anders/copr-andersrh
1
0
Fork 0
mirror of https://github.com/andersrh/copr-andersrh.git synced 2026-05-21 07:48:02 +00:00
Code Issues Projects Releases Packages Wiki Activity

kernel 6.12.0-55.43.1.el10_0

Browse source
This commit is contained in:
Anders Rytter Hansen 2025-11-15 00:40:05 -03:00
commit bc8ec66916
28 changed files with 488 additions and 32 deletions
Download patch file Download diff file Expand all files Collapse all files

2
my-ostree-os/kernel/Makefile.rhelver
View file

@ -12,7 +12,7 @@ RHEL_MINOR = 0
#
# Use this spot to avoid future merge conflicts.
# Do not trim this comment.
RHEL_RELEASE = 55.42.1
RHEL_RELEASE = 55.43.1
#
# RHEL_REBASE_NUM

3
my-ostree-os/kernel/kernel-aarch64-64k-debug-rhel.config
View file

@ -4771,7 +4771,8 @@ CONFIG_OVERLAY_FS=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

3
my-ostree-os/kernel/kernel-aarch64-64k-rhel.config
View file

@ -4750,7 +4750,8 @@ CONFIG_OVERLAY_FS=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

3
my-ostree-os/kernel/kernel-aarch64-automotive-debug-rhel.config
View file

@ -5058,7 +5058,8 @@ CONFIG_OVERLAY_FS=y
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

3
my-ostree-os/kernel/kernel-aarch64-automotive-rhel.config
View file

@ -5037,7 +5037,8 @@ CONFIG_OVERLAY_FS=y
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

3
my-ostree-os/kernel/kernel-aarch64-debug-rhel.config
View file

@ -4768,7 +4768,8 @@ CONFIG_OVERLAY_FS=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

3
my-ostree-os/kernel/kernel-aarch64-rhel.config
View file

@ -4747,7 +4747,8 @@ CONFIG_OVERLAY_FS=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

3
my-ostree-os/kernel/kernel-aarch64-rt-64k-debug-rhel.config
View file

@ -4812,7 +4812,8 @@ CONFIG_OVERLAY_FS=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

3
my-ostree-os/kernel/kernel-aarch64-rt-64k-rhel.config
View file

@ -4791,7 +4791,8 @@ CONFIG_OVERLAY_FS=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

3
my-ostree-os/kernel/kernel-aarch64-rt-debug-rhel.config
View file

@ -4809,7 +4809,8 @@ CONFIG_OVERLAY_FS=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

3
my-ostree-os/kernel/kernel-aarch64-rt-rhel.config
View file

@ -4788,7 +4788,8 @@ CONFIG_OVERLAY_FS=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

3
my-ostree-os/kernel/kernel-ppc64le-debug-rhel.config
View file

@ -4382,7 +4382,8 @@ CONFIG_OVERLAY_FS=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

3
my-ostree-os/kernel/kernel-ppc64le-rhel.config
View file

@ -4362,7 +4362,8 @@ CONFIG_OVERLAY_FS=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

3
my-ostree-os/kernel/kernel-s390x-debug-rhel.config
View file

@ -4358,7 +4358,8 @@ CONFIG_OVERLAY_FS=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PACK_STACK=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y

3
my-ostree-os/kernel/kernel-s390x-rhel.config
View file

@ -4338,7 +4338,8 @@ CONFIG_OVERLAY_FS=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PACK_STACK=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y

3
my-ostree-os/kernel/kernel-s390x-zfcpdump-rhel.config
View file

@ -4349,7 +4349,8 @@ CONFIG_OVERFLOW_KUNIT_TEST=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
# CONFIG_PACKET is not set
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PACK_STACK=y
# CONFIG_PAGE_EXTENSION is not set
# CONFIG_PAGE_OWNER is not set

4
my-ostree-os/kernel/kernel-x86_64-automotive-debug-rhel.config
View file

@ -3877,6 +3877,7 @@ CONFIG_MITIGATION_CALL_DEPTH_TRACKING=y
CONFIG_MITIGATION_GDS=y
CONFIG_MITIGATION_IBPB_ENTRY=y
CONFIG_MITIGATION_IBRS_ENTRY=y
CONFIG_MITIGATION_ITS=y
CONFIG_MITIGATION_L1TF=y
CONFIG_MITIGATION_MDS=y
CONFIG_MITIGATION_MMIO_STALE_DATA=y
@ -4781,7 +4782,8 @@ CONFIG_OVERLAY_FS=y
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

