The Linux kernel
057d0f9b3d
* Wed Sep 02 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-742.el9]
- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246350] {CVE-2026-74581}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229620] {CVE-2026-63824}
- KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229620] {CVE-2026-63824}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227787] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229413] {CVE-2026-53392}
- nfsd: fix posix_acl leak on SETACL decode failure (Scott Mayhew) [RHEL-225523] {CVE-2026-53397}
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234058] {CVE-2026-64298}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228034] {CVE-2026-53391}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226326] {CVE-2026-63800}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240184] {CVE-2026-68145}
- iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240184] {CVE-2026-68145}
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213196] {CVE-2026-63887}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214433]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214433]
- xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172489] {CVE-2026-31787}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172511] {CVE-2026-31786}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230137] {CVE-2026-64490}
- ipv6: mcast: Fix use-after-free when processing MLD queries (Antoine Tenart) [RHEL-152681]
- ipv6: fix possible infinite loop in fib6_select_path() (Antoine Tenart) [RHEL-152681]
- ipv6: fix possible infinite loop in rt6_fill_node() (Antoine Tenart) [RHEL-152681]
- ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-152681]
- ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-152681]
- ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-152681]
- ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-152681]
- ipv6: route: Unregister netdevice notifier on BPF init failure (Antoine Tenart) [RHEL-152681]
- ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (Antoine Tenart) [RHEL-152681]
- ipv6: fix potential UAF caused by ip6_forward_proxy_check() (Antoine Tenart) [RHEL-152681]
- ipv6: Fix null-ptr-deref in fib6_mtu(). (Antoine Tenart) [RHEL-152681]
- ipv6: fix possible UAF in icmpv6_rcv() (Antoine Tenart) [RHEL-152681]
- ipv6: avoid overflows in ip6_datagram_send_ctl() (Antoine Tenart) [RHEL-152681]
- ipv6: fix data race in fib6_metric_set() using cmpxchg (Antoine Tenart) [RHEL-152681]
- net: ipv6: flowlabel: defer exclusive option free until RCU teardown (Antoine Tenart) [RHEL-152681]
- ipv6: prevent possible UaF in addrconf_permanent_addr() (Antoine Tenart) [RHEL-152681]
- ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-152681]
- net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (Antoine Tenart) [RHEL-152681]
- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (Antoine Tenart) [RHEL-152681]
- inet: annotate data-races around isk->inet_num (Antoine Tenart) [RHEL-152681]
- ipv6: fix a race in ip6_sock_set_v6only() (Antoine Tenart) [RHEL-152681]
- net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain (Antoine Tenart) [RHEL-152681]
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228882] {CVE-2026-63801}
- tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238040] {CVE-2026-68117}
- sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229476] {CVE-2026-63971}
- sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231576] {CVE-2026-52917}
- sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236160] {CVE-2026-68315}
- sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237403] {CVE-2026-68376}
- sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237090] {CVE-2026-68300}
- redhat: update self-test data (Jarod Wilson)
- gitlab-ci: disttag override and tree name for 9.9 (Jarod Wilson)
- redhat: set defaults for 9.9 stabilization/zstream (Jarod Wilson)
- redhat: update RHEL_MINOR version for start of RHEL-9.10 development (Julio Faracco)
- s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-248152]
- platform/x86/intel/pmc: initialize empty PMT read result (Dennis Chen) [RHEL-241103]
- platform/x86: ishtp_eclite: Fix ACPI device reference leak in probe error path (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: free ACPI discovery data on early errors (Dennis Chen) [RHEL-241103]
- Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) [partial] (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: Add NVL PCI IDs for SSRAM telemetry discovery (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc/ssram: Make PMT registration optional (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc/ssram: Add ACPI discovery scaffolding (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc/ssram: Switch to static array with per-index probe state (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc/ssram: Refactor DEVID/PWRMBASE extraction into helper (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc/ssram: Add PCI platform data (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc/ssram: Rename probe and PCI ID table for consistency (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: Add ACPI PWRM telemetry driver for Nova Lake S (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: Add PMC SSRAM Kconfig description (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmt: Unify header fetch and add ACPI source (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmt: Cache the telemetry discovery header (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmt: Pass discovery index instead of resource (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmt/telemetry: Move overlap check to post-decode hook (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmt/crashlog: Split init into pre-decode (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmt: Add pre/post decode hooks around header parsing (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: Restore BAR fallback for header walk (Dennis Chen) [RHEL-241103]
- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (Dennis Chen) [RHEL-241103]
- platform/x86/intel/tpmi: convert mutex in mem_write() to guard (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: rate-limit LTR scale-factor warning (Dennis Chen) [RHEL-241103]
- platform/x86/intel/tpmi: use cleanup helpers in mem_write() (Dennis Chen) [RHEL-241103]
- platform/x86: intel/smartconnect: Check ACPI_HANDLE() against NULL (Dennis Chen) [RHEL-241103]
- platform/x86: intel/rst: Check ACPI_COMPANION() against NULL (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe error recovery (Dennis Chen) [RHEL-241103]
- platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: allocate res with intel_vsec_dev (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: Add Nova Lake support to intel_pmc_core driver (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: Retrieve PMC info only for available PMCs (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: Add support for variable DMU offsets (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: Use PCI DID for PMC SSRAM device discovery (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: Enable Pkgc blocking residency counter (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: Enable PkgC LTR blocking counter (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: Use __free() in pmc_core_punit_pmt_init() (Dennis Chen) [RHEL-241103]
- platform/x86/intel/tpmi/plr: Prevent fault during unbind (Dennis Chen) [RHEL-241103]
- platform/x86: intel: Add notifiers support (Dennis Chen) [RHEL-241103]
- platform/x86: intel: Move debugfs register before creating devices (Dennis Chen) [RHEL-241103]
- platform/x86/intel-uncore-freq: Expose instance ID in the sysfs (Dennis Chen) [RHEL-241103]
- platform/x86/intel/tpmi: Use 32 bit aligned address for debugfs mem write (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: Plumb ACPI PMT discovery tables through vsec (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: Return real error codes from registration path (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: Switch exported helpers from pci_dev to device (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: Decouple add/link helpers from PCI (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: Make driver_data info const (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: Refactor base_addr handling (Dennis Chen) [RHEL-241103]
- platform/x86: intel/smartconnect: Convert ACPI driver to a platform one (Dennis Chen) [RHEL-241103]
- platform/x86: intel/rst: Convert ACPI driver to a platform one (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: correct kernel-doc comments (Dennis Chen) [RHEL-241103]
