The Linux kernel
* Wed Oct 29 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-148.el10]
- vrf: Drop existing dst reference in vrf_ip6_input_dst (Antoine Tenart) [RHEL-115588]
- redhat/kernel.spec: make python3-perf glob more specific (Jan Stancek) [RHEL-119658]
- net/packet: fix a race in packet_set_ring() and packet_notifier() (Davide Caratti) [RHEL-115601]
- af_packet: fix soft lockup issue caused by tpacket_snd() (Davide Caratti) [RHEL-115601]
- af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd() (Davide Caratti) [RHEL-115601]
- net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (Davide Caratti) [RHEL-115601]
- net: loopback: Avoid sending IP packets without an Ethernet header (Davide Caratti) [RHEL-115601]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-115581]
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-115581]
- xfrm: Skip redundant statistics update for crypto offload (Sabrina Dubroca) [RHEL-115581]
- xfrm: use kfree_sensitive() for SA secret zeroization (Sabrina Dubroca) [RHEL-115581]
- espintcp: remove encap socket caching to avoid reference leak (Sabrina Dubroca) [RHEL-115581]
- espintcp: fix skb leaks (Sabrina Dubroca) [RHEL-115581]
- xfrm: Use nested-BH locking for nat_keepalive_sk_ipv[46] (Sabrina Dubroca) [RHEL-115581]
- tracing: Silence warning when chunk allocation fails in trace_pid_write (Jerome Marchand) [RHEL-115358] {CVE-2025-39914}
- trace/fgraph: Fix error handling (Jerome Marchand) [RHEL-115358]
- ftrace: Also allocate and copy hash for reading of filter files (Jerome Marchand) [RHEL-115358] {CVE-2025-39689}
- ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (Jerome Marchand) [RHEL-115358] {CVE-2025-39813}
- tracing: Fix tracing_marker may trigger page fault during preempt_disable (Jerome Marchand) [RHEL-115358]
- trace/fgraph: Fix the warning caused by missing unregister notifier (Jerome Marchand) [RHEL-115358] {CVE-2025-39829}
- tracing: fprobe-event: Sanitize wildcard for fprobe event name (Jerome Marchand) [RHEL-115358]
- tracing: Limit access to parser->buffer when trace_get_user failed (Jerome Marchand) [RHEL-115358] {CVE-2025-39683}
- tracing: Remove unneeded goto out logic (Jerome Marchand) [RHEL-115358]
- tracing: Add down_write(trace_event_sem) when adding trace event (Jerome Marchand) [RHEL-115358] {CVE-2025-38539}
- tracing/osnoise: Fix crash in timerlat_dump_stack() (Jerome Marchand) [RHEL-115358] {CVE-2025-38493}
- tracing/probes: Avoid using params uninitialized in parse_btf_arg() (Jerome Marchand) [RHEL-115358]
- ring-buffer: Remove ring_buffer_read_prepare_sync() (Jerome Marchand) [RHEL-115358]
- kernel: trace: preemptirq_delay_test: use offstack cpu mask (Jerome Marchand) [RHEL-115358]
- tracefs: Add d_delete to remove negative dentries (Jerome Marchand) [RHEL-115358]
- ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (Jerome Marchand) [RHEL-115358] {CVE-2025-38101}
- ftrace: Fix UAF when lookup kallsym after ftrace disabled (Jerome Marchand) [RHEL-115358] {CVE-2025-38346}
- ring-buffer: Do not trigger WARN_ON() due to a commit_overrun (Jerome Marchand) [RHEL-115358] {CVE-2025-38267}
- ring-buffer: Move cpus_read_lock() outside of buffer->mutex (Jerome Marchand) [RHEL-115358]
- tracing: Fix compilation warning on arm32 (Jerome Marchand) [RHEL-115358]
