From a3d78023297c56be7c0e3d50a29e0ec7f69a3059 Mon Sep 17 00:00:00 2001 From: MSVSphere Packaging Team Date: Thu, 31 Oct 2024 03:31:39 +0300 Subject: [PATCH] import kernel-5.14.0-427.42.1.el9_4 --- .gitignore | 6 +- .kernel.metadata | 6 +- SOURCES/Makefile.rhelver | 2 +- SOURCES/kernel-aarch64-64k-debug-rhel.config | 1 + SOURCES/kernel-aarch64-64k-rhel.config | 1 + SOURCES/kernel-aarch64-debug-rhel.config | 1 + SOURCES/kernel-aarch64-rhel.config | 1 + SOURCES/kernel-aarch64-rt-debug-rhel.config | 1 + SOURCES/kernel-aarch64-rt-rhel.config | 1 + SOURCES/kernel-ppc64le-debug-rhel.config | 1 + SOURCES/kernel-ppc64le-rhel.config | 1 + SOURCES/kernel-s390x-debug-rhel.config | 1 + SOURCES/kernel-s390x-rhel.config | 1 + SOURCES/kernel-s390x-zfcpdump-rhel.config | 1 + SOURCES/kernel-x86_64-debug-rhel.config | 2 + SOURCES/kernel-x86_64-rhel.config | 2 + SOURCES/kernel-x86_64-rt-debug-rhel.config | 2 + SOURCES/kernel-x86_64-rt-rhel.config | 2 + SPECS/kernel.spec | 88 +++++++++++++++++++- 19 files changed, 110 insertions(+), 11 deletions(-) diff --git a/.gitignore b/.gitignore index 9487aa1..583b051 100644 --- a/.gitignore +++ b/.gitignore @@ -1,6 +1,6 @@ -SOURCES/kernel-abi-stablelists-5.14.0-427.40.1.el9_4.tar.bz2 -SOURCES/kernel-kabi-dw-5.14.0-427.40.1.el9_4.tar.bz2 -SOURCES/linux-5.14.0-427.40.1.el9_4.tar.xz +SOURCES/kernel-abi-stablelists-5.14.0-427.42.1.el9_4.tar.bz2 +SOURCES/kernel-kabi-dw-5.14.0-427.42.1.el9_4.tar.bz2 +SOURCES/linux-5.14.0-427.42.1.el9_4.tar.xz SOURCES/nvidiagpuoot001.x509 SOURCES/rheldup3.x509 SOURCES/rhelima.x509 diff --git a/.kernel.metadata b/.kernel.metadata index 7c065d6..a4decc7 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,6 +1,6 @@ -fb2296f2b5b5b0d4b0bded3c10523378c7eaa374 SOURCES/kernel-abi-stablelists-5.14.0-427.40.1.el9_4.tar.bz2 -85ae4354a48911a21addb2612e1e0fb5d9e22bcc SOURCES/kernel-kabi-dw-5.14.0-427.40.1.el9_4.tar.bz2 -13a4ac4cd7b2e5353278a1fe44089c0980213980 SOURCES/linux-5.14.0-427.40.1.el9_4.tar.xz +283fe25f87bb2c2bd477a5f398a79608e5fd1412 SOURCES/kernel-abi-stablelists-5.14.0-427.42.1.el9_4.tar.bz2 +5da10471401aad5f2bb7ac9e17b1f2726e031041 SOURCES/kernel-kabi-dw-5.14.0-427.42.1.el9_4.tar.bz2 +ff999a3b85b6a6d54e1532afbabafc4cf8f2745e SOURCES/linux-5.14.0-427.42.1.el9_4.tar.xz 4fff8080e88afffc06d8ef5004db8d53bb21237f SOURCES/nvidiagpuoot001.x509 95b9b811c7b0a6c98b2eafc4e7d6d24f2cb63289 SOURCES/rheldup3.x509 99e571f9de4188f3b5fdf1f84ff73f6cc4bb6a0e SOURCES/rhelima.x509 diff --git a/SOURCES/Makefile.rhelver b/SOURCES/Makefile.rhelver index 9e494fb..7549e83 100644 --- a/SOURCES/Makefile.rhelver +++ b/SOURCES/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 4 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 427.40.1 +RHEL_RELEASE = 427.42.1 # # ZSTREAM diff --git a/SOURCES/kernel-aarch64-64k-debug-rhel.config b/SOURCES/kernel-aarch64-64k-debug-rhel.config index b15cc9d..a674ee5 100644 --- a/SOURCES/kernel-aarch64-64k-debug-rhel.config +++ b/SOURCES/kernel-aarch64-64k-debug-rhel.config @@ -4155,6 +4155,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y # CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_OCFS2_FS is not set CONFIG_OCTEON_EP=m +CONFIG_OCTEON_EP_VF=m CONFIG_OCTEONTX2_AF=m CONFIG_OCTEONTX2_MBOX=m CONFIG_OCTEONTX2_PF=m diff --git a/SOURCES/kernel-aarch64-64k-rhel.config b/SOURCES/kernel-aarch64-64k-rhel.config index 1e05626..d7e975a 100644 --- a/SOURCES/kernel-aarch64-64k-rhel.config +++ b/SOURCES/kernel-aarch64-64k-rhel.config @@ -4134,6 +4134,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y # CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_OCFS2_FS is not set CONFIG_OCTEON_EP=m +CONFIG_OCTEON_EP_VF=m CONFIG_OCTEONTX2_AF=m CONFIG_OCTEONTX2_MBOX=m CONFIG_OCTEONTX2_PF=m diff --git a/SOURCES/kernel-aarch64-debug-rhel.config b/SOURCES/kernel-aarch64-debug-rhel.config index f55d9e3..8954f1a 100644 --- a/SOURCES/kernel-aarch64-debug-rhel.config +++ b/SOURCES/kernel-aarch64-debug-rhel.config @@ -4152,6 +4152,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y # CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_OCFS2_FS is not set CONFIG_OCTEON_EP=m +CONFIG_OCTEON_EP_VF=m CONFIG_OCTEONTX2_AF=m CONFIG_OCTEONTX2_MBOX=m CONFIG_OCTEONTX2_PF=m diff --git a/SOURCES/kernel-aarch64-rhel.config b/SOURCES/kernel-aarch64-rhel.config index 50dfa90..a4aa9db 100644 --- a/SOURCES/kernel-aarch64-rhel.config +++ b/SOURCES/kernel-aarch64-rhel.config @@ -4131,6 +4131,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y # CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_OCFS2_FS is not set CONFIG_OCTEON_EP=m +CONFIG_OCTEON_EP_VF=m CONFIG_OCTEONTX2_AF=m CONFIG_OCTEONTX2_MBOX=m CONFIG_OCTEONTX2_PF=m diff --git a/SOURCES/kernel-aarch64-rt-debug-rhel.config b/SOURCES/kernel-aarch64-rt-debug-rhel.config index 319fe31..360333f 100644 --- a/SOURCES/kernel-aarch64-rt-debug-rhel.config +++ b/SOURCES/kernel-aarch64-rt-debug-rhel.config @@ -4223,6 +4223,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y # CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_OCFS2_FS is not set CONFIG_OCTEON_EP=m +CONFIG_OCTEON_EP_VF=m CONFIG_OCTEONTX2_AF=m CONFIG_OCTEONTX2_MBOX=m CONFIG_OCTEONTX2_PF=m diff --git a/SOURCES/kernel-aarch64-rt-rhel.config b/SOURCES/kernel-aarch64-rt-rhel.config index 26607d5..dd47888 100644 --- a/SOURCES/kernel-aarch64-rt-rhel.config +++ b/SOURCES/kernel-aarch64-rt-rhel.config @@ -4202,6 +4202,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y # CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_OCFS2_FS is not set CONFIG_OCTEON_EP=m +CONFIG_OCTEON_EP_VF=m CONFIG_OCTEONTX2_AF=m CONFIG_OCTEONTX2_MBOX=m CONFIG_OCTEONTX2_PF=m diff --git a/SOURCES/kernel-ppc64le-debug-rhel.config b/SOURCES/kernel-ppc64le-debug-rhel.config index 10a6422..cc62cd4 100644 --- a/SOURCES/kernel-ppc64le-debug-rhel.config +++ b/SOURCES/kernel-ppc64le-debug-rhel.config @@ -3797,6 +3797,7 @@ CONFIG_NVRAM=m # CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_OCFS2_FS is not set CONFIG_OCTEON_EP=m +CONFIG_OCTEON_EP_VF=m CONFIG_OCXL=m # CONFIG_OF_OVERLAY is not set CONFIG_OF_PMEM=m diff --git a/SOURCES/kernel-ppc64le-rhel.config