| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: kernel-debug-modules-extra | Distribution: CentOS |
| Version: 5.14.0 | Vendor: CentOS |
| Release: 753.el9 | Build date: Mon Sep 28 11:40:57 2026 |
| Group: Unspecified | Build host: ppc64le-04.stream.rdu2.redhat.com |
| Size: 425515 | Source RPM: kernel-5.14.0-753.el9.src.rpm |
| Packager: builder@centos.org | |
| Url: https://www.kernel.org/ | |
| Summary: Extra kernel modules to match the kernel | |
This package provides less commonly used kernel modules for the kernel package.
((GPL-2.0-only WITH Linux-syscall-note) OR BSD-2-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR CDDL-1.0) AND ((GPL-2.0-only WITH Linux-syscall-note) OR Linux-OpenIB) AND ((GPL-2.0-only WITH Linux-syscall-note) OR MIT) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR MIT) AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSD-3-Clause-Clear AND GFDL-1.1-no-invariants-or-later AND GPL-1.0-or-later AND (GPL-1.0-or-later OR BSD-3-Clause) AND (GPL-1.0-or-later WITH Linux-syscall-note) AND GPL-2.0-only AND (GPL-2.0-only OR Apache-2.0) AND (GPL-2.0-only OR BSD-2-Clause) AND (GPL-2.0-only OR BSD-3-Clause) AND (GPL-2.0-only OR CDDL-1.0) AND (GPL-2.0-only OR GFDL-1.1-no-invariants-or-later) AND (GPL-2.0-only OR GFDL-1.2-no-invariants-only) AND (GPL-2.0-only WITH Linux-syscall-note) AND GPL-2.0-or-later AND (GPL-2.0-or-later OR BSD-2-Clause) AND (GPL-2.0-or-later OR BSD-3-Clause) AND (GPL-2.0-or-later OR CC-BY-4.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH Linux-syscall-note) AND ISC AND LGPL-2.0-or-later AND (LGPL-2.0-or-later OR BSD-2-Clause) AND (LGPL-2.0-or-later WITH Linux-syscall-note) AND LGPL-2.1-only AND (LGPL-2.1-only OR BSD-2-Clause) AND (LGPL-2.1-only WITH Linux-syscall-note) AND LGPL-2.1-or-later AND (LGPL-2.1-or-later WITH Linux-syscall-note) AND (Linux-OpenIB OR GPL-2.0-only) AND (Linux-OpenIB OR GPL-2.0-only OR BSD-2-Clause) AND Linux-man-pages-copyleft AND MIT AND (MIT OR GPL-2.0-only) AND (MIT OR GPL-2.0-or-later) AND (MIT OR LGPL-2.1-only) AND (MPL-1.1 OR GPL-2.0-only) AND (X11 OR GPL-2.0-only) AND (X11 OR GPL-2.0-or-later) AND Zlib AND (copyleft-next-0.3.1 OR GPL-2.0-or-later)
* Mon Sep 28 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-753.el9]
- cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active (Dennis Chen) [RHEL-241105]
- cpufreq/amd-pstate: Set min_limit_freq based on bios_min_perf (Dennis Chen) [RHEL-241105]
- cpufreq/amd-pstate: Fix EPP return type and handle errors during initialization (Dennis Chen) [RHEL-241105]
- cpufreq/amd-pstate: Toggle auto_sel in active mode on shared memory systems (Dennis Chen) [RHEL-241105]
- watchdog/hardlockup/perf: Fix perf_event memory leak (David Arcari) [RHEL-212723]
* Fri Sep 25 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-752.el9]
- keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225490] {CVE-2026-63823}
- net: hsr: fix potential OOB access in supervision frame handling (Toke Høiland-Jørgensen) [RHEL-227933] {CVE-2026-64000}
- packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244555]
- packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244555] {CVE-2026-74582}
- net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244555]
- Revert "wireguard: device: enable threaded NAPI" (Toke Høiland-Jørgensen) [RHEL-226531] {CVE-2026-52945}
- ipv6: sit: reload inner IPv6 header after GSO offloads (Toke Høiland-Jørgensen) [RHEL-225918] {CVE-2026-53228}
- ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Toke Høiland-Jørgensen) [RHEL-228944] {CVE-2026-63921}
- ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Toke Høiland-Jørgensen) [RHEL-231757] {CVE-2026-63917}
- pppoe: reload header pointer after dev_hard_header() (Toke Høiland-Jørgensen) [RHEL-237296] {CVE-2026-68121}
- ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (Toke Høiland-Jørgensen) [RHEL-237020] {CVE-2026-68398}
- ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Toke Høiland-Jørgensen) [RHEL-227996] {CVE-2026-53075}
- ipvlan: Make the addrs_lock be per port (Toke Høiland-Jørgensen) [RHEL-246120] {CVE-2026-23103}
- vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Toke Høiland-Jørgensen) [RHEL-231720] {CVE-2026-63993}
- vxlan: require CAP_NET_ADMIN in the device netns for changelink (Toke Høiland-Jørgensen) [RHEL-238881] {CVE-2026-68432}
- net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Toke Høiland-Jørgensen) [RHEL-247007] {CVE-2026-72052}
- net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Toke Høiland-Jørgensen) [RHEL-247051] {CVE-2026-63829}
- tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Toke Høiland-Jørgensen) [RHEL-230769] {CVE-2026-63992}
- macsec: fix replay protection at XPN lower-PN wrap (Toke Høiland-Jørgensen) [RHEL-226671] {CVE-2026-63925}
- xfrm: fix stale skb->prev after async crypto steals a GSO segment (Toke Høiland-Jørgensen) [RHEL-236115] {CVE-2026-68426}
- xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Toke Høiland-Jørgensen) [RHEL-236115] {CVE-2026-68426}
- xfrm: Fix dev use-after-free in xfrm async resumption (Toke Høiland-Jørgensen) [RHEL-232964] {CVE-2026-72463}
- xfrm: hold dev ref until after transport_finish NF_HOOK (Toke Høiland-Jørgensen) [RHEL-232964] {CVE-2026-31663}
- xfrm: hold device only for the asynchronous decryption (Toke Høiland-Jørgensen) [RHEL-232964]
- xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Toke Høiland-Jørgensen) [RHEL-228012] {CVE-2026-53239}
- xfrm: input: hold netns during deferred transport reinjection (Toke Høiland-Jørgensen) [RHEL-227498] {CVE-2026-63919}
- xfrm: route MIGRATE notifications to caller's netns (Toke Høiland-Jørgensen) [RHEL-225774] {CVE-2026-63914}
- xfrm: espintcp: do not reuse an in-progress partial send (Toke Høiland-Jørgensen) [RHEL-222949] {CVE-2026-52935}
- net/handshake: Drain pending requests at net namespace exit (Toke Høiland-Jørgensen) [RHEL-232137] {CVE-2026-63978}
- net/handshake: Verify file-reference balance in submit paths (Toke Høiland-Jørgensen) [RHEL-230362]
- net/handshake: Close the submit-side sock_hold race (Toke Høiland-Jørgensen) [RHEL-230362]
- net/handshake: hand off the pinned file reference to accept_doit (Toke Høiland-Jørgensen) [RHEL-230362] {CVE-2026-63979}
- net/handshake: Take a long-lived file reference at submit (Toke Høiland-Jørgensen) [RHEL-234164] {CVE-2026-64523}
- net/handshake: Pass negative errno through handshake_complete() (Toke Høiland-Jørgensen) [RHEL-230362]
- nvme-tcp: store negative errno in queue->tls_err (Toke Høiland-Jørgensen) [RHEL-230362]
