kernel-5.14.0-439.el9

* Fri Apr 12 2024 Lucas Zampieri <lzampier@redhat.com> [5.14.0-439.el9]
- PCI/MSI: Prevent MSI hardware interrupt number truncation (Myron Stowe) [RHEL-21453]
- redhat/configs: Add CONFIG_CRYPTO_DEV_QAT_420XX (Vladis Dronov) [RHEL-17715]
- crypto: qat - make ring to service map common for QAT GEN4 (Vladis Dronov) [RHEL-17715]
- crypto: qat - fix ring to service map for dcc in 420xx (Vladis Dronov) [RHEL-17715]
- crypto: qat - fix ring to service map for dcc in 4xxx (Vladis Dronov) [RHEL-17715]
- crypto: qat - fix comment structure (Vladis Dronov) [RHEL-17715]
- crypto: qat - remove unnecessary description from comment (Vladis Dronov) [RHEL-17715]
- crypto: qat - remove double initialization of value (Vladis Dronov) [RHEL-17715]
- crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-17715]
- crypto: qat - removed unused macro in adf_cnv_dbgfs.c (Vladis Dronov) [RHEL-17715]
- crypto: qat - remove unused macros in qat_comp_alg.c (Vladis Dronov) [RHEL-17715]
- crypto: qat - uninitialized variable in adf_hb_error_inject_write() (Vladis Dronov) [RHEL-17715]
- Documentation: qat: fix auto_reset section (Vladis Dronov) [RHEL-17715]
- crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-17715]
- crypto: qat - change SLAs cleanup flow at shutdown (Vladis Dronov) [RHEL-17715]
- crypto: qat - improve aer error reset handling (Vladis Dronov) [RHEL-17715]
- crypto: qat - limit heartbeat notifications (Vladis Dronov) [RHEL-17715]
- crypto: qat - add auto reset on error (Vladis Dronov) [RHEL-17715]
- crypto: qat - add fatal error notification (Vladis Dronov) [RHEL-17715]
- crypto: qat - re-enable sriov after pf reset (Vladis Dronov) [RHEL-17715]
- crypto: qat - update PFVF protocol for recovery (Vladis Dronov) [RHEL-17715]
- crypto: qat - disable arbitration before reset (Vladis Dronov) [RHEL-17715]
- crypto: qat - add fatal error notify method (Vladis Dronov) [RHEL-17715]
- crypto: qat - add heartbeat error simulator (Vladis Dronov) [RHEL-17715]
- crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-17715]
- crypto: qat - avoid memcpy() overflow warning (Vladis Dronov) [RHEL-17715]
- crypto: qat - fix arbiter mapping generation algorithm for QAT 402xx (Vladis Dronov) [RHEL-17715]
- crypto: qat - generate dynamically arbiter mappings (Vladis Dronov) [RHEL-17715]
- crypto: qat - add support for ring pair level telemetry (Vladis Dronov) [RHEL-17715]
- crypto: qat - add support for device telemetry (Vladis Dronov) [RHEL-17715]
- crypto: qat - add admin msgs for telemetry (Vladis Dronov) [RHEL-17715]
- crypto: qat - include pci.h for GET_DEV() (Vladis Dronov) [RHEL-17715]
- crypto: qat - add support for 420xx devices (Vladis Dronov) [RHEL-17715]
- crypto: qat - move fw config related structures (Vladis Dronov) [RHEL-17715]
- crypto: qat - relocate portions of qat_4xxx code (Vladis Dronov) [RHEL-17715]
- crypto: qat - change signature of uof_get_num_objs() (Vladis Dronov) [RHEL-17715]
- crypto: qat - relocate and rename get_service_enabled() (Vladis Dronov) [RHEL-17715]
- seq_file: add helper macro to define attribute for rw file (Vladis Dronov) [RHEL-17715]
- minmax: Introduce {min,max}_array() (Vladis Dronov) [RHEL-17715]
- vfio/fsl-mc: Block calling interrupt handler without trigger (Alex Williamson) [RHEL-30023]
- vfio/platform: Create persistent IRQ handlers (Alex Williamson) [RHEL-30023]
- vfio/platform: Disable virqfds on cleanup (Alex Williamson) [RHEL-30023]
- vfio/pci: Create persistent INTx handler (Alex Williamson) [RHEL-30023]
- vfio: Introduce interface to flush virqfd inject workqueue (Alex Williamson) [RHEL-30023]
- vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-30023]
- vfio/pci: Disable auto-enable of exclusive INTx IRQ (Alex Williamson) [RHEL-30023]
- vfio/mbochs: make mbochs_class constant (Alex Williamson) [RHEL-30023]
- vfio/mdpy: make mdpy_class constant (Alex Williamson) [RHEL-30023]
- vfio: amba: Rename pl330_ids[] to vfio_amba_ids[] (Alex Williamson) [RHEL-30023]
- vfio/pci: rename and export range_intersect_range (Alex Williamson) [RHEL-30023]
- vfio/pci: rename and export do_io_rw() (Alex Williamson) [RHEL-30023]
- vfio/pci: WARN_ON driver_override kasprintf failure (Alex Williamson) [RHEL-30023]
- vfio/pci: Expose vfio_pci_core_iowrite/read##size() (Alex Williamson) [RHEL-30023]
- vfio/pci: Expose vfio_pci_core_setup_barmap() (Alex Williamson) [RHEL-30023]
- vfio/type1: account iommu allocations (Alex Williamson) [RHEL-30023]
- redhat/configs: Disable CONFIG_VFIO_DEBUGFS (Alex Williamson) [RHEL-30023]
- MAINTAINERS: Add vfio debugfs interface doc link (Alex Williamson) [RHEL-30023]
- Documentation: add debugfs description for vfio (Alex Williamson) [RHEL-30023]
- vfio/migration: Add debugfs to live migration driver (Alex Williamson) [RHEL-30023]
- vfio: Drop vfio_file_iommu_group() stub to fudge around a KVM wart (Alex Williamson) [RHEL-30023]
- iommufd/iova_bitmap: Move symbols to IOMMUFD namespace (Alex Williamson) [RHEL-30023]
- vfio: Move iova_bitmap into iommufd (Alex Williamson) [RHEL-30023]
- vfio/iova_bitmap: Export more API symbols (Alex Williamson) [RHEL-30023]
- thermal: sysfs: Fix trip_point_hyst_store() (Jennifer Berringer) [RHEL-31231]
- ring-buffer: Do not attempt to read past "commit" (Jerome Marchand) [RHEL-29064] {CVE-2023-52501}
- Upstream has changed the APIs to suspend the array. (Nigel Croxon) [RHEL-26279]
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-26279]
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" (Nigel Croxon) [RHEL-26279]
- Revert "raid5: read data is wrong when recovery happens" (Nigel Croxon) [RHEL-26279]
- md: add a mddev_is_dm helper (Nigel Croxon) [RHEL-26279]
- md: add a mddev_add_trace_msg helper (Nigel Croxon) [RHEL-26279]
- md: add a mddev_trace_remap helper (Nigel Croxon) [RHEL-26279]
- md/raid1-10: add a helper raid1_check_read_range() (Nigel Croxon) [RHEL-26279]
- md/raid1: factor out helpers to add rdev to conf (Nigel Croxon) [RHEL-26279]
- md: add a new helper rdev_has_badblock() (Nigel Croxon) [RHEL-26279]
- md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-26279]
- dm-raid: fix lockdep waring in "pers->hot_add_disk" (Nigel Croxon) [RHEL-26279]
- md/dm-raid: don't call md_reap_sync_thread() directly (Nigel Croxon) [RHEL-26279]
- dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape (Nigel Croxon) [RHEL-26279]
- dm-raid: add a new helper prepare_suspend() in md_personality (Nigel Croxon) [RHEL-26279]
- dm-raid: really frozen sync_thread during suspend (Nigel Croxon) [RHEL-26279]
- md: add a new helper reshape_interrupted() (Nigel Croxon) [RHEL-26279]
- md: export helper md_is_rdwr() (Nigel Croxon) [RHEL-26279]
- md: export helpers to stop sync_thread (Nigel Croxon) [RHEL-26279]
- md: don't clear MD_RECOVERY_FROZEN for new dm-raid until resume (Nigel Croxon) [RHEL-26279]
- md/md-bitmap: fix incorrect usage for sb_index (Nigel Croxon) [RHEL-26279]
- md: check mddev->pers before calling md_set_readonly() (Nigel Croxon) [RHEL-26279]
- md: clean up openers check in do_md_stop() and md_set_readonly() (Nigel Croxon) [RHEL-26279]
- md: sync blockdev before stopping raid or setting readonly (Nigel Croxon) [RHEL-26279]
- md: factor out a helper to sync mddev (Nigel Croxon) [RHEL-26279]
- md: Don't clear MD_CLOSING when the raid is about to stop (Nigel Croxon) [RHEL-26279]
- md: return directly before setting did_set_md_closing (Nigel Croxon) [RHEL-26279]
- md: clean up invalid BUG_ON in md_ioctl (Nigel Croxon) [RHEL-26279]
- md: changed the switch of RAID_VERSION to if (Nigel Croxon) [RHEL-26279]
- md: merge the check of capabilities into md_ioctl_valid() (Nigel Croxon) [RHEL-26279]
- md: Don't suspend the array for interrupted reshape (Nigel Croxon) [RHEL-26279]
- md: Don't register sync_thread for reshape directly (Nigel Croxon) [RHEL-26279]
- md: Make sure md_do_sync() will set MD_RECOVERY_DONE (Nigel Croxon) [RHEL-26279]
- md: Don't ignore read-only array in md_check_recovery() (Nigel Croxon) [RHEL-26279]
- md: Don't ignore suspended array in md_check_recovery() (Nigel Croxon) [RHEL-26279]
- md: Fix missing release of 'active_io' for flush (Nigel Croxon) [RHEL-26279]
- md: fix kmemleak of rdev->serial (Nigel Croxon) [RHEL-26279]
- md: use RCU lock to protect traversal in md_spares_need_change() (Nigel Croxon) [RHEL-26279]
- md: get rdev->mddev with READ_ONCE() (Nigel Croxon) [RHEL-26279]
- md: remove redundant md_wakeup_thread() (Nigel Croxon) [RHEL-26279]
- md: remove redundant check of 'mddev->sync_thread' (Nigel Croxon) [RHEL-26279]
- md: fix a suspicious RCU usage warning (Nigel Croxon) [RHEL-26279]
- md/raid1: Use blk_opf_t for read and write operations (Nigel Croxon) [RHEL-26279]
- md: Fix md_seq_ops() regressions (Nigel Croxon) [RHEL-26279]
- md/raid1: support read error check (Nigel Croxon) [RHEL-26279]
- md: factor out a helper exceed_read_errors() to check read_errors (Nigel Croxon) [RHEL-26279]
- md: Whenassemble the array, consult the superblock of the freshest device (Nigel Croxon) [RHEL-26279]
- md/raid1: remove unnecessary null checking (Nigel Croxon) [RHEL-26279]
- md: split MD_RECOVERY_NEEDED out of mddev_resume (Nigel Croxon) [RHEL-26279]
- md: fix stopping sync thread (Nigel Croxon) [RHEL-26279]
- md: don't leave 'MD_RECOVERY_FROZEN' in error path of md_set_readonly() (Nigel Croxon) [RHEL-26279]
- md: fix missing flush of sync_work (Nigel Croxon) [RHEL-26279]
- md: synchronize flush io with array reconfiguration (Nigel Croxon) [RHEL-26279]
- md/raid6: use valid sector values to determine if an I/O should wait on the reshape (Nigel Croxon) [RHEL-26279]
- md/raid5: remove rcu protection to access rdev from conf (Nigel Croxon) [RHEL-26279]
- md/raid1: remove rcu protection to access rdev from conf (Nigel Croxon) [RHEL-26279]
- md/raid10: remove rcu protection to access rdev from conf (Nigel Croxon) [RHEL-26279]
- md: remove flag RemoveSynchronized (Nigel Croxon) [RHEL-26279]
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" (Nigel Croxon) [RHEL-26279]
- md: bypass block throttle for superblock update (Nigel Croxon) [RHEL-26279]
- md: fix bi_status reporting in md_end_clone_io (Nigel Croxon) [RHEL-26279]
- md: cleanup pers->prepare_suspend() (Nigel Croxon) [RHEL-26279]
- md-cluster: check for timeout while a new disk adding (Nigel Croxon) [RHEL-26279]
- md: rename __mddev_suspend/resume() back to mddev_suspend/resume() (Nigel Croxon) [RHEL-26279]
- md/dm-raid: use new apis to suspend array (Nigel Croxon) [RHEL-26279]
- md: remove old apis to suspend the array (Nigel Croxon) [RHEL-26279]
- md: suspend array in md_start_sync() if array need reconfiguration (Nigel Croxon) [RHEL-26279]
- md/raid5: replace suspend with quiesce() callback (Nigel Croxon) [RHEL-26279]
- md: cleanup mddev_create/destroy_serial_pool() (Nigel Croxon) [RHEL-26279]
- md: use new apis to suspend array before mddev_create/destroy_serial_pool (Nigel Croxon) [RHEL-26279]
- md: use new apis to suspend array for ioctls involed array reconfiguration (Nigel Croxon) [RHEL-26279]
- md: use new apis to suspend array for adding/removing rdev from state_store() (Nigel Croxon) [RHEL-26279]
- md: use new apis to suspend array for sysfs apis (Nigel Croxon) [RHEL-26279]
- md/raid5: use new apis to suspend array (Nigel Croxon) [RHEL-26279]
- md/raid5-cache: use new apis to suspend array (Nigel Croxon) [RHEL-26279]
- md/md-bitmap: use new apis to suspend array for location_store() (Nigel Croxon) [RHEL-26279]
- md: add new helpers to suspend/resume and lock/unlock array (Nigel Croxon) [RHEL-26279]
- md: add new helpers to suspend/resume array (Nigel Croxon) [RHEL-26279]
- md: replace is_md_suspended() with 'mddev->suspended' in md_check_recovery() (Nigel Croxon) [RHEL-26279]
- md/raid5-cache: use READ_ONCE/WRITE_ONCE for 'conf->log' (Nigel Croxon) [RHEL-26279]
- md: use READ_ONCE/WRITE_ONCE for 'suspend_lo' and 'suspend_hi' (Nigel Croxon) [RHEL-26279]
- md/raid1: don't split discard io for write behind (Nigel Croxon) [RHEL-26279]
- md: do not require mddev_lock() for all options in array_state_store() (Nigel Croxon) [RHEL-26279]
- md: simplify md_seq_ops (Nigel Croxon) [RHEL-26279]
- md: factor out a helper from mddev_put() (Nigel Croxon) [RHEL-26279]
- ext4: check if ext4_blkdev_get() returns NULL (Ming Lei) [RHEL-30965]
- libceph: init the cursor when preparing the sparse read (Xiubo Li) [RHEL-19813]
- libceph: just wait for more data to be available on the socket (Xiubo Li) [RHEL-19813]
- libceph: rename read_sparse_msg_*() to read_partial_sparse_msg_*() (Xiubo Li) [RHEL-19813]
- libceph: fail sparse-read if the data length doesn't match (Xiubo Li) [RHEL-19813]
- ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (Xiubo Li) [RHEL-19813]
- ceph: remove unnecessary IS_ERR() check in ceph_fname_to_usr() (Xiubo Li) [RHEL-19813]
- ceph: remove unnecessary check for NULL in parse_longname() (Xiubo Li) [RHEL-19813]
- ceph: switch ceph_lookup/atomic_open() to use new fscrypt helper (Xiubo Li) [RHEL-19813]
- ceph: fix updating i_truncate_pagecache_size for fscrypt (Xiubo Li) [RHEL-19813]
- ceph: wait for OSD requests' callbacks to finish when unmounting (Xiubo Li) [RHEL-19813]
- ceph: drop messages from MDS when unmounting (Xiubo Li) [RHEL-19813]
- ceph: prevent snapshot creation in encrypted locked directories (Xiubo Li) [RHEL-19813]
- ceph: add support for encrypted snapshot names (Xiubo Li) [RHEL-19813]
- ceph: invalidate pages when doing direct/sync writes (Xiubo Li) [RHEL-19813]
- ceph: plumb in decryption during reads (Xiubo Li) [RHEL-19813]
- ceph: add encryption support to writepage and writepages (Xiubo Li) [RHEL-19813]
- ceph: redirty the page for writepage on failure (Xiubo Li) [RHEL-19813]
- ceph: add read/modify/write to ceph_sync_write (Xiubo Li) [RHEL-19813]
- ceph: align data in pages in ceph_sync_write (Xiubo Li) [RHEL-19813]
- ceph: don't use special DIO path for encrypted inodes (Xiubo Li) [RHEL-19813]
- ceph: don't get the inline data for new creating files (Xiubo Li) [RHEL-19813]
- ceph: add truncate size handling support for fscrypt (Xiubo Li) [RHEL-19813]
- ceph: add object version support for sync read (Xiubo Li) [RHEL-19813]
- libceph: allow ceph_osdc_new_request to accept a multi-op read (Xiubo Li) [RHEL-19813]
- libceph: add CEPH_OSD_OP_ASSERT_VER support (Xiubo Li) [RHEL-19813]
- ceph: add infrastructure for file encryption and decryption (Xiubo Li) [RHEL-19813]
- ceph: handle fscrypt fields in cap messages from MDS (Xiubo Li) [RHEL-19813]
- ceph: size handling in MClientRequest, cap updates and inode traces (Xiubo Li) [RHEL-19813]
- ceph: mark directory as non-complete after loading key (Xiubo Li) [RHEL-19813]
- ceph: allow encrypting a directory while not having Ax caps (Xiubo Li) [RHEL-19813]
- ceph: add some fscrypt guardrails (Xiubo Li) [RHEL-19813]
- ceph: create symlinks with encrypted and base64-encoded targets (Xiubo Li) [RHEL-19813]
- ceph: add support to readdir for encrypted names (Xiubo Li) [RHEL-19813]
- ceph: pass the request to parse_reply_info_readdir() (Xiubo Li) [RHEL-19813]
- ceph: make ceph_fill_trace and ceph_get_name decrypt names (Xiubo Li) [RHEL-19813]
- ceph: add helpers for converting names for userland presentation (Xiubo Li) [RHEL-19813]
- ceph: make d_revalidate call fscrypt revalidator for encrypted dentries (Xiubo Li) [RHEL-19813]
- ceph: set DCACHE_NOKEY_NAME flag in ceph_lookup/atomic_open() (Xiubo Li) [RHEL-19813]
- ceph: decode alternate_name in lease info (Xiubo Li) [RHEL-19813]
- ceph: send alternate_name in MClientRequest (Xiubo Li) [RHEL-19813]
- ceph: encode encrypted name in ceph_mdsc_build_path and dentry release (Xiubo Li) [RHEL-19813]
- ceph: add base64 endcoding routines for encrypted names (Xiubo Li) [RHEL-19813]
- ceph: make ioctl cmds more readable in debug log (Xiubo Li) [RHEL-19813]
- ceph: add fscrypt ioctls and ceph.fscrypt.auth vxattr (Xiubo Li) [RHEL-19813]
- ceph: implement -o test_dummy_encryption mount option (Xiubo Li) [RHEL-19813]
- ceph: fscrypt_auth handling for ceph (Xiubo Li) [RHEL-19813]
- ceph: use osd_req_op_extent_osd_iter for netfs reads (Xiubo Li) [RHEL-19813]
- libceph: add new iov_iter-based ceph_msg_data_type and ceph_osd_data_type (Xiubo Li) [RHEL-19813]
- ceph: make ceph_msdc_build_path use ref-walk (Xiubo Li) [RHEL-19813]
- ceph: preallocate inode for ops that may create one (Xiubo Li) [RHEL-19813]
- fs: change test in inode_insert5 for adding to the sb list (Xiubo Li) [RHEL-19813]
- ceph: add new mount option to enable sparse reads (Xiubo Li) [RHEL-19813]
- libceph: add sparse read support to OSD client (Xiubo Li) [RHEL-19813]
- libceph: add sparse read support to msgr1 (Xiubo Li) [RHEL-19813]
- libceph: support sparse reads on msgr2 secure codepath (Xiubo Li) [RHEL-19813]
- libceph: new sparse_read op, support sparse reads on msgr2 crc codepath (Xiubo Li) [RHEL-19813]
- libceph: define struct ceph_sparse_extent and add some helpers (Xiubo Li) [RHEL-19813]
- libceph: add spinlock around osd->o_requests (Xiubo Li) [RHEL-19813]
- ceph: try to check caps immediately after async creating finishes (Xiubo Li) [RHEL-19813]
- ceph: remove useless session parameter for check_caps() (Xiubo Li) [RHEL-19813]
- ceph: flush the dirty caps immediatelly when quota is approaching (Xiubo Li) [RHEL-19813]
- ceph: fix NULL pointer dereference for req->r_session (Xiubo Li) [RHEL-19813]
- ceph: fix a NULL vs IS_ERR() check when calling ceph_lookup_inode() (Xiubo Li) [RHEL-19813]
- ceph: fix incorrectly showing the .snap size for stat (Xiubo Li) [RHEL-19813]
- ceph: fail the open_by_handle_at() if the dentry is being unlinked (Xiubo Li) [RHEL-19813]
- ceph: increment i_version when doing a setattr with caps (Xiubo Li) [RHEL-19813]
- ceph: Use kcalloc for allocating multiple elements (Xiubo Li) [RHEL-19813]
- ceph: no need to wait for transition RDCACHE|RD -> RD (Xiubo Li) [RHEL-19813]
- ceph: fail the request if the peer MDS doesn't support getvxattr op (Xiubo Li) [RHEL-19813]
- ceph: wake up the waiters if any new caps comes (Xiubo Li) [RHEL-19813]
- libceph: drop last_piece flag from ceph_msg_data_cursor (Xiubo Li) [RHEL-19813]
- fscrypt: Replace 1-element array with flexible array (Xiubo Li) [RHEL-19813]
- fscrypt: optimize fscrypt_initialize() (Xiubo Li) [RHEL-19813]
- fscrypt: use WARN_ON_ONCE instead of WARN_ON (Xiubo Li) [RHEL-19813]
- fscrypt: check for NULL keyring in fscrypt_put_master_key_activeref() (Xiubo Li) [RHEL-19813]
- fscrypt: improve fscrypt_destroy_keyring() documentation (Xiubo Li) [RHEL-19813]
- fscrypt: destroy keyring after security_sb_delete() (Xiubo Li) [RHEL-19813]
- fscrypt: support decrypting data from large folios (Xiubo Li) [RHEL-19813]
- fscrypt: clean up fscrypt_add_test_dummy_key() (Xiubo Li) [RHEL-19813]
- fs/super.c: stop calling fscrypt_destroy_keyring() from __put_super() (Xiubo Li) [RHEL-19813]
- ext4: stop calling fscrypt_add_test_dummy_key() (Xiubo Li) [RHEL-19813]
- fscrypt: add the test dummy encryption key on-demand (Xiubo Li) [RHEL-19813]
- fscrypt: stop using PG_error to track error status (Xiubo Li) [RHEL-19813]
- fscrypt: remove fscrypt_set_test_dummy_encryption() (Xiubo Li) [RHEL-19813]
- fscrypt: align Base64 encoding with RFC 4648 base64url (Xiubo Li) [RHEL-19813]
- fscrypt: new helper function - fscrypt_prepare_lookup_partial() (Xiubo Li) [RHEL-19813]
- fscrypt: add fscrypt_context_for_new_inode (Xiubo Li) [RHEL-19813]
- fscrypt: export fscrypt_fname_encrypt and fscrypt_fname_encrypted_size (Xiubo Li) [RHEL-19813]
- fscrypt: split up FS_CRYPTO_BLOCK_SIZE (Xiubo Li) [RHEL-19813]
- fscrypt: update documentation for direct I/O support (Xiubo Li) [RHEL-19813]
- fscrypt: add functions for direct I/O support (Xiubo Li) [RHEL-19813]
- fscrypt: add additional documentation for SM4 support (Xiubo Li) [RHEL-19813]
- fscrypt: remove unused Speck definitions (Xiubo Li) [RHEL-19813]
- fscrypt: Add SM4 XTS/CTS symmetric algorithm support (Xiubo Li) [RHEL-19813]
- blk-crypto: Add support for SM4-XTS blk crypto mode (Xiubo Li) [RHEL-19813]
- fscrypt: add comment for fscrypt_valid_enc_modes_v1() (Xiubo Li) [RHEL-19813]
- fscrypt: pass super_block to fscrypt_put_master_key_activeref() (Xiubo Li) [RHEL-19813]
- fscrypt: Add HCTR2 support for filename encryption (Xiubo Li) [RHEL-19813]
- fscrypt: allow 256-bit master keys with AES-256-XTS (Xiubo Li) [RHEL-19813]
- fscrypt: improve a few comments (Xiubo Li) [RHEL-19813]
- fscrypt: improve documentation for inline encryption (Xiubo Li) [RHEL-19813]
- fscrypt: clean up comments in bio.c (Xiubo Li) [RHEL-19813]
- crypto: iaa - mark tech preview (Vladis Dronov) [RHEL-29685]
- crypto: iaa - Fix nr_cpus < nr_iaa case (Vladis Dronov) [RHEL-29685]
- crypto: iaa - fix the missing CRYPTO_ALG_ASYNC in cra_flags (Vladis Dronov) [RHEL-29685]
- crypto: iaa - Fix comp/decomp delay statistics (Vladis Dronov) [RHEL-29685]
- crypto: iaa - Fix async_disable descriptor leak (Vladis Dronov) [RHEL-29685]
- crypto: iaa - Remove unnecessary debugfs_create_dir() error check in iaa_crypto_debugfs_init() (Vladis Dronov) [RHEL-29685]
- crypto: iaa - Remove header table code (Vladis Dronov) [RHEL-29685]
- ice: fix enabling RX VLAN filtering (Petr Oros) [RHEL-28837]
Resolves: RHEL-17715, RHEL-19813, RHEL-21453, RHEL-26279, RHEL-29064, RHEL-29685, RHEL-30023, RHEL-30965, RHEL-31231

