kernel

The Linux kernel

Go to file

CKI KWF Bot 212dc7242a kernel-5.14.0-732.el9 * Tue Aug 04 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-732.el9] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-168738] - xfrm: esp: restore combined single-frag length gate (Xin Long) [RHEL-178340] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Xin Long) [RHEL-180173] {CVE-2026-46116} - espintcp: Fix race condition in espintcp_close() (Xin Long) [RHEL-154906] {CVE-2026-23239} - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Xin Long) [RHEL-180034] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Xin Long) [RHEL-180034] {CVE-2025-39797} - redhat: Add DENYLIST.rhel to BPF selftests (Veronika Molnarova) [RHEL-213547] - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-190801] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-190801] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-190801] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-190801] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-190801] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-190801] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-190801] - timers: Fix NULL function pointer race in timer_shutdown_sync() (Waiman Long) [RHEL-189941] {CVE-2025-68214} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-213745] - scsi: core: wake eh reliably when using scsi_schedule_eh (David Jeffery) [RHEL-113832] - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213155] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213155] {CVE-2026-64017} - cpufreq: intel_pstate: Set non-turbo capacity to HWP_GUARANTEED_PERF() (David Arcari) [RHEL-212691] - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212684] - watchdog: Fix kmemleak in watchdog_cdev_register (David Arcari) [RHEL-192487] - watchdog: set cdev owner before adding (David Arcari) [RHEL-192487] - watchdog: fix watchdog may detect false positive of softlockup (David Arcari) [RHEL-192487] - kernel/watchdog: always restore watchdog_softlockup(,hardlockup)_user_enabled after proc show (David Arcari) [RHEL-192487] - usb: typec: ucsi: skip connector validation before init (Desnes Nunes) [RHEL-147798] - usb: host: xhci-sideband: delegate offload_usage tracking to class drivers (Desnes Nunes) [RHEL-147798] - usb: core: use dedicated spinlock for offload state (Desnes Nunes) [RHEL-147798] - usb: dwc3: imx8mp: fix memory leak on probe failure path (Desnes Nunes) [RHEL-147798] - usb: ulpi: fix memory leak on ulpi_register() error paths (Desnes Nunes) [RHEL-147798] {CVE-2026-46109} - usb: ulpi: fix double free in ulpi_register_interface() error path (Desnes Nunes) [RHEL-147798] {CVE-2026-31759} - USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam (Desnes Nunes) [RHEL-147798] - usb: add quirks for Lenovo OneLink+ Dock (Desnes Nunes) [RHEL-147798] - usb: core: phy: avoid double use of 'usb3-phy' (Desnes Nunes) [RHEL-147798] - USB: serial: option: add MeiG Smart SRM825WN (Desnes Nunes) [RHEL-147798] - dt-bindings: connector: add pd-disable dependency (Desnes Nunes) [RHEL-147798] - dt-bindings: Drop remaining unneeded quotes (Desnes Nunes) [RHEL-147798] - usb: typec: thunderbolt: Set enter_vdo during initialization (Desnes Nunes) [RHEL-147798] - usb: typec: Remove alt->adev.dev.class assignment (Desnes Nunes) [RHEL-147798] - usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive (Desnes Nunes) [RHEL-147798] - cdc-acm: new quirk for EPSON HMD (Desnes Nunes) [RHEL-147798] - usb: typec: ucsi: validate connector number in ucsi_notify_common() (Desnes Nunes) [RHEL-147798] {CVE-2026-31729} - usb: usbtmc: Flush anchored URBs in usbtmc_release (Desnes Nunes) [RHEL-147798] {CVE-2026-31758} - USB: serial: io_edgeport: add support for Blackbox IC135A (Desnes Nunes) [RHEL-147798] - USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL (Desnes Nunes) [RHEL-147798] - USB: serial: option: add support for Rolling Wireless RW135R-GL (Desnes Nunes) [RHEL-147798] - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed (Desnes Nunes) [RHEL-147798] - usb: typec: altmode/displayport: set displayport signaling rate in configure message (Desnes Nunes) [RHEL-147798] - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk (Desnes Nunes) [RHEL-147798] - usb: xhci: Prevent interrupt storm on host controller error (HCE) (Desnes Nunes) [RHEL-147798] {CVE-2026-43488} - usb: xhci: Fix memory leak in xhci_disable_slot() (Desnes Nunes) [RHEL-147798] {CVE-2026-43432} - usb: class: cdc-wdm: fix reordering issue in read code path (Desnes Nunes) [RHEL-147798] {CVE-2026-43427} - usb: cdc-acm: Restore CAP_BRK functionnality to CH343 (Desnes Nunes) [RHEL-147798] - usb: core: new quirk to handle devices with zero configurations (Desnes Nunes) [RHEL-147798] - usb: misc: uss720: properly clean up reference in uss720_probe() (Desnes Nunes) [RHEL-147798] - USB: core: Limit the length of unkillable synchronous timeouts (Desnes Nunes) [RHEL-147798] {CVE-2026-43428} - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts (Desnes Nunes) [RHEL-147798] {CVE-2026-43429} - USB: usbcore: Introduce usb_bulk_msg_killable() (Desnes Nunes) [RHEL-147798] - usb: core: don't power off roothub PHYs if phy_set_mode() fails (Desnes Nunes) [RHEL-147798] - thunderbolt: Fix property read in nhi_wake_supported() (Desnes Nunes) [RHEL-147798] - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size (Desnes Nunes) [RHEL-147798] - usbnet: limit max_mtu based on device's hard_mtu (Desnes Nunes) [RHEL-147798] - net: usb: r8152: add TRENDnet TUC-ET2G (Desnes Nunes) [RHEL-147798] - usb: image: mdc800: kill download URB on timeout (Desnes Nunes) [RHEL-147798] {CVE-2026-43425} - usb: mdc800: handle signal and read racing (Desnes Nunes) [RHEL-147798] - USB: add QUIRK_NO_BOS for video capture several devices (Desnes Nunes) [RHEL-147798] - usb: typec: ucsi: Add Thunderbolt alternate mode support (Desnes Nunes) [RHEL-147798] - usb: phy: tegra: parametrize PORTSC1 register offset (Desnes Nunes) [RHEL-147798] - usb: phy: tegra: parametrize HSIC PTS value (Desnes Nunes) [RHEL-147798] - usb: phy: tegra: return error value from utmi_wait_register (Desnes Nunes) [RHEL-147798] - usb: phy: tegra: cosmetic fixes (Desnes Nunes) [RHEL-147798] - usb: dwc3: gadget: Move vbus draw to workqueue context (Desnes Nunes) [RHEL-147798] {CVE-2026-43170} - phy: tegra: xusb: Remove unused powered_on variable (Desnes Nunes) [RHEL-147798] - usb: typec: fusb302: Remove IRQF_ONESHOT (Desnes Nunes) [RHEL-147798] - genirq: Set IRQF_COND_ONESHOT in devm_request_irq(). (Desnes Nunes) [RHEL-147798] - USB: serial: option: add Telit FN920C04 RNDIS compositions (Desnes Nunes) [RHEL-147798] - usb: dwc3: Log dwc3 address in traces (Desnes Nunes) [RHEL-147798] - usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN (Desnes Nunes) [RHEL-147798] - usb: phy: tegra: add HSIC support (Desnes Nunes) [RHEL-147798] - usb: phy: tegra: use phy type directly (Desnes Nunes) [RHEL-147798] - usb: typec: ucsi: Support mode selection to activate altmodes (Desnes Nunes) [RHEL-147798] - usb: typec: Introduce mode_selection bit (Desnes Nunes) [RHEL-147798] - usb: typec: Implement mode selection (Desnes Nunes) [RHEL-147798] - usb: typec: Expose alternate mode priority via sysfs (Desnes Nunes) [RHEL-147798] - usb: typec: Add mode_control field to port property (Desnes Nunes) [RHEL-147798] - usb: phy: generic: Convert to device property API (Desnes Nunes) [RHEL-147798] - usb: phy: generic: Convert to dev_err_probe() (Desnes Nunes) [RHEL-147798] - usb: phy: generic: Convert to devm_clk_get_optional() (Desnes Nunes) [RHEL-147798] - usb: phy: generic: Always use dev in usb_phy_generic_probe() (Desnes Nunes) [RHEL-147798] - usbip: Reduce CONNRESET message noise in dmesg from stub (Desnes Nunes) [RHEL-147798] - tools: usb: usbip: remove dead-link from README (Desnes Nunes) [RHEL-147798] - xhci: dbc: allow setting manufacturer string through sysfs (Desnes Nunes) [RHEL-147798] - xhci: dbc: allow setting product string through sysfs (Desnes Nunes) [RHEL-147798] - xhci: dbc: allow setting device serial number through sysfs (Desnes Nunes) [RHEL-147798] - xhci: dbc: prepare to expose strings through sysfs (Desnes Nunes) [RHEL-147798] - phy: fsl-imx8mq-usb: enable RX Termination override (Desnes Nunes) [RHEL-147798] - phy: fsl-imx8mq-usb: set platform driver data (Desnes Nunes) [RHEL-147798] {CVE-2026-43259} - phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature (Desnes Nunes) [RHEL-147798] - net: ethtool: Add support for 80Gbps speed (Desnes Nunes) [RHEL-147798] - net: thunderbolt: Allow reading link settings (Desnes Nunes) [RHEL-147798] - bonding: 3ad: Add support for SPEED_80000 (Desnes Nunes) [RHEL-147798] - net: thunderbolt: Allow changing MAC address of the device (Desnes Nunes) [RHEL-147798] - pinctrl: tegra-xusb: Simplify locking with guard() (Desnes Nunes) [RHEL-147798] - pinctrl: tegra-xusb: Return void in padctl enable/disable functions (Desnes Nunes) [RHEL-147798] - usb: misc: onboard_dev: Add WCH CH334 USB2.0 Hub (1a86:8091) (Desnes Nunes) [RHEL-147798] - dt-bindings: usb: Add binding for WCH CH334/CH335 hub controller (Desnes Nunes) [RHEL-147798] - usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup() (Desnes Nunes) [RHEL-147798] - usb: dwc3: Support USB3340x ULPI PHY high-speed negotiation. (Desnes Nunes) [RHEL-147798] - usb: dwc3: Add dwc pointer to dwc3_readl/writel (Desnes Nunes) [RHEL-147798] - usb: dwc3: Remove of dep->regs (Desnes Nunes) [RHEL-147798] - usb: chipidea: ci_hdrc_imx: use "wakeup" suffix for wakeup interrupt name (Desnes Nunes) [RHEL-147798] - USB: HCD: remove logic about which hcd is loaded (Desnes Nunes) [RHEL-147798] - usb: isp1362-hcd: remove Philips ISP1362 USB OTG controller driver (Desnes Nunes) [RHEL-147798] - usb: dwc3: imx8mp: disable auto suspend for host role (Desnes Nunes) [RHEL-147798] - usb: dwc3: imx8mp: rename dwc3 to dwc3_pdev in struct dwc3_imx8mp (Desnes Nunes) [RHEL-147798] - usb: dwc3: drd: extend dwc3_pre_set_role() to extcon and otg usecase (Desnes Nunes) [RHEL-147798] - PCI: Add PCI_BRIDGE_NO_ALIAS quirk for ASPEED AST1150 (Desnes Nunes) [RHEL-147798] - PCI: Add ASPEED vendor ID to pci_ids.h (Desnes Nunes) [RHEL-147798] - USB: core: Discard pm_runtime_put() return value (Desnes Nunes) [RHEL-147798] - usb: typec: ucsi: drop an unused Kconfig symbol (Desnes Nunes) [RHEL-147798] - USB: host: drop unneeded dependency on OF_GPIO (Desnes Nunes) [RHEL-147798] - USB: typec: tcpm: Fix a typo (Desnes Nunes) [RHEL-147798] - thunderbolt: Log path activation failures without WARN backtraces (Desnes Nunes) [RHEL-147798] - phy: core: Simplify with scoped for each OF child loop (Desnes Nunes) [RHEL-147798] - phy: core: Reinstate pm_runtime_enabled() check in phy_pm_runtime_put() (Desnes Nunes) [RHEL-147798] - docs: admin-guide: thunderbolt: Replace ifconfig with ip (Desnes Nunes) [RHEL-147798] - phy: fsl-imx8mq-usb: change ssc_range value for i.MX8MQ (Desnes Nunes) [RHEL-147798] - phy: core: Discard pm_runtime_put() return values (Desnes Nunes) [RHEL-147798] - usb: linux/usb.h: Correct the description of the usb_device_driver member (Desnes Nunes) [RHEL-147798] - usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs (Desnes Nunes) [RHEL-147798] - usb: typec: ucsi: psy: Fix ucsi_psy_get_current_now in non-PD cases (Desnes Nunes) [RHEL-147798] - dt-bindings: usb: ehci/ohci: Allow "dma-coherent" (Desnes Nunes) [RHEL-147798] - usb: typec: Export typec bus and typec altmode