Project kernel-5.14.0-570.23.1.el9_6 content_copy

×

* Sat Jun 14 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.23.1.el9_6]
- ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-94248] {CVE-2025-37738}
- ibmvnic: Use kernel helpers for hex dumps (CKI Backport Bot) [RHEL-89019] {CVE-2025-22104}
- ice: Avoid setting default Rx VSI twice in switchdev setup (Petr Oros) [RHEL-88310] {CVE-2025-21883}
- ice: Fix deinitializing VF in error path (CKI Backport Bot) [RHEL-88310] {CVE-2025-21883}
- ice: add E830 HW VF mailbox message limit support (CKI Backport Bot) [RHEL-88310] {CVE-2025-21883}
- sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-88322] {CVE-2025-21919}
- redhat: configs: Enable CX231XX driver (Kate Hsuan) [RHEL-89730]
- media: usb: usbtv: Stop direct calls to queue num_buffers field (Kate Hsuan) [RHEL-89730]
- media: saa6752hs: Don't set format in sub-device state (Kate Hsuan) [RHEL-89730]
- media: i2c: Use accessors for pad config 'try_*' fields (Kate Hsuan) [RHEL-89730]
- ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-93629] {CVE-2025-23150}

* Sat Jun 07 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.22.1.el9_6]
- Bluetooth: L2CAP: Fix corrupted list in hci_chan_del (David Marlin) [RHEL-87890] {CVE-2025-21969}
- Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (David Marlin) [RHEL-87890] {CVE-2025-21969}
- Revert "SUNRPC: Revert e0a912e8ddba" (Benjamin Coddington) [RHEL-94811]
- mm/hugetlb: fix kernel NULL pointer dereference when migrating hugetlb folio (Jay Shin) [RHEL-92291]
- mm: fix crashes from deferred split racing folio migration (Jay Shin) [RHEL-92291] {CVE-2024-42234}
- mm: memcg: fix split queue list crash when large folio migration (Jay Shin) [RHEL-92291]
- proc: fix UAF in proc_get_inode() (Ian Kent) [RHEL-86808] {CVE-2025-21999}
- cifs: Fix integer overflow while processing acdirmax mount option (Paulo Alcantara) [RHEL-87941] {CVE-2025-21963}
- wifi: cfg80211: init wiphy_work before allocating rfkill fails (CKI Backport Bot) [RHEL-87931] {CVE-2025-21979}
- wifi: cfg80211: cancel wiphy_work before freeing wiphy (CKI Backport Bot) [RHEL-87931] {CVE-2025-21979}
- eth: bnxt: fix truesize for mb-xdp-pass case (CKI Backport Bot) [RHEL-88328] {CVE-2025-21961}
- vmxnet3: unregister xdp rxq info in the reset path (CKI Backport Bot) [RHEL-92471]
- md: fix mddev uaf while iterating all_mddevs list (CKI Backport Bot) [RHEL-89062] {CVE-2025-22126}
- nvme: print firmware bug note for non-unique identifiers (Bryan Gurney) [RHEL-91163]
- nvme-pci: add BOGUS_NID quirk for Samsung PM1733 (Bryan Gurney) [RHEL-91163]
- media: v4l2-mediabus: Drop V4L2_MBUS_CSI2_CONTINUOUS_CLOCK flag (Kate Hsuan) [RHEL-90323]
- media: v4l2-mediabus: Drop legacy V4L2_MBUS_CSI2_CHANNEL_* flags (Kate Hsuan) [RHEL-90323]
- media: v4l2-mediabus: Use structures to describe bus configuration (Kate Hsuan) [RHEL-90323]
- media: v4l2-fwnode: Move bus config structure to v4l2_mediabus.h (Kate Hsuan) [RHEL-90323]
- sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-86302]
- smb: client: fix UAF in decryption with multichannel (CKI Backport Bot) [RHEL-94460] {CVE-2025-37750}

* Tue Jun 03 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.21.1.el9_6]
- xsk: fix an integer overflow in xp_create_and_assign_umem() (CKI Backport Bot) [RHEL-87911] {CVE-2025-21997}
- vlan: enforce underlying device type (Guillaume Nault) [RHEL-87884] {CVE-2025-21920}
- net: fix geneve_opt length integer overflow (Guillaume Nault) [RHEL-87974] {CVE-2025-22055}
- net: gso: fix ownership in __udp_gso_segment (CKI Backport Bot) [RHEL-88333] {CVE-2025-21926}

* Sun Jun 01 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.20.1.el9_6]
- wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CKI Backport Bot) [RHEL-93253] {CVE-2025-37943}
- ext4: fix OOB read when checking dotdot dir (CKI Backport Bot) [RHEL-87985] {CVE-2025-37785}

