diff --git a/.gitignore b/.gitignore
index 7b5015e..4ea8105 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,6 @@
-SOURCES/kernel-abi-stablelists-5.14.0-362.13.1.el9_3.tar.bz2
-SOURCES/kernel-kabi-dw-5.14.0-362.13.1.el9_3.tar.bz2
-SOURCES/linux-5.14.0-362.13.1.el9_3.tar.xz
+SOURCES/kernel-abi-stablelists-5.14.0-362.18.1.el9_3.tar.bz2
+SOURCES/kernel-kabi-dw-5.14.0-362.18.1.el9_3.tar.bz2
+SOURCES/linux-5.14.0-362.18.1.el9_3.tar.xz
 SOURCES/rheldup3.x509
 SOURCES/rhelima.x509
 SOURCES/rhelima_centos.x509
diff --git a/.kernel.metadata b/.kernel.metadata
index 6575f4d..a441e4c 100644
--- a/.kernel.metadata
+++ b/.kernel.metadata
@@ -1,6 +1,6 @@
-c4f5872f7005e90b19c5f9062b22b1f21827ef54 SOURCES/kernel-abi-stablelists-5.14.0-362.13.1.el9_3.tar.bz2
-b1d3fe4cf0e3d6db2cb96fc8dc3ccf21cf29b12d SOURCES/kernel-kabi-dw-5.14.0-362.13.1.el9_3.tar.bz2
-471a92d317924954c13b85d2f4cb6fd598712ea3 SOURCES/linux-5.14.0-362.13.1.el9_3.tar.xz
+f823c58b7a797113dec1a2863f3efb9b13a5db01 SOURCES/kernel-abi-stablelists-5.14.0-362.18.1.el9_3.tar.bz2
+b1d3fe4cf0e3d6db2cb96fc8dc3ccf21cf29b12d SOURCES/kernel-kabi-dw-5.14.0-362.18.1.el9_3.tar.bz2
+4c7324ab3eed522ca5d7e0fcee0bfa891ef73328 SOURCES/linux-5.14.0-362.18.1.el9_3.tar.xz
 95b9b811c7b0a6c98b2eafc4e7d6d24f2cb63289 SOURCES/rheldup3.x509
 99e571f9de4188f3b5fdf1f84ff73f6cc4bb6a0e SOURCES/rhelima.x509
 61d5a223ff0c79189505abae77e0087c4b2d2b47 SOURCES/rhelima_centos.x509
diff --git a/SOURCES/Makefile.rhelver b/SOURCES/Makefile.rhelver
index 5062d52..c7ea6d5 100644
--- a/SOURCES/Makefile.rhelver
+++ b/SOURCES/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 3
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 362.13.1
+RHEL_RELEASE = 362.18.1
 
 #
 # ZSTREAM
diff --git a/SOURCES/kernel-aarch64-64k-debug-rhel.config b/SOURCES/kernel-aarch64-64k-debug-rhel.config
index d83f8fc..aa8633e 100644
--- a/SOURCES/kernel-aarch64-64k-debug-rhel.config
+++ b/SOURCES/kernel-aarch64-64k-debug-rhel.config
@@ -1340,6 +1340,7 @@ CONFIG_DP83848_PHY=m
 CONFIG_DP83867_PHY=m
 # CONFIG_DP83869_PHY is not set
 CONFIG_DP83TC811_PHY=m
+CONFIG_DPLL=y
 # CONFIG_DPS310 is not set
 # CONFIG_DRAGONRISE_FF is not set
 CONFIG_DRM_AMD_ACP=y
diff --git a/SOURCES/kernel-aarch64-64k-rhel.config b/SOURCES/kernel-aarch64-64k-rhel.config
index a80be71..c15f596 100644
--- a/SOURCES/kernel-aarch64-64k-rhel.config
+++ b/SOURCES/kernel-aarch64-64k-rhel.config
@@ -1332,6 +1332,7 @@ CONFIG_DP83848_PHY=m
 CONFIG_DP83867_PHY=m
 # CONFIG_DP83869_PHY is not set
 CONFIG_DP83TC811_PHY=m
+CONFIG_DPLL=y
 # CONFIG_DPS310 is not set
 # CONFIG_DRAGONRISE_FF is not set
 CONFIG_DRM_AMD_ACP=y
diff --git a/SOURCES/kernel-aarch64-debug-rhel.config b/SOURCES/kernel-aarch64-debug-rhel.config
index 2ff146a..3f3a0e6 100644
--- a/SOURCES/kernel-aarch64-debug-rhel.config
+++ b/SOURCES/kernel-aarch64-debug-rhel.config
@@ -1337,6 +1337,7 @@ CONFIG_DP83848_PHY=m
 CONFIG_DP83867_PHY=m
 # CONFIG_DP83869_PHY is not set
 CONFIG_DP83TC811_PHY=m
+CONFIG_DPLL=y
 # CONFIG_DPS310 is not set
 # CONFIG_DRAGONRISE_FF is not set
 CONFIG_DRM_AMD_ACP=y
