The Linux kernel
4d89cdca16
* Tue Jun 03 2025 Jan Stancek <jstancek@redhat.com> [5.14.0-591.el9]
- uki_addons: add 'fedora' SBAT suffix for UKI addons (Li Tian) [RHEL-93399]
- Subject: net/smc: check return value of sock_recvmsg when draining clc data (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
- net/smc: check smcd_v2_ext_offset when receiving proposal msg (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
- net/smc: protect link down work from execute after lgr freed (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
- net/smc: Introduce IPPROTO_SMC (Mete Durlu) [RHEL-73484]
- net/smc: expose smc proto operations (Mete Durlu) [RHEL-73484]
- net/smc: refactoring initialization of smc sock (Mete Durlu) [RHEL-73484]
- net/smc: change SMCR_RMBE_SIZES from 5 to 15 (Mete Durlu) [RHEL-73484]
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined (Mete Durlu) [RHEL-73484]
- net/smc: implement DMB-merged operations of loopback-ism (Mete Durlu) [RHEL-73484]
- net/smc: adapt cursor update when sndbuf and peer DMB are merged (Mete Durlu) [RHEL-73484]
- net/smc: add operations to merge sndbuf with peer DMB (Mete Durlu) [RHEL-73484]
- net/smc: register loopback-ism into SMC-D device list (Mete Durlu) [RHEL-73484]
- net/smc: ignore loopback-ism when dumping SMC-D devices (Mete Durlu) [RHEL-73484]
- net/smc: mark optional smcd_ops and check for support when called (Mete Durlu) [RHEL-73484]
- net/smc: implement DMB-related operations of loopback-ism (Mete Durlu) [RHEL-73484]
- net/smc: implement ID-related operations of loopback-ism (Mete Durlu) [RHEL-73484]
- redhat/configs: Add SMC_LO config option (Mete Durlu) [RHEL-73484]
- net/smc: introduce loopback-ism for SMC intra-OS shortcut (Mete Durlu) [RHEL-73484]
- net/smc: decouple ism_client from SMC-D DMB registration (Mete Durlu) [RHEL-73484]
- net/smc: Avoid -Wflex-array-member-not-at-end warnings (Mete Durlu) [RHEL-73484]
- net/smc: make smc_hash_sk/smc_unhash_sk static (Mete Durlu) [RHEL-73484]
- net/smc: change the term virtual ISM to Emulated-ISM (Mete Durlu) [RHEL-73484]
- net/smc: fix incorrect SMC-D link group matching logic (Mete Durlu) [RHEL-73484]
- net/smc: fix invalid link access in dumping SMC-R connections (Mete Durlu) [RHEL-73484]
- net/smc: manage system EID in SMC stack instead of ISM driver (Mete Durlu) [RHEL-73484]
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used (Mete Durlu) [RHEL-73484]
- net/smc: support extended GID in SMC-D lgr netlink attribute (Mete Durlu) [RHEL-73484]
- net/smc: compatible with 128-bits extended GID of virtual ISM device (Mete Durlu) [RHEL-73484]
- net/smc: define a reserved CHID range for virtual ISM devices (Mete Durlu) [RHEL-73484]
- net/smc: introduce virtual ISM device support feature (Mete Durlu) [RHEL-73484]
- net/smc: support SMCv2.x supplemental features negotiation (Mete Durlu) [RHEL-73484]
- net/smc: unify the structs of accept or confirm message for v1 and v2 (Mete Durlu) [RHEL-73484]
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept() (Mete Durlu) [RHEL-73484]
- net/smc: rename some 'fce' to 'fce_v2x' for clarity (Mete Durlu) [RHEL-73484]
- net/smc: fix missing byte order conversion in CLC handshake (Mete Durlu) [RHEL-73484]
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty (Mete Durlu) [RHEL-73484]
- net/smc: add sysctl for max conns per lgr for SMC-R v2.1 (Mete Durlu) [RHEL-73484]
- net/smc: add sysctl for max links per lgr for SMC-R v2.1 (Mete Durlu) [RHEL-73484]
- net/smc: put sk reference if close work was canceled (Mete Durlu) [RHEL-73484]
- net/smc: allow cdc msg send rather than drop it with NULL sndbuf_desc (Mete Durlu) [RHEL-73484]
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT (Mete Durlu) [RHEL-73484]
- net/smc: return the right falback reason when prefix checks fail (Mete Durlu) [RHEL-73484]
- net/smc: fix smc clc failed issue when netdevice not in init_net (Mete Durlu) [RHEL-73484]
- net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add (Mete Durlu) [RHEL-73484]
- net/smc: bugfix for smcr v2 server connect success statistic (Mete Durlu) [RHEL-73484]
- net/smc: Extend SMCR v2 linkgroup netlink attribute (Mete Durlu) [RHEL-73484]