device type (Desnes Nunes) [RHEL-147798] - usb: typec: Set the bus also for the port and plug altmodes (Desnes Nunes) [RHEL-147798] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Aidan Wallace) [RHEL-192402] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186696] {CVE-2026-46113} - nvme-apple: drop invalid put of admin queue reference count (Maurizio Lombardi) [RHEL-210643] - nvme-core: warn on allocating admin tag set with existing queue (Maurizio Lombardi) [RHEL-210643] - nvme: fix admin queue leak on controller reset (Maurizio Lombardi) [RHEL-210643] - nvme-core: fix unsigned comparison warning in nvme_wait_freeze_timeout (Maurizio Lombardi) [RHEL-210643] - nvmet-loop: do not alloc admin tag set during reset (Maurizio Lombardi) [RHEL-210643] - nvme-core: align fabrics_q teardown with admin_q in nvme_free_ctrl (Maurizio Lombardi) [RHEL-210643] - nvme: fix admin request_queue lifetime (Maurizio Lombardi) [RHEL-210643] - nvme: add sysfs attribute to change IO timeout per controller (Maurizio Lombardi) [RHEL-210643] - nvme: add sysfs attribute to change admin timeout per nvme controller (Maurizio Lombardi) [RHEL-210643] - nvme: remove redundant timeout argument from nvme_wait_freeze_timeout (Maurizio Lombardi) [RHEL-210643] - nvme: Let the blocklayer set timeouts for requests (Maurizio Lombardi) [RHEL-210643] - Reapply "Bluetooth: revert TX timestamping" for kernel v6.18.y update (David Marlin) [RHEL-194201] - Bluetooth: MGMT: Fix backward compatibility with userspace (David Marlin) [RHEL-194201] - Bluetooth: SCO: Fix data-race on sco_pi fields in sco_connect (David Marlin) [RHEL-194201] - Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls (David Marlin) [RHEL-194201] - Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync (David Marlin) [RHEL-194201] - Bluetooth: fix memory leak in error path of hci_alloc_dev() (David Marlin) [RHEL-194201] - Bluetooth: bnep: reject short frames before parsing (David Marlin) [RHEL-194201] - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (David Marlin) [RHEL-194201] - Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig (David Marlin) [RHEL-194201] - Bluetooth: RFCOMM: validate skb length in MCC handlers (David Marlin) [RHEL-194201] - Bluetooth: MGMT: validate advertising TLV before type checks (David Marlin) [RHEL-194201] - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (David Marlin) [RHEL-194201] - Bluetooth: hci_sync: Reset device counters in hci_dev_close_sync() (David Marlin) [RHEL-194201] - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (David Marlin) [RHEL-194201] - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (David Marlin) [RHEL-194201] - Bluetooth: ISO: fix UAF in iso_recv_frame (David Marlin) [RHEL-194201] - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (David Marlin) [RHEL-194201] - Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success (David Marlin) [RHEL-194201] - Bluetooth: hci_qca: Use 100 ms SSR delay for rampatch and NVM loading (David Marlin) [RHEL-194201] - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (David Marlin) [RHEL-194201] - Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() (David Marlin) [RHEL-194201] - Bluetooth: btusb: Allow firmware re-download when version matches (David Marlin) [RHEL-194201] - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (David Marlin) [RHEL-194201] - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-194201] - Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (David Marlin) [RHEL-194201] - Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate() (David Marlin) [RHEL-194201] - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (David Marlin) [RHEL-194201] - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (David Marlin) [RHEL-194201] - Bluetooth: MGMT: validate Add Extended Advertising Data length (David Marlin) [RHEL-194201] - Bluetooth: btmtk: fix urb->setup_packet leak in error paths (David Marlin) [RHEL-194201] - Bluetooth: ISO: drop ISO_END frames received without prior ISO_START (David Marlin) [RHEL-194201] - Bluetooth: bnep: Fix UAF read of dev->name (David Marlin) [RHEL-194201] - Bluetooth: hci_qca: Convert timeout from jiffies to ms (David Marlin) [RHEL-194201] - Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer (David Marlin) [RHEL-194201] - Bluetooth: serialize accept_q access (David Marlin) [RHEL-194201] - Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling (David Marlin) [RHEL-194201] - Bluetooth: hci_qca: Migrate to serdev specific shutdown function (David Marlin) [RHEL-194201] - Revert "Reapply "Bluetooth: revert TX timestamping" for kernel v6.18.y update" (David Marlin) [RHEL-194201] - dpll: allow fwnode pins to attempt state change without capability bit (Michal Schmidt) [RHEL-193749] - dpll: extend pin notifier with notification source ID (Michal Schmidt) [RHEL-193749] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Michal Schmidt) [RHEL-193749] - dpll: guard sync-pair removal on full pin unregister (Michal Schmidt) [RHEL-193749] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Michal Schmidt) [RHEL-193749] - dpll: send delete notification before unregister in on-pin rollback (Michal Schmidt) [RHEL-193749] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Michal Schmidt) [RHEL-193749] - dpll: allow registering FW-identified pin with a different DPLL (Michal Schmidt) [RHEL-193749] - dpll: add generic DPLL type (Michal Schmidt) [RHEL-193749] - dpll: zl3073x: make frequency monitor a per-device attribute (Michal Schmidt) [RHEL-193749] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Michal Schmidt) [RHEL-193749] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Michal Schmidt) [RHEL-193749] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Michal