diff --git a/SOURCES/kernel-aarch64-rhel.config b/SOURCES/kernel-aarch64-rhel.config
index bc33379..1233496 100644
--- a/SOURCES/kernel-aarch64-rhel.config
+++ b/SOURCES/kernel-aarch64-rhel.config
@@ -1329,6 +1329,7 @@ CONFIG_DP83848_PHY=m
 CONFIG_DP83867_PHY=m
 # CONFIG_DP83869_PHY is not set
 CONFIG_DP83TC811_PHY=m
+CONFIG_DPLL=y
 # CONFIG_DPS310 is not set
 # CONFIG_DRAGONRISE_FF is not set
 CONFIG_DRM_AMD_ACP=y
diff --git a/SOURCES/kernel-aarch64-rt-debug-rhel.config b/SOURCES/kernel-aarch64-rt-debug-rhel.config
index 5cbfe89..0d15cd3 100644
--- a/SOURCES/kernel-aarch64-rt-debug-rhel.config
+++ b/SOURCES/kernel-aarch64-rt-debug-rhel.config
@@ -1354,6 +1354,7 @@ CONFIG_DP83848_PHY=m
 CONFIG_DP83867_PHY=m
 # CONFIG_DP83869_PHY is not set
 CONFIG_DP83TC811_PHY=m
+CONFIG_DPLL=y
 # CONFIG_DPM_WATCHDOG is not set
 # CONFIG_DPS310 is not set
 # CONFIG_DRAGONRISE_FF is not set
diff --git a/SOURCES/kernel-aarch64-rt-rhel.config b/SOURCES/kernel-aarch64-rt-rhel.config
index d495c0a..59a928c 100644
--- a/SOURCES/kernel-aarch64-rt-rhel.config
+++ b/SOURCES/kernel-aarch64-rt-rhel.config
@@ -1346,6 +1346,7 @@ CONFIG_DP83848_PHY=m
 CONFIG_DP83867_PHY=m
 # CONFIG_DP83869_PHY is not set
 CONFIG_DP83TC811_PHY=m
+CONFIG_DPLL=y
 # CONFIG_DPM_WATCHDOG is not set
 # CONFIG_DPS310 is not set
 # CONFIG_DRAGONRISE_FF is not set
diff --git a/SOURCES/kernel-ppc64le-debug-rhel.config b/SOURCES/kernel-ppc64le-debug-rhel.config
index 2a3c805..651fde3 100644
--- a/SOURCES/kernel-ppc64le-debug-rhel.config
+++ b/SOURCES/kernel-ppc64le-debug-rhel.config
@@ -1126,6 +1126,7 @@ CONFIG_DP83848_PHY=m
 CONFIG_DP83867_PHY=m
 # CONFIG_DP83869_PHY is not set
 CONFIG_DP83TC811_PHY=m
+CONFIG_DPLL=y
 # CONFIG_DPS310 is not set
 # CONFIG_DRAGONRISE_FF is not set
 CONFIG_DRM_AMD_ACP=y
diff --git a/SOURCES/kernel-ppc64le-rhel.config b/SOURCES/kernel-ppc64le-rhel.config
index 6325589..7b22e1b 100644
--- a/SOURCES/kernel-ppc64le-rhel.config
+++ b/SOURCES/kernel-ppc64le-rhel.config
@@ -1118,6 +1118,7 @@ CONFIG_DP83848_PHY=m
 CONFIG_DP83867_PHY=m
 # CONFIG_DP83869_PHY is not set
 CONFIG_DP83TC811_PHY=m
+CONFIG_DPLL=y
 # CONFIG_DPS310 is not set
 # CONFIG_DRAGONRISE_FF is not set
 CONFIG_DRM_AMD_ACP=y
diff --git a/SOURCES/kernel-s390x-debug-rhel.config b/SOURCES/kernel-s390x-debug-rhel.config
index 563bbf8..fb7b453 100644
--- a/SOURCES/kernel-s390x-debug-rhel.config
+++ b/SOURCES/kernel-s390x-debug-rhel.config
@@ -1133,6 +1133,7 @@ CONFIG_DP83848_PHY=m
 CONFIG_DP83867_PHY=m
 # CONFIG_DP83869_PHY is not set
 CONFIG_DP83TC811_PHY=m
+CONFIG_DPLL=y
 # CONFIG_DPS310 is not set
 # CONFIG_DRAGONRISE_FF is not set
 CONFIG_DRM_AMD_ACP=y
diff --git a/SOURCES/kernel-s390x-rhel.config b/SOURCES/kernel-s390x-rhel.config
index aae2ed0..bec945b 100644
--- a/SOURCES/kernel-s390x-rhel.config
+++ b/SOURCES/kernel-s390x-rhel.config
@@ -1125,6 +1125,7 @@ CONFIG_DP83848_PHY=m
 CONFIG_DP83867_PHY=m
 # CONFIG_DP83869_PHY is not set
 CONFIG_DP83TC811_PHY=m
+CONFIG_DPLL=y
 # CONFIG_DPS310 is not set
 # CONFIG_DRAGONRISE_FF is not set
 CONFIG_DRM_AMD_ACP=y