Signed-off-by: Lucas Zampieri <lzampier@redhat.com>

Makefile.rhelver

@@ -12,7 +12,7 @@ RHEL_MINOR = 5
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 438
+RHEL_RELEASE = 439
 
 #
 # ZSTREAM

kernel-aarch64-64k-debug-rhel.config

@@ -1060,6 +1060,7 @@ CONFIG_CRYPTO_DEV_HISI_SEC=m
 CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m
 CONFIG_CRYPTO_DEV_OCTEONTX2_CPT=m
 # CONFIG_CRYPTO_DEV_OCTEONTX_CPT is not set
+# CONFIG_CRYPTO_DEV_QAT_420XX is not set
 # CONFIG_CRYPTO_DEV_QAT_4XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXXVF is not set
@@ -1067,6 +1068,7 @@ CONFIG_CRYPTO_DEV_OCTEONTX2_CPT=m
 # CONFIG_CRYPTO_DEV_QAT_C62XVF is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCC is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCCVF is not set
+# CONFIG_CRYPTO_DEV_QAT_ERROR_INJECTION is not set
 # CONFIG_CRYPTO_DEV_QCE is not set
 # CONFIG_CRYPTO_DEV_QCOM_RNG is not set
 # CONFIG_CRYPTO_DEV_SAFEXCEL is not set
@@ -6815,6 +6817,7 @@ CONFIG_VEXPRESS_CONFIG=y
 CONFIG_VFAT_FS=m
 # CONFIG_VFIO_AMBA is not set
 CONFIG_VFIO_CONTAINER=y
+# CONFIG_VFIO_DEBUGFS is not set
 CONFIG_VFIO_DEVICE_CDEV=y
 CONFIG_VFIO_GROUP=y
 CONFIG_VFIO_IOMMU_TYPE1=m

kernel-aarch64-64k-rhel.config

@@ -1060,6 +1060,7 @@ CONFIG_CRYPTO_DEV_HISI_SEC=m
 CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m
 CONFIG_CRYPTO_DEV_OCTEONTX2_CPT=m
 # CONFIG_CRYPTO_DEV_OCTEONTX_CPT is not set
+# CONFIG_CRYPTO_DEV_QAT_420XX is not set
 # CONFIG_CRYPTO_DEV_QAT_4XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXXVF is not set
@@ -1067,6 +1068,7 @@ CONFIG_CRYPTO_DEV_OCTEONTX2_CPT=m
 # CONFIG_CRYPTO_DEV_QAT_C62XVF is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCC is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCCVF is not set
+# CONFIG_CRYPTO_DEV_QAT_ERROR_INJECTION is not set
 # CONFIG_CRYPTO_DEV_QCE is not set
 # CONFIG_CRYPTO_DEV_QCOM_RNG is not set
 # CONFIG_CRYPTO_DEV_SAFEXCEL is not set
@@ -6791,6 +6793,7 @@ CONFIG_VEXPRESS_CONFIG=y
 CONFIG_VFAT_FS=m
 # CONFIG_VFIO_AMBA is not set
 CONFIG_VFIO_CONTAINER=y
+# CONFIG_VFIO_DEBUGFS is not set
 CONFIG_VFIO_DEVICE_CDEV=y
 CONFIG_VFIO_GROUP=y
 CONFIG_VFIO_IOMMU_TYPE1=m

kernel-aarch64-debug-rhel.config

@@ -1057,6 +1057,7 @@ CONFIG_CRYPTO_DEV_HISI_SEC=m
 CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m
 CONFIG_CRYPTO_DEV_OCTEONTX2_CPT=m
 # CONFIG_CRYPTO_DEV_OCTEONTX_CPT is not set
+# CONFIG_CRYPTO_DEV_QAT_420XX is not set
 # CONFIG_CRYPTO_DEV_QAT_4XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXXVF is not set
@@ -1064,6 +1065,7 @@ CONFIG_CRYPTO_DEV_OCTEONTX2_CPT=m
 # CONFIG_CRYPTO_DEV_QAT_C62XVF is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCC is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCCVF is not set
+# CONFIG_CRYPTO_DEV_QAT_ERROR_INJECTION is not set
 # CONFIG_CRYPTO_DEV_QCE is not set
 # CONFIG_CRYPTO_DEV_QCOM_RNG is not set
 # CONFIG_CRYPTO_DEV_SAFEXCEL is not set
@@ -6812,6 +6814,7 @@ CONFIG_VEXPRESS_CONFIG=y
 CONFIG_VFAT_FS=m
 # CONFIG_VFIO_AMBA is not set
 CONFIG_VFIO_CONTAINER=y
+# CONFIG_VFIO_DEBUGFS is not set
 CONFIG_VFIO_DEVICE_CDEV=y
 CONFIG_VFIO_GROUP=y
 CONFIG_VFIO_IOMMU_TYPE1=m

kernel-aarch64-rhel.config

@@ -1057,6 +1057,7 @@ CONFIG_CRYPTO_DEV_HISI_SEC=m
 CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m
 CONFIG_CRYPTO_DEV_OCTEONTX2_CPT=m
 # CONFIG_CRYPTO_DEV_OCTEONTX_CPT is not set
+# CONFIG_CRYPTO_DEV_QAT_420XX is not set
 # CONFIG_CRYPTO_DEV_QAT_4XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXXVF is not set
@@ -1064,6 +1065,7 @@ CONFIG_CRYPTO_DEV_OCTEONTX2_CPT=m
 # CONFIG_CRYPTO_DEV_QAT_C62XVF is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCC is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCCVF is not set
+# CONFIG_CRYPTO_DEV_QAT_ERROR_INJECTION is not set
 # CONFIG_CRYPTO_DEV_QCE is not set
 # CONFIG_CRYPTO_DEV_QCOM_RNG is not set
 # CONFIG_CRYPTO_DEV_SAFEXCEL is not set
@@ -6788,6 +6790,7 @@ CONFIG_VEXPRESS_CONFIG=y
 CONFIG_VFAT_FS=m
 # CONFIG_VFIO_AMBA is not set
 CONFIG_VFIO_CONTAINER=y
+# CONFIG_VFIO_DEBUGFS is not set
 CONFIG_VFIO_DEVICE_CDEV=y
 CONFIG_VFIO_GROUP=y
 CONFIG_VFIO_IOMMU_TYPE1=m

kernel-aarch64-rt-debug-rhel.config

@@ -1070,6 +1070,7 @@ CONFIG_CRYPTO_DEV_HISI_SEC=m
 CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m
 CONFIG_CRYPTO_DEV_OCTEONTX2_CPT=m
 # CONFIG_CRYPTO_DEV_OCTEONTX_CPT is not set
+# CONFIG_CRYPTO_DEV_QAT_420XX is not set
 # CONFIG_CRYPTO_DEV_QAT_4XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXXVF is not set
@@ -1077,6 +1078,7 @@ CONFIG_CRYPTO_DEV_OCTEONTX2_CPT=m
 # CONFIG_CRYPTO_DEV_QAT_C62XVF is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCC is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCCVF is not set
+# CONFIG_CRYPTO_DEV_QAT_ERROR_INJECTION is not set
 # CONFIG_CRYPTO_DEV_QCE is not set
 # CONFIG_CRYPTO_DEV_QCOM_RNG is not set
 # CONFIG_CRYPTO_DEV_SAFEXCEL is not set
@@ -6919,6 +6921,7 @@ CONFIG_VEXPRESS_CONFIG=y
 CONFIG_VFAT_FS=m
 # CONFIG_VFIO_AMBA is not set
 CONFIG_VFIO_CONTAINER=y
+# CONFIG_VFIO_DEBUGFS is not set
 CONFIG_VFIO_DEVICE_CDEV=y
 CONFIG_VFIO_GROUP=y
 CONFIG_VFIO_IOMMU_TYPE1=m

kernel-aarch64-rt-rhel.config

@@ -1070,6 +1070,7 @@ CONFIG_CRYPTO_DEV_HISI_SEC=m
 CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m
 CONFIG_CRYPTO_DEV_OCTEONTX2_CPT=m
 # CONFIG_CRYPTO_DEV_OCTEONTX_CPT is not set
+# CONFIG_CRYPTO_DEV_QAT_420XX is not set
 # CONFIG_CRYPTO_DEV_QAT_4XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXXVF is not set
@@ -1077,6 +1078,7 @@ CONFIG_CRYPTO_DEV_OCTEONTX2_CPT=m
 # CONFIG_CRYPTO_DEV_QAT_C62XVF is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCC is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCCVF is not set
+# CONFIG_CRYPTO_DEV_QAT_ERROR_INJECTION is not set
 # CONFIG_CRYPTO_DEV_QCE is not set
 # CONFIG_CRYPTO_DEV_QCOM_RNG is not set
 # CONFIG_CRYPTO_DEV_SAFEXCEL is not set
@@ -6895,6 +6897,7 @@ CONFIG_VEXPRESS_CONFIG=y
 CONFIG_VFAT_FS=m
 # CONFIG_VFIO_AMBA is not set
 CONFIG_VFIO_CONTAINER=y
+# CONFIG_VFIO_DEBUGFS is not set
 CONFIG_VFIO_DEVICE_CDEV=y
 CONFIG_VFIO_GROUP=y
 CONFIG_VFIO_IOMMU_TYPE1=m

kernel-ppc64le-debug-rhel.config

@@ -847,6 +847,7 @@ CONFIG_CRYPTO_DEV_NX_COMPRESS_PSERIES=y
 CONFIG_CRYPTO_DEV_NX_COMPRESS=y
 CONFIG_CRYPTO_DEV_NX=y
 # CONFIG_CRYPTO_DEV_OCTEONTX_CPT is not set
+# CONFIG_CRYPTO_DEV_QAT_420XX is not set
 # CONFIG_CRYPTO_DEV_QAT_4XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXXVF is not set
@@ -854,6 +855,7 @@ CONFIG_CRYPTO_DEV_NX=y
 # CONFIG_CRYPTO_DEV_QAT_C62XVF is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCC is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCCVF is not set
+# CONFIG_CRYPTO_DEV_QAT_ERROR_INJECTION is not set
 # CONFIG_CRYPTO_DEV_QCOM_RNG is not set
 # CONFIG_CRYPTO_DEV_SAFEXCEL is not set
 CONFIG_CRYPTO_DEV_SP_CCP=y
@@ -6226,6 +6228,7 @@ CONFIG_VETH=m
 CONFIG_VFAT_FS=m
 # CONFIG_VFIO_AMBA is not set
 CONFIG_VFIO_CONTAINER=y
+# CONFIG_VFIO_DEBUGFS is not set
 CONFIG_VFIO_DEVICE_CDEV=y
 CONFIG_VFIO_GROUP=y
 CONFIG_VFIO_IOMMU_TYPE1=m

kernel-ppc64le-rhel.config

@@ -847,6 +847,7 @@ CONFIG_CRYPTO_DEV_NX_COMPRESS_PSERIES=y
 CONFIG_CRYPTO_DEV_NX_COMPRESS=y
 CONFIG_CRYPTO_DEV_NX=y
 # CONFIG_CRYPTO_DEV_OCTEONTX_CPT is not set
+# CONFIG_CRYPTO_DEV_QAT_420XX is not set
 # CONFIG_CRYPTO_DEV_QAT_4XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXXVF is not set
@@ -854,6 +855,7 @@ CONFIG_CRYPTO_DEV_NX=y
 # CONFIG_CRYPTO_DEV_QAT_C62XVF is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCC is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCCVF is not set
+# CONFIG_CRYPTO_DEV_QAT_ERROR_INJECTION is not set
 # CONFIG_CRYPTO_DEV_QCOM_RNG is not set
 # CONFIG_CRYPTO_DEV_SAFEXCEL is not set
 CONFIG_CRYPTO_DEV_SP_CCP=y
@@ -6204,6 +6206,7 @@ CONFIG_VETH=m
 CONFIG_VFAT_FS=m
 # CONFIG_VFIO_AMBA is not set
 CONFIG_VFIO_CONTAINER=y
+# CONFIG_VFIO_DEBUGFS is not set
 CONFIG_VFIO_DEVICE_CDEV=y
 CONFIG_VFIO_GROUP=y
 CONFIG_VFIO_IOMMU_TYPE1=m

kernel-s390x-debug-rhel.config

@@ -845,6 +845,7 @@ CONFIG_CRYPTO_DEV_HISI_SEC=m
 # CONFIG_CRYPTO_DEV_IAA_CRYPTO is not set
 CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m
 # CONFIG_CRYPTO_DEV_OCTEONTX_CPT is not set
+# CONFIG_CRYPTO_DEV_QAT_420XX is not set
 # CONFIG_CRYPTO_DEV_QAT_4XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXXVF is not set
@@ -852,6 +853,7 @@ CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m
 # CONFIG_CRYPTO_DEV_QAT_C62XVF is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCC is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCCVF is not set
+# CONFIG_CRYPTO_DEV_QAT_ERROR_INJECTION is not set
 # CONFIG_CRYPTO_DEV_QCOM_RNG is not set
 # CONFIG_CRYPTO_DEV_SAFEXCEL is not set
 CONFIG_CRYPTO_DEV_SP_CCP=y
@@ -6212,6 +6214,7 @@ CONFIG_VFAT_FS=m
 CONFIG_VFIO_AP=m
 CONFIG_VFIO_CCW=m
 CONFIG_VFIO_CONTAINER=y
+# CONFIG_VFIO_DEBUGFS is not set
 CONFIG_VFIO_DEVICE_CDEV=y
 CONFIG_VFIO_GROUP=y
 CONFIG_VFIO_IOMMU_TYPE1=m