- net/handshake: Use spin_lock_bh for hn_lock (Toke Høiland-Jørgensen) [RHEL-230362] {CVE-2026-63980}
- net/handshake: Fix null-ptr-deref in handshake_complete() (Toke Høiland-Jørgensen) [RHEL-230362]
- remove pointless includes of <linux/fdtable.h> (Toke Høiland-Jørgensen) [RHEL-230362]
- tools: ynl: add scope qualifier for definitions (Toke Høiland-Jørgensen) [RHEL-230362]
- redhat: kernel.spec: allow overriding CROSS_COMPILE (Scott Weaver)
- Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-255363]
- random: Drop the extrng module reference when import_single_range() fails (Vladislav Dronov) [2524262 RHEL-255773]
- ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225945] {CVE-2026-45942}
* Thu Sep 24 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-751.el9]
- crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Ricardo Robaina) [RHEL-264236] {CVE-2025-39964}
- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (Ricardo Robaina) [RHEL-264236] {CVE-2025-39964}
- xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264357] {CVE-2026-80844}
- scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262599] {CVE-2026-89846}
- drm/xe: gate observation streams with perf_allow_cpu() (Anubhav Shelat) [RHEL-212123]
- perf/core: out-of-line and export perf_allow_cpu/tracepoint() (Anubhav Shelat) [RHEL-212123]
- proc: protect ptrace_may_access() with exec_update_lock (FD links) (CKI Backport Bot) [RHEL-259916] {CVE-2026-64375}
- ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243029] {CVE-2026-68200}
- ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236083] {CVE-2026-68201}
- mfd: intel-lpss: Add Intel Nova Lake-H PCI IDs (David Arcari) [RHEL-154490]
- xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264328] {CVE-2026-80844}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263354] {CVE-2026-89480}
- cleanup: Adjust scoped_guard() macros to avoid potential warning (Ivan Vecera) [RHEL-260239]
- cleanup: Remove address space of returned pointer (Ivan Vecera) [RHEL-260239]
- mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-257167]
- crypto/hkdf: Skip tests with keys too short in FIPS mode (Vladislav Dronov) [RHEL-131901]
- smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-248303]
- smb/client: return EOPNOTSUPP for unsupported O_TMPFILE (Jorge San Emeterio Villalain) [RHEL-248303]
- ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-253653] {CVE-2026-68200}
- ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-253641] {CVE-2026-68201}
* Tue Sep 22 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-750.el9]
- mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231026] {CVE-2026-63831}
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230282] {CVE-2026-63802}
- block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232368] {CVE-2026-64053}
- io_uring/poll: fix signed comparison in io_poll_get_ownership() (Jeff Moyer) [RHEL-227112] {CVE-2026-52933}
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244963] {CVE-2026-72130}
- net: aquantia: Add missing descriptor cache invalidation on ATL2 (Michal Schmidt) [RHEL-172177]
- redhat/configs: enable CONFIG_AQTION on all archs (Michal Schmidt) [RHEL-172177]
- libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237557] {CVE-2026-68157}
- libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237891] {CVE-2026-68155}
- libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237165] {CVE-2026-68159}
- libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237165] {CVE-2026-68159}
- nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234149] {CVE-2026-64319}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230497] {CVE-2026-68480}
- x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230497]
- scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands (Maurizio Lombardi) [RHEL-184670]
- arm_mpam: Disable driver unbind to avoid UAF (Gavin Shan) [RHEL-255460]
- arm_mpam: Fix a NULL pointer dereference on unbinding after an error interrupt (Gavin Shan) [RHEL-255460]
- arm_mpam: Apply T241-MPAM-6 to 63-bit counters (Gavin Shan) [RHEL-242414 RHEL-255460]
- arm64: mpam: Add memory bandwidth usage (MBWU) documentation (Gavin Shan) [RHEL-242417 RHEL-255460]
- arm_mpam: resctrl: Add resctrl_arch_cntr_read() & resctrl_arch_reset_cntr() (Gavin Shan) [RHEL-242417 RHEL-255460]
- arm_mpam: resctrl: Add resctrl_arch_config_cntr() for ABMC use (Gavin Shan) [RHEL-242417 RHEL-255460]
- arm_mpam: resctrl: Pre-allocate assignable monitors (Gavin Shan) [RHEL-242417 RHEL-255460]
- arm_mpam: resctrl: Pick classes for use as MBM counters (Gavin Shan) [RHEL-242417 RHEL-255460]
- arm_mpam: guard MBWU state before adding it to garbage (Gavin Shan) [RHEL-255460]
- arm_mpam: Fix MPAMCFG_MBW_PBM register setting (Gavin Shan) [RHEL-255460]
- arm_mpam: Fix software reset values of MPAMCFG_PRI (Gavin Shan) [RHEL-255460]
- arm_mpam: Update architecture version check for MPAM MSC (Gavin Shan) [RHEL-255460]
- arm64: cpufeature: Add support for the MPAM v0.1 architecture version (Gavin Shan) [RHEL-255460]
- arm_mpam: Check whether the config array is allocated before destroying it (Gavin Shan) [RHEL-255460]
- arm_mpam: Fix false positive assert failure during mpam_disable() (Gavin Shan) [RHEL-255460]
- arm_mpam: Improve check for whether or not NRDY is hardware managed (Gavin Shan) [RHEL-255460]
- arm_mpam: Pretend that NRDY is always hardware managed (Gavin Shan) [RHEL-255460]
- arm_mpam: Fix monitor instance selection when checking for hardware NRDY (Gavin Shan) [RHEL-255460]
- fs/resctrl: Document tasks file behaviour for task id 0 and idle tasks (Gavin Shan) [RHEL-242417 RHEL-255460]
- fs/resctrl: Document that automatic counter assignment is best effort (Gavin Shan) [RHEL-242417 RHEL-255460]
- fs/resctrl: Continue counter allocation after failure (Gavin Shan) [RHEL-242417 RHEL-255460]
- fs/resctrl: Add monitor property 'mbm_cntr_assign_fixed' (Gavin Shan) [RHEL-242417 RHEL-255460]
- fs/resctrl: Disallow the software controller when MBM counters are assignable (Gavin Shan) [RHEL-242417 RHEL-255460]
- x86,fs/resctrl: Create 'event_filter' files read only if they're not configurable (Gavin Shan) [RHEL-242417 RHEL-255460]
- fs/resctrl: Tidy up the error path in resctrl_mkdir_event_configs() (Gavin Shan) [RHEL-242417 RHEL-255460]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255856] {CVE-2026-80714}
- x86/unwind/orc: Support reliable unwinding through BPF stack frames (Veronika Molnarova) [RHEL-139986]