diff --git a/SOURCES/kernel-s390x-zfcpdump-rhel.config b/SOURCES/kernel-s390x-zfcpdump-rhel.config
index d7a8664..bcc83f0 100644
--- a/SOURCES/kernel-s390x-zfcpdump-rhel.config
+++ b/SOURCES/kernel-s390x-zfcpdump-rhel.config
@@ -1131,6 +1131,7 @@ CONFIG_DP83848_PHY=m
 CONFIG_DP83867_PHY=m
 # CONFIG_DP83869_PHY is not set
 CONFIG_DP83TC811_PHY=m
+CONFIG_DPLL=y
 # CONFIG_DPS310 is not set
 # CONFIG_DRAGONRISE_FF is not set
 CONFIG_DRM_AMD_ACP=y
diff --git a/SOURCES/kernel-x86_64-debug-rhel.config b/SOURCES/kernel-x86_64-debug-rhel.config
index 579f4cf..8414735 100644
--- a/SOURCES/kernel-x86_64-debug-rhel.config
+++ b/SOURCES/kernel-x86_64-debug-rhel.config
@@ -1203,6 +1203,7 @@ CONFIG_DP83848_PHY=m
 CONFIG_DP83867_PHY=m
 # CONFIG_DP83869_PHY is not set
 CONFIG_DP83TC811_PHY=m
+CONFIG_DPLL=y
 # CONFIG_DPS310 is not set
 CONFIG_DPTF_PCH_FIVR=m
 CONFIG_DPTF_POWER=m
diff --git a/SOURCES/kernel-x86_64-rhel.config b/SOURCES/kernel-x86_64-rhel.config
index b43a363..bae157a 100644
--- a/SOURCES/kernel-x86_64-rhel.config
+++ b/SOURCES/kernel-x86_64-rhel.config
@@ -1195,6 +1195,7 @@ CONFIG_DP83848_PHY=m
 CONFIG_DP83867_PHY=m
 # CONFIG_DP83869_PHY is not set
 CONFIG_DP83TC811_PHY=m
+CONFIG_DPLL=y
 # CONFIG_DPS310 is not set
 CONFIG_DPTF_PCH_FIVR=m
 CONFIG_DPTF_POWER=m
diff --git a/SOURCES/kernel-x86_64-rt-debug-rhel.config b/SOURCES/kernel-x86_64-rt-debug-rhel.config
index 92aed4f..3ac9b86 100644
--- a/SOURCES/kernel-x86_64-rt-debug-rhel.config
+++ b/SOURCES/kernel-x86_64-rt-debug-rhel.config
@@ -1222,6 +1222,7 @@ CONFIG_DP83848_PHY=m
 CONFIG_DP83867_PHY=m
 # CONFIG_DP83869_PHY is not set
 CONFIG_DP83TC811_PHY=m
+CONFIG_DPLL=y
 # CONFIG_DPM_WATCHDOG is not set
 # CONFIG_DPS310 is not set
 CONFIG_DPTF_PCH_FIVR=m
diff --git a/SOURCES/kernel-x86_64-rt-rhel.config b/SOURCES/kernel-x86_64-rt-rhel.config
index faa4da9..82ac878 100644
--- a/SOURCES/kernel-x86_64-rt-rhel.config
+++ b/SOURCES/kernel-x86_64-rt-rhel.config
@@ -1214,6 +1214,7 @@ CONFIG_DP83848_PHY=m
 CONFIG_DP83867_PHY=m
 # CONFIG_DP83869_PHY is not set
 CONFIG_DP83TC811_PHY=m
+CONFIG_DPLL=y
 # CONFIG_DPM_WATCHDOG is not set
 # CONFIG_DPS310 is not set
 CONFIG_DPTF_PCH_FIVR=m
diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec
index 8d5a321..e7b5b91 100644
--- a/SPECS/kernel.spec
+++ b/SPECS/kernel.spec
@@ -161,15 +161,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 362.13.1
+%define pkgrelease 362.18.1
 %define kversion 5
-%define tarfile_release 5.14.0-362.13.1.el9_3
+%define tarfile_release 5.14.0-362.18.1.el9_3
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 362.13.1%{?buildid}%{?dist}
+%define specrelease 362.18.1%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-362.13.1.el9_3
+%define kabiversion 5.14.0-362.18.1.el9_3
 
 #
 # End of genspec.sh variables
@@ -3723,6 +3723,132 @@ fi
 #
 #
 %changelog
+* Wed Jan 03 2024 Jan Stancek <jstancek@redhat.com> [5.14.0-362.18.1.el9_3]
+- nfp: fix use-after-free in area_cache_get() (Ricardo Robaina) [RHEL-19456 RHEL-19536 RHEL-6566 RHEL-7241] {CVE-2022-3545}
+- rtla: Fix uninitialized variable found (John Kacur) [RHEL-18360 RHEL-10079]