kernel-s390x-rhel.config

@@ -845,6 +845,7 @@ CONFIG_CRYPTO_DEV_HISI_SEC=m
 # CONFIG_CRYPTO_DEV_IAA_CRYPTO is not set
 CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m
 # CONFIG_CRYPTO_DEV_OCTEONTX_CPT is not set
+# CONFIG_CRYPTO_DEV_QAT_420XX is not set
 # CONFIG_CRYPTO_DEV_QAT_4XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXXVF is not set
@@ -852,6 +853,7 @@ CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m
 # CONFIG_CRYPTO_DEV_QAT_C62XVF is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCC is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCCVF is not set
+# CONFIG_CRYPTO_DEV_QAT_ERROR_INJECTION is not set
 # CONFIG_CRYPTO_DEV_QCOM_RNG is not set
 # CONFIG_CRYPTO_DEV_SAFEXCEL is not set
 CONFIG_CRYPTO_DEV_SP_CCP=y
@@ -6190,6 +6192,7 @@ CONFIG_VFAT_FS=m
 CONFIG_VFIO_AP=m
 CONFIG_VFIO_CCW=m
 CONFIG_VFIO_CONTAINER=y
+# CONFIG_VFIO_DEBUGFS is not set
 CONFIG_VFIO_DEVICE_CDEV=y
 CONFIG_VFIO_GROUP=y
 CONFIG_VFIO_IOMMU_TYPE1=m

kernel-s390x-zfcpdump-rhel.config

@@ -849,6 +849,7 @@ CONFIG_CRYPTO_DEV_HISI_SEC=m
 # CONFIG_CRYPTO_DEV_IAA_CRYPTO is not set
 CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m
 # CONFIG_CRYPTO_DEV_OCTEONTX_CPT is not set
+# CONFIG_CRYPTO_DEV_QAT_420XX is not set
 # CONFIG_CRYPTO_DEV_QAT_4XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXX is not set
 # CONFIG_CRYPTO_DEV_QAT_C3XXXVF is not set
@@ -856,6 +857,7 @@ CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m
 # CONFIG_CRYPTO_DEV_QAT_C62XVF is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCC is not set
 # CONFIG_CRYPTO_DEV_QAT_DH895xCCVF is not set
+# CONFIG_CRYPTO_DEV_QAT_ERROR_INJECTION is not set
 # CONFIG_CRYPTO_DEV_QCOM_RNG is not set
 # CONFIG_CRYPTO_DEV_SAFEXCEL is not set
 CONFIG_CRYPTO_DEV_SP_CCP=y
@@ -6216,6 +6218,7 @@ CONFIG_VETH=m
 CONFIG_VFIO_AP=m
 CONFIG_VFIO_CCW=m
 CONFIG_VFIO_CONTAINER=y
+# CONFIG_VFIO_DEBUGFS is not set
 CONFIG_VFIO_DEVICE_CDEV=y
 CONFIG_VFIO_GROUP=y
 CONFIG_VFIO_IOMMU_TYPE1=m

kernel-x86_64-debug-rhel.config

@@ -900,6 +900,7 @@ CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m
 CONFIG_CRYPTO_DEV_PADLOCK_AES=m
 CONFIG_CRYPTO_DEV_PADLOCK=m
 CONFIG_CRYPTO_DEV_PADLOCK_SHA=m
+CONFIG_CRYPTO_DEV_QAT_420XX=m
 CONFIG_CRYPTO_DEV_QAT_4XXX=m
 CONFIG_CRYPTO_DEV_QAT_C3XXX=m
 CONFIG_CRYPTO_DEV_QAT_C3XXXVF=m
@@ -907,6 +908,7 @@ CONFIG_CRYPTO_DEV_QAT_C62X=m
 CONFIG_CRYPTO_DEV_QAT_C62XVF=m
 CONFIG_CRYPTO_DEV_QAT_DH895xCC=m
 CONFIG_CRYPTO_DEV_QAT_DH895xCCVF=m
+# CONFIG_CRYPTO_DEV_QAT_ERROR_INJECTION is not set
 # CONFIG_CRYPTO_DEV_QCOM_RNG is not set
 # CONFIG_CRYPTO_DEV_SAFEXCEL is not set
 CONFIG_CRYPTO_DEV_SP_CCP=y
@@ -6494,6 +6496,7 @@ CONFIG_VETH=m
 CONFIG_VFAT_FS=m
 # CONFIG_VFIO_AMBA is not set
 CONFIG_VFIO_CONTAINER=y
+# CONFIG_VFIO_DEBUGFS is not set
 CONFIG_VFIO_DEVICE_CDEV=y
 CONFIG_VFIO_GROUP=y
 CONFIG_VFIO_IOMMU_TYPE1=m

kernel-x86_64-rhel.config

@@ -900,6 +900,7 @@ CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m
 CONFIG_CRYPTO_DEV_PADLOCK_AES=m
 CONFIG_CRYPTO_DEV_PADLOCK=m
 CONFIG_CRYPTO_DEV_PADLOCK_SHA=m
+CONFIG_CRYPTO_DEV_QAT_420XX=m
 CONFIG_CRYPTO_DEV_QAT_4XXX=m
 CONFIG_CRYPTO_DEV_QAT_C3XXX=m
 CONFIG_CRYPTO_DEV_QAT_C3XXXVF=m
@@ -907,6 +908,7 @@ CONFIG_CRYPTO_DEV_QAT_C62X=m
 CONFIG_CRYPTO_DEV_QAT_C62XVF=m
 CONFIG_CRYPTO_DEV_QAT_DH895xCC=m
 CONFIG_CRYPTO_DEV_QAT_DH895xCCVF=m
+# CONFIG_CRYPTO_DEV_QAT_ERROR_INJECTION is not set
 # CONFIG_CRYPTO_DEV_QCOM_RNG is not set
 # CONFIG_CRYPTO_DEV_SAFEXCEL is not set
 CONFIG_CRYPTO_DEV_SP_CCP=y
@@ -6471,6 +6473,7 @@ CONFIG_VETH=m
 CONFIG_VFAT_FS=m
 # CONFIG_VFIO_AMBA is not set
 CONFIG_VFIO_CONTAINER=y
+# CONFIG_VFIO_DEBUGFS is not set
 CONFIG_VFIO_DEVICE_CDEV=y
 CONFIG_VFIO_GROUP=y
 CONFIG_VFIO_IOMMU_TYPE1=m

kernel-x86_64-rt-debug-rhel.config

@@ -915,6 +915,7 @@ CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m
 CONFIG_CRYPTO_DEV_PADLOCK_AES=m
 CONFIG_CRYPTO_DEV_PADLOCK=m
 CONFIG_CRYPTO_DEV_PADLOCK_SHA=m
+CONFIG_CRYPTO_DEV_QAT_420XX=m
 CONFIG_CRYPTO_DEV_QAT_4XXX=m
 CONFIG_CRYPTO_DEV_QAT_C3XXX=m
 CONFIG_CRYPTO_DEV_QAT_C3XXXVF=m
@@ -922,6 +923,7 @@ CONFIG_CRYPTO_DEV_QAT_C62X=m
 CONFIG_CRYPTO_DEV_QAT_C62XVF=m
 CONFIG_CRYPTO_DEV_QAT_DH895xCC=m
 CONFIG_CRYPTO_DEV_QAT_DH895xCCVF=m
+# CONFIG_CRYPTO_DEV_QAT_ERROR_INJECTION is not set
 # CONFIG_CRYPTO_DEV_QCOM_RNG is not set
 # CONFIG_CRYPTO_DEV_SAFEXCEL is not set
 CONFIG_CRYPTO_DEV_SP_CCP=y
@@ -6598,6 +6600,7 @@ CONFIG_VETH=m
 CONFIG_VFAT_FS=m
 # CONFIG_VFIO_AMBA is not set
 CONFIG_VFIO_CONTAINER=y
+# CONFIG_VFIO_DEBUGFS is not set
 CONFIG_VFIO_DEVICE_CDEV=y
 CONFIG_VFIO_GROUP=y
 CONFIG_VFIO_IOMMU_TYPE1=m

kernel-x86_64-rt-rhel.config

@@ -915,6 +915,7 @@ CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m
 CONFIG_CRYPTO_DEV_PADLOCK_AES=m
 CONFIG_CRYPTO_DEV_PADLOCK=m
 CONFIG_CRYPTO_DEV_PADLOCK_SHA=m
+CONFIG_CRYPTO_DEV_QAT_420XX=m
 CONFIG_CRYPTO_DEV_QAT_4XXX=m
 CONFIG_CRYPTO_DEV_QAT_C3XXX=m
 CONFIG_CRYPTO_DEV_QAT_C3XXXVF=m
@@ -922,6 +923,7 @@ CONFIG_CRYPTO_DEV_QAT_C62X=m
 CONFIG_CRYPTO_DEV_QAT_C62XVF=m
 CONFIG_CRYPTO_DEV_QAT_DH895xCC=m
 CONFIG_CRYPTO_DEV_QAT_DH895xCCVF=m
+# CONFIG_CRYPTO_DEV_QAT_ERROR_INJECTION is not set
 # CONFIG_CRYPTO_DEV_QCOM_RNG is not set
 # CONFIG_CRYPTO_DEV_SAFEXCEL is not set
 CONFIG_CRYPTO_DEV_SP_CCP=y
@@ -6575,6 +6577,7 @@ CONFIG_VETH=m
 CONFIG_VFAT_FS=m
 # CONFIG_VFIO_AMBA is not set
 CONFIG_VFIO_CONTAINER=y
+# CONFIG_VFIO_DEBUGFS is not set
 CONFIG_VFIO_DEVICE_CDEV=y
 CONFIG_VFIO_GROUP=y
 CONFIG_VFIO_IOMMU_TYPE1=m