- net/smc: support max links per lgr negotiation in clc handshake (Mete Durlu) [RHEL-73484]
- net/smc: support max connections per lgr negotiation (Mete Durlu) [RHEL-73484]
- net/smc: support smc v2.x features validate (Mete Durlu) [RHEL-73484]
- net/smc: add vendor unique experimental options area in clc handshake (Mete Durlu) [RHEL-73484]
- net/smc: support smc release version negotiation in clc handshake (Mete Durlu) [RHEL-73484]
- net/smc: Avoid to access invalid RMBs' MRs in SMCRv1 ADD LINK CONT (Mete Durlu) [RHEL-73484]
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK (Mete Durlu) [RHEL-73484]
- net/smc: Scan from current RMB list when no position specified (Mete Durlu) [RHEL-73484]
- net/smc: Reset connection when trying to use SMCRv2 fails. (Mete Durlu) [RHEL-73484]
- smc: Fix use-after-free in tcp_write_timer_handler(). (Mete Durlu) [RHEL-73484]
- smc: preserve const qualifier in smc_sk() (Mete Durlu) [RHEL-73484]
- net/smc: Use percpu ref for wr tx reference (Mete Durlu) [RHEL-73484]
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link() (Mete Durlu) [RHEL-73484]
- vlan: enforce underlying device type (Guillaume Nault) [RHEL-87883] {CVE-2025-21920}
- dm: fix copying after src array boundaries (Benjamin Marzinski) [RHEL-92761]
- dm: add missing unlock on in dm_keyslot_evict() (Benjamin Marzinski) [RHEL-92761]
- dm: always update the array size in realloc_argv on success (Benjamin Marzinski) [RHEL-92761]
- dm-integrity: fix a warning on invalid table line (Benjamin Marzinski) [RHEL-92761]
- dm-bufio: don't schedule in atomic context (Benjamin Marzinski) [RHEL-92761]
- dm-ebs: fix prefetch-vs-suspend race (Benjamin Marzinski) [RHEL-92761]
- dm-verity: fix prefetch-vs-suspend race (Benjamin Marzinski) [RHEL-92761]
- dm-integrity: fix non-constant-time tag verification (Benjamin Marzinski) [RHEL-92761]
- dm cache: support shrinking the origin device (Benjamin Marzinski) [RHEL-56106]
- dm cache: prevent BUG_ON by blocking retries on failed device resumes (Benjamin Marzinski) [RHEL-56106]
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH (Benjamin Marzinski) [RHEL-92761]
- dm-integrity: set ti->error on memory allocation failure (Benjamin Marzinski) [RHEL-92761]
- NFSv4: Don't check for OPEN feature support in v4.1 (Scott Mayhew) [RHEL-83435]
- MAINTAINERS: Update maintainers for crypto/marvell (Vladis Dronov) [RHEL-74335]
- crypto: octeontx2 - suppress auth failure screaming due to negative tests (Vladis Dronov) [RHEL-74335]
- crypto: octeontx2 - Remove unused otx2_cpt_print_uc_dbg_info (Vladis Dronov) [RHEL-74335]
- crypto: drivers - Use str_enable_disable-like helpers [partial] (Vladis Dronov) [RHEL-74335]
- crypto: marvell - replace deprecated PCI functions (Vladis Dronov) [RHEL-74335]
- PCI: Make pcim_request_all_regions() a public function (Vladis Dronov) [RHEL-74335]
- crypto: octeontx* - Select CRYPTO_AUTHENC [partial] (Vladis Dronov) [RHEL-74335]
- crypto: octeontx2 - select CONFIG_NET_DEVLINK (Vladis Dronov) [RHEL-74335]
- crypto: octeontx2 - Fix authenc setkey (Vladis Dronov) [RHEL-74335]
- crypto: octeontx2 - Remove custom swap functions in favor of built-in sort swap (Vladis Dronov) [RHEL-74335]
- crypto: octeontx2 - update CPT inbound inline IPsec mailbox (Vladis Dronov) [RHEL-74335]
- selftests: net: fdb_notify: Add a test for FDB notifications (Ivan Vecera) [RHEL-78780]
- selftests: net: lib: Add kill_process (Ivan Vecera) [RHEL-78780]
- selftests: net: lib: Move checks from forwarding/lib.sh here (Ivan Vecera) [RHEL-78780]
- selftests: net: lib: Move tests_run from forwarding/lib.sh here (Ivan Vecera) [RHEL-78780]
- selftests: net: lib: Move logging from forwarding/lib.sh here (Ivan Vecera) [RHEL-78780]
- selftests: net: include lib/sh/*.sh with lib.sh (Ivan Vecera) [RHEL-78780]
- selftests: mptcp: include net_helper.sh file (Ivan Vecera) [RHEL-78780]
- selftests: mptcp: include lib.sh file (Ivan Vecera) [RHEL-78780]
- selftests: forwarding: lib: Allow passing PID to stop_traffic() (Ivan Vecera) [RHEL-78780]
- selftests: forwarding: Add a fallback cleanup() (Ivan Vecera) [RHEL-78780]
- selftests: net: lib: Introduce deferred commands (Ivan Vecera) [RHEL-78780]