+- rtla/timerlat: Do not stop user-space if a cpu is offline (John Kacur) [RHEL-18360 RHEL-10079]
+- rtla/timerlat_aa: Fix previous IRQ delay for IRQs that happens after thread sample (John Kacur) [RHEL-18360 RHEL-10079]
+- rtla/timerlat_aa: Fix negative IRQ delay (John Kacur) [RHEL-18360 RHEL-10079]
+- rtla/timerlat_aa: Zero thread sum after every sample analysis (John Kacur) [RHEL-18360 RHEL-10079]
+- rtla/timerlat_hist: Add timerlat user-space support (John Kacur) [RHEL-18360 RHEL-10079]
+- rtla/timerlat_top: Add timerlat user-space support (John Kacur) [RHEL-18360 RHEL-10079]
+- rtla/hwnoise: Reduce runtime to 75%% (John Kacur) [RHEL-18360 RHEL-10079]
+- rtla: Start the tracers after creating all instances (John Kacur) [RHEL-18360 RHEL-10079]
+- rtla/timerlat_hist: Add auto-analysis support (John Kacur) [RHEL-18360 RHEL-10079]
+- rtla/timerlat: Give timerlat auto analysis its own instance (John Kacur) [RHEL-18360 RHEL-10079]
+- rtla: Automatically move rtla to a house-keeping cpu (John Kacur) [RHEL-18360 RHEL-10079]
+- rtla: Change monitored_cpus from char * to cpu_set_t (John Kacur) [RHEL-18360 RHEL-10079]
+- rtla: Add --house-keeping option (John Kacur) [RHEL-18360 RHEL-10079]
+- rtla: Add -C cgroup support (John Kacur) [RHEL-18360 RHEL-10079]
+- ata: ahci: Add Intel Alder Lake-P AHCI controller to low power chipsets list (Tomas Henzl) [RHEL-19394 RHEL-10941]
+- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1106 RHEL-1109 RHEL-12930 RHEL-13899] {CVE-2023-38409}
+- fbcon: Fix error paths in set_con2fb_map (Jocelyn Falempe) [RHEL-1106 RHEL-1109 RHEL-12930 RHEL-13899] {CVE-2023-38409}
+- net: tun: fix bugs for oversize packet when napi frags enabled (Ricardo Robaina) [RHEL-12495 RHEL-12496 RHEL-7186 RHEL-7264] {CVE-2023-3812}
+- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR (Florian Westphal) [RHEL-10536 RHEL-10538 RHEL-10537 RHEL-10539] {CVE-2023-4015}
+- md: Put the right device in md_seq_next (Nigel Croxon) [RHEL-16363 RHEL-12455]
+- dpll: sanitize possible null pointer dereference in dpll_pin_parent_pin_set() (Michal Schmidt) [RHEL-19677 RHEL-19095] {CVE-2023-6679}
+- dpll: Fix potential msg memleak when genlmsg_put_reply failed (Michal Schmidt) [RHEL-19677 RHEL-19095] {CVE-2023-6679}
+- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Bastien Nocera) [RHEL-19003 RHEL-2717] {CVE-2023-40283}
+- tcp: enforce receive buffer memory limits by allowing the tcp window to shrink (Felix Maurer) [RHEL-16129 RHEL-11592]
+- tcp: adjust rcv_ssthresh according to sk_reserved_mem (Felix Maurer) [RHEL-16129 RHEL-11592]
+- md: raid0: account for split bio in iostat accounting (Nigel Croxon) [RHEL-4082 RHEL-2718]
+- can: af_can: fix NULL pointer dereference in can_rcv_filter (Ricardo Robaina) [RHEL-19465 RHEL-19526 RHEL-6428 RHEL-7052] {CVE-2023-2166}
+
+* Wed Dec 20 2023 Jan Stancek <jstancek@redhat.com> [5.14.0-362.17.1.el9_3]
+- netfilter: nf_tables: skip bound chain on rule flush (Florian Westphal) [RHEL-10111 RHEL-10113 RHEL-10112 RHEL-10114] {CVE-2023-3777}
