Проект kernel-6.12.0-55.16.1.el10_0.1 content_copy

×

* Mon Jul 14 2025 Arkady L. Shane <tigro@msvsphere-os.ru> [6.12.0-55.16.1.el10_0.1]
- Added MSVSphere kmod certificate
- Fix kernel module signing key
- Fix SBAT

* Tue Jun 03 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-55.16.1.el10_0]
- net: fix geneve_opt length integer overflow (Guillaume Nault) [RHEL-87980] {CVE-2025-22055}
- vsock/virtio: discard packets if the transport changes (Jon Maloy) [RHEL-86874] {CVE-2025-21669}

* Fri May 30 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-55.15.1.el10_0]
- net: gso: fix ownership in __udp_gso_segment (CKI Backport Bot) [RHEL-88518] {CVE-2025-21926}
- xsk: fix an integer overflow in xp_create_and_assign_umem() (CKI Backport Bot) [RHEL-87915] {CVE-2025-21997}
- wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CKI Backport Bot) [RHEL-93269] {CVE-2025-37943}

* Mon May 26 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-55.14.1.el10_0]
- sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-88323] {CVE-2025-21919}
- drm/i915/dp_mst: Don't require DSC hblank quirk for a non-DSC compatible mode (Jocelyn Falempe) [RHEL-88536]
- drm/i915/dp_mst: Handle error during DSC BW overhead/slice calculation (Jocelyn Falempe) [RHEL-88536]
- drm/i915/display: Use joined pipes in dsc helpers for slices, bpp (Jocelyn Falempe) [RHEL-88536]
- drm/i915/display: Use joined pipes in intel_mode_valid_max_plane_size (Jocelyn Falempe) [RHEL-88536]
- drm/i915/display: Use joined pipes in intel_dp_joiner_needs_dsc (Jocelyn Falempe) [RHEL-88536]
- drm/i915/display: Simplify intel_joiner_num_pipes and its usage (Jocelyn Falempe) [RHEL-88536]
- drm/i915/display: Check whether platform supports joiner (Jocelyn Falempe) [RHEL-88536]
- Revert "drm/i915/dp_mst: Handle error during DSC BW overhead/slice calculation" (Jocelyn Falempe) [RHEL-88536]
- Revert "drm/i915/dp_mst: Don't require DSC hblank quirk for a non-DSC compatible mode" (Jocelyn Falempe) [RHEL-88536]
- drm/mgag200: Added support for the new device G200eH5 (Jocelyn Falempe) [RHEL-88909]
- cifs: Fix integer overflow while processing acregmax mount option (CKI Backport Bot) [RHEL-87925] {CVE-2025-21964}
- ext4: fix OOB read when checking dotdot dir (CKI Backport Bot) [RHEL-87991] {CVE-2025-37785}

* Sun May 18 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-55.13.1.el10_0]
- gitlab-ci: use rhel10.0 builder image (Michael Hofmann)
- vsock: Orphan socket after transport release (Jay Shin) [RHEL-89161] {CVE-2025-21756}
- vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89161] {CVE-2025-21756}
- bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89161] {CVE-2025-21756}
- idpf: call set_real_num_queues in idpf_open (CKI Backport Bot) [RHEL-79479]
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CKI Backport Bot) [RHEL-89591] {CVE-2024-53104}
- redhat: enable CONFIG_WERROR=y (Jan Stancek) [RHEL-89564]
- redhat: don't enforce WERROR for 3rd-party OOT kmods (Jan Stancek) [RHEL-89564]
- redhat: make ENABLE_WERROR enable also KVM_WERROR (Jan Stancek) [RHEL-89564]
- fortify: Hide run-time copy size from value range tracking (Jan Stancek) [RHEL-89564]
- resolve_btfids: Fix compiler warnings (Jan Stancek) [RHEL-89564]
- ixgbe: fix media type detection for E610 device (Corinna Vinschen) [RHEL-85810]
- ixgbevf: Add support for Intel(R) E610 device (Corinna Vinschen) [RHEL-85810]
- PCI: Add PCI_VDEVICE_SUB helper macro (Corinna Vinschen) [RHEL-85810]
- ixgbe: fix media cage present detection for E610 device (Corinna Vinschen) [RHEL-85810]
- ixgbe: Enable link management in E610 device (Corinna Vinschen) [RHEL-85810]
- ixgbe: Clean up the E610 link management related code (Corinna Vinschen) [RHEL-85810]
- ixgbe: Add ixgbe_x540 multiple header inclusion protection (Corinna Vinschen) [RHEL-85810]
- ixgbe: Add support for EEPROM dump in E610 device (Corinna Vinschen) [RHEL-85810]
- ixgbe: Add support for NVM handling in E610 device (Corinna Vinschen) [RHEL-85810]
- ixgbe: Add link management support for E610 device (Corinna Vinschen) [RHEL-85810]
- ixgbe: Add support for E610 device capabilities detection (Corinna Vinschen) [RHEL-85810]
- ixgbe: Add support for E610 FW Admin Command Interface (Corinna Vinschen) [RHEL-85810]
- smb: client: don't retry IO on failed negprotos with soft mounts (Jay Shin) [RHEL-85525]

