Bring back three local patches that were dropped from a9 after
upstream landed the related fixes. The xfrm-esp fix (CVE-2026-43284)
came in via the CKI Backport Bot at 5.14.0-611.55.1, but rxrpc,
net/skbuff and ptrace did not -- restore them here. Blobs are
imported verbatim from the latest a9 commits that carried them
(2530dd40b / d62b1833b / cbd86e459 / cc48c27cd):
1101-rxrpc-linearize-paged-frags.patch (CVE-2026-43500)
1102-net-skbuff-propagate-shared-frag-marker.patch
v3 frag-transfer helpers variant (CVE-2026-46300 "Fragnesia")
1103-ptrace-require-cap-on-mm-less-task.patch
CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd
Release is not bumped; a second changelog entry is added under the
existing 5.14.0-611.55.1 version. All three verified to apply with
`patch -p1 -F0` against the 5.14.0-611.55.1.el9_7 source tree
(one minor offset, no fuzz, no rejects).
===================
The Kernel dist-git
===================
The kernel is maintained in a `source tree`_ rather than directly in dist-git.
The specfile is maintained as a `template`_ in the source tree along with a set
of build scripts to generate configurations, (S)RPMs, and to populate the
dist-git repository.
The `documentation`_ for the source tree covers how to contribute and maintain
the tree.
If you're looking for the downstream patch set it's available in the source
tree with "git log master..ark-patches" or
`online`_.
Each release in dist-git is tagged in the source repository so you can easily
check out the source tree for a build. The tags are in the format
name-version-release, but note release doesn't contain the dist tag since the
source can be built in different build roots (Fedora, CentOS, etc.)
.. _source tree: https://gitlab.com/cki-project/kernel-ark.git
.. _template: https://gitlab.com/cki-project/kernel-ark/-/blob/os-build/redhat/kernel.spec.template
.. _documentation: https://gitlab.com/cki-project/kernel-ark/-/wikis/home
.. _online: https://gitlab.com/cki-project/kernel-ark/-/commits/ark-patches
Andrew Lukoshko
01f79da1ca