The Linux kernel
7acd5d2710
* Fri Sep 26 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-620.el9]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107304] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107304] {CVE-2025-38498}
- selftests: netfilter: skip br_netfilter queue tests if kernel is tainted (Waiman Long) [RHEL-107520]
- fhandle: do_handle_open() should get FD with user flags (Waiman Long) [RHEL-107520]
- Documentation/sysctl: coredump: add %%F for pidfd number (Waiman Long) [RHEL-107520]
- pidfs: never refuse ppid == 0 in PIDFD_GET_INFO (Waiman Long) [RHEL-107520]
- fs/fhandle.c: fix a race in call of has_locked_children() (Waiman Long) [RHEL-107520] {CVE-2025-38306}
- coredump: hand a pidfd to the usermode coredump helper (Waiman Long) [RHEL-107520]
- coredump: fix error handling for replace_fd() (Waiman Long) [RHEL-107520]
- pidfs: move O_RDWR into pidfs_alloc_file() (Waiman Long) [RHEL-107520]
- pidfs/selftests: ensure correct headers for ioctl handling (Waiman Long) [RHEL-107520]
- selftests/pidfd: fix header inclusion (Waiman Long) [RHEL-107520]
- pidfs: improve ioctl handling (Waiman Long) [RHEL-107520]
- selftests: remove unneeded include (Waiman Long) [RHEL-107520]
- pidfs: allow bind-mounts (Waiman Long) [RHEL-107520]
- pidfs: lookup pid through rbtree (Waiman Long) [RHEL-107520]
- pidfs: check for valid ioctl commands (Waiman Long) [RHEL-107520]
- pidfs: implement file handle support (Waiman Long) [RHEL-107520]
- exportfs: add permission method (Waiman Long) [RHEL-107520]
- fhandle: pull CAP_DAC_READ_SEARCH check into may_decode_fh() (Waiman Long) [RHEL-107520]
- exportfs: add open method (Waiman Long) [RHEL-107520]
- fhandle: simplify error handling (Waiman Long) [RHEL-107520]
- pseudofs: add support for export_ops (Waiman Long) [RHEL-107520]
- pidfs: support FS_IOC_GETVERSION (Waiman Long) [RHEL-107520]
- pidfs: remove 32bit inode number handling (Waiman Long) [RHEL-107520]
- pidfs: rework inode number allocation (Waiman Long) [RHEL-107520]
- fs: fix is_mnt_ns_file() (Waiman Long) [RHEL-107520]
- pidfd: add ioctl to retrieve pid info (Waiman Long) [RHEL-107520]
- pidfs: check for valid pid namespace (Waiman Long) [RHEL-107520]
- rbtree: provide rb_find_rcu() / rb_find_add_rcu() (Waiman Long) [RHEL-107520]
- file: add fput() cleanup helper (Waiman Long) [RHEL-107520]
- libfs: fix get_stashed_dentry() (Waiman Long) [RHEL-107520] {CVE-2024-46801}
- pidfs: add selftests for new namespace ioctls (Waiman Long) [RHEL-107520]
- pidfs: handle kernels without namespaces cleanly (Waiman Long) [RHEL-107520]
- pidfs: when time ns disabled add check for ioctl (Waiman Long) [RHEL-107520]
- pidfs: allow retrieval of namespace file descriptors (Waiman Long) [RHEL-107520]
- nsfs: add open_namespace() (Waiman Long) [RHEL-107520]
- nsproxy: add helper to go from arbitrary namespace to ns_common (Waiman Long) [RHEL-107520]
- nsproxy: add a cleanup helper for nsproxy (Waiman Long) [RHEL-107520]
- file: add take_fd() cleanup helper (Waiman Long) [RHEL-107520]
- path: add cleanup helper (Waiman Long) [RHEL-107520]
- fhandle: relax open_by_handle_at() permission checks (Waiman Long) [RHEL-107520]
- fs/pidfs: make 'lsof' happy with our inode changes (Waiman Long) [RHEL-107520]
- selftests: pidfd: ksft_exit functions do not return (Waiman Long) [RHEL-107520]
