diff --git a/.gitignore b/.gitignore index e2d13452e..23cf949cb 100644 --- a/.gitignore +++ b/.gitignore @@ -1,6 +1,6 @@ -SOURCES/kernel-abi-stablelists-5.14.0-611.36.1.el9_7.tar.bz2 -SOURCES/kernel-kabi-dw-5.14.0-611.36.1.el9_7.tar.bz2 -SOURCES/linux-5.14.0-611.36.1.el9_7.tar.xz +SOURCES/kernel-abi-stablelists-5.14.0-611.38.1.el9_7.tar.bz2 +SOURCES/kernel-kabi-dw-5.14.0-611.38.1.el9_7.tar.bz2 +SOURCES/linux-5.14.0-611.38.1.el9_7.tar.xz SOURCES/nvidiagpuoot001.x509 SOURCES/olima1.x509 SOURCES/olimaca1.x509 diff --git a/.kernel.metadata b/.kernel.metadata index fd3e24f0d..795671697 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,6 +1,6 @@ -4be4e41c931240d8c7c34f52e24491ed28e9b1a0 SOURCES/kernel-abi-stablelists-5.14.0-611.36.1.el9_7.tar.bz2 -98ec148e5ca656c31cb824edc3da468e86d507b1 SOURCES/kernel-kabi-dw-5.14.0-611.36.1.el9_7.tar.bz2 -bf97bf9b8ec9843cedb197e39a65fdf7848e2bbb SOURCES/linux-5.14.0-611.36.1.el9_7.tar.xz +3a86c58c3e5244effa9121dce7f27c71b76548f2 SOURCES/kernel-abi-stablelists-5.14.0-611.38.1.el9_7.tar.bz2 +a2fe12341e9815eaa38eef393133dd88e4883643 SOURCES/kernel-kabi-dw-5.14.0-611.38.1.el9_7.tar.bz2 +cfe79df45416093f1b1144787690ff69e3a1d099 SOURCES/linux-5.14.0-611.38.1.el9_7.tar.xz 4fff8080e88afffc06d8ef5004db8d53bb21237f SOURCES/nvidiagpuoot001.x509 706ae01dd14efa38f0f565a3706acac19c78df02 SOURCES/olima1.x509 6e3f0d61414c0b50f48dc2d4c3b3cd024e1c3a43 SOURCES/olimaca1.x509 diff --git a/SOURCES/Makefile.rhelver b/SOURCES/Makefile.rhelver index b118f9faf..28051c4b1 100644 --- a/SOURCES/Makefile.rhelver +++ b/SOURCES/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 7 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 611.36.1 +RHEL_RELEASE = 611.38.1 # # ZSTREAM diff --git a/SOURCES/kernel.changelog b/SOURCES/kernel.changelog index 8c909d3de..44261edb5 100644 --- a/SOURCES/kernel.changelog +++ b/SOURCES/kernel.changelog @@ -1,3 +1,28 @@ +* Sat Feb 28 2026 CKI KWF Bot [5.14.0-611.38.1.el9_7] +- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143194] {CVE-2025-68800} +Resolves: RHEL-143194 + +* Thu Feb 26 2026 CKI KWF Bot [5.14.0-611.37.1.el9_7] +- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148302] +- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148302] +- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148302] +- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148302] +- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148302] +- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148302] +- printk: nbcon: Use raw_cpu_ptr() instead of open coding (CKI Backport Bot) [RHEL-148302] +- backport "printk: Add helper for flush type logic" and associated changes (CKI Backport Bot) [RHEL-148302] +- printk: Remove redundant deferred check in vprintk() (CKI Backport Bot) [RHEL-148302] +- printk: Introduce force_legacy_kthread() macro (CKI Backport Bot) [RHEL-148302] +- printk: Add is_printk_legacy_deferred() (CKI Backport Bot) [RHEL-148302] +- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137988] +- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137988] +- io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137988] {CVE-2025-38106} +- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137988] +- io_uring/sqpoll: annotate debug task == current with data_race() (Jeff Moyer) [RHEL-137988] +- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144125] {CVE-2026-23001} +- net/smc: Fix lookup of netdev by using ib_device_get_netdev() (CKI Backport Bot) [RHEL-114786] +Resolves: RHEL-114786, RHEL-137988, RHEL-144125, RHEL-148302 + * Tue Feb 24 2026 CKI KWF Bot [5.14.0-611.36.1.el9_7] - net/smc: Remove validation of reserved bits in CLC Decline message (Mete Durlu) [RHEL-143718] - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-149495] diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index 3d696b8c0..ed3d741f5 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -165,15 +165,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 611.36.1 +%define pkgrelease 611.38.1 %define kversion 5 -%define tarfile_release 5.14.0-611.36.1.el9_7 +%define tarfile_release 5.14.0-611.38.1.el9_7 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 611.36.1%{?buildid}%{?dist} +%define specrelease 611.38.1%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-611.36.1.el9_7 +%define kabiversion 5.14.0-611.38.1.el9_7 # # End of genspec.sh variables @@ -797,7 +797,7 @@ Source2: kernel.changelog %define secureboot_ca_0 %{_datadir}/pki/sb-certs/secureboot-ca-%{_arch}.cer %define secureboot_key_0 %{_datadir}/pki/sb-certs/secureboot-kernel-%{_arch}.cer -%define pesign_name_0 almalinuxsecurebootca0 +%define pesign_name_0 almalinuxsecureboot0 # signkernel %endif @@ -3771,7 +3771,7 @@ fi # # %changelog -* Tue Mar 03 2026 Andrew Lukoshko - 5.14.0-611.36.1 +* Tue Mar 10 2026 Andrew Lukoshko - 5.14.0-611.38.1 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -3782,11 +3782,34 @@ fi - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained -* Tue Mar 03 2026 Eduard Abdullin - 5.14.0-611.36.1 +* Tue Mar 10 2026 Eduard Abdullin - 5.14.0-611.38.1 - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le +* Sat Feb 28 2026 CKI KWF Bot [5.14.0-611.38.1.el9_7] +- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143194] {CVE-2025-68800} + +* Thu Feb 26 2026 CKI KWF Bot [5.14.0-611.37.1.el9_7] +- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148302] +- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148302] +- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148302] +- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148302] +- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148302] +- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148302] +- printk: nbcon: Use raw_cpu_ptr() instead of open coding (CKI Backport Bot) [RHEL-148302] +- backport "printk: Add helper for flush type logic" and associated changes (CKI Backport Bot) [RHEL-148302] +- printk: Remove redundant deferred check in vprintk() (CKI Backport Bot) [RHEL-148302] +- printk: Introduce force_legacy_kthread() macro (CKI Backport Bot) [RHEL-148302] +- printk: Add is_printk_legacy_deferred() (CKI Backport Bot) [RHEL-148302] +- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137988] +- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137988] +- io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137988] {CVE-2025-38106} +- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137988] +- io_uring/sqpoll: annotate debug task == current with data_race() (Jeff Moyer) [RHEL-137988] +- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144125] {CVE-2026-23001} +- net/smc: Fix lookup of netdev by using ib_device_get_netdev() (CKI Backport Bot) [RHEL-114786] + * Tue Feb 24 2026 CKI KWF Bot [5.14.0-611.36.1.el9_7] - net/smc: Remove validation of reserved bits in CLC Decline message (Mete Durlu) [RHEL-143718] - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-149495]