- bpf: Add bpf_has_frame_pointer() (Veronika Molnarova) [RHEL-139986]
- selftests/bpf: Remove usage of lsm/file_alloc_security in selftest (Veronika Molnarova) [RHEL-139986]
- bpf: Disable file_alloc_security hook (Veronika Molnarova) [RHEL-139986]
- selftests/bpf: Improve reliability of test_perf_branches_no_hw() (Veronika Molnarova) [RHEL-139986]
- selftests/bpf: skip test_perf_branches_hw() on unsupported platforms (Veronika Molnarova) [RHEL-139986]
- bpf: Fix invalid prog->stats access when update_effective_progs fails (Veronika Molnarova) [RHEL-139986]
- selftests/bpf: Fix failure paths in send_signal test (Veronika Molnarova) [RHEL-139986]
- bpf: Handle return value of ftrace_set_filter_ip in register_fentry (Veronika Molnarova) [RHEL-139986]
- selftests/bpf: Add test to verify freeing the special fields in pcpu maps (Veronika Molnarova) [RHEL-139986]
- bpf: Free special fields when update [lru_,]percpu_hash maps (Veronika Molnarova) [RHEL-139986]
- selftests/bpf: Test parsing of (multi-)split BTF (Veronika Molnarova) [RHEL-139986]
- selftests/bpf: Test multi-split BTF (Veronika Molnarova) [RHEL-139986]
- libbpf: Fix parsing of multi-split BTF (Veronika Molnarova) [RHEL-139986]
- selftests/bpf: Add test for conditional jumps on same scalar register (Veronika Molnarova) [RHEL-139986]
- bpf: Skip bounds adjustment for conditional jumps on same scalar register (Veronika Molnarova) [RHEL-139986]
- bpf: Fix stackmap overflow check in __bpf_get_stackid() (Veronika Molnarova) [RHEL-139986]
- bpf: Refactor stack map trace depth calculation into helper function (Veronika Molnarova) [RHEL-139986]
- selftests/bpf: Fix list_del() in arena list (Veronika Molnarova) [RHEL-139986]
- selftests/bpf: Fix selftest verif_scale_strobemeta failure with llvm22 (Veronika Molnarova) [RHEL-139986]
- selftests/bpf: Add more bpf_wq tests (Veronika Molnarova) [RHEL-139986]
- libbpf: Export bpf_object__prepare symbol (Veronika Molnarova) [RHEL-139986]
- selftests/bpf: Add tests for bpf_object__prepare (Veronika Molnarova) [RHEL-139986]
- libbpf: Split bpf object load into prepare/load (Veronika Molnarova) [RHEL-139986]
- libbpf: Introduce more granular state for bpf_object (Veronika Molnarova) [RHEL-139986]
- libbpf: Use map_is_created helper in map setters (Veronika Molnarova) [RHEL-139986]
- bpf: Fix handling maps with no BTF and non-constant offsets for the bpf_wq (Veronika Molnarova) [RHEL-139986]
- bpf: extract generic helper from process_timer_func() (Veronika Molnarova) [RHEL-139986]
- selftests/bpf: Add tests for async cb context (Veronika Molnarova) [RHEL-139986]
- bpf: Refactor storage_get_func_atomic to generic non_sleepable flag (Veronika Molnarova) [RHEL-139986]
- bpf: Fix sleepable context for async callbacks (Veronika Molnarova) [RHEL-139986]
- md/raid1: serialize overlap io for writemostly disk (Nigel Croxon) [RHEL-177345]
- md/raid1: fix the comparing region of interval tree (Nigel Croxon) [RHEL-177345]
* Fri Sep 18 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-749.el9]
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (CKI Backport Bot) [RHEL-232014] {CVE-2026-64255}
- net/mlx5: Use effective affinity mask for IRQ selection (Kamal Heib) [RHEL-185462]
- net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure (Kamal Heib) [RHEL-185462]
- net/mlx5: Reorder completion before putting command entry in cmd_work_handler (Kamal Heib) [RHEL-185462]
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-185462]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-185462]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-185462]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-185462]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-185462]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-185462]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-185462]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-185462]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-185462]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-185462]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-185462]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-185462]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-185462]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-185462]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-185462]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-185462]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-185462]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-185462]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-185462]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-185462]
- net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-185462]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-185462]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-185462]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-185462]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-185462]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-185462]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-185462]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-185462]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-185462]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-185462]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-185462]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-185462]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-185462]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-185462]
- Revert "net: phylink: provide mac_get_caps() method" (Izabela Bakollari) [RHEL-235461]
- Revert "net: stmmac: Move MAC caps init to phylink MAC caps getter" (Izabela Bakollari) [RHEL-235461]
- KVM: s390: ucontrol: Fix memslot handling (Thomas Huth) [RHEL-143730]
- KVM: s390: fix missing present bit for gmap puds (Thomas Huth) [RHEL-143730]
- s390/kvm: Use psw32_t instead of psw_compat_t (Thomas Huth) [RHEL-143730]
- s390/ptrace: Rename psw_t32 to psw32_t (Thomas Huth) [RHEL-143730]
- KVM: s390: Replace sprintf with snprintf for buffer safety (Thomas Huth) [RHEL-143730]
- KVM: s390: Rework guest entry logic (Thomas Huth) [RHEL-143730]
- KVM: s390: selftests: fix ucontrol memory region test (Thomas Huth) [RHEL-143730]
- KVM: s390: fake memslot for ucontrol VMs (Thomas Huth) [RHEL-143730]
- KVM: Add a dedicated API for setting KVM-internal memslots (Thomas Huth) [RHEL-143730]
- KVM: Open code kvm_set_memory_region() into its sole caller (ioctl() API) (Thomas Huth) [RHEL-143730]