4
my-ostree-os/kernel/kernel-x86_64-automotive-rhel.config
View file

@ -3857,6 +3857,7 @@ CONFIG_MITIGATION_CALL_DEPTH_TRACKING=y
CONFIG_MITIGATION_GDS=y
CONFIG_MITIGATION_IBPB_ENTRY=y
CONFIG_MITIGATION_IBRS_ENTRY=y
CONFIG_MITIGATION_ITS=y
CONFIG_MITIGATION_L1TF=y
CONFIG_MITIGATION_MDS=y
CONFIG_MITIGATION_MMIO_STALE_DATA=y
@ -4761,7 +4762,8 @@ CONFIG_OVERLAY_FS=y
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

4
my-ostree-os/kernel/kernel-x86_64-debug-rhel.config
View file

@ -3763,6 +3763,7 @@ CONFIG_MITIGATION_CALL_DEPTH_TRACKING=y
CONFIG_MITIGATION_GDS=y
CONFIG_MITIGATION_IBPB_ENTRY=y
CONFIG_MITIGATION_IBRS_ENTRY=y
CONFIG_MITIGATION_ITS=y
CONFIG_MITIGATION_L1TF=y
CONFIG_MITIGATION_MDS=y
CONFIG_MITIGATION_MMIO_STALE_DATA=y
@ -4645,7 +4646,8 @@ CONFIG_OVERLAY_FS=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

4
my-ostree-os/kernel/kernel-x86_64-rhel.config
View file

@ -3743,6 +3743,7 @@ CONFIG_MITIGATION_CALL_DEPTH_TRACKING=y
CONFIG_MITIGATION_GDS=y
CONFIG_MITIGATION_IBPB_ENTRY=y
CONFIG_MITIGATION_IBRS_ENTRY=y
CONFIG_MITIGATION_ITS=y
CONFIG_MITIGATION_L1TF=y
CONFIG_MITIGATION_MDS=y
CONFIG_MITIGATION_MMIO_STALE_DATA=y
@ -4625,7 +4626,8 @@ CONFIG_OVERLAY_FS=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

4
my-ostree-os/kernel/kernel-x86_64-rt-debug-rhel.config
View file

@ -3804,6 +3804,7 @@ CONFIG_MITIGATION_CALL_DEPTH_TRACKING=y
CONFIG_MITIGATION_GDS=y
CONFIG_MITIGATION_IBPB_ENTRY=y
CONFIG_MITIGATION_IBRS_ENTRY=y
CONFIG_MITIGATION_ITS=y
CONFIG_MITIGATION_L1TF=y
CONFIG_MITIGATION_MDS=y
CONFIG_MITIGATION_MMIO_STALE_DATA=y
@ -4686,7 +4687,8 @@ CONFIG_OVERLAY_FS=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

4
my-ostree-os/kernel/kernel-x86_64-rt-rhel.config
View file

@ -3784,6 +3784,7 @@ CONFIG_MITIGATION_CALL_DEPTH_TRACKING=y
CONFIG_MITIGATION_GDS=y
CONFIG_MITIGATION_IBPB_ENTRY=y
CONFIG_MITIGATION_IBRS_ENTRY=y
CONFIG_MITIGATION_ITS=y
CONFIG_MITIGATION_L1TF=y
CONFIG_MITIGATION_MDS=y
CONFIG_MITIGATION_MMIO_STALE_DATA=y
@ -4666,7 +4667,8 @@ CONFIG_OVERLAY_FS=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

4
my-ostree-os/kernel/kernel-x86_64_v2-debug-rhel.config
View file

@ -3763,6 +3763,7 @@ CONFIG_MITIGATION_CALL_DEPTH_TRACKING=y
CONFIG_MITIGATION_GDS=y
CONFIG_MITIGATION_IBPB_ENTRY=y
CONFIG_MITIGATION_IBRS_ENTRY=y
CONFIG_MITIGATION_ITS=y
CONFIG_MITIGATION_L1TF=y
CONFIG_MITIGATION_MDS=y
CONFIG_MITIGATION_MMIO_STALE_DATA=y
@ -4645,7 +4646,8 @@ CONFIG_OVERLAY_FS=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