Schmidt) [RHEL-193749] - dpll: zl3073x: fix memory leak on pin registration failure (Michal Schmidt) [RHEL-193749] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Michal Schmidt) [RHEL-193749] - dpll: Prevent duplicate registrations (Michal Schmidt) [RHEL-193749] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Michal Schmidt) [RHEL-177450] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Michal Schmidt) [RHEL-177450] - ice: call netif_keep_dst() once when entering switchdev mode (Michal Schmidt) [RHEL-177450] - ice: fix ice_init_link() error return preventing probe (Michal Schmidt) [RHEL-177450] - ice: fix AQ error code comparison in ice_set_pauseparam() (Michal Schmidt) [RHEL-177450] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Michal Schmidt) [RHEL-177450] - ice: remove redundant checks from PTP init (Michal Schmidt) [RHEL-177450] - ice: fix missing priority callbacks for U.FL DPLL pins (Michal Schmidt) [RHEL-177450] - ice: restore PTP Rx timestamp config after ethtool set-channels (Michal Schmidt) [RHEL-177450] - ice: ptp: use primary NAC semaphore on E825 (Michal Schmidt) [RHEL-177450] - ice: ptp: serialize E825 PHY timer start with PTP lock (Michal Schmidt) [RHEL-177450] - ice: fix setting promisc mode while adding VID filter (Michal Schmidt) [RHEL-177450] - ice: fix VF queue configuration with low MTU values (Michal Schmidt) [RHEL-177450] - ice: fix locking around wait_event_interruptible_locked_irq (Michal Schmidt) [RHEL-177450] - ice: fix locking in ice_dcb_rebuild() (Michal Schmidt) [RHEL-177450] - ice: fix setting RSS VSI hash for E830 (Michal Schmidt) [RHEL-177450] - ice: dpll: Fix compilation warning (Michal Schmidt) [RHEL-177450] - ice: mention fw_activate action along with devlink reload (Michal Schmidt) [RHEL-177450] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Michal Schmidt) [RHEL-177450] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Michal Schmidt) [RHEL-177450] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Michal Schmidt) [RHEL-177450] - ice: fix PHY config on media change with link-down-on-close (Michal Schmidt) [RHEL-177450] - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-177450] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Michal Schmidt) [RHEL-177450] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Michal Schmidt) [RHEL-177450] - ice: fix 'adjust' timer programming for E830 devices (Michal Schmidt) [RHEL-177450] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Michal Schmidt) [RHEL-177450] - ice: ptp: don't WARN when controlling PF is unavailable (Michal Schmidt) [RHEL-177450] {CVE-2026-43346} - drivers: net: ice: fix devlink parameters get without irdma (Michal Schmidt) [RHEL-177450] - ice: Fix memory leak in ice_set_ringparam() (Michal Schmidt) [RHEL-177450] {CVE-2026-23389} - ice: fix retry for AQ command 0x06EE (Michal Schmidt) [RHEL-177450] - ice: reintroduce retry mechanism for indirect AQ (Michal Schmidt) [RHEL-177450] - ice: fix adding AQ LLDP filter for VF (Michal Schmidt) [RHEL-177450] - ice: Make name member of struct ice_cgu_pin_desc const (Michal Schmidt) [RHEL-177450] - ice: recap the VSI and QoS info after rebuild (Michal Schmidt) [RHEL-177450] - ice: stop counting UDP csum mismatch as rx_errors (Michal Schmidt) [RHEL-177450] - ice: convert all ring stats to u64_stats_t (Michal Schmidt) [RHEL-177450] - ice: shorten ring stat names and add accessors (Michal Schmidt) [RHEL-177450] - ice: use u64_stats API to access pkts/bytes in dim sample (Michal Schmidt) [RHEL-177450] - ice: remove ice_q_stats struct and use struct_group (Michal Schmidt) [RHEL-177450] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Michal Schmidt) [RHEL-177450] - ice: unify PHY FW loading status handler for E800 devices (Michal Schmidt) [RHEL-177450] - ice: dpll: fix misplaced header macros (Michal Schmidt) [RHEL-177450] - ice: dpll: fix rclk pin state get for E810 (Michal Schmidt) [RHEL-177450] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Michal Schmidt) [RHEL-177450] - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Nico Pache) [RHEL-189902] {CVE-2025-68211} - net: tls: prevent chain-after-chain in plain text SG (Sabrina Dubroca) [RHEL-152694] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Sabrina Dubroca) [RHEL-152694] - net: tls: fix silent data drop under pipe back-pressure (Sabrina Dubroca) [RHEL-152694] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Sabrina Dubroca) [RHEL-152694] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Sabrina Dubroca) [RHEL-152694] - tls: Purge async_hold in tls_decrypt_async_wait() (Sabrina Dubroca) [RHEL-152694] - tls: Fix race condition in tls_sw_cancel_work_tx() (Sabrina Dubroca) [RHEL-154836] {CVE-2026-23240} - tls: don't rely on tx_work during send() (Sabrina Dubroca) [RHEL-152694] - tls: always set record_type in tls_process_cmsg (Sabrina Dubroca) [RHEL-152694] - tls: wait for async encrypt in case of error during latter iterations of sendmsg (Sabrina Dubroca) [RHEL-152694] - net: tls: wait for async completion on last message (Sabrina Dubroca) [RHEL-152694] - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (Sabrina Dubroca) [RHEL-189938] {CVE-2025-40149} - ktls, sockmap: Fix missing uncharge operation (Sabrina Dubroca) [RHEL-152694] - net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Sabrina Dubroca) [RHEL-192925] - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177879] {CVE-2026-46323} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-178626] {CVE-2026-43503} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-178626] {CVE-2026-43503} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176061] {CVE-2026-46300} - i2c: tegra: Fix NOIRQ suspend/resume (Charles Mirabile) [RHEL-174251] - i2c: tegra: Update Tegra410 I2C timing parameters (Charles Mirabile) [RHEL-174251] - i2c: tegra: Disable fair arbitration for non-MCTP buses (Charles Mirabile) [RHEL-174251] - i2c: tegra: use dmaengine_get_dma_device() for DMA buffer allocation (Charles Mirabile) [RHEL-174251] - ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (Florian Westphal) [RHEL-186601] - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (Florian Westphal) [RHEL-186601] - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (Florian Westphal) [RHEL-186601] - netfilter: nf_nat_sip: reload possible stale data pointer (Florian Westphal) [RHEL-186601] - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-186601] - netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (Florian Westphal) [RHEL-186601] - netfilter: nf_conntrack_sip: remove net variable shadowing (Florian Westphal) [RHEL-186601] - netfilter: ipset: fix race between dump and ip_set_list resize (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-186601] - netfilter: nf_conntrack_expect: zero at allocation time (Florian Westphal) [RHEL-186601] - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-186601] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-186601] - netfilter: nf_conntrack_expect: run expectation eviction with no helper (Florian Westphal) [RHEL-186601] - netfilter: ctnetlink: do not allow to reset helper on existing conntrack (Florian Westphal) [RHEL-186601] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-186601] - neigh: let neigh_xmit take skb ownership (Florian Westphal) [RHEL-186601] {CVE-2026-52981} - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-186601] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-186601] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-186601] - netfilter: ipset: make sure gc is properly stopped (Florian Westphal) [RHEL-186601] - netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (Florian Westphal) [RHEL-186601] - netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap types (Florian Westphal) [RHEL-186601] - netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types (Florian Westphal) [RHEL-186601] - netfilter: ipset: annotate "pos" for concurrent readers/writers (Florian Westphal) [RHEL-186601] - netfilter: ipset: Fix data race between add and dump in all hash types (Florian Westphal) [RHEL-186601] - netfilter: xt_cluster: reject template conntracks in hash match (Florian Westphal) [RHEL-186601] - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (Florian Westphal) [RHEL-186601] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion() helpers and use them (Florian Westphal) [RHEL-186601] - netfilter: conntrack: check NULL when retrieving ct extension (Florian Westphal) [RHEL-186601] - netfilter: nf_conncount: gc and rcu fixes (Florian Westphal) [RHEL-186601] - netfilter: nf_conncount: add sequence counter to detect tree modifications (Florian Westphal) [RHEL-186601] - netfilter: nf_conncount: split count_tree_node rbtree walk into helper (Florian Westphal) [RHEL-186601] - netfilter: nf_conncount: use per nf_conncount_data spinlocks (Florian Westphal) [RHEL-186601] - netfilter: nf_conncount: callers must hold rcu read lock (Florian Westphal) [RHEL-186601] - netfilter: nf_conncount: use per-rule hash initval (Florian Westphal) [RHEL-186601] - netfilter: nf_conncount: fix wrong variable type (Florian Westphal) [RHEL-186601] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-186601] - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (Florian Westphal) [RHEL-186601] - netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag (Florian Westphal) [RHEL-186601] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-186601] - netfilter: nf_conntrack_expect: skip expectations in other netns via proc (Florian Westphal) [RHEL-186601] {CVE-2026-31496} - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-186601] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-186601] - netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock (Florian Westphal) [RHEL-186601] - netfilter: synproxy: fix unaligned memory access in timestamp adjustment (Florian Westphal) [RHEL-186601] - netfilter: synproxy: adjust duplicate timestamp options (Florian Westphal) [RHEL-186601] - netfilter: synproxy: drop packets if timestamp adjustment fails (Florian Westphal) [RHEL-186601] - netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures (Florian Westphal) [RHEL-186601] - ipvs: clear the svc scheduler ptr early on edit (Florian Westphal) [RHEL-186601] {CVE-2026-53270} - netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (Florian Westphal) [RHEL-186601] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-186601] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-186601] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-186601] {CVE-2026-53218} - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-186601] {CVE-2026-52942} - netfilter: x_tables: avoid leaking percpu counter pointers (Florian Westphal) [RHEL-186601] {CVE-2026-53219} - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-186601] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-186601] {CVE-2026-53220} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-186601] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-186601] {CVE-2026-53212} - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-186601] {CVE-2026-53268} - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-186601] {CVE-2026-53269} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-186601] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-186601] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-186601] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-186601] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-186601] {CVE-2026-52912} - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-186601] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-186601] {CVE-2026-52915} - netfilter: ipset: stop hash: range iteration at end (Florian Westphal) [RHEL-186601] - netfilter: ipset: fix a potential dump-destroy race (Florian Westphal) [RHEL-186601] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-186601] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-186601] {CVE-2026-52970} - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-186601] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-186601] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-186601] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-186601] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-186601] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-186601] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-186601] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-186601] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-186601] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-186601] {CVE-2026-52986} - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-186601] {CVE-2026-52920} - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-186601] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-186601] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-186601] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-186601] {CVE-2026-52999} - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-186601] {CVE-2026-53001} - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-186601] {CVE-2026-53002} - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-186601] {CVE-2026-45841} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-186601] - netfilter: require Ethernet MAC header before using eth_hdr() (Florian Westphal) [RHEL-186601] {CVE-2026-53131} - netfilter: x_physdev: reject empty or not-nul terminated device names (Florian Westphal) [RHEL-186601] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-186601] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-186601] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-186601] {CVE-2026-43085} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-186601] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-186601] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-186601] {CVE-2026-31424} - netfilter: ipset: drop logically empty buckets in mtype_del (Florian Westphal) [RHEL-186601] {CVE-2026-31418} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-186601] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-186601] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-186601] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-186601] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-186601] {CVE-2026-31416} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-186601] - netfilter: Reorder fields in 'struct nf_conntrack_expect' (Florian Westphal) [RHEL-186601] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-186601] {CVE-2026-31414} - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-186601] - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-186601] {CVE-2026-31674} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-186601] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-186601] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-186601] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-186601] {CVE-2026-23385} - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value (Florian Westphal) [RHEL-186601] - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-186601] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-186601] - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-186601] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-186601] {CVE-2025-68206} - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-186601] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-186601] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-186601] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-186601] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-186601] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-186601] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-186601] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-186601] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-186601] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-186601] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-186601] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-186601] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-186601] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-186601] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-186601] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-186601] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-186601] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-186601] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-186601] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-186601] - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184267] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-182043] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-182043] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-182043] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-182043] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-182043] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-182043] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-183881] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183881] - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180269] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180269] {CVE-2026-43276} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180161] {CVE-2026-46117} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180088] {CVE-2026-46145} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171507] {CVE-2026-31669} - tipc: fix double-free in tipc_buf_append() (Xin Long) [RHEL-152706] - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (Xin Long) [RHEL-152706] - tipc: fix divide-by-zero in tipc_sk_filter_connect() (Xin Long) [RHEL-152706] - tipc: fix duplicate publication key in tipc_service_insert_publ() (Xin Long) [RHEL-152706] - tipc: fix RCU dereference race in tipc_aead_users_dec() (Xin Long) [RHEL-152706] - tipc: use kfree_sensitive() for session key material (Xin Long) [RHEL-152706] - tipc: Fix use-after-free in tipc_mon_reinit_self(). (Xin Long) [RHEL-152706] - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Xin Long) [RHEL-152695] - sctp: disable BH before calling udp_tunnel_xmit_skb() (Xin Long) [RHEL-152695] - sctp: fix missing encap_port propagation for GSO fragments (Xin Long) [RHEL-152695] - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (Xin Long) [RHEL-152695] - sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto (Xin Long) [RHEL-152695] - sctp: Hold sock lock while iterating over address list (Xin Long) [RHEL-152695] - sctp: Prevent TOCTOU out-of-bounds write (Xin Long) [RHEL-152695] - sctp: Hold RCU read lock while iterating over address list (Xin Long) [RHEL-152695] - net: sctp: fix KMSAN uninit-value in sctp_inq_pop (Xin Long) [RHEL-152695] - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). (Xin Long) [RHEL-152695] - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (Xin Long) [RHEL-152695] - scsi: mpt3sas: Limit NVMe request size to 2 MiB (Chandrakanth Patil) [RHEL-141217] {CVE-2026-46105} - scsi: mpt3sas: Simplify the workqueue allocation code (Chandrakanth Patil) [RHEL-141217] - scsi: mpt3sas: Fixed the W=1 compilation warning (Chandrakanth Patil) [RHEL-141217] - scsi: mpt3sas: Add configurable command retry limit for slow-to-respond devices (Chandrakanth Patil) [RHEL-141217] - scsi: mpt3sas: Add firmware event requeue support for busy devices (Chandrakanth Patil) [RHEL-141217] - scsi: mpt3sas: Improve device discovery and readiness handling for slow devices (Chandrakanth Patil) [RHEL-141217] - scsi: mpt3sas: Added no_turs flag to device unblock logic (Chandrakanth Patil) [RHEL-141217] - scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Fix typo and grammar (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Fix kernel-doc issues in mpi3mr_app.c (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Fix typo (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Add retry mechanism for IOC shutdown with timeout reset (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Add queue-full tracking for operational request queues (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Reset controller on invalid I/O completion (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Clear reset history on ready and recheck state after timeout (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Add NULL checks when resetting request and reply queues (Chandrakanth Patil) [RHEL-141218] {CVE-2026-43473} - scsi: mpi3mr: Make driver probing asynchronous (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Driver version update to 8.17.0.3.50 (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Fixed the W=1 compilation warning (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Record and report controller firmware faults (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Update MPI Headers to revision 39 (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Use negotiated link rate from DevicePage0 (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Avoid redundant diag-fault resets (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Rename log data save helper to reflect threaded/BH context (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Add module parameter to control threaded IRQ polling (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Simplify the workqueue allocation code (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Read missing IOCFacts flag for reply queue full overflow (Chandrakanth Patil) [RHEL-141218] - scsi: mpi3mr: Prevent duplicate SAS/SATA device entries in channel 1 (Chandrakanth Patil) [RHEL-141218] Resolves: RHEL-113832, RHEL-141217, RHEL-141218, RHEL-147798, RHEL-152694, RHEL-152695, RHEL-152706, RHEL-154836, RHEL-154906, RHEL-168738, RHEL-171507, RHEL-174251, RHEL-176061, RHEL-177450, RHEL-177879, RHEL-178340, RHEL-178626, RHEL-180034, RHEL-180088, RHEL-180161, RHEL-180173, RHEL-180269, RHEL-182043, RHEL-183881, RHEL-184267, RHEL-186601, RHEL-186696, RHEL-189902, RHEL-189938, RHEL-189941, RHEL-190801, RHEL-192402, RHEL-192487, RHEL-192925, RHEL-193749, RHEL-194201, RHEL-210643, RHEL-212684, RHEL-212691, RHEL-213155, RHEL-213547, RHEL-213745 Signed-off-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>		2026-08-04 08:25:47 +00:00
.gitignore	RHEL 9.0.0 Alpha bootstrap	2020-10-15 14:41:02 +02:00
check-kabi	kernel-5.14.0-155.el9	2022-08-23 20:50:32 +00:00
cpupower.config	RHEL 9.0.0 Alpha bootstrap	2020-10-15 14:41:02 +02:00
cpupower.service	RHEL 9.0.0 Alpha bootstrap	2020-10-15 14:41:02 +02:00
dracut-virt.conf	kernel-5.14.0-681.el9	2026-02-11 19:34:44 +00:00
filter-aarch64.sh.rhel	RHEL 9.0.0 Alpha bootstrap	2020-10-15 14:41:02 +02:00
filter-armv7hl.sh.rhel	RHEL 9.0.0 Alpha bootstrap	2020-10-15 14:41:02 +02:00
filter-modules.sh.rhel	kernel-5.14.0-716.el9	2026-06-15 08:23:42 +00:00
filter-ppc64le.sh.rhel	RHEL 9.0.0 Alpha bootstrap	2020-10-15 14:41:02 +02:00