+- drivers: net: slip: fix NPD bug in sl_tx_timeout() (Michal Schmidt) [RHEL-18553 RHEL-18968 RHEL-6654 RHEL-7239] {CVE-2022-41858}
+- RDMA/core: Update CMA destination address on rdma_resolve_addr (Kamal Heib) [RHEL-19358 RHEL-19400 RHEL-6832 RHEL-7244] {CVE-2023-2176}
+- RDMA/core: Refactor rdma_bind_addr (Kamal Heib) [RHEL-19358 RHEL-19400 RHEL-6832 RHEL-7244] {CVE-2023-2176}
+- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-17263 RHEL-17265 RHEL-17264 RHEL-17266] {CVE-2023-4622}
+
+* Thu Dec 14 2023 Jan Stancek <jstancek@redhat.com> [5.14.0-362.16.1.el9_3]
+- tracing/timerlat: Add user-space interface (Chris White) [RHEL-18927 RHEL-14932]
+- tracing/osnoise: Skip running osnoise if all instances are off (Chris White) [RHEL-18927 RHEL-14932]
+- tracing/osnoise: Switch from PF_NO_SETAFFINITY to migrate_disable (Chris White) [RHEL-18927 RHEL-14932]
+- tracing/timerlat: Always wakeup the timerlat thread (John Kacur) [RHEL-18356 RHEL-16305]
+- tracing: Rename kvfree_rcu() to kvfree_rcu_mightsleep() (John Kacur) [RHEL-18356 RHEL-16305]
+- tracing/osnoise: Fix notify new tracing_max_latency (John Kacur) [RHEL-18356 RHEL-16305]
+- tracing/timerlat: Notify new max thread latency (John Kacur) [RHEL-18356 RHEL-16305]
+- tracing/osnoise: set several trace_osnoise.c variables storage-class-specifier to static (John Kacur) [RHEL-18356 RHEL-16305]
+- trace/osnoise: make use of the helper function kthread_run_on_cpu() (John Kacur) [RHEL-18356 RHEL-16305]
+- tracing: Switch to kvfree_rcu() API (John Kacur) [RHEL-18356 RHEL-16305]
+- rcu/kvfree: Add kvfree_rcu_mightsleep() and kfree_rcu_mightsleep() (Waiman Long) [RHEL-18356 RHEL-16305]
+- x86/sev: Check for user-space IOIO pointing to kernel space (Paolo Bonzini) [RHEL-18089 RHEL-18090 RHEL-14980 RHEL-14981] {CVE-2023-46813}
+- x86/sev: Check IOBM for IOIO exceptions from user-space (Paolo Bonzini) [RHEL-18089 RHEL-18090 RHEL-14980 RHEL-14981] {CVE-2023-46813}
+- x86/sev: Disable MMIO emulation from user mode (Paolo Bonzini) [RHEL-18089 RHEL-18090 RHEL-14980 RHEL-14981] {CVE-2023-46813}
+- hwmon: (ina3221) Add support for channel summation disable (Steve Best) [RHEL-17898 RHEL-1899]
+- ice: reset first in crash dump kernels (Petr Oros) [RHEL-17613 RHEL-15698]
+- bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire (Tomas Glozar) [RHEL-17571 2229975]
+- net: fix net device address assign type (Michal Schmidt) [RHEL-17279 RHEL-6368]
+- net: add check for current MAC address in dev_set_mac_address (Michal Schmidt) [RHEL-17279 RHEL-6368]
+- drm/amdgpu: Fix possible null pointer dereference (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/amdgpu: Fix possible null pointer dereference (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: Keep a gem reference to user bos in surfaces (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: fix typo of sizeof argument (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: Fix possible invalid drm gem put calls (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: Fix shader stage validation (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: remove unused vmw_overlay function (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: Fix Legacy Display Unit atomic drm support (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: Print errors when running on broken/unsupported configs (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: Drop mksstat_init_record fn as currently unused (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: Fix src/dst_pitch confusion (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: Replace one-element array with flexible-array member (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: Do not drop the reference to the handle too soon (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: Stop accessing buffer objects which failed init (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: Make the driver work without the dummy resources (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: Stop using raw ttm_buffer_object's (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: Abstract placement selection (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: Rename dummy to is_iomem (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: Cleanup the vmw bo usage in the cursor paths (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: Simplify fb pinning (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: Rename vmw_buffer_object to vmw_bo (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: Remove the duplicate bo_free function (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/vmwgfx: Use the common gem mmap instead of the custom code (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/radeon: handle NULL bo->resource in move callback (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/qxl: handle NULL bo->resource in move callback (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/gem-vram: handle NULL bo->resource in move callback (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/ttm: prevent moving of pinned BOs (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/ttm: stop allocating a dummy resource for pipelined gutting (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/ttm: stop allocating dummy resources during BO creation (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/ttm: clear the ttm_tt when bo->resource is NULL (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- drm/i915/ttm: audit remaining bo->resource (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- Revert "drm/vmwgfx: Stop accessing buffer objects which failed init" (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- Revert "drm/vmwgfx: Do not drop the reference to the handle too soon" (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+- Revert "drm/vmwgfx: Fix Legacy Display Unit atomic drm support" (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
+
+* Thu Dec 07 2023 Jan Stancek <jstancek@redhat.com> [5.14.0-362.15.1.el9_3]
+- drm/mgag200: Flush the cache to improve latency (Jocelyn Falempe) [RHEL-16560]