- s390/cpufeature: Convert MACHINE_HAS_IDTE to cpu_has_idte() (Thomas Huth) [RHEL-143730]
- s390/cpufeature: Convert MACHINE_HAS_EDAT2 to cpu_has_edat2() (Thomas Huth) [RHEL-143730]
- s390/cpufeature: Convert MACHINE_HAS_EDAT1 to cpu_has_edat1() (Thomas Huth) [RHEL-143730]
- s390/cpufeature: Convert MACHINE_HAS_TOPOLOGY to cpu_has_topology() (Thomas Huth) [RHEL-143730]
- s390/cpufeature: Convert MACHINE_HAS_TLB_LC to cpu_has_tlb_lc() (Thomas Huth) [RHEL-143730]
- s390/cpufeature: Convert MACHINE_HAS_NX to cpu_has_nx() (Thomas Huth) [RHEL-143730]
- s390/cpufeature: Convert MACHINE_HAS_GS to cpu_has_gs() (Thomas Huth) [RHEL-143730]
- s390/cpufeature: Convert MACHINE_HAS_RDP to cpu_has_rdp() (Thomas Huth) [RHEL-143730]
- s390/cpufeature: Convert MACHINE_HAS_SEQ_INSN to cpu_has_seq_insn() (Thomas Huth) [RHEL-143730]
- s390: Keep inittext section writable (Thomas Huth) [RHEL-143730]
- s390/mm: Get rid of RELOC_HIDE() (Thomas Huth) [RHEL-143730]
- s390/mm/ptdump: Add support for relocated lowcore mapping (Thomas Huth) [RHEL-143730]
- s390/mm: Simplify noexec page protection handling (Thomas Huth) [RHEL-143730]
- s390/mm: Remove incorrect comment (Thomas Huth) [RHEL-143730]
- s390/mm: Remove unused PAGE_KERNEL_EXEC and friends (Thomas Huth) [RHEL-143730]
- s390/ftrace: unpoison ftrace_regs in kprobe_ftrace_handler() (Thomas Huth) [RHEL-143730]
- s390/ftrace: Avoid trampolines if possible (Thomas Huth) [RHEL-143730]
- KVM: s390: wrapper for KVM_BUG (Thomas Huth) [RHEL-143730]
- s390/kvm: Convert to use flag output macros (Thomas Huth) [RHEL-143730]
- s390/uv: Convert to use flag output macros (Thomas Huth) [RHEL-143730]
- s390/kvm: Mask extra bits from program interrupt code (Thomas Huth) [RHEL-143730]
- s390/kvm: Initialize uninitialized flags variable (Thomas Huth) [RHEL-143730]
- s390/mm/gmap: Remove gmap_{en,dis}able() (Thomas Huth) [RHEL-143730]
- s390/kvm: Stop using gmap_{en,dis}able() (Thomas Huth) [RHEL-143730]
- s390/asm: Helper macros for flag output operand handling (Thomas Huth) [RHEL-143730]
- s390/cmpxchg: Provide arch_try_cmpxchg() (Thomas Huth) [RHEL-143730]
- s390/mm/fault: Handle guest-related program interrupts in KVM (Thomas Huth) [RHEL-143730]
- s390/entry: Fix setting _CIF_MCCK_GUEST with lowcore relocation (Thomas Huth) [RHEL-143730]
- s390/mm: Remove duplicate get_lowcore() calls (Thomas Huth) [RHEL-143730]
- s390/entry: Remove __GMAP_ASCE and use _PIF_GUEST_FAULT again (Thomas Huth) [RHEL-143730]
- s390/entry: Make system_call() ready for lowcore relocation (Thomas Huth) [RHEL-143730]
- s390/entry: Make ret_from_fork() ready for lowcore relocation (Thomas Huth) [RHEL-143730]
- s390/entry: Make __switch_to() ready for lowcore relocation (Thomas Huth) [RHEL-143730]
- s390/entry: Make restart_int_handler() ready for lowcore relocation (Thomas Huth) [RHEL-143730]
- s390/entry: Make mchk_int_handler() ready for lowcore relocation (Thomas Huth) [RHEL-143730]
- s390/entry: Make int handlers ready for lowcore relocation (Thomas Huth) [RHEL-143730]
- s390/entry: Make pgm_check_handler() ready for lowcore relocation (Thomas Huth) [RHEL-143730]
- s390/entry: Add base register to CHECK_VMAP_STACK/CHECK_STACK macro (Thomas Huth) [RHEL-143730]
- s390/entry: Add base register to SIEEXIT macro (Thomas Huth) [RHEL-143730]
- s390/entry: Add base register to MBEAR macro (Thomas Huth) [RHEL-143730]
- s390/head64: Make startup code ready for lowcore relocation (Thomas Huth) [RHEL-143730]
- s390/entry: Make __sie64a() ready for lowcore relocation (Thomas Huth) [RHEL-143730]
- s390/entry: Move SIE indicator flag to thread info (Thomas Huth) [RHEL-143730]
- s390: add CPU field to struct thread_info (Thomas Huth) [RHEL-143730]
- s390/nmi: Simplify ptregs setup (Thomas Huth) [RHEL-143730]
- s390/alternatives: Remove unused empty header file (Thomas Huth) [RHEL-143730]
- s390: Add infrastructure to patch lowcore accesses (Thomas Huth) [RHEL-143730]
- s390/alternatives: Remove alternative facility list (Thomas Huth) [RHEL-143730]
- s390/nospec: Push down alternative handling (Thomas Huth) [RHEL-143730]
- s390/alternatives: Allow early alternative patching in decompressor (Thomas Huth) [RHEL-143730]
- s390/alternatives: Rework to allow for callbacks (Thomas Huth) [RHEL-143730]
- s390/uaccess: Make s390_kernel_write() usable for decompressor (Thomas Huth) [RHEL-143730]
- s390/alternatives: Move text sync functions (Thomas Huth) [RHEL-143730]
- s390/alternatives: Merge both alternative header files (Thomas Huth) [RHEL-143730]
- s390/alternatives: Use consistent naming (Thomas Huth) [RHEL-143730]
- s390/alternatives: Remove noaltinstr option (Thomas Huth) [RHEL-143730]
- s390: Move CIF flags to struct pcpu (Thomas Huth) [RHEL-143730]
- s390/smp: Switch pcpu_devices to percpu (Thomas Huth) [RHEL-143730]
- s390/sclp: Initialize sclp subsystem via arch_cpu_finalize_init() (Thomas Huth) [RHEL-143730]
- s390/smp: Switch to GENERIC_CPU_DEVICES (Thomas Huth) [RHEL-143730]
- s390/smp: Remove duplicate get_lowcore() calls (Thomas Huth) [RHEL-143730]
- s390/smp: Handle restart interrupt on ipl cpu (Thomas Huth) [RHEL-143730]
- s390/hugetlb: Convert PG_arch_1 code to work on folio->flags (Thomas Huth) [RHEL-143730]
- s390/uv: Convert uv_convert_owned_from_secure() to uv_convert_from_secure_(folio|pte)() (Thomas Huth) [RHEL-143730]
- s390/uv: Convert uv_destroy_owned_page() to uv_destroy_(folio|pte)() (Thomas Huth) [RHEL-143730]
- s390/uv: Update PG_arch_1 comment (Thomas Huth) [RHEL-143730]
- s390/uv: Convert PG_arch_1 users to only work on small folios (Thomas Huth) [RHEL-143730]
- s390/uv: Split large folios in gmap_make_secure() (Thomas Huth) [RHEL-143730]
- s390/mm: make virt_to_pfn() a static inline (Thomas Huth) [RHEL-143730]
- cifs: Pass a pointer to virt_to_page() in cifsglob (Thomas Huth) [RHEL-143730]
- selftests: kvm: s390: Add debug print functions (Thomas Huth) [RHEL-143730]
- selftests: Remove -D_GNU_SOURCE from tools/testing/selftests/kvm/Makefile (Thomas Huth) [RHEL-143730]
- Revert "KVM: s390x: selftests: Add shared zeropage test" (Thomas Huth) [RHEL-143730]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223407] {CVE-2026-64368}
- vhost: fix vhost_get_avail_idx for a non empty ring (Laurent Vivier) [RHEL-185670]
- vhost: move smp_rmb() into vhost_get_avail_idx() (Laurent Vivier) [RHEL-185670]
- rh_messages.h: Update driver and device lists (Benjamin Poirier) [RHEL-211663]
* Thu Sep 17 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-748.el9]
- scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (Maurizio Lombardi) [RHEL-225796] {CVE-2026-46149}
- dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244955] {CVE-2026-72098}
- dm_early_create: fix freeing used table on dm_resume failure (Benjamin Marzinski) [RHEL-244966] {CVE-2026-72102}
- ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240319] {CVE-2026-68128}
- octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242823] {CVE-2026-72045}
- octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231047] {CVE-2026-63923}
- ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227884] {CVE-2026-64113}
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Toke Høiland-Jørgensen) [RHEL-174241] {CVE-2026-43198}
- tcp: update sacked after tracepoint in __tcp_retransmit_skb (Ivan Vecera) [RHEL-248252]
- tcp: move tcp_skb_cb->sacked flags to enum (Ivan Vecera) [RHEL-248252]
* Wed Sep 16 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-747.el9]
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231556] {CVE-2026-63808}
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-252993] {CVE-2026-46189}
- scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254590] {CVE-2026-74556}
- scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-254168]
- Reapply "cpuidle: menu: Avoid discarding useful information" (Mark Langsdorf) [RHEL-188481]
- cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size (Aristeu Rozanski) [RHEL-140831]
- cxl/ras: Fix CPER handler device confusion (Aristeu Rozanski) [RHEL-140831]
- cxl/pci: Add trace logging for CXL PCIe Port RAS errors (Aristeu Rozanski) [RHEL-140831]
- acpi/ghes, cxl/pci: Process CXL CPER Protocol Errors (Aristeu Rozanski) [RHEL-140831]
- acpi/ghes, cper: Recognize and cache CXL Protocol errors (Aristeu Rozanski) [RHEL-140831]
- nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244938] {CVE-2026-72129}
- net: ena: PHC: Fix potential use-after-free in get_timestamp (Thilak KN) [RHEL-230632] {CVE-2026-52971}
- iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-249753]
- xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188230] {CVE-2026-53091}
- net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188230] {CVE-2026-53091}
- net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188230] {CVE-2026-53091}
- net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188230] {CVE-2026-53091}
- net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188230] {CVE-2026-53091}
- net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188230] {CVE-2026-53091}
- net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188230] {CVE-2026-53091}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236346] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240762] {CVE-2026-68166}
- ipv6: account for fraggap on the paged allocation path (Paolo Abeni) [RHEL-212890]
- ipv4: account for fraggap on the paged allocation path (Paolo Abeni) [RHEL-212890] {CVE-2026-53366}
- inet: ping: fix recent breakage (Paolo Abeni) [RHEL-212890]
- net: unify alloclen calculation for paged requests (Paolo Abeni) [RHEL-212890] {CVE-2026-53366}
- ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Paolo Abeni) [RHEL-225451] {CVE-2026-64114}
- net: guard timestamp cmsgs to real error queue skbs (Paolo Abeni) [RHEL-225855] {CVE-2026-53223}
- af_unix: Fix UAF read of tail->len in unix_stream_data_wait() (Paolo Abeni) [RHEL-225870] {CVE-2026-64109}
- ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (Paolo Abeni) [RHEL-227418] {CVE-2026-63987}
- ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Paolo Abeni) [RHEL-227274] {CVE-2026-64002}
- af_unix: Drop all SCM attributes for SOCKMAP. (Paolo Abeni) [RHEL-229263] {CVE-2026-53005}
- ethtool: cmis: require exact CDB reply length (Paolo Abeni) [RHEL-229680] {CVE-2026-63996}
- tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Paolo Abeni) [RHEL-231695] {CVE-2026-64024}
- net: shaper: rework the VALID marking (again) (Paolo Abeni) [RHEL-231703] {CVE-2026-64027}
- net: shaper: annotate the data races (Paolo Abeni) [RHEL-231703]
- net: shaper: fix trivial ordering issue in net_shaper_commit() (Paolo Abeni) [RHEL-231703]
- net: shaper: flip the polarity of the valid flag (Paolo Abeni) [RHEL-231703]
- net: shaper: protect late read accesses to the hierarchy (Paolo Abeni) [RHEL-231703]
- tcp: call sk_data_ready() after listener migration (Paolo Abeni) [RHEL-232245] {CVE-2026-46015}
- flow_dissector: do not dissect PPPoE PFC frames (Paolo Abeni) [RHEL-232636] {CVE-2026-46306}
- ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Paolo Abeni) [RHEL-233128] {CVE-2026-64572}
- bpf: Reject fragmented frames in devmap (Paolo Abeni) [RHEL-234195] {CVE-2026-64355}
- mptcp: pm: userspace: fix use-after-free in get_local_id (Paolo Abeni) [RHEL-236686] {CVE-2026-68169}
- net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237380] {CVE-2026-68143}
- smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-231162]
- smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-231162]
- smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-231162]
- smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-231162]
- smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-231162]
- smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-231162]
- smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-231162]
- smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-231162]
- smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-231162]
- smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-231162]
- smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-231162]
- smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-231162]
- smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-231162]
- smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-231162] {CVE-2026-31539}
- firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation (Jennifer Berringer) [RHEL-179032] {CVE-2026-68400}
- firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit() (Jennifer Berringer) [RHEL-179032] {CVE-2026-68401}
- firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() (Jennifer Berringer) [RHEL-179032] {CVE-2026-68444}
- firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits (Jennifer Berringer) [RHEL-183181]
- firmware: arm_ffa: Treat missing FF-A feature on a platform as a probe miss (Jennifer Berringer) [RHEL-179032]
- firmware: arm_ffa: Honor partition info descriptor size (Jennifer Berringer) [RHEL-179032]
- firmware: arm_ffa: Fix sched-recv callback partition lookup (Jennifer Berringer) [RHEL-179032]