kernel.changelog

@@ -1,3 +1,267 @@
+* Fri Apr 12 2024 Lucas Zampieri <lzampier@redhat.com> [5.14.0-439.el9]
+- PCI/MSI: Prevent MSI hardware interrupt number truncation (Myron Stowe) [RHEL-21453]
+- redhat/configs: Add CONFIG_CRYPTO_DEV_QAT_420XX (Vladis Dronov) [RHEL-17715]
+- crypto: qat - make ring to service map common for QAT GEN4 (Vladis Dronov) [RHEL-17715]
+- crypto: qat - fix ring to service map for dcc in 420xx (Vladis Dronov) [RHEL-17715]
+- crypto: qat - fix ring to service map for dcc in 4xxx (Vladis Dronov) [RHEL-17715]
+- crypto: qat - fix comment structure (Vladis Dronov) [RHEL-17715]
+- crypto: qat - remove unnecessary description from comment (Vladis Dronov) [RHEL-17715]
+- crypto: qat - remove double initialization of value (Vladis Dronov) [RHEL-17715]
+- crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-17715]
+- crypto: qat - removed unused macro in adf_cnv_dbgfs.c (Vladis Dronov) [RHEL-17715]
+- crypto: qat - remove unused macros in qat_comp_alg.c (Vladis Dronov) [RHEL-17715]
+- crypto: qat - uninitialized variable in adf_hb_error_inject_write() (Vladis Dronov) [RHEL-17715]
+- Documentation: qat: fix auto_reset section (Vladis Dronov) [RHEL-17715]
+- crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-17715]
+- crypto: qat - change SLAs cleanup flow at shutdown (Vladis Dronov) [RHEL-17715]
+- crypto: qat - improve aer error reset handling (Vladis Dronov) [RHEL-17715]
+- crypto: qat - limit heartbeat notifications (Vladis Dronov) [RHEL-17715]
+- crypto: qat - add auto reset on error (Vladis Dronov) [RHEL-17715]
+- crypto: qat - add fatal error notification (Vladis Dronov) [RHEL-17715]
+- crypto: qat - re-enable sriov after pf reset (Vladis Dronov) [RHEL-17715]
+- crypto: qat - update PFVF protocol for recovery (Vladis Dronov) [RHEL-17715]
+- crypto: qat - disable arbitration before reset (Vladis Dronov) [RHEL-17715]
+- crypto: qat - add fatal error notify method (Vladis Dronov) [RHEL-17715]
+- crypto: qat - add heartbeat error simulator (Vladis Dronov) [RHEL-17715]
+- crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-17715]
+- crypto: qat - avoid memcpy() overflow warning (Vladis Dronov) [RHEL-17715]
+- crypto: qat - fix arbiter mapping generation algorithm for QAT 402xx (Vladis Dronov) [RHEL-17715]
+- crypto: qat - generate dynamically arbiter mappings (Vladis Dronov) [RHEL-17715]
+- crypto: qat - add support for ring pair level telemetry (Vladis Dronov) [RHEL-17715]
+- crypto: qat - add support for device telemetry (Vladis Dronov) [RHEL-17715]
+- crypto: qat - add admin msgs for telemetry (Vladis Dronov) [RHEL-17715]
+- crypto: qat - include pci.h for GET_DEV() (Vladis Dronov) [RHEL-17715]
+- crypto: qat - add support for 420xx devices (Vladis Dronov) [RHEL-17715]
+- crypto: qat - move fw config related structures (Vladis Dronov) [RHEL-17715]
+- crypto: qat - relocate portions of qat_4xxx code (Vladis Dronov) [RHEL-17715]
+- crypto: qat - change signature of uof_get_num_objs() (Vladis Dronov) [RHEL-17715]
+- crypto: qat - relocate and rename get_service_enabled() (Vladis Dronov) [RHEL-17715]
+- seq_file: add helper macro to define attribute for rw file (Vladis Dronov) [RHEL-17715]
+- minmax: Introduce {min,max}_array() (Vladis Dronov) [RHEL-17715]
+- vfio/fsl-mc: Block calling interrupt handler without trigger (Alex Williamson) [RHEL-30023]
+- vfio/platform: Create persistent IRQ handlers (Alex Williamson) [RHEL-30023]
+- vfio/platform: Disable virqfds on cleanup (Alex Williamson) [RHEL-30023]
+- vfio/pci: Create persistent INTx handler (Alex Williamson) [RHEL-30023]
+- vfio: Introduce interface to flush virqfd inject workqueue (Alex Williamson) [RHEL-30023]
+- vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-30023]
+- vfio/pci: Disable auto-enable of exclusive INTx IRQ (Alex Williamson) [RHEL-30023]
+- vfio/mbochs: make mbochs_class constant (Alex Williamson) [RHEL-30023]
+- vfio/mdpy: make mdpy_class constant (Alex Williamson) [RHEL-30023]
+- vfio: amba: Rename pl330_ids[] to vfio_amba_ids[] (Alex Williamson) [RHEL-30023]
+- vfio/pci: rename and export range_intersect_range (Alex Williamson) [RHEL-30023]
+- vfio/pci: rename and export do_io_rw() (Alex Williamson) [RHEL-30023]
+- vfio/pci: WARN_ON driver_override kasprintf failure (Alex Williamson) [RHEL-30023]
+- vfio/pci: Expose vfio_pci_core_iowrite/read##size() (Alex Williamson) [RHEL-30023]
+- vfio/pci: Expose vfio_pci_core_setup_barmap() (Alex Williamson) [RHEL-30023]
+- vfio/type1: account iommu allocations (Alex Williamson) [RHEL-30023]
+- redhat/configs: Disable CONFIG_VFIO_DEBUGFS (Alex Williamson) [RHEL-30023]
+- MAINTAINERS: Add vfio debugfs interface doc link (Alex Williamson) [RHEL-30023]
+- Documentation: add debugfs description for vfio (Alex Williamson) [RHEL-30023]
+- vfio/migration: Add debugfs to live migration driver (Alex Williamson) [RHEL-30023]
+- vfio: Drop vfio_file_iommu_group() stub to fudge around a KVM wart (Alex Williamson) [RHEL-30023]
+- iommufd/iova_bitmap: Move symbols to IOMMUFD namespace (Alex Williamson) [RHEL-30023]
+- vfio: Move iova_bitmap into iommufd (Alex Williamson) [RHEL-30023]
+- vfio/iova_bitmap: Export more API symbols (Alex Williamson) [RHEL-30023]
+- thermal: sysfs: Fix trip_point_hyst_store() (Jennifer Berringer) [RHEL-31231]
+- ring-buffer: Do not attempt to read past "commit" (Jerome Marchand) [RHEL-29064] {CVE-2023-52501}
+- Upstream has changed the APIs to suspend the array. (Nigel Croxon) [RHEL-26279]
+- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-26279]
+- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" (Nigel Croxon) [RHEL-26279]
+- Revert "raid5: read data is wrong when recovery happens" (Nigel Croxon) [RHEL-26279]
+- md: add a mddev_is_dm helper (Nigel Croxon) [RHEL-26279]
+- md: add a mddev_add_trace_msg helper (Nigel Croxon) [RHEL-26279]
+- md: add a mddev_trace_remap helper (Nigel Croxon) [RHEL-26279]
+- md/raid1-10: add a helper raid1_check_read_range() (Nigel Croxon) [RHEL-26279]
+- md/raid1: factor out helpers to add rdev to conf (Nigel Croxon) [RHEL-26279]
+- md: add a new helper rdev_has_badblock() (Nigel Croxon) [RHEL-26279]
+- md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-26279]
+- dm-raid: fix lockdep waring in "pers->hot_add_disk" (Nigel Croxon) [RHEL-26279]
+- md/dm-raid: don't call md_reap_sync_thread() directly (Nigel Croxon) [RHEL-26279]
+- dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape (Nigel Croxon) [RHEL-26279]
+- dm-raid: add a new helper prepare_suspend() in md_personality (Nigel Croxon) [RHEL-26279]
+- dm-raid: really frozen sync_thread during suspend (Nigel Croxon) [RHEL-26279]
+- md: add a new helper reshape_interrupted() (Nigel Croxon) [RHEL-26279]
+- md: export helper md_is_rdwr() (Nigel Croxon) [RHEL-26279]
+- md: export helpers to stop sync_thread (Nigel Croxon) [RHEL-26279]
+- md: don't clear MD_RECOVERY_FROZEN for new dm-raid until resume (Nigel Croxon) [RHEL-26279]
+- md/md-bitmap: fix incorrect usage for sb_index (Nigel Croxon) [RHEL-26279]
+- md: check mddev->pers before calling md_set_readonly() (Nigel Croxon) [RHEL-26279]
+- md: clean up openers check in do_md_stop() and md_set_readonly() (Nigel Croxon) [RHEL-26279]
+- md: sync blockdev before stopping raid or setting readonly (Nigel Croxon) [RHEL-26279]
+- md: factor out a helper to sync mddev (Nigel Croxon) [RHEL-26279]
+- md: Don't clear MD_CLOSING when the raid is about to stop (Nigel Croxon) [RHEL-26279]
+- md: return directly before setting did_set_md_closing (Nigel Croxon) [RHEL-26279]
+- md: clean up invalid BUG_ON in md_ioctl (Nigel Croxon) [RHEL-26279]
+- md: changed the switch of RAID_VERSION to if (Nigel Croxon) [RHEL-26279]
+- md: merge the check of capabilities into md_ioctl_valid() (Nigel Croxon) [RHEL-26279]
+- md: Don't suspend the array for interrupted reshape (Nigel Croxon) [RHEL-26279]
+- md: Don't register sync_thread for reshape directly (Nigel Croxon) [RHEL-26279]
+- md: Make sure md_do_sync() will set MD_RECOVERY_DONE (Nigel Croxon) [RHEL-26279]
+- md: Don't ignore read-only array in md_check_recovery() (Nigel Croxon) [RHEL-26279]
+- md: Don't ignore suspended array in md_check_recovery() (Nigel Croxon) [RHEL-26279]
+- md: Fix missing release of 'active_io' for flush (Nigel Croxon) [RHEL-26279]
+- md: fix kmemleak of rdev->serial (Nigel Croxon) [RHEL-26279]
+- md: use RCU lock to protect traversal in md_spares_need_change() (Nigel Croxon) [RHEL-26279]
+- md: get rdev->mddev with READ_ONCE() (Nigel Croxon) [RHEL-26279]
+- md: remove redundant md_wakeup_thread() (Nigel Croxon) [RHEL-26279]
+- md: remove redundant check of 'mddev->sync_thread' (Nigel Croxon) [RHEL-26279]
+- md: fix a suspicious RCU usage warning (Nigel Croxon) [RHEL-26279]
+- md/raid1: Use blk_opf_t for read and write operations (Nigel Croxon) [RHEL-26279]
+- md: Fix md_seq_ops() regressions (Nigel Croxon) [RHEL-26279]
+- md/raid1: support read error check (Nigel Croxon) [RHEL-26279]
+- md: factor out a helper exceed_read_errors() to check read_errors (Nigel Croxon) [RHEL-26279]
+- md: Whenassemble the array, consult the superblock of the freshest device (Nigel Croxon) [RHEL-26279]
+- md/raid1: remove unnecessary null checking (Nigel Croxon) [RHEL-26279]
+- md: split MD_RECOVERY_NEEDED out of mddev_resume (Nigel Croxon) [RHEL-26279]
+- md: fix stopping sync thread (Nigel Croxon) [RHEL-26279]
+- md: don't leave 'MD_RECOVERY_FROZEN' in error path of md_set_readonly() (Nigel Croxon) [RHEL-26279]
+- md: fix missing flush of sync_work (Nigel Croxon) [RHEL-26279]
+- md: synchronize flush io with array reconfiguration (Nigel Croxon) [RHEL-26279]
+- md/raid6: use valid sector values to determine if an I/O should wait on the reshape (Nigel Croxon) [RHEL-26279]
+- md/raid5: remove rcu protection to access rdev from conf (Nigel Croxon) [RHEL-26279]
+- md/raid1: remove rcu protection to access rdev from conf (Nigel Croxon) [RHEL-26279]
+- md/raid10: remove rcu protection to access rdev from conf (Nigel Croxon) [RHEL-26279]
+- md: remove flag RemoveSynchronized (Nigel Croxon) [RHEL-26279]
+- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" (Nigel Croxon) [RHEL-26279]
+- md: bypass block throttle for superblock update (Nigel Croxon) [RHEL-26279]
+- md: fix bi_status reporting in md_end_clone_io (Nigel Croxon) [RHEL-26279]
+- md: cleanup pers->prepare_suspend() (Nigel Croxon) [RHEL-26279]
+- md-cluster: check for timeout while a new disk adding (Nigel Croxon) [RHEL-26279]
+- md: rename __mddev_suspend/resume() back to mddev_suspend/resume() (Nigel Croxon) [RHEL-26279]
+- md/dm-raid: use new apis to suspend array (Nigel Croxon) [RHEL-26279]
+- md: remove old apis to suspend the array (Nigel Croxon) [RHEL-26279]
+- md: suspend array in md_start_sync() if array need reconfiguration (Nigel Croxon) [RHEL-26279]
+- md/raid5: replace suspend with quiesce() callback (Nigel Croxon) [RHEL-26279]
+- md: cleanup mddev_create/destroy_serial_pool() (Nigel Croxon) [RHEL-26279]
