSEEDED_RANDOM is not set CONFIG_WATCHDOG_CORE=y CONFIG_WATCHDOG_HANDLE_BOOT_ENABLED=y -# CONFIG_WATCHDOG_HRTIMER_PRETIMEOUT is not set +CONFIG_WATCHDOG_HRTIMER_PRETIMEOUT=y # CONFIG_WATCHDOG_NOWAYOUT is not set CONFIG_WATCHDOG_OPEN_TIMEOUT=0 -# CONFIG_WATCHDOG_PRETIMEOUT_GOV is not set +# CONFIG_WATCHDOG_PRETIMEOUT_DEFAULT_GOV_NOOP is not set +CONFIG_WATCHDOG_PRETIMEOUT_DEFAULT_GOV_PANIC=y +# CONFIG_WATCHDOG_PRETIMEOUT_GOV_NOOP is not set +CONFIG_WATCHDOG_PRETIMEOUT_GOV_PANIC=y +CONFIG_WATCHDOG_PRETIMEOUT_GOV=y CONFIG_WATCHDOG_SYSFS=y CONFIG_WATCHDOG=y CONFIG_WATCH_QUEUE=y diff --git a/SOURCES/kernel-x86_64-rt-debug-rhel.config b/SOURCES/kernel-x86_64-rt-debug-rhel.config index 76151b93e..1fffbe219 100644 --- a/SOURCES/kernel-x86_64-rt-debug-rhel.config +++ b/SOURCES/kernel-x86_64-rt-debug-rhel.config @@ -6171,6 +6171,7 @@ CONFIG_SOC_CS42L43=m # CONFIG_SOC_TI is not set CONFIG_SOFTLOCKUP_DETECTOR=y CONFIG_SOFT_WATCHDOG=m +# CONFIG_SOFT_WATCHDOG_PRETIMEOUT is not set CONFIG_SOLARIS_X86_PARTITION=y CONFIG_SONY_FF=y CONFIG_SONY_LAPTOP=m @@ -7249,10 +7250,14 @@ CONFIG_WAN=y # CONFIG_WARN_ALL_UNSEEDED_RANDOM is not set CONFIG_WATCHDOG_CORE=y CONFIG_WATCHDOG_HANDLE_BOOT_ENABLED=y -# CONFIG_WATCHDOG_HRTIMER_PRETIMEOUT is not set +CONFIG_WATCHDOG_HRTIMER_PRETIMEOUT=y # CONFIG_WATCHDOG_NOWAYOUT is not set CONFIG_WATCHDOG_OPEN_TIMEOUT=0 -# CONFIG_WATCHDOG_PRETIMEOUT_GOV is not set +# CONFIG_WATCHDOG_PRETIMEOUT_DEFAULT_GOV_NOOP is not set +CONFIG_WATCHDOG_PRETIMEOUT_DEFAULT_GOV_PANIC=y +# CONFIG_WATCHDOG_PRETIMEOUT_GOV_NOOP is not set +CONFIG_WATCHDOG_PRETIMEOUT_GOV_PANIC=y +CONFIG_WATCHDOG_PRETIMEOUT_GOV=y CONFIG_WATCHDOG_SYSFS=y CONFIG_WATCHDOG=y CONFIG_WATCH_QUEUE=y diff --git a/SOURCES/kernel-x86_64-rt-rhel.config b/SOURCES/kernel-x86_64-rt-rhel.config index b8eae6f63..efd90298c 100644 --- a/SOURCES/kernel-x86_64-rt-rhel.config +++ b/SOURCES/kernel-x86_64-rt-rhel.config @@ -6148,6 +6148,7 @@ CONFIG_SOC_CS42L43=m # CONFIG_SOC_TI is not set CONFIG_SOFTLOCKUP_DETECTOR=y CONFIG_SOFT_WATCHDOG=m +# CONFIG_SOFT_WATCHDOG_PRETIMEOUT is not set CONFIG_SOLARIS_X86_PARTITION=y CONFIG_SONY_FF=y CONFIG_SONY_LAPTOP=m @@ -7226,10 +7227,14 @@ CONFIG_WAN=y # CONFIG_WARN_ALL_UNSEEDED_RANDOM is not set CONFIG_WATCHDOG_CORE=y CONFIG_WATCHDOG_HANDLE_BOOT_ENABLED=y -# CONFIG_WATCHDOG_HRTIMER_PRETIMEOUT is not set +CONFIG_WATCHDOG_HRTIMER_PRETIMEOUT=y # CONFIG_WATCHDOG_NOWAYOUT is not set CONFIG_WATCHDOG_OPEN_TIMEOUT=0 -# CONFIG_WATCHDOG_PRETIMEOUT_GOV is not set +# CONFIG_WATCHDOG_PRETIMEOUT_DEFAULT_GOV_NOOP is not set +CONFIG_WATCHDOG_PRETIMEOUT_DEFAULT_GOV_PANIC=y +# CONFIG_WATCHDOG_PRETIMEOUT_GOV_NOOP is not set +CONFIG_WATCHDOG_PRETIMEOUT_GOV_PANIC=y +CONFIG_WATCHDOG_PRETIMEOUT_GOV=y CONFIG_WATCHDOG_SYSFS=y CONFIG_WATCHDOG=y CONFIG_WATCH_QUEUE=y diff --git a/SOURCES/kernel.changelog b/SOURCES/kernel.changelog index bbd565309..8cc1ebcbc 100644 --- a/SOURCES/kernel.changelog +++ b/SOURCES/kernel.changelog @@ -1,3 +1,28 @@ +* Mon Jul 27 2026 CKI KWF Bot [5.14.0-687.31.1.el9_8] +- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} +- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} +- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} +- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] +- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] +- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] +- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] +- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] +- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] +- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] +- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] +- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] +- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] +- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] +- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] +- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} +- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} +- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} +- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] +- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} +- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] +- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] +Resolves: RHEL-180033, RHEL-188257, RHEL-189962, RHEL-190342, RHEL-193517, RHEL-193729, RHEL-213163 + * Wed Jul 22 2026 CKI KWF Bot [5.14.0-687.30.1.el9_8] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index 33ea1b14f..da2a4004d 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 687.30.1 +%define pkgrelease 687.31.1 %define kversion 5 -%define tarfile_release 5.14.0-687.30.1.el9_8 +%define tarfile_release 5.14.0-687.31.1.el9_8 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 687.30.1%{?buildid}%{?dist} +%define specrelease 687.31.1%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-687.30.1.el9_8 +%define kabiversion 5.14.0-687.31.1.el9_8 # # End of genspec.sh variables @@ -3795,7 +3795,7 @@ fi # # %changelog -* Fri Jul 31 2026 Andrew Lukoshko - 5.14.0-687.30.1 +* Sat Aug 01 2026 Andrew Lukoshko - 5.14.0-687.31.1 - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -3807,12 +3807,36 @@ fi - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained -* Fri Jul 31 2026 Eduard Abdullin - 5.14.0-687.30.1 +* Sat Aug 01 2026 Eduard Abdullin - 5.14.0-687.31.1 - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds +* Mon Jul 27 2026 CKI KWF Bot [5.14.0-687.31.1.el9_8] +- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} +- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} +- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} +- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] +- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] +- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] +- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] +- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] +- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] +- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] +- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] +- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] +- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] +- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] +- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] +- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} +- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} +- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} +- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] +- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} +- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] +- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] + * Wed Jul 22 2026 CKI KWF Bot [5.14.0-687.30.1.el9_8] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]