- firmware: arm_ffa: Snapshot notifier callbacks under lock (Jennifer Berringer) [RHEL-179032] {CVE-2026-64080}
- firmware: arm_ffa: Align RxTx buffer size before mapping (Jennifer Berringer) [RHEL-179032]
- firmware: arm_ffa: Validate framework notification message layout (Jennifer Berringer) [RHEL-179032] {CVE-2026-64081}
- firmware: arm_ffa: Keep framework RX release under lock (Jennifer Berringer) [RHEL-179032]
- firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies (Jennifer Berringer) [RHEL-179032] {CVE-2026-64520}
- firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0 (Jennifer Berringer) [RHEL-179032]
- firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue (Jennifer Berringer) [RHEL-179032]
- firmware: arm_ffa: Avoid collapsing NPI work from different CPUs (Jennifer Berringer) [RHEL-179032]
- firmware: arm_ffa: Skip free_pages on RX buffer alloc failure (Jennifer Berringer) [RHEL-179032]
- firmware: arm_ffa: Check for NULL FF-A ID table while driver registration (Jennifer Berringer) [RHEL-179032] {CVE-2026-64166}
- firmware: arm_ffa: Use the correct buffer size during RXTX_MAP (Jennifer Berringer) [RHEL-179032]
- firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap() (Jennifer Berringer) [RHEL-179032]
- firmware: arm_ffa: Correct 32-bit response handling in NOTIFICATION_INFO_GET (Jennifer Berringer) [RHEL-179032]
- firmware: arm_ffa: Tie FF-A version checks to specific features (Jennifer Berringer) [RHEL-179032]
- firmware: arm_ffa: Unmap Rx/Tx buffers on init failure (Jennifer Berringer) [RHEL-179032]
- firmware: arm_ffa: Add support for IMPDEF value in the memory access descriptor (Jennifer Berringer) [RHEL-179032]
- tpm: tpm_crb_ffa: try to probe tpm_crb_ffa when it's built-in (Jennifer Berringer) [RHEL-179032]
- firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall (Jennifer Berringer) [RHEL-179032]
- tpm_ffa_crb: access tpm service over FF-A direct message request v2 (Jennifer Berringer) [RHEL-179032]
- firmware: arm_ffa: Helper to check if a partition can receive REQUEST2 messages (Jennifer Berringer) [RHEL-179032]
- tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-192962]
- tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-192962]
- tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-192962]
- tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-192962]
- tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-192962]
- ceph: allow idmapped mounts (Alex Markuze) [RHEL-182515]
- ceph: allow idmapped atomic_open inode op (Alex Markuze) [RHEL-182515]
- ceph: allow idmapped set_acl inode op (Alex Markuze) [RHEL-182515]
- ceph: allow idmapped permission inode op (Alex Markuze) [RHEL-182515]
- ceph: allow idmapped getattr inode op (Alex Markuze) [RHEL-182515]
- ceph: pass an idmapping to mknod/symlink/mkdir (Alex Markuze) [RHEL-182515]
- ceph: add enable_unsafe_idmap module parameter (Alex Markuze) [RHEL-182515]
- ceph: handle idmapped mounts in create_request_message() (Alex Markuze) [RHEL-182515]
- ceph: stash idmapping in mdsc request (Alex Markuze) [RHEL-182515]
- ceph: make num_fwd and num_retry to __u32 (Alex Markuze) [RHEL-182515]
- libceph: add doutc and *_client debug macros support (Alex Markuze) [RHEL-182515]
* Mon Sep 14 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-746.el9]
- rethook: Remove warning messages printed for finding return address of a frame. (CKI Backport Bot) [RHEL-255818]
- watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-250491]
* Thu Sep 10 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-745.el9]
- security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225680] {CVE-2026-64015}
- get rid of busy-waiting in shrink_dcache_tree() (Ian Kent) [RHEL-136084]
- dcache.c: more idiomatic "positives are not allowed" sanity checks (Ian Kent) [RHEL-136084]
- struct dentry: make ->d_u anonymous (Ian Kent) [RHEL-136084]
- for_each_alias(): helper macro for iterating through dentries of given inode (Ian Kent) [RHEL-136084]
- scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235909] {CVE-2025-68745}
- scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228727] {CVE-2026-63889}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231222] {CVE-2026-53189}
- rhashtable: clear stale iter->p on table restart (Luiz Capitulino) [RHEL-248445] {CVE-2026-64563}
- gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-250665]
- iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-250490]
* Wed Sep 09 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-744.el9]
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242685] {CVE-2026-72069}
- locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242685]
- mei: bus: access mei_device under device_lock on cleanup (Krzysztof Pawlinski) [RHEL-236360] {CVE-2026-68181}
- powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak (Mamatha Inamdar) [RHEL-238388]
- netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250557] {CVE-2026-74746}
- bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (Ines Qian) [RHEL-110290]
- selftests/bpf: Test widen_imprecise_scalars() with different stack depth (Ines Qian) [RHEL-110290]
- bpf: account for current allocated stack depth in widen_imprecise_scalars() (Ines Qian) [RHEL-110290]
- libbpf: Fix powerpc's stack register definition in bpf_tracing.h (Ines Qian) [RHEL-110290]
- bpf: Sync pending IRQ work before freeing ring buffer (Ines Qian) [RHEL-110290]
- selftests: arg_parsing: Ensure data is flushed to disk before reading. (Ines Qian) [RHEL-110290]
- selftests/bpf: make arg_parsing.c more robust to crashes (Ines Qian) [RHEL-110290]
- selftests/bpf: Add test for unpinning htab with internal timer struct (Ines Qian) [RHEL-110290]
- bpf: Avoid RCU context warning when unpinning htab with internal structs (Ines Qian) [RHEL-110290]
- selftests/bpf: Add tests for rejection of ALU ops with negative offsets (Ines Qian) [RHEL-110290]
- bpf: Reject negative offsets for ALU ops (Ines Qian) [RHEL-110290]
- selftests/bpf: Fix realloc size in bpf_get_addrs (Ines Qian) [RHEL-110290]
- selftests/bpf: Add test case for different expected_attach_type (Ines Qian) [RHEL-110290]
- bpf: Enforce expected_attach_type for tailcall compatibility (Ines Qian) [RHEL-110290]
- libbpf: Fix error when st-prefix_ops and ops from differ btf (Ines Qian) [RHEL-110290]
- selftests/bpf: Fix flaky bpf_cookie selftest (Ines Qian) [RHEL-110290]
- bpf: Mark kfuncs as __noclone (Ines Qian) [RHEL-110290]
- bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21 (Ines Qian) [RHEL-110290]