- fs: Annotate struct file_handle with __counted_by() and use struct_size() (Waiman Long) [RHEL-107520]
- selftests/pidfd: Fix wrong expectation (Waiman Long) [RHEL-107520]
- selftests/pidfd: Fix config for pidfd_setns_test (Waiman Long) [RHEL-107520]
- pidfs: remove config option (Waiman Long) [RHEL-107520]
- libfs: improve path_from_stashed() (Waiman Long) [RHEL-107520]
- libfs: add stashed_dentry_prune() (Waiman Long) [RHEL-107520]
- libfs: improve path_from_stashed() helper (Waiman Long) [RHEL-107520]
- pidfs: convert to path_from_stashed() helper (Waiman Long) [RHEL-107520]
- nsfs: convert to path_from_stashed() helper (Waiman Long) [RHEL-107520]
- libfs: add path_from_stashed() (Waiman Long) [RHEL-107520]
- pidfd: add pidfs (Waiman Long) [RHEL-107520]
- pidfd: move struct pidfd_fops (Waiman Long) [RHEL-107520]
- pidfd: allow to override signal scope in pidfd_send_signal() (Waiman Long) [RHEL-107520]
- pidfd: change pidfd_send_signal() to respect PIDFD_THREAD (Waiman Long) [RHEL-107520]
- signal: fill in si_code in prepare_kill_siginfo() (Waiman Long) [RHEL-107520]
- selftests: add ESRCH tests for pidfd_getfd() (Waiman Long) [RHEL-107520]
- pidfd: getfd should always report ESRCH if a task is exiting (Waiman Long) [RHEL-107520]
- pidfd: clone: allow CLONE_THREAD | CLONE_PIDFD together (Waiman Long) [RHEL-107520]
- pidfd: change do_notify_pidfd() to use __wake_up(poll_to_key(EPOLLIN)) (Waiman Long) [RHEL-107520]
- pid: kill the obsolete PIDTYPE_PID code in transfer_pid() (Waiman Long) [RHEL-107520]
- pidfd: kill the no longer needed do_notify_pidfd() in de_thread() (Waiman Long) [RHEL-107520]
- pidfd_poll: report POLLHUP when pid_task() == NULL (Waiman Long) [RHEL-107520]
- pidfd: implement PIDFD_THREAD flag for pidfd_open() (Waiman Long) [RHEL-107520]
- pidfd: don't do_notify_pidfd() if !thread_group_empty() (Waiman Long) [RHEL-107520]
- pidfd: cleanup the usage of __pidfd_prepare's flags (Waiman Long) [RHEL-107520]
- fork: Using clone_flags for legacy clone check (Waiman Long) [RHEL-107520]
- __kill_pgrp_info: simplify the calculation of return value (Waiman Long) [RHEL-107520]
- selftests/pidfd: Fix ksft print formats (Waiman Long) [RHEL-107520]
- fs: convert core infrastructure to new timestamp accessors (Waiman Long) [RHEL-107520]
- fs: new accessor methods for atime and mtime (Waiman Long) [RHEL-107520]
- nsproxy: Convert nsproxy.count to refcount_t (Waiman Long) [RHEL-107520]
- kernfs: convert to ctime accessor functions (Waiman Long) [RHEL-107520]
- selftest: pidfd: Omit long and repeating outputs (Waiman Long) [RHEL-107520]
- convert setns(2) to fdget()/fdput() (Waiman Long) [RHEL-107520]
- fs: consolidate duplicate dt_type helpers (Waiman Long) [RHEL-107520]
- Update relatime comments to include equality (Waiman Long) [RHEL-107520]
- fork: use pidfd_prepare() (Waiman Long) [RHEL-107520]
- pid: add pidfd_prepare() (Waiman Long) [RHEL-107520]
- fork: allow CLONE_NEWTIME in clone3 flags (Waiman Long) [RHEL-107520]
- selftests: pidfd: Fix incorrect kernel headers search path (Waiman Long) [RHEL-107520]
- core_pattern: add CPU specifier (Waiman Long) [RHEL-107520]
- selftests/pidfd_test: Remove the erroneous ',' (Waiman Long) [RHEL-107520]
- selftests: pidfd: Fix compling warnings (Waiman Long) [RHEL-107520]
