The Linux kernel
398a134ed1
* Tue Aug 11 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-736.el9]
- selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-222801]
- i2c: core: fix adapter deregistration race (David Arcari) [RHEL-222902] {CVE-2026-64279}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183626] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183626] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183626] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183626] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183626] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183626] {CVE-2025-10263}
- platform/x86/amd/hsmp: Clamp ioctl/send_message indices (Spectre v1) (David Arcari) [RHEL-217011]
- pinctrl-amd: Don't clear S4 wake bits at probe (David Arcari) [RHEL-211144]
- fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (David Arcari) [RHEL-216442]
- fs/resctrl: Fix use-after-free during unmount (David Arcari) [RHEL-216442]
- fs/resctrl: Free mon_data structures on rdt_get_tree() failure (David Arcari) [RHEL-216442]
- x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled (David Arcari) [RHEL-216442]
- kernfs: fix suspicious RCU usage in kernfs_put() (David Arcari) [RHEL-216442]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213339] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213339]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213339]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213339]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-213339]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211279] {CVE-2025-40026}
- perf/arm_cspmu: nvidia: Add pmevfiltr2 support (Charles Mirabile) [RHEL-121676]
- perf/arm_cspmu: nvidia: Add revision id matching (Charles Mirabile) [RHEL-121676]
- perf/arm_cspmu: Add pmpidr support (Charles Mirabile) [RHEL-121676]
- perf/arm_cspmu: Add callback to reset filter config (Charles Mirabile) [RHEL-121676]
- perf/arm_cspmu: Add PMEVFILT2R support (Charles Mirabile) [RHEL-121676]
- perf/arm_cspmu: Fix missing io.h include (Charles Mirabile) [RHEL-121676]
- perf/arm_cspmu: Generalise event filtering (Charles Mirabile) [RHEL-121676]
- perf/arm_cspmu: Move register definitons to header (Charles Mirabile) [RHEL-121676]
- fixup! Merge: s390/entry: Scrub r12 register on kernel entry (Jan Polensky) [RHEL-191803]
- redhat/configs: Enable Epson RX8111 RTC driver (Nirmala Dalvi) [RHEL-184760]
- rtc: rx8111: Adapt upstream driver for kernel 5.14 (Nirmala Dalvi) [RHEL-184760]
- rtc: rx8111: handle VLOW flag (Nirmala Dalvi) [RHEL-184760]
- rtc: rx8111: demote warnings to debug level (Nirmala Dalvi) [RHEL-184760]
- rtc: Add driver for Epson RX8111 (Nirmala Dalvi) [RHEL-184760]
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188213] {CVE-2026-52923}
Resolves: RHEL-121676, RHEL-183626, RHEL-184760, RHEL-188213, RHEL-191803, RHEL-211144, RHEL-211279, RHEL-213339, RHEL-216442, RHEL-217011, RHEL-222801, RHEL-222902
Signed-off-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>
|
||
|---|---|---|
| .gitignore | ||
| check-kabi | ||
| cpupower.config | ||
| cpupower.service | ||
| dracut-virt.conf | ||
| filter-aarch64.sh.rhel | ||
| filter-armv7hl.sh.rhel | ||
| filter-modules.sh.rhel | ||
| filter-ppc64le.sh.rhel | ||
| filter-s390x.sh.rhel | ||
| filter-x86_64.sh.rhel | ||
| gating.yaml | ||
| generate_all_configs.sh | ||
| kernel-aarch64-64k-debug-rhel.config | ||
| kernel-aarch64-64k-rhel.config | ||
| kernel-aarch64-debug-rhel.config | ||
| kernel-aarch64-rhel.config | ||
| kernel-aarch64-rt-64k-debug-rhel.config | ||
| kernel-aarch64-rt-64k-rhel.config | ||
| kernel-aarch64-rt-debug-rhel.config | ||
| kernel-aarch64-rt-rhel.config | ||
| kernel-local | ||
| kernel-ppc64le-debug-rhel.config | ||
| kernel-ppc64le-rhel.config | ||
| kernel-s390x-debug-rhel.config | ||
| kernel-s390x-rhel.config | ||
| kernel-s390x-zfcpdump-rhel.config | ||
| kernel-x86_64-debug-rhel.config | ||
| kernel-x86_64-rhel.config | ||
| kernel-x86_64-rt-debug-rhel.config | ||
| kernel-x86_64-rt-rhel.config | ||
| kernel.changelog | ||
| kernel.sbat.template | ||
| kernel.spec | ||
| kmap.py | ||
| kvm_stat.logrotate | ||
| linux-kernel-test.patch | ||
| Makefile.rhelver | ||
| merge.pl | ||
| mod-denylist.sh | ||
| mod-extra.list.rhel | ||
| mod-internal.list | ||
| mod-partner.list | ||
| mod-sign.sh | ||
| Module.kabi_aarch64 | ||
| Module.kabi_dup_aarch64 | ||
| Module.kabi_dup_ppc64le | ||
| Module.kabi_dup_s390x | ||
| Module.kabi_dup_x86_64 | ||
| Module.kabi_ppc64le | ||
| Module.kabi_s390x | ||
| Module.kabi_x86_64 | ||
| nvidiabfdpu.x509 | ||
| nvidiagpuoot001.x509 | ||
| nvidiajetsonsoc.x509 | ||
| parallel_xz.sh | ||
| partial-kgcov-snip.config | ||
| patch-5.14-redhat.patch | ||
| process_configs.sh | ||
| README.rst | ||
| redhatsecureboot504.cer | ||
| rheldup3.x509 | ||
| rhelima_centos.x509 | ||
| rhelima.x509 | ||
| rhelimaca1.x509 | ||
| rhelkpatch1.x509 | ||
| rpminspect.yaml | ||
| sources | ||
| uki_addons.json | ||
| uki_create_addons.py | ||
| update_scripts.sh | ||
| x509.genkey.centos | ||
| x509.genkey.rhel | ||
=================== The Kernel dist-git =================== The kernel is maintained in a `source tree`_ rather than directly in dist-git. The specfile is maintained as a `template`_ in the source tree along with a set of build scripts to generate configurations, (S)RPMs, and to populate the dist-git repository. The `documentation`_ for the source tree covers how to contribute and maintain the tree. If you're looking for the downstream patch set it's available in the source tree with "git log master..ark-patches" or `online`_. Each release in dist-git is tagged in the source repository so you can easily check out the source tree for a build. The tags are in the format name-version-release, but note release doesn't contain the dist tag since the source can be built in different build roots (Fedora, CentOS, etc.) .. _source tree: https://gitlab.com/cki-project/kernel-ark.git .. _template: https://gitlab.com/cki-project/kernel-ark/-/blob/os-build/redhat/kernel.spec.template .. _documentation: https://gitlab.com/cki-project/kernel-ark/-/wikis/home .. _online: https://gitlab.com/cki-project/kernel-ark/-/commits/ark-patches