+- sched/fair: Make the BW replenish timer expire in hardirq context for PREEMPT_RT (Valentin Schneider) [RHEL-16842 RHEL-7232]
+- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16893 RHEL-16894 RHEL-14233 RHEL-16617] {CVE-2023-4623}
+- net/sched: sch_hfsc: Ensure inner classes have fsc curve (Davide Caratti) [RHEL-16893 RHEL-16894 RHEL-14233 RHEL-16617] {CVE-2023-4623}
+
+* Fri Dec 01 2023 Jan Stancek <jstancek@redhat.com> [5.14.0-362.14.1.el9_3]
+- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Florian Westphal) [RHEL-8436 RHEL-8454 RHEL-8437 RHEL-8455] {CVE-2023-42753}
+- sctp: update hb timer immediately after users change hb_interval (Xin Long) [RHEL-14301 RHEL-14179]
+- sctp: update transport state when processing a dupcook packet (Xin Long) [RHEL-14301 RHEL-14179]
+- netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp (Xin Long) [RHEL-14301 RHEL-14179]
+- sctp: annotate data-races around sk->sk_wmem_queued (Xin Long) [RHEL-14301 RHEL-14179]
+- cifs: fix missing unload_nls() in smb2_reconnect() (Scott Mayhew) [RHEL-16477 RHEL-11577]
+- cifs: avoid race conditions with parallel reconnects (Scott Mayhew) [RHEL-16477 RHEL-11577]
+- cifs: update ip_addr for ses only for primary chan setup (Scott Mayhew) [RHEL-16477 RHEL-11577]
+- cifs: prevent data race in cifs_reconnect_tcon() (Scott Mayhew) [RHEL-16477 RHEL-11577]
+- cifs: prevent data race in smb2_reconnect() (Scott Mayhew) [RHEL-16477 RHEL-11577]
+- nvmet-tcp: Fix a possible UAF in queue intialization setup (John Meneghini) [RHEL-11487 RHEL-11491 RHEL-11488 RHEL-11492] {CVE-2023-5178}
+- Enable CONFIG_DPLL (Petr Oros) [RHEL-15800 2232515]
+- ice: implement dpll interface to control cgu (Petr Oros) [RHEL-15800 2232515]
+- ice: add admin commands to access cgu configuration (Petr Oros) [RHEL-15800 2232515]
+- netdev: expose DPLL pin handle for netdevice (Petr Oros) [RHEL-15800 2232515]
+- dpll: netlink: Add DPLL framework base functions (Petr Oros) [RHEL-15800 2232515]
+- dpll: core: Add DPLL framework base functions (Petr Oros) [RHEL-15800 2232515]
+- dpll: spec: Add Netlink spec in YAML (Petr Oros) [RHEL-15800 2232515]
+- dpll: documentation on DPLL subsystem interface (Petr Oros) [RHEL-15800 2232515]
+- ice: do not re-enable miscellaneous interrupt until thread_fn completes (Petr Oros) [RHEL-15806 2229762]
+- ice: trigger PFINT_OICR_TSYN_TX interrupt instead of polling (Petr Oros) [RHEL-15806 2229762]
+- ice: introduce ICE_TX_TSTAMP_WORK enumeration (Petr Oros) [RHEL-15806 2229762]
+- mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() (Rafael Aquini) [RHEL-11589 RHEL-2466]
+- sched/fair: Block nohz tick_stop when cfs bandwidth in use (Phil Auld) [RHEL-8701 2208016]
+- sched, cgroup: Restore meaning to hierarchical_quota (Phil Auld) [RHEL-8701 2208016]
+
 * Fri Nov 24 2023 Jan Stancek <jstancek@redhat.com> [5.14.0-362.13.1.el9_3]
 - cifs: Fix UAF in cifs_demultiplex_thread() (Scott Mayhew) [RHEL-15169 RHEL-15173 RHEL-15170 RHEL-15174] {CVE-2023-1192}
 - iommu: Optimise PCI SAC address trick (Jerry Snitselaar) [RHEL-15381 RHEL-11705]