filter-s390x.sh.rhel	RHEL 9.0.0 Alpha bootstrap	2020-10-15 14:41:02 +02:00
filter-x86_64.sh.rhel	RHEL 9.0.0 Alpha bootstrap	2020-10-15 14:41:02 +02:00
gating.yaml	kernel-5.14.0-714.el9	2026-06-08 08:27:26 +00:00
generate_all_configs.sh	kernel-5.14.0-172.el9	2022-10-03 05:42:53 -04:00
kernel-aarch64-64k-debug-rhel.config	kernel-5.14.0-726.el9	2026-07-16 18:01:55 +00:00
kernel-aarch64-64k-rhel.config	kernel-5.14.0-726.el9	2026-07-16 18:01:55 +00:00
kernel-aarch64-debug-rhel.config	kernel-5.14.0-726.el9	2026-07-16 18:01:55 +00:00
kernel-aarch64-rhel.config	kernel-5.14.0-726.el9	2026-07-16 18:01:55 +00:00
kernel-aarch64-rt-64k-debug-rhel.config	kernel-5.14.0-726.el9	2026-07-16 18:01:55 +00:00
kernel-aarch64-rt-64k-rhel.config	kernel-5.14.0-726.el9	2026-07-16 18:01:55 +00:00
kernel-aarch64-rt-debug-rhel.config	kernel-5.14.0-726.el9	2026-07-16 18:01:55 +00:00
kernel-aarch64-rt-rhel.config	kernel-5.14.0-726.el9	2026-07-16 18:01:55 +00:00
kernel-local	RHEL 9.0.0 Alpha bootstrap	2020-10-15 14:41:02 +02:00
kernel-ppc64le-debug-rhel.config	kernel-5.14.0-730.el9	2026-07-28 15:28:01 +00:00
kernel-ppc64le-rhel.config	kernel-5.14.0-730.el9	2026-07-28 15:28:01 +00:00
kernel-s390x-debug-rhel.config	kernel-5.14.0-730.el9	2026-07-28 15:28:01 +00:00
kernel-s390x-rhel.config	kernel-5.14.0-730.el9	2026-07-28 15:28:01 +00:00
kernel-s390x-zfcpdump-rhel.config	kernel-5.14.0-730.el9	2026-07-28 15:28:01 +00:00
kernel-x86_64-debug-rhel.config	kernel-5.14.0-726.el9	2026-07-16 18:01:55 +00:00
kernel-x86_64-rhel.config	kernel-5.14.0-726.el9	2026-07-16 18:01:55 +00:00
kernel-x86_64-rt-debug-rhel.config	kernel-5.14.0-726.el9	2026-07-16 18:01:55 +00:00
kernel-x86_64-rt-rhel.config	kernel-5.14.0-726.el9	2026-07-16 18:01:55 +00:00
kernel.changelog	kernel-5.14.0-732.el9	2026-08-04 08:25:47 +00:00
kernel.sbat.template	kernel-5.14.0-658.el9	2026-01-09 19:47:09 +00:00
kernel.spec	kernel-5.14.0-732.el9	2026-08-04 08:25:47 +00:00
kmap.py	kernel-5.14.0-732.el9	2026-08-04 08:25:47 +00:00
kvm_stat.logrotate	kernel-5.13.0-0.rc7.51.el9	2021-06-21 19:14:53 -04:00
linux-kernel-test.patch	RHEL 9.0.0 Alpha bootstrap	2020-10-15 14:41:02 +02:00
Makefile.rhelver	kernel-5.14.0-732.el9	2026-08-04 08:25:47 +00:00
merge.pl	RHEL 9.0.0 Alpha bootstrap	2020-10-15 14:41:02 +02:00
mod-denylist.sh	kernel-5.13.0-1.el9	2021-07-02 16:34:23 -04:00
mod-extra.list.rhel	kernel-5.14.0-681.el9	2026-02-11 19:34:44 +00:00
mod-internal.list	kernel-5.14.0-716.el9	2026-06-15 08:23:42 +00:00
mod-partner.list	kernel-5.14.0-296.el9	2023-04-04 12:03:43 +02:00
mod-sign.sh	kernel-5.14.0-365.el9	2023-09-12 08:27:19 -04:00
Module.kabi_aarch64	kernel-5.14.0-72.el9	2022-03-15 13:30:59 +00:00
Module.kabi_dup_aarch64	RHEL 9.0.0 Alpha bootstrap	2020-10-15 14:41:02 +02:00
Module.kabi_dup_ppc64le	RHEL 9.0.0 Alpha bootstrap	2020-10-15 14:41:02 +02:00
Module.kabi_dup_s390x	RHEL 9.0.0 Alpha bootstrap	2020-10-15 14:41:02 +02:00
Module.kabi_dup_x86_64	RHEL 9.0.0 Alpha bootstrap	2020-10-15 14:41:02 +02:00
Module.kabi_ppc64le	kernel-5.14.0-72.el9	2022-03-15 13:30:59 +00:00
Module.kabi_s390x	kernel-5.14.0-72.el9	2022-03-15 13:30:59 +00:00
Module.kabi_x86_64	kernel-5.14.0-72.el9	2022-03-15 13:30:59 +00:00
nvidiabfdpu.x509	kernel-5.14.0-688.el9	2026-03-25 19:02:09 +00:00
nvidiagpuoot001.x509	kernel-5.14.0-423.el9	2024-02-16 10:50:49 -05:00
nvidiajetsonsoc.x509	kernel-5.14.0-688.el9	2026-03-25 19:02:09 +00:00
parallel_xz.sh	kernel-5.10.0-0.rc6.92	2020-12-04 15:24:35 -05:00
partial-kgcov-snip.config	kernel-5.14.0-633.el9	2025-11-03 10:46:55 +00:00
patch-5.14-redhat.patch	kernel-5.14.0-172.el9	2022-10-03 05:42:53 -04:00
process_configs.sh	kernel-5.14.0-365.el9	2023-09-12 08:27:19 -04:00
README.rst	RHEL 9.0.0 Alpha bootstrap	2020-10-15 14:41:02 +02:00
redhatsecureboot504.cer	kernel-5.14.0-628.el9	2025-10-22 09:09:42 -04:00
rheldup3.x509	kernel-5.11.0-0.rc7.149.el9	2021-02-08 15:06:53 -05:00
rhelima_centos.x509	kernel-5.14.0-359.el9	2023-08-22 09:59:15 +02:00
rhelima.x509	kernel-5.14.0-359.el9	2023-08-22 09:59:15 +02:00
rhelimaca1.x509	kernel-5.14.0-359.el9	2023-08-22 09:59:15 +02:00
rhelkpatch1.x509	kernel-5.11.0-0.rc7.149.el9	2021-02-08 15:06:53 -05:00
rpminspect.yaml	kernel-5.14.0-626.el9	2025-10-17 20:57:31 +00:00
sources	kernel-5.14.0-732.el9	2026-08-04 08:25:47 +00:00
uki_addons.json	kernel-5.14.0-614.el9	2025-09-10 14:38:08 +00:00
uki_create_addons.py	kernel-5.14.0-588.el9	2025-05-26 15:25:18 +02:00
update_scripts.sh	kernel-5.14.0-365.el9	2023-09-12 08:27:19 -04:00
x509.genkey.centos	kernel-5.14.0-72.el9	2022-03-15 13:30:59 +00:00
x509.genkey.rhel	RHEL 9.0.0 Alpha bootstrap	2020-10-15 14:41:02 +02:00

README.rst

===================
The Kernel dist-git
===================

The kernel is maintained in a `source tree`_ rather than directly in dist-git.
The specfile is maintained as a `template`_ in the source tree along with a set
of build scripts to generate configurations, (S)RPMs, and to populate the
dist-git repository.

The `documentation`_ for the source tree covers how to contribute and maintain
the tree.

If you're looking for the downstream patch set it's available in the source
tree with "git log master..ark-patches" or
`online`_.

Each release in dist-git is tagged in the source repository so you can easily
check out the source tree for a build. The tags are in the format
name-version-release, but note release doesn't contain the dist tag since the
source can be built in different build roots (Fedora, CentOS, etc.)

.. _source tree: https://gitlab.com/cki-project/kernel-ark.git
.. _template: https://gitlab.com/cki-project/kernel-ark/-/blob/os-build/redhat/kernel.spec.template
.. _documentation: https://gitlab.com/cki-project/kernel-ark/-/wikis/home
.. _online: https://gitlab.com/cki-project/kernel-ark/-/commits/ark-patches