+- md: use new apis to suspend array before mddev_create/destroy_serial_pool (Nigel Croxon) [RHEL-26279]
+- md: use new apis to suspend array for ioctls involed array reconfiguration (Nigel Croxon) [RHEL-26279]
+- md: use new apis to suspend array for adding/removing rdev from state_store() (Nigel Croxon) [RHEL-26279]
+- md: use new apis to suspend array for sysfs apis (Nigel Croxon) [RHEL-26279]
+- md/raid5: use new apis to suspend array (Nigel Croxon) [RHEL-26279]
+- md/raid5-cache: use new apis to suspend array (Nigel Croxon) [RHEL-26279]
+- md/md-bitmap: use new apis to suspend array for location_store() (Nigel Croxon) [RHEL-26279]
+- md: add new helpers to suspend/resume and lock/unlock array (Nigel Croxon) [RHEL-26279]
+- md: add new helpers to suspend/resume array (Nigel Croxon) [RHEL-26279]
+- md: replace is_md_suspended() with 'mddev->suspended' in md_check_recovery() (Nigel Croxon) [RHEL-26279]
+- md/raid5-cache: use READ_ONCE/WRITE_ONCE for 'conf->log' (Nigel Croxon) [RHEL-26279]
+- md: use READ_ONCE/WRITE_ONCE for 'suspend_lo' and 'suspend_hi' (Nigel Croxon) [RHEL-26279]
+- md/raid1: don't split discard io for write behind (Nigel Croxon) [RHEL-26279]
+- md: do not require mddev_lock() for all options in array_state_store() (Nigel Croxon) [RHEL-26279]
+- md: simplify md_seq_ops (Nigel Croxon) [RHEL-26279]
+- md: factor out a helper from mddev_put() (Nigel Croxon) [RHEL-26279]
+- ext4: check if ext4_blkdev_get() returns NULL (Ming Lei) [RHEL-30965]
+- libceph: init the cursor when preparing the sparse read (Xiubo Li) [RHEL-19813]
+- libceph: just wait for more data to be available on the socket (Xiubo Li) [RHEL-19813]
+- libceph: rename read_sparse_msg_*() to read_partial_sparse_msg_*() (Xiubo Li) [RHEL-19813]
+- libceph: fail sparse-read if the data length doesn't match (Xiubo Li) [RHEL-19813]
+- ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (Xiubo Li) [RHEL-19813]
+- ceph: remove unnecessary IS_ERR() check in ceph_fname_to_usr() (Xiubo Li) [RHEL-19813]
+- ceph: remove unnecessary check for NULL in parse_longname() (Xiubo Li) [RHEL-19813]
+- ceph: switch ceph_lookup/atomic_open() to use new fscrypt helper (Xiubo Li) [RHEL-19813]
+- ceph: fix updating i_truncate_pagecache_size for fscrypt (Xiubo Li) [RHEL-19813]
+- ceph: wait for OSD requests' callbacks to finish when unmounting (Xiubo Li) [RHEL-19813]
+- ceph: drop messages from MDS when unmounting (Xiubo Li) [RHEL-19813]
+- ceph: prevent snapshot creation in encrypted locked directories (Xiubo Li) [RHEL-19813]
+- ceph: add support for encrypted snapshot names (Xiubo Li) [RHEL-19813]
+- ceph: invalidate pages when doing direct/sync writes (Xiubo Li) [RHEL-19813]
+- ceph: plumb in decryption during reads (Xiubo Li) [RHEL-19813]
+- ceph: add encryption support to writepage and writepages (Xiubo Li) [RHEL-19813]
+- ceph: redirty the page for writepage on failure (Xiubo Li) [RHEL-19813]
+- ceph: add read/modify/write to ceph_sync_write (Xiubo Li) [RHEL-19813]
+- ceph: align data in pages in ceph_sync_write (Xiubo Li) [RHEL-19813]
+- ceph: don't use special DIO path for encrypted inodes (Xiubo Li) [RHEL-19813]
+- ceph: don't get the inline data for new creating files (Xiubo Li) [RHEL-19813]
+- ceph: add truncate size handling support for fscrypt (Xiubo Li) [RHEL-19813]
+- ceph: add object version support for sync read (Xiubo Li) [RHEL-19813]
+- libceph: allow ceph_osdc_new_request to accept a multi-op read (Xiubo Li) [RHEL-19813]
+- libceph: add CEPH_OSD_OP_ASSERT_VER support (Xiubo Li) [RHEL-19813]
+- ceph: add infrastructure for file encryption and decryption (Xiubo Li) [RHEL-19813]
+- ceph: handle fscrypt fields in cap messages from MDS (Xiubo Li) [RHEL-19813]
+- ceph: size handling in MClientRequest, cap updates and inode traces (Xiubo Li) [RHEL-19813]
+- ceph: mark directory as non-complete after loading key (Xiubo Li) [RHEL-19813]
+- ceph: allow encrypting a directory while not having Ax caps (Xiubo Li) [RHEL-19813]
+- ceph: add some fscrypt guardrails (Xiubo Li) [RHEL-19813]
+- ceph: create symlinks with encrypted and base64-encoded targets (Xiubo Li) [RHEL-19813]
+- ceph: add support to readdir for encrypted names (Xiubo Li) [RHEL-19813]
+- ceph: pass the request to parse_reply_info_readdir() (Xiubo Li) [RHEL-19813]
+- ceph: make ceph_fill_trace and ceph_get_name decrypt names (Xiubo Li) [RHEL-19813]
+- ceph: add helpers for converting names for userland presentation (Xiubo Li) [RHEL-19813]
+- ceph: make d_revalidate call fscrypt revalidator for encrypted dentries (Xiubo Li) [RHEL-19813]
+- ceph: set DCACHE_NOKEY_NAME flag in ceph_lookup/atomic_open() (Xiubo Li) [RHEL-19813]
+- ceph: decode alternate_name in lease info (Xiubo Li) [RHEL-19813]
+- ceph: send alternate_name in MClientRequest (Xiubo Li) [RHEL-19813]
+- ceph: encode encrypted name in ceph_mdsc_build_path and dentry release (Xiubo Li) [RHEL-19813]
+- ceph: add base64 endcoding routines for encrypted names (Xiubo Li) [RHEL-19813]
+- ceph: make ioctl cmds more readable in debug log (Xiubo Li) [RHEL-19813]
+- ceph: add fscrypt ioctls and ceph.fscrypt.auth vxattr (Xiubo Li) [RHEL-19813]
+- ceph: implement -o test_dummy_encryption mount option (Xiubo Li) [RHEL-19813]
+- ceph: fscrypt_auth handling for ceph (Xiubo Li) [RHEL-19813]
+- ceph: use osd_req_op_extent_osd_iter for netfs reads (Xiubo Li) [RHEL-19813]
+- libceph: add new iov_iter-based ceph_msg_data_type and ceph_osd_data_type (Xiubo Li) [RHEL-19813]
+- ceph: make ceph_msdc_build_path use ref-walk (Xiubo Li) [RHEL-19813]
+- ceph: preallocate inode for ops that may create one (Xiubo Li) [RHEL-19813]
+- fs: change test in inode_insert5 for adding to the sb list (Xiubo Li) [RHEL-19813]
+- ceph: add new mount option to enable sparse reads (Xiubo Li) [RHEL-19813]
+- libceph: add sparse read support to OSD client (Xiubo Li) [RHEL-19813]
+- libceph: add sparse read support to msgr1 (Xiubo Li) [RHEL-19813]
+- libceph: support sparse reads on msgr2 secure codepath (Xiubo Li) [RHEL-19813]
+- libceph: new sparse_read op, support sparse reads on msgr2 crc codepath (Xiubo Li) [RHEL-19813]
+- libceph: define struct ceph_sparse_extent and add some helpers (Xiubo Li) [RHEL-19813]
+- libceph: add spinlock around osd->o_requests (Xiubo Li) [RHEL-19813]
+- ceph: try to check caps immediately after async creating finishes (Xiubo Li) [RHEL-19813]
+- ceph: remove useless session parameter for check_caps() (Xiubo Li) [RHEL-19813]
+- ceph: flush the dirty caps immediatelly when quota is approaching (Xiubo Li) [RHEL-19813]
+- ceph: fix NULL pointer dereference for req->r_session (Xiubo Li) [RHEL-19813]
+- ceph: fix a NULL vs IS_ERR() check when calling ceph_lookup_inode() (Xiubo Li) [RHEL-19813]
+- ceph: fix incorrectly showing the .snap size for stat (Xiubo Li) [RHEL-19813]
+- ceph: fail the open_by_handle_at() if the dentry is being unlinked (Xiubo Li) [RHEL-19813]
+- ceph: increment i_version when doing a setattr with caps (Xiubo Li) [RHEL-19813]
+- ceph: Use kcalloc for allocating multiple elements (Xiubo Li) [RHEL-19813]
+- ceph: no need to wait for transition RDCACHE|RD -> RD (Xiubo Li) [RHEL-19813]
+- ceph: fail the request if the peer MDS doesn't support getvxattr op (Xiubo Li) [RHEL-19813]
+- ceph: wake up the waiters if any new caps comes (Xiubo Li) [RHEL-19813]
+- libceph: drop last_piece flag from ceph_msg_data_cursor (Xiubo Li) [RHEL-19813]
+- fscrypt: Replace 1-element array with flexible array (Xiubo Li) [RHEL-19813]
+- fscrypt: optimize fscrypt_initialize() (Xiubo Li) [RHEL-19813]
+- fscrypt: use WARN_ON_ONCE instead of WARN_ON (Xiubo Li) [RHEL-19813]
+- fscrypt: check for NULL keyring in fscrypt_put_master_key_activeref() (Xiubo Li) [RHEL-19813]
+- fscrypt: improve fscrypt_destroy_keyring() documentation (Xiubo Li) [RHEL-19813]
+- fscrypt: destroy keyring after security_sb_delete() (Xiubo Li) [RHEL-19813]
+- fscrypt: support decrypting data from large folios (Xiubo Li) [RHEL-19813]
+- fscrypt: clean up fscrypt_add_test_dummy_key() (Xiubo Li) [RHEL-19813]
+- fs/super.c: stop calling fscrypt_destroy_keyring() from __put_super() (Xiubo Li) [RHEL-19813]
+- ext4: stop calling fscrypt_add_test_dummy_key() (Xiubo Li) [RHEL-19813]
+- fscrypt: add the test dummy encryption key on-demand (Xiubo Li) [RHEL-19813]
+- fscrypt: stop using PG_error to track error status (Xiubo Li) [RHEL-19813]
+- fscrypt: remove fscrypt_set_test_dummy_encryption() (Xiubo Li) [RHEL-19813]
+- fscrypt: align Base64 encoding with RFC 4648 base64url (Xiubo Li) [RHEL-19813]
+- fscrypt: new helper function - fscrypt_prepare_lookup_partial() (Xiubo Li) [RHEL-19813]
+- fscrypt: add fscrypt_context_for_new_inode (Xiubo Li) [RHEL-19813]
+- fscrypt: export fscrypt_fname_encrypt and fscrypt_fname_encrypted_size (Xiubo Li) [RHEL-19813]
+- fscrypt: split up FS_CRYPTO_BLOCK_SIZE (Xiubo Li) [RHEL-19813]
+- fscrypt: update documentation for direct I/O support (Xiubo Li) [RHEL-19813]
+- fscrypt: add functions for direct I/O support (Xiubo Li) [RHEL-19813]
+- fscrypt: add additional documentation for SM4 support (Xiubo Li) [RHEL-19813]
+- fscrypt: remove unused Speck definitions (Xiubo Li) [RHEL-19813]
+- fscrypt: Add SM4 XTS/CTS symmetric algorithm support (Xiubo Li) [RHEL-19813]
+- blk-crypto: Add support for SM4-XTS blk crypto mode (Xiubo Li) [RHEL-19813]
+- fscrypt: add comment for fscrypt_valid_enc_modes_v1() (Xiubo Li) [RHEL-19813]
+- fscrypt: pass super_block to fscrypt_put_master_key_activeref() (Xiubo Li) [RHEL-19813]
+- fscrypt: Add HCTR2 support for filename encryption (Xiubo Li) [RHEL-19813]
+- fscrypt: allow 256-bit master keys with AES-256-XTS (Xiubo Li) [RHEL-19813]
+- fscrypt: improve a few comments (Xiubo Li) [RHEL-19813]
+- fscrypt: improve documentation for inline encryption (Xiubo Li) [RHEL-19813]
+- fscrypt: clean up comments in bio.c (Xiubo Li) [RHEL-19813]
+- crypto: iaa - mark tech preview (Vladis Dronov) [RHEL-29685]
+- crypto: iaa - Fix nr_cpus < nr_iaa case (Vladis Dronov) [RHEL-29685]
+- crypto: iaa - fix the missing CRYPTO_ALG_ASYNC in cra_flags (Vladis Dronov) [RHEL-29685]
+- crypto: iaa - Fix comp/decomp delay statistics (Vladis Dronov) [RHEL-29685]
+- crypto: iaa - Fix async_disable descriptor leak (Vladis Dronov) [RHEL-29685]
+- crypto: iaa - Remove unnecessary debugfs_create_dir() error check in iaa_crypto_debugfs_init() (Vladis Dronov) [RHEL-29685]
+- crypto: iaa - Remove header table code (Vladis Dronov) [RHEL-29685]
+- ice: fix enabling RX VLAN filtering (Petr Oros) [RHEL-28837]
+Resolves: RHEL-17715, RHEL-19813, RHEL-21453, RHEL-26279, RHEL-29064, RHEL-29685, RHEL-30023, RHEL-30965, RHEL-31231
+
 * Wed Apr 10 2024 Lucas Zampieri <lzampier@redhat.com> [5.14.0-438.el9]
 - ipmi: Remove usage of the deprecated ida_simple_xx() API (Tony Camuso) [RHEL-25927]
 - ipmi: Use regspacings passed as a module parameter (Tony Camuso) [RHEL-25927]
@@ -3217,6 +3481,10 @@ Resolves: RHEL-20254, RHEL-26081, RHEL-26616
 - redhat: create an empty changelog file when changing its name (Herton R. Krzesinski)
 Resolves: RHEL-19514, RHEL-24906, RHEL-26162, RHEL-26354, RHEL-26672
 
