* Wed Oct 29 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-148.el10]
- vrf: Drop existing dst reference in vrf_ip6_input_dst (Antoine Tenart) [RHEL-115588]
- redhat/kernel.spec: make python3-perf glob more specific (Jan Stancek) [RHEL-119658]
- net/packet: fix a race in packet_set_ring() and packet_notifier() (Davide Caratti) [RHEL-115601]
- af_packet: fix soft lockup issue caused by tpacket_snd() (Davide Caratti) [RHEL-115601]
- af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd() (Davide Caratti) [RHEL-115601]
- net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (Davide Caratti) [RHEL-115601]
- net: loopback: Avoid sending IP packets without an Ethernet header (Davide Caratti) [RHEL-115601]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-115581]
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-115581]
- xfrm: Skip redundant statistics update for crypto offload (Sabrina Dubroca) [RHEL-115581]
- xfrm: use kfree_sensitive() for SA secret zeroization (Sabrina Dubroca) [RHEL-115581]
- espintcp: remove encap socket caching to avoid reference leak (Sabrina Dubroca) [RHEL-115581]
- espintcp: fix skb leaks (Sabrina Dubroca) [RHEL-115581]
- xfrm: Use nested-BH locking for nat_keepalive_sk_ipv[46] (Sabrina Dubroca) [RHEL-115581]
- tracing: Silence warning when chunk allocation fails in trace_pid_write (Jerome Marchand) [RHEL-115358] {CVE-2025-39914}
- trace/fgraph: Fix error handling (Jerome Marchand) [RHEL-115358]
- ftrace: Also allocate and copy hash for reading of filter files (Jerome Marchand) [RHEL-115358] {CVE-2025-39689}
- ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (Jerome Marchand) [RHEL-115358] {CVE-2025-39813}
- tracing: Fix tracing_marker may trigger page fault during preempt_disable (Jerome Marchand) [RHEL-115358]
- trace/fgraph: Fix the warning caused by missing unregister notifier (Jerome Marchand) [RHEL-115358] {CVE-2025-39829}
- tracing: fprobe-event: Sanitize wildcard for fprobe event name (Jerome Marchand) [RHEL-115358]
- tracing: Limit access to parser->buffer when trace_get_user failed (Jerome Marchand) [RHEL-115358] {CVE-2025-39683}
- tracing: Remove unneeded goto out logic (Jerome Marchand) [RHEL-115358]
- tracing: Add down_write(trace_event_sem) when adding trace event (Jerome Marchand) [RHEL-115358] {CVE-2025-38539}
- tracing/osnoise: Fix crash in timerlat_dump_stack() (Jerome Marchand) [RHEL-115358] {CVE-2025-38493}
- tracing/probes: Avoid using params uninitialized in parse_btf_arg() (Jerome Marchand) [RHEL-115358]
- ring-buffer: Remove ring_buffer_read_prepare_sync() (Jerome Marchand) [RHEL-115358]
- kernel: trace: preemptirq_delay_test: use offstack cpu mask (Jerome Marchand) [RHEL-115358]
- tracefs: Add d_delete to remove negative dentries (Jerome Marchand) [RHEL-115358]
- ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (Jerome Marchand) [RHEL-115358] {CVE-2025-38101}
- ftrace: Fix UAF when lookup kallsym after ftrace disabled (Jerome Marchand) [RHEL-115358] {CVE-2025-38346}
- ring-buffer: Do not trigger WARN_ON() due to a commit_overrun (Jerome Marchand) [RHEL-115358] {CVE-2025-38267}
- ring-buffer: Move cpus_read_lock() outside of buffer->mutex (Jerome Marchand) [RHEL-115358]
- tracing: Fix compilation warning on arm32 (Jerome Marchand) [RHEL-115358]
- ring-buffer: Fix persistent buffer when commit page is the reader page (Jerome Marchand) [RHEL-115358]
- ftrace: Fix preemption accounting for stacktrace filter command (Jerome Marchand) [RHEL-115358]
- ftrace: Fix preemption accounting for stacktrace trigger command (Jerome Marchand) [RHEL-115358]
- tracing: probes: Fix a possible race in trace_probe_log APIs (Jerome Marchand) [RHEL-115358]
- tracing: samples: Initialize trace_array_printk() with the correct function (Jerome Marchand) [RHEL-115358]
- tracing: Fix error handling in event_trigger_parse() (Jerome Marchand) [RHEL-115358]
- tracing: Rename event_trigger_alloc() to trigger_data_alloc() (Jerome Marchand) [RHEL-115358]
- tracing: Do not take trace_event_sem in print_event_fields() (Jerome Marchand) [RHEL-115358]
- tracing: Fix oob write in trace_seq_to_buffer() (Jerome Marchand) [RHEL-115358] {CVE-2025-37923}
- tracing: Fix filter string testing (Jerome Marchand) [RHEL-115358]
- ftrace: fix incorrect hash size in register_ftrace_direct() (Jerome Marchand) [RHEL-115358]
- ftrace: Properly merge notrace hashes (Jerome Marchand) [RHEL-115358]
- tracing: Do not add length to print format in synthetic events (Jerome Marchand) [RHEL-115358]
- tracing: Move histogram trigger variables from stack to per CPU structure (Jerome Marchand) [RHEL-115358]
- tracing: Constify struct event_trigger_ops (Jerome Marchand) [RHEL-115358]
- ring-buffer: Use flush_kernel_vmap_range() over flush_dcache_folio() (Jerome Marchand) [RHEL-115358]
