rpms/kernel
9
4
Fork 6
Code Issues Pull Requests Releases Activity

Debrand for AlmaLinux OS

Browse Source 
Use AlmaLinux OS secure boot cert

Enable Btrfs support for all kernel variants

KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561}

hpsa: bring back deprecated PCI ids #CFHack #CFHack2024

mptsas: bring back deprecated PCI ids #CFHack #CFHack2024

megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024

qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024

qla4xxx: bring back deprecated PCI ids

be2iscsi: bring back deprecated PCI ids

kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained

gve: update QPL page registration logic to honor max_registered_pages (backport from upstream)

gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream)
This commit is contained in:
Eduard Abdullin 2026-08-12 12:23:30 +00:00 committed by root
parent 4269790c53
commit feffd7b2c5
5 changed files with 50 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
.gitignore vendored
View File

@ -1,7 +1,7 @@
fedoraimaca.x509 fedoraimaca.x509
kernel-abi-stablelists-6.12.0-211.44.1.el10_2.tar.xz kernel-abi-stablelists-6.12.0-211.46.1.el10_2.tar.xz
kernel-kabi-dw-6.12.0-211.44.1.el10_2.tar.xz kernel-kabi-dw-6.12.0-211.46.1.el10_2.tar.xz
linux-6.12.0-211.44.1.el10_2.tar.xz linux-6.12.0-211.46.1.el10_2.tar.xz
nvidiabfdpu.x509 nvidiabfdpu.x509
nvidiagpuoot001.x509 nvidiagpuoot001.x509
nvidiajetsonsoc.x509 nvidiajetsonsoc.x509

2
Makefile.rhelver
View File

@ -12,7 +12,7 @@ RHEL_MINOR = 2
# #
# Use this spot to avoid future merge conflicts. # Use this spot to avoid future merge conflicts.
# Do not trim this comment. # Do not trim this comment.
RHEL_RELEASE = 211.44.1 RHEL_RELEASE = 211.46.1
# #
# RHEL_REBASE_NUM # RHEL_REBASE_NUM

19
kernel.changelog
View File

@ -1,3 +1,22 @@
* Mon Aug 10 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.46.1.el10_2]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}
Resolves: RHEL-223405
* Fri Aug 07 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.45.1.el10_2]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}
Resolves: RHEL-175860, RHEL-188217, RHEL-189571, RHEL-193528, RHEL-193676, RHEL-213035, RHEL-222499, RHEL-222503, RHEL-222505
* Tue Aug 04 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.44.1.el10_2] * Tue Aug 04 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.44.1.el10_2]
- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]

31
kernel.spec
View File

@ -176,15 +176,15 @@ Summary: The Linux kernel
%define specrpmversion 6.12.0 %define specrpmversion 6.12.0
%define specversion 6.12.0 %define specversion 6.12.0
%define patchversion 6.12 %define patchversion 6.12
%define pkgrelease 211.44.1 %define pkgrelease 211.46.1
%define kversion 6 %define kversion 6
%define tarfile_release 6.12.0-211.44.1.el10_2 %define tarfile_release 6.12.0-211.46.1.el10_2
# This is needed to do merge window version magic # This is needed to do merge window version magic
%define patchlevel 12 %define patchlevel 12
# This allows pkg_release to have configurable %%{?dist} tag # This allows pkg_release to have configurable %%{?dist} tag
%define specrelease 211.44.1%{?buildid}%{?dist} %define specrelease 211.46.1%{?buildid}%{?dist}
# This defines the kabi tarball version # This defines the kabi tarball version
%define kabiversion 6.12.0-211.44.1.el10_2 %define kabiversion 6.12.0-211.46.1.el10_2
# If this variable is set to 1, a bpf selftests build failure will cause a # If this variable is set to 1, a bpf selftests build failure will cause a
# fatal kernel package build error # fatal kernel package build error
@ -4517,14 +4517,14 @@ fi\
# #
# #
%changelog %changelog
* Mon Aug 10 2026 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-211.44.1 * Wed Aug 12 2026 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-211.46.1
- Debrand for AlmaLinux OS - Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert - Use AlmaLinux OS secure boot cert
* Mon Aug 10 2026 Neal Gompa <ngompa@almalinux.org> - 6.12.0-211.44.1 * Wed Aug 12 2026 Neal Gompa <ngompa@almalinux.org> - 6.12.0-211.46.1
- Enable Btrfs support for all kernel variants - Enable Btrfs support for all kernel variants
* Mon Aug 10 2026 Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-211.44.1 * Wed Aug 12 2026 Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-211.46.1
- KVM: x86: check for invalid/obsolete root after making MMU pages available - KVM: x86: check for invalid/obsolete root after making MMU pages available
{CVE-2026-64561} {CVE-2026-64561}
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
@ -4540,6 +4540,23 @@ fi\
- gve: enable reading max ring size from the device in DQO-QPL mode (backport - gve: enable reading max ring size from the device in DQO-QPL mode (backport
from upstream) from upstream)
* Mon Aug 10 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.46.1.el10_2]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}
* Fri Aug 07 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.45.1.el10_2]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}
* Tue Aug 04 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.44.1.el10_2] * Tue Aug 04 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.44.1.el10_2]
- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]