+* Wed Apr 10 2024 Scott Weaver <scweaver@redhat.com> [5.14.0-427.13.1.el9_4]
+- ice: fix enabling RX VLAN filtering (Petr Oros) [RHEL-28837]
+Resolves: RHEL-28837
+
 * Fri Apr 05 2024 Scott Weaver <scweaver@redhat.com> [5.14.0-427.12.1.el9_4]
 - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28877 RHEL-28878] {CVE-2023-52489}
 - Revert "[redhat] kabi: add symbol __scsi_execute to stablelist" (Ewan D. Milne) [RHEL-30725]

kernel.spec

@@ -165,15 +165,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 438
+%define pkgrelease 439
 %define kversion 5
-%define tarfile_release 5.14.0-438.el9
+%define tarfile_release 5.14.0-439.el9
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 438%{?buildid}%{?dist}
+%define specrelease 439%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-438.el9
+%define kabiversion 5.14.0-439.el9
 
 #
 # End of genspec.sh variables
@@ -3733,6 +3733,269 @@ fi
 #
 #
 %changelog
+* Fri Apr 12 2024 Lucas Zampieri <lzampier@redhat.com> [5.14.0-439.el9]
+- PCI/MSI: Prevent MSI hardware interrupt number truncation (Myron Stowe) [RHEL-21453]
+- redhat/configs: Add CONFIG_CRYPTO_DEV_QAT_420XX (Vladis Dronov) [RHEL-17715]
+- crypto: qat - make ring to service map common for QAT GEN4 (Vladis Dronov) [RHEL-17715]
+- crypto: qat - fix ring to service map for dcc in 420xx (Vladis Dronov) [RHEL-17715]
+- crypto: qat - fix ring to service map for dcc in 4xxx (Vladis Dronov) [RHEL-17715]
+- crypto: qat - fix comment structure (Vladis Dronov) [RHEL-17715]
+- crypto: qat - remove unnecessary description from comment (Vladis Dronov) [RHEL-17715]
+- crypto: qat - remove double initialization of value (Vladis Dronov) [RHEL-17715]
+- crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-17715]
+- crypto: qat - removed unused macro in adf_cnv_dbgfs.c (Vladis Dronov) [RHEL-17715]
+- crypto: qat - remove unused macros in qat_comp_alg.c (Vladis Dronov) [RHEL-17715]
+- crypto: qat - uninitialized variable in adf_hb_error_inject_write() (Vladis Dronov) [RHEL-17715]
+- Documentation: qat: fix auto_reset section (Vladis Dronov) [RHEL-17715]
+- crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-17715]
+- crypto: qat - change SLAs cleanup flow at shutdown (Vladis Dronov) [RHEL-17715]
+- crypto: qat - improve aer error reset handling (Vladis Dronov) [RHEL-17715]
+- crypto: qat - limit heartbeat notifications (Vladis Dronov) [RHEL-17715]
+- crypto: qat - add auto reset on error (Vladis Dronov) [RHEL-17715]
+- crypto: qat - add fatal error notification (Vladis Dronov) [RHEL-17715]
+- crypto: qat - re-enable sriov after pf reset (Vladis Dronov) [RHEL-17715]
+- crypto: qat - update PFVF protocol for recovery (Vladis Dronov) [RHEL-17715]
+- crypto: qat - disable arbitration before reset (Vladis Dronov) [RHEL-17715]
+- crypto: qat - add fatal error notify method (Vladis Dronov) [RHEL-17715]
+- crypto: qat - add heartbeat error simulator (Vladis Dronov) [RHEL-17715]
+- crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-17715]
+- crypto: qat - avoid memcpy() overflow warning (Vladis Dronov) [RHEL-17715]
+- crypto: qat - fix arbiter mapping generation algorithm for QAT 402xx (Vladis Dronov) [RHEL-17715]
+- crypto: qat - generate dynamically arbiter mappings (Vladis Dronov) [RHEL-17715]
+- crypto: qat - add support for ring pair level telemetry (Vladis Dronov) [RHEL-17715]
+- crypto: qat - add support for device telemetry (Vladis Dronov) [RHEL-17715]
+- crypto: qat - add admin msgs for telemetry (Vladis Dronov) [RHEL-17715]
+- crypto: qat - include pci.h for GET_DEV() (Vladis Dronov) [RHEL-17715]
+- crypto: qat - add support for 420xx devices (Vladis Dronov) [RHEL-17715]
+- crypto: qat - move fw config related structures (Vladis Dronov) [RHEL-17715]
+- crypto: qat - relocate portions of qat_4xxx code (Vladis Dronov) [RHEL-17715]
+- crypto: qat - change signature of uof_get_num_objs() (Vladis Dronov) [RHEL-17715]
+- crypto: qat - relocate and rename get_service_enabled() (Vladis Dronov) [RHEL-17715]
+- seq_file: add helper macro to define attribute for rw file (Vladis Dronov) [RHEL-17715]
+- minmax: Introduce {min,max}_array() (Vladis Dronov) [RHEL-17715]
+- vfio/fsl-mc: Block calling interrupt handler without trigger (Alex Williamson) [RHEL-30023]
+- vfio/platform: Create persistent IRQ handlers (Alex Williamson) [RHEL-30023]
+- vfio/platform: Disable virqfds on cleanup (Alex Williamson) [RHEL-30023]
+- vfio/pci: Create persistent INTx handler (Alex Williamson) [RHEL-30023]
+- vfio: Introduce interface to flush virqfd inject workqueue (Alex Williamson) [RHEL-30023]
+- vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-30023]
+- vfio/pci: Disable auto-enable of exclusive INTx IRQ (Alex Williamson) [RHEL-30023]
+- vfio/mbochs: make mbochs_class constant (Alex Williamson) [RHEL-30023]
+- vfio/mdpy: make mdpy_class constant (Alex Williamson) [RHEL-30023]
+- vfio: amba: Rename pl330_ids[] to vfio_amba_ids[] (Alex Williamson) [RHEL-30023]
+- vfio/pci: rename and export range_intersect_range (Alex Williamson) [RHEL-30023]
+- vfio/pci: rename and export do_io_rw() (Alex Williamson) [RHEL-30023]
+- vfio/pci: WARN_ON driver_override kasprintf failure (Alex Williamson) [RHEL-30023]
+- vfio/pci: Expose vfio_pci_core_iowrite/read##size() (Alex Williamson) [RHEL-30023]
+- vfio/pci: Expose vfio_pci_core_setup_barmap() (Alex Williamson) [RHEL-30023]
+- vfio/type1: account iommu allocations (Alex Williamson) [RHEL-30023]
+- redhat/configs: Disable CONFIG_VFIO_DEBUGFS (Alex Williamson) [RHEL-30023]
+- MAINTAINERS: Add vfio debugfs interface doc link (Alex Williamson) [RHEL-30023]
+- Documentation: add debugfs description for vfio (Alex Williamson) [RHEL-30023]
+- vfio/migration: Add debugfs to live migration driver (Alex Williamson) [RHEL-30023]
+- vfio: Drop vfio_file_iommu_group() stub to fudge around a KVM wart (Alex Williamson) [RHEL-30023]
+- iommufd/iova_bitmap: Move symbols to IOMMUFD namespace (Alex Williamson) [RHEL-30023]
+- vfio: Move iova_bitmap into iommufd (Alex Williamson) [RHEL-30023]
+- vfio/iova_bitmap: Export more API symbols (Alex Williamson) [RHEL-30023]
+- thermal: sysfs: Fix trip_point_hyst_store() (Jennifer Berringer) [RHEL-31231]
+- ring-buffer: Do not attempt to read past "commit" (Jerome Marchand) [RHEL-29064] {CVE-2023-52501}
+- Upstream has changed the APIs to suspend the array. (Nigel Croxon) [RHEL-26279]
+- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-26279]
+- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" (Nigel Croxon) [RHEL-26279]
+- Revert "raid5: read data is wrong when recovery happens" (Nigel Croxon) [RHEL-26279]
+- md: add a mddev_is_dm helper (Nigel Croxon) [RHEL-26279]
+- md: add a mddev_add_trace_msg helper (Nigel Croxon) [RHEL-26279]
+- md: add a mddev_trace_remap helper (Nigel Croxon) [RHEL-26279]
+- md/raid1-10: add a helper raid1_check_read_range() (Nigel Croxon) [RHEL-26279]
+- md/raid1: factor out helpers to add rdev to conf (Nigel Croxon) [RHEL-26279]
+- md: add a new helper rdev_has_badblock() (Nigel Croxon) [RHEL-26279]
+- md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-26279]
+- dm-raid: fix lockdep waring in "pers->hot_add_disk" (Nigel Croxon) [RHEL-26279]
+- md/dm-raid: don't call md_reap_sync_thread() directly (Nigel Croxon) [RHEL-26279]
+- dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape (Nigel Croxon) [RHEL-26279]
+- dm-raid: add a new helper prepare_suspend() in md_personality (Nigel Croxon) [RHEL-26279]
+- dm-raid: really frozen sync_thread during suspend (Nigel Croxon) [RHEL-26279]
+- md: add a new helper reshape_interrupted() (Nigel Croxon) [RHEL-26279]
+- md: export helper md_is_rdwr() (Nigel Croxon) [RHEL-26279]
+- md: export helpers to stop sync_thread (Nigel Croxon) [RHEL-26279]
+- md: don't clear MD_RECOVERY_FROZEN for new dm-raid until resume (Nigel Croxon) [RHEL-26279]
+- md/md-bitmap: fix incorrect usage for sb_index (Nigel Croxon) [RHEL-26279]
+- md: check mddev->pers before calling md_set_readonly() (Nigel Croxon) [RHEL-26279]
+- md: clean up openers check in do_md_stop() and md_set_readonly() (Nigel Croxon) [RHEL-26279]
+- md: sync blockdev before stopping raid or setting readonly (Nigel Croxon) [RHEL-26279]
+- md: factor out a helper to sync mddev (Nigel Croxon) [RHEL-26279]
+- md: Don't clear MD_CLOSING when the raid is about to stop (Nigel Croxon) [RHEL-26279]
+- md: return directly before setting did_set_md_closing (Nigel Croxon) [RHEL-26279]
+- md: clean up invalid BUG_ON in md_ioctl (Nigel Croxon) [RHEL-26279]
+- md: changed the switch of RAID_VERSION to if (Nigel Croxon) [RHEL-26279]
+- md: merge the check of capabilities into md_ioctl_valid() (Nigel Croxon) [RHEL-26279]
+- md: Don't suspend the array for interrupted reshape (Nigel Croxon) [RHEL-26279]
+- md: Don't register sync_thread for reshape directly (Nigel Croxon) [RHEL-26279]
+- md: Make sure md_do_sync() will set MD_RECOVERY_DONE (Nigel Croxon) [RHEL-26279]
+- md: Don't ignore read-only array in md_check_recovery() (Nigel Croxon) [RHEL-26279]
+- md: Don't ignore suspended array in md_check_recovery() (Nigel Croxon) [RHEL-26279]
+- md: Fix missing release of 'active_io' for flush (Nigel Croxon) [RHEL-26279]
+- md: fix kmemleak of rdev->serial (Nigel Croxon) [RHEL-26279]
+- md: use RCU lock to protect traversal in md_spares_need_change() (Nigel Croxon) [RHEL-26279]
+- md: get rdev->mddev with READ_ONCE() (Nigel Croxon) [RHEL-26279]
+- md: remove redundant md_wakeup_thread() (Nigel Croxon) [RHEL-26279]
+- md: remove redundant check of 'mddev->sync_thread' (Nigel Croxon) [RHEL-26279]
+- md: fix a suspicious RCU usage warning (Nigel Croxon) [RHEL-26279]
+- md/raid1: Use blk_opf_t for read and write operations (Nigel Croxon) [RHEL-26279]
+- md: Fix md_seq_ops() regressions (Nigel Croxon) [RHEL-26279]
+- md/raid1: support read error check (Nigel Croxon) [RHEL-26279]
+- md: factor out a helper exceed_read_errors() to check read_errors (Nigel Croxon) [RHEL-26279]
+- md: Whenassemble the array, consult the superblock of the freshest device (Nigel Croxon) [RHEL-26279]
+- md/raid1: remove unnecessary null checking (Nigel Croxon) [RHEL-26279]
+- md: split MD_RECOVERY_NEEDED out of mddev_resume (Nigel Croxon) [RHEL-26279]
+- md: fix stopping sync thread (Nigel Croxon) [RHEL-26279]
+- md: don't leave 'MD_RECOVERY_FROZEN' in error path of md_set_readonly() (Nigel Croxon) [RHEL-26279]
+- md: fix missing flush of sync_work (Nigel Croxon) [RHEL-26279]
+- md: synchronize flush io with array reconfiguration (Nigel Croxon) [RHEL-26279]
+- md/raid6: use valid sector values to determine if an I/O should wait on the reshape (Nigel Croxon) [RHEL-26279]
+- md/raid5: remove rcu protection to access rdev from conf (Nigel Croxon) [RHEL-26279]
+- md/raid1: remove rcu protection to access rdev from conf (Nigel Croxon) [RHEL-26279]
+- md/raid10: remove rcu protection to access rdev from conf (Nigel Croxon) [RHEL-26279]
+- md: remove flag RemoveSynchronized (Nigel Croxon) [RHEL-26279]
+- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" (Nigel Croxon) [RHEL-26279]
+- md: bypass block throttle for superblock update (Nigel Croxon) [RHEL-26279]
+- md: fix bi_status reporting in md_end_clone_io (Nigel Croxon) [RHEL-26279]
+- md: cleanup pers->prepare_suspend() (Nigel Croxon) [RHEL-26279]