- ksefltests: pidfd: Fix wait_states: Test terminated by timeout (Waiman Long) [RHEL-107520]
- fork: remove duplicate included header files (Waiman Long) [RHEL-107520]
- signal: Drop signals received after a fatal signal has been processed (Waiman Long) [RHEL-107520]
- signal: Guarantee that SIGNAL_GROUP_EXIT is set on process exit (Waiman Long) [RHEL-107520]
- signal: Ensure SIGNAL_GROUP_EXIT gets set in do_group_exit (Waiman Long) [RHEL-107520]
- dynamic_dname(): drop unused dentry argument (Waiman Long) [RHEL-107520]
- fork: Explicitly set PF_KTHREAD (Waiman Long) [RHEL-107520]
- selftests: fix an unused variable warning in pidfd selftest (Waiman Long) [RHEL-107520]
- selftests: fixup build warnings in pidfd / clone3 tests (Waiman Long) [RHEL-107520]
- pidfd: fix test failure due to stack overflow on some arches (Waiman Long) [RHEL-107520]
- kernel/fork.c: unshare(): use swap() to make code cleaner (Waiman Long) [RHEL-107520]
- kernel/fork.c: unexport get_{mm,task}_exe_file (Waiman Long) [RHEL-107520]
- kernel/pid.c: implement additional checks upon pidfd_create() parameters (Waiman Long) [RHEL-107520]
- arm64: debug: remove debug exception registration infrastructure (Luis Claudio R. Goncalves) [RHEL-65658]
- trap: cleanup trap_init() (Luis Claudio R. Goncalves) [RHEL-65658]
- arm64: debug: split bkpt32 exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
- arm64: debug: split brk64 exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
- arm64: debug: split hardware watchpoint exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
- arm64: debug: split single stepping exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
- arm64: debug: refactor reinstall_suspended_bps() (Luis Claudio R. Goncalves) [RHEL-65658]
- arm64: debug: split hardware breakpoint exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
- arm64: entry: Add entry and exit functions for debug exceptions (Luis Claudio R. Goncalves) [RHEL-65658]
- arm64: debug: remove break/step handler registration infrastructure (Luis Claudio R. Goncalves) [RHEL-65658]
- arm64: debug: call step handlers statically (Luis Claudio R. Goncalves) [RHEL-65658]
- arm64: debug: call software breakpoint handlers statically (Luis Claudio R. Goncalves) [RHEL-65658]
- arm64: kretprobes: acquire the regs via a BRK exception (Luis Claudio R. Goncalves) [RHEL-65658]
- arm64: kprobes: Return DBG_HOOK_ERROR if kprobes can not handle a BRK (Luis Claudio R. Goncalves) [RHEL-65658]
- arm64: Return early when break handler is found on linked-list (Luis Claudio R. Goncalves) [RHEL-65658]
- arm64: refactor aarch32_break_handler() (Luis Claudio R. Goncalves) [RHEL-65658]
- arm64: debug: clean up single_step_handler logic (Luis Claudio R. Goncalves) [RHEL-65658]
- arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386 (Jeremy Linton) [RHEL-108306]
- arm64: errata: Expand speculative SSBS workaround once more (Jeremy Linton) [RHEL-108306]
- arm64: errata: Expand speculative SSBS workaround (again) (Jeremy Linton) [RHEL-108306]
- tools headers arm64: Sync arm64's cputype.h with the kernel sources (Jeremy Linton) [RHEL-108306]
- arm64: cputype: Add Neoverse-N3 definitions (Jeremy Linton) [RHEL-108306]
- arm64: cputype: Add Cortex-A725 definitions (Jeremy Linton) [RHEL-108306]
- arm64: cputype: Add Cortex-X1C definitions (Jeremy Linton) [RHEL-108306]
- EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh (Joel Savitz) [RHEL-102251]
Resolves: RHEL-102251, RHEL-107304, RHEL-107520, RHEL-108306, RHEL-65658
Signed-off-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>
|
||
|---|---|---|
| .gitignore | ||
| check-kabi | ||
| cpupower.config | ||
| cpupower.service | ||
| dracut-virt.conf | ||
| filter-aarch64.sh.rhel | ||
| filter-armv7hl.sh.rhel | ||
| filter-modules.sh.rhel | ||
| filter-ppc64le.sh.rhel | ||
| filter-s390x.sh.rhel | ||
| filter-x86_64.sh.rhel | ||
| gating.yaml | ||
| generate_all_configs.sh | ||
| kernel-aarch64-64k-debug-rhel.config | ||
| kernel-aarch64-64k-rhel.config | ||
| kernel-aarch64-debug-rhel.config | ||
| kernel-aarch64-rhel.config | ||
| kernel-aarch64-rt-64k-debug-rhel.config | ||
| kernel-aarch64-rt-64k-rhel.config | ||
| kernel-aarch64-rt-debug-rhel.config | ||
| kernel-aarch64-rt-rhel.config | ||
| kernel-local | ||
| kernel-ppc64le-debug-rhel.config | ||
| kernel-ppc64le-rhel.config | ||
| kernel-s390x-debug-rhel.config | ||
| kernel-s390x-rhel.config | ||
| kernel-s390x-zfcpdump-rhel.config | ||
| kernel-x86_64-debug-rhel.config | ||
| kernel-x86_64-rhel.config | ||
| kernel-x86_64-rt-debug-rhel.config | ||
| kernel-x86_64-rt-rhel.config | ||
| kernel.changelog | ||
| kernel.spec | ||
| kvm_stat.logrotate | ||
| linux-kernel-test.patch | ||
| Makefile.rhelver | ||
| merge.pl | ||
| mod-denylist.sh | ||
| mod-extra.list.rhel | ||
| mod-internal.list | ||
| mod-partner.list | ||
| mod-sign.sh | ||
| Module.kabi_aarch64 | ||
| Module.kabi_dup_aarch64 | ||
| Module.kabi_dup_ppc64le | ||
| Module.kabi_dup_s390x | ||
| Module.kabi_dup_x86_64 | ||
| Module.kabi_ppc64le | ||
| Module.kabi_s390x | ||
| Module.kabi_x86_64 | ||
| nvidiagpuoot001.x509 | ||
| parallel_xz.sh | ||
| partial-kgcov-snip.config | ||
| patch-5.14-redhat.patch | ||
| process_configs.sh | ||
| README.rst | ||
| rheldup3.x509 | ||
| rhelima_centos.x509 | ||
| rhelima.x509 | ||
| rhelimaca1.x509 | ||
| rhelkpatch1.x509 | ||
| rpminspect.yaml | ||
| sources | ||
| uki_addons.json | ||
| uki_create_addons.py | ||
| update_scripts.sh | ||
| x509.genkey.centos | ||
| x509.genkey.rhel | ||
=================== The Kernel dist-git =================== The kernel is maintained in a `source tree`_ rather than directly in dist-git. The specfile is maintained as a `template`_ in the source tree along with a set of build scripts to generate configurations, (S)RPMs, and to populate the dist-git repository. The `documentation`_ for the source tree covers how to contribute and maintain the tree. If you're looking for the downstream patch set it's available in the source tree with "git log master..ark-patches" or `online`_. Each release in dist-git is tagged in the source repository so you can easily check out the source tree for a build. The tags are in the format name-version-release, but note release doesn't contain the dist tag since the source can be built in different build roots (Fedora, CentOS, etc.) .. _source tree: https://gitlab.com/cki-project/kernel-ark.git .. _template: https://gitlab.com/cki-project/kernel-ark/-/blob/os-build/redhat/kernel.spec.template .. _documentation: https://gitlab.com/cki-project/kernel-ark/-/wikis/home .. _online: https://gitlab.com/cki-project/kernel-ark/-/commits/ark-patches