b/SOURCES/kernel-ppc64le-rhel.config index ab64b81..bf6ee17 100644 --- a/SOURCES/kernel-ppc64le-rhel.config +++ b/SOURCES/kernel-ppc64le-rhel.config @@ -3777,6 +3777,7 @@ CONFIG_NVRAM=m # CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_OCFS2_FS is not set CONFIG_OCTEON_EP=m +CONFIG_OCTEON_EP_VF=m CONFIG_OCXL=m # CONFIG_OF_OVERLAY is not set CONFIG_OF_PMEM=m diff --git a/SOURCES/kernel-s390x-debug-rhel.config b/SOURCES/kernel-s390x-debug-rhel.config index edff9ec..6fabf97 100644 --- a/SOURCES/kernel-s390x-debug-rhel.config +++ b/SOURCES/kernel-s390x-debug-rhel.config @@ -3783,6 +3783,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y # CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_OCFS2_FS is not set CONFIG_OCTEON_EP=m +CONFIG_OCTEON_EP_VF=m CONFIG_OCXL=m # CONFIG_OF is not set # CONFIG_OF_OVERLAY is not set diff --git a/SOURCES/kernel-s390x-rhel.config b/SOURCES/kernel-s390x-rhel.config index e051d03..82b201e 100644 --- a/SOURCES/kernel-s390x-rhel.config +++ b/SOURCES/kernel-s390x-rhel.config @@ -3763,6 +3763,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y # CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_OCFS2_FS is not set CONFIG_OCTEON_EP=m +CONFIG_OCTEON_EP_VF=m CONFIG_OCXL=m # CONFIG_OF is not set # CONFIG_OF_OVERLAY is not set diff --git a/SOURCES/kernel-s390x-zfcpdump-rhel.config b/SOURCES/kernel-s390x-zfcpdump-rhel.config index 44b6a50..475643c 100644 --- a/SOURCES/kernel-s390x-zfcpdump-rhel.config +++ b/SOURCES/kernel-s390x-zfcpdump-rhel.config @@ -3778,6 +3778,7 @@ CONFIG_NVME_VERBOSE_ERRORS=y # CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_OCFS2_FS is not set CONFIG_OCTEON_EP=m +CONFIG_OCTEON_EP_VF=m CONFIG_OCXL=m # CONFIG_OF is not set # CONFIG_OF_OVERLAY is not set diff --git a/SOURCES/kernel-x86_64-debug-rhel.config b/SOURCES/kernel-x86_64-debug-rhel.config index e1e821b..132da7c 100644 --- a/SOURCES/kernel-x86_64-debug-rhel.config +++ b/SOURCES/kernel-x86_64-debug-rhel.config @@ -3231,6 +3231,7 @@ CONFIG_MISC_FILESYSTEMS=y CONFIG_MISC_RTSX_PCI=m CONFIG_MISC_RTSX_USB=m CONFIG_MITIGATION_RFDS=y +CONFIG_MITIGATION_SPECTRE_BHI=y # CONFIG_MK8 is not set # CONFIG_MLX4_CORE_GEN2 is not set CONFIG_MLX4_EN_DCB=y @@ -3992,6 +3993,7 @@ CONFIG_NVSW_SN2201=m # CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_OCFS2_FS is not set CONFIG_OCTEON_EP=m +CONFIG_OCTEON_EP_VF=m CONFIG_OCXL=m # CONFIG_OF is not set # CONFIG_OF_OVERLAY is not set diff --git a/SOURCES/kernel-x86_64-rhel.config b/SOURCES/kernel-x86_64-rhel.config index 8b91cf2..fe5aefc 100644 --- a/SOURCES/kernel-x86_64-rhel.config +++ b/SOURCES/kernel-x86_64-rhel.config @@ -3211,6 +3211,7 @@ CONFIG_MISC_FILESYSTEMS=y CONFIG_MISC_RTSX_PCI=m CONFIG_MISC_RTSX_USB=m CONFIG_MITIGATION_RFDS=y +CONFIG_MITIGATION_SPECTRE_BHI=y # CONFIG_MK8 is not set # CONFIG_MLX4_CORE_GEN2 is not set CONFIG_MLX4_EN_DCB=y @@ -3972,6 +3973,7 @@ CONFIG_NVSW_SN2201=m # CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_OCFS2_FS is not set CONFIG_OCTEON_EP=m +CONFIG_OCTEON_EP_VF=m CONFIG_OCXL=m # CONFIG_OF is not set # CONFIG_OF_OVERLAY is not set diff --git a/SOURCES/kernel-x86_64-rt-debug-rhel.config b/SOURCES/kernel-x86_64-rt-debug-rhel.config index 59a0954..b434f46 100644 --- a/SOURCES/kernel-x86_64-rt-debug-rhel.config +++ b/SOURCES/kernel-x86_64-rt-debug-rhel.config @@ -3288,6 +3288,7 @@ CONFIG_MISC_FILESYSTEMS=y CONFIG_MISC_RTSX_PCI=m CONFIG_MISC_RTSX_USB=m CONFIG_MITIGATION_RFDS=y +CONFIG_MITIGATION_SPECTRE_BHI=y # CONFIG_MK8 is not set # CONFIG_MLX4_CORE_GEN2 is not set CONFIG_MLX4_DEBUG=y @@ -4061,6 +4062,7 @@ CONFIG_NVSW_SN2201=m # CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_OCFS2_FS is not set CONFIG_OCTEON_EP=m +CONFIG_OCTEON_EP_VF=m CONFIG_OCXL=m # CONFIG_OF is not set # CONFIG_OF_OVERLAY is not set diff --git a/SOURCES/kernel-x86_64-rt-rhel.config b/SOURCES/kernel-x86_64-rt-rhel.config index 8a2c158..1c9025f 100644 --- a/SOURCES/kernel-x86_64-rt-rhel.config +++ b/SOURCES/kernel-x86_64-rt-rhel.config @@ -3268,6 +3268,7 @@ CONFIG_MISC_FILESYSTEMS=y CONFIG_MISC_RTSX_PCI=m CONFIG_MISC_RTSX_USB=m CONFIG_MITIGATION_RFDS=y +CONFIG_MITIGATION_SPECTRE_BHI=y # CONFIG_MK8 is not set # CONFIG_MLX4_CORE_GEN2 is not set CONFIG_MLX4_DEBUG=y @@ -4041,6 +4042,7 @@ CONFIG_NVSW_SN2201=m # CONFIG_NXP_TJA11XX_PHY is not set # CONFIG_OCFS2_FS is not set CONFIG_OCTEON_EP=m +CONFIG_OCTEON_EP_VF=m CONFIG_OCXL=m # CONFIG_OF is not set # CONFIG_OF_OVERLAY is not set diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index a0b78d6..f1cd51e 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -165,15 +165,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 427.40.1 +%define pkgrelease 427.42.1 %define kversion 5 -%define tarfile_release 5.14.0-427.40.1.el9_4 +%define tarfile_release 5.14.0-427.42.1.el9_4 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 427.40.1%{?buildid}%{?dist} +%define specrelease 427.42.1%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-427.40.1.el9_4 +%define kabiversion 5.14.0-427.42.1.el9_4 # # End of genspec.sh variables @@ -3732,6 +3732,86 @@ fi # # %changelog +* Fri Oct 18 2024 Scott Weaver [5.14.0-427.42.1.el9_4] +- redhat/configs: Add CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201} +- x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201} +- x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201} +- x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201} +- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201} +- x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201} +- x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201} +- x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201} +- x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201} +- x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201} +- x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201} +- KVM: x86: Add BHI_NO (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201} +- x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201} +- x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201} +- x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201} +- x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201} +- x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201} +- x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201} +- perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201} +- Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201} +- KVM: x86: Use a switch statement and macros in __feature_translate() (Maxim Levitsky) [RHEL-45492 RHEL-32430] +- KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Maxim Levitsky) [RHEL-45492 RHEL-32430] +- x86/entry/32: Convert do_fast_syscall_32() to bool return type (Prarit Bhargava) [RHEL-45492 RHEL-25415] +- x86/entry: Add do_SYSENTER_32() prototype (Prarit Bhargava) [RHEL-45492 RHEL-25415] +- x86/bugs: Reset speculation control settings on init (Prarit Bhargava) [RHEL-45492 RHEL-25415] +- mpls: Reduce skb re-allocations due to skb_cow() (Guillaume Nault) [RHEL-61696 RHEL-55145] +- scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-39539 RHEL-39601 RHEL-33543 RHEL-35000] {CVE-2024-26935} +- tty: Fix out-of-bound vmalloc access in imageblit (Andrew Halaney) [RHEL-42095 RHEL-24205] {CVE-2021-47383} +- block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54769 RHEL-54768] {CVE-2024-43854} +- block: cleanup bio_integrity_prep (Ming Lei) [RHEL-54769 RHEL-25988] +- block: refactor to use helper (Ming Lei) [RHEL-54769 RHEL-25988] +- ceph: fix cap ref leak via netfs init_request (Patrick Donnelly) [RHEL-62666 RHEL-61459] +- redhat/configs: Enable CONFIG_OCTEON_EP_VF (CKI Backport Bot) [RHEL-61744 RHEL-25860] +- octeon_ep_vf: add ethtool support (CKI Backport Bot) [RHEL-61744 RHEL-25860] +- octeon_ep_vf: add Tx/Rx processing and interrupt support (CKI Backport Bot) [RHEL-61744 RHEL-25860] +- octeon_ep_vf: add support for ndo ops (CKI Backport Bot) [RHEL-61744 RHEL-25860] +- octeon_ep_vf: add Tx/Rx ring resource setup and cleanup (CKI Backport Bot) [RHEL-61744 RHEL-25860] +- octeon_ep_vf: add VF-PF mailbox communication. (CKI Backport Bot) [RHEL-61744 RHEL-25860] +- octeon_ep_vf: add hardware configuration APIs (CKI Backport Bot) [RHEL-61744 RHEL-25860] +- octeon_ep_vf: Add driver framework and device initialization (CKI Backport Bot) [RHEL-61744 RHEL-25860] +- octeon_ep: support firmware notifications for VFs (CKI Backport Bot) [RHEL-61744 RHEL-25860] +- octeon_ep: control net framework to support VF offloads (CKI Backport Bot) [RHEL-61744 RHEL-25860] +- octeon_ep: PF-VF mailbox version support (CKI Backport Bot) [RHEL-61744 RHEL-25860] +- octeon_ep: add PF-VF mailbox communication (CKI Backport Bot) [RHEL-61744 RHEL-25860] +- x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Chris von Recklinghausen) [RHEL-62209 RHEL-26268] +- netfilter: nfnetlink_queue: un-break NF_REPEAT (Phil Sutter) [RHEL-62299] + +* Fri Oct 11 2024 Scott Weaver [5.14.0-427.41.1.el9_4] +- iommu/amd: Fix panic accessing amd_iommu_enable_faulting (Jerry Snitselaar) [RHEL-55507 RHEL-37320 RHEL-40344] +- iommu/vt-d: Allocate DMAR fault interrupts locally (Jerry Snitselaar) [RHEL-55507 RHEL-28780] +- netfilter: nft_inner: validate mandatory meta and payload (Phil Sutter) [RHEL-47488 RHEL-47486] {CVE-2024-39504} +- netfilter: flowtable: initialise extack before use (CKI Backport Bot) [RHEL-58546 RHEL-58544] {CVE-2024-45018} +- ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48285 RHEL-48282] {CVE-2024-40972} +- ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48285 RHEL-48282] {CVE-2024-40972} +- ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48519 RHEL-48517] {CVE-2024-40998} +- ext4: turn quotas off if mount failed after enabling quotas (Carlos Maiolino) [RHEL-48519 RHEL-48517] {CVE-2024-40998} +- mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-59920 RHEL-32669] {CVE-2024-26826} +- xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50864 RHEL-50862] {CVE-2024-41014} +- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Davide Caratti) [RHEL-42771 RHEL-33410] +- af_unix: Fix garbage collector racing against connect() (Davide Caratti) [RHEL-42771 RHEL-33410] {CVE-2024-26923} +- af_unix: fix lockdep positive in sk_diag_dump_icons() (Davide Caratti) [RHEL-42771 RHEL-33410] +- xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50887 RHEL-50885] {CVE-2024-41013} +- ipv6: prevent possible NULL dereference in rt6_probe() (Hangbin Liu) [RHEL-48161 RHEL-45826] {CVE-2024-40960} +- mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-42795 RHEL-34969] {CVE-2024-26961} +- mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47945 RHEL-47943] {CVE-2024-40931} +- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47560 RHEL-47558] {CVE-2024-40904} +- nvme-multipath: fix io accounting on failover (John Meneghini) [RHEL-59646 RHEL-56635] +- nvme: fix multipath batched completion accounting (John Meneghini) [RHEL-59646 RHEL-56635] +- xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46481 RHEL-46479] {CVE-2024-39472} +- tcp: add sanity checks to rx zerocopy (Paolo Abeni) [RHEL-58403 RHEL-29496] {CVE-2024-26640} +- netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49373 RHEL-49371] {CVE-2024-41005} +- wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48321 RHEL-48319] {CVE-2024-40977} +- smb: client: fix hang in wait_for_response() for negproto (Jay Shin) [RHEL-61606 RHEL-57983] +- NFSv4.1/pnfs: fix NFS with TLS in pnfs (Benjamin Coddington) [RHEL-61467 RHEL-34576] +- ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [RHEL-61415 RHEL-60255] +- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Davide Caratti) [RHEL-48483 RHEL-44375] {CVE-2024-40995} +- net/sched: taprio: extend minimum interval restriction to entire cycle too (Davide Caratti) [RHEL-44377 RHEL-44375] {CVE-2024-36244} +- net/sched: taprio: make q->picos_per_byte available to fill_sched_entry() (Davide Caratti) [RHEL-44377 RHEL-44375] {CVE-2024-36244} + * Fri Oct 04 2024 Scott Weaver [5.14.0-427.40.1.el9_4] - gfs2: Fix NULL pointer dereference in gfs2_log_flush (CKI Backport Bot) [RHEL-51561 RHEL-51559] {CVE-2024-42079} - net: stmmac: Separate C22 and C45 transactions for xgmac (CKI Backport Bot) [RHEL-60274 RHEL-6297]