- ftrace: Add cond_resched() to ftrace_graph_set_hash() (Jerome Marchand) [RHEL-115358] {CVE-2025-37940}
- tracing: Verify event formats that have "%%*p.." (Jerome Marchand) [RHEL-115358] {CVE-2025-37938}
- tracing: Add __print_dynamic_array() helper (Jerome Marchand) [RHEL-115358]
- tracing: probe-events: Add comments about entry data storing code (Jerome Marchand) [RHEL-115358]
- tracing: Fix synth event printk format for str fields (Jerome Marchand) [RHEL-115358]
- tracing: Do not use PERF enums when perf is not defined (Jerome Marchand) [RHEL-115358]
- tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER (Jerome Marchand) [RHEL-115358]
- tracing/osnoise: Fix possible recursive locking for cpus_read_lock() (Jerome Marchand) [RHEL-115358]
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching (Jerome Marchand) [RHEL-115358] {CVE-2025-22035}
- tracing: Ensure module defining synth event cannot be unloaded while tracing (Jerome Marchand) [RHEL-115358]
- tracing: Correct the refcount if the hist/hist_debug file fails to open (Jerome Marchand) [RHEL-115358]
- ring-buffer: Fix bytes_dropped calculation issue (Jerome Marchand) [RHEL-115358]
- tracing/hist: Support POLLPRI event for poll on histogram (Jerome Marchand) [RHEL-115358]
- tracing/hist: Add poll(POLLIN) support on hist file (Jerome Marchand) [RHEL-115358]
- tracing: Switch trace_events_hist.c code over to use guard() (Jerome Marchand) [RHEL-115358]
Resolves: RHEL-115358, RHEL-115581, RHEL-115588, RHEL-115601, RHEL-119658, RHEL-121919
Signed-off-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>
91 lines
2.8 KiB
Makefile
91 lines
2.8 KiB
Makefile
RHEL_MAJOR = 10
|
|
RHEL_MINOR = 2
|
|
|
|
#
|
|
# RHEL_RELEASE
|
|
# -------------
|
|
#
|
|
# Represents build number in 'release' part of RPM's name-version-release.
|
|
# name is <package_name>, e.g. kernel
|
|
# version is upstream kernel version this kernel is based on, e.g. 4.18.0
|
|
# release is <RHEL_RELEASE>.<dist_tag>[<buildid>], e.g. 100.el8
|
|
#
|
|
# Use this spot to avoid future merge conflicts.
|
|
# Do not trim this comment.
|
|
RHEL_RELEASE = 148
|
|
|
|
#
|
|
# RHEL_REBASE_NUM
|
|
# ----------------
|
|
#
|
|
# Used in RPM version string for Gemini kernels, which dont use upstream
|
|
# VERSION/PATCHLEVEL/SUBLEVEL. The number represents rebase number for
|
|
# current MAJOR release.
|
|
#
|
|
# Use this spot to avoid future merge conflicts.
|
|
# Do not trim this comment.
|
|
RHEL_REBASE_NUM = 1
|
|
|
|
|
|
#
|
|
# ZSTREAM
|
|
# -------
|
|
#
|
|
# This variable controls whether we use zstream numbering or not for the
|
|
# package release. The zstream release keeps the build number of the last
|
|
# build done for ystream for the Beta milestone, and increments a second
|
|
# number for each build. The third number is used for branched builds
|
|
# (eg.: for builds with security fixes or hot fixes done outside of the
|
|
# batch release process).
|
|
#
|
|
# For example, with ZSTREAM unset or set to "no", all builds will contain
|
|
# a release with only the build number, eg.: kernel-<kernel version>-X.el*,
|
|
# where X is the build number. With ZSTREAM set to "yes", we will have
|
|
# builds with kernel-<kernel version>-X.Y.Z.el*, where X is the last
|
|
# RHEL_RELEASE number before ZSTREAM flag was set to yes, Y will now be the
|
|
# build number and Z will always be 1 except if you're doing a branched build
|
|
# (when you give RHDISTGIT_BRANCH on the command line, in which case the Z
|
|
# number will be incremented instead of the Y).
|
|
#
|
|
ZSTREAM ?= no
|
|
|
|
#
|
|
# Early y+1 numbering
|
|
# --------------------
|
|
#
|
|
# In early y+1 process, RHEL_RELEASE consists of 2 numbers: x.y
|
|
# First is RHEL_RELEASE inherited/merged from y as-is, second number
|
|
# is incremented with each build starting from 1. After merge from y,
|
|
# it resets back to 1. This way y+1 nvr reflects status of last merge.
|
|
#
|
|
# Example:
|
|
#
|
|
# rhel8.0 rhel-8.1
|
|
# kernel-4.18.0-58.el8 --> kernel-4.18.0-58.1.el8
|
|
# kernel-4.18.0-58.2.el8
|
|
# kernel-4.18.0-59.el8 kernel-4.18.0-59.1.el8
|
|
# kernel-4.18.0-60.el8
|
|
# kernel-4.18.0-61.el8 --> kernel-4.18.0-61.1.el8
|
|
#
|
|
#
|
|
# Use this spot to avoid future merge conflicts.
|
|
# Do not trim this comment.
|
|
EARLY_YSTREAM ?= no
|
|
EARLY_YBUILD:=
|
|
EARLY_YRELEASE:=
|
|
ifneq ("$(ZSTREAM)", "yes")
|
|
ifeq ("$(EARLY_YSTREAM)","yes")
|
|
RHEL_RELEASE:=$(RHEL_RELEASE).$(EARLY_YRELEASE)
|
|
endif
|
|
endif
|
|
|
|
#
|
|
# Automotive
|
|
# ----------
|
|
#
|
|
# Represents the major and minor release used by automotive.
|
|
# Primarily this is used to to identify the build target when
|
|
# building the kernel-automotive packages.
|
|
AUTOMOTIVE_MAJOR = 2
|
|
AUTOMOTIVE_MINOR = 0
|