- selftests: forwarding: Convert log_test() to recognize RET values (Ivan Vecera) [RHEL-78780]
- ndo_fdb_del: Add a parameter to report whether notification was sent (Izabela Bakollari) [RHEL-78780]
- ndo_fdb_add: Add a parameter to report whether notification was sent (Izabela Bakollari) [RHEL-78780]
- bonding: assign random address if device address is same as bond (Hangbin Liu) [RHEL-93062]
- ice: Fix deinitializing VF in error path (Petr Oros) [RHEL-87626] {CVE-2025-21883}
- ice: add E830 HW VF mailbox message limit support (Petr Oros) [RHEL-87626]
- perf test stat_all_pmu.sh: Correctly check 'perf stat' result (Michael Petlan) [RHEL-81954]
- perf test: Extra verbosity and hypervisor skip for tpebs test (Michael Petlan) [RHEL-81954]
- perf test: Tag parallel failing shell tests with "(exclusive)" (Michael Petlan) [RHEL-81954]
- perf test: Ignore security failures in all PMU test (Michael Petlan) [RHEL-81954]
Resolves: RHEL-56106, RHEL-73484, RHEL-74335, RHEL-78780, RHEL-81954, RHEL-83435, RHEL-87626, RHEL-87883, RHEL-92761, RHEL-93062, RHEL-93399
Signed-off-by: Jan Stancek <jstancek@redhat.com>
|
||
|---|---|---|
| .gitignore | ||
| check-kabi | ||
| cpupower.config | ||
| cpupower.service | ||
| dracut-virt.conf | ||
| filter-aarch64.sh.rhel | ||
| filter-armv7hl.sh.rhel | ||
| filter-modules.sh.rhel | ||
| filter-ppc64le.sh.rhel | ||
| filter-s390x.sh.rhel | ||
| filter-x86_64.sh.rhel | ||
| gating.yaml | ||
| generate_all_configs.sh | ||
| kernel-aarch64-64k-debug-rhel.config | ||
| kernel-aarch64-64k-rhel.config | ||
| kernel-aarch64-debug-rhel.config | ||
| kernel-aarch64-rhel.config | ||
| kernel-aarch64-rt-64k-debug-rhel.config | ||
| kernel-aarch64-rt-64k-rhel.config | ||
| kernel-aarch64-rt-debug-rhel.config | ||
| kernel-aarch64-rt-rhel.config | ||
| kernel-local | ||
| kernel-ppc64le-debug-rhel.config | ||
| kernel-ppc64le-rhel.config | ||
| kernel-s390x-debug-rhel.config | ||
| kernel-s390x-rhel.config | ||
| kernel-s390x-zfcpdump-rhel.config | ||
| kernel-x86_64-debug-rhel.config | ||
| kernel-x86_64-rhel.config | ||
| kernel-x86_64-rt-debug-rhel.config | ||
| kernel-x86_64-rt-rhel.config | ||
| kernel.changelog | ||
| kernel.spec | ||
| kvm_stat.logrotate | ||
| linux-kernel-test.patch | ||
| Makefile.rhelver | ||
| merge.pl | ||
| mod-denylist.sh | ||
| mod-extra.list.rhel | ||
| mod-internal.list | ||
| mod-partner.list | ||
| mod-sign.sh | ||
| Module.kabi_aarch64 | ||
| Module.kabi_dup_aarch64 | ||
| Module.kabi_dup_ppc64le | ||
| Module.kabi_dup_s390x | ||
| Module.kabi_dup_x86_64 | ||
| Module.kabi_ppc64le | ||
| Module.kabi_s390x | ||
| Module.kabi_x86_64 | ||
| nvidiagpuoot001.x509 | ||
| parallel_xz.sh | ||
| partial-kgcov-snip.config | ||
| patch-5.14-redhat.patch | ||
| process_configs.sh | ||
| README.rst | ||
| rheldup3.x509 | ||
| rhelima_centos.x509 | ||
| rhelima.x509 | ||
| rhelimaca1.x509 | ||
| rhelkpatch1.x509 | ||
| rpminspect.yaml | ||
| sources | ||
| uki_addons.json | ||
| uki_create_addons.py | ||
| update_scripts.sh | ||
| x509.genkey.centos | ||
| x509.genkey.rhel | ||
=================== The Kernel dist-git =================== The kernel is maintained in a `source tree`_ rather than directly in dist-git. The specfile is maintained as a `template`_ in the source tree along with a set of build scripts to generate configurations, (S)RPMs, and to populate the dist-git repository. The `documentation`_ for the source tree covers how to contribute and maintain the tree. If you're looking for the downstream patch set it's available in the source tree with "git log master..ark-patches" or `online`_. Each release in dist-git is tagged in the source repository so you can easily check out the source tree for a build. The tags are in the format name-version-release, but note release doesn't contain the dist tag since the source can be built in different build roots (Fedora, CentOS, etc.) .. _source tree: https://gitlab.com/cki-project/kernel-ark.git .. _template: https://gitlab.com/cki-project/kernel-ark/-/blob/os-build/redhat/kernel.spec.template .. _documentation: https://gitlab.com/cki-project/kernel-ark/-/wikis/home .. _online: https://gitlab.com/cki-project/kernel-ark/-/commits/ark-patches