* Wed May 14 2025 MSVSphere Packaging Team <packager@msvsphere-os.ru> - [6.12.0-55.12.1.el10_0]
- Rebuilt for MSVSphere 10

* Mon May 12 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-55.12.1.el10_0]
- scsi: core: Fix command pass through retry regression (Ewan D. Milne) [RHEL-77121]
- dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (CKI Backport Bot) [RHEL-86903] {CVE-2025-21966}
- ice: stop storing XDP verdict within ice_rx_buf (Petr Oros) [RHEL-86860]
- ice: gather page_count()'s of each frag right before XDP prog call (Petr Oros) [RHEL-86860]
- ice: put Rx buffers after being done with current frame (Petr Oros) [RHEL-86860]
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CKI Backport Bot) [RHEL-86847] {CVE-2025-21993}

* Thu Apr 24 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-55.11.1.el10_0]
- smb: client: fix regression with guest option (Jay Shin) [RHEL-83861]
- pnfs/flexfiles: retry getting layout segment for reads (Benjamin Coddington) [RHEL-87770]
- nfs: fix incorrect error handling in LOCALIO (Benjamin Coddington) [RHEL-87770]
- nfs: probe for LOCALIO when v3 client reconnects to server (Benjamin Coddington) [RHEL-87770]
- nfs: probe for LOCALIO when v4 client reconnects to server (Benjamin Coddington) [RHEL-87770]
- nfs/localio: remove redundant code and simplify LOCALIO enablement (Benjamin Coddington) [RHEL-87770]
- nfs_common: add nfs_localio trace events (Benjamin Coddington) [RHEL-87770]
- nfs_common: track all open nfsd_files per LOCALIO nfs_client (Benjamin Coddington) [RHEL-87770]
- nfs_common: rename nfslocalio nfs_uuid_lock to nfs_uuids_lock (Benjamin Coddington) [RHEL-87770]
- nfsd: nfsd_file_acquire_local no longer returns GC'd nfsd_file (Benjamin Coddington) [RHEL-87770]
- nfsd: rename nfsd_serv_ prefixed methods and variables with nfsd_net_ (Benjamin Coddington) [RHEL-87770]
- nfsd: update percpu_ref to manage references on nfsd_net (Benjamin Coddington) [RHEL-87770]
- nfs: cache all open LOCALIO nfsd_file(s) in client (Benjamin Coddington) [RHEL-87770]
- nfs_common: move localio_lock to new lock member of nfs_uuid_t (Benjamin Coddington) [RHEL-87770]
- nfs_common: rename functions that invalidate LOCALIO nfs_clients (Benjamin Coddington) [RHEL-87770]
- nfsd: add nfsd_file_{get,put} to 'nfs_to' nfsd_localio_operations (Benjamin Coddington) [RHEL-87770]
- nfs/localio: add direct IO enablement with sync and async IO support (Benjamin Coddington) [RHEL-87770]
- ice: ensure periodic output start time is in the future (Petr Oros) [RHEL-86858]
- ice: fix PHY Clock Recovery availability check (Petr Oros) [RHEL-86858]
- ice: Drop auxbus use for PTP to finalize ice_adapter move (Petr Oros) [RHEL-86858]
- ice: Use ice_adapter for PTP shared data instead of auxdev (Petr Oros) [RHEL-86858]
- ice: Initial support for E825C hardware in ice_adapter (Petr Oros) [RHEL-86858]
- ice: Add ice_get_ctrl_ptp() wrapper to simplify the code (Petr Oros) [RHEL-86858]
- ice: Introduce ice_get_phy_model() wrapper (Petr Oros) [RHEL-86858]
- ice: Enable 1PPS out from CGU for E825C products (Petr Oros) [RHEL-86858]
- ice: Read SDP section from NVM for pin definitions (Petr Oros) [RHEL-86858]
- ice: Disable shared pin on E810 on setfunc (Petr Oros) [RHEL-86858]
- ice: Cache perout/extts requests and check flags (Petr Oros) [RHEL-86858]
- ice: Align E810T GPIO to other products (Petr Oros) [RHEL-86858]
- ice: Add SDPs support for E825C (Petr Oros) [RHEL-86858]
- ice: Implement ice_ptp_pin_desc (Petr Oros) [RHEL-86858]
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (Chris Leech) [RHEL-86922] {CVE-2025-21927}
- scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83216]
- smb: client: fix chmod(2) regression with ATTR_READONLY (Jan Stancek) [RHEL-82677]
- mm/hugetlb: fix hugepage allocation for interleaved memory nodes (CKI Backport Bot) [RHEL-85441]