- bpf, arm64: Call bpf_jit_binary_pack_finalize() in bpf_jit_free() (Ines Qian) [RHEL-110290]
- selftests/bpf: move get_ksyms and get_addrs to trace_helpers.c (Ines Qian) [RHEL-110290]
- selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 (Ines Qian) [RHEL-110290]
- libbpf: Fix USDT SIB argument handling causing unrecognized register error (Ines Qian) [RHEL-110290]
- selftests/bpf: Fix typos and grammar in test sources (Ines Qian) [RHEL-110290]
- selftests/bpf: Add test for DEVMAP reuse (Ines Qian) [RHEL-110290]
- libbpf: Fix reuse of DEVMAP (Ines Qian) [RHEL-110290]
- bpf: Remove migrate_disable in kprobe_multi_link_prog_run (Ines Qian) [RHEL-110290]
- bpf: Don't use %pK through printk (Ines Qian) [RHEL-110290]
* Fri Sep 04 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-743.el9]
- powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-238393]
- powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-238391]
- hwmon: (k10temp) Add per-CCD temperature monitoring for Zen5 Turin (Dennis Chen) [RHEL-251478]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179957] {CVE-2026-46189}
* Wed Sep 02 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-742.el9]
- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246350] {CVE-2026-74581}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229620] {CVE-2026-63824}
- KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229620] {CVE-2026-63824}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227787] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229413] {CVE-2026-53392}
- nfsd: fix posix_acl leak on SETACL decode failure (Scott Mayhew) [RHEL-225523] {CVE-2026-53397}
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234058] {CVE-2026-64298}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228034] {CVE-2026-53391}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226326] {CVE-2026-63800}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240184] {CVE-2026-68145}
- iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240184] {CVE-2026-68145}
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213196] {CVE-2026-63887}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214433]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214433]
- xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172489] {CVE-2026-31787}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172511] {CVE-2026-31786}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230137] {CVE-2026-64490}
- ipv6: mcast: Fix use-after-free when processing MLD queries (Antoine Tenart) [RHEL-152681]
- ipv6: fix possible infinite loop in fib6_select_path() (Antoine Tenart) [RHEL-152681]
- ipv6: fix possible infinite loop in rt6_fill_node() (Antoine Tenart) [RHEL-152681]
- ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-152681]
- ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-152681]
- ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-152681]
- ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-152681]
- ipv6: route: Unregister netdevice notifier on BPF init failure (Antoine Tenart) [RHEL-152681]
- ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (Antoine Tenart) [RHEL-152681]
- ipv6: fix potential UAF caused by ip6_forward_proxy_check() (Antoine Tenart) [RHEL-152681]
- ipv6: Fix null-ptr-deref in fib6_mtu(). (Antoine Tenart) [RHEL-152681]
- ipv6: fix possible UAF in icmpv6_rcv() (Antoine Tenart) [RHEL-152681]
- ipv6: avoid overflows in ip6_datagram_send_ctl() (Antoine Tenart) [RHEL-152681]
- ipv6: fix data race in fib6_metric_set() using cmpxchg (Antoine Tenart) [RHEL-152681]
- net: ipv6: flowlabel: defer exclusive option free until RCU teardown (Antoine Tenart) [RHEL-152681]
- ipv6: prevent possible UaF in addrconf_permanent_addr() (Antoine Tenart) [RHEL-152681]
- ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-152681]
- net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (Antoine Tenart) [RHEL-152681]
- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (Antoine Tenart) [RHEL-152681]
- inet: annotate data-races around isk->inet_num (Antoine Tenart) [RHEL-152681]
- ipv6: fix a race in ip6_sock_set_v6only() (Antoine Tenart) [RHEL-152681]
- net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain (Antoine Tenart) [RHEL-152681]
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228882] {CVE-2026-63801}
- tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238040] {CVE-2026-68117}
- sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229476] {CVE-2026-63971}
- sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231576] {CVE-2026-52917}
- sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236160] {CVE-2026-68315}
- sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237403] {CVE-2026-68376}
- sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237090] {CVE-2026-68300}
- redhat: update self-test data (Jarod Wilson)
- gitlab-ci: disttag override and tree name for 9.9 (Jarod Wilson)
- redhat: set defaults for 9.9 stabilization/zstream (Jarod Wilson)
- redhat: update RHEL_MINOR version for start of RHEL-9.10 development (Julio Faracco)
- s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-248152]
- platform/x86/intel/pmc: initialize empty PMT read result (Dennis Chen) [RHEL-241103]
- platform/x86: ishtp_eclite: Fix ACPI device reference leak in probe error path (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: free ACPI discovery data on early errors (Dennis Chen) [RHEL-241103]
- Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) [partial] (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: Add NVL PCI IDs for SSRAM telemetry discovery (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc/ssram: Make PMT registration optional (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc/ssram: Add ACPI discovery scaffolding (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc/ssram: Switch to static array with per-index probe state (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc/ssram: Refactor DEVID/PWRMBASE extraction into helper (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc/ssram: Add PCI platform data (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc/ssram: Rename probe and PCI ID table for consistency (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: Add ACPI PWRM telemetry driver for Nova Lake S (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: Add PMC SSRAM Kconfig description (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmt: Unify header fetch and add ACPI source (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmt: Cache the telemetry discovery header (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmt: Pass discovery index instead of resource (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmt/telemetry: Move overlap check to post-decode hook (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmt/crashlog: Split init into pre-decode (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmt: Add pre/post decode hooks around header parsing (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: Restore BAR fallback for header walk (Dennis Chen) [RHEL-241103]
- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (Dennis Chen) [RHEL-241103]
- platform/x86/intel/tpmi: convert mutex in mem_write() to guard (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: rate-limit LTR scale-factor warning (Dennis Chen) [RHEL-241103]
- platform/x86/intel/tpmi: use cleanup helpers in mem_write() (Dennis Chen) [RHEL-241103]
- platform/x86: intel/smartconnect: Check ACPI_HANDLE() against NULL (Dennis Chen) [RHEL-241103]
- platform/x86: intel/rst: Check ACPI_COMPANION() against NULL (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe error recovery (Dennis Chen) [RHEL-241103]
- platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: allocate res with intel_vsec_dev (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: Add Nova Lake support to intel_pmc_core driver (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: Retrieve PMC info only for available PMCs (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: Add support for variable DMU offsets (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: Use PCI DID for PMC SSRAM device discovery (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: Enable Pkgc blocking residency counter (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: Enable PkgC LTR blocking counter (Dennis Chen) [RHEL-241103]
- platform/x86/intel/pmc: Use __free() in pmc_core_punit_pmt_init() (Dennis Chen) [RHEL-241103]
- platform/x86/intel/tpmi/plr: Prevent fault during unbind (Dennis Chen) [RHEL-241103]
- platform/x86: intel: Add notifiers support (Dennis Chen) [RHEL-241103]
- platform/x86: intel: Move debugfs register before creating devices (Dennis Chen) [RHEL-241103]
- platform/x86/intel-uncore-freq: Expose instance ID in the sysfs (Dennis Chen) [RHEL-241103]
- platform/x86/intel/tpmi: Use 32 bit aligned address for debugfs mem write (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: Plumb ACPI PMT discovery tables through vsec (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: Return real error codes from registration path (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: Switch exported helpers from pci_dev to device (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: Decouple add/link helpers from PCI (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: Make driver_data info const (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: Refactor base_addr handling (Dennis Chen) [RHEL-241103]
- platform/x86: intel/smartconnect: Convert ACPI driver to a platform one (Dennis Chen) [RHEL-241103]
- platform/x86: intel/rst: Convert ACPI driver to a platform one (Dennis Chen) [RHEL-241103]
- platform/x86/intel/vsec: correct kernel-doc comments (Dennis Chen) [RHEL-241103]
- platform/x86/intel/smartconnect: drop owner assignment (Dennis Chen) [RHEL-241103]
- Revert "platform/x86: intel: Add notifiers support" (Dennis Chen) [RHEL-241103]
- Revert "platform/x86/intel/tpmi/plr: Prevent fault during unbind" (Dennis Chen) [RHEL-241103]
- Revert "platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe error recovery" (Dennis Chen) [RHEL-241103]
- cpufreq/amd-pstate: drop stale @epp_cached kdoc (Dennis Chen) [RHEL-212670]
- cpufreq: Pass the policy to cpufreq_driver->adjust_perf() (Dennis Chen) [RHEL-212670]
- amd-pstate: Update cppc_req_cached in fast_switch case (Dennis Chen) [RHEL-212670]
- amd-pstate: Fix memory leak in amd_pstate_epp_cpu_init() (Dennis Chen) [RHEL-212670]
- mmc: sdhci-of-dwcmshc: Add hw_reset() support for BlueField-3 SoC (David Thompson) [RHEL-104072]
/etc/modprobe.d/atm-blacklist.conf /etc/modprobe.d/l2tp_eth-blacklist.conf /etc/modprobe.d/l2tp_ip-blacklist.conf /etc/modprobe.d/l2tp_ip6-blacklist.conf /etc/modprobe.d/l2tp_netlink-blacklist.conf /etc/modprobe.d/l2tp_ppp-blacklist.conf /etc/modprobe.d/sctp-blacklist.conf /etc/modprobe.d/sctp_diag-blacklist.conf /lib/modules/5.14.0-753.el9.ppc64le+debug/extra /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/drivers/net/can/slcan/slcan.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/drivers/net/can/usb/ems_usb.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/drivers/net/can/vcan.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/drivers/net/slip/slip.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/drivers/pci/pcie/aer_inject.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/fs/fuse/cuse.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/lib/test_lockup.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/net/atm/br2684.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/net/atm/clip.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/net/atm/lec.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/net/atm/pppoatm.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/net/ipv4/fou.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/net/ipv4/tcp_bic.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/net/ipv4/tcp_htcp.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/net/ipv4/tcp_illinois.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/net/ipv4/tcp_westwood.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/net/ipv6/fou6.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/net/l2tp/l2tp_core.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/net/l2tp/l2tp_debugfs.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/net/l2tp/l2tp_eth.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/net/l2tp/l2tp_ip.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/net/l2tp/l2tp_ip6.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/net/l2tp/l2tp_netlink.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/net/l2tp/l2tp_ppp.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/net/sctp/sctp.ko.xz /lib/modules/5.14.0-753.el9.ppc64le+debug/kernel/net/sctp/sctp_diag.ko.xz
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Sep 30 04:06:00 2026