+- md-cluster: check for timeout while a new disk adding (Nigel Croxon) [RHEL-26279]
+- md: rename __mddev_suspend/resume() back to mddev_suspend/resume() (Nigel Croxon) [RHEL-26279]
+- md/dm-raid: use new apis to suspend array (Nigel Croxon) [RHEL-26279]
+- md: remove old apis to suspend the array (Nigel Croxon) [RHEL-26279]
+- md: suspend array in md_start_sync() if array need reconfiguration (Nigel Croxon) [RHEL-26279]
+- md/raid5: replace suspend with quiesce() callback (Nigel Croxon) [RHEL-26279]
+- md: cleanup mddev_create/destroy_serial_pool() (Nigel Croxon) [RHEL-26279]
+- md: use new apis to suspend array before mddev_create/destroy_serial_pool (Nigel Croxon) [RHEL-26279]
+- md: use new apis to suspend array for ioctls involed array reconfiguration (Nigel Croxon) [RHEL-26279]
+- md: use new apis to suspend array for adding/removing rdev from state_store() (Nigel Croxon) [RHEL-26279]
+- md: use new apis to suspend array for sysfs apis (Nigel Croxon) [RHEL-26279]
+- md/raid5: use new apis to suspend array (Nigel Croxon) [RHEL-26279]
+- md/raid5-cache: use new apis to suspend array (Nigel Croxon) [RHEL-26279]
+- md/md-bitmap: use new apis to suspend array for location_store() (Nigel Croxon) [RHEL-26279]
+- md: add new helpers to suspend/resume and lock/unlock array (Nigel Croxon) [RHEL-26279]
+- md: add new helpers to suspend/resume array (Nigel Croxon) [RHEL-26279]
+- md: replace is_md_suspended() with 'mddev->suspended' in md_check_recovery() (Nigel Croxon) [RHEL-26279]
+- md/raid5-cache: use READ_ONCE/WRITE_ONCE for 'conf->log' (Nigel Croxon) [RHEL-26279]
+- md: use READ_ONCE/WRITE_ONCE for 'suspend_lo' and 'suspend_hi' (Nigel Croxon) [RHEL-26279]
+- md/raid1: don't split discard io for write behind (Nigel Croxon) [RHEL-26279]
+- md: do not require mddev_lock() for all options in array_state_store() (Nigel Croxon) [RHEL-26279]
+- md: simplify md_seq_ops (Nigel Croxon) [RHEL-26279]
+- md: factor out a helper from mddev_put() (Nigel Croxon) [RHEL-26279]
+- ext4: check if ext4_blkdev_get() returns NULL (Ming Lei) [RHEL-30965]
+- libceph: init the cursor when preparing the sparse read (Xiubo Li) [RHEL-19813]
+- libceph: just wait for more data to be available on the socket (Xiubo Li) [RHEL-19813]
+- libceph: rename read_sparse_msg_*() to read_partial_sparse_msg_*() (Xiubo Li) [RHEL-19813]
+- libceph: fail sparse-read if the data length doesn't match (Xiubo Li) [RHEL-19813]
+- ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (Xiubo Li) [RHEL-19813]
+- ceph: remove unnecessary IS_ERR() check in ceph_fname_to_usr() (Xiubo Li) [RHEL-19813]
+- ceph: remove unnecessary check for NULL in parse_longname() (Xiubo Li) [RHEL-19813]
+- ceph: switch ceph_lookup/atomic_open() to use new fscrypt helper (Xiubo Li) [RHEL-19813]
+- ceph: fix updating i_truncate_pagecache_size for fscrypt (Xiubo Li) [RHEL-19813]
+- ceph: wait for OSD requests' callbacks to finish when unmounting (Xiubo Li) [RHEL-19813]
+- ceph: drop messages from MDS when unmounting (Xiubo Li) [RHEL-19813]
+- ceph: prevent snapshot creation in encrypted locked directories (Xiubo Li) [RHEL-19813]
+- ceph: add support for encrypted snapshot names (Xiubo Li) [RHEL-19813]
+- ceph: invalidate pages when doing direct/sync writes (Xiubo Li) [RHEL-19813]
+- ceph: plumb in decryption during reads (Xiubo Li) [RHEL-19813]
+- ceph: add encryption support to writepage and writepages (Xiubo Li) [RHEL-19813]
+- ceph: redirty the page for writepage on failure (Xiubo Li) [RHEL-19813]
+- ceph: add read/modify/write to ceph_sync_write (Xiubo Li) [RHEL-19813]
+- ceph: align data in pages in ceph_sync_write (Xiubo Li) [RHEL-19813]
+- ceph: don't use special DIO path for encrypted inodes (Xiubo Li) [RHEL-19813]
+- ceph: don't get the inline data for new creating files (Xiubo Li) [RHEL-19813]
+- ceph: add truncate size handling support for fscrypt (Xiubo Li) [RHEL-19813]
+- ceph: add object version support for sync read (Xiubo Li) [RHEL-19813]
+- libceph: allow ceph_osdc_new_request to accept a multi-op read (Xiubo Li) [RHEL-19813]
+- libceph: add CEPH_OSD_OP_ASSERT_VER support (Xiubo Li) [RHEL-19813]
+- ceph: add infrastructure for file encryption and decryption (Xiubo Li) [RHEL-19813]
+- ceph: handle fscrypt fields in cap messages from MDS (Xiubo Li) [RHEL-19813]
+- ceph: size handling in MClientRequest, cap updates and inode traces (Xiubo Li) [RHEL-19813]
+- ceph: mark directory as non-complete after loading key (Xiubo Li) [RHEL-19813]
+- ceph: allow encrypting a directory while not having Ax caps (Xiubo Li) [RHEL-19813]
+- ceph: add some fscrypt guardrails (Xiubo Li) [RHEL-19813]
+- ceph: create symlinks with encrypted and base64-encoded targets (Xiubo Li) [RHEL-19813]
+- ceph: add support to readdir for encrypted names (Xiubo Li) [RHEL-19813]
+- ceph: pass the request to parse_reply_info_readdir() (Xiubo Li) [RHEL-19813]
+- ceph: make ceph_fill_trace and ceph_get_name decrypt names (Xiubo Li) [RHEL-19813]
+- ceph: add helpers for converting names for userland presentation (Xiubo Li) [RHEL-19813]
+- ceph: make d_revalidate call fscrypt revalidator for encrypted dentries (Xiubo Li) [RHEL-19813]
+- ceph: set DCACHE_NOKEY_NAME flag in ceph_lookup/atomic_open() (Xiubo Li) [RHEL-19813]
+- ceph: decode alternate_name in lease info (Xiubo Li) [RHEL-19813]
+- ceph: send alternate_name in MClientRequest (Xiubo Li) [RHEL-19813]
+- ceph: encode encrypted name in ceph_mdsc_build_path and dentry release (Xiubo Li) [RHEL-19813]
+- ceph: add base64 endcoding routines for encrypted names (Xiubo Li) [RHEL-19813]
+- ceph: make ioctl cmds more readable in debug log (Xiubo Li) [RHEL-19813]
+- ceph: add fscrypt ioctls and ceph.fscrypt.auth vxattr (Xiubo Li) [RHEL-19813]
+- ceph: implement -o test_dummy_encryption mount option (Xiubo Li) [RHEL-19813]
+- ceph: fscrypt_auth handling for ceph (Xiubo Li) [RHEL-19813]
+- ceph: use osd_req_op_extent_osd_iter for netfs reads (Xiubo Li) [RHEL-19813]
+- libceph: add new iov_iter-based ceph_msg_data_type and ceph_osd_data_type (Xiubo Li) [RHEL-19813]
+- ceph: make ceph_msdc_build_path use ref-walk (Xiubo Li) [RHEL-19813]
+- ceph: preallocate inode for ops that may create one (Xiubo Li) [RHEL-19813]
+- fs: change test in inode_insert5 for adding to the sb list (Xiubo Li) [RHEL-19813]
+- ceph: add new mount option to enable sparse reads (Xiubo Li) [RHEL-19813]
+- libceph: add sparse read support to OSD client (Xiubo Li) [RHEL-19813]
+- libceph: add sparse read support to msgr1 (Xiubo Li) [RHEL-19813]
+- libceph: support sparse reads on msgr2 secure codepath (Xiubo Li) [RHEL-19813]
+- libceph: new sparse_read op, support sparse reads on msgr2 crc codepath (Xiubo Li) [RHEL-19813]
+- libceph: define struct ceph_sparse_extent and add some helpers (Xiubo Li) [RHEL-19813]
+- libceph: add spinlock around osd->o_requests (Xiubo Li) [RHEL-19813]
+- ceph: try to check caps immediately after async creating finishes (Xiubo Li) [RHEL-19813]
+- ceph: remove useless session parameter for check_caps() (Xiubo Li) [RHEL-19813]
+- ceph: flush the dirty caps immediatelly when quota is approaching (Xiubo Li) [RHEL-19813]
+- ceph: fix NULL pointer dereference for req->r_session (Xiubo Li) [RHEL-19813]
+- ceph: fix a NULL vs IS_ERR() check when calling ceph_lookup_inode() (Xiubo Li) [RHEL-19813]
+- ceph: fix incorrectly showing the .snap size for stat (Xiubo Li) [RHEL-19813]
+- ceph: fail the open_by_handle_at() if the dentry is being unlinked (Xiubo Li) [RHEL-19813]
+- ceph: increment i_version when doing a setattr with caps (Xiubo Li) [RHEL-19813]
+- ceph: Use kcalloc for allocating multiple elements (Xiubo Li) [RHEL-19813]
+- ceph: no need to wait for transition RDCACHE|RD -> RD (Xiubo Li) [RHEL-19813]
+- ceph: fail the request if the peer MDS doesn't support getvxattr op (Xiubo Li) [RHEL-19813]
+- ceph: wake up the waiters if any new caps comes (Xiubo Li) [RHEL-19813]
+- libceph: drop last_piece flag from ceph_msg_data_cursor (Xiubo Li) [RHEL-19813]
+- fscrypt: Replace 1-element array with flexible array (Xiubo Li) [RHEL-19813]
+- fscrypt: optimize fscrypt_initialize() (Xiubo Li) [RHEL-19813]
+- fscrypt: use WARN_ON_ONCE instead of WARN_ON (Xiubo Li) [RHEL-19813]
+- fscrypt: check for NULL keyring in fscrypt_put_master_key_activeref() (Xiubo Li) [RHEL-19813]
+- fscrypt: improve fscrypt_destroy_keyring() documentation (Xiubo Li) [RHEL-19813]
+- fscrypt: destroy keyring after security_sb_delete() (Xiubo Li) [RHEL-19813]
+- fscrypt: support decrypting data from large folios (Xiubo Li) [RHEL-19813]
+- fscrypt: clean up fscrypt_add_test_dummy_key() (Xiubo Li) [RHEL-19813]
+- fs/super.c: stop calling fscrypt_destroy_keyring() from __put_super() (Xiubo Li) [RHEL-19813]
+- ext4: stop calling fscrypt_add_test_dummy_key() (Xiubo Li) [RHEL-19813]
+- fscrypt: add the test dummy encryption key on-demand (Xiubo Li) [RHEL-19813]
+- fscrypt: stop using PG_error to track error status (Xiubo Li) [RHEL-19813]
+- fscrypt: remove fscrypt_set_test_dummy_encryption() (Xiubo Li) [RHEL-19813]
+- fscrypt: align Base64 encoding with RFC 4648 base64url (Xiubo Li) [RHEL-19813]
+- fscrypt: new helper function - fscrypt_prepare_lookup_partial() (Xiubo Li) [RHEL-19813]
+- fscrypt: add fscrypt_context_for_new_inode (Xiubo Li) [RHEL-19813]
+- fscrypt: export fscrypt_fname_encrypt and fscrypt_fname_encrypted_size (Xiubo Li) [RHEL-19813]
+- fscrypt: split up FS_CRYPTO_BLOCK_SIZE (Xiubo Li) [RHEL-19813]
+- fscrypt: update documentation for direct I/O support (Xiubo Li) [RHEL-19813]
+- fscrypt: add functions for direct I/O support (Xiubo Li) [RHEL-19813]
+- fscrypt: add additional documentation for SM4 support (Xiubo Li) [RHEL-19813]
+- fscrypt: remove unused Speck definitions (Xiubo Li) [RHEL-19813]
+- fscrypt: Add SM4 XTS/CTS symmetric algorithm support (Xiubo Li) [RHEL-19813]
+- blk-crypto: Add support for SM4-XTS blk crypto mode (Xiubo Li) [RHEL-19813]
+- fscrypt: add comment for fscrypt_valid_enc_modes_v1() (Xiubo Li) [RHEL-19813]
+- fscrypt: pass super_block to fscrypt_put_master_key_activeref() (Xiubo Li) [RHEL-19813]
+- fscrypt: Add HCTR2 support for filename encryption (Xiubo Li) [RHEL-19813]
+- fscrypt: allow 256-bit master keys with AES-256-XTS (Xiubo Li) [RHEL-19813]
+- fscrypt: improve a few comments (Xiubo Li) [RHEL-19813]
+- fscrypt: improve documentation for inline encryption (Xiubo Li) [RHEL-19813]
+- fscrypt: clean up comments in bio.c (Xiubo Li) [RHEL-19813]
+- crypto: iaa - mark tech preview (Vladis Dronov) [RHEL-29685]
+- crypto: iaa - Fix nr_cpus < nr_iaa case (Vladis Dronov) [RHEL-29685]
+- crypto: iaa - fix the missing CRYPTO_ALG_ASYNC in cra_flags (Vladis Dronov) [RHEL-29685]
+- crypto: iaa - Fix comp/decomp delay statistics (Vladis Dronov) [RHEL-29685]
+- crypto: iaa - Fix async_disable descriptor leak (Vladis Dronov) [RHEL-29685]
+- crypto: iaa - Remove unnecessary debugfs_create_dir() error check in iaa_crypto_debugfs_init() (Vladis Dronov) [RHEL-29685]
+- crypto: iaa - Remove header table code (Vladis Dronov) [RHEL-29685]
+- ice: fix enabling RX VLAN filtering (Petr Oros) [RHEL-28837]
+
 * Wed Apr 10 2024 Lucas Zampieri <lzampier@redhat.com> [5.14.0-438.el9]
 - ipmi: Remove usage of the deprecated ida_simple_xx() API (Tony Camuso) [RHEL-25927]
 - ipmi: Use regspacings passed as a module parameter (Tony Camuso) [RHEL-25927]

