Add Patch1104 carrying the full set of crypto authencesn / algif
AEAD backports for CVE-2026-31431, imported verbatim from the latest
revision on a9 (commit d67172655). The fix landed upstream in c9s
via the CKI Backport Bot at 5.14.0-611.54.1.el9_7 (May 02 2026),
which post-dates the a9-beta -687.5.1 base (Apr 14 2026), so the
backport is needed here.
Verified to apply with `patch -p1 -F0` against the
5.14.0-687.5.1.el9_8 source tree (one offset, no fuzz, no rejects).
Apply on a9-beta the same four local patches that were carried on
the a9 branch until upstream landed them via the CKI Backport Bot
in 5.14.0-611.55.1.el9_7. Blobs imported verbatim from a9 history:
1100-xfrm-esp-avoid-in-place-decrypt-shared-skb-frags.patch
CVE-2026-43284 -- el9 backport of upstream f4c50a4034e6.
1101-rxrpc-linearize-paged-frags.patch
CVE-2026-43500.
1102-net-skbuff-propagate-shared-frag-marker.patch
CVE-2026-46300 ("Fragnesia") -- v3 sibling to the xfrm/esp fix,
propagates SKBFL_SHARED_FRAG through __pskb_copy_fclone(),
skb_try_coalesce(), skb_shift(), skb_gro_receive() and
skb_gro_receive_list().
1103-ptrace-require-cap-on-mm-less-task.patch
CVE-2026-46333; kABI-safe replacement for upstream 31e62c2ebbfd
which would alter task_struct.
All four verified to apply with `patch -p1 -F0` against the
5.14.0-687.5.1.el9_8 source tree (offsets only, no fuzz, no
rejects). Release bumped 687.5.1 -> 687.5.3 with a single new
changelog stanza.
hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
qla4xxx: bring back deprecated PCI ids
lpfc: bring back deprecated PCI ids
be2iscsi: bring back deprecated PCI ids
kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained
Use AlmaLinux OS secure boot cert
Debrand for AlmaLinux OS
Add KVM support for ppc64le
KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds
hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
qla4xxx: bring back deprecated PCI ids
lpfc: bring back deprecated PCI ids
be2iscsi: bring back deprecated PCI ids
kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained
Use AlmaLinux OS secure boot cert
Debrand for AlmaLinux OS
Add KVM support for ppc64le
KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds
mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
qla4xxx: bring back deprecated PCI ids
lpfc: bring back deprecated PCI ids
be2iscsi: bring back deprecated PCI ids
kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained
Use AlmaLinux OS secure boot cert
Debrand for AlmaLinux OS
Add KVM support for ppc64le
mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
qla4xxx: bring back deprecated PCI ids
lpfc: bring back deprecated PCI ids
be2iscsi: bring back deprecated PCI ids
kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained
Use AlmaLinux OS secure boot cert
Debrand for AlmaLinux OS
Add KVM support for ppc64le
mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
qla4xxx: bring back deprecated PCI ids
lpfc: bring back deprecated PCI ids
be2iscsi: bring back deprecated PCI ids
kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained
Use AlmaLinux OS secure boot cert
Debrand for AlmaLinux OS
Add KVM support for ppc64le
mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
qla4xxx: bring back deprecated PCI ids
lpfc: bring back deprecated PCI ids
be2iscsi: bring back deprecated PCI ids
kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained
Use AlmaLinux OS secure boot cert
Debrand for AlmaLinux OS
Add KVM support for ppc64le
mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
qla4xxx: bring back deprecated PCI ids
lpfc: bring back deprecated PCI ids
be2iscsi: bring back deprecated PCI ids
kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained
Use AlmaLinux OS secure boot cert
Debrand for AlmaLinux OS
Add KVM support for ppc64le
mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
qla4xxx: bring back deprecated PCI ids
lpfc: bring back deprecated PCI ids
be2iscsi: bring back deprecated PCI ids
kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained
Use AlmaLinux OS secure boot cert
Debrand for AlmaLinux OS
mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
qla4xxx: bring back deprecated PCI ids
lpfc: bring back deprecated PCI ids
be2iscsi: bring back deprecated PCI ids
kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained
Use AlmaLinux OS secure boot cert
Debrand for AlmaLinux OS
mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
qla4xxx: bring back deprecated PCI ids
lpfc: bring back deprecated PCI ids
be2iscsi: bring back deprecated PCI ids
kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained
Use AlmaLinux OS secure boot cert
Debrand for AlmaLinux OS
mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
qla4xxx: bring back deprecated PCI ids
lpfc: bring back deprecated PCI ids
be2iscsi: bring back deprecated PCI ids
kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained
Use AlmaLinux OS secure boot cert
Debrand for AlmaLinux OS