- ring-buffer: Fix persistent buffer when commit page is the reader page (Jerome Marchand) [RHEL-115358]
- ftrace: Fix preemption accounting for stacktrace filter command (Jerome Marchand) [RHEL-115358]
- ftrace: Fix preemption accounting for stacktrace trigger command (Jerome Marchand) [RHEL-115358]
- tracing: probes: Fix a possible race in trace_probe_log APIs (Jerome Marchand) [RHEL-115358]
- tracing: samples: Initialize trace_array_printk() with the correct function (Jerome Marchand) [RHEL-115358]
- tracing: Fix error handling in event_trigger_parse() (Jerome Marchand) [RHEL-115358]
- tracing: Rename event_trigger_alloc() to trigger_data_alloc() (Jerome Marchand) [RHEL-115358]
- tracing: Do not take trace_event_sem in print_event_fields() (Jerome Marchand) [RHEL-115358]
- tracing: Fix oob write in trace_seq_to_buffer() (Jerome Marchand) [RHEL-115358] {CVE-2025-37923}
- tracing: Fix filter string testing (Jerome Marchand) [RHEL-115358]
- ftrace: fix incorrect hash size in register_ftrace_direct() (Jerome Marchand) [RHEL-115358]
- ftrace: Properly merge notrace hashes (Jerome Marchand) [RHEL-115358]
- tracing: Do not add length to print format in synthetic events (Jerome Marchand) [RHEL-115358]
- tracing: Move histogram trigger variables from stack to per CPU structure (Jerome Marchand) [RHEL-115358]
- tracing: Constify struct event_trigger_ops (Jerome Marchand) [RHEL-115358]
- ring-buffer: Use flush_kernel_vmap_range() over flush_dcache_folio() (Jerome Marchand) [RHEL-115358]
- ftrace: Add cond_resched() to ftrace_graph_set_hash() (Jerome Marchand) [RHEL-115358] {CVE-2025-37940}
- tracing: Verify event formats that have "%%*p.." (Jerome Marchand) [RHEL-115358] {CVE-2025-37938}
- tracing: Add __print_dynamic_array() helper (Jerome Marchand) [RHEL-115358]
- tracing: probe-events: Add comments about entry data storing code (Jerome Marchand) [RHEL-115358]
- tracing: Fix synth event printk format for str fields (Jerome Marchand) [RHEL-115358]
- tracing: Do not use PERF enums when perf is not defined (Jerome Marchand) [RHEL-115358]
- tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER (Jerome Marchand) [RHEL-115358]
- tracing/osnoise: Fix possible recursive locking for cpus_read_lock() (Jerome Marchand) [RHEL-115358]
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching (Jerome Marchand) [RHEL-115358] {CVE-2025-22035}
- tracing: Ensure module defining synth event cannot be unloaded while tracing (Jerome Marchand) [RHEL-115358]
- tracing: Correct the refcount if the hist/hist_debug file fails to open (Jerome Marchand) [RHEL-115358]
- ring-buffer: Fix bytes_dropped calculation issue (Jerome Marchand) [RHEL-115358]
- tracing/hist: Support POLLPRI event for poll on histogram (Jerome Marchand) [RHEL-115358]
- tracing/hist: Add poll(POLLIN) support on hist file (Jerome Marchand) [RHEL-115358]
- tracing: Switch trace_events_hist.c code over to use guard() (Jerome Marchand) [RHEL-115358]
Resolves: RHEL-115358, RHEL-115581, RHEL-115588, RHEL-115601, RHEL-119658, RHEL-121919
Signed-off-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>
|
||
|---|---|---|
| .gitignore | ||
| check-kabi | ||
| def_variants.yaml.rhel | ||
| dracut-virt.conf | ||
| fedoraimaca.x509 | ||
| filtermods.py | ||
| flavors | ||
