The Linux kernel
* Thu Apr 17 2025 Augusto Caringi <acaringi@redhat.com> [5.14.0-580.el9]
- pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CKI Backport Bot) [RHEL-80054] {CVE-2025-21702}
- netfilter: nft_exthdr: fix offset with ipv4_find_option() (Florian Westphal) [RHEL-84577]
- netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (Florian Westphal) [RHEL-84577]
- netfilter: nf_tables: make destruction work queue pernet (Florian Westphal) [RHEL-84577]
- netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template. (Florian Westphal) [RHEL-84577]
- netfilter: nft_flow_offload: update tcp state flags under lock (Florian Westphal) [RHEL-84577]
- netfilter: nft_flow_offload: clear tcp MAXACK flag before moving to slowpath (Florian Westphal) [RHEL-84577]
- bonding: fix incorrect MAC address setting to receive NS messages (Hangbin Liu) [RHEL-84574]
- bonding: report duplicate MAC address in all situations (Hangbin Liu) [RHEL-84574]
- bonding: delete always true device check (Hangbin Liu) [RHEL-84574]
- bonding: add ns target multicast address to slave device (Hangbin Liu) [RHEL-84574]
- bonding: Pass string literal as format argument of alloc_ordered_workqueue() (Hangbin Liu) [RHEL-84574]
- scsi: lpfc: Fix spelling mistake 'Toplogy' -> 'Topology' (Dick Kennedy) [RHEL-82146]
- scsi: lpfc: Copyright updates for 14.4.0.8 patches (Dick Kennedy) [RHEL-82146]
- scsi: lpfc: Update lpfc version to 14.4.0.8 (Dick Kennedy) [RHEL-82146]
- scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Dick Kennedy) [RHEL-82146]
- scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Dick Kennedy) [RHEL-82146]
- scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails (Dick Kennedy) [RHEL-82146]
- scsi: lpfc: Reduce log message generation during ELS ring clean up (Dick Kennedy) [RHEL-82146]
- scsi: lpfc: Copyright updates for 14.4.0.7 patches (Dick Kennedy) [RHEL-82146]
- scsi: lpfc: Update lpfc version to 14.4.0.7 (Dick Kennedy) [RHEL-82146]
- scsi: lpfc: Add support for large fw object application layer reads (Dick Kennedy) [RHEL-82146]
- scsi: lpfc: Update definition of firmware configuration mbox cmds (Dick Kennedy) [RHEL-82146]
- scsi: lpfc: Change lpfc_nodelist save_flags member into a bitmask (Dick Kennedy) [RHEL-82146]
- scsi: lpfc: Add handling for LS_RJT reason explanation authentication required (Dick Kennedy) [RHEL-82146]
- scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Dick Kennedy) [RHEL-82146]
- scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Dick Kennedy) [RHEL-82146]
- scsi: lpfc: Restrict the REG_FCFI MAM field to FCoE adapters only (Dick Kennedy) [RHEL-82146]
- scsi: lpfc: Redefine incorrect type in lpfc_create_device_data() (Dick Kennedy) [RHEL-82146]
- selftests: net: local_termination: require mausezahn (Hangbin Liu) [RHEL-84591]
- selftests: forwarding: add a pvid_change test to bridge_vlan_unaware (Hangbin Liu) [RHEL-84591]
- selftests: tls: add a selftest for wrapping rec_seq (Hangbin Liu) [RHEL-84591]
- selftests: fib_rule_tests: Test TOS matching with input routes (Hangbin Liu) [RHEL-84591]
- selftests: fib_rule_tests: Add negative connect tests (Hangbin Liu) [RHEL-84591]
- selftests: fib_rule_tests: Add negative match tests (Hangbin Liu) [RHEL-84591]
- selftests: fib_rule_tests: Clarify test results (Hangbin Liu) [RHEL-84591]
- selftests: fib_rule_tests: Remove unused functions (Hangbin Liu) [RHEL-84591]
- selftests: make order checking verbose in msg_zerocopy selftest (Hangbin Liu) [RHEL-84591]