* Sat May 24 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.19.1.el9_6]
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (David Arcari) [RHEL-87254] {CVE-2022-3424}
- ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89546] {CVE-2025-21764}
- ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89546] {CVE-2025-21765}
- net: add dev_net_rcu() helper (Xin Long) [RHEL-89546] {CVE-2025-21765}
- page_pool: Track DMA-mapped pages and unmap them when destroying the pool (Toke Høiland-Jørgensen) [RHEL-84151]
- page_pool: Move pp_magic check into helper functions (Toke Høiland-Jørgensen) [RHEL-84151]
- ext4: fallback to complex scan if aligned scan doesn't work (Jay Shin) [RHEL-85984]
- drm/mgag200: Added support for the new device G200eH5 (Jocelyn Falempe) [RHEL-88907]

* Tue May 20 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.18.1.el9_6]
- gitlab-ci: use rhel9.6 builder image (Michael Hofmann)
- cifs: Fix integer overflow while processing acregmax mount option (CKI Backport Bot) [RHEL-87921] {CVE-2025-21964}
- Bluetooth: btusb: Add one more ID 0x0489:0xe0f3 for Qualcomm WCN785x (David Marlin) [RHEL-85647]
- drm/i915/dp_mst: Don't require DSC hblank quirk for a non-DSC compatible mode (Jocelyn Falempe) [RHEL-85393]
- drm/i915/dp_mst: Handle error during DSC BW overhead/slice calculation (Jocelyn Falempe) [RHEL-85393]
- drm/i915/display: Use joined pipes in dsc helpers for slices, bpp (Jocelyn Falempe) [RHEL-85393]
- drm/i915/display: Use joined pipes in intel_mode_valid_max_plane_size (Jocelyn Falempe) [RHEL-85393]
- drm/i915/display: Use joined pipes in intel_dp_joiner_needs_dsc (Jocelyn Falempe) [RHEL-85393]
- drm/i915/display: Simplify intel_joiner_num_pipes and its usage (Jocelyn Falempe) [RHEL-85393]
- drm/i915/display: Check whether platform supports joiner (Jocelyn Falempe) [RHEL-85393]
- Revert "drm/i915/dp_mst: Handle error during DSC BW overhead/slice calculation" (Jocelyn Falempe) [RHEL-85393]
- Revert "drm/i915/dp_mst: Don't require DSC hblank quirk for a non-DSC compatible mode" (Jocelyn Falempe) [RHEL-85393]

* Mon May 12 2025 Patrick Talbert <ptalbert@redhat.com> [5.14.0-570.17.1.el9_6]
- vsock: Orphan socket after transport release (Jay Shin) [RHEL-89113] {CVE-2025-21756}
- vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89113] {CVE-2025-21756}
- bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89113] {CVE-2025-21756}
- net: ppp: Add bound checking for skb data on ppp_sync_txmung (Guillaume Nault) [RHEL-89646] {CVE-2025-37749}
- cgroup/cpuset: Add warnings to catch inconsistency in exclusive CPUs (Waiman Long) [RHEL-88640]
- selftest/cgroup: Add a remote partition transition test to test_cpuset_prs.sh (Waiman Long) [RHEL-88640]
- selftest/cgroup: Clean up and restructure test_cpuset_prs.sh (Waiman Long) [RHEL-88640]
- selftest/cgroup: Update test_cpuset_prs.sh to use | as effective CPUs and state separator (Waiman Long) [RHEL-88640]
- cgroup/cpuset: Code cleanup and comment update (Waiman Long) [RHEL-88640]
- cgroup/cpuset: Remove remote_partition_check() & make update_cpumasks_hier() handle remote partition (Waiman Long) [RHEL-88640]
- cgroup/cpuset: Fix error handling in remote_partition_disable() (Waiman Long) [RHEL-88640]
- cgroup/cpuset: Fix incorrect isolated_cpus update in update_parent_effective_cpumask() (Waiman Long) [RHEL-88640]
- cgroup/cpuset: Fix race between newly created partition and dying one (Waiman Long) [RHEL-88640]
- cgroup/cpuset: Prevent leakage of isolated CPUs into sched domains (Waiman Long) [RHEL-88640]
- cgroup/cpuset: Enforce at most one rebuild_sched_domains_locked() call per operation (Waiman Long) [RHEL-88640]
- cgroup/cpuset: Revert "Allow suppression of sched domain rebuild in update_cpumasks_hier()" (Waiman Long) [RHEL-88640]
- cgroup/cpuset: Fix spelling errors in file kernel/cgroup/cpuset.c (Waiman Long) [RHEL-88640]
- selftest/cgroup: Make test_cpuset_prs.sh deal with pre-isolated CPUs (Waiman Long) [RHEL-88640]
- cgroup/cpuset: Account for boot time isolated CPUs (Waiman Long) [RHEL-88640]
- cgroup/cpuset: remove use_parent_ecpus of cpuset (Waiman Long) [RHEL-88640]
- cgroup/cpuset: remove fetch_xcpus (Waiman Long) [RHEL-88640]
- selftest/cgroup: Add new test cases to test_cpuset_prs.sh (Waiman Long) [RHEL-88640]
- cgroup/cpuset: remove child_ecpus_count (Waiman Long) [RHEL-88640]
- cpuset: use Union-Find to optimize the merging of cpumasks (Waiman Long) [RHEL-88640]
- Union-Find: add a new module in kernel library (Waiman Long) [RHEL-88640]
- dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (CKI Backport Bot) [RHEL-86899] {CVE-2025-21966}
- ixgbe: fix media type detection for E610 device (Corinna Vinschen) [RHEL-85809]
- ixgbevf: Add support for Intel(R) E610 device (Corinna Vinschen) [RHEL-85809]
- PCI: Add PCI_VDEVICE_SUB helper macro (Corinna Vinschen) [RHEL-85809]
- ixgbe: fix media cage present detection for E610 device (Corinna Vinschen) [RHEL-85809]
- ixgbe: Enable link management in E610 device (Corinna Vinschen) [RHEL-85809]
- ixgbe: Clean up the E610 link management related code (Corinna Vinschen) [RHEL-85809]
- ixgbe: Add ixgbe_x540 multiple header inclusion protection (Corinna Vinschen) [RHEL-85809]
- ixgbe: Add support for EEPROM dump in E610 device (Corinna Vinschen) [RHEL-85809]
- ixgbe: Add support for NVM handling in E610 device (Corinna Vinschen) [RHEL-85809]
- ixgbe: Add link management support for E610 device (Corinna Vinschen) [RHEL-85809]
- ixgbe: Add support for E610 device capabilities detection (Corinna Vinschen) [RHEL-85809]
- ixgbe: Add support for E610 FW Admin Command Interface (Corinna Vinschen) [RHEL-85809]