| gating.yaml | ||
| generate_all_configs.sh | ||
| kernel-aarch64-64k-debug-rhel.config | ||
| kernel-aarch64-64k-rhel.config | ||
| kernel-aarch64-debug-rhel.config | ||
| kernel-aarch64-rhel.config | ||
| kernel-aarch64-rt-64k-debug-rhel.config | ||
| kernel-aarch64-rt-64k-rhel.config | ||
| kernel-aarch64-rt-debug-rhel.config | ||
| kernel-aarch64-rt-rhel.config | ||
| kernel-local | ||
| kernel-ppc64le-debug-rhel.config | ||
| kernel-ppc64le-rhel.config | ||
| kernel-riscv64-debug-rhel.config | ||
| kernel-riscv64-rhel.config | ||
| kernel-s390x-debug-rhel.config | ||
| kernel-s390x-rhel.config | ||
| kernel-s390x-zfcpdump-rhel.config | ||
| kernel-x86_64-debug-rhel.config | ||
| kernel-x86_64-rhel.config | ||
| kernel-x86_64-rt-debug-rhel.config | ||
| kernel-x86_64-rt-rhel.config | ||
| kernel.changelog | ||
| kernel.sbat.template | ||
| kernel.spec | ||
| kvm_stat.logrotate | ||
| linux-kernel-test.patch | ||
| Makefile.rhelver | ||
| merge.py | ||
| mod-denylist.sh | ||
| mod-sign.sh | ||
| Module.kabi_aarch64 | ||
| Module.kabi_dup_aarch64 | ||
| Module.kabi_dup_ppc64le | ||
| Module.kabi_dup_riscv64 | ||
| Module.kabi_dup_s390x | ||
| Module.kabi_dup_x86_64 | ||
| Module.kabi_ppc64le | ||
| Module.kabi_riscv64 | ||
| Module.kabi_s390x | ||
| Module.kabi_x86_64 | ||
| nvidiagpuoot001.x509 | ||
| partial-clang_lto-aarch64-debug-snip.config | ||
| partial-clang_lto-aarch64-snip.config | ||
| partial-clang_lto-x86_64-debug-snip.config | ||
| partial-clang_lto-x86_64-snip.config | ||
| partial-clang-debug-snip.config | ||
| partial-clang-snip.config | ||
| partial-kgcov-debug-snip.config | ||
| partial-kgcov-snip.config | ||
| patch-6.12-redhat.patch | ||
| process_configs.sh | ||
| README.rst | ||
| redhatsecureboot501.cer | ||
| redhatsecureboot504.cer | ||
| redhatsecurebootca5.cer | ||
| rheldup3.x509 | ||
| rhelima_centos.x509 | ||
| rhelima.x509 | ||
| rhelimaca1.x509 | ||
| rhelkpatch1.x509 | ||
| rpminspect.yaml | ||
| sources | ||
| uki_addons.json | ||
| uki_create_addons.py | ||
| uki-addons.sbat.template | ||
| uki.sbat.template | ||
| x509.genkey.centos | ||
| x509.genkey.rhel | ||
=================== The Kernel dist-git =================== The kernel is maintained in a `source tree`_ rather than directly in dist-git. The specfile is maintained as a `template`_ in the source tree along with a set of build scripts to generate configurations, (S)RPMs, and to populate the dist-git repository. The `documentation`_ for the source tree covers how to contribute and maintain the tree. If you're looking for the downstream patch set it's available in the source tree with "git log master..ark-patches" or `online`_. Each release in dist-git is tagged in the source repository so you can easily check out the source tree for a build. The tags are in the format name-version-release, but note release doesn't contain the dist tag since the source can be built in different build roots (Fedora, CentOS, etc.) .. _source tree: https://gitlab.com/cki-project/kernel-ark.git .. _template: https://gitlab.com/cki-project/kernel-ark/-/blob/os-build/redhat/kernel.spec.template .. _documentation: https://gitlab.com/cki-project/kernel-ark/-/wikis/home .. _online: https://gitlab.com/cki-project/kernel-ark/-/commits/ark-patches