- selftests: fix OOM in msg_zerocopy selftest (Hangbin Liu) [RHEL-84591]
- selftests: fib_rule_tests: Add VRF tests (Hangbin Liu) [RHEL-84591]
- vxlan: check vxlan_vnigroup_init() return value (CKI Backport Bot) [RHEL-81516] {CVE-2025-21790}
- media: mc: fix endpoint iteration (Kate Hsuan) [RHEL-77308]
- media: fix secfeed undefined when filter alloc fail (Kate Hsuan) [RHEL-77308]
- media: docs: Remove extraneous \endgroup from P010 table (Kate Hsuan) [RHEL-77308]
- media: Fix building pdfdocs (Kate Hsuan) [RHEL-77308]
- media: Documentation: mc: Replace deprecated graph walk API (Kate Hsuan) [RHEL-77308]
- media: v4l2-mc: Mark v4l2_pipeline_link_notify() as deprecated (Kate Hsuan) [RHEL-77308]
- media: videobuf2: Drop minimum allocation requirement of 2 buffers (Kate Hsuan) [RHEL-77308]
- media: cec.h: Fix kerneldoc (Kate Hsuan) [RHEL-77308]
- ipv6: use RCU protection in ip6_default_advmss() (Guillaume Nault) [RHEL-81568] {CVE-2025-21765}
- net: add dev_net_rcu() helper (Guillaume Nault) [RHEL-81568] {CVE-2025-21765}
- iomap: elide flush from partial eof zero range (Brian Foster) [RHEL-7901]
- iomap: lift zeroed mapping handling into iomap_zero_range() (Brian Foster) [RHEL-7901]
- iomap: reset per-iter state on non-error iter advances (Brian Foster) [RHEL-7901]
- iomap: make zero range flush conditional on unwritten mappings (Brian Foster) [RHEL-7901]
- iomap: fix handling of dirty folios over unwritten extents (Brian Foster) [RHEL-7901]
- ima: Fix potential memory leak in ima_init_crypto() (CKI Backport Bot) [RHEL-80844] {CVE-2022-49627}
- dm-crypt: Document integrity_key_size option. (Benjamin Marzinski) [RHEL-84906]
- dm zoned: dynamically allocate the dm-zoned-meta shrinker (Benjamin Marzinski) [RHEL-84906]
- dm: dynamically allocate the dm-bufio shrinker (Benjamin Marzinski) [RHEL-84906]
- dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (Benjamin Marzinski) [RHEL-84906]
- dm-integrity: Do not emit journal configuration in DM table for Inline mode (Benjamin Marzinski) [RHEL-84906]
- dm-integrity: Avoid divide by zero in table status in Inline mode (Benjamin Marzinski) [RHEL-84906]
- dm-crypt: track tag_offset in convert_context (Benjamin Marzinski) [RHEL-84906]
- dm-crypt: don't initialize cc_sector again (Benjamin Marzinski) [RHEL-84906]
- dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit() (Benjamin Marzinski) [RHEL-84906]
- dm-crypt: use bi_sector in bio when initialize integrity seed (Benjamin Marzinski) [RHEL-84906]
- dm-crypt: fully initialize clone->bi_iter in crypt_alloc_buffer() (Benjamin Marzinski) [RHEL-84906]
- dm-crypt: set atomic as false when calling crypt_convert() in kworker (Benjamin Marzinski) [RHEL-84906]
- dm-mirror: Support atomic writes (Benjamin Marzinski) [RHEL-84906]
- dm-io: Warn on creating multiple atomic write bios for a region (Benjamin Marzinski) [RHEL-84906]
- dm-stripe: Enable atomic writes (Benjamin Marzinski) [RHEL-84906]
- dm-linear: Enable atomic writes (Benjamin Marzinski) [RHEL-84906]
- dm: Ensure cloned bio is same length for atomic write (Benjamin Marzinski) [RHEL-84906]
- dm-table: atomic writes support (Benjamin Marzinski) [RHEL-84906]
- dm-transaction-manager: use red-black trees instead of linear lists (Benjamin Marzinski) [RHEL-84906]
- dm: disable REQ_NOWAIT for flushes (Benjamin Marzinski) [RHEL-84906]
- dm: remove useless test in alloc_multiple_bios (Benjamin Marzinski) [RHEL-84906]