sources

@@ -1,3 +1,3 @@
-SHA512 (linux-5.14.0-438.el9.tar.xz) = 975a7f7f856959e338c74f6d07d6a5666eebc3f9be14cbdafc96eaee979173a6ddc117ba9637c274749cfcc42517a74e4a26c2f73e2e4d3458ac0ece37c77ae0
-SHA512 (kernel-abi-stablelists-5.14.0-438.el9.tar.bz2) = cd342b89af533fd143122d59dc87cd595bf5021f29163eea899768ae90733604a65b8c8861fc6baff76e31c9087ced60fa21db0de385abb63cb7a8010e2241d1
-SHA512 (kernel-kabi-dw-5.14.0-438.el9.tar.bz2) = 0701beb8b23ea67dc408eb4e20ef59f2b89323b16cc2d24b6062aec29037079ebcfe8fe91d15eab48599305c9a3e2c41e7f4072eca80454460b0693bca4b43f6
+SHA512 (linux-5.14.0-439.el9.tar.xz) = d4fbaf81b8e7a54f4ae5ebe7169ddb2bd37cef75bae5458782dcc495bb3ef26196e41c0d0402915521e67dfb6994d3dc024c263d2f1410e7234b6499bde9fa9e
+SHA512 (kernel-abi-stablelists-5.14.0-439.el9.tar.bz2) = 480c7f8dfb9076aca5a33be102d371e1cea6430cadb09b4aeba9e998ccdfd83f00a3af9233bae32b79149cc239ece0e864a0bf380f2c34cbae9ddb7dda231cc4
+SHA512 (kernel-kabi-dw-5.14.0-439.el9.tar.bz2) = 0701beb8b23ea67dc408eb4e20ef59f2b89323b16cc2d24b6062aec29037079ebcfe8fe91d15eab48599305c9a3e2c41e7f4072eca80454460b0693bca4b43f6