9d01dd9ee3
* Fri Jun 26 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-243.el10]
- redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-178260]
- nvme: make nvme_add_ns{_head}_cdev return void (Utkarsh Singh) [RHEL-186079]
- nvme: fix crash and memory leak during invalid cdev teardown (Utkarsh Singh) [RHEL-186079]
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-185104]
- KVM: s390: Increase permitted SE header size to 1 MiB (Ramesh Chhetri) [RHEL-185661]
- net/sched: fix pedit partial COW leading to page cache corruption (CKI Backport Bot) [RHEL-177381] {CVE-2026-46331}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-176465]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-176465]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-176465]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-176465] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-176465]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-176465]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-176465]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-176465]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180700] {CVE-2026-31530}
- s390/uv: Fix comment of uv_find_secret() function (Mircea Dragan) [RHEL-136440]
- s390/zcrypt: Fix memory leak with CCA cards used as accelerator (Mircea Dragan) [RHEL-136440]
- crypto: s390/paes - Refuse clear key material by default (Mircea Dragan) [RHEL-136440]
- s390/pkey: Support new xflag PKEY_XFLAG_NOCLEARKEY (Mircea Dragan) [RHEL-136440]
- crypto: skcipher - Add new helper function crypto_skcipher_tested (Mircea Dragan) [RHEL-136440]
- s390/crypto: Select crypto engine in Kconfig when PAES is chosen (Mircea Dragan) [RHEL-136440]
- s390/crypto: Extend protected key conversion retry loop (Mircea Dragan) [RHEL-136440]
- s390/crypto: Rework protected key AES for true asynch support (Mircea Dragan) [RHEL-136440]
- s390/cpacf: Rework cpacf_pcc() to return condition code (Mircea Dragan) [RHEL-136440]
- s390/pkey/crypto: Introduce xflags param for pkey in-kernel API (Mircea Dragan) [RHEL-136440]
- s390/pkey: Provide and pass xflags within pkey and zcrypt layers (Mircea Dragan) [RHEL-136440]
- s390/uv: Remove uv_get_secret_metadata function (Mircea Dragan) [RHEL-136440]
- s390/pkey: Use preallocated memory for retrieve of UV secret metadata (Mircea Dragan) [RHEL-136440]
- s390/pkey: Rework EP11 pkey handler to use stack for small memory allocs (Mircea Dragan) [RHEL-136440]
- s390/pkey: Rework CCA pkey handler to use stack for small memory allocs (Mircea Dragan) [RHEL-136440]
- s390/zcrypt: Rework ep11 misc functions to use cprb mempool (Mircea Dragan) [RHEL-136440]
- s390/zcrypt: Locate ep11_domain_query_info onto the stack instead of kmalloc (Mircea Dragan) [RHEL-136440]
- s390/zcrypt: Propagate xflags argument with cca_get_info() (Mircea Dragan) [RHEL-136440]
- s390/zcrypt: Rework cca misc functions kmallocs to use the cprb mempool (Mircea Dragan) [RHEL-136440]
- s390/zcrypt: Rework ep11 findcard() implementation and callers (Mircea Dragan) [RHEL-136440]
- s390/zcrypt: Rework cca findcard() implementation and callers (Mircea Dragan) [RHEL-136440]
- s390/zcrypt: Remove CCA and EP11 card and domain info caches (Mircea Dragan) [RHEL-136440]
- s390/zcrypt: Remove unused functions from cca misc (Mircea Dragan) [RHEL-136440]