* Thu Apr 17 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-55.10.1.el10_0]
- net: mana: use ethtool string helpers (Maxim Levitsky) [RHEL-85943]
- net: mana: cleanup mana struct after debugfs_remove() (Maxim Levitsky) [RHEL-85943]
- net: mana: Cleanup "mana" debugfs dir after cleanup of all children (Maxim Levitsky) [RHEL-85943]
- net: mana: Fix irq_contexts memory leak in mana_gd_setup_irqs (Maxim Levitsky) [RHEL-85943]
- net: mana: Fix memory leak in mana_gd_setup_irqs (Maxim Levitsky) [RHEL-85943]
- net :mana :Request a V2 response version for MANA_QUERY_GF_STAT (Maxim Levitsky) [RHEL-85943]
- net: mana: Enable debugfs files for MANA device (Maxim Levitsky) [RHEL-85943]
- net: mana: Add get_link and get_link_ksettings in ethtool (Maxim Levitsky) [RHEL-85943]
- net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024 (Maxim Levitsky) [RHEL-85943]
- redhat: drop Y issues from changelog (Jan Stancek)

* Tue Mar 25 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-55.9.1.el10_0]
- af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Davide Caratti) [RHEL-80306] {CVE-2024-57901}
- redhat: kabi: update stablelist checksums (Čestmír Kalina) [RHEL-80552]
- shrinker: include rh_kabi.h (Čestmír Kalina) [RHEL-80552]
- redhat: pad the folio_batch struct (Nico Pache) [RHEL-80552]
- redhat: pad the lruvec structure for the kabi (Nico Pache) [RHEL-80552]
- redhat: pad the zone structures for kabi (Nico Pache) [RHEL-80552]
- redhat: pad the wait_page_queue for the kabi (Nico Pache) [RHEL-80552]
- redhat: pad the lru_gen functions for kabi (Nico Pache) [RHEL-80552]
- redhat: pad the vmem_altmap struct for the kabi (Nico Pache) [RHEL-80552]
- redhat: pad the vm_fault structure (Nico Pache) [RHEL-80552]
- redhat: pad the tlbflush_unmap_batch struct for the KABI (Nico Pache) [RHEL-80552]
- redhat: pad the swap_cluster_info structure for KABI (Nico Pache) [RHEL-80552]
- redhat: pad the shrinker struct for KABI (Nico Pache) [RHEL-80552]
- redhat: pad the shrink_control structure for kabi (Nico Pache) [RHEL-80552]
- redhat: pad the readahead_control structure for kabi (Nico Pache) [RHEL-80552]
- redhat: pad the pglist_data structure for kabi (Nico Pache) [RHEL-80552]
- redhat: pad the percpu structures (Nico Pache) [RHEL-80552]
- redhat: pad the page_frag_cache for the kabi (Nico Pache) [RHEL-80552]
- redhat: pad the ns_common structure for kabi (Nico Pache) [RHEL-80552]
- redhat: pad mmu_notifier functions for kabi (Nico Pache) [RHEL-80552]
- redhat: pad the mm_struct for kabi (Nico Pache) [RHEL-80552]
- redhat: pad mempool_s structure for kabi (Nico Pache) [RHEL-80552]
- redhat: pad mempolicy struct for kabi (Nico Pache) [RHEL-80552]
- redhat: pad the memory_failure_stats for kabi (Nico Pache) [RHEL-80552]
- redhat: pad the kmem_cache_args struct (Nico Pache) [RHEL-80552]
- redhat: pad the kmem_cache structure (Nico Pache) [RHEL-80552]
- redhat: pad ip_conntrack_stat for kabi (Nico Pache) [RHEL-80552]
- redhat: pad the free_area struct (Nico Pache) [RHEL-80552]
- redhat: pad follow_pfnmap_args for kabi (Nico Pache) [RHEL-80552]
- redhat: pad anon_vma for kabi (Nico Pache) [RHEL-80552]
- redhat: pad access_coordinate for kabi (Nico Pache) [RHEL-80552]
- redhat: pad the deferred_split queue for the kabi checker (Nico Pache) [RHEL-80552]
- redhat: hide capture_control from kabi checker (Nico Pache) [RHEL-80552]
- mm/memcg: Exclude mem_cgroup/obj_cgroup pointer from kABI signature computation (Waiman Long) [RHEL-80552]
- net: stmmac: dwmac-tegra: Read iommu stream id from device tree (Izabela Bakollari) [RHEL-75653] {CVE-2025-21663}
- Revert "smb: client: fix chmod(2) regression with ATTR_READONLY" (Jan Stancek)