- platform/x86/intel/smartconnect: drop owner assignment (Dennis Chen) [RHEL-241103]
- Revert "platform/x86: intel: Add notifiers support" (Dennis Chen) [RHEL-241103]
- Revert "platform/x86/intel/tpmi/plr: Prevent fault during unbind" (Dennis Chen) [RHEL-241103]
- Revert "platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe error recovery" (Dennis Chen) [RHEL-241103]
- cpufreq/amd-pstate: drop stale @epp_cached kdoc (Dennis Chen) [RHEL-212670]
- cpufreq: Pass the policy to cpufreq_driver->adjust_perf() (Dennis Chen) [RHEL-212670]
- amd-pstate: Update cppc_req_cached in fast_switch case (Dennis Chen) [RHEL-212670]
- amd-pstate: Fix memory leak in amd_pstate_epp_cpu_init() (Dennis Chen) [RHEL-212670]
- mmc: sdhci-of-dwcmshc: Add hw_reset() support for BlueField-3 SoC (David Thompson) [RHEL-104072]
Resolves: RHEL-104072, RHEL-152681, RHEL-172489, RHEL-172511, RHEL-212670, RHEL-213196, RHEL-214433, RHEL-225523, RHEL-226326, RHEL-227787, RHEL-228034, RHEL-228882, RHEL-229413, RHEL-229476, RHEL-229620, RHEL-230137, RHEL-231576, RHEL-234058, RHEL-236160, RHEL-237090, RHEL-237403, RHEL-238040, RHEL-240184, RHEL-241103, RHEL-246350, RHEL-248152
Signed-off-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>
|
||
|---|---|---|
| .gitignore | ||
| check-kabi | ||
| cpupower.config | ||
| cpupower.service | ||
| dracut-virt.conf | ||
| filter-aarch64.sh.rhel | ||
| filter-armv7hl.sh.rhel | ||
| filter-modules.sh.rhel | ||
| filter-ppc64le.sh.rhel | ||
| filter-s390x.sh.rhel | ||
| filter-x86_64.sh.rhel | ||
| gating.yaml | ||
| generate_all_configs.sh | ||
| kernel-aarch64-64k-debug-rhel.config | ||
| kernel-aarch64-64k-rhel.config | ||
| kernel-aarch64-debug-rhel.config | ||
| kernel-aarch64-rhel.config | ||
| kernel-aarch64-rt-64k-debug-rhel.config | ||
| kernel-aarch64-rt-64k-rhel.config | ||
| kernel-aarch64-rt-debug-rhel.config | ||
| kernel-aarch64-rt-rhel.config | ||
| kernel-local | ||
| kernel-ppc64le-debug-rhel.config | ||
| kernel-ppc64le-rhel.config | ||
| kernel-s390x-debug-rhel.config | ||
| kernel-s390x-rhel.config | ||
| kernel-s390x-zfcpdump-rhel.config | ||
| kernel-x86_64-debug-rhel.config | ||
| kernel-x86_64-rhel.config | ||
| kernel-x86_64-rt-debug-rhel.config | ||
| kernel-x86_64-rt-rhel.config | ||
| kernel.changelog | ||
| kernel.sbat.template | ||
| kernel.spec | ||
| kmap.py | ||
| kvm_stat.logrotate | ||
| linux-kernel-test.patch | ||
| Makefile.rhelver | ||
| merge.pl | ||
| mod-denylist.sh | ||
| mod-extra.list.rhel | ||
| mod-internal.list | ||
| mod-partner.list | ||
| mod-sign.sh | ||
| Module.kabi_aarch64 | ||
| Module.kabi_dup_aarch64 | ||
| Module.kabi_dup_ppc64le | ||
| Module.kabi_dup_s390x | ||
| Module.kabi_dup_x86_64 | ||
| Module.kabi_ppc64le | ||
| Module.kabi_s390x | ||
| Module.kabi_x86_64 | ||
| nvidiabfdpu.x509 | ||
| nvidiagpuoot001.x509 | ||
| nvidiajetsonsoc.x509 | ||
| parallel_xz.sh | ||
| partial-kgcov-snip.config | ||
| patch-5.14-redhat.patch | ||
| process_configs.sh | ||
| README.rst | ||
| redhatsecureboot504.cer | ||
| rheldup3.x509 | ||
| rhelima_centos.x509 | ||
| rhelima.x509 | ||
| rhelimaca1.x509 | ||
| rhelkpatch1.x509 | ||
| rpminspect.yaml | ||
| sources | ||
| uki_addons.json | ||
| uki_create_addons.py | ||
| update_scripts.sh | ||
| x509.genkey.centos | ||
| x509.genkey.rhel | ||
=================== The Kernel dist-git =================== The kernel is maintained in a `source tree`_ rather than directly in dist-git. The specfile is maintained as a `template`_ in the source tree along with a set of build scripts to generate configurations, (S)RPMs, and to populate the dist-git repository. The `documentation`_ for the source tree covers how to contribute and maintain the tree. If you're looking for the downstream patch set it's available in the source tree with "git log master..ark-patches" or `online`_. Each release in dist-git is tagged in the source repository so you can easily check out the source tree for a build. The tags are in the format name-version-release, but note release doesn't contain the dist tag since the source can be built in different build roots (Fedora, CentOS, etc.) .. _source tree: https://gitlab.com/cki-project/kernel-ark.git .. _template: https://gitlab.com/cki-project/kernel-ark/-/blob/os-build/redhat/kernel.spec.template .. _documentation: https://gitlab.com/cki-project/kernel-ark/-/wikis/home .. _online: https://gitlab.com/cki-project/kernel-ark/-/commits/ark-patches