- s390/zcrypt: Introduce pre-allocated device status array for ep11 misc (Mircea Dragan) [RHEL-136440]
- s390/zcrypt: Introduce pre-allocated device status array for cca misc (Mircea Dragan) [RHEL-136440]
- s390/zcrypt: Rework zcrypt function zcrypt_device_status_mask_ext (Mircea Dragan) [RHEL-136440]
- s390/zcrypt: Introduce cprb mempool for ep11 misc functions (Mircea Dragan) [RHEL-136440]
- s390/zcrypt: Introduce cprb mempool for cca misc functions (Mircea Dragan) [RHEL-136440]
- s390/ap/zcrypt: New xflag parameter (Mircea Dragan) [RHEL-136440]
- s390/zcrypt: Avoid alloc and copy of ep11 targets if kernelspace cprb (Mircea Dragan) [RHEL-136440]
- s390/ap: Introduce ap message buffer pool (Mircea Dragan) [RHEL-136440]
- s390/ap/zcrypt: Rework AP message buffer allocation (Mircea Dragan) [RHEL-136440]
- s390/ap: Move response_type struct into ap_msg struct (Mircea Dragan) [RHEL-136440]
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179311] {CVE-2026-46090}
- KVM: s390: vsie: Allow non-zarch guests (Mircea Dragan) [RHEL-136477]
- KVM: s390: Add KVM capability for ESA mode guests (Mircea Dragan) [RHEL-136477]
- KVM: s390: Add capability that forwards operation exceptions (Mircea Dragan) [RHEL-136477]
- KVM: s390: vsie: Accommodate ESA prefix pages (Mircea Dragan) [RHEL-136477]
- KVM: s390: vsie: Disable some bits when in ESA mode (Mircea Dragan) [RHEL-136477]
- KVM: s390: only deliver service interrupt with payload (Mircea Dragan) [RHEL-136477]
- KVM: s390: vsie: retry SIE when unable to get vsie_page (Mircea Dragan) [RHEL-136477]
- KVM: s390: vsie: Check alignment of BSCA header (Mircea Dragan) [RHEL-136477]
- rhashtable: Fix rhashtable_try_insert test (Herton R. Krzesinski) [RHEL-115002]
- rhashtable: Fix potential deadlock by moving schedule_work outside lock (Herton R. Krzesinski) [RHEL-115002]
Resolves: RHEL-115002, RHEL-136440, RHEL-136477, RHEL-176465, RHEL-177381, RHEL-178260, RHEL-179311, RHEL-180700, RHEL-185104, RHEL-185661, RHEL-186079
Signed-off-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>
45 lines
1.1 KiB
Makefile
45 lines
1.1 KiB
Makefile
RHEL_MAJOR = 10
|
|
RHEL_MINOR = 3
|
|
|
|
#
|
|
# RHEL_RELEASE
|
|
# -------------
|
|
#
|
|
# Represents build number in 'release' part of RPM's name-version-release.
|
|
# name is <package_name>, e.g. kernel
|
|
# version is upstream kernel version this kernel is based on, e.g. 4.18.0
|
|
# release is <RHEL_RELEASE>.<dist_tag>[<buildid>], e.g. 100.el8
|
|
#
|
|
# Use this spot to avoid future merge conflicts.
|
|
# Do not trim this comment.
|
|
RHEL_RELEASE = 243
|
|
|
|
#
|
|
# RHEL_REBASE_NUM
|
|
# ----------------
|
|
#
|
|
# Used in RPM version string for Gemini kernels, which dont use upstream
|
|
# VERSION/PATCHLEVEL/SUBLEVEL. The number represents rebase number for
|
|
# current MAJOR release.
|
|
#
|
|
# Use this spot to avoid future merge conflicts.
|
|
# Do not trim this comment.
|
|
RHEL_REBASE_NUM = 1
|
|
|
|
#
|
|
# Automotive
|
|
# ----------
|
|
#
|
|
# Represents the major and minor release used by automotive.
|
|
# Primarily this is used to to identify the build target when
|
|
# building the automotive kernel package.
|
|
AUTOMOTIVE_MAJOR = 2
|
|
AUTOMOTIVE_MINOR = 1
|
|
|
|
#
|
|
# DERIVATIVE_BUILD
|
|
# ---------------------------
|
|
#
|
|
# Set DERIVATIVE_STREAM to "yes" to enable derivative kernel versioning.
|
|
DERIVATIVE_BUILD = 0
|