- dm: change kzalloc to kcalloc (Benjamin Marzinski) [RHEL-84906]
- dm raid: fix spelling errors in raid_ctr() (Benjamin Marzinski) [RHEL-84906]
- dm thin: make get_first_thin use rcu-safe list first function (Benjamin Marzinski) [RHEL-84906]
- dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY (Benjamin Marzinski) [RHEL-84906]
- dm-verity FEC: Avoid copying RS parity bytes twice. (Benjamin Marzinski) [RHEL-84906]
- dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2) (Benjamin Marzinski) [RHEL-84906]
- dm array: fix cursor index when skipping across block boundaries (Benjamin Marzinski) [RHEL-84906]
- dm array: fix unreleased btree blocks on closing a faulty array cursor (Benjamin Marzinski) [RHEL-84906]
- dm-verity: remove the unused "data_start" variable (Benjamin Marzinski) [RHEL-84906]
- dm-bufio: use kmalloc to allocate power-of-two sized buffers (Benjamin Marzinski) [RHEL-84906]
- dm thin: Add missing destroy_work_on_stack() (Benjamin Marzinski) [RHEL-84906]
- dm: add support for get_unique_id (Benjamin Marzinski) [RHEL-84906]
- dm: Fix typo in error message (Benjamin Marzinski) [RHEL-84906]
- dm ioctl: rate limit a couple of ioctl based error messages (Benjamin Marzinski) [RHEL-84906]
- dm: zoned: Remove unused functions (Benjamin Marzinski) [RHEL-84906]
- dm: Remove unused dm_table_bio_based (Benjamin Marzinski) [RHEL-84906]
- dm: Remove unused dm_set_md_type (Benjamin Marzinski) [RHEL-84906]
- dm cache: Remove unused functions in bio-prison-v1 (Benjamin Marzinski) [RHEL-84906]
- dm cache: Remove unused dm_cache_size (Benjamin Marzinski) [RHEL-84906]
- dm cache: Remove unused dm_cache_dump (Benjamin Marzinski) [RHEL-84906]
- dm cache: Remove unused btracker_nr_writebacks_queued (Benjamin Marzinski) [RHEL-84906]
- dm-cache: fix warnings about duplicate slab caches (Benjamin Marzinski) [RHEL-84906]
- dm-bufio: fix warnings about duplicate slab caches (Benjamin Marzinski) [RHEL-84906]
- dm verity: fallback to platform keyring also if key in trusted keyring is rejected (Benjamin Marzinski) [RHEL-84906]
- dm: fix spelling errors (Benjamin Marzinski) [RHEL-84906]
- dm-cache: remove pointless error check (Benjamin Marzinski) [RHEL-84906]
- dm-crypt: Use common error handling code in crypt_set_keyring_key() (Benjamin Marzinski) [RHEL-84906]
- dm-crypt: Use up_read() together with key_put() only once in crypt_set_keyring_key() (Benjamin Marzinski) [RHEL-84906]
- dm-integrity: check mac_size against HASH_MAX_DIGESTSIZE in sb_mac() (Benjamin Marzinski) [RHEL-84906]
- dm-integrity: support recalculation in the 'I' mode (Benjamin Marzinski) [RHEL-40616]
- dm integrity: Convert comma to semicolon (Benjamin Marzinski) [RHEL-84906]
- dm: Make use of __assign_bit() API (Benjamin Marzinski) [RHEL-84906]
- dm integrity: Remove extra unlikely helper (Benjamin Marzinski) [RHEL-84906]
- dm: Convert to use ERR_CAST() (Benjamin Marzinski) [RHEL-84906]
- dm bufio: Remove NULL check of list_entry() (Benjamin Marzinski) [RHEL-84906]
- dm-crypt: Allow to specify the integrity key size as option (Benjamin Marzinski) [RHEL-84906]
- dm: Remove unused declaration and empty definition "dm_zone_map_bio" (Benjamin Marzinski) [RHEL-84906]
- dm delay: enhance kernel documentation (Benjamin Marzinski) [RHEL-84906]
- dm: Remove unused declaration dm_get_rq_mapinfo() (Benjamin Marzinski) [RHEL-84906]
- platform/x86/intel/pmc: Remove unneeded extern keyword in header (David Arcari) [RHEL-20138]