* Tue Apr 29 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.16.1.el9_6]
- soc: qcom: socinfo: Avoid out of bounds read of serial number (Jared Kangas) [RHEL-88252] {CVE-2024-58007}
- soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Jared Kangas) [RHEL-88252]
- soc: qcom: Add check devm_kasprintf() returned value (Jared Kangas) [RHEL-88252]

* Fri Apr 25 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.15.1.el9_6]
- ice: ensure periodic output start time is in the future (Petr Oros) [RHEL-86021]
- ice: fix PHY Clock Recovery availability check (Petr Oros) [RHEL-86021]
- ice: Drop auxbus use for PTP to finalize ice_adapter move (Petr Oros) [RHEL-86021]
- ice: Use ice_adapter for PTP shared data instead of auxdev (Petr Oros) [RHEL-86021]
- ice: Initial support for E825C hardware in ice_adapter (Petr Oros) [RHEL-86021]
- ice: Add ice_get_ctrl_ptp() wrapper to simplify the code (Petr Oros) [RHEL-86021]
- ice: Introduce ice_get_phy_model() wrapper (Petr Oros) [RHEL-86021]
- ice: Enable 1PPS out from CGU for E825C products (Petr Oros) [RHEL-86021]
- ice: Read SDP section from NVM for pin definitions (Petr Oros) [RHEL-86021]
- ice: Disable shared pin on E810 on setfunc (Petr Oros) [RHEL-86021]
- ice: Cache perout/extts requests and check flags (Petr Oros) [RHEL-86021]
- ice: Align E810T GPIO to other products (Petr Oros) [RHEL-86021]
- ice: Add SDPs support for E825C (Petr Oros) [RHEL-86021]
- ice: Implement ice_ptp_pin_desc (Petr Oros) [RHEL-86021]

* Fri Apr 18 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.14.1.el9_6]
- smb: client: fix regression with guest option (Paulo Alcantara) [RHEL-83859]
- io_uring/sqpoll: zero sqd->thread on tctx errors (CKI Backport Bot) [RHEL-87264] {CVE-2025-21633}
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (Chris Leech) [RHEL-86915] {CVE-2025-21927}
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CKI Backport Bot) [RHEL-86840] {CVE-2025-21993}
- certs: Add ECDSA signature verification self-test (Herbert Xu) [RHEL-82247]
- certs: Move RSA self-test data to separate file (Herbert Xu) [RHEL-82247]
- certs: Break circular dependency when selftest is modular (Herbert Xu) [RHEL-82247]
- KEYS: Include linux/errno.h in linux/verification.h (Herbert Xu) [RHEL-82247]
- crypto: certs: fix FIPS selftest dependency (Herbert Xu) [RHEL-82247]
- New configs in certs/Kconfig (Fedora Kernel Team) [RHEL-82247]
- certs: Add support for using elliptic curve keys for signing modules (Herbert Xu) [RHEL-82247]
- certs: Trigger creation of RSA module signing key if it's not an RSA key (Herbert Xu) [RHEL-82247]
- tpm: Change to kvalloc() in eventlog/acpi.c (Štěpán Horáček) [RHEL-82147] {CVE-2024-58005}