kernel 6.12.0-124.38.1.el10_1

This commit is contained in:
Anders da Silva Rytter Hansen 2026-02-18 23:02:53 -03:00
commit 7894e05f61
24 changed files with 120 additions and 29 deletions

View file

@ -12,7 +12,7 @@ RHEL_MINOR = 1
#
# Use this spot to avoid future merge conflicts.
# Do not trim this comment.
RHEL_RELEASE = 124.31.1
RHEL_RELEASE = 124.38.1
#
# RHEL_REBASE_NUM

View file

@ -1287,7 +1287,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1287,7 +1287,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1285,7 +1285,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1285,7 +1285,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1288,7 +1288,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1288,7 +1288,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1286,7 +1286,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1286,7 +1286,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1050,7 +1050,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1050,7 +1050,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1046,7 +1046,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1046,7 +1046,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1047,7 +1047,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1104,7 +1104,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1104,7 +1104,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1105,7 +1105,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1105,7 +1105,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1104,7 +1104,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1104,7 +1104,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1105,7 +1105,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1105,7 +1105,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1,3 +1,51 @@
* Sat Feb 07 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.38.1.el10_1]
- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}
Resolves: RHEL-144335, RHEL-147288
* Thu Feb 05 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.37.1.el10_1]
- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}
Resolves: RHEL-126896, RHEL-135138, RHEL-140874, RHEL-141876
* Tue Feb 03 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.36.1.el10_1]
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}
Resolves: RHEL-128899, RHEL-132908, RHEL-136912, RHEL-137977, RHEL-140263
* Sat Jan 31 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.35.1.el10_1]
- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}
Resolves: RHEL-129044, RHEL-137703, RHEL-139734
* Thu Jan 29 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.34.1.el10_1]
- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task->comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]
Resolves: RHEL-138325, RHEL-141229, RHEL-141711, RHEL-142793, RHEL-143255
* Tue Jan 27 2026 Julio Faracco <jfaracco@redhat.com> [6.12.0-124.33.1.el10_1]
- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}
Resolves: RHEL-131394, RHEL-137333
* Sat Jan 24 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.32.1.el10_1]
- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}
Resolves: RHEL-136945, RHEL-137686, RHEL-138024
* Thu Jan 22 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.31.1.el10_1]
- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
@ -19,6 +67,7 @@
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]
Resolves: RHEL-121647, RHEL-122759, RHEL-126599, RHEL-129115, RHEL-129452, RHEL-133336, RHEL-133456, RHEL-134363, RHEL-134763, RHEL-136289
* Wed Jan 21 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.30.1.el10_1]

View file

@ -176,15 +176,15 @@ Summary: The Linux kernel
%define specrpmversion 6.12.0
%define specversion 6.12.0
%define patchversion 6.12
%define pkgrelease 124.31.1
%define pkgrelease 124.38.1
%define kversion 6
%define tarfile_release 6.12.0-124.31.1.el10_1
%define tarfile_release 6.12.0-124.38.1.el10_1
# This is needed to do merge window version magic
%define patchlevel 12
# This allows pkg_release to have configurable %%{?dist} tag
%define specrelease 124.31.1%{?buildid}%{?dist}
%define specrelease 124.38.1%{?buildid}%{?dist}
# This defines the kabi tarball version
%define kabiversion 6.12.0-124.31.1.el10_1
%define kabiversion 6.12.0-124.38.1.el10_1
# If this variable is set to 1, a bpf selftests build failure will cause a
# fatal kernel package build error
@ -4403,14 +4403,14 @@ fi\
#
#
%changelog
* Wed Feb 04 2026 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-124.31.1
* Tue Feb 17 2026 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-124.38.1
- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert
* Wed Feb 04 2026 Neal Gompa <ngompa@almalinux.org> - 6.12.0-124.31.1
* Tue Feb 17 2026 Neal Gompa <ngompa@almalinux.org> - 6.12.0-124.38.1
- Enable Btrfs support for all kernel variants
* Wed Feb 04 2026 Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-124.31.1
* Tue Feb 17 2026 Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-124.38.1
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
@ -4421,6 +4421,47 @@ fi\
- kernel/rh_messages.h: enable all disabled pci devices by moving to
unmaintained
* Sat Feb 07 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.38.1.el10_1]
- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}
* Thu Feb 05 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.37.1.el10_1]
- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}
* Tue Feb 03 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.36.1.el10_1]
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}
* Sat Jan 31 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.35.1.el10_1]
- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}
* Thu Jan 29 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.34.1.el10_1]
- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task->comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]
* Tue Jan 27 2026 Julio Faracco <jfaracco@redhat.com> [6.12.0-124.33.1.el10_1]
- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}
* Sat Jan 24 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.32.1.el10_1]
- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}
* Thu Jan 22 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.31.1.el10_1]
- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
@ -4442,6 +4483,7 @@ fi\
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]
* Wed Jan 21 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.30.1.el10_1]
- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}