6
sources
View File

@ -1,7 +1,7 @@
SHA512 (fedoraimaca.x509) = e04809394f4472c17e86d7024dee34f03fb68e82a85502fd5b00535202c72e57626a8376b2cf991b7e1e46404aa5ab8d189ebf320e0dd37d49e7efbc925c7a2e SHA512 (fedoraimaca.x509) = e04809394f4472c17e86d7024dee34f03fb68e82a85502fd5b00535202c72e57626a8376b2cf991b7e1e46404aa5ab8d189ebf320e0dd37d49e7efbc925c7a2e
SHA512 (kernel-abi-stablelists-6.12.0-211.44.1.el10_2.tar.xz) = 19ad97d8d0fe6926c582d1af72bbd34dd286db950d6b3ad41cd8c6e118345a0d5120a741bfcae3f9995aea414ac0451aa03c66ea94d229c07b216e8bd51a06ee SHA512 (kernel-abi-stablelists-6.12.0-211.46.1.el10_2.tar.xz) = d66d6513e4a66f9bbd0bd3d9767342d4cda231f4e6038677f620d6f0dca62234273248d940eecd29f8eff88f0567025df9054c3d1b99941c7ce6ffe74d4fd90c
SHA512 (kernel-kabi-dw-6.12.0-211.44.1.el10_2.tar.xz) = 530f9e5f78f23c99e7511c48600bbdb143e8472074d92485366e57e001d70c227ef1f6c1c266b86b15ec57a20d602a73d4f54f3662aac2c0ff23e285ca23de05 SHA512 (kernel-kabi-dw-6.12.0-211.46.1.el10_2.tar.xz) = 176ef20ea5ea7018dfd4ced50fb9ff53abb2d3d4df574c2a2bc4e088cecc52a61ec62eac70b45236496cd766b0958dd926df5e26628afb88c6a2c95a931a2432
SHA512 (linux-6.12.0-211.44.1.el10_2.tar.xz) = d78e016a4a9c6907d50567721647659b9e194457e3acf37481c0a5ff87a85ecb90b45585231fc02ca436a58aa18532ba3b9f761015460ed0c4873cd7578e62f5 SHA512 (linux-6.12.0-211.46.1.el10_2.tar.xz) = 0dabec33a1f34a5b0ddfd5b26946591f835d195874b07bf159b827a08d1ca5f2203295e3dd914a492bc01f94aa01e1173b4bba81ec4fa7c694090523c9ec296e
SHA512 (nvidiabfdpu.x509) = d9f4fbafcec66803c5944df1f97d4348968141c968e6537252c9854c89dca8ea3be225a9c40abbbf2b7d4d3cfd8c5012cd2d34d90443fbc0277b7a018622ac4f SHA512 (nvidiabfdpu.x509) = d9f4fbafcec66803c5944df1f97d4348968141c968e6537252c9854c89dca8ea3be225a9c40abbbf2b7d4d3cfd8c5012cd2d34d90443fbc0277b7a018622ac4f
SHA512 (nvidiagpuoot001.x509) = b42f836e1cfa07890cb6ca13de9c3950e306c9ec7686c4c09f050bb68869f5d82962b2cd5f3aa0eb7a0f3a3ae54e9c480eafbac5df53aa92c295ff511a8c59fe SHA512 (nvidiagpuoot001.x509) = b42f836e1cfa07890cb6ca13de9c3950e306c9ec7686c4c09f050bb68869f5d82962b2cd5f3aa0eb7a0f3a3ae54e9c480eafbac5df53aa92c295ff511a8c59fe
SHA512 (nvidiajetsonsoc.x509) = 3c6d4f0800b3fae3c3cc3e5361de31df233e230ea96f0fdd3dcc713e6a71e27309f60e7a98d1a4a90d470f336ce311f22fcc88f219429272e96339717fe001dd SHA512 (nvidiajetsonsoc.x509) = 3c6d4f0800b3fae3c3cc3e5361de31df233e230ea96f0fdd3dcc713e6a71e27309f60e7a98d1a4a90d470f336ce311f22fcc88f219429272e96339717fe001dd