- platform/x86/intel/pmc: Remove unnecessary declarations in header (David Arcari) [RHEL-20138]
- platform/x86/intel/pmc: Add Panther Lake support to intel_pmc_core (David Arcari) [RHEL-20138]
- platform/x86:intel/pmc: Move arch specific action to init function (David Arcari) [RHEL-20138]
- platform/x86/intel/pmc: Add Arrow Lake U/H support to intel_pmc_core driver (David Arcari) [RHEL-20138]
- platform/x86/intel/pmc: Remove simple init functions (David Arcari) [RHEL-20138]
- platform/x86:intel/pmc: Create generic_core_init() for all platforms (David Arcari) [RHEL-20138]
- platform/x86/intel/pmc: Remove duplicate enum (David Arcari) [RHEL-20138]
- platform/x86:intel/pmc: Make tgl_core_generic_init() static (David Arcari) [RHEL-20138]
- net: fix NULL pointer dereference in l3mdev_l3_rcv (Davide Caratti) [RHEL-84583]
- ipvlan: ensure network headers are in skb linear part (Davide Caratti) [RHEL-84583] {CVE-2025-21891}
- vxlan: Fix uninit-value in vxlan_vnifilter_dump() (Guillaume Nault) [RHEL-84588]
- redhat/configs: Enable CONFIG_PROVE_RAW_LOCK_NESTING for debug kernel (Waiman Long) [RHEL-80386]
- locking/lockdep: Enforce PROVE_RAW_LOCK_NESTING only if ARCH_SUPPORTS_RT (Waiman Long) [RHEL-80386]
- lockdep: Enable PROVE_RAW_LOCK_NESTING with PROVE_LOCKING. (Waiman Long) [RHEL-80386]
- mpls: Handle error of rtnl_register_module(). (Guillaume Nault) [RHEL-85646]
- ppp: Fix KMSAN uninit-value warning with bpf (Guillaume Nault) [RHEL-85638]
- vfio/pci: Handle INTx IRQ_NOTCONNECTED (Alex Williamson) [RHEL-45755 RHEL-85593]
- vfio/type1: Use mapping page mask for pfnmaps (Alex Williamson) [RHEL-85593]
- mm: Provide address mask in struct follow_pfnmap_args (Alex Williamson) [RHEL-85593]
- vfio/type1: Use consistent types for page counts (Alex Williamson) [RHEL-85593]
- vfio/type1: Use vfio_batch for vaddr_get_pfns() (Alex Williamson) [RHEL-85593]
- vfio/type1: Convert all vaddr_get_pfns() callers to use vfio_batch (Alex Williamson) [RHEL-85593]
- vfio/type1: Catch zero from pin_user_pages_remote() (Alex Williamson) [RHEL-85593]
- vfio/pci: match IGD devices in display controller class (Alex Williamson) [RHEL-85593]
- vfio/nvgrace-gpu: Add GB200 SKU to the devid table (Alex Williamson) [RHEL-85593]
- vfio/nvgrace-gpu: Check the HBM training and C2C link status (Alex Williamson) [RHEL-85593]
- vfio/nvgrace-gpu: Expose the blackwell device PF BAR1 to the VM (Alex Williamson) [RHEL-85593]
- vfio/nvgrace-gpu: Read dvsec register to determine need for uncached resmem (Alex Williamson) [RHEL-85593]
- vfio/platform: check the bounds of read/write syscalls (Alex Williamson) [RHEL-85593]
- vfio/pci: Expose setup ROM at ROM bar when needed (Alex Williamson) [RHEL-85593]
- vfio/pci: Remove shadow ROM specific code paths (Alex Williamson) [RHEL-85593]
- vfio/pci: Remove #ifdef iowrite64 and #ifdef ioread64 (Alex Williamson) [RHEL-85593]
- vfio/pci: Enable iowrite64 and ioread64 for vfio pci (Alex Williamson) [RHEL-85593]
- vfio/nvgrace-gpu: Add a new GH200 SKU to the devid table (Alex Williamson) [RHEL-85593]
- kvm/vfio: Constify struct kvm_device_ops (Alex Williamson) [RHEL-85593]
- vfio/qat: fix overflow check in qat_vf_resume_write() (Alex Williamson) [RHEL-85593]
- redhat/configs: Disable CONFIG_QAT_VFIO_PCI (Alex Williamson) [RHEL-85593]
- vfio/qat: Add vfio_pci driver for Intel QAT SR-IOV VF devices (Alex Williamson) [RHEL-85593]
- redhat/configs: disable CONFIG_DRM_WERROR (Eric Chanudet) [RHEL-82507]
- Revert "nvme_core: scan namespaces asynchronously" (John Meneghini) [RHEL-84361]