4
my-ostree-os/kernel/kernel-x86_64_v2-rhel.config
View file

@ -3743,6 +3743,7 @@ CONFIG_MITIGATION_CALL_DEPTH_TRACKING=y
CONFIG_MITIGATION_GDS=y
CONFIG_MITIGATION_IBPB_ENTRY=y
CONFIG_MITIGATION_IBRS_ENTRY=y
CONFIG_MITIGATION_ITS=y
CONFIG_MITIGATION_L1TF=y
CONFIG_MITIGATION_MDS=y
CONFIG_MITIGATION_MMIO_STALE_DATA=y
@ -4625,7 +4626,8 @@ CONFIG_OVERLAY_FS=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

4
my-ostree-os/kernel/kernel-x86_64_v2-rt-debug-rhel.config
View file

@ -3804,6 +3804,7 @@ CONFIG_MITIGATION_CALL_DEPTH_TRACKING=y
CONFIG_MITIGATION_GDS=y
CONFIG_MITIGATION_IBPB_ENTRY=y
CONFIG_MITIGATION_IBRS_ENTRY=y
CONFIG_MITIGATION_ITS=y
CONFIG_MITIGATION_L1TF=y
CONFIG_MITIGATION_MDS=y
CONFIG_MITIGATION_MMIO_STALE_DATA=y
@ -4686,7 +4687,8 @@ CONFIG_OVERLAY_FS=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

4
my-ostree-os/kernel/kernel-x86_64_v2-rt-rhel.config
View file

@ -3784,6 +3784,7 @@ CONFIG_MITIGATION_CALL_DEPTH_TRACKING=y
CONFIG_MITIGATION_GDS=y
CONFIG_MITIGATION_IBPB_ENTRY=y
CONFIG_MITIGATION_IBRS_ENTRY=y
CONFIG_MITIGATION_ITS=y
CONFIG_MITIGATION_L1TF=y
CONFIG_MITIGATION_MDS=y
CONFIG_MITIGATION_MMIO_STALE_DATA=y
@ -4666,7 +4667,8 @@ CONFIG_OVERLAY_FS=m
# CONFIG_PAC1934 is not set
CONFIG_PACKET_DIAG=y
CONFIG_PACKET=y
# CONFIG_PACKING is not set
CONFIG_PACKING_KUNIT_TEST=m
CONFIG_PACKING=y
CONFIG_PAGE_EXTENSION=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_POISONING=y

211
my-ostree-os/kernel/kernel.changelog
View file

@ -1,3 +1,214 @@
* Mon Nov 03 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-55.43.1.el10_0]
- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx->in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx->in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf->num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use <linux/packing.h> for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf->supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]
Resolves: RHEL-103014, RHEL-107466, RHEL-112148, RHEL-113363, RHEL-115351, RHEL-116534, RHEL-116542, RHEL-118667, RHEL-122878, RHEL-92175
* Sat Oct 25 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.42.1.el10_0]
- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]

222
my-ostree-os/kernel/kernel.spec
View file

@ -162,15 +162,15 @@ Summary: The Linux kernel
%define specrpmversion 6.12.0
%define specversion 6.12.0
%define patchversion 6.12
%define pkgrelease 55.42.1
%define pkgrelease 55.43.1
%define kversion 6
%define tarfile_release 6.12.0-55.42.1.el10_0
%define tarfile_release 6.12.0-55.43.1.el10_0
# This is needed to do merge window version magic
%define patchlevel 12
# This allows pkg_release to have configurable %%{?dist} tag
%define specrelease 55.42.1%{?buildid}%{?dist}
%define specrelease 55.43.1%{?buildid}%{?dist}
# This defines the kabi tarball version
%define kabiversion 6.12.0-55.42.1.el10_0
%define kabiversion 6.12.0-55.43.1.el10_0
# If this variable is set to 1, a bpf selftests build failure will cause a
# fatal kernel package build error
@ -4375,7 +4375,7 @@ fi\
#
#
%changelog
* Thu Nov 06 2025 Andrei Lukoshko <alukoshko@almalinux.org> - 6.12.0-55.42.1
* Wed Nov 12 2025 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-55.43.1
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
@ -4386,10 +4386,220 @@ fi\
- kernel/rh_messages.h: enable all disabled pci devices by moving to
unmaintained
* Thu Nov 06 2025 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-55.42.1
* Wed Nov 12 2025 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-55.43.1
- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
* Mon Nov 03 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-55.43.1.el10_0]
- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx->in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx->in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf->num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use <linux/packing.h> for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf->supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]
* Sat Oct 25 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.42.1.el10_0]
- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]