Resolves: RHEL-20138, RHEL-40616, RHEL-45755, RHEL-77308, RHEL-7901, RHEL-80054, RHEL-80386, RHEL-80844, RHEL-81516, RHEL-81568, RHEL-82146, RHEL-82507, RHEL-84574, RHEL-84577, RHEL-84583, RHEL-84588, RHEL-84591, RHEL-84906, RHEL-85593, RHEL-85638, RHEL-85646
Signed-off-by: Augusto Caringi <acaringi@redhat.com>
|
||
|---|---|---|
| .gitignore | ||
| check-kabi | ||
| cpupower.config | ||
| cpupower.service | ||
| dracut-virt.conf | ||
| filter-aarch64.sh.rhel | ||
| filter-armv7hl.sh.rhel | ||
| filter-modules.sh.rhel | ||
| filter-ppc64le.sh.rhel | ||
| filter-s390x.sh.rhel | ||
| filter-x86_64.sh.rhel | ||
| gating.yaml | ||
| generate_all_configs.sh | ||
| kernel-aarch64-64k-debug-rhel.config | ||
| kernel-aarch64-64k-rhel.config | ||
| kernel-aarch64-debug-rhel.config | ||
| kernel-aarch64-rhel.config | ||
| kernel-aarch64-rt-64k-debug-rhel.config | ||
| kernel-aarch64-rt-64k-rhel.config | ||
| kernel-aarch64-rt-debug-rhel.config | ||
| kernel-aarch64-rt-rhel.config | ||
| kernel-local | ||
| kernel-ppc64le-debug-rhel.config | ||
| kernel-ppc64le-rhel.config | ||
| kernel-s390x-debug-rhel.config | ||
| kernel-s390x-rhel.config | ||
| kernel-s390x-zfcpdump-rhel.config | ||
| kernel-x86_64-debug-rhel.config | ||
| kernel-x86_64-rhel.config | ||
| kernel-x86_64-rt-debug-rhel.config | ||
| kernel-x86_64-rt-rhel.config | ||
| kernel.changelog | ||
| kernel.spec | ||
| kvm_stat.logrotate | ||
| linux-kernel-test.patch | ||
| Makefile.rhelver | ||
| merge.pl | ||
| mod-denylist.sh | ||
| mod-extra.list.rhel | ||
| mod-internal.list | ||
| mod-kvm.list | ||
| mod-partner.list | ||
| mod-sign.sh | ||
| Module.kabi_aarch64 | ||
| Module.kabi_dup_aarch64 | ||
| Module.kabi_dup_ppc64le | ||
| Module.kabi_dup_s390x | ||
| Module.kabi_dup_x86_64 | ||
| Module.kabi_ppc64le | ||
| Module.kabi_s390x | ||
| Module.kabi_x86_64 | ||
| nvidiagpuoot001.x509 | ||
| parallel_xz.sh | ||
| partial-kgcov-snip.config | ||
| patch-5.14-redhat.patch | ||
| process_configs.sh | ||
| README.rst | ||
| rheldup3.x509 | ||
| rhelima_centos.x509 | ||
| rhelima.x509 | ||
| rhelimaca1.x509 | ||
| rhelkpatch1.x509 | ||
| rpminspect.yaml | ||
| sources | ||
| uki_addons.json | ||
| uki_create_addons.py | ||
| update_scripts.sh | ||
| x509.genkey.centos | ||
| x509.genkey.rhel | ||
=================== The Kernel dist-git =================== The kernel is maintained in a `source tree`_ rather than directly in dist-git. The specfile is maintained as a `template`_ in the source tree along with a set of build scripts to generate configurations, (S)RPMs, and to populate the dist-git repository. The `documentation`_ for the source tree covers how to contribute and maintain the tree. If you're looking for the downstream patch set it's available in the source tree with "git log master..ark-patches" or `online`_. Each release in dist-git is tagged in the source repository so you can easily check out the source tree for a build. The tags are in the format name-version-release, but note release doesn't contain the dist tag since the source can be built in different build roots (Fedora, CentOS, etc.) .. _source tree: https://gitlab.com/cki-project/kernel-ark.git .. _template: https://gitlab.com/cki-project/kernel-ark/-/blob/os-build/redhat/kernel.spec.template .. _documentation: https://gitlab.com/cki-project/kernel-ark/-/wikis/home .. _online: https://gitlab.com/cki-